<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="9706">
<package pkgid="10af09d3600137ae418c30bc9d8468d68eb1cd6ac4605c33ff4373caacba9582" name="AusweisApp" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="bp156.2.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1660824000">- New upstream release
  + Version 1.24.0
  * Technical overhaul of the "Smartphone as card reader" function.
    The use of an ID card app2 older than 1.22.1 is no longer possible
    in combination with 1.24.0.
  * Various optimizations with regards to accessibility.
  * Support for "IPv6 only" home networks.
  * AusweisApp2 is now provided as a 64-bit application on Windows.
  * Official support for Windows 11.
  * Support for Windows 7 and Windows 8.1 has been discontinued.
  * Support for macOS 10.13 and 10.14 has been discontinued.
  * Support for Android 5 and 6 and has been discontinued.
  * Added an integrated ID card simulator for testing.
  * An automatic mode for authentication for tests is now possible.
  * AusweisApp2 is now available as a container SDK or Docker image. This
    can be controlled using WebSocket or the new automatic authentication.
  * Command line parameters can now be passed in the iOS SDK.
  * Support for SHA224 and SECP224 has been discontinued.
  * The partially-embedded SDK on Android has been discontinued.
  * The SDK now uses API level v2.
  * Updated OpenSSL to version 3.0.5.
  * Updated Qt to version 6.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662379200">- New upstream release
  + Version 1.24.1
  * Support for the Russian and Ukrainian languages has been added.
  * Fixed some issues with regards to PersoSim.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662552000">- New upstream release
  + Version 1.24.2
  * Fixed crashes on Android.
  * Fixed a bug with changing the transport PIN on desktop systems.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667044800">- New upstream release
  + Version 1.24.3
  * Fixed crashes on Android.
  * Disabled (cloud) backup on Android and iOS.
  * Fixed the A11y display of the SaK pairing code on Android and iOS.
  * Blocked installation on unsupported versions of Windows 10.
  * Fixed compatibility with Qt 6.4.
  * Enabled the simulator in the Android and iOS SDK.
- Upgrade Qt build and runtime dependencies for Qt6
  + Add Qt6 packages to BuildRequires
  * qt6-concurrent-devel
  * qt6-core-devel
  * qt6-linguist-devel
  * qt6-network-devel
  * qt6-qml-devel
  * qt6-qmlworkerscript-devel
  * qt6-quick-devel
  * qt6-quickcontrols2-devel
  * qt6-shadertools-devel
  * qt6-statemachine-devel
  * qt6-svg-devel
  * qt6-websockets-devel
  + Drop all Qt5 packages from BuildRequires and Requires
- Run spec-cleaner</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667390400">- New upstream release
  + Version 1.24.4
  * Fixed potential crashes due to OpenSSL (denial of service).
  * Updated OpenSSL to version 3.0.7.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667995200">- Add BuildRequires, so it can also build for Leap &gt;= 15.4.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
</package>
<package pkgid="8593c3264ee11d835d768311dcd394de76862485eb620fa39a674f829866bd2e" name="AusweisApp" arch="ppc64le">
  <version epoch="0" ver="2.1.1" rel="bp156.2.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1660824000">- New upstream release
  + Version 1.24.0
  * Technical overhaul of the "Smartphone as card reader" function.
    The use of an ID card app2 older than 1.22.1 is no longer possible
    in combination with 1.24.0.
  * Various optimizations with regards to accessibility.
  * Support for "IPv6 only" home networks.
  * AusweisApp2 is now provided as a 64-bit application on Windows.
  * Official support for Windows 11.
  * Support for Windows 7 and Windows 8.1 has been discontinued.
  * Support for macOS 10.13 and 10.14 has been discontinued.
  * Support for Android 5 and 6 and has been discontinued.
  * Added an integrated ID card simulator for testing.
  * An automatic mode for authentication for tests is now possible.
  * AusweisApp2 is now available as a container SDK or Docker image. This
    can be controlled using WebSocket or the new automatic authentication.
  * Command line parameters can now be passed in the iOS SDK.
  * Support for SHA224 and SECP224 has been discontinued.
  * The partially-embedded SDK on Android has been discontinued.
  * The SDK now uses API level v2.
  * Updated OpenSSL to version 3.0.5.
  * Updated Qt to version 6.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662379200">- New upstream release
  + Version 1.24.1
  * Support for the Russian and Ukrainian languages has been added.
  * Fixed some issues with regards to PersoSim.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662552000">- New upstream release
  + Version 1.24.2
  * Fixed crashes on Android.
  * Fixed a bug with changing the transport PIN on desktop systems.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667044800">- New upstream release
  + Version 1.24.3
  * Fixed crashes on Android.
  * Disabled (cloud) backup on Android and iOS.
  * Fixed the A11y display of the SaK pairing code on Android and iOS.
  * Blocked installation on unsupported versions of Windows 10.
  * Fixed compatibility with Qt 6.4.
  * Enabled the simulator in the Android and iOS SDK.
- Upgrade Qt build and runtime dependencies for Qt6
  + Add Qt6 packages to BuildRequires
  * qt6-concurrent-devel
  * qt6-core-devel
  * qt6-linguist-devel
  * qt6-network-devel
  * qt6-qml-devel
  * qt6-qmlworkerscript-devel
  * qt6-quick-devel
  * qt6-quickcontrols2-devel
  * qt6-shadertools-devel
  * qt6-statemachine-devel
  * qt6-svg-devel
  * qt6-websockets-devel
  + Drop all Qt5 packages from BuildRequires and Requires
- Run spec-cleaner</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667390400">- New upstream release
  + Version 1.24.4
  * Fixed potential crashes due to OpenSSL (denial of service).
  * Updated OpenSSL to version 3.0.7.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667995200">- Add BuildRequires, so it can also build for Leap &gt;= 15.4.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
</package>
<package pkgid="da3d6ef245053955ce2a98d3b21e88e0bb9975ae1586ae216b042cf1b74e08c7" name="AusweisApp" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="bp156.2.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1660824000">- New upstream release
  + Version 1.24.0
  * Technical overhaul of the "Smartphone as card reader" function.
    The use of an ID card app2 older than 1.22.1 is no longer possible
    in combination with 1.24.0.
  * Various optimizations with regards to accessibility.
  * Support for "IPv6 only" home networks.
  * AusweisApp2 is now provided as a 64-bit application on Windows.
  * Official support for Windows 11.
  * Support for Windows 7 and Windows 8.1 has been discontinued.
  * Support for macOS 10.13 and 10.14 has been discontinued.
  * Support for Android 5 and 6 and has been discontinued.
  * Added an integrated ID card simulator for testing.
  * An automatic mode for authentication for tests is now possible.
  * AusweisApp2 is now available as a container SDK or Docker image. This
    can be controlled using WebSocket or the new automatic authentication.
  * Command line parameters can now be passed in the iOS SDK.
  * Support for SHA224 and SECP224 has been discontinued.
  * The partially-embedded SDK on Android has been discontinued.
  * The SDK now uses API level v2.
  * Updated OpenSSL to version 3.0.5.
  * Updated Qt to version 6.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662379200">- New upstream release
  + Version 1.24.1
  * Support for the Russian and Ukrainian languages has been added.
  * Fixed some issues with regards to PersoSim.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662552000">- New upstream release
  + Version 1.24.2
  * Fixed crashes on Android.
  * Fixed a bug with changing the transport PIN on desktop systems.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667044800">- New upstream release
  + Version 1.24.3
  * Fixed crashes on Android.
  * Disabled (cloud) backup on Android and iOS.
  * Fixed the A11y display of the SaK pairing code on Android and iOS.
  * Blocked installation on unsupported versions of Windows 10.
  * Fixed compatibility with Qt 6.4.
  * Enabled the simulator in the Android and iOS SDK.
- Upgrade Qt build and runtime dependencies for Qt6
  + Add Qt6 packages to BuildRequires
  * qt6-concurrent-devel
  * qt6-core-devel
  * qt6-linguist-devel
  * qt6-network-devel
  * qt6-qml-devel
  * qt6-qmlworkerscript-devel
  * qt6-quick-devel
  * qt6-quickcontrols2-devel
  * qt6-shadertools-devel
  * qt6-statemachine-devel
  * qt6-svg-devel
  * qt6-websockets-devel
  + Drop all Qt5 packages from BuildRequires and Requires
- Run spec-cleaner</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667390400">- New upstream release
  + Version 1.24.4
  * Fixed potential crashes due to OpenSSL (denial of service).
  * Updated OpenSSL to version 3.0.7.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667995200">- Add BuildRequires, so it can also build for Leap &gt;= 15.4.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
</package>
<package pkgid="fafb8cff28f81e16510bcafdc6ce3302635d745920c0d321ad6775204f6f5fe6" name="AusweisApp" arch="src">
  <version epoch="0" ver="2.1.1" rel="bp156.2.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1660824000">- New upstream release
  + Version 1.24.0
  * Technical overhaul of the "Smartphone as card reader" function.
    The use of an ID card app2 older than 1.22.1 is no longer possible
    in combination with 1.24.0.
  * Various optimizations with regards to accessibility.
  * Support for "IPv6 only" home networks.
  * AusweisApp2 is now provided as a 64-bit application on Windows.
  * Official support for Windows 11.
  * Support for Windows 7 and Windows 8.1 has been discontinued.
  * Support for macOS 10.13 and 10.14 has been discontinued.
  * Support for Android 5 and 6 and has been discontinued.
  * Added an integrated ID card simulator for testing.
  * An automatic mode for authentication for tests is now possible.
  * AusweisApp2 is now available as a container SDK or Docker image. This
    can be controlled using WebSocket or the new automatic authentication.
  * Command line parameters can now be passed in the iOS SDK.
  * Support for SHA224 and SECP224 has been discontinued.
  * The partially-embedded SDK on Android has been discontinued.
  * The SDK now uses API level v2.
  * Updated OpenSSL to version 3.0.5.
  * Updated Qt to version 6.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662379200">- New upstream release
  + Version 1.24.1
  * Support for the Russian and Ukrainian languages has been added.
  * Fixed some issues with regards to PersoSim.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662552000">- New upstream release
  + Version 1.24.2
  * Fixed crashes on Android.
  * Fixed a bug with changing the transport PIN on desktop systems.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667044800">- New upstream release
  + Version 1.24.3
  * Fixed crashes on Android.
  * Disabled (cloud) backup on Android and iOS.
  * Fixed the A11y display of the SaK pairing code on Android and iOS.
  * Blocked installation on unsupported versions of Windows 10.
  * Fixed compatibility with Qt 6.4.
  * Enabled the simulator in the Android and iOS SDK.
- Upgrade Qt build and runtime dependencies for Qt6
  + Add Qt6 packages to BuildRequires
  * qt6-concurrent-devel
  * qt6-core-devel
  * qt6-linguist-devel
  * qt6-network-devel
  * qt6-qml-devel
  * qt6-qmlworkerscript-devel
  * qt6-quick-devel
  * qt6-quickcontrols2-devel
  * qt6-shadertools-devel
  * qt6-statemachine-devel
  * qt6-svg-devel
  * qt6-websockets-devel
  + Drop all Qt5 packages from BuildRequires and Requires
- Run spec-cleaner</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667390400">- New upstream release
  + Version 1.24.4
  * Fixed potential crashes due to OpenSSL (denial of service).
  * Updated OpenSSL to version 3.0.7.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667995200">- Add BuildRequires, so it can also build for Leap &gt;= 15.4.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
</package>
<package pkgid="81c1a4b1bb8cae5b28167b72f90c247cb3f0a248e4c60aa5cef24af833929053" name="AusweisApp" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="bp156.2.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1660824000">- New upstream release
  + Version 1.24.0
  * Technical overhaul of the "Smartphone as card reader" function.
    The use of an ID card app2 older than 1.22.1 is no longer possible
    in combination with 1.24.0.
  * Various optimizations with regards to accessibility.
  * Support for "IPv6 only" home networks.
  * AusweisApp2 is now provided as a 64-bit application on Windows.
  * Official support for Windows 11.
  * Support for Windows 7 and Windows 8.1 has been discontinued.
  * Support for macOS 10.13 and 10.14 has been discontinued.
  * Support for Android 5 and 6 and has been discontinued.
  * Added an integrated ID card simulator for testing.
  * An automatic mode for authentication for tests is now possible.
  * AusweisApp2 is now available as a container SDK or Docker image. This
    can be controlled using WebSocket or the new automatic authentication.
  * Command line parameters can now be passed in the iOS SDK.
  * Support for SHA224 and SECP224 has been discontinued.
  * The partially-embedded SDK on Android has been discontinued.
  * The SDK now uses API level v2.
  * Updated OpenSSL to version 3.0.5.
  * Updated Qt to version 6.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662379200">- New upstream release
  + Version 1.24.1
  * Support for the Russian and Ukrainian languages has been added.
  * Fixed some issues with regards to PersoSim.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662552000">- New upstream release
  + Version 1.24.2
  * Fixed crashes on Android.
  * Fixed a bug with changing the transport PIN on desktop systems.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667044800">- New upstream release
  + Version 1.24.3
  * Fixed crashes on Android.
  * Disabled (cloud) backup on Android and iOS.
  * Fixed the A11y display of the SaK pairing code on Android and iOS.
  * Blocked installation on unsupported versions of Windows 10.
  * Fixed compatibility with Qt 6.4.
  * Enabled the simulator in the Android and iOS SDK.
- Upgrade Qt build and runtime dependencies for Qt6
  + Add Qt6 packages to BuildRequires
  * qt6-concurrent-devel
  * qt6-core-devel
  * qt6-linguist-devel
  * qt6-network-devel
  * qt6-qml-devel
  * qt6-qmlworkerscript-devel
  * qt6-quick-devel
  * qt6-quickcontrols2-devel
  * qt6-shadertools-devel
  * qt6-statemachine-devel
  * qt6-svg-devel
  * qt6-websockets-devel
  + Drop all Qt5 packages from BuildRequires and Requires
- Run spec-cleaner</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1667390400">- New upstream release
  + Version 1.24.4
  * Fixed potential crashes due to OpenSSL (denial of service).
  * Updated OpenSSL to version 3.0.7.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667995200">- Add BuildRequires, so it can also build for Leap &gt;= 15.4.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
</package>
<package pkgid="5c69e542e68cd2f09ef91d3a94f14cb816e5ba31208868465898482f5a099dba" name="AusweisApp" arch="aarch64">
  <version epoch="0" ver="2.2.2" rel="bp156.5.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720180800">- New upstream release
  + Version 2.2.0
  - Visual adjustments and optimization of the graphical user interface.
  - Display of the old and new device name when using "Smartphone as card
    reader" if the name of a device has changed.
  - An information page has been added at the end of an authentication before
    forwarding to the service provider.
  - Increased the time allowed to respond to card commands on Android to support
    badges that have switched to a safe slow mode after too many incorrect CAN entries.
  - Improved accessibility options.
  - Support for Android 8 has been discontinued.
  - The "Smartphone as card reader" function now requires at least version 2.1.0.
  - Support for ChromeOS has been added.
  - Support for key lengths smaller than 3000 bits has been discontinued.
  - Changelog added to the documentation for the SDK.
  - Functional extension of the SDK (see changelog).
  - Update of Qt to version 6.7.2.
  - Update of OpenSSL to version 3.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720785600">- Cherry-pick upstream patch to fix QML error with Qt 6.6
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Add missing libQt6Svg6 runtime dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726056000">- New upstream release
  + Version 2.2.1
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard usability.
  - Prevention of the display of external content in
    the graphical user interface.
  - Support for smartphones with Android 15 where
    optimized memory management has been activated.
  - Support for 16 KB page sizes on Android.
  - Stabilization of the iOS SDK during fast restarts.
  - Correction of the behavior when using Qt 6.6.3.
  - Avoidance of a log file within the container in the container SDK.
  - Update of the Android NDK to r27b (27.1.12297006).
  - Update of the Android SDK Platform to Android 15 (API level 35).
  - Update of OpenSSL to version 3.3.2.
- Drop patches for issues fixed upstream
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1729684800">- New upstream release
  + Version 2.2.2
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard operability.
  - Addition of the Android ABIs armeabi-v7a and x86_64 in addition to
    arm64-v8a in the SDK.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1730462400">- Add patch from Fedora to enforce use of legacy OpenSSL API
  + 0001-use-legacy-openssl-api.patch (bsc#1231686)</changelog>
</package>
<package pkgid="cf56dc3bb70594cdf80f8077fb83ab84908bf8107290a06c68c4588ffc5a2f05" name="AusweisApp" arch="ppc64le">
  <version epoch="0" ver="2.2.2" rel="bp156.5.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720180800">- New upstream release
  + Version 2.2.0
  - Visual adjustments and optimization of the graphical user interface.
  - Display of the old and new device name when using "Smartphone as card
    reader" if the name of a device has changed.
  - An information page has been added at the end of an authentication before
    forwarding to the service provider.
  - Increased the time allowed to respond to card commands on Android to support
    badges that have switched to a safe slow mode after too many incorrect CAN entries.
  - Improved accessibility options.
  - Support for Android 8 has been discontinued.
  - The "Smartphone as card reader" function now requires at least version 2.1.0.
  - Support for ChromeOS has been added.
  - Support for key lengths smaller than 3000 bits has been discontinued.
  - Changelog added to the documentation for the SDK.
  - Functional extension of the SDK (see changelog).
  - Update of Qt to version 6.7.2.
  - Update of OpenSSL to version 3.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720785600">- Cherry-pick upstream patch to fix QML error with Qt 6.6
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Add missing libQt6Svg6 runtime dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726056000">- New upstream release
  + Version 2.2.1
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard usability.
  - Prevention of the display of external content in
    the graphical user interface.
  - Support for smartphones with Android 15 where
    optimized memory management has been activated.
  - Support for 16 KB page sizes on Android.
  - Stabilization of the iOS SDK during fast restarts.
  - Correction of the behavior when using Qt 6.6.3.
  - Avoidance of a log file within the container in the container SDK.
  - Update of the Android NDK to r27b (27.1.12297006).
  - Update of the Android SDK Platform to Android 15 (API level 35).
  - Update of OpenSSL to version 3.3.2.
- Drop patches for issues fixed upstream
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1729684800">- New upstream release
  + Version 2.2.2
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard operability.
  - Addition of the Android ABIs armeabi-v7a and x86_64 in addition to
    arm64-v8a in the SDK.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1730462400">- Add patch from Fedora to enforce use of legacy OpenSSL API
  + 0001-use-legacy-openssl-api.patch (bsc#1231686)</changelog>
</package>
<package pkgid="c15cd1362eaa434e980018caca6f84e2f5b3aff848ed46c90e881c462a6ccbe4" name="AusweisApp" arch="s390x">
  <version epoch="0" ver="2.2.2" rel="bp156.5.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720180800">- New upstream release
  + Version 2.2.0
  - Visual adjustments and optimization of the graphical user interface.
  - Display of the old and new device name when using "Smartphone as card
    reader" if the name of a device has changed.
  - An information page has been added at the end of an authentication before
    forwarding to the service provider.
  - Increased the time allowed to respond to card commands on Android to support
    badges that have switched to a safe slow mode after too many incorrect CAN entries.
  - Improved accessibility options.
  - Support for Android 8 has been discontinued.
  - The "Smartphone as card reader" function now requires at least version 2.1.0.
  - Support for ChromeOS has been added.
  - Support for key lengths smaller than 3000 bits has been discontinued.
  - Changelog added to the documentation for the SDK.
  - Functional extension of the SDK (see changelog).
  - Update of Qt to version 6.7.2.
  - Update of OpenSSL to version 3.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720785600">- Cherry-pick upstream patch to fix QML error with Qt 6.6
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Add missing libQt6Svg6 runtime dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726056000">- New upstream release
  + Version 2.2.1
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard usability.
  - Prevention of the display of external content in
    the graphical user interface.
  - Support for smartphones with Android 15 where
    optimized memory management has been activated.
  - Support for 16 KB page sizes on Android.
  - Stabilization of the iOS SDK during fast restarts.
  - Correction of the behavior when using Qt 6.6.3.
  - Avoidance of a log file within the container in the container SDK.
  - Update of the Android NDK to r27b (27.1.12297006).
  - Update of the Android SDK Platform to Android 15 (API level 35).
  - Update of OpenSSL to version 3.3.2.
- Drop patches for issues fixed upstream
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1729684800">- New upstream release
  + Version 2.2.2
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard operability.
  - Addition of the Android ABIs armeabi-v7a and x86_64 in addition to
    arm64-v8a in the SDK.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1730462400">- Add patch from Fedora to enforce use of legacy OpenSSL API
  + 0001-use-legacy-openssl-api.patch (bsc#1231686)</changelog>
</package>
<package pkgid="5c449d1a966f18035fad9916095ddb3b0c6774d9aa45fa217bfa1cc9933900f5" name="AusweisApp" arch="src">
  <version epoch="0" ver="2.2.2" rel="bp156.5.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720180800">- New upstream release
  + Version 2.2.0
  - Visual adjustments and optimization of the graphical user interface.
  - Display of the old and new device name when using "Smartphone as card
    reader" if the name of a device has changed.
  - An information page has been added at the end of an authentication before
    forwarding to the service provider.
  - Increased the time allowed to respond to card commands on Android to support
    badges that have switched to a safe slow mode after too many incorrect CAN entries.
  - Improved accessibility options.
  - Support for Android 8 has been discontinued.
  - The "Smartphone as card reader" function now requires at least version 2.1.0.
  - Support for ChromeOS has been added.
  - Support for key lengths smaller than 3000 bits has been discontinued.
  - Changelog added to the documentation for the SDK.
  - Functional extension of the SDK (see changelog).
  - Update of Qt to version 6.7.2.
  - Update of OpenSSL to version 3.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720785600">- Cherry-pick upstream patch to fix QML error with Qt 6.6
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Add missing libQt6Svg6 runtime dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726056000">- New upstream release
  + Version 2.2.1
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard usability.
  - Prevention of the display of external content in
    the graphical user interface.
  - Support for smartphones with Android 15 where
    optimized memory management has been activated.
  - Support for 16 KB page sizes on Android.
  - Stabilization of the iOS SDK during fast restarts.
  - Correction of the behavior when using Qt 6.6.3.
  - Avoidance of a log file within the container in the container SDK.
  - Update of the Android NDK to r27b (27.1.12297006).
  - Update of the Android SDK Platform to Android 15 (API level 35).
  - Update of OpenSSL to version 3.3.2.
- Drop patches for issues fixed upstream
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1729684800">- New upstream release
  + Version 2.2.2
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard operability.
  - Addition of the Android ABIs armeabi-v7a and x86_64 in addition to
    arm64-v8a in the SDK.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1730462400">- Add patch from Fedora to enforce use of legacy OpenSSL API
  + 0001-use-legacy-openssl-api.patch (bsc#1231686)</changelog>
</package>
<package pkgid="216e4441a49bba6ae51e638017be03eb0dbe55b9762931943b4c65aaa875f6d0" name="AusweisApp" arch="x86_64">
  <version epoch="0" ver="2.2.2" rel="bp156.5.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1671364800">- New upstream release
  + Version 1.26.1
  - Fixed the loss of settings on Android.
  - Fixed the use of non-public or deprecated APIs
    on macOS to comply with App Store Guidelines.
  + from version 1.26.0
  - Support for macOS 13.
  - Support for Windows Server 2016 (version 1607).
  - Support for Windows Server 2019.
  - Support for Windows Server 2022.
  - A proxy service is now available for multi-user operation in terminal
    server environments. Details can be found in the document "Guide To
    Installation In Corporate Networks".
  - Fixed crashes on Android.
  - The iOS SDK now supports the arm64 simulator.
  - Updated OpenSSL to version 3.0.7.
  - Updated Qt to version 6.4.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674475200">- New upstream release
  + Version 1.26.2
  - Fixed notification when another application is running on the port in use.
  - Fixed crashes on Android.
  - Optimization of forwarding to "CommunicationErrorAddress" on iOS.
  - Improved installation of the proxy service for terminal server environments.
  - Fixed the setting for the setup wizard when installing in corporate networks.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1675598400">- switch to generic openssl-devel to allow openssl-3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720180800">- New upstream release
  + Version 2.2.0
  - Visual adjustments and optimization of the graphical user interface.
  - Display of the old and new device name when using "Smartphone as card
    reader" if the name of a device has changed.
  - An information page has been added at the end of an authentication before
    forwarding to the service provider.
  - Increased the time allowed to respond to card commands on Android to support
    badges that have switched to a safe slow mode after too many incorrect CAN entries.
  - Improved accessibility options.
  - Support for Android 8 has been discontinued.
  - The "Smartphone as card reader" function now requires at least version 2.1.0.
  - Support for ChromeOS has been added.
  - Support for key lengths smaller than 3000 bits has been discontinued.
  - Changelog added to the documentation for the SDK.
  - Functional extension of the SDK (see changelog).
  - Update of Qt to version 6.7.2.
  - Update of OpenSSL to version 3.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720785600">- Cherry-pick upstream patch to fix QML error with Qt 6.6
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Add missing libQt6Svg6 runtime dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726056000">- New upstream release
  + Version 2.2.1
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard usability.
  - Prevention of the display of external content in
    the graphical user interface.
  - Support for smartphones with Android 15 where
    optimized memory management has been activated.
  - Support for 16 KB page sizes on Android.
  - Stabilization of the iOS SDK during fast restarts.
  - Correction of the behavior when using Qt 6.6.3.
  - Avoidance of a log file within the container in the container SDK.
  - Update of the Android NDK to r27b (27.1.12297006).
  - Update of the Android SDK Platform to Android 15 (API level 35).
  - Update of OpenSSL to version 3.3.2.
- Drop patches for issues fixed upstream
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1729684800">- New upstream release
  + Version 2.2.2
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard operability.
  - Addition of the Android ABIs armeabi-v7a and x86_64 in addition to
    arm64-v8a in the SDK.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1730462400">- Add patch from Fedora to enforce use of legacy OpenSSL API
  + 0001-use-legacy-openssl-api.patch (bsc#1231686)</changelog>
</package>
<package pkgid="8c321ea72719f4ea35eba8e03ecfe78c8d28a7e23258a513278ee3e807a9a316" name="AusweisApp" arch="aarch64">
  <version epoch="0" ver="2.3.2" rel="bp156.8.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720180800">- New upstream release
  + Version 2.2.0
  - Visual adjustments and optimization of the graphical user interface.
  - Display of the old and new device name when using "Smartphone as card
    reader" if the name of a device has changed.
  - An information page has been added at the end of an authentication before
    forwarding to the service provider.
  - Increased the time allowed to respond to card commands on Android to support
    badges that have switched to a safe slow mode after too many incorrect CAN entries.
  - Improved accessibility options.
  - Support for Android 8 has been discontinued.
  - The "Smartphone as card reader" function now requires at least version 2.1.0.
  - Support for ChromeOS has been added.
  - Support for key lengths smaller than 3000 bits has been discontinued.
  - Changelog added to the documentation for the SDK.
  - Functional extension of the SDK (see changelog).
  - Update of Qt to version 6.7.2.
  - Update of OpenSSL to version 3.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720785600">- Cherry-pick upstream patch to fix QML error with Qt 6.6
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Add missing libQt6Svg6 runtime dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726056000">- New upstream release
  + Version 2.2.1
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard usability.
  - Prevention of the display of external content in
    the graphical user interface.
  - Support for smartphones with Android 15 where
    optimized memory management has been activated.
  - Support for 16 KB page sizes on Android.
  - Stabilization of the iOS SDK during fast restarts.
  - Correction of the behavior when using Qt 6.6.3.
  - Avoidance of a log file within the container in the container SDK.
  - Update of the Android NDK to r27b (27.1.12297006).
  - Update of the Android SDK Platform to Android 15 (API level 35).
  - Update of OpenSSL to version 3.3.2.
- Drop patches for issues fixed upstream
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1729684800">- New upstream release
  + Version 2.2.2
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard operability.
  - Addition of the Android ABIs armeabi-v7a and x86_64 in addition to
    arm64-v8a in the SDK.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1730462400">- Add patch from Fedora to enforce use of legacy OpenSSL API
  + 0001-use-legacy-openssl-api.patch (bsc#1231686)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1741262400">- New upstream release
  + Version 2.3.0
  - Introduction of onboarding.
  - Visual adjustments and optimization of the graphical user interface.
  - macOS Monterey 12 is no longer supported.
  - iOS 14 and 15 are no longer supported.
  - The integrated simulator now performs the terminal authentication
    completely instead of accepting every input.
  - Update from Android NDK to r27c (27.2.12479018).
  - Update of Qt to version 6.8.1.
  - Update of OpenSSL to version 3.4.1.
- Refresh 0001-use-legacy-openssl-api.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1742299200">- New upstream release
  + Version 2.3.1
  - Fixed compatibility of AusweisApp with Windows Server 2016.
  - Visual adjustments and optimization of the graphical user interface.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1750939200">- New upstream release
  + Version 2.3.2
  - Improvements with regards to accessibility.
  - Visual adjustments and optimization of the graphical interface.
  - Temporarily removing an ID card on an Android smartphone as a card
    reader before typing in the password no longer results in an error.
  - On Windows, smartphones that can only be reached via IPv6 are now
    also recognized as card readers.
  - Added support for smartphones as card readers on Windows Server.
  - Relative URL redirects during authentication are now correctly
    taken into account.</changelog>
</package>
<package pkgid="f371313f538cb5a087f54f50a7bfe37febc4a2c3c096e8b75cd6282829798da3" name="AusweisApp" arch="ppc64le">
  <version epoch="0" ver="2.3.2" rel="bp156.8.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720180800">- New upstream release
  + Version 2.2.0
  - Visual adjustments and optimization of the graphical user interface.
  - Display of the old and new device name when using "Smartphone as card
    reader" if the name of a device has changed.
  - An information page has been added at the end of an authentication before
    forwarding to the service provider.
  - Increased the time allowed to respond to card commands on Android to support
    badges that have switched to a safe slow mode after too many incorrect CAN entries.
  - Improved accessibility options.
  - Support for Android 8 has been discontinued.
  - The "Smartphone as card reader" function now requires at least version 2.1.0.
  - Support for ChromeOS has been added.
  - Support for key lengths smaller than 3000 bits has been discontinued.
  - Changelog added to the documentation for the SDK.
  - Functional extension of the SDK (see changelog).
  - Update of Qt to version 6.7.2.
  - Update of OpenSSL to version 3.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720785600">- Cherry-pick upstream patch to fix QML error with Qt 6.6
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Add missing libQt6Svg6 runtime dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726056000">- New upstream release
  + Version 2.2.1
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard usability.
  - Prevention of the display of external content in
    the graphical user interface.
  - Support for smartphones with Android 15 where
    optimized memory management has been activated.
  - Support for 16 KB page sizes on Android.
  - Stabilization of the iOS SDK during fast restarts.
  - Correction of the behavior when using Qt 6.6.3.
  - Avoidance of a log file within the container in the container SDK.
  - Update of the Android NDK to r27b (27.1.12297006).
  - Update of the Android SDK Platform to Android 15 (API level 35).
  - Update of OpenSSL to version 3.3.2.
- Drop patches for issues fixed upstream
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1729684800">- New upstream release
  + Version 2.2.2
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard operability.
  - Addition of the Android ABIs armeabi-v7a and x86_64 in addition to
    arm64-v8a in the SDK.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1730462400">- Add patch from Fedora to enforce use of legacy OpenSSL API
  + 0001-use-legacy-openssl-api.patch (bsc#1231686)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1741262400">- New upstream release
  + Version 2.3.0
  - Introduction of onboarding.
  - Visual adjustments and optimization of the graphical user interface.
  - macOS Monterey 12 is no longer supported.
  - iOS 14 and 15 are no longer supported.
  - The integrated simulator now performs the terminal authentication
    completely instead of accepting every input.
  - Update from Android NDK to r27c (27.2.12479018).
  - Update of Qt to version 6.8.1.
  - Update of OpenSSL to version 3.4.1.
- Refresh 0001-use-legacy-openssl-api.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1742299200">- New upstream release
  + Version 2.3.1
  - Fixed compatibility of AusweisApp with Windows Server 2016.
  - Visual adjustments and optimization of the graphical user interface.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1750939200">- New upstream release
  + Version 2.3.2
  - Improvements with regards to accessibility.
  - Visual adjustments and optimization of the graphical interface.
  - Temporarily removing an ID card on an Android smartphone as a card
    reader before typing in the password no longer results in an error.
  - On Windows, smartphones that can only be reached via IPv6 are now
    also recognized as card readers.
  - Added support for smartphones as card readers on Windows Server.
  - Relative URL redirects during authentication are now correctly
    taken into account.</changelog>
</package>
<package pkgid="c98a1a830e0deb98634887f8e40d18d50a6b4828b0900b55bfc235e3b512027d" name="AusweisApp" arch="s390x">
  <version epoch="0" ver="2.3.2" rel="bp156.8.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720180800">- New upstream release
  + Version 2.2.0
  - Visual adjustments and optimization of the graphical user interface.
  - Display of the old and new device name when using "Smartphone as card
    reader" if the name of a device has changed.
  - An information page has been added at the end of an authentication before
    forwarding to the service provider.
  - Increased the time allowed to respond to card commands on Android to support
    badges that have switched to a safe slow mode after too many incorrect CAN entries.
  - Improved accessibility options.
  - Support for Android 8 has been discontinued.
  - The "Smartphone as card reader" function now requires at least version 2.1.0.
  - Support for ChromeOS has been added.
  - Support for key lengths smaller than 3000 bits has been discontinued.
  - Changelog added to the documentation for the SDK.
  - Functional extension of the SDK (see changelog).
  - Update of Qt to version 6.7.2.
  - Update of OpenSSL to version 3.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720785600">- Cherry-pick upstream patch to fix QML error with Qt 6.6
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Add missing libQt6Svg6 runtime dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726056000">- New upstream release
  + Version 2.2.1
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard usability.
  - Prevention of the display of external content in
    the graphical user interface.
  - Support for smartphones with Android 15 where
    optimized memory management has been activated.
  - Support for 16 KB page sizes on Android.
  - Stabilization of the iOS SDK during fast restarts.
  - Correction of the behavior when using Qt 6.6.3.
  - Avoidance of a log file within the container in the container SDK.
  - Update of the Android NDK to r27b (27.1.12297006).
  - Update of the Android SDK Platform to Android 15 (API level 35).
  - Update of OpenSSL to version 3.3.2.
- Drop patches for issues fixed upstream
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1729684800">- New upstream release
  + Version 2.2.2
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard operability.
  - Addition of the Android ABIs armeabi-v7a and x86_64 in addition to
    arm64-v8a in the SDK.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1730462400">- Add patch from Fedora to enforce use of legacy OpenSSL API
  + 0001-use-legacy-openssl-api.patch (bsc#1231686)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1741262400">- New upstream release
  + Version 2.3.0
  - Introduction of onboarding.
  - Visual adjustments and optimization of the graphical user interface.
  - macOS Monterey 12 is no longer supported.
  - iOS 14 and 15 are no longer supported.
  - The integrated simulator now performs the terminal authentication
    completely instead of accepting every input.
  - Update from Android NDK to r27c (27.2.12479018).
  - Update of Qt to version 6.8.1.
  - Update of OpenSSL to version 3.4.1.
- Refresh 0001-use-legacy-openssl-api.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1742299200">- New upstream release
  + Version 2.3.1
  - Fixed compatibility of AusweisApp with Windows Server 2016.
  - Visual adjustments and optimization of the graphical user interface.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1750939200">- New upstream release
  + Version 2.3.2
  - Improvements with regards to accessibility.
  - Visual adjustments and optimization of the graphical interface.
  - Temporarily removing an ID card on an Android smartphone as a card
    reader before typing in the password no longer results in an error.
  - On Windows, smartphones that can only be reached via IPv6 are now
    also recognized as card readers.
  - Added support for smartphones as card readers on Windows Server.
  - Relative URL redirects during authentication are now correctly
    taken into account.</changelog>
</package>
<package pkgid="1eedf1beb29ea5d07d637b00f2c192a832b21e29789f229e32855a42d7635d4a" name="AusweisApp" arch="src">
  <version epoch="0" ver="2.3.2" rel="bp156.8.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720180800">- New upstream release
  + Version 2.2.0
  - Visual adjustments and optimization of the graphical user interface.
  - Display of the old and new device name when using "Smartphone as card
    reader" if the name of a device has changed.
  - An information page has been added at the end of an authentication before
    forwarding to the service provider.
  - Increased the time allowed to respond to card commands on Android to support
    badges that have switched to a safe slow mode after too many incorrect CAN entries.
  - Improved accessibility options.
  - Support for Android 8 has been discontinued.
  - The "Smartphone as card reader" function now requires at least version 2.1.0.
  - Support for ChromeOS has been added.
  - Support for key lengths smaller than 3000 bits has been discontinued.
  - Changelog added to the documentation for the SDK.
  - Functional extension of the SDK (see changelog).
  - Update of Qt to version 6.7.2.
  - Update of OpenSSL to version 3.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720785600">- Cherry-pick upstream patch to fix QML error with Qt 6.6
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Add missing libQt6Svg6 runtime dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726056000">- New upstream release
  + Version 2.2.1
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard usability.
  - Prevention of the display of external content in
    the graphical user interface.
  - Support for smartphones with Android 15 where
    optimized memory management has been activated.
  - Support for 16 KB page sizes on Android.
  - Stabilization of the iOS SDK during fast restarts.
  - Correction of the behavior when using Qt 6.6.3.
  - Avoidance of a log file within the container in the container SDK.
  - Update of the Android NDK to r27b (27.1.12297006).
  - Update of the Android SDK Platform to Android 15 (API level 35).
  - Update of OpenSSL to version 3.3.2.
- Drop patches for issues fixed upstream
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1729684800">- New upstream release
  + Version 2.2.2
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard operability.
  - Addition of the Android ABIs armeabi-v7a and x86_64 in addition to
    arm64-v8a in the SDK.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1730462400">- Add patch from Fedora to enforce use of legacy OpenSSL API
  + 0001-use-legacy-openssl-api.patch (bsc#1231686)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1741262400">- New upstream release
  + Version 2.3.0
  - Introduction of onboarding.
  - Visual adjustments and optimization of the graphical user interface.
  - macOS Monterey 12 is no longer supported.
  - iOS 14 and 15 are no longer supported.
  - The integrated simulator now performs the terminal authentication
    completely instead of accepting every input.
  - Update from Android NDK to r27c (27.2.12479018).
  - Update of Qt to version 6.8.1.
  - Update of OpenSSL to version 3.4.1.
- Refresh 0001-use-legacy-openssl-api.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1742299200">- New upstream release
  + Version 2.3.1
  - Fixed compatibility of AusweisApp with Windows Server 2016.
  - Visual adjustments and optimization of the graphical user interface.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1750939200">- New upstream release
  + Version 2.3.2
  - Improvements with regards to accessibility.
  - Visual adjustments and optimization of the graphical interface.
  - Temporarily removing an ID card on an Android smartphone as a card
    reader before typing in the password no longer results in an error.
  - On Windows, smartphones that can only be reached via IPv6 are now
    also recognized as card readers.
  - Added support for smartphones as card readers on Windows Server.
  - Relative URL redirects during authentication are now correctly
    taken into account.</changelog>
</package>
<package pkgid="91048513ebfec2866fae1b3f37dc17a38e5ec813b92d5c42317258da6898bbce" name="AusweisApp" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="bp156.8.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1678363200">- New upstream release
  + Version 1.26.3
  - Improvement of help and tutorial texts.
  - Improvements in diagnostics.
  - Fix an error in the NFC dialog on iOS.
  - Improved accessibility when entering PIN, CAN and PUK.
  - Introduction of unique FailureCodes in SDK.
  - Added the environment variable AUSWEISAPP2_AUTOMATIC_DEVELOPERMODE
    in the fully automated SDK.
  - Fixed incorrect progress display in SDK for iOS.
  - Added SECURESCREENKEYBOARD for corporate environments.
  - Bumped TargetSDK to 33 in SDK for Android.
  - Update of OpenSSL to version 3.0.8.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1682769600">- New upstream release
  + Version 1.26.4
  - Improved window management on macOS.
  - Minor bug fixes and optimizations.
  - Changed INTERRUPT to not always display an error icon.
  - Enabled "Access-Control-Allow-Private-Network"
    header to be set during status requests.
  - Changed CHANGE_PIN to return a FailureCode.
  - Fixed a crash with AirPlay in the iOS SDK.
  - Fixed private icons in the iOS SDK.
  - Added simulator support for explicit private keys as parameters.
  - Fixed cancel button in the iOS scan dialog of
    the SDK not cancelling the workflow.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690372800">- New upstream release
  + Version 1.26.5
  - Reworked the pairing process when using a smartphone as card reader.
    Both devices involved in pairing must be updated to version 1.26.5.
    Pairing AusweisApp 1.26.5 with older versions is not supported.
  - Progress is now also shown on the smartphone when using it as a card reader.
  - Enabled keyboard mode by default when using smartphone as a card reader.
  - When using keyboard mode on a smartphone as a card reader, showing the
    permissions can now be re-enabled in settings at any time.
  - Added a monochrome icon on Android.
  - Added handling for &lt;Command&gt; + &lt;W&gt; on macOS.
  - Removed the update function on macOS in favor of the Mac App Store.
  - Minor bug fixes and optimizations.
  - Fixed documentation for installation in corporate networks
    on macOS when configuring the setup wizard.
  - Optimized the size of the Android SDK.
  - Updated OpenSSL to version 3.0.9.
- Add qt6-core-private-devel to BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690891200">- New upstream release
  + Version 1.26.7
  - Fixed possible crash during start-up on Android
  + from version 1.26.6
  - Fixed possible crash during start-up on Android</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1697544000">- Add patch to fix FTBFS with Qt 6.6
  + 0001-fix-ftbfs-with-qt6.6.patch
- Add patch to update QML for Qt 6.6
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1699358400">- New upstream release
  + Version 2.0.0
  - Renamed AusweisApp2 to AusweisApp.
  - Completely revised graphical user interface.
  - Dark mode is now supported on all platforms.
  - The display in landscape mode has been
    optimized and is now set automatically.
  - System font and size are now honored by the app.
  - Optimized usability of the title bar.
  - Online help is no longer available.
  - The provider list is no longer integrated in AusweisApp
    but can now be accessed via the AusweisApp website.
  - History of authentication processes has been removed.
  - The PDF export function for personal data has been removed.
  - macOS Catalina 10.15 is no longer supported.
  - Android 7 is no longer supported.
  - iOS 13 is no longer supported.
  - Updated Qt to version 6.5.3.
  - Updated OpenSSL to version 3.1.4.
- Pass adjusted source tree name to %setup macro
- Use adjusted source tree name in %install section
- Rename package from AusweisApp2 to AusweisApp
- Drop patches for issues fixed upstream
  + 0001-fix-ftbfs-with-qt6.6.patch
  + 0002-update-qml-for-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700049600">- New upstream release
  + Version 2.0.1
  - Fixed an issue where settings were not saved on iOS and macOS.
  - Fixed entitlements on macOS.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705147200">- New upstream release
  + Version 2.0.2
  - Avoid showing hints to the PIN reset service.
- Pass original source tree name to %setup macro
- Use original source tree name in %install section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1705665600">- New upstream release
  + Version 2.0.3
  - Fixed crash on macOS 11.
  - Fixed missing German translation.
  - Fixed display of release notes.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1709208000">- New upstream release
  + Version 2.1.0
  - Visual adjustments and optimization of the graphical user interface.
  - Improved detection of system language on macOS.
  - Removed the five minutes time limit for password
    entry when the ID card is placed on the reader.
  - Fixed display of changed device names when using "Smartphone as card reader".
  - Add an option to disable animations.
  - Fixed the behavior of "Smartphone as card reader"
    with activated password entry when using a PUK.
  - Fixed of the connection test with a password-protected
    proxy in the diagnostics on desktop systems.
  - Drop support for macOS 11 Big Sur.
  - Fixed processing of certificates with CAv3 extension.
  - Unified documentation for installation and integration.
  - Update of OpenSSL to version 3.1.5.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720180800">- New upstream release
  + Version 2.2.0
  - Visual adjustments and optimization of the graphical user interface.
  - Display of the old and new device name when using "Smartphone as card
    reader" if the name of a device has changed.
  - An information page has been added at the end of an authentication before
    forwarding to the service provider.
  - Increased the time allowed to respond to card commands on Android to support
    badges that have switched to a safe slow mode after too many incorrect CAN entries.
  - Improved accessibility options.
  - Support for Android 8 has been discontinued.
  - The "Smartphone as card reader" function now requires at least version 2.1.0.
  - Support for ChromeOS has been added.
  - Support for key lengths smaller than 3000 bits has been discontinued.
  - Changelog added to the documentation for the SDK.
  - Functional extension of the SDK (see changelog).
  - Update of Qt to version 6.7.2.
  - Update of OpenSSL to version 3.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720785600">- Cherry-pick upstream patch to fix QML error with Qt 6.6
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Add missing libQt6Svg6 runtime dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726056000">- New upstream release
  + Version 2.2.1
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard usability.
  - Prevention of the display of external content in
    the graphical user interface.
  - Support for smartphones with Android 15 where
    optimized memory management has been activated.
  - Support for 16 KB page sizes on Android.
  - Stabilization of the iOS SDK during fast restarts.
  - Correction of the behavior when using Qt 6.6.3.
  - Avoidance of a log file within the container in the container SDK.
  - Update of the Android NDK to r27b (27.1.12297006).
  - Update of the Android SDK Platform to Android 15 (API level 35).
  - Update of OpenSSL to version 3.3.2.
- Drop patches for issues fixed upstream
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1729684800">- New upstream release
  + Version 2.2.2
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard operability.
  - Addition of the Android ABIs armeabi-v7a and x86_64 in addition to
    arm64-v8a in the SDK.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1730462400">- Add patch from Fedora to enforce use of legacy OpenSSL API
  + 0001-use-legacy-openssl-api.patch (bsc#1231686)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1741262400">- New upstream release
  + Version 2.3.0
  - Introduction of onboarding.
  - Visual adjustments and optimization of the graphical user interface.
  - macOS Monterey 12 is no longer supported.
  - iOS 14 and 15 are no longer supported.
  - The integrated simulator now performs the terminal authentication
    completely instead of accepting every input.
  - Update from Android NDK to r27c (27.2.12479018).
  - Update of Qt to version 6.8.1.
  - Update of OpenSSL to version 3.4.1.
- Refresh 0001-use-legacy-openssl-api.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1742299200">- New upstream release
  + Version 2.3.1
  - Fixed compatibility of AusweisApp with Windows Server 2016.
  - Visual adjustments and optimization of the graphical user interface.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1750939200">- New upstream release
  + Version 2.3.2
  - Improvements with regards to accessibility.
  - Visual adjustments and optimization of the graphical interface.
  - Temporarily removing an ID card on an Android smartphone as a card
    reader before typing in the password no longer results in an error.
  - On Windows, smartphones that can only be reached via IPv6 are now
    also recognized as card readers.
  - Added support for smartphones as card readers on Windows Server.
  - Relative URL redirects during authentication are now correctly
    taken into account.</changelog>
</package>
<package pkgid="643824788f18c5fa242b892f5e1fb82ae7a00e5c8fc8302b894ffa22d478fb2c" name="Botan" arch="aarch64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="88ac5a6618f73c7f38191d6f993988b98cc03df270ad44c1fe0d65e703c3bb7a" name="Botan" arch="i586">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="e0858266b9d6d8b75dd18122e6f51ad474b7fefb4877f111cb1e78d44cb9fc68" name="Botan" arch="ppc64le">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="197d28ffa7282d88c0eb730375eb93236d5e4d42f1fb5f8a177eafabcc3fc34f" name="Botan" arch="s390x">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="2742a9a0cbc4cd30052fa2888cb5cde9cceea8e20e6b46f15de10d21c75c2d15" name="Botan" arch="src">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="4620dde008003870e902c845cff846fd2e40e49ea55e478be4b0d44adf920b64" name="Botan" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="048462377f25ba4f16a9e9aef027e9bcd64402e2db893c90b0d0afa8f797f27f" name="Botan" arch="aarch64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="f51c02d26307b691992a16d2595eab06125fedea1c9f6e60be3b1f2bbf66199f" name="Botan" arch="i586">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="7b31c971ec30736ca0e2ce44fdeec06419afc8d3f2e39a62b12de3b5d0f80395" name="Botan" arch="ppc64le">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="fccaf42eccfafe1f233218f4d771f869f52f9a5d155819a8b2590e7bf332efa9" name="Botan" arch="s390x">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="a85e35a8bfa33406b5ab2c3d4a919d2a695824bf0e1d1cbb792c8de19e95fa16" name="Botan" arch="src">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="cdec070a06ddefd7582481a65c28a14503391fcd3f602498c1c74d919c7d1ed7" name="Botan" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="1430c981cb9fc156a7a87d95bdffa38ab5c1874d1d82034671063bdade152c8d" name="Botan-doc" arch="noarch">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="a62931580539e10f3dc90c77c19747ba6ddc0c96c354dbe8b9a76ec507c407a5" name="Botan-doc" arch="noarch">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="ba7bca2dfd1fc71c7b1741377987aca39d10e3601c2f49282de9a5c6a842dba6" name="OpenBoard" arch="aarch64">
  <version epoch="0" ver="1.7.2" rel="bp156.2.3.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606132800">- 0001-Rewrite-libs.pri.patch:
  + update patch and BR on now weirdly named quazip - pkgconfig(quazip1-qt5)
  + continue to function with with pkgconfig(quazip) in Leap 15.2
- Remove BR on libx264-devel and fdk-aac-devel as these are no longer
  available in Factory</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1612785600">- Compile translations so they are installed (bsc#1181857)</changelog>
  <changelog author="Martin Winter &lt;martin@winter-rosenheim.de&gt;" date="1640692800">- update to OpenBoard 1.6.1
  - adapt patches</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1647345600">- add 0573-compile-with-poppler-22.03.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1654516800">- Update to 1.6.2
  - see https://github.com/OpenBoard-org/OpenBoard/releases/tag/v1.6.2
  - adapt 0001-Rewrite-libs.pri.patch
  - adapt 0002-Install-to-correct-directories-on-linux.patch
  - drop 0573-compile-with-poppler-22.03.patch (upstreamed)</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1655121600">- Update to 1.6.3
  - see https://github.com/OpenBoard-org/OpenBoard/releases/tag/v1.6.3</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1655640000">- update to 1.7.0~git47a96e1
  - use development branch to enable build for Tumbleweed
    (switch from QWebKit to QWebEngine)
- add patches fixing known issues according to existing upstream PRs
  - 0551-common-background-drawing.patch
  - 0569-scale-mirror-pixmap.patch
  - 0604-qt-5.12-compatibility.patch
  - 0629-bug-ruler.patch
  - 0633-improve-displaymanager.patch
- remove unused build dependencies</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1656072000">- fix several issues
  - add 0008-install-fonts.patch
  - add 0637-fix-pdf-background-export.patch
  - add 0641-fix-font-handling.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1656072001">- minor changes in spec file</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1663156800">- update to version 1.7.0~git20220914.47a96e1
- feat: user configurable shortcuts
  * add 0460-shortcut-configuration.patch
- fix: boxing in single screen mode
  * update 0633-improve-displaymanager.patch
- fix: PDF background export
  * update 0637-fix-pdf-background-export.patch
- fix: font handling
  * update 0641-fix-font-handling.patch
- fix: PDF export scaling
  * add 0649-fix-pdf-export-scaling.patch
- refactor: Linux build and installation
  * add 0651-chore-reorganize-linux-build.patch
  * replaces 0001-Rewrite-libs.pri.patch
  * replaces 0002-Install-to-correct-directories-on-linux.patch
  * replaces 0003-podcast.pri-port-to-pkgconfig.patch
  * replaces 0004-Use-QStandardPaths-to-locate-resources.patch
  * replaces 0005-Add-svg-icon.patch
  * replaces 0006-pro-Remove-UB_THIRDPARTY_INTERACTIVE.patch
  * replaces 0007-Linux-Only-use-onboard-by-default-if-it-s-installed.patch
  * replaces 0008-install-fonts.patch
  * add mimespec for .ubz files
  * also improve handling of onboard on-screen keyboard
- refactor: clean spec file</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1663675200">- fix file list in spec file
  - do not include /usr/share/mime/packages directory owned by
    filesystem</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1669723200">- update to version 1.7.0~git20221129.9de37af
- feat: user configurable shortcuts
  * replace 0460-shortcut-configuration.patch by updated
    0686-shortcut-configuration.patch
  * add 9686-cmake-add-shortcut-manager.patch
    add new files to CMakeLists.txt
- fix: background drawing when switching page size
  * update 0551-common-background-drawing.patch
- fix: mirror pixmap size
  * update 0569-scale-mirror-pixmap.patch
- remove upstreamed patches
  * remove upstreamed 0604-qt-5.12-compatibility.patch
  * remove upstreamed 0629-bug-ruler.patch
  * remove upstreamed 0633-improve-displaymanager.patch
  * remove upstreamed 0637-fix-pdf-background-export.patch
  * remove upstreamed 0641-fix-font-handling.patch
  * remove upstreamed 0649-fix-pdf-export-scaling.patch
- chore: replace qmake by cmake build system
  * remove 0651-chore-reorganize-linux-build.patch
  * add 0698-add-cmake-build-system.patch
- fix: page size for PDF export
  * add 0677-pdf-export-page-size.patch
- disable software update from openboard web page
  * add 9117-disable-software-update.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674648000">- BuildRequire pkgconfig(libavdevice) instead of ffmpeg-devel: let
  OBS figure out the right packages that do not conlfict.</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1687089600">- update to version 1.7.0~git20230614.2ff8f29
  * feature freeze before release
- remove upstreamed patches
  * remove upstreamed 0551-common-background-drawing.patch
  * remove upstreamed 0677-pdf-export-page-size.patch
- update patches to match updated sources
  * update 0686-shortcut-configuration.patch
  * update 0698-add-cmake-build-system.patch
  * update 9117-disable-software-update.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1702123200">- update to release version 1.7.0
- update patches to match updated sources
  * update 0569-scale-mirror-pixmap.patch
  * update 0686-shortcut-configuration.patch
- replace build system patch
  * remove 0698-add-cmake-build-system.patch
  * add 0830-cmake-community-builds.patch
- switch from pgkconfig to cmake for some BuildRequires</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1715169600">- update to release version 1.7.1
- remove upstreamed patches
  * remove 0830-cmake-community-builds.patch
  * remove 9686-cmake-add-shortcut-manager.patch
- update patch to match updated sources
  * replace 0686-shortcut-configuration.patch by 0955-shortcut-configuration.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1717934400">- fix a problem with latest plasma5 security patches
  * add 1010-fix-qapp-cast.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1720094400">- compatibility with poppler &gt;= 24.05
  * poppler &gt;= 24.05 requires c++20
  * add 0961-use-cpp20.patch
  * add 0962-fix-cpp20-compatibility.patch
  * both patches are already merged upstream
    and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1723550400">- compatibility with ffmpeg-7
  * add 1017-ffmpeg7.patch
  * patch is already merged and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1731931200">- update to release version 1.7.2
- remove upstreamed patches
  * remove 0569-scale-mirror-pixmap.patch
  * remove 0961-use-cpp20.patch
  * remove 0962-fix-cpp20-compatibility.patch
  * remove 1010-fix-qapp-cast.patch
  * remove 1017-ffmpeg7.patch
- adjust patches to new version
  * adjust 0955-shortcut-configuration.patch
  * adjust 9117-disable-software-update.patch
- add patch to circumvent some problems on wayland
  * add 1165-fix-some-wayland-problems.patch
- switch from Qt5 to Qt6</changelog>
</package>
<package pkgid="377aa8db7e06188e37a99e1a7732a8c31e108cfc6a08bf353dee408ee62558f1" name="OpenBoard" arch="src">
  <version epoch="0" ver="1.7.2" rel="bp156.2.3.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606132800">- 0001-Rewrite-libs.pri.patch:
  + update patch and BR on now weirdly named quazip - pkgconfig(quazip1-qt5)
  + continue to function with with pkgconfig(quazip) in Leap 15.2
- Remove BR on libx264-devel and fdk-aac-devel as these are no longer
  available in Factory</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1612785600">- Compile translations so they are installed (bsc#1181857)</changelog>
  <changelog author="Martin Winter &lt;martin@winter-rosenheim.de&gt;" date="1640692800">- update to OpenBoard 1.6.1
  - adapt patches</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1647345600">- add 0573-compile-with-poppler-22.03.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1654516800">- Update to 1.6.2
  - see https://github.com/OpenBoard-org/OpenBoard/releases/tag/v1.6.2
  - adapt 0001-Rewrite-libs.pri.patch
  - adapt 0002-Install-to-correct-directories-on-linux.patch
  - drop 0573-compile-with-poppler-22.03.patch (upstreamed)</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1655121600">- Update to 1.6.3
  - see https://github.com/OpenBoard-org/OpenBoard/releases/tag/v1.6.3</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1655640000">- update to 1.7.0~git47a96e1
  - use development branch to enable build for Tumbleweed
    (switch from QWebKit to QWebEngine)
- add patches fixing known issues according to existing upstream PRs
  - 0551-common-background-drawing.patch
  - 0569-scale-mirror-pixmap.patch
  - 0604-qt-5.12-compatibility.patch
  - 0629-bug-ruler.patch
  - 0633-improve-displaymanager.patch
- remove unused build dependencies</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1656072000">- fix several issues
  - add 0008-install-fonts.patch
  - add 0637-fix-pdf-background-export.patch
  - add 0641-fix-font-handling.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1656072001">- minor changes in spec file</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1663156800">- update to version 1.7.0~git20220914.47a96e1
- feat: user configurable shortcuts
  * add 0460-shortcut-configuration.patch
- fix: boxing in single screen mode
  * update 0633-improve-displaymanager.patch
- fix: PDF background export
  * update 0637-fix-pdf-background-export.patch
- fix: font handling
  * update 0641-fix-font-handling.patch
- fix: PDF export scaling
  * add 0649-fix-pdf-export-scaling.patch
- refactor: Linux build and installation
  * add 0651-chore-reorganize-linux-build.patch
  * replaces 0001-Rewrite-libs.pri.patch
  * replaces 0002-Install-to-correct-directories-on-linux.patch
  * replaces 0003-podcast.pri-port-to-pkgconfig.patch
  * replaces 0004-Use-QStandardPaths-to-locate-resources.patch
  * replaces 0005-Add-svg-icon.patch
  * replaces 0006-pro-Remove-UB_THIRDPARTY_INTERACTIVE.patch
  * replaces 0007-Linux-Only-use-onboard-by-default-if-it-s-installed.patch
  * replaces 0008-install-fonts.patch
  * add mimespec for .ubz files
  * also improve handling of onboard on-screen keyboard
- refactor: clean spec file</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1663675200">- fix file list in spec file
  - do not include /usr/share/mime/packages directory owned by
    filesystem</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1669723200">- update to version 1.7.0~git20221129.9de37af
- feat: user configurable shortcuts
  * replace 0460-shortcut-configuration.patch by updated
    0686-shortcut-configuration.patch
  * add 9686-cmake-add-shortcut-manager.patch
    add new files to CMakeLists.txt
- fix: background drawing when switching page size
  * update 0551-common-background-drawing.patch
- fix: mirror pixmap size
  * update 0569-scale-mirror-pixmap.patch
- remove upstreamed patches
  * remove upstreamed 0604-qt-5.12-compatibility.patch
  * remove upstreamed 0629-bug-ruler.patch
  * remove upstreamed 0633-improve-displaymanager.patch
  * remove upstreamed 0637-fix-pdf-background-export.patch
  * remove upstreamed 0641-fix-font-handling.patch
  * remove upstreamed 0649-fix-pdf-export-scaling.patch
- chore: replace qmake by cmake build system
  * remove 0651-chore-reorganize-linux-build.patch
  * add 0698-add-cmake-build-system.patch
- fix: page size for PDF export
  * add 0677-pdf-export-page-size.patch
- disable software update from openboard web page
  * add 9117-disable-software-update.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674648000">- BuildRequire pkgconfig(libavdevice) instead of ffmpeg-devel: let
  OBS figure out the right packages that do not conlfict.</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1687089600">- update to version 1.7.0~git20230614.2ff8f29
  * feature freeze before release
- remove upstreamed patches
  * remove upstreamed 0551-common-background-drawing.patch
  * remove upstreamed 0677-pdf-export-page-size.patch
- update patches to match updated sources
  * update 0686-shortcut-configuration.patch
  * update 0698-add-cmake-build-system.patch
  * update 9117-disable-software-update.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1702123200">- update to release version 1.7.0
- update patches to match updated sources
  * update 0569-scale-mirror-pixmap.patch
  * update 0686-shortcut-configuration.patch
- replace build system patch
  * remove 0698-add-cmake-build-system.patch
  * add 0830-cmake-community-builds.patch
- switch from pgkconfig to cmake for some BuildRequires</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1715169600">- update to release version 1.7.1
- remove upstreamed patches
  * remove 0830-cmake-community-builds.patch
  * remove 9686-cmake-add-shortcut-manager.patch
- update patch to match updated sources
  * replace 0686-shortcut-configuration.patch by 0955-shortcut-configuration.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1717934400">- fix a problem with latest plasma5 security patches
  * add 1010-fix-qapp-cast.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1720094400">- compatibility with poppler &gt;= 24.05
  * poppler &gt;= 24.05 requires c++20
  * add 0961-use-cpp20.patch
  * add 0962-fix-cpp20-compatibility.patch
  * both patches are already merged upstream
    and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1723550400">- compatibility with ffmpeg-7
  * add 1017-ffmpeg7.patch
  * patch is already merged and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1731931200">- update to release version 1.7.2
- remove upstreamed patches
  * remove 0569-scale-mirror-pixmap.patch
  * remove 0961-use-cpp20.patch
  * remove 0962-fix-cpp20-compatibility.patch
  * remove 1010-fix-qapp-cast.patch
  * remove 1017-ffmpeg7.patch
- adjust patches to new version
  * adjust 0955-shortcut-configuration.patch
  * adjust 9117-disable-software-update.patch
- add patch to circumvent some problems on wayland
  * add 1165-fix-some-wayland-problems.patch
- switch from Qt5 to Qt6</changelog>
</package>
<package pkgid="1414cde57e6e3bc434db4768c48623415700561c3120416ebbfba7c7a42b373c" name="OpenBoard" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="bp156.2.3.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606132800">- 0001-Rewrite-libs.pri.patch:
  + update patch and BR on now weirdly named quazip - pkgconfig(quazip1-qt5)
  + continue to function with with pkgconfig(quazip) in Leap 15.2
- Remove BR on libx264-devel and fdk-aac-devel as these are no longer
  available in Factory</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1612785600">- Compile translations so they are installed (bsc#1181857)</changelog>
  <changelog author="Martin Winter &lt;martin@winter-rosenheim.de&gt;" date="1640692800">- update to OpenBoard 1.6.1
  - adapt patches</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1647345600">- add 0573-compile-with-poppler-22.03.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1654516800">- Update to 1.6.2
  - see https://github.com/OpenBoard-org/OpenBoard/releases/tag/v1.6.2
  - adapt 0001-Rewrite-libs.pri.patch
  - adapt 0002-Install-to-correct-directories-on-linux.patch
  - drop 0573-compile-with-poppler-22.03.patch (upstreamed)</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1655121600">- Update to 1.6.3
  - see https://github.com/OpenBoard-org/OpenBoard/releases/tag/v1.6.3</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1655640000">- update to 1.7.0~git47a96e1
  - use development branch to enable build for Tumbleweed
    (switch from QWebKit to QWebEngine)
- add patches fixing known issues according to existing upstream PRs
  - 0551-common-background-drawing.patch
  - 0569-scale-mirror-pixmap.patch
  - 0604-qt-5.12-compatibility.patch
  - 0629-bug-ruler.patch
  - 0633-improve-displaymanager.patch
- remove unused build dependencies</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1656072000">- fix several issues
  - add 0008-install-fonts.patch
  - add 0637-fix-pdf-background-export.patch
  - add 0641-fix-font-handling.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1656072001">- minor changes in spec file</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1663156800">- update to version 1.7.0~git20220914.47a96e1
- feat: user configurable shortcuts
  * add 0460-shortcut-configuration.patch
- fix: boxing in single screen mode
  * update 0633-improve-displaymanager.patch
- fix: PDF background export
  * update 0637-fix-pdf-background-export.patch
- fix: font handling
  * update 0641-fix-font-handling.patch
- fix: PDF export scaling
  * add 0649-fix-pdf-export-scaling.patch
- refactor: Linux build and installation
  * add 0651-chore-reorganize-linux-build.patch
  * replaces 0001-Rewrite-libs.pri.patch
  * replaces 0002-Install-to-correct-directories-on-linux.patch
  * replaces 0003-podcast.pri-port-to-pkgconfig.patch
  * replaces 0004-Use-QStandardPaths-to-locate-resources.patch
  * replaces 0005-Add-svg-icon.patch
  * replaces 0006-pro-Remove-UB_THIRDPARTY_INTERACTIVE.patch
  * replaces 0007-Linux-Only-use-onboard-by-default-if-it-s-installed.patch
  * replaces 0008-install-fonts.patch
  * add mimespec for .ubz files
  * also improve handling of onboard on-screen keyboard
- refactor: clean spec file</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1663675200">- fix file list in spec file
  - do not include /usr/share/mime/packages directory owned by
    filesystem</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1669723200">- update to version 1.7.0~git20221129.9de37af
- feat: user configurable shortcuts
  * replace 0460-shortcut-configuration.patch by updated
    0686-shortcut-configuration.patch
  * add 9686-cmake-add-shortcut-manager.patch
    add new files to CMakeLists.txt
- fix: background drawing when switching page size
  * update 0551-common-background-drawing.patch
- fix: mirror pixmap size
  * update 0569-scale-mirror-pixmap.patch
- remove upstreamed patches
  * remove upstreamed 0604-qt-5.12-compatibility.patch
  * remove upstreamed 0629-bug-ruler.patch
  * remove upstreamed 0633-improve-displaymanager.patch
  * remove upstreamed 0637-fix-pdf-background-export.patch
  * remove upstreamed 0641-fix-font-handling.patch
  * remove upstreamed 0649-fix-pdf-export-scaling.patch
- chore: replace qmake by cmake build system
  * remove 0651-chore-reorganize-linux-build.patch
  * add 0698-add-cmake-build-system.patch
- fix: page size for PDF export
  * add 0677-pdf-export-page-size.patch
- disable software update from openboard web page
  * add 9117-disable-software-update.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674648000">- BuildRequire pkgconfig(libavdevice) instead of ffmpeg-devel: let
  OBS figure out the right packages that do not conlfict.</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1687089600">- update to version 1.7.0~git20230614.2ff8f29
  * feature freeze before release
- remove upstreamed patches
  * remove upstreamed 0551-common-background-drawing.patch
  * remove upstreamed 0677-pdf-export-page-size.patch
- update patches to match updated sources
  * update 0686-shortcut-configuration.patch
  * update 0698-add-cmake-build-system.patch
  * update 9117-disable-software-update.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1702123200">- update to release version 1.7.0
- update patches to match updated sources
  * update 0569-scale-mirror-pixmap.patch
  * update 0686-shortcut-configuration.patch
- replace build system patch
  * remove 0698-add-cmake-build-system.patch
  * add 0830-cmake-community-builds.patch
- switch from pgkconfig to cmake for some BuildRequires</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1715169600">- update to release version 1.7.1
- remove upstreamed patches
  * remove 0830-cmake-community-builds.patch
  * remove 9686-cmake-add-shortcut-manager.patch
- update patch to match updated sources
  * replace 0686-shortcut-configuration.patch by 0955-shortcut-configuration.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1717934400">- fix a problem with latest plasma5 security patches
  * add 1010-fix-qapp-cast.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1720094400">- compatibility with poppler &gt;= 24.05
  * poppler &gt;= 24.05 requires c++20
  * add 0961-use-cpp20.patch
  * add 0962-fix-cpp20-compatibility.patch
  * both patches are already merged upstream
    and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1723550400">- compatibility with ffmpeg-7
  * add 1017-ffmpeg7.patch
  * patch is already merged and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1731931200">- update to release version 1.7.2
- remove upstreamed patches
  * remove 0569-scale-mirror-pixmap.patch
  * remove 0961-use-cpp20.patch
  * remove 0962-fix-cpp20-compatibility.patch
  * remove 1010-fix-qapp-cast.patch
  * remove 1017-ffmpeg7.patch
- adjust patches to new version
  * adjust 0955-shortcut-configuration.patch
  * adjust 9117-disable-software-update.patch
- add patch to circumvent some problems on wayland
  * add 1165-fix-some-wayland-problems.patch
- switch from Qt5 to Qt6</changelog>
</package>
<package pkgid="6b10cb8053ab890ea2d7c73b3d8162ca54cfd093830203ac49ba7d84c33ab9a0" name="OpenBoard" arch="aarch64">
  <version epoch="0" ver="1.7.3" rel="bp156.2.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1612785600">- Compile translations so they are installed (bsc#1181857)</changelog>
  <changelog author="Martin Winter &lt;martin@winter-rosenheim.de&gt;" date="1640692800">- update to OpenBoard 1.6.1
  - adapt patches</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1647345600">- add 0573-compile-with-poppler-22.03.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1654516800">- Update to 1.6.2
  - see https://github.com/OpenBoard-org/OpenBoard/releases/tag/v1.6.2
  - adapt 0001-Rewrite-libs.pri.patch
  - adapt 0002-Install-to-correct-directories-on-linux.patch
  - drop 0573-compile-with-poppler-22.03.patch (upstreamed)</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1655121600">- Update to 1.6.3
  - see https://github.com/OpenBoard-org/OpenBoard/releases/tag/v1.6.3</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1655640000">- update to 1.7.0~git47a96e1
  - use development branch to enable build for Tumbleweed
    (switch from QWebKit to QWebEngine)
- add patches fixing known issues according to existing upstream PRs
  - 0551-common-background-drawing.patch
  - 0569-scale-mirror-pixmap.patch
  - 0604-qt-5.12-compatibility.patch
  - 0629-bug-ruler.patch
  - 0633-improve-displaymanager.patch
- remove unused build dependencies</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1656072000">- fix several issues
  - add 0008-install-fonts.patch
  - add 0637-fix-pdf-background-export.patch
  - add 0641-fix-font-handling.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1656072001">- minor changes in spec file</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1663156800">- update to version 1.7.0~git20220914.47a96e1
- feat: user configurable shortcuts
  * add 0460-shortcut-configuration.patch
- fix: boxing in single screen mode
  * update 0633-improve-displaymanager.patch
- fix: PDF background export
  * update 0637-fix-pdf-background-export.patch
- fix: font handling
  * update 0641-fix-font-handling.patch
- fix: PDF export scaling
  * add 0649-fix-pdf-export-scaling.patch
- refactor: Linux build and installation
  * add 0651-chore-reorganize-linux-build.patch
  * replaces 0001-Rewrite-libs.pri.patch
  * replaces 0002-Install-to-correct-directories-on-linux.patch
  * replaces 0003-podcast.pri-port-to-pkgconfig.patch
  * replaces 0004-Use-QStandardPaths-to-locate-resources.patch
  * replaces 0005-Add-svg-icon.patch
  * replaces 0006-pro-Remove-UB_THIRDPARTY_INTERACTIVE.patch
  * replaces 0007-Linux-Only-use-onboard-by-default-if-it-s-installed.patch
  * replaces 0008-install-fonts.patch
  * add mimespec for .ubz files
  * also improve handling of onboard on-screen keyboard
- refactor: clean spec file</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1663675200">- fix file list in spec file
  - do not include /usr/share/mime/packages directory owned by
    filesystem</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1669723200">- update to version 1.7.0~git20221129.9de37af
- feat: user configurable shortcuts
  * replace 0460-shortcut-configuration.patch by updated
    0686-shortcut-configuration.patch
  * add 9686-cmake-add-shortcut-manager.patch
    add new files to CMakeLists.txt
- fix: background drawing when switching page size
  * update 0551-common-background-drawing.patch
- fix: mirror pixmap size
  * update 0569-scale-mirror-pixmap.patch
- remove upstreamed patches
  * remove upstreamed 0604-qt-5.12-compatibility.patch
  * remove upstreamed 0629-bug-ruler.patch
  * remove upstreamed 0633-improve-displaymanager.patch
  * remove upstreamed 0637-fix-pdf-background-export.patch
  * remove upstreamed 0641-fix-font-handling.patch
  * remove upstreamed 0649-fix-pdf-export-scaling.patch
- chore: replace qmake by cmake build system
  * remove 0651-chore-reorganize-linux-build.patch
  * add 0698-add-cmake-build-system.patch
- fix: page size for PDF export
  * add 0677-pdf-export-page-size.patch
- disable software update from openboard web page
  * add 9117-disable-software-update.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674648000">- BuildRequire pkgconfig(libavdevice) instead of ffmpeg-devel: let
  OBS figure out the right packages that do not conlfict.</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1687089600">- update to version 1.7.0~git20230614.2ff8f29
  * feature freeze before release
- remove upstreamed patches
  * remove upstreamed 0551-common-background-drawing.patch
  * remove upstreamed 0677-pdf-export-page-size.patch
- update patches to match updated sources
  * update 0686-shortcut-configuration.patch
  * update 0698-add-cmake-build-system.patch
  * update 9117-disable-software-update.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1702123200">- update to release version 1.7.0
- update patches to match updated sources
  * update 0569-scale-mirror-pixmap.patch
  * update 0686-shortcut-configuration.patch
- replace build system patch
  * remove 0698-add-cmake-build-system.patch
  * add 0830-cmake-community-builds.patch
- switch from pgkconfig to cmake for some BuildRequires</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1715169600">- update to release version 1.7.1
- remove upstreamed patches
  * remove 0830-cmake-community-builds.patch
  * remove 9686-cmake-add-shortcut-manager.patch
- update patch to match updated sources
  * replace 0686-shortcut-configuration.patch by 0955-shortcut-configuration.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1717934400">- fix a problem with latest plasma5 security patches
  * add 1010-fix-qapp-cast.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1720094400">- compatibility with poppler &gt;= 24.05
  * poppler &gt;= 24.05 requires c++20
  * add 0961-use-cpp20.patch
  * add 0962-fix-cpp20-compatibility.patch
  * both patches are already merged upstream
    and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1723550400">- compatibility with ffmpeg-7
  * add 1017-ffmpeg7.patch
  * patch is already merged and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1731931200">- update to release version 1.7.2
- remove upstreamed patches
  * remove 0569-scale-mirror-pixmap.patch
  * remove 0961-use-cpp20.patch
  * remove 0962-fix-cpp20-compatibility.patch
  * remove 1010-fix-qapp-cast.patch
  * remove 1017-ffmpeg7.patch
- adjust patches to new version
  * adjust 0955-shortcut-configuration.patch
  * adjust 9117-disable-software-update.patch
- add patch to circumvent some problems on wayland
  * add 1165-fix-some-wayland-problems.patch
- switch from Qt5 to Qt6</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1734955200">- update to release version 1.7.3
- remove patch 1165-fix-some-wayland-problems.patch
  * users reported problems with this patch
  * will not be merged upstream</changelog>
</package>
<package pkgid="73016f5d6811119f8e48401eb1a56e879483e51b3193a6452bc9595fbbabfbfa" name="OpenBoard" arch="src">
  <version epoch="0" ver="1.7.3" rel="bp156.2.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1612785600">- Compile translations so they are installed (bsc#1181857)</changelog>
  <changelog author="Martin Winter &lt;martin@winter-rosenheim.de&gt;" date="1640692800">- update to OpenBoard 1.6.1
  - adapt patches</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1647345600">- add 0573-compile-with-poppler-22.03.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1654516800">- Update to 1.6.2
  - see https://github.com/OpenBoard-org/OpenBoard/releases/tag/v1.6.2
  - adapt 0001-Rewrite-libs.pri.patch
  - adapt 0002-Install-to-correct-directories-on-linux.patch
  - drop 0573-compile-with-poppler-22.03.patch (upstreamed)</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1655121600">- Update to 1.6.3
  - see https://github.com/OpenBoard-org/OpenBoard/releases/tag/v1.6.3</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1655640000">- update to 1.7.0~git47a96e1
  - use development branch to enable build for Tumbleweed
    (switch from QWebKit to QWebEngine)
- add patches fixing known issues according to existing upstream PRs
  - 0551-common-background-drawing.patch
  - 0569-scale-mirror-pixmap.patch
  - 0604-qt-5.12-compatibility.patch
  - 0629-bug-ruler.patch
  - 0633-improve-displaymanager.patch
- remove unused build dependencies</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1656072000">- fix several issues
  - add 0008-install-fonts.patch
  - add 0637-fix-pdf-background-export.patch
  - add 0641-fix-font-handling.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1656072001">- minor changes in spec file</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1663156800">- update to version 1.7.0~git20220914.47a96e1
- feat: user configurable shortcuts
  * add 0460-shortcut-configuration.patch
- fix: boxing in single screen mode
  * update 0633-improve-displaymanager.patch
- fix: PDF background export
  * update 0637-fix-pdf-background-export.patch
- fix: font handling
  * update 0641-fix-font-handling.patch
- fix: PDF export scaling
  * add 0649-fix-pdf-export-scaling.patch
- refactor: Linux build and installation
  * add 0651-chore-reorganize-linux-build.patch
  * replaces 0001-Rewrite-libs.pri.patch
  * replaces 0002-Install-to-correct-directories-on-linux.patch
  * replaces 0003-podcast.pri-port-to-pkgconfig.patch
  * replaces 0004-Use-QStandardPaths-to-locate-resources.patch
  * replaces 0005-Add-svg-icon.patch
  * replaces 0006-pro-Remove-UB_THIRDPARTY_INTERACTIVE.patch
  * replaces 0007-Linux-Only-use-onboard-by-default-if-it-s-installed.patch
  * replaces 0008-install-fonts.patch
  * add mimespec for .ubz files
  * also improve handling of onboard on-screen keyboard
- refactor: clean spec file</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1663675200">- fix file list in spec file
  - do not include /usr/share/mime/packages directory owned by
    filesystem</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1669723200">- update to version 1.7.0~git20221129.9de37af
- feat: user configurable shortcuts
  * replace 0460-shortcut-configuration.patch by updated
    0686-shortcut-configuration.patch
  * add 9686-cmake-add-shortcut-manager.patch
    add new files to CMakeLists.txt
- fix: background drawing when switching page size
  * update 0551-common-background-drawing.patch
- fix: mirror pixmap size
  * update 0569-scale-mirror-pixmap.patch
- remove upstreamed patches
  * remove upstreamed 0604-qt-5.12-compatibility.patch
  * remove upstreamed 0629-bug-ruler.patch
  * remove upstreamed 0633-improve-displaymanager.patch
  * remove upstreamed 0637-fix-pdf-background-export.patch
  * remove upstreamed 0641-fix-font-handling.patch
  * remove upstreamed 0649-fix-pdf-export-scaling.patch
- chore: replace qmake by cmake build system
  * remove 0651-chore-reorganize-linux-build.patch
  * add 0698-add-cmake-build-system.patch
- fix: page size for PDF export
  * add 0677-pdf-export-page-size.patch
- disable software update from openboard web page
  * add 9117-disable-software-update.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674648000">- BuildRequire pkgconfig(libavdevice) instead of ffmpeg-devel: let
  OBS figure out the right packages that do not conlfict.</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1687089600">- update to version 1.7.0~git20230614.2ff8f29
  * feature freeze before release
- remove upstreamed patches
  * remove upstreamed 0551-common-background-drawing.patch
  * remove upstreamed 0677-pdf-export-page-size.patch
- update patches to match updated sources
  * update 0686-shortcut-configuration.patch
  * update 0698-add-cmake-build-system.patch
  * update 9117-disable-software-update.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1702123200">- update to release version 1.7.0
- update patches to match updated sources
  * update 0569-scale-mirror-pixmap.patch
  * update 0686-shortcut-configuration.patch
- replace build system patch
  * remove 0698-add-cmake-build-system.patch
  * add 0830-cmake-community-builds.patch
- switch from pgkconfig to cmake for some BuildRequires</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1715169600">- update to release version 1.7.1
- remove upstreamed patches
  * remove 0830-cmake-community-builds.patch
  * remove 9686-cmake-add-shortcut-manager.patch
- update patch to match updated sources
  * replace 0686-shortcut-configuration.patch by 0955-shortcut-configuration.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1717934400">- fix a problem with latest plasma5 security patches
  * add 1010-fix-qapp-cast.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1720094400">- compatibility with poppler &gt;= 24.05
  * poppler &gt;= 24.05 requires c++20
  * add 0961-use-cpp20.patch
  * add 0962-fix-cpp20-compatibility.patch
  * both patches are already merged upstream
    and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1723550400">- compatibility with ffmpeg-7
  * add 1017-ffmpeg7.patch
  * patch is already merged and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1731931200">- update to release version 1.7.2
- remove upstreamed patches
  * remove 0569-scale-mirror-pixmap.patch
  * remove 0961-use-cpp20.patch
  * remove 0962-fix-cpp20-compatibility.patch
  * remove 1010-fix-qapp-cast.patch
  * remove 1017-ffmpeg7.patch
- adjust patches to new version
  * adjust 0955-shortcut-configuration.patch
  * adjust 9117-disable-software-update.patch
- add patch to circumvent some problems on wayland
  * add 1165-fix-some-wayland-problems.patch
- switch from Qt5 to Qt6</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1734955200">- update to release version 1.7.3
- remove patch 1165-fix-some-wayland-problems.patch
  * users reported problems with this patch
  * will not be merged upstream</changelog>
</package>
<package pkgid="0a742e9777306a4a26bcbcce93d8cb3c2159990dcacbc8a48bd93adfe48bf0d0" name="OpenBoard" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="bp156.2.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1612785600">- Compile translations so they are installed (bsc#1181857)</changelog>
  <changelog author="Martin Winter &lt;martin@winter-rosenheim.de&gt;" date="1640692800">- update to OpenBoard 1.6.1
  - adapt patches</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1647345600">- add 0573-compile-with-poppler-22.03.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1654516800">- Update to 1.6.2
  - see https://github.com/OpenBoard-org/OpenBoard/releases/tag/v1.6.2
  - adapt 0001-Rewrite-libs.pri.patch
  - adapt 0002-Install-to-correct-directories-on-linux.patch
  - drop 0573-compile-with-poppler-22.03.patch (upstreamed)</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1655121600">- Update to 1.6.3
  - see https://github.com/OpenBoard-org/OpenBoard/releases/tag/v1.6.3</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1655640000">- update to 1.7.0~git47a96e1
  - use development branch to enable build for Tumbleweed
    (switch from QWebKit to QWebEngine)
- add patches fixing known issues according to existing upstream PRs
  - 0551-common-background-drawing.patch
  - 0569-scale-mirror-pixmap.patch
  - 0604-qt-5.12-compatibility.patch
  - 0629-bug-ruler.patch
  - 0633-improve-displaymanager.patch
- remove unused build dependencies</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1656072000">- fix several issues
  - add 0008-install-fonts.patch
  - add 0637-fix-pdf-background-export.patch
  - add 0641-fix-font-handling.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1656072001">- minor changes in spec file</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1663156800">- update to version 1.7.0~git20220914.47a96e1
- feat: user configurable shortcuts
  * add 0460-shortcut-configuration.patch
- fix: boxing in single screen mode
  * update 0633-improve-displaymanager.patch
- fix: PDF background export
  * update 0637-fix-pdf-background-export.patch
- fix: font handling
  * update 0641-fix-font-handling.patch
- fix: PDF export scaling
  * add 0649-fix-pdf-export-scaling.patch
- refactor: Linux build and installation
  * add 0651-chore-reorganize-linux-build.patch
  * replaces 0001-Rewrite-libs.pri.patch
  * replaces 0002-Install-to-correct-directories-on-linux.patch
  * replaces 0003-podcast.pri-port-to-pkgconfig.patch
  * replaces 0004-Use-QStandardPaths-to-locate-resources.patch
  * replaces 0005-Add-svg-icon.patch
  * replaces 0006-pro-Remove-UB_THIRDPARTY_INTERACTIVE.patch
  * replaces 0007-Linux-Only-use-onboard-by-default-if-it-s-installed.patch
  * replaces 0008-install-fonts.patch
  * add mimespec for .ubz files
  * also improve handling of onboard on-screen keyboard
- refactor: clean spec file</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1663675200">- fix file list in spec file
  - do not include /usr/share/mime/packages directory owned by
    filesystem</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1669723200">- update to version 1.7.0~git20221129.9de37af
- feat: user configurable shortcuts
  * replace 0460-shortcut-configuration.patch by updated
    0686-shortcut-configuration.patch
  * add 9686-cmake-add-shortcut-manager.patch
    add new files to CMakeLists.txt
- fix: background drawing when switching page size
  * update 0551-common-background-drawing.patch
- fix: mirror pixmap size
  * update 0569-scale-mirror-pixmap.patch
- remove upstreamed patches
  * remove upstreamed 0604-qt-5.12-compatibility.patch
  * remove upstreamed 0629-bug-ruler.patch
  * remove upstreamed 0633-improve-displaymanager.patch
  * remove upstreamed 0637-fix-pdf-background-export.patch
  * remove upstreamed 0641-fix-font-handling.patch
  * remove upstreamed 0649-fix-pdf-export-scaling.patch
- chore: replace qmake by cmake build system
  * remove 0651-chore-reorganize-linux-build.patch
  * add 0698-add-cmake-build-system.patch
- fix: page size for PDF export
  * add 0677-pdf-export-page-size.patch
- disable software update from openboard web page
  * add 9117-disable-software-update.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674648000">- BuildRequire pkgconfig(libavdevice) instead of ffmpeg-devel: let
  OBS figure out the right packages that do not conlfict.</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1687089600">- update to version 1.7.0~git20230614.2ff8f29
  * feature freeze before release
- remove upstreamed patches
  * remove upstreamed 0551-common-background-drawing.patch
  * remove upstreamed 0677-pdf-export-page-size.patch
- update patches to match updated sources
  * update 0686-shortcut-configuration.patch
  * update 0698-add-cmake-build-system.patch
  * update 9117-disable-software-update.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1702123200">- update to release version 1.7.0
- update patches to match updated sources
  * update 0569-scale-mirror-pixmap.patch
  * update 0686-shortcut-configuration.patch
- replace build system patch
  * remove 0698-add-cmake-build-system.patch
  * add 0830-cmake-community-builds.patch
- switch from pgkconfig to cmake for some BuildRequires</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1715169600">- update to release version 1.7.1
- remove upstreamed patches
  * remove 0830-cmake-community-builds.patch
  * remove 9686-cmake-add-shortcut-manager.patch
- update patch to match updated sources
  * replace 0686-shortcut-configuration.patch by 0955-shortcut-configuration.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1717934400">- fix a problem with latest plasma5 security patches
  * add 1010-fix-qapp-cast.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1720094400">- compatibility with poppler &gt;= 24.05
  * poppler &gt;= 24.05 requires c++20
  * add 0961-use-cpp20.patch
  * add 0962-fix-cpp20-compatibility.patch
  * both patches are already merged upstream
    and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1723550400">- compatibility with ffmpeg-7
  * add 1017-ffmpeg7.patch
  * patch is already merged and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1731931200">- update to release version 1.7.2
- remove upstreamed patches
  * remove 0569-scale-mirror-pixmap.patch
  * remove 0961-use-cpp20.patch
  * remove 0962-fix-cpp20-compatibility.patch
  * remove 1010-fix-qapp-cast.patch
  * remove 1017-ffmpeg7.patch
- adjust patches to new version
  * adjust 0955-shortcut-configuration.patch
  * adjust 9117-disable-software-update.patch
- add patch to circumvent some problems on wayland
  * add 1165-fix-some-wayland-problems.patch
- switch from Qt5 to Qt6</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1734955200">- update to release version 1.7.3
- remove patch 1165-fix-some-wayland-problems.patch
  * users reported problems with this patch
  * will not be merged upstream</changelog>
</package>
<package pkgid="4294ecadcf3087f628c927db24d7c1edbcfa41ade7ec40968468ef7e4ba46167" name="SDL2_sound" arch="src">
  <version epoch="0" ver="2.0.4" rel="bp156.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648296000">- New package SDL2_sound for build.opensuse.org. In comparison to
  SDL_sound (1.x):
  * Removed support for QuickTime, Speex and MikMod
  * SDL_sound 2's public API has not changed at all from 1.x
  * SDL_sound.h requires SDL2 now (can't mix SDL2_sound with SDL1)
  * The library name changed to -lSDL2_sound
- Drop SDL_sound-1.0.3-nompglib.patch, no longer applies
- Drop baselibs.conf</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Move to 2.0.1.g17 (df3fc77)
  * Resolve build failures on Leap 15.3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687694400">- Update to snapshot 2.0.1+g60 (53f66a30)
  * Avoid division by zero with certain uncompressed WAV files
  * A pkgconfig file was added</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Update to release 2.0.2
  * No further changes from the last snapshot 2.0.1+g60</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1736769600">- Update to release 2.0.4
  * Update bundled stb_vorbis to address CVE-2023-45676,
    CVE-2023-45677, CVE-2023-45679, CVE-2023-45680,
    CVE-2023-45681, CVE-2023-45682.</changelog>
</package>
<package pkgid="618a695b86ed98f408803af763f76bad6ea259270f611e08bd354f70e6810c66" name="SDL2_sound-devel" arch="aarch64">
  <version epoch="0" ver="2.0.4" rel="bp156.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648296000">- New package SDL2_sound for build.opensuse.org. In comparison to
  SDL_sound (1.x):
  * Removed support for QuickTime, Speex and MikMod
  * SDL_sound 2's public API has not changed at all from 1.x
  * SDL_sound.h requires SDL2 now (can't mix SDL2_sound with SDL1)
  * The library name changed to -lSDL2_sound
- Drop SDL_sound-1.0.3-nompglib.patch, no longer applies
- Drop baselibs.conf</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Move to 2.0.1.g17 (df3fc77)
  * Resolve build failures on Leap 15.3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687694400">- Update to snapshot 2.0.1+g60 (53f66a30)
  * Avoid division by zero with certain uncompressed WAV files
  * A pkgconfig file was added</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Update to release 2.0.2
  * No further changes from the last snapshot 2.0.1+g60</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1736769600">- Update to release 2.0.4
  * Update bundled stb_vorbis to address CVE-2023-45676,
    CVE-2023-45677, CVE-2023-45679, CVE-2023-45680,
    CVE-2023-45681, CVE-2023-45682.</changelog>
</package>
<package pkgid="ae4ee273b78140ea49d7303396104d8427b82e2b92020ab0d28cd61c9bf8a720" name="SDL2_sound-devel" arch="i586">
  <version epoch="0" ver="2.0.4" rel="bp156.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648296000">- New package SDL2_sound for build.opensuse.org. In comparison to
  SDL_sound (1.x):
  * Removed support for QuickTime, Speex and MikMod
  * SDL_sound 2's public API has not changed at all from 1.x
  * SDL_sound.h requires SDL2 now (can't mix SDL2_sound with SDL1)
  * The library name changed to -lSDL2_sound
- Drop SDL_sound-1.0.3-nompglib.patch, no longer applies
- Drop baselibs.conf</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Move to 2.0.1.g17 (df3fc77)
  * Resolve build failures on Leap 15.3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687694400">- Update to snapshot 2.0.1+g60 (53f66a30)
  * Avoid division by zero with certain uncompressed WAV files
  * A pkgconfig file was added</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Update to release 2.0.2
  * No further changes from the last snapshot 2.0.1+g60</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1736769600">- Update to release 2.0.4
  * Update bundled stb_vorbis to address CVE-2023-45676,
    CVE-2023-45677, CVE-2023-45679, CVE-2023-45680,
    CVE-2023-45681, CVE-2023-45682.</changelog>
</package>
<package pkgid="99b728aeffbd96b6a0cd8f0f285bc739898963a6cd0cc450d6317a95b971d101" name="SDL2_sound-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.4" rel="bp156.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648296000">- New package SDL2_sound for build.opensuse.org. In comparison to
  SDL_sound (1.x):
  * Removed support for QuickTime, Speex and MikMod
  * SDL_sound 2's public API has not changed at all from 1.x
  * SDL_sound.h requires SDL2 now (can't mix SDL2_sound with SDL1)
  * The library name changed to -lSDL2_sound
- Drop SDL_sound-1.0.3-nompglib.patch, no longer applies
- Drop baselibs.conf</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Move to 2.0.1.g17 (df3fc77)
  * Resolve build failures on Leap 15.3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687694400">- Update to snapshot 2.0.1+g60 (53f66a30)
  * Avoid division by zero with certain uncompressed WAV files
  * A pkgconfig file was added</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Update to release 2.0.2
  * No further changes from the last snapshot 2.0.1+g60</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1736769600">- Update to release 2.0.4
  * Update bundled stb_vorbis to address CVE-2023-45676,
    CVE-2023-45677, CVE-2023-45679, CVE-2023-45680,
    CVE-2023-45681, CVE-2023-45682.</changelog>
</package>
<package pkgid="51fb1bc7ef9b2b8149dc8d712e35276fa192f3d532428717a1748edc401bb469" name="SDL2_sound-devel" arch="s390x">
  <version epoch="0" ver="2.0.4" rel="bp156.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648296000">- New package SDL2_sound for build.opensuse.org. In comparison to
  SDL_sound (1.x):
  * Removed support for QuickTime, Speex and MikMod
  * SDL_sound 2's public API has not changed at all from 1.x
  * SDL_sound.h requires SDL2 now (can't mix SDL2_sound with SDL1)
  * The library name changed to -lSDL2_sound
- Drop SDL_sound-1.0.3-nompglib.patch, no longer applies
- Drop baselibs.conf</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Move to 2.0.1.g17 (df3fc77)
  * Resolve build failures on Leap 15.3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687694400">- Update to snapshot 2.0.1+g60 (53f66a30)
  * Avoid division by zero with certain uncompressed WAV files
  * A pkgconfig file was added</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Update to release 2.0.2
  * No further changes from the last snapshot 2.0.1+g60</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1736769600">- Update to release 2.0.4
  * Update bundled stb_vorbis to address CVE-2023-45676,
    CVE-2023-45677, CVE-2023-45679, CVE-2023-45680,
    CVE-2023-45681, CVE-2023-45682.</changelog>
</package>
<package pkgid="2a263ce3e8a3a1f56b2688b67372ec9982db7b405ac00ea6746957a9a9d72c28" name="SDL2_sound-devel" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="bp156.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648296000">- New package SDL2_sound for build.opensuse.org. In comparison to
  SDL_sound (1.x):
  * Removed support for QuickTime, Speex and MikMod
  * SDL_sound 2's public API has not changed at all from 1.x
  * SDL_sound.h requires SDL2 now (can't mix SDL2_sound with SDL1)
  * The library name changed to -lSDL2_sound
- Drop SDL_sound-1.0.3-nompglib.patch, no longer applies
- Drop baselibs.conf</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Move to 2.0.1.g17 (df3fc77)
  * Resolve build failures on Leap 15.3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687694400">- Update to snapshot 2.0.1+g60 (53f66a30)
  * Avoid division by zero with certain uncompressed WAV files
  * A pkgconfig file was added</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Update to release 2.0.2
  * No further changes from the last snapshot 2.0.1+g60</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1736769600">- Update to release 2.0.4
  * Update bundled stb_vorbis to address CVE-2023-45676,
    CVE-2023-45677, CVE-2023-45679, CVE-2023-45680,
    CVE-2023-45681, CVE-2023-45682.</changelog>
</package>
<package pkgid="5017b96577b2737192b1b835fae85ab2c468ca3bdc7fbae977a416f5e49e4f3c" name="abcde" arch="noarch">
  <version epoch="0" ver="2.9.3" rel="bp156.5.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 2.6
  + Fix finding $CDROM on OS X. Closes issue 71.
  + USEID3 and USEID3V2 variables are unused now, so remove them.
    Closes issue 73.
  + Clean up movement to eyeD3, remove id3v2 remnants. Closes issue 74.
  + Fix infinite loop if cddb fails. Closes: #687038 in Debian
  + Switch from Musepack SV7 to SV8.
  + Allow aac encoding with neroAacEnc. Closes issue 8.
  + Allow opus encoding with opusenc. Closes issue 70.
  + Fix typo: s/CUEWAVEFILE/CUEWAVFILE/ so that abcde.mkcue should now
    produce working cue files. Closes issue 78.
  + Remove no-op -q option. Closes issue 106.
  + Fix issue 112: perl encoding pragma deprecation.
  + Fix option parsing for multiple output formats. Closes issue 115.
  + Fix eyeD3 tagging for cddb entries without year. Closes issue 107
  + Add mention of CD-TEXT support in the man page. Closes issue 102.
  + Make Y/N prompting more consistent. Closes issue 95
  + Remove the no-op -B option. Closes: #426531 in Debian
  + Document the need to escape parentheses in tag comments.
    Closes: #256941 in Debian.
  + Concatenate option steps on -t/-T option. Closes: #391294 in Debian
  + Try to use bsd-mailx where possible to force UTF-8 for cddb-tool mail
    submissions. If not possible, attempt to force UTF-8 via the
    environment and fall back to mail instead. Closes: #756289 in Debian,
    issue 111.
- Make cd-discid live in it's own package
- Update Urls and dowload sources
- Refresh the old abcde_2.3.99.6-quote.patch to abcde_2.6-quote.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1422100800">- re-add man pages, last update accidentally removed them</changelog>
  <changelog author="p.drouand@gmail.com" date="1445860800">- Update to version 2.7.1
  * Rebuild of the abcde Makefile.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=4
  * Fix incorrect use of 'break'.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=6
  * Make older versions of id3 happy when 'Genre' field is empty.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=8
  * Add YEAR and GENRE variables to do_getalbumart().
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=9
  * Support added for encoding to True Audio using tta while still
    supporting the older ttaenc. Tagging is with mid3v2.
  * Support added for encoding to MPEG-1 Audio Layer II (mp2)
    with either twolame or FFmpeg / avconv. Tagging with mid3v2.
  * Encoding to WavPack with FFmpeg. Some slight changes to WavPack
    syntax with backward compatibility built in for abcde 2.7.
  * Encoding to m4a container with FFmpeg or avconv. This allows
    for alac encoding with FFmpeg's reverse engineered alac encoder.
  * AAC encoding with fhgaacenc via Wine. Tagging is provided
    by AtomicParsley which has been added back to abcde :). This
    allows encoding with HE-AAC v2, unavailable with qaac.
  * Support added for AAC encoding with qaac via Wine. This
    also allows for Apple Lossless Audio Coding (alac) using
    either qaac or refalac. This closes Issue 142.
  * Grab year information too when using musicbrainz.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=10
- Changes from version 2.7
  * Rewrite of abcde's mungefilename function.
    This closes Issues 72 and 135.
  * TRACKTOTAL now written to flac and ogg files.
    This resolves Issue 76.
  * Support added for the downloading of album art.
    Detailed documentation added to the abcde FAQ document
    although the sane defaults in place will guarantee a good
    experience even for those who do not read documentation!
    This closes Issue 33.
  * Support added for ripping with the GNU Compact Disc
    Input and Control library (libcdio) as requested by
    both gentoo and NixOS. The utility used is cd-paranoia
    and can best be called from a conf file as follows:
    CDROMREADERSYNTAX=libcdio
    CD_PARANOIA=cd-paranoia
    CDPARANOIAOPTS="--never-skip=40 --verbose"
    with the CD_PARANOIA variable giving the correct path
    to cd-paranoia.
  * Fix for encoding with bladeenc and usepipes.
  * Fix for broken ripping with dagrab. Closes Issue 140.
  * Fix for diskutil selecting wrong disk on OS X.
    closes Issue 139.
  * Added some error checking and documentation for
    the abcde-musicbrainz-tool. Closes issue 138.
  * New variables for m4a/aac encoding options to be
    manipulated in a users ~/.abcde.conf file:
    1. FAACENCOPTS for faac encoding options
    2. NEROAACENCOPTS for neroAacEnc options
    3. FDKAACENCOPTS for fdkaacenc options
    Note that these options replace the now obsolete AACENCOPTS.
  * Check added for neroAacTag when encoding with neroAacEnc.
  * Several additions to usepipes with the following encoders
    being added:
    1. mp3enc: mp3
    2. speexenc: Speex
    3. mpcenc: Musepack SV8
    4. wavpack: WavPack
    5. faac: aac
    6. neroAacEnc: aac
    7. fdkaac: aac
    The cd ripper cdda2wav (icedax) has also been added.
  * Ripping and encoding with 'usepipes' fixed. This fix
    closes Issue 46.
  * Suggested encoding options for mp3enc added to the sample
    abcde.conf. Last release of mp3enc in 1998 but it still
    works flawlessly with a modern abcde!
  * Suggested encoding options for l3enc added to the sample
    abcde.conf. Congratulations to abcde which in 2015 still
    works with l3enc which saw its final release in 1997!
  * Fix for -o option use with options and multiple outputs.
    This allows for commandline options such as the following:
    abcde -o 'flac:-8,mp3:-b 320'
    This closes Issue 136.
  * Support added for ReplayGain with WavPack encoding.
  * Fix for MusePack to allow the use of the SV8 ReplayGain
    application 'mpcgain'.
  * Monkey's Audio (ape) encoding added. Tagging is with
    Robert Muth's apetag.
  * Simplify Opus tagging.This closes Issue 133.
  * Allow 'clean' when OUTPUTTYPE=wav, broken for some time.
    This closes Issue 94.
  * Clarification that CDDBLOCALRECURSIVE=y is required for
    local CDDB search. This partially resolves Issue 121.
  * AtomicParsley removed from debian/control, WavPack added.
  * Details of abcde's handling of faac compiled with and
    without mp4v2 added as a new entry to FAQs.
  * Fix to allow display of the 'date' meta tag generated
    by eyeD3 in vlc, Audacious and friends.
    This closes Issue 126.
  * Fix for flac floating point error. closes Issue 113.
  * Formalised 3 methods of mp3 tagging using ID3TAGV:
    1.id3v2.4 using eyeD3 (set in abcde as the default)
    2.id3v2.3 using id3v2
    3.id3v1 using id3
    Fixes issue 101.
  * Support for WavPack added. Closes issue 123.
  * Fix for mp3 encoding with different versions of eyeD3.
  * Major AAC encoding cleanup, including addition of the fdkaac encoder.
- Update patch abcde_2.6-quote.patch &gt; abcde-quote.patch</changelog>
  <changelog author="adrian@suse.de" date="1451908800">- add recommends to eyeD3, abcde is using it by default since 2.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1461585600">- Update to version 2.7.2
  * When using musicbrainz, don't assume that there will be release
    events attached to a particular CD release. Bug fix for the addition
    of year information support in 2.7.1.
  * Support for output to the Matroska container (mka). Encoder
    is FFmpeg (or avconv). Typical conf file syntax would be:
    MKAENCODERSYNTAX=ffmpeg
    FFMPEG=ffmpeg
    FFMPEGENCOPTS="-c:a ac3 -b:a 448k"
    OUTPUTTYPE="mka"
  * Add id3tag mp3 tagger as this is the tagger available to
    OpenBSD users.
  * Allow for cddb response 500. This closes Issue 26:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=26
  * Fix for 'expansion of $REDIR' bug on MacOSX. This closes Issue 22:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=22
  * Makefile adjusted to allow the sample abcde.conf file to be
    installed by default to /etc rather than $(prefix)/etc.
    https://bugs.archlinux.org/task/46671
  * Allow getalbumart to correctly place cover image when single
    track is selected. This closes Issue 25:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=25
- Update abcde-quote.patch
- Set BuildArch as noarch; the package doesn't contain any binary</changelog>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to version 2.8.1
  * Fix silly error introduced in abcde-musicbrainz-tool when
    fixing bug 30. Thanks to Thomas Klausner for the bug/patch.
    Closes Issue 52:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=52
  version 2.8:
  * Make fdkaac the default for m4a encoding. Faac can still be
    selected for m4a encding via ~/.abcde.conf file but best not
    to :).
  * Split user-definable mungefilename function into
    mungetrackname, mungeartistname, and mungealbumname, each of
    which default to mungefilename Thanks to Gerald Turner for the
    patch and enhancement request. This closes Issue 39:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=39
  * FAQs: Clarify the exit from multi-result CDDB search.
  * Fix to allow multiple output formats when aac fallback is
    triggered. Thanks to Birk Bremer for the bug report.
    This closes Issue 35:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=35
  * Fix for some erroneous error and status logging. Thanks to
    Christian Wasem for the bug report and fix. This closes Issue
    32: https://abcde.einval.com/bugzilla/show_bug.cgi?id=32
  * Add support for trying multiple CD lookup services in
    order. Thanks to Gabriel Rosenkoetter for the patch. Closes
    Issue 42: https://abcde.einval.com/bugzilla/show_bug.cgi?id=42
  * Add Recommends on glyrc and imagemagick in Debian
    packaging. Closes Debian Bug #827626
  * Fix up handling of the first few sectors when reading
    from a whole-CD flac file or using cdparanoia in one-track
    mode. Thanks to Matthias König for the patch. Closes Issue
    44: https://abcde.einval.com/bugzilla/show_bug.cgi?id=44
  * Tweak the fix in musicbrainz for handling sketchy returned
    data some more. Hopefully closes Issue 30:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=30
  * Re-enable some commented out cdparanoia/debug code in
    do_discid. Closes Issue 14:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=14
  * Add "-a" to lots of grep calls in case of "binary" looking
    data, e.g. non-ascii text in track titles!
    Closes Issue 24:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=24
  * Add "-L" to default curl options, to follow redirects if
    needed. Closes Issue 40:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=40
    Thanks to Gabriel Rosenkoetter for the patch.
  * Switch default from "cddb" to "musicbrainz" for track lookup
    Closes Debian Bug #842178</changelog>
  <changelog author="rpm@fthiessen.de" date="1533729600">- Added use-cddbmethod.patch needed as factory does not provide
  perl(MusicBrainz::DiscID)
- Added fix-makefile-version-2.9.2.patch
- Added keyring for verification
- Update to 2.9.2:
  * Fix up lookup code to deal with spaces etc. in directory names
  * Cope with "stub" releases in Musicbrainz
  * Always call glyrc with LC_ALL=C. Thanks to Andreas Vögele for the
  report and the suggested fix.
  * Add a link to the CDDB data format in the abcde man page.
  * More fixups of track number padding. Thanks to John Straw for the
  patch.
  * Allow for embedding of  album art downloaded by the getalbumart
  function. Currently this is available for flac (using metaflac),
  mp3 (using eyed3), m4a (using AtomicParsley) and
  WavPack aka wv (using wvtag).
  * Use md5 rather than md5sum under macOS.
  * Support added for encoding with
  Audio Interchange File Format (AIFF).
  * Allow selection of either cddb or musicbrainz from the command line
  * Allow for embedding with do_embedalbumart() for single track
  encodes when OUTPUTFORMAT and ONETRACKOUTPUTFORMAT are different.
  * Experimental support for embedding albumart with ogg files.
  * Massive rework of CD lookup code so support multiple sources
  better. Thanks to Gabriel Rosenkoetter for his initial idea in this
  area, and to Tomasz Goliński on irc for initial inspiration on how
  this should work better.
  There are now 3 different options for CD lookup: cddb, musicbrainz and
  cdtext. They can all be listed in a comma-separated list for
  CDDBMETHOD and the code will now call all of them in the sequence
  listed. All the results will be combined into one list at the end for
  the user to select, just like would have previously worked for one
  source only.
  * Fix Musicbrainz ID calculation in makeids()
  * Fix abcde.mkcue() when handling the --wholedisk option. Thanks to
  Nino Burini for the patch.
  * Add more comprehensive examples for filename munging in the example
  config file.
  * Add a more better fix for the year lookup problem in
  abcde-musicbrainz-tool
  * Redirect stderr on "which" calls to clear up error noise on some
  systems.
  * Add Irix support.
  * Rework abcde-musicbrainz-tool to work with WebService::MusicBrainz
  Also added a specific dependency on version 1.0.4 or newer, so
  abcde-musicbrainz-tool will abort if the version found is too old.
  Since tweaked to deal with multi-artist albums and tracks more
  completely.
  * Add resume support in do_getalbumart()
  * Fix getopts setup for "P". Thanks to Alan W. Kerr for reporting this.
  * Major set of code cleanups to fix up lots of warnings found with
  shellcheck, and a few other style issues:
  + Lots of quoting fixes
  + Use $( instead of `
  + Stop using -o and -a syntax with if [ - use || or &amp;&amp; instead
  + Wrap and shorten some very long lines
  * Wrap some output messages so they fit on a standard width console
  * Factor out repeated code and make page() more useful
  * Add version check before resuming from an old ripping run
- Dropped abcde-quote.patch</changelog>
  <changelog author="jengelh@inai.de" date="1533988800">- Replace summary line with an actual summary. Fix broken
  sentence grammar in description.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1550577600">- Update to 2.9.3
  * Replace non-portable sed code for generating offset list with some
    simple awk instead. Should now work on FreeBSD again.
  * Deal with bizarre cdda2wav behaviour when doing cdtext lookup - it
    writes the track information to *stdin*. Closes Issue #89:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=89
  * Add a warning in abcde.conf about mayb needing to install recode before
    using it in mungefilename()
- Clean with spec-cleaner
- Drop fix-makefile-version-2.9.2.patch which is fixed upstream</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551873600">- Added dependency on WebService::MusicBrainz</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Re-enabled musicbrainz, as both perl(MusicBrainz::DiscID) and
  perl(WebService::MusicBrainz) are accepted into Factory now.
  Note that abcde uses both MusicBrainz and CDDB by default.
  Build without MusicBrainz can be made by setting
  %_without_musibrainz 1 in prjconf.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1604491200">- Fix dependency on perl(WebService::MusicBrainz) to work with
  1.0.5 (boo#1178312)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1723636800">- Fix arithmetic on non-octal track numbers (boo#1219527)
  * add abcde.bug.204.patch</changelog>
</package>
<package pkgid="c025dc9fbc4de71701b60222fc54c3fd0c7005b81b725bee76a775f2f0812c5e" name="abcde" arch="src">
  <version epoch="0" ver="2.9.3" rel="bp156.5.3.1"/>
  <changelog author="coolo@suse.de" date="1196164800">- update to 2.3.99.6: tons of debian bug reports fixed, e.g.
  * Default to UNICODE (UTF8) tags and comments (Closes: #282332).
  - Added CDDBPROTO option in config file (Closes: #349951)
  * Added a missing "INDEX 01" entry for CUE sheet creation.
  * Avoid completing the encoding of files if we aborted previously.
  * Embed the CUE sheet if we have a cuesheet file and we have a single FLAC
    file, even if we are not tagging. This way we can use the file as a source
    even if it is not tagged/named properly.
  * Fails to quote filenames properly (Closes: #355296)</changelog>
  <changelog author="coolo@suse.de" date="1225454400">- apply patch from bnc#419800 to fix
  "abcde quotes some variables incorrectly"</changelog>
  <changelog author="tschmidt@novell.com" date="1297339200">- added recommends id3v2</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 2.6
  + Fix finding $CDROM on OS X. Closes issue 71.
  + USEID3 and USEID3V2 variables are unused now, so remove them.
    Closes issue 73.
  + Clean up movement to eyeD3, remove id3v2 remnants. Closes issue 74.
  + Fix infinite loop if cddb fails. Closes: #687038 in Debian
  + Switch from Musepack SV7 to SV8.
  + Allow aac encoding with neroAacEnc. Closes issue 8.
  + Allow opus encoding with opusenc. Closes issue 70.
  + Fix typo: s/CUEWAVEFILE/CUEWAVFILE/ so that abcde.mkcue should now
    produce working cue files. Closes issue 78.
  + Remove no-op -q option. Closes issue 106.
  + Fix issue 112: perl encoding pragma deprecation.
  + Fix option parsing for multiple output formats. Closes issue 115.
  + Fix eyeD3 tagging for cddb entries without year. Closes issue 107
  + Add mention of CD-TEXT support in the man page. Closes issue 102.
  + Make Y/N prompting more consistent. Closes issue 95
  + Remove the no-op -B option. Closes: #426531 in Debian
  + Document the need to escape parentheses in tag comments.
    Closes: #256941 in Debian.
  + Concatenate option steps on -t/-T option. Closes: #391294 in Debian
  + Try to use bsd-mailx where possible to force UTF-8 for cddb-tool mail
    submissions. If not possible, attempt to force UTF-8 via the
    environment and fall back to mail instead. Closes: #756289 in Debian,
    issue 111.
- Make cd-discid live in it's own package
- Update Urls and dowload sources
- Refresh the old abcde_2.3.99.6-quote.patch to abcde_2.6-quote.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1422100800">- re-add man pages, last update accidentally removed them</changelog>
  <changelog author="p.drouand@gmail.com" date="1445860800">- Update to version 2.7.1
  * Rebuild of the abcde Makefile.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=4
  * Fix incorrect use of 'break'.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=6
  * Make older versions of id3 happy when 'Genre' field is empty.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=8
  * Add YEAR and GENRE variables to do_getalbumart().
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=9
  * Support added for encoding to True Audio using tta while still
    supporting the older ttaenc. Tagging is with mid3v2.
  * Support added for encoding to MPEG-1 Audio Layer II (mp2)
    with either twolame or FFmpeg / avconv. Tagging with mid3v2.
  * Encoding to WavPack with FFmpeg. Some slight changes to WavPack
    syntax with backward compatibility built in for abcde 2.7.
  * Encoding to m4a container with FFmpeg or avconv. This allows
    for alac encoding with FFmpeg's reverse engineered alac encoder.
  * AAC encoding with fhgaacenc via Wine. Tagging is provided
    by AtomicParsley which has been added back to abcde :). This
    allows encoding with HE-AAC v2, unavailable with qaac.
  * Support added for AAC encoding with qaac via Wine. This
    also allows for Apple Lossless Audio Coding (alac) using
    either qaac or refalac. This closes Issue 142.
  * Grab year information too when using musicbrainz.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=10
- Changes from version 2.7
  * Rewrite of abcde's mungefilename function.
    This closes Issues 72 and 135.
  * TRACKTOTAL now written to flac and ogg files.
    This resolves Issue 76.
  * Support added for the downloading of album art.
    Detailed documentation added to the abcde FAQ document
    although the sane defaults in place will guarantee a good
    experience even for those who do not read documentation!
    This closes Issue 33.
  * Support added for ripping with the GNU Compact Disc
    Input and Control library (libcdio) as requested by
    both gentoo and NixOS. The utility used is cd-paranoia
    and can best be called from a conf file as follows:
    CDROMREADERSYNTAX=libcdio
    CD_PARANOIA=cd-paranoia
    CDPARANOIAOPTS="--never-skip=40 --verbose"
    with the CD_PARANOIA variable giving the correct path
    to cd-paranoia.
  * Fix for encoding with bladeenc and usepipes.
  * Fix for broken ripping with dagrab. Closes Issue 140.
  * Fix for diskutil selecting wrong disk on OS X.
    closes Issue 139.
  * Added some error checking and documentation for
    the abcde-musicbrainz-tool. Closes issue 138.
  * New variables for m4a/aac encoding options to be
    manipulated in a users ~/.abcde.conf file:
    1. FAACENCOPTS for faac encoding options
    2. NEROAACENCOPTS for neroAacEnc options
    3. FDKAACENCOPTS for fdkaacenc options
    Note that these options replace the now obsolete AACENCOPTS.
  * Check added for neroAacTag when encoding with neroAacEnc.
  * Several additions to usepipes with the following encoders
    being added:
    1. mp3enc: mp3
    2. speexenc: Speex
    3. mpcenc: Musepack SV8
    4. wavpack: WavPack
    5. faac: aac
    6. neroAacEnc: aac
    7. fdkaac: aac
    The cd ripper cdda2wav (icedax) has also been added.
  * Ripping and encoding with 'usepipes' fixed. This fix
    closes Issue 46.
  * Suggested encoding options for mp3enc added to the sample
    abcde.conf. Last release of mp3enc in 1998 but it still
    works flawlessly with a modern abcde!
  * Suggested encoding options for l3enc added to the sample
    abcde.conf. Congratulations to abcde which in 2015 still
    works with l3enc which saw its final release in 1997!
  * Fix for -o option use with options and multiple outputs.
    This allows for commandline options such as the following:
    abcde -o 'flac:-8,mp3:-b 320'
    This closes Issue 136.
  * Support added for ReplayGain with WavPack encoding.
  * Fix for MusePack to allow the use of the SV8 ReplayGain
    application 'mpcgain'.
  * Monkey's Audio (ape) encoding added. Tagging is with
    Robert Muth's apetag.
  * Simplify Opus tagging.This closes Issue 133.
  * Allow 'clean' when OUTPUTTYPE=wav, broken for some time.
    This closes Issue 94.
  * Clarification that CDDBLOCALRECURSIVE=y is required for
    local CDDB search. This partially resolves Issue 121.
  * AtomicParsley removed from debian/control, WavPack added.
  * Details of abcde's handling of faac compiled with and
    without mp4v2 added as a new entry to FAQs.
  * Fix to allow display of the 'date' meta tag generated
    by eyeD3 in vlc, Audacious and friends.
    This closes Issue 126.
  * Fix for flac floating point error. closes Issue 113.
  * Formalised 3 methods of mp3 tagging using ID3TAGV:
    1.id3v2.4 using eyeD3 (set in abcde as the default)
    2.id3v2.3 using id3v2
    3.id3v1 using id3
    Fixes issue 101.
  * Support for WavPack added. Closes issue 123.
  * Fix for mp3 encoding with different versions of eyeD3.
  * Major AAC encoding cleanup, including addition of the fdkaac encoder.
- Update patch abcde_2.6-quote.patch &gt; abcde-quote.patch</changelog>
  <changelog author="adrian@suse.de" date="1451908800">- add recommends to eyeD3, abcde is using it by default since 2.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1461585600">- Update to version 2.7.2
  * When using musicbrainz, don't assume that there will be release
    events attached to a particular CD release. Bug fix for the addition
    of year information support in 2.7.1.
  * Support for output to the Matroska container (mka). Encoder
    is FFmpeg (or avconv). Typical conf file syntax would be:
    MKAENCODERSYNTAX=ffmpeg
    FFMPEG=ffmpeg
    FFMPEGENCOPTS="-c:a ac3 -b:a 448k"
    OUTPUTTYPE="mka"
  * Add id3tag mp3 tagger as this is the tagger available to
    OpenBSD users.
  * Allow for cddb response 500. This closes Issue 26:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=26
  * Fix for 'expansion of $REDIR' bug on MacOSX. This closes Issue 22:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=22
  * Makefile adjusted to allow the sample abcde.conf file to be
    installed by default to /etc rather than $(prefix)/etc.
    https://bugs.archlinux.org/task/46671
  * Allow getalbumart to correctly place cover image when single
    track is selected. This closes Issue 25:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=25
- Update abcde-quote.patch
- Set BuildArch as noarch; the package doesn't contain any binary</changelog>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to version 2.8.1
  * Fix silly error introduced in abcde-musicbrainz-tool when
    fixing bug 30. Thanks to Thomas Klausner for the bug/patch.
    Closes Issue 52:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=52
  version 2.8:
  * Make fdkaac the default for m4a encoding. Faac can still be
    selected for m4a encding via ~/.abcde.conf file but best not
    to :).
  * Split user-definable mungefilename function into
    mungetrackname, mungeartistname, and mungealbumname, each of
    which default to mungefilename Thanks to Gerald Turner for the
    patch and enhancement request. This closes Issue 39:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=39
  * FAQs: Clarify the exit from multi-result CDDB search.
  * Fix to allow multiple output formats when aac fallback is
    triggered. Thanks to Birk Bremer for the bug report.
    This closes Issue 35:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=35
  * Fix for some erroneous error and status logging. Thanks to
    Christian Wasem for the bug report and fix. This closes Issue
    32: https://abcde.einval.com/bugzilla/show_bug.cgi?id=32
  * Add support for trying multiple CD lookup services in
    order. Thanks to Gabriel Rosenkoetter for the patch. Closes
    Issue 42: https://abcde.einval.com/bugzilla/show_bug.cgi?id=42
  * Add Recommends on glyrc and imagemagick in Debian
    packaging. Closes Debian Bug #827626
  * Fix up handling of the first few sectors when reading
    from a whole-CD flac file or using cdparanoia in one-track
    mode. Thanks to Matthias König for the patch. Closes Issue
    44: https://abcde.einval.com/bugzilla/show_bug.cgi?id=44
  * Tweak the fix in musicbrainz for handling sketchy returned
    data some more. Hopefully closes Issue 30:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=30
  * Re-enable some commented out cdparanoia/debug code in
    do_discid. Closes Issue 14:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=14
  * Add "-a" to lots of grep calls in case of "binary" looking
    data, e.g. non-ascii text in track titles!
    Closes Issue 24:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=24
  * Add "-L" to default curl options, to follow redirects if
    needed. Closes Issue 40:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=40
    Thanks to Gabriel Rosenkoetter for the patch.
  * Switch default from "cddb" to "musicbrainz" for track lookup
    Closes Debian Bug #842178</changelog>
  <changelog author="rpm@fthiessen.de" date="1533729600">- Added use-cddbmethod.patch needed as factory does not provide
  perl(MusicBrainz::DiscID)
- Added fix-makefile-version-2.9.2.patch
- Added keyring for verification
- Update to 2.9.2:
  * Fix up lookup code to deal with spaces etc. in directory names
  * Cope with "stub" releases in Musicbrainz
  * Always call glyrc with LC_ALL=C. Thanks to Andreas Vögele for the
  report and the suggested fix.
  * Add a link to the CDDB data format in the abcde man page.
  * More fixups of track number padding. Thanks to John Straw for the
  patch.
  * Allow for embedding of  album art downloaded by the getalbumart
  function. Currently this is available for flac (using metaflac),
  mp3 (using eyed3), m4a (using AtomicParsley) and
  WavPack aka wv (using wvtag).
  * Use md5 rather than md5sum under macOS.
  * Support added for encoding with
  Audio Interchange File Format (AIFF).
  * Allow selection of either cddb or musicbrainz from the command line
  * Allow for embedding with do_embedalbumart() for single track
  encodes when OUTPUTFORMAT and ONETRACKOUTPUTFORMAT are different.
  * Experimental support for embedding albumart with ogg files.
  * Massive rework of CD lookup code so support multiple sources
  better. Thanks to Gabriel Rosenkoetter for his initial idea in this
  area, and to Tomasz Goliński on irc for initial inspiration on how
  this should work better.
  There are now 3 different options for CD lookup: cddb, musicbrainz and
  cdtext. They can all be listed in a comma-separated list for
  CDDBMETHOD and the code will now call all of them in the sequence
  listed. All the results will be combined into one list at the end for
  the user to select, just like would have previously worked for one
  source only.
  * Fix Musicbrainz ID calculation in makeids()
  * Fix abcde.mkcue() when handling the --wholedisk option. Thanks to
  Nino Burini for the patch.
  * Add more comprehensive examples for filename munging in the example
  config file.
  * Add a more better fix for the year lookup problem in
  abcde-musicbrainz-tool
  * Redirect stderr on "which" calls to clear up error noise on some
  systems.
  * Add Irix support.
  * Rework abcde-musicbrainz-tool to work with WebService::MusicBrainz
  Also added a specific dependency on version 1.0.4 or newer, so
  abcde-musicbrainz-tool will abort if the version found is too old.
  Since tweaked to deal with multi-artist albums and tracks more
  completely.
  * Add resume support in do_getalbumart()
  * Fix getopts setup for "P". Thanks to Alan W. Kerr for reporting this.
  * Major set of code cleanups to fix up lots of warnings found with
  shellcheck, and a few other style issues:
  + Lots of quoting fixes
  + Use $( instead of `
  + Stop using -o and -a syntax with if [ - use || or &amp;&amp; instead
  + Wrap and shorten some very long lines
  * Wrap some output messages so they fit on a standard width console
  * Factor out repeated code and make page() more useful
  * Add version check before resuming from an old ripping run
- Dropped abcde-quote.patch</changelog>
  <changelog author="jengelh@inai.de" date="1533988800">- Replace summary line with an actual summary. Fix broken
  sentence grammar in description.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1550577600">- Update to 2.9.3
  * Replace non-portable sed code for generating offset list with some
    simple awk instead. Should now work on FreeBSD again.
  * Deal with bizarre cdda2wav behaviour when doing cdtext lookup - it
    writes the track information to *stdin*. Closes Issue #89:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=89
  * Add a warning in abcde.conf about mayb needing to install recode before
    using it in mungefilename()
- Clean with spec-cleaner
- Drop fix-makefile-version-2.9.2.patch which is fixed upstream</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551873600">- Added dependency on WebService::MusicBrainz</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Re-enabled musicbrainz, as both perl(MusicBrainz::DiscID) and
  perl(WebService::MusicBrainz) are accepted into Factory now.
  Note that abcde uses both MusicBrainz and CDDB by default.
  Build without MusicBrainz can be made by setting
  %_without_musibrainz 1 in prjconf.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1604491200">- Fix dependency on perl(WebService::MusicBrainz) to work with
  1.0.5 (boo#1178312)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1723636800">- Fix arithmetic on non-octal track numbers (boo#1219527)
  * add abcde.bug.204.patch</changelog>
</package>
<package pkgid="0461aa3e68a7602794690b259224089652278b8dc2d74d88cc41caf507a95853" name="abcde" arch="noarch">
  <version epoch="0" ver="2.9.3" rel="bp156.5.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 2.6
  + Fix finding $CDROM on OS X. Closes issue 71.
  + USEID3 and USEID3V2 variables are unused now, so remove them.
    Closes issue 73.
  + Clean up movement to eyeD3, remove id3v2 remnants. Closes issue 74.
  + Fix infinite loop if cddb fails. Closes: #687038 in Debian
  + Switch from Musepack SV7 to SV8.
  + Allow aac encoding with neroAacEnc. Closes issue 8.
  + Allow opus encoding with opusenc. Closes issue 70.
  + Fix typo: s/CUEWAVEFILE/CUEWAVFILE/ so that abcde.mkcue should now
    produce working cue files. Closes issue 78.
  + Remove no-op -q option. Closes issue 106.
  + Fix issue 112: perl encoding pragma deprecation.
  + Fix option parsing for multiple output formats. Closes issue 115.
  + Fix eyeD3 tagging for cddb entries without year. Closes issue 107
  + Add mention of CD-TEXT support in the man page. Closes issue 102.
  + Make Y/N prompting more consistent. Closes issue 95
  + Remove the no-op -B option. Closes: #426531 in Debian
  + Document the need to escape parentheses in tag comments.
    Closes: #256941 in Debian.
  + Concatenate option steps on -t/-T option. Closes: #391294 in Debian
  + Try to use bsd-mailx where possible to force UTF-8 for cddb-tool mail
    submissions. If not possible, attempt to force UTF-8 via the
    environment and fall back to mail instead. Closes: #756289 in Debian,
    issue 111.
- Make cd-discid live in it's own package
- Update Urls and dowload sources
- Refresh the old abcde_2.3.99.6-quote.patch to abcde_2.6-quote.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1422100800">- re-add man pages, last update accidentally removed them</changelog>
  <changelog author="p.drouand@gmail.com" date="1445860800">- Update to version 2.7.1
  * Rebuild of the abcde Makefile.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=4
  * Fix incorrect use of 'break'.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=6
  * Make older versions of id3 happy when 'Genre' field is empty.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=8
  * Add YEAR and GENRE variables to do_getalbumart().
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=9
  * Support added for encoding to True Audio using tta while still
    supporting the older ttaenc. Tagging is with mid3v2.
  * Support added for encoding to MPEG-1 Audio Layer II (mp2)
    with either twolame or FFmpeg / avconv. Tagging with mid3v2.
  * Encoding to WavPack with FFmpeg. Some slight changes to WavPack
    syntax with backward compatibility built in for abcde 2.7.
  * Encoding to m4a container with FFmpeg or avconv. This allows
    for alac encoding with FFmpeg's reverse engineered alac encoder.
  * AAC encoding with fhgaacenc via Wine. Tagging is provided
    by AtomicParsley which has been added back to abcde :). This
    allows encoding with HE-AAC v2, unavailable with qaac.
  * Support added for AAC encoding with qaac via Wine. This
    also allows for Apple Lossless Audio Coding (alac) using
    either qaac or refalac. This closes Issue 142.
  * Grab year information too when using musicbrainz.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=10
- Changes from version 2.7
  * Rewrite of abcde's mungefilename function.
    This closes Issues 72 and 135.
  * TRACKTOTAL now written to flac and ogg files.
    This resolves Issue 76.
  * Support added for the downloading of album art.
    Detailed documentation added to the abcde FAQ document
    although the sane defaults in place will guarantee a good
    experience even for those who do not read documentation!
    This closes Issue 33.
  * Support added for ripping with the GNU Compact Disc
    Input and Control library (libcdio) as requested by
    both gentoo and NixOS. The utility used is cd-paranoia
    and can best be called from a conf file as follows:
    CDROMREADERSYNTAX=libcdio
    CD_PARANOIA=cd-paranoia
    CDPARANOIAOPTS="--never-skip=40 --verbose"
    with the CD_PARANOIA variable giving the correct path
    to cd-paranoia.
  * Fix for encoding with bladeenc and usepipes.
  * Fix for broken ripping with dagrab. Closes Issue 140.
  * Fix for diskutil selecting wrong disk on OS X.
    closes Issue 139.
  * Added some error checking and documentation for
    the abcde-musicbrainz-tool. Closes issue 138.
  * New variables for m4a/aac encoding options to be
    manipulated in a users ~/.abcde.conf file:
    1. FAACENCOPTS for faac encoding options
    2. NEROAACENCOPTS for neroAacEnc options
    3. FDKAACENCOPTS for fdkaacenc options
    Note that these options replace the now obsolete AACENCOPTS.
  * Check added for neroAacTag when encoding with neroAacEnc.
  * Several additions to usepipes with the following encoders
    being added:
    1. mp3enc: mp3
    2. speexenc: Speex
    3. mpcenc: Musepack SV8
    4. wavpack: WavPack
    5. faac: aac
    6. neroAacEnc: aac
    7. fdkaac: aac
    The cd ripper cdda2wav (icedax) has also been added.
  * Ripping and encoding with 'usepipes' fixed. This fix
    closes Issue 46.
  * Suggested encoding options for mp3enc added to the sample
    abcde.conf. Last release of mp3enc in 1998 but it still
    works flawlessly with a modern abcde!
  * Suggested encoding options for l3enc added to the sample
    abcde.conf. Congratulations to abcde which in 2015 still
    works with l3enc which saw its final release in 1997!
  * Fix for -o option use with options and multiple outputs.
    This allows for commandline options such as the following:
    abcde -o 'flac:-8,mp3:-b 320'
    This closes Issue 136.
  * Support added for ReplayGain with WavPack encoding.
  * Fix for MusePack to allow the use of the SV8 ReplayGain
    application 'mpcgain'.
  * Monkey's Audio (ape) encoding added. Tagging is with
    Robert Muth's apetag.
  * Simplify Opus tagging.This closes Issue 133.
  * Allow 'clean' when OUTPUTTYPE=wav, broken for some time.
    This closes Issue 94.
  * Clarification that CDDBLOCALRECURSIVE=y is required for
    local CDDB search. This partially resolves Issue 121.
  * AtomicParsley removed from debian/control, WavPack added.
  * Details of abcde's handling of faac compiled with and
    without mp4v2 added as a new entry to FAQs.
  * Fix to allow display of the 'date' meta tag generated
    by eyeD3 in vlc, Audacious and friends.
    This closes Issue 126.
  * Fix for flac floating point error. closes Issue 113.
  * Formalised 3 methods of mp3 tagging using ID3TAGV:
    1.id3v2.4 using eyeD3 (set in abcde as the default)
    2.id3v2.3 using id3v2
    3.id3v1 using id3
    Fixes issue 101.
  * Support for WavPack added. Closes issue 123.
  * Fix for mp3 encoding with different versions of eyeD3.
  * Major AAC encoding cleanup, including addition of the fdkaac encoder.
- Update patch abcde_2.6-quote.patch &gt; abcde-quote.patch</changelog>
  <changelog author="adrian@suse.de" date="1451908800">- add recommends to eyeD3, abcde is using it by default since 2.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1461585600">- Update to version 2.7.2
  * When using musicbrainz, don't assume that there will be release
    events attached to a particular CD release. Bug fix for the addition
    of year information support in 2.7.1.
  * Support for output to the Matroska container (mka). Encoder
    is FFmpeg (or avconv). Typical conf file syntax would be:
    MKAENCODERSYNTAX=ffmpeg
    FFMPEG=ffmpeg
    FFMPEGENCOPTS="-c:a ac3 -b:a 448k"
    OUTPUTTYPE="mka"
  * Add id3tag mp3 tagger as this is the tagger available to
    OpenBSD users.
  * Allow for cddb response 500. This closes Issue 26:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=26
  * Fix for 'expansion of $REDIR' bug on MacOSX. This closes Issue 22:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=22
  * Makefile adjusted to allow the sample abcde.conf file to be
    installed by default to /etc rather than $(prefix)/etc.
    https://bugs.archlinux.org/task/46671
  * Allow getalbumart to correctly place cover image when single
    track is selected. This closes Issue 25:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=25
- Update abcde-quote.patch
- Set BuildArch as noarch; the package doesn't contain any binary</changelog>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to version 2.8.1
  * Fix silly error introduced in abcde-musicbrainz-tool when
    fixing bug 30. Thanks to Thomas Klausner for the bug/patch.
    Closes Issue 52:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=52
  version 2.8:
  * Make fdkaac the default for m4a encoding. Faac can still be
    selected for m4a encding via ~/.abcde.conf file but best not
    to :).
  * Split user-definable mungefilename function into
    mungetrackname, mungeartistname, and mungealbumname, each of
    which default to mungefilename Thanks to Gerald Turner for the
    patch and enhancement request. This closes Issue 39:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=39
  * FAQs: Clarify the exit from multi-result CDDB search.
  * Fix to allow multiple output formats when aac fallback is
    triggered. Thanks to Birk Bremer for the bug report.
    This closes Issue 35:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=35
  * Fix for some erroneous error and status logging. Thanks to
    Christian Wasem for the bug report and fix. This closes Issue
    32: https://abcde.einval.com/bugzilla/show_bug.cgi?id=32
  * Add support for trying multiple CD lookup services in
    order. Thanks to Gabriel Rosenkoetter for the patch. Closes
    Issue 42: https://abcde.einval.com/bugzilla/show_bug.cgi?id=42
  * Add Recommends on glyrc and imagemagick in Debian
    packaging. Closes Debian Bug #827626
  * Fix up handling of the first few sectors when reading
    from a whole-CD flac file or using cdparanoia in one-track
    mode. Thanks to Matthias König for the patch. Closes Issue
    44: https://abcde.einval.com/bugzilla/show_bug.cgi?id=44
  * Tweak the fix in musicbrainz for handling sketchy returned
    data some more. Hopefully closes Issue 30:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=30
  * Re-enable some commented out cdparanoia/debug code in
    do_discid. Closes Issue 14:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=14
  * Add "-a" to lots of grep calls in case of "binary" looking
    data, e.g. non-ascii text in track titles!
    Closes Issue 24:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=24
  * Add "-L" to default curl options, to follow redirects if
    needed. Closes Issue 40:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=40
    Thanks to Gabriel Rosenkoetter for the patch.
  * Switch default from "cddb" to "musicbrainz" for track lookup
    Closes Debian Bug #842178</changelog>
  <changelog author="rpm@fthiessen.de" date="1533729600">- Added use-cddbmethod.patch needed as factory does not provide
  perl(MusicBrainz::DiscID)
- Added fix-makefile-version-2.9.2.patch
- Added keyring for verification
- Update to 2.9.2:
  * Fix up lookup code to deal with spaces etc. in directory names
  * Cope with "stub" releases in Musicbrainz
  * Always call glyrc with LC_ALL=C. Thanks to Andreas Vögele for the
  report and the suggested fix.
  * Add a link to the CDDB data format in the abcde man page.
  * More fixups of track number padding. Thanks to John Straw for the
  patch.
  * Allow for embedding of  album art downloaded by the getalbumart
  function. Currently this is available for flac (using metaflac),
  mp3 (using eyed3), m4a (using AtomicParsley) and
  WavPack aka wv (using wvtag).
  * Use md5 rather than md5sum under macOS.
  * Support added for encoding with
  Audio Interchange File Format (AIFF).
  * Allow selection of either cddb or musicbrainz from the command line
  * Allow for embedding with do_embedalbumart() for single track
  encodes when OUTPUTFORMAT and ONETRACKOUTPUTFORMAT are different.
  * Experimental support for embedding albumart with ogg files.
  * Massive rework of CD lookup code so support multiple sources
  better. Thanks to Gabriel Rosenkoetter for his initial idea in this
  area, and to Tomasz Goliński on irc for initial inspiration on how
  this should work better.
  There are now 3 different options for CD lookup: cddb, musicbrainz and
  cdtext. They can all be listed in a comma-separated list for
  CDDBMETHOD and the code will now call all of them in the sequence
  listed. All the results will be combined into one list at the end for
  the user to select, just like would have previously worked for one
  source only.
  * Fix Musicbrainz ID calculation in makeids()
  * Fix abcde.mkcue() when handling the --wholedisk option. Thanks to
  Nino Burini for the patch.
  * Add more comprehensive examples for filename munging in the example
  config file.
  * Add a more better fix for the year lookup problem in
  abcde-musicbrainz-tool
  * Redirect stderr on "which" calls to clear up error noise on some
  systems.
  * Add Irix support.
  * Rework abcde-musicbrainz-tool to work with WebService::MusicBrainz
  Also added a specific dependency on version 1.0.4 or newer, so
  abcde-musicbrainz-tool will abort if the version found is too old.
  Since tweaked to deal with multi-artist albums and tracks more
  completely.
  * Add resume support in do_getalbumart()
  * Fix getopts setup for "P". Thanks to Alan W. Kerr for reporting this.
  * Major set of code cleanups to fix up lots of warnings found with
  shellcheck, and a few other style issues:
  + Lots of quoting fixes
  + Use $( instead of `
  + Stop using -o and -a syntax with if [ - use || or &amp;&amp; instead
  + Wrap and shorten some very long lines
  * Wrap some output messages so they fit on a standard width console
  * Factor out repeated code and make page() more useful
  * Add version check before resuming from an old ripping run
- Dropped abcde-quote.patch</changelog>
  <changelog author="jengelh@inai.de" date="1533988800">- Replace summary line with an actual summary. Fix broken
  sentence grammar in description.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1550577600">- Update to 2.9.3
  * Replace non-portable sed code for generating offset list with some
    simple awk instead. Should now work on FreeBSD again.
  * Deal with bizarre cdda2wav behaviour when doing cdtext lookup - it
    writes the track information to *stdin*. Closes Issue #89:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=89
  * Add a warning in abcde.conf about mayb needing to install recode before
    using it in mungefilename()
- Clean with spec-cleaner
- Drop fix-makefile-version-2.9.2.patch which is fixed upstream</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551873600">- Added dependency on WebService::MusicBrainz</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Re-enabled musicbrainz, as both perl(MusicBrainz::DiscID) and
  perl(WebService::MusicBrainz) are accepted into Factory now.
  Note that abcde uses both MusicBrainz and CDDB by default.
  Build without MusicBrainz can be made by setting
  %_without_musibrainz 1 in prjconf.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1604491200">- Fix dependency on perl(WebService::MusicBrainz) to work with
  1.0.5 (boo#1178312)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1723636800">- Fix arithmetic on non-octal track numbers (boo#1219527)
  * add abcde.bug.204.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1737460800">- Replace freedb by gnudb for cddb search (boo#1233688)
  * add abcde-use-gnudb.patch</changelog>
</package>
<package pkgid="be9139738d82fcd55cf0654d17691053f4c7e60cb5a2c011095a53f8b5c85d2a" name="abcde" arch="src">
  <version epoch="0" ver="2.9.3" rel="bp156.5.6.1"/>
  <changelog author="coolo@suse.de" date="1225454400">- apply patch from bnc#419800 to fix
  "abcde quotes some variables incorrectly"</changelog>
  <changelog author="tschmidt@novell.com" date="1297339200">- added recommends id3v2</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 2.6
  + Fix finding $CDROM on OS X. Closes issue 71.
  + USEID3 and USEID3V2 variables are unused now, so remove them.
    Closes issue 73.
  + Clean up movement to eyeD3, remove id3v2 remnants. Closes issue 74.
  + Fix infinite loop if cddb fails. Closes: #687038 in Debian
  + Switch from Musepack SV7 to SV8.
  + Allow aac encoding with neroAacEnc. Closes issue 8.
  + Allow opus encoding with opusenc. Closes issue 70.
  + Fix typo: s/CUEWAVEFILE/CUEWAVFILE/ so that abcde.mkcue should now
    produce working cue files. Closes issue 78.
  + Remove no-op -q option. Closes issue 106.
  + Fix issue 112: perl encoding pragma deprecation.
  + Fix option parsing for multiple output formats. Closes issue 115.
  + Fix eyeD3 tagging for cddb entries without year. Closes issue 107
  + Add mention of CD-TEXT support in the man page. Closes issue 102.
  + Make Y/N prompting more consistent. Closes issue 95
  + Remove the no-op -B option. Closes: #426531 in Debian
  + Document the need to escape parentheses in tag comments.
    Closes: #256941 in Debian.
  + Concatenate option steps on -t/-T option. Closes: #391294 in Debian
  + Try to use bsd-mailx where possible to force UTF-8 for cddb-tool mail
    submissions. If not possible, attempt to force UTF-8 via the
    environment and fall back to mail instead. Closes: #756289 in Debian,
    issue 111.
- Make cd-discid live in it's own package
- Update Urls and dowload sources
- Refresh the old abcde_2.3.99.6-quote.patch to abcde_2.6-quote.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1422100800">- re-add man pages, last update accidentally removed them</changelog>
  <changelog author="p.drouand@gmail.com" date="1445860800">- Update to version 2.7.1
  * Rebuild of the abcde Makefile.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=4
  * Fix incorrect use of 'break'.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=6
  * Make older versions of id3 happy when 'Genre' field is empty.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=8
  * Add YEAR and GENRE variables to do_getalbumart().
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=9
  * Support added for encoding to True Audio using tta while still
    supporting the older ttaenc. Tagging is with mid3v2.
  * Support added for encoding to MPEG-1 Audio Layer II (mp2)
    with either twolame or FFmpeg / avconv. Tagging with mid3v2.
  * Encoding to WavPack with FFmpeg. Some slight changes to WavPack
    syntax with backward compatibility built in for abcde 2.7.
  * Encoding to m4a container with FFmpeg or avconv. This allows
    for alac encoding with FFmpeg's reverse engineered alac encoder.
  * AAC encoding with fhgaacenc via Wine. Tagging is provided
    by AtomicParsley which has been added back to abcde :). This
    allows encoding with HE-AAC v2, unavailable with qaac.
  * Support added for AAC encoding with qaac via Wine. This
    also allows for Apple Lossless Audio Coding (alac) using
    either qaac or refalac. This closes Issue 142.
  * Grab year information too when using musicbrainz.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=10
- Changes from version 2.7
  * Rewrite of abcde's mungefilename function.
    This closes Issues 72 and 135.
  * TRACKTOTAL now written to flac and ogg files.
    This resolves Issue 76.
  * Support added for the downloading of album art.
    Detailed documentation added to the abcde FAQ document
    although the sane defaults in place will guarantee a good
    experience even for those who do not read documentation!
    This closes Issue 33.
  * Support added for ripping with the GNU Compact Disc
    Input and Control library (libcdio) as requested by
    both gentoo and NixOS. The utility used is cd-paranoia
    and can best be called from a conf file as follows:
    CDROMREADERSYNTAX=libcdio
    CD_PARANOIA=cd-paranoia
    CDPARANOIAOPTS="--never-skip=40 --verbose"
    with the CD_PARANOIA variable giving the correct path
    to cd-paranoia.
  * Fix for encoding with bladeenc and usepipes.
  * Fix for broken ripping with dagrab. Closes Issue 140.
  * Fix for diskutil selecting wrong disk on OS X.
    closes Issue 139.
  * Added some error checking and documentation for
    the abcde-musicbrainz-tool. Closes issue 138.
  * New variables for m4a/aac encoding options to be
    manipulated in a users ~/.abcde.conf file:
    1. FAACENCOPTS for faac encoding options
    2. NEROAACENCOPTS for neroAacEnc options
    3. FDKAACENCOPTS for fdkaacenc options
    Note that these options replace the now obsolete AACENCOPTS.
  * Check added for neroAacTag when encoding with neroAacEnc.
  * Several additions to usepipes with the following encoders
    being added:
    1. mp3enc: mp3
    2. speexenc: Speex
    3. mpcenc: Musepack SV8
    4. wavpack: WavPack
    5. faac: aac
    6. neroAacEnc: aac
    7. fdkaac: aac
    The cd ripper cdda2wav (icedax) has also been added.
  * Ripping and encoding with 'usepipes' fixed. This fix
    closes Issue 46.
  * Suggested encoding options for mp3enc added to the sample
    abcde.conf. Last release of mp3enc in 1998 but it still
    works flawlessly with a modern abcde!
  * Suggested encoding options for l3enc added to the sample
    abcde.conf. Congratulations to abcde which in 2015 still
    works with l3enc which saw its final release in 1997!
  * Fix for -o option use with options and multiple outputs.
    This allows for commandline options such as the following:
    abcde -o 'flac:-8,mp3:-b 320'
    This closes Issue 136.
  * Support added for ReplayGain with WavPack encoding.
  * Fix for MusePack to allow the use of the SV8 ReplayGain
    application 'mpcgain'.
  * Monkey's Audio (ape) encoding added. Tagging is with
    Robert Muth's apetag.
  * Simplify Opus tagging.This closes Issue 133.
  * Allow 'clean' when OUTPUTTYPE=wav, broken for some time.
    This closes Issue 94.
  * Clarification that CDDBLOCALRECURSIVE=y is required for
    local CDDB search. This partially resolves Issue 121.
  * AtomicParsley removed from debian/control, WavPack added.
  * Details of abcde's handling of faac compiled with and
    without mp4v2 added as a new entry to FAQs.
  * Fix to allow display of the 'date' meta tag generated
    by eyeD3 in vlc, Audacious and friends.
    This closes Issue 126.
  * Fix for flac floating point error. closes Issue 113.
  * Formalised 3 methods of mp3 tagging using ID3TAGV:
    1.id3v2.4 using eyeD3 (set in abcde as the default)
    2.id3v2.3 using id3v2
    3.id3v1 using id3
    Fixes issue 101.
  * Support for WavPack added. Closes issue 123.
  * Fix for mp3 encoding with different versions of eyeD3.
  * Major AAC encoding cleanup, including addition of the fdkaac encoder.
- Update patch abcde_2.6-quote.patch &gt; abcde-quote.patch</changelog>
  <changelog author="adrian@suse.de" date="1451908800">- add recommends to eyeD3, abcde is using it by default since 2.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1461585600">- Update to version 2.7.2
  * When using musicbrainz, don't assume that there will be release
    events attached to a particular CD release. Bug fix for the addition
    of year information support in 2.7.1.
  * Support for output to the Matroska container (mka). Encoder
    is FFmpeg (or avconv). Typical conf file syntax would be:
    MKAENCODERSYNTAX=ffmpeg
    FFMPEG=ffmpeg
    FFMPEGENCOPTS="-c:a ac3 -b:a 448k"
    OUTPUTTYPE="mka"
  * Add id3tag mp3 tagger as this is the tagger available to
    OpenBSD users.
  * Allow for cddb response 500. This closes Issue 26:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=26
  * Fix for 'expansion of $REDIR' bug on MacOSX. This closes Issue 22:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=22
  * Makefile adjusted to allow the sample abcde.conf file to be
    installed by default to /etc rather than $(prefix)/etc.
    https://bugs.archlinux.org/task/46671
  * Allow getalbumart to correctly place cover image when single
    track is selected. This closes Issue 25:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=25
- Update abcde-quote.patch
- Set BuildArch as noarch; the package doesn't contain any binary</changelog>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to version 2.8.1
  * Fix silly error introduced in abcde-musicbrainz-tool when
    fixing bug 30. Thanks to Thomas Klausner for the bug/patch.
    Closes Issue 52:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=52
  version 2.8:
  * Make fdkaac the default for m4a encoding. Faac can still be
    selected for m4a encding via ~/.abcde.conf file but best not
    to :).
  * Split user-definable mungefilename function into
    mungetrackname, mungeartistname, and mungealbumname, each of
    which default to mungefilename Thanks to Gerald Turner for the
    patch and enhancement request. This closes Issue 39:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=39
  * FAQs: Clarify the exit from multi-result CDDB search.
  * Fix to allow multiple output formats when aac fallback is
    triggered. Thanks to Birk Bremer for the bug report.
    This closes Issue 35:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=35
  * Fix for some erroneous error and status logging. Thanks to
    Christian Wasem for the bug report and fix. This closes Issue
    32: https://abcde.einval.com/bugzilla/show_bug.cgi?id=32
  * Add support for trying multiple CD lookup services in
    order. Thanks to Gabriel Rosenkoetter for the patch. Closes
    Issue 42: https://abcde.einval.com/bugzilla/show_bug.cgi?id=42
  * Add Recommends on glyrc and imagemagick in Debian
    packaging. Closes Debian Bug #827626
  * Fix up handling of the first few sectors when reading
    from a whole-CD flac file or using cdparanoia in one-track
    mode. Thanks to Matthias König for the patch. Closes Issue
    44: https://abcde.einval.com/bugzilla/show_bug.cgi?id=44
  * Tweak the fix in musicbrainz for handling sketchy returned
    data some more. Hopefully closes Issue 30:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=30
  * Re-enable some commented out cdparanoia/debug code in
    do_discid. Closes Issue 14:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=14
  * Add "-a" to lots of grep calls in case of "binary" looking
    data, e.g. non-ascii text in track titles!
    Closes Issue 24:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=24
  * Add "-L" to default curl options, to follow redirects if
    needed. Closes Issue 40:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=40
    Thanks to Gabriel Rosenkoetter for the patch.
  * Switch default from "cddb" to "musicbrainz" for track lookup
    Closes Debian Bug #842178</changelog>
  <changelog author="rpm@fthiessen.de" date="1533729600">- Added use-cddbmethod.patch needed as factory does not provide
  perl(MusicBrainz::DiscID)
- Added fix-makefile-version-2.9.2.patch
- Added keyring for verification
- Update to 2.9.2:
  * Fix up lookup code to deal with spaces etc. in directory names
  * Cope with "stub" releases in Musicbrainz
  * Always call glyrc with LC_ALL=C. Thanks to Andreas Vögele for the
  report and the suggested fix.
  * Add a link to the CDDB data format in the abcde man page.
  * More fixups of track number padding. Thanks to John Straw for the
  patch.
  * Allow for embedding of  album art downloaded by the getalbumart
  function. Currently this is available for flac (using metaflac),
  mp3 (using eyed3), m4a (using AtomicParsley) and
  WavPack aka wv (using wvtag).
  * Use md5 rather than md5sum under macOS.
  * Support added for encoding with
  Audio Interchange File Format (AIFF).
  * Allow selection of either cddb or musicbrainz from the command line
  * Allow for embedding with do_embedalbumart() for single track
  encodes when OUTPUTFORMAT and ONETRACKOUTPUTFORMAT are different.
  * Experimental support for embedding albumart with ogg files.
  * Massive rework of CD lookup code so support multiple sources
  better. Thanks to Gabriel Rosenkoetter for his initial idea in this
  area, and to Tomasz Goliński on irc for initial inspiration on how
  this should work better.
  There are now 3 different options for CD lookup: cddb, musicbrainz and
  cdtext. They can all be listed in a comma-separated list for
  CDDBMETHOD and the code will now call all of them in the sequence
  listed. All the results will be combined into one list at the end for
  the user to select, just like would have previously worked for one
  source only.
  * Fix Musicbrainz ID calculation in makeids()
  * Fix abcde.mkcue() when handling the --wholedisk option. Thanks to
  Nino Burini for the patch.
  * Add more comprehensive examples for filename munging in the example
  config file.
  * Add a more better fix for the year lookup problem in
  abcde-musicbrainz-tool
  * Redirect stderr on "which" calls to clear up error noise on some
  systems.
  * Add Irix support.
  * Rework abcde-musicbrainz-tool to work with WebService::MusicBrainz
  Also added a specific dependency on version 1.0.4 or newer, so
  abcde-musicbrainz-tool will abort if the version found is too old.
  Since tweaked to deal with multi-artist albums and tracks more
  completely.
  * Add resume support in do_getalbumart()
  * Fix getopts setup for "P". Thanks to Alan W. Kerr for reporting this.
  * Major set of code cleanups to fix up lots of warnings found with
  shellcheck, and a few other style issues:
  + Lots of quoting fixes
  + Use $( instead of `
  + Stop using -o and -a syntax with if [ - use || or &amp;&amp; instead
  + Wrap and shorten some very long lines
  * Wrap some output messages so they fit on a standard width console
  * Factor out repeated code and make page() more useful
  * Add version check before resuming from an old ripping run
- Dropped abcde-quote.patch</changelog>
  <changelog author="jengelh@inai.de" date="1533988800">- Replace summary line with an actual summary. Fix broken
  sentence grammar in description.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1550577600">- Update to 2.9.3
  * Replace non-portable sed code for generating offset list with some
    simple awk instead. Should now work on FreeBSD again.
  * Deal with bizarre cdda2wav behaviour when doing cdtext lookup - it
    writes the track information to *stdin*. Closes Issue #89:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=89
  * Add a warning in abcde.conf about mayb needing to install recode before
    using it in mungefilename()
- Clean with spec-cleaner
- Drop fix-makefile-version-2.9.2.patch which is fixed upstream</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551873600">- Added dependency on WebService::MusicBrainz</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Re-enabled musicbrainz, as both perl(MusicBrainz::DiscID) and
  perl(WebService::MusicBrainz) are accepted into Factory now.
  Note that abcde uses both MusicBrainz and CDDB by default.
  Build without MusicBrainz can be made by setting
  %_without_musibrainz 1 in prjconf.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1604491200">- Fix dependency on perl(WebService::MusicBrainz) to work with
  1.0.5 (boo#1178312)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1723636800">- Fix arithmetic on non-octal track numbers (boo#1219527)
  * add abcde.bug.204.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1737460800">- Replace freedb by gnudb for cddb search (boo#1233688)
  * add abcde-use-gnudb.patch</changelog>
</package>
<package pkgid="480baf9797c274672aeb993ec5b2cdff41aca071284de5dc423197aec6f770d7" name="act" arch="aarch64">
  <version epoch="0" ver="0.2.45" rel="bp156.2.3.1"/>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1638619200">- Init act Package.
  Run your GitHub Actions locally. 🚀
  Current Release: v0.2.25
  Commit Hash: 8ad6c07083c7cd7f45ea9e0808e3297bf2370ab5</changelog>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1638705600">- Update to version 0.2.25:
  * feat: add option for docker image rebuild (#878)
  * Don't interpolate joboutputs, before job is done (#894)
  * Fix regex for GITHUB_ENV parsing (#893)
  * Revert "feat: allow existing logger from context (#859)" (#890)
  * docs: add brew installation from HEAD (#886)
  * build(deps): bump github.com/go-ini/ini from 1.63.2 to 1.64.0 (#882)
  * fix: fromJSON should work with any JSON (#883)
  * fix: correctly unmarshal entrypoint (#876)
  * fix: use docker lib for image ref parsing (#877)
  * Fix github SSH regex for missing .git extension (#871)</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 0.2.29:
  * build(deps): bump github.com/rhysd/actionlint from 1.6.13 to 1.6.14 (#1234)
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (#1233)
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5 (#1232)
  * fix: checkout container path should always use `/` (#1226)
  * feat: add option to bypass GHE for actions checkout (#1162)
  * revert auto changelog generator
  * ignore release-notes.md to avoid dirty check in goreleaser
  * update to use PAT
  * setup git user
  * allow workflow_dispatch on tag-monthly
  * add monthly release
  * auto generate changelog (#1225)
  * update runc and containerd (#1224)
  * feat: non root user container (#1202)
  * fix: processing of strategy.matrix.include (#1200)
  * fix: localcheckout mock (#1198)
  * Added support for chunked uploads. (#1208)
  * fix: keep action inputs (#1215)
  * Improve logging (#1171)
  * fix: allow TimeoutMinutes to be expression (#1217)
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2 (#1213)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.4 to 2.3.5 (#1214)
  * build(deps): bump github.com/docker/cli (#1211)
  * build(deps): bump github.com/docker/docker (#1212)
  * refactor: remove github.com/pkg/errors dependency (#1077)
  * fix: skip local actions pre step in any case (#1204)
  * pkg/runner: add support to replace GitHub's env (#1197)
  * fix: dryrun skip local actions + enable Tests (#1199)
  * fix: Remove volume with same name as the container again (#1203)
  * build(deps): bump github.com/go-ini/ini from 1.66.5 to 1.66.6 (#1201)
  * build(deps): bump github.com/go-ini/ini from 1.66.4 to 1.66.5 (#1189)
  * governance: fix bug report rendering (#1186)
  * update docs (#1180)
  * feat: handle context cancelation during docker exec (#1170)
  * implement pre and post steps (#1089)
  * fix: remove composite restrictions (#1128)
  * governance: new issue templates (#1048)
  * ci(choco): update chocolatey to 1.1.0 (#1164)
  * build(deps): bump goreleaser/goreleaser-action from 2 to 3 (#1179)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.12 to 1.6.13 (#1173)
  * feat: add ubuntu-22.04 (#1150)
  * feat/bug-report-extended (#1163)
  * build(deps): bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#1169)
  * build(deps): bump github.com/docker/docker (#1167)
  * build(deps): bump github.com/docker/cli (#1168)
  * fix: panic if a step in a job is nil (#1145)
  * fix: return invalid step type (#1157)
  * Remove the correct Volume (#1148)
  * fix: panic while running DRYRUN with local actions (#1141)
  * refactor: remove composite action runcontext workaround (#1085)
  * build(deps): bump github.com/moby/buildkit from 0.10.2 to 0.10.3 (#1153)
  * build(deps): bump docker/setup-qemu-action from 1 to 2 (#1156)
  * build(deps): bump github.com/docker/docker (#1155)
  * build(deps): bump github.com/docker/cli (#1154)
  * feat: support `GITHUB_REF_NAME` &amp; `GITHUB_REF_TYPE` (#1142)
  * build(deps): bump github.com/moby/buildkit from 0.10.1 to 0.10.2 (#1147)
  * fix: conclusion and outcome are no integers (#1136)
  * fix: do not error that much (#1137)
  * build(deps): bump codecov/codecov-action from 3.0.0 to 3.1.0 (#1139)
  * chore: fold integration test outputs (#1111)
  * Update README.md (#1121)
  * docs(README): remove go install (#1123)
  * ci: always grab latest go version (#1124)
  * tests: remove runTestJobFile (#1127)
  * use new paths from goreleaser (#1135)
  * README: add MacPorts badge (#1129)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.11 to 1.6.12 (#1126)
  * build(deps): bump codecov/codecov-action from 2.1.0 to 3.0.0 (#1118)
  * build(deps): bump github.com/moby/buildkit from 0.10.0 to 0.10.1 (#1116)
  * build(deps): bump actions/upload-artifact from 2 to 3 (#1119)
  * build(deps): bump actions/setup-go from 2 to 3 (#1120)
  * build(deps): bump actions/stale from 4 to 5 (#1117)
  * tests(runner): move arm64 test to own func (#1095)
  * build(deps): bump deps which dependabot doesn't want to (#1107)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.10 to 1.6.11 (#1106)
  * implement volume mount for container job (#1101)
  * feat: add option to specify git remote name (#1104)
  * Allow passed in env vars to supersede ones declared in the workflow (#1100)
  * fix: copy ignored tracked files (#1074)
  * build(deps): bump github.com/opencontainers/selinux (#1102)
  * fix: return error on reusable workflows (#1093)
  * deps: bump go.mod to go1.18 (#1088)
  * fix(editorconfig): correct braces (#1094)
  * ci: bump go to 1.18 (#1087)
  * fix: don't overwrite with empty cmd/entrypoint (#1076)
  * refactor: simplify action function signatures (#1083)
  * deps: remove shlex (#1086)
  * fix: set default version string (#1070)
  * build(deps): bump actions/cache from 2 to 3 (#1082)
  * build(deps): bump github.com/docker/docker (#1080)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.2 to 2.3.4 (#1079)
  * build(deps): bump github.com/docker/cli (#1081)
  * automatically merge PRs from dependabot (#1084)
  * deps: bump go-git (#1057)
  * feat: split job steps into its own files/structs (#1004)
  * feat: add bug-report flag (#1056)
  * Fix: panic: reflect: slice index out of range (#1066)
  * Fix: call of reflect.Value.Interface on zero Value (#1067)
  * Fix: tojson(null) == 'null' (#1068)
  * build(deps): bump github.com/docker/docker (#1062)
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1061)
  * feat: add flag to always run the checkout action (#1049)
  * Revert: Don't stop JobContainer on failure (#1041)
  * fix: remove unused TestContext (#1013)
  * feat: add step name to logger field (#1027)
  * fix: coerce booleans to numbers for comparison in exprparser (#1030)
  * feat: add json logger output (#1026)
  * build(deps): bump golangci/golangci-lint-action from 2 to 3.1.0 (#1019)
  * ci(stalebot): ignore feature requests (#1017)
  * build(deps): bump actions/checkout from 2 to 3 (#1028)
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0 (#1040)
  * build(deps): bump github.com/docker/cli (#1038)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.9 to 1.6.10 (#1039)
  * build(deps): bump github.com/docker/distribution (#1037)
  * build(deps): bump github.com/moby/buildkit from 0.9.3 to 0.10.0 (#1036)
  * fix: trim whitespace from actrc (#1024)
  * fix: hide masked values in log files (#1011)
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#955)
  * Update link to 'filesystems' GitHub docs (#1016)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.8 to 1.6.9 (#1018)
  * feat: run jobs in parallel (#1003)
  * Expression evaluator fixes (#1009)
  * build(deps): bump github.com/go-ini/ini from 1.64.0 to 1.66.4 (#997)
  * fix: print line after password prompt (#1014)
  * refactor: default empty if: statement to if: success() in evaluator &amp; remove `FixIfStatement()` (#990)
  * fix: deep evaluate matrix strategy (#964)
  * build(deps): bump github.com/docker/distribution (#994)
  * Added instructions to install on fedora using copr package (#993)
  * fix: always execute closeContainer() executor (#988)
  * refactor: extract setupAction into ActionReader (#986)
  * refactor: extract RunContext Executor in JobExecutor (#984)
  * docs: Expand the GITHUB_TOKEN section (#968)
  * ci(Mergify): configuration update (#972)
  * fix: docker cp of dangling symlink (#943) (#948)
  * Fix: regression run after failure (#971)
  * ci(Mergify): configuration update (#966)
  * build(deps): bump github.com/moby/buildkit from 0.9.2 to 0.9.3 (#958)
  * build(deps): bump github.com/docker/docker (#957)
  * build(deps): bump github.com/opencontainers/image-spec (#954)
  * build(deps): bump github.com/docker/cli (#956)
  * Test: env.ACT in if condition of the workflow (#965)
  * feat: add skipped status as step result (#950)
  * feat: try to read ref and sha from event payload if available (#889)
  * fix: set composite outputs on failure (#945)
  * Refactor expression evaluator to use parser from actionlint package (#908)
  * fix(goreleaser): add append mode for release notes (#962)
  * feat(goreleaser): format changelog, add prereleases (#942)
  * fix: update install.sh (#937)
  * refactor: export and move shared contexts into pkg/model (#931)
  * feat: add node16 support (#922)
  * Feature: uses in composite (#793)
  * lint(megalinter): disable markdown link check (#938)
  * ci: replace superlinter with megalinter (#923)
  * fix: rework setupShellCommand (#930)
  * fix: clarify --reuse and --rm flags (#929)
  * ci(Mergify): configuration update (#924)
  * fix: ::stop-commands:: should continue to print the lines (#920)
  * fix: continue jobs + steps after failure (#840)
  * Fix and test choco action (#911)
  * Docker auth (#891)
  * container credentials (#868)
  * Add more steps context support (#887)
  * feat: allow existing logger from context (#898)
  * feat: SELinux lables for --bind (#906)
  * ci(choco): fix chocolatey docker build (#903)
- Add go modules (vendor) suport in _service file
- run spec-cleaner</changelog>
  <changelog author="jayvdb@gmail.com" date="1660132800">- Update to version 0.2.30:
  * fix: ensure all post steps are executed (#1286)
  * walk submodule path instead of dir name (#1282)
  * fix: add parent step id in composite action step id (#1268)
  * Made env interpolated instead of evaluated. (#1222)
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#1273)
  * Update README.md (#1260)
  * lint: add ReadHeaderTimeout (#1277)
  * fix: the number in the github event is of type number (#1252)
  * only perform chown operation for non root users (#1250)
  * fix: allow TimeoutMinutes to be expression in Jobs (#1247)
  * fix: use docker images from dockerhub (#1249)
  * Improve --eventpath example command (#1243)
  * Improve docs for events inputs (#1238)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.14 to 1.6.15 (#1239)
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 (#1240)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.31" date="1670673600">- Update to version 0.2.31:
  * fix: CI is unstable due to new linting rules (#1292)
  * help output: use consistent terminology between -j &amp; -l (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.32" date="1670673601">- Update to version 0.2.32:
  * feat: pass current matrix information to job logger (#1364)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.33" date="1670673602">- Update to version 0.2.33:
  * fix: ci is failing since 2022-10-17 (#1397)
  * fix: re-evaluate env for remote composite actions (#1385)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping workflow_dispatch inputs into the Expression inputs context (#1363)
  * test: add test for networking setup in act (#1375)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * Fix composite input handling (#1345)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1670673603">- Update to version 0.2.34:
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * feat: parse types of reusable workflows (#1414)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * fix: keep path to event json file in composite actions (#1428)
  * fix: nil pointer access ( workflow_dispatch )
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * Remove dead code (#1425)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1673438400">- Spec file:
  Fix bsc#1207021 to report the correct version when calling "act --version"
  Wrong version is fixed with sed in act-0.2.34/main.go
  Reported upstream as GH://nektos/act#1555</changelog>
  <changelog author="sebix@sebix.at" date="1683720000">- Update to version 0.2.45:
  * chore: bump VERSION to 0.2.45
  * Support cache (#1770)
  * chore: run act from cli on linux (#1758)
  * Revert breaking docker socket changes (#1763)
  * avoid using log.Fatal (#1759)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1755)
  * build(deps): bump github.com/docker/docker (#1754)
  * build(deps): bump github.com/docker/cli (#1753)
  * build(deps): bump codecov/codecov-action from 3.1.2 to 3.1.3 (#1752)
  * ci: deduplicate running workflows (#1751)
  * fix: try finding a socket, otherwise fail, respect user choice (#1745)
  * Improve watchAndRun (#1743)
  * Remove the comment-out code. (#1691)
  * typo: fix expression of warning message on macOS (#1693)
  * fix: environment handling windows (host mode) (#1732)
  * fix: ensure networkmode "host" unless explicitly specified (#1739)
  * Avoid using `log.Fatal` in `pkg/*` (#1705)
  * feat: support yaml env/secrets/inputs file (#1733)
  * build(deps): bump codecov/codecov-action from 3.1.1 to 3.1.2 (#1735)
  * fix: ghc assignment typo (#1729)
  * fix: reusable workflow panic (#1728)
  * fix: add `server_url` attribute to github context (#1727)
  * build(deps): update go-git to ce62f3e9ff86270538a514a68d3bd5563a733e3b (#1725)
  * build(deps): bump github.com/docker/docker (#1719)
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#1724)
  * build(deps): bump github.com/docker/cli (#1722)
  * build(deps): bump megalinter/megalinter from 6.22.1 to 6.22.2 (#1720)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.23 to 1.6.24 (#1721)
  * build(deps): bump golang.org/x/term from 0.6.0 to 0.7.0 (#1723)
  * build(deps): bump github.com/docker/cli (#1712)
  * build(deps): bump github.com/docker/docker (#1711)
  * build(deps): bump megalinter/megalinter from 6.21.0 to 6.22.1 (#1710)
  * chore: bump VERSION to 0.2.44
  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.5 (#1708)
  * feat: improve GetOutboundIP (#1707)
  * fix: use os.UserHomeDir (#1706)
  * Make sure working directory is respected when configured from matrix (#1686)
  * build(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.5 (#1703)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18 (#1702)
  * build(deps): bump github.com/imdario/mergo from 0.3.14 to 0.3.15 (#1701)
  * build(deps): bump actions/stale from 7 to 8 (#1700)
  * build(deps): bump megalinter/megalinter from 6.20.1 to 6.21.0 (#1699)
  * full path required for extension install (#1670)
  * build(deps): bump actions/setup-go from 3 to 4 (#1689)
  * build(deps): bump github.com/imdario/mergo from 0.3.13 to 0.3.14 (#1688)
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#1650)
  * build(deps): bump megalinter/megalinter from 6.20.0 to 6.20.1 (#1679)
  * build(deps): bump fregante/setup-git-user from 1 to 2 (#1664)
  * Add example command for collecting artifacts (#1671)
  * feat: specify matrix on command line (#1675)
  * Support for docker steps in host environment (#1674)
  * fix: correct ref and ref_name (#1672)
  * fix: return err in walk (#1667)
  * test: Enshure ForcePull config doesn't break docker actions (1661)
  * fix: crash if the id tool fails to run in the container (1660)
  * build(deps): bump github.com/moby/buildkit from 0.11.3 to 0.11.4 (#1669)
  * build(deps): bump megalinter/megalinter from 6.19.0 to 6.20.0 (#1665)
  * build(deps): bump golang.org/x/term from 0.5.0 to 0.6.0 (#1666)
  * Improve XDG Spec supporting (#1656)
  * fix: safe file name (#1651)
  * fix: compare properties of Invalid types (#1645)
  * chore: bump VERSION to 0.2.43
  * fix: github.job property is empty, GITHUB_JOB should be job id (#1646)
  * build(deps): bump github.com/opencontainers/image-spec (#1649)
  * fix: update output handling for reusable workflows (#1521)
  * fix: crash malformed composite action (#1616)
  * docs: remove help section (#1648)
  * feat: workflowpattern package (#1618)
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18 (#1637)
  * fix: add GITHUB_STEP_SUMMARY (#1607)
  * build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 (#1636)
  * build(deps): bump github.com/moby/buildkit from 0.11.2 to 0.11.3 (#1635)
  * fix: tolerate workflow that needs a missing job (#1595) (#1619)
  * chore: Remove obsolete Container.UpdateFromPath (#1631)
  * chore: use new style octal (#1630)
  * fix: don't override env (#1629)
  * ci: add Winget Releaser workflow (#1623)
  * build(deps): bump github.com/opencontainers/selinux (#1625)
  * build(deps): bump github.com/docker/docker (#1624)
  * build(deps): bump github.com/docker/cli (#1626)
  * chore: add Winget installation instructions (#1622)
  * Pass dockerfile to build executor (#1606)
  * build(deps): bump github.com/docker/cli from 23.0.0-rc.1+incompatible to 23.0.0+incompatible (#1611)
  * build(deps): bump github.com/docker/docker (#1613)
  * build(deps): bump megalinter/megalinter from 6.18.0 to 6.19.0 (#1610)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1 (#1612)
  * build(deps): bump github.com/joho/godotenv from 1.4.0 to 1.5.1 (#1614)
  * refactor: GITHUB_ENV command / remove env.PATH (#1503)
  * Update max container name length (#1597)
  * feat: allow overriding of `GITHUB_` env variables (#1582)
  * Docker build fixes (#1596)
  * fix: Apply forcePull only for prebuild docker actions (#1599)
  * chore: bump VERSION to 0.2.42
  * feat: cache notices to reduce frequency of upgrade notifications (#1592)
  * chore: fix release script to trigger gh-act
  * chore: bump VERSION to 0.2.41
  * build(deps): bump github.com/moby/buildkit from 0.11.1 to 0.11.2 (#1589)
  * build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#1590)
  * cI: make stalebot less annoying (#1587)
  * test: Do not leak step env in composite (#1585)
  * feat: step summary of test results (#1580)
  * build(deps): bump github.com/moby/buildkit from 0.11.0 to 0.11.1 (#1576)
  * build(deps): bump golang.org/x/term from 0.3.0 to 0.4.0 (#1577)
  * build(deps): bump github.com/docker/docker (#1573)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.22 to 1.6.23 (#1574)
  * build(deps): bump actions/github-script from 5 to 6 (#1572)
  * chore: update docs for installing act as GH CLI extension
  * feat: release extension
  * feat: release extension
  * feat: release extension
  * refactor: pull and rebuild docker by default (#1569)
  * feat: add remote reusable workflows (#1525)
  * Fixed auto-generated platform configuration with Micro size image (#1566)
  * Feature/allow worktrees (#1530)
  * chore: bump VERSION to 0.2.40
  * fix: update artifact server to address GHSL-2023-004 (#1565)
  * chore: bump VERSION to 0.2.39
  * chore: fix promote script
  * chore: bump version
  * chore: makefile update
  * chore: bump version
  * build(deps): bump github.com/moby/buildkit from 0.10.6 to 0.11.0 (#1563)
  * chore: push new version
  * Readme: Fix shell installation (#1547)
  * fix: allow override of artifact server bind address (#1560)
  * feat: add check for newer versions (#1562)
  * Input (#1524)
  * refactor: remove docker image list reference filter (#1501)
  * fix: add-matcher fails github workflow (#1532)
  * feat: add support for building docker actions with private registries (#1557)
  * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.12 (#1554)
  * feat: Allow building without docker support (#1507)
  * fix: extra path lost in composite actions (#1531)
  * test: make sure workflow_call is not a github event calling our workflow (#1520)
  * fix: preserve job result state in case of failure (#1519)
  * build(deps): bump megalinter/megalinter from 6.17.0 to 6.18.0 (#1550)
  * build(deps): bump megalinter/megalinter from 6.16.0 to 6.17.0 (#1540)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17 (#1539)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0 (#1541)
  * build(deps): bump megalinter/megalinter from 6.15.0 to 6.16.0 (#1534)
  * build(deps): bump actions/stale from 6 to 7 (#1535)
  * revert: deprecation of containerArchitecture (#1514)
  * build(deps): bump goreleaser/goreleaser-action from 3 to 4 (#1515)
  * build(deps): bump github.com/docker/cli (#1516)
  * build(deps): bump github.com/docker/docker (#1517)
  * fix: align runner.os / runner.arch to known values (#1510)
  * feat: Support "result" on "needs" context. (#1497)
  * fix: tail (not absolute) as entrypoint of job container (#1506)
  * refactor: fix savestate in pre steps (#1466)
  * feat: allow to spawn and run a local reusable workflow (#1423)
  * refactor: fix add-path / GITHUB_PATH commands (#1472)
  * feat: JobLoggerFactory (#1496)
  * fix: handle env-vars case sensitive (#1493)
  * fix: step env is unavailable in with property expr (#1458)
  * refactor: share UpdateFromEnv logic (#1457)
  * feat: `--container-options` (#1462)
  * refactor: move autoremove into the jobexecutor (#1463)
  * docs: clarifying skipping steps / jobs (#1480)
  * Pass `LANG=C.UTF-8` to environment (#1476)
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * Remove dead code (#1425)
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * fix: keep path to event json file in composite actions (#1428)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * fix: nil pointer access ( workflow_dispatch )
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)
  * feat: parse types of reusable workflows (#1414)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping `workflow_dispatch` inputs into the Expression `inputs` context (#1363)
  * fix: ci is failing since 2022-10-17 (#1397)
  * test: add test for networking setup in act (#1375)
  * fix: re-evaluate env for remote composite actions (#1385)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * Fix composite input handling (#1345)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * feat: pass current matrix information to job logger (#1364)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * help output: use consistent terminology between `-j` &amp; `-l` (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)
  * fix: CI is unstable due to new linting rules (#1292)</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1764417600">- Fix CVE-2025-47913 (bsc#1253608): Prevent panic in embedded
  golang.org/x/crypto/ssh/agent client when receiving unexpected
  message types for key listing or signing requests by returning
  a descriptive error instead. Adds patch fix-CVE-2025-47913-ssh-agent.patch
  adapted from upstream change https://go-review.googlesource.com/c/crypto/+/700295
  with additional regression tests (client_test.go) to exercise the new error
  paths for List() and SignWithFlags().</changelog>
</package>
<package pkgid="199b4466362f2a27325f699a9603de1e0de23f533ef538d94256ad8cccc87b34" name="act" arch="i586">
  <version epoch="0" ver="0.2.45" rel="bp156.2.3.1"/>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1638619200">- Init act Package.
  Run your GitHub Actions locally. 🚀
  Current Release: v0.2.25
  Commit Hash: 8ad6c07083c7cd7f45ea9e0808e3297bf2370ab5</changelog>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1638705600">- Update to version 0.2.25:
  * feat: add option for docker image rebuild (#878)
  * Don't interpolate joboutputs, before job is done (#894)
  * Fix regex for GITHUB_ENV parsing (#893)
  * Revert "feat: allow existing logger from context (#859)" (#890)
  * docs: add brew installation from HEAD (#886)
  * build(deps): bump github.com/go-ini/ini from 1.63.2 to 1.64.0 (#882)
  * fix: fromJSON should work with any JSON (#883)
  * fix: correctly unmarshal entrypoint (#876)
  * fix: use docker lib for image ref parsing (#877)
  * Fix github SSH regex for missing .git extension (#871)</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 0.2.29:
  * build(deps): bump github.com/rhysd/actionlint from 1.6.13 to 1.6.14 (#1234)
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (#1233)
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5 (#1232)
  * fix: checkout container path should always use `/` (#1226)
  * feat: add option to bypass GHE for actions checkout (#1162)
  * revert auto changelog generator
  * ignore release-notes.md to avoid dirty check in goreleaser
  * update to use PAT
  * setup git user
  * allow workflow_dispatch on tag-monthly
  * add monthly release
  * auto generate changelog (#1225)
  * update runc and containerd (#1224)
  * feat: non root user container (#1202)
  * fix: processing of strategy.matrix.include (#1200)
  * fix: localcheckout mock (#1198)
  * Added support for chunked uploads. (#1208)
  * fix: keep action inputs (#1215)
  * Improve logging (#1171)
  * fix: allow TimeoutMinutes to be expression (#1217)
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2 (#1213)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.4 to 2.3.5 (#1214)
  * build(deps): bump github.com/docker/cli (#1211)
  * build(deps): bump github.com/docker/docker (#1212)
  * refactor: remove github.com/pkg/errors dependency (#1077)
  * fix: skip local actions pre step in any case (#1204)
  * pkg/runner: add support to replace GitHub's env (#1197)
  * fix: dryrun skip local actions + enable Tests (#1199)
  * fix: Remove volume with same name as the container again (#1203)
  * build(deps): bump github.com/go-ini/ini from 1.66.5 to 1.66.6 (#1201)
  * build(deps): bump github.com/go-ini/ini from 1.66.4 to 1.66.5 (#1189)
  * governance: fix bug report rendering (#1186)
  * update docs (#1180)
  * feat: handle context cancelation during docker exec (#1170)
  * implement pre and post steps (#1089)
  * fix: remove composite restrictions (#1128)
  * governance: new issue templates (#1048)
  * ci(choco): update chocolatey to 1.1.0 (#1164)
  * build(deps): bump goreleaser/goreleaser-action from 2 to 3 (#1179)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.12 to 1.6.13 (#1173)
  * feat: add ubuntu-22.04 (#1150)
  * feat/bug-report-extended (#1163)
  * build(deps): bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#1169)
  * build(deps): bump github.com/docker/docker (#1167)
  * build(deps): bump github.com/docker/cli (#1168)
  * fix: panic if a step in a job is nil (#1145)
  * fix: return invalid step type (#1157)
  * Remove the correct Volume (#1148)
  * fix: panic while running DRYRUN with local actions (#1141)
  * refactor: remove composite action runcontext workaround (#1085)
  * build(deps): bump github.com/moby/buildkit from 0.10.2 to 0.10.3 (#1153)
  * build(deps): bump docker/setup-qemu-action from 1 to 2 (#1156)
  * build(deps): bump github.com/docker/docker (#1155)
  * build(deps): bump github.com/docker/cli (#1154)
  * feat: support `GITHUB_REF_NAME` &amp; `GITHUB_REF_TYPE` (#1142)
  * build(deps): bump github.com/moby/buildkit from 0.10.1 to 0.10.2 (#1147)
  * fix: conclusion and outcome are no integers (#1136)
  * fix: do not error that much (#1137)
  * build(deps): bump codecov/codecov-action from 3.0.0 to 3.1.0 (#1139)
  * chore: fold integration test outputs (#1111)
  * Update README.md (#1121)
  * docs(README): remove go install (#1123)
  * ci: always grab latest go version (#1124)
  * tests: remove runTestJobFile (#1127)
  * use new paths from goreleaser (#1135)
  * README: add MacPorts badge (#1129)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.11 to 1.6.12 (#1126)
  * build(deps): bump codecov/codecov-action from 2.1.0 to 3.0.0 (#1118)
  * build(deps): bump github.com/moby/buildkit from 0.10.0 to 0.10.1 (#1116)
  * build(deps): bump actions/upload-artifact from 2 to 3 (#1119)
  * build(deps): bump actions/setup-go from 2 to 3 (#1120)
  * build(deps): bump actions/stale from 4 to 5 (#1117)
  * tests(runner): move arm64 test to own func (#1095)
  * build(deps): bump deps which dependabot doesn't want to (#1107)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.10 to 1.6.11 (#1106)
  * implement volume mount for container job (#1101)
  * feat: add option to specify git remote name (#1104)
  * Allow passed in env vars to supersede ones declared in the workflow (#1100)
  * fix: copy ignored tracked files (#1074)
  * build(deps): bump github.com/opencontainers/selinux (#1102)
  * fix: return error on reusable workflows (#1093)
  * deps: bump go.mod to go1.18 (#1088)
  * fix(editorconfig): correct braces (#1094)
  * ci: bump go to 1.18 (#1087)
  * fix: don't overwrite with empty cmd/entrypoint (#1076)
  * refactor: simplify action function signatures (#1083)
  * deps: remove shlex (#1086)
  * fix: set default version string (#1070)
  * build(deps): bump actions/cache from 2 to 3 (#1082)
  * build(deps): bump github.com/docker/docker (#1080)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.2 to 2.3.4 (#1079)
  * build(deps): bump github.com/docker/cli (#1081)
  * automatically merge PRs from dependabot (#1084)
  * deps: bump go-git (#1057)
  * feat: split job steps into its own files/structs (#1004)
  * feat: add bug-report flag (#1056)
  * Fix: panic: reflect: slice index out of range (#1066)
  * Fix: call of reflect.Value.Interface on zero Value (#1067)
  * Fix: tojson(null) == 'null' (#1068)
  * build(deps): bump github.com/docker/docker (#1062)
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1061)
  * feat: add flag to always run the checkout action (#1049)
  * Revert: Don't stop JobContainer on failure (#1041)
  * fix: remove unused TestContext (#1013)
  * feat: add step name to logger field (#1027)
  * fix: coerce booleans to numbers for comparison in exprparser (#1030)
  * feat: add json logger output (#1026)
  * build(deps): bump golangci/golangci-lint-action from 2 to 3.1.0 (#1019)
  * ci(stalebot): ignore feature requests (#1017)
  * build(deps): bump actions/checkout from 2 to 3 (#1028)
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0 (#1040)
  * build(deps): bump github.com/docker/cli (#1038)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.9 to 1.6.10 (#1039)
  * build(deps): bump github.com/docker/distribution (#1037)
  * build(deps): bump github.com/moby/buildkit from 0.9.3 to 0.10.0 (#1036)
  * fix: trim whitespace from actrc (#1024)
  * fix: hide masked values in log files (#1011)
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#955)
  * Update link to 'filesystems' GitHub docs (#1016)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.8 to 1.6.9 (#1018)
  * feat: run jobs in parallel (#1003)
  * Expression evaluator fixes (#1009)
  * build(deps): bump github.com/go-ini/ini from 1.64.0 to 1.66.4 (#997)
  * fix: print line after password prompt (#1014)
  * refactor: default empty if: statement to if: success() in evaluator &amp; remove `FixIfStatement()` (#990)
  * fix: deep evaluate matrix strategy (#964)
  * build(deps): bump github.com/docker/distribution (#994)
  * Added instructions to install on fedora using copr package (#993)
  * fix: always execute closeContainer() executor (#988)
  * refactor: extract setupAction into ActionReader (#986)
  * refactor: extract RunContext Executor in JobExecutor (#984)
  * docs: Expand the GITHUB_TOKEN section (#968)
  * ci(Mergify): configuration update (#972)
  * fix: docker cp of dangling symlink (#943) (#948)
  * Fix: regression run after failure (#971)
  * ci(Mergify): configuration update (#966)
  * build(deps): bump github.com/moby/buildkit from 0.9.2 to 0.9.3 (#958)
  * build(deps): bump github.com/docker/docker (#957)
  * build(deps): bump github.com/opencontainers/image-spec (#954)
  * build(deps): bump github.com/docker/cli (#956)
  * Test: env.ACT in if condition of the workflow (#965)
  * feat: add skipped status as step result (#950)
  * feat: try to read ref and sha from event payload if available (#889)
  * fix: set composite outputs on failure (#945)
  * Refactor expression evaluator to use parser from actionlint package (#908)
  * fix(goreleaser): add append mode for release notes (#962)
  * feat(goreleaser): format changelog, add prereleases (#942)
  * fix: update install.sh (#937)
  * refactor: export and move shared contexts into pkg/model (#931)
  * feat: add node16 support (#922)
  * Feature: uses in composite (#793)
  * lint(megalinter): disable markdown link check (#938)
  * ci: replace superlinter with megalinter (#923)
  * fix: rework setupShellCommand (#930)
  * fix: clarify --reuse and --rm flags (#929)
  * ci(Mergify): configuration update (#924)
  * fix: ::stop-commands:: should continue to print the lines (#920)
  * fix: continue jobs + steps after failure (#840)
  * Fix and test choco action (#911)
  * Docker auth (#891)
  * container credentials (#868)
  * Add more steps context support (#887)
  * feat: allow existing logger from context (#898)
  * feat: SELinux lables for --bind (#906)
  * ci(choco): fix chocolatey docker build (#903)
- Add go modules (vendor) suport in _service file
- run spec-cleaner</changelog>
  <changelog author="jayvdb@gmail.com" date="1660132800">- Update to version 0.2.30:
  * fix: ensure all post steps are executed (#1286)
  * walk submodule path instead of dir name (#1282)
  * fix: add parent step id in composite action step id (#1268)
  * Made env interpolated instead of evaluated. (#1222)
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#1273)
  * Update README.md (#1260)
  * lint: add ReadHeaderTimeout (#1277)
  * fix: the number in the github event is of type number (#1252)
  * only perform chown operation for non root users (#1250)
  * fix: allow TimeoutMinutes to be expression in Jobs (#1247)
  * fix: use docker images from dockerhub (#1249)
  * Improve --eventpath example command (#1243)
  * Improve docs for events inputs (#1238)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.14 to 1.6.15 (#1239)
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 (#1240)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.31" date="1670673600">- Update to version 0.2.31:
  * fix: CI is unstable due to new linting rules (#1292)
  * help output: use consistent terminology between -j &amp; -l (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.32" date="1670673601">- Update to version 0.2.32:
  * feat: pass current matrix information to job logger (#1364)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.33" date="1670673602">- Update to version 0.2.33:
  * fix: ci is failing since 2022-10-17 (#1397)
  * fix: re-evaluate env for remote composite actions (#1385)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping workflow_dispatch inputs into the Expression inputs context (#1363)
  * test: add test for networking setup in act (#1375)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * Fix composite input handling (#1345)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1670673603">- Update to version 0.2.34:
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * feat: parse types of reusable workflows (#1414)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * fix: keep path to event json file in composite actions (#1428)
  * fix: nil pointer access ( workflow_dispatch )
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * Remove dead code (#1425)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1673438400">- Spec file:
  Fix bsc#1207021 to report the correct version when calling "act --version"
  Wrong version is fixed with sed in act-0.2.34/main.go
  Reported upstream as GH://nektos/act#1555</changelog>
  <changelog author="sebix@sebix.at" date="1683720000">- Update to version 0.2.45:
  * chore: bump VERSION to 0.2.45
  * Support cache (#1770)
  * chore: run act from cli on linux (#1758)
  * Revert breaking docker socket changes (#1763)
  * avoid using log.Fatal (#1759)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1755)
  * build(deps): bump github.com/docker/docker (#1754)
  * build(deps): bump github.com/docker/cli (#1753)
  * build(deps): bump codecov/codecov-action from 3.1.2 to 3.1.3 (#1752)
  * ci: deduplicate running workflows (#1751)
  * fix: try finding a socket, otherwise fail, respect user choice (#1745)
  * Improve watchAndRun (#1743)
  * Remove the comment-out code. (#1691)
  * typo: fix expression of warning message on macOS (#1693)
  * fix: environment handling windows (host mode) (#1732)
  * fix: ensure networkmode "host" unless explicitly specified (#1739)
  * Avoid using `log.Fatal` in `pkg/*` (#1705)
  * feat: support yaml env/secrets/inputs file (#1733)
  * build(deps): bump codecov/codecov-action from 3.1.1 to 3.1.2 (#1735)
  * fix: ghc assignment typo (#1729)
  * fix: reusable workflow panic (#1728)
  * fix: add `server_url` attribute to github context (#1727)
  * build(deps): update go-git to ce62f3e9ff86270538a514a68d3bd5563a733e3b (#1725)
  * build(deps): bump github.com/docker/docker (#1719)
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#1724)
  * build(deps): bump github.com/docker/cli (#1722)
  * build(deps): bump megalinter/megalinter from 6.22.1 to 6.22.2 (#1720)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.23 to 1.6.24 (#1721)
  * build(deps): bump golang.org/x/term from 0.6.0 to 0.7.0 (#1723)
  * build(deps): bump github.com/docker/cli (#1712)
  * build(deps): bump github.com/docker/docker (#1711)
  * build(deps): bump megalinter/megalinter from 6.21.0 to 6.22.1 (#1710)
  * chore: bump VERSION to 0.2.44
  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.5 (#1708)
  * feat: improve GetOutboundIP (#1707)
  * fix: use os.UserHomeDir (#1706)
  * Make sure working directory is respected when configured from matrix (#1686)
  * build(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.5 (#1703)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18 (#1702)
  * build(deps): bump github.com/imdario/mergo from 0.3.14 to 0.3.15 (#1701)
  * build(deps): bump actions/stale from 7 to 8 (#1700)
  * build(deps): bump megalinter/megalinter from 6.20.1 to 6.21.0 (#1699)
  * full path required for extension install (#1670)
  * build(deps): bump actions/setup-go from 3 to 4 (#1689)
  * build(deps): bump github.com/imdario/mergo from 0.3.13 to 0.3.14 (#1688)
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#1650)
  * build(deps): bump megalinter/megalinter from 6.20.0 to 6.20.1 (#1679)
  * build(deps): bump fregante/setup-git-user from 1 to 2 (#1664)
  * Add example command for collecting artifacts (#1671)
  * feat: specify matrix on command line (#1675)
  * Support for docker steps in host environment (#1674)
  * fix: correct ref and ref_name (#1672)
  * fix: return err in walk (#1667)
  * test: Enshure ForcePull config doesn't break docker actions (1661)
  * fix: crash if the id tool fails to run in the container (1660)
  * build(deps): bump github.com/moby/buildkit from 0.11.3 to 0.11.4 (#1669)
  * build(deps): bump megalinter/megalinter from 6.19.0 to 6.20.0 (#1665)
  * build(deps): bump golang.org/x/term from 0.5.0 to 0.6.0 (#1666)
  * Improve XDG Spec supporting (#1656)
  * fix: safe file name (#1651)
  * fix: compare properties of Invalid types (#1645)
  * chore: bump VERSION to 0.2.43
  * fix: github.job property is empty, GITHUB_JOB should be job id (#1646)
  * build(deps): bump github.com/opencontainers/image-spec (#1649)
  * fix: update output handling for reusable workflows (#1521)
  * fix: crash malformed composite action (#1616)
  * docs: remove help section (#1648)
  * feat: workflowpattern package (#1618)
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18 (#1637)
  * fix: add GITHUB_STEP_SUMMARY (#1607)
  * build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 (#1636)
  * build(deps): bump github.com/moby/buildkit from 0.11.2 to 0.11.3 (#1635)
  * fix: tolerate workflow that needs a missing job (#1595) (#1619)
  * chore: Remove obsolete Container.UpdateFromPath (#1631)
  * chore: use new style octal (#1630)
  * fix: don't override env (#1629)
  * ci: add Winget Releaser workflow (#1623)
  * build(deps): bump github.com/opencontainers/selinux (#1625)
  * build(deps): bump github.com/docker/docker (#1624)
  * build(deps): bump github.com/docker/cli (#1626)
  * chore: add Winget installation instructions (#1622)
  * Pass dockerfile to build executor (#1606)
  * build(deps): bump github.com/docker/cli from 23.0.0-rc.1+incompatible to 23.0.0+incompatible (#1611)
  * build(deps): bump github.com/docker/docker (#1613)
  * build(deps): bump megalinter/megalinter from 6.18.0 to 6.19.0 (#1610)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1 (#1612)
  * build(deps): bump github.com/joho/godotenv from 1.4.0 to 1.5.1 (#1614)
  * refactor: GITHUB_ENV command / remove env.PATH (#1503)
  * Update max container name length (#1597)
  * feat: allow overriding of `GITHUB_` env variables (#1582)
  * Docker build fixes (#1596)
  * fix: Apply forcePull only for prebuild docker actions (#1599)
  * chore: bump VERSION to 0.2.42
  * feat: cache notices to reduce frequency of upgrade notifications (#1592)
  * chore: fix release script to trigger gh-act
  * chore: bump VERSION to 0.2.41
  * build(deps): bump github.com/moby/buildkit from 0.11.1 to 0.11.2 (#1589)
  * build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#1590)
  * cI: make stalebot less annoying (#1587)
  * test: Do not leak step env in composite (#1585)
  * feat: step summary of test results (#1580)
  * build(deps): bump github.com/moby/buildkit from 0.11.0 to 0.11.1 (#1576)
  * build(deps): bump golang.org/x/term from 0.3.0 to 0.4.0 (#1577)
  * build(deps): bump github.com/docker/docker (#1573)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.22 to 1.6.23 (#1574)
  * build(deps): bump actions/github-script from 5 to 6 (#1572)
  * chore: update docs for installing act as GH CLI extension
  * feat: release extension
  * feat: release extension
  * feat: release extension
  * refactor: pull and rebuild docker by default (#1569)
  * feat: add remote reusable workflows (#1525)
  * Fixed auto-generated platform configuration with Micro size image (#1566)
  * Feature/allow worktrees (#1530)
  * chore: bump VERSION to 0.2.40
  * fix: update artifact server to address GHSL-2023-004 (#1565)
  * chore: bump VERSION to 0.2.39
  * chore: fix promote script
  * chore: bump version
  * chore: makefile update
  * chore: bump version
  * build(deps): bump github.com/moby/buildkit from 0.10.6 to 0.11.0 (#1563)
  * chore: push new version
  * Readme: Fix shell installation (#1547)
  * fix: allow override of artifact server bind address (#1560)
  * feat: add check for newer versions (#1562)
  * Input (#1524)
  * refactor: remove docker image list reference filter (#1501)
  * fix: add-matcher fails github workflow (#1532)
  * feat: add support for building docker actions with private registries (#1557)
  * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.12 (#1554)
  * feat: Allow building without docker support (#1507)
  * fix: extra path lost in composite actions (#1531)
  * test: make sure workflow_call is not a github event calling our workflow (#1520)
  * fix: preserve job result state in case of failure (#1519)
  * build(deps): bump megalinter/megalinter from 6.17.0 to 6.18.0 (#1550)
  * build(deps): bump megalinter/megalinter from 6.16.0 to 6.17.0 (#1540)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17 (#1539)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0 (#1541)
  * build(deps): bump megalinter/megalinter from 6.15.0 to 6.16.0 (#1534)
  * build(deps): bump actions/stale from 6 to 7 (#1535)
  * revert: deprecation of containerArchitecture (#1514)
  * build(deps): bump goreleaser/goreleaser-action from 3 to 4 (#1515)
  * build(deps): bump github.com/docker/cli (#1516)
  * build(deps): bump github.com/docker/docker (#1517)
  * fix: align runner.os / runner.arch to known values (#1510)
  * feat: Support "result" on "needs" context. (#1497)
  * fix: tail (not absolute) as entrypoint of job container (#1506)
  * refactor: fix savestate in pre steps (#1466)
  * feat: allow to spawn and run a local reusable workflow (#1423)
  * refactor: fix add-path / GITHUB_PATH commands (#1472)
  * feat: JobLoggerFactory (#1496)
  * fix: handle env-vars case sensitive (#1493)
  * fix: step env is unavailable in with property expr (#1458)
  * refactor: share UpdateFromEnv logic (#1457)
  * feat: `--container-options` (#1462)
  * refactor: move autoremove into the jobexecutor (#1463)
  * docs: clarifying skipping steps / jobs (#1480)
  * Pass `LANG=C.UTF-8` to environment (#1476)
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * Remove dead code (#1425)
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * fix: keep path to event json file in composite actions (#1428)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * fix: nil pointer access ( workflow_dispatch )
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)
  * feat: parse types of reusable workflows (#1414)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping `workflow_dispatch` inputs into the Expression `inputs` context (#1363)
  * fix: ci is failing since 2022-10-17 (#1397)
  * test: add test for networking setup in act (#1375)
  * fix: re-evaluate env for remote composite actions (#1385)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * Fix composite input handling (#1345)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * feat: pass current matrix information to job logger (#1364)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * help output: use consistent terminology between `-j` &amp; `-l` (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)
  * fix: CI is unstable due to new linting rules (#1292)</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1764417600">- Fix CVE-2025-47913 (bsc#1253608): Prevent panic in embedded
  golang.org/x/crypto/ssh/agent client when receiving unexpected
  message types for key listing or signing requests by returning
  a descriptive error instead. Adds patch fix-CVE-2025-47913-ssh-agent.patch
  adapted from upstream change https://go-review.googlesource.com/c/crypto/+/700295
  with additional regression tests (client_test.go) to exercise the new error
  paths for List() and SignWithFlags().</changelog>
</package>
<package pkgid="3d30ed059ce528c0b0086d9201a648d7b42501e181b4ebce46f516bfc7f2e577" name="act" arch="ppc64le">
  <version epoch="0" ver="0.2.45" rel="bp156.2.3.1"/>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1638619200">- Init act Package.
  Run your GitHub Actions locally. 🚀
  Current Release: v0.2.25
  Commit Hash: 8ad6c07083c7cd7f45ea9e0808e3297bf2370ab5</changelog>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1638705600">- Update to version 0.2.25:
  * feat: add option for docker image rebuild (#878)
  * Don't interpolate joboutputs, before job is done (#894)
  * Fix regex for GITHUB_ENV parsing (#893)
  * Revert "feat: allow existing logger from context (#859)" (#890)
  * docs: add brew installation from HEAD (#886)
  * build(deps): bump github.com/go-ini/ini from 1.63.2 to 1.64.0 (#882)
  * fix: fromJSON should work with any JSON (#883)
  * fix: correctly unmarshal entrypoint (#876)
  * fix: use docker lib for image ref parsing (#877)
  * Fix github SSH regex for missing .git extension (#871)</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 0.2.29:
  * build(deps): bump github.com/rhysd/actionlint from 1.6.13 to 1.6.14 (#1234)
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (#1233)
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5 (#1232)
  * fix: checkout container path should always use `/` (#1226)
  * feat: add option to bypass GHE for actions checkout (#1162)
  * revert auto changelog generator
  * ignore release-notes.md to avoid dirty check in goreleaser
  * update to use PAT
  * setup git user
  * allow workflow_dispatch on tag-monthly
  * add monthly release
  * auto generate changelog (#1225)
  * update runc and containerd (#1224)
  * feat: non root user container (#1202)
  * fix: processing of strategy.matrix.include (#1200)
  * fix: localcheckout mock (#1198)
  * Added support for chunked uploads. (#1208)
  * fix: keep action inputs (#1215)
  * Improve logging (#1171)
  * fix: allow TimeoutMinutes to be expression (#1217)
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2 (#1213)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.4 to 2.3.5 (#1214)
  * build(deps): bump github.com/docker/cli (#1211)
  * build(deps): bump github.com/docker/docker (#1212)
  * refactor: remove github.com/pkg/errors dependency (#1077)
  * fix: skip local actions pre step in any case (#1204)
  * pkg/runner: add support to replace GitHub's env (#1197)
  * fix: dryrun skip local actions + enable Tests (#1199)
  * fix: Remove volume with same name as the container again (#1203)
  * build(deps): bump github.com/go-ini/ini from 1.66.5 to 1.66.6 (#1201)
  * build(deps): bump github.com/go-ini/ini from 1.66.4 to 1.66.5 (#1189)
  * governance: fix bug report rendering (#1186)
  * update docs (#1180)
  * feat: handle context cancelation during docker exec (#1170)
  * implement pre and post steps (#1089)
  * fix: remove composite restrictions (#1128)
  * governance: new issue templates (#1048)
  * ci(choco): update chocolatey to 1.1.0 (#1164)
  * build(deps): bump goreleaser/goreleaser-action from 2 to 3 (#1179)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.12 to 1.6.13 (#1173)
  * feat: add ubuntu-22.04 (#1150)
  * feat/bug-report-extended (#1163)
  * build(deps): bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#1169)
  * build(deps): bump github.com/docker/docker (#1167)
  * build(deps): bump github.com/docker/cli (#1168)
  * fix: panic if a step in a job is nil (#1145)
  * fix: return invalid step type (#1157)
  * Remove the correct Volume (#1148)
  * fix: panic while running DRYRUN with local actions (#1141)
  * refactor: remove composite action runcontext workaround (#1085)
  * build(deps): bump github.com/moby/buildkit from 0.10.2 to 0.10.3 (#1153)
  * build(deps): bump docker/setup-qemu-action from 1 to 2 (#1156)
  * build(deps): bump github.com/docker/docker (#1155)
  * build(deps): bump github.com/docker/cli (#1154)
  * feat: support `GITHUB_REF_NAME` &amp; `GITHUB_REF_TYPE` (#1142)
  * build(deps): bump github.com/moby/buildkit from 0.10.1 to 0.10.2 (#1147)
  * fix: conclusion and outcome are no integers (#1136)
  * fix: do not error that much (#1137)
  * build(deps): bump codecov/codecov-action from 3.0.0 to 3.1.0 (#1139)
  * chore: fold integration test outputs (#1111)
  * Update README.md (#1121)
  * docs(README): remove go install (#1123)
  * ci: always grab latest go version (#1124)
  * tests: remove runTestJobFile (#1127)
  * use new paths from goreleaser (#1135)
  * README: add MacPorts badge (#1129)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.11 to 1.6.12 (#1126)
  * build(deps): bump codecov/codecov-action from 2.1.0 to 3.0.0 (#1118)
  * build(deps): bump github.com/moby/buildkit from 0.10.0 to 0.10.1 (#1116)
  * build(deps): bump actions/upload-artifact from 2 to 3 (#1119)
  * build(deps): bump actions/setup-go from 2 to 3 (#1120)
  * build(deps): bump actions/stale from 4 to 5 (#1117)
  * tests(runner): move arm64 test to own func (#1095)
  * build(deps): bump deps which dependabot doesn't want to (#1107)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.10 to 1.6.11 (#1106)
  * implement volume mount for container job (#1101)
  * feat: add option to specify git remote name (#1104)
  * Allow passed in env vars to supersede ones declared in the workflow (#1100)
  * fix: copy ignored tracked files (#1074)
  * build(deps): bump github.com/opencontainers/selinux (#1102)
  * fix: return error on reusable workflows (#1093)
  * deps: bump go.mod to go1.18 (#1088)
  * fix(editorconfig): correct braces (#1094)
  * ci: bump go to 1.18 (#1087)
  * fix: don't overwrite with empty cmd/entrypoint (#1076)
  * refactor: simplify action function signatures (#1083)
  * deps: remove shlex (#1086)
  * fix: set default version string (#1070)
  * build(deps): bump actions/cache from 2 to 3 (#1082)
  * build(deps): bump github.com/docker/docker (#1080)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.2 to 2.3.4 (#1079)
  * build(deps): bump github.com/docker/cli (#1081)
  * automatically merge PRs from dependabot (#1084)
  * deps: bump go-git (#1057)
  * feat: split job steps into its own files/structs (#1004)
  * feat: add bug-report flag (#1056)
  * Fix: panic: reflect: slice index out of range (#1066)
  * Fix: call of reflect.Value.Interface on zero Value (#1067)
  * Fix: tojson(null) == 'null' (#1068)
  * build(deps): bump github.com/docker/docker (#1062)
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1061)
  * feat: add flag to always run the checkout action (#1049)
  * Revert: Don't stop JobContainer on failure (#1041)
  * fix: remove unused TestContext (#1013)
  * feat: add step name to logger field (#1027)
  * fix: coerce booleans to numbers for comparison in exprparser (#1030)
  * feat: add json logger output (#1026)
  * build(deps): bump golangci/golangci-lint-action from 2 to 3.1.0 (#1019)
  * ci(stalebot): ignore feature requests (#1017)
  * build(deps): bump actions/checkout from 2 to 3 (#1028)
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0 (#1040)
  * build(deps): bump github.com/docker/cli (#1038)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.9 to 1.6.10 (#1039)
  * build(deps): bump github.com/docker/distribution (#1037)
  * build(deps): bump github.com/moby/buildkit from 0.9.3 to 0.10.0 (#1036)
  * fix: trim whitespace from actrc (#1024)
  * fix: hide masked values in log files (#1011)
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#955)
  * Update link to 'filesystems' GitHub docs (#1016)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.8 to 1.6.9 (#1018)
  * feat: run jobs in parallel (#1003)
  * Expression evaluator fixes (#1009)
  * build(deps): bump github.com/go-ini/ini from 1.64.0 to 1.66.4 (#997)
  * fix: print line after password prompt (#1014)
  * refactor: default empty if: statement to if: success() in evaluator &amp; remove `FixIfStatement()` (#990)
  * fix: deep evaluate matrix strategy (#964)
  * build(deps): bump github.com/docker/distribution (#994)
  * Added instructions to install on fedora using copr package (#993)
  * fix: always execute closeContainer() executor (#988)
  * refactor: extract setupAction into ActionReader (#986)
  * refactor: extract RunContext Executor in JobExecutor (#984)
  * docs: Expand the GITHUB_TOKEN section (#968)
  * ci(Mergify): configuration update (#972)
  * fix: docker cp of dangling symlink (#943) (#948)
  * Fix: regression run after failure (#971)
  * ci(Mergify): configuration update (#966)
  * build(deps): bump github.com/moby/buildkit from 0.9.2 to 0.9.3 (#958)
  * build(deps): bump github.com/docker/docker (#957)
  * build(deps): bump github.com/opencontainers/image-spec (#954)
  * build(deps): bump github.com/docker/cli (#956)
  * Test: env.ACT in if condition of the workflow (#965)
  * feat: add skipped status as step result (#950)
  * feat: try to read ref and sha from event payload if available (#889)
  * fix: set composite outputs on failure (#945)
  * Refactor expression evaluator to use parser from actionlint package (#908)
  * fix(goreleaser): add append mode for release notes (#962)
  * feat(goreleaser): format changelog, add prereleases (#942)
  * fix: update install.sh (#937)
  * refactor: export and move shared contexts into pkg/model (#931)
  * feat: add node16 support (#922)
  * Feature: uses in composite (#793)
  * lint(megalinter): disable markdown link check (#938)
  * ci: replace superlinter with megalinter (#923)
  * fix: rework setupShellCommand (#930)
  * fix: clarify --reuse and --rm flags (#929)
  * ci(Mergify): configuration update (#924)
  * fix: ::stop-commands:: should continue to print the lines (#920)
  * fix: continue jobs + steps after failure (#840)
  * Fix and test choco action (#911)
  * Docker auth (#891)
  * container credentials (#868)
  * Add more steps context support (#887)
  * feat: allow existing logger from context (#898)
  * feat: SELinux lables for --bind (#906)
  * ci(choco): fix chocolatey docker build (#903)
- Add go modules (vendor) suport in _service file
- run spec-cleaner</changelog>
  <changelog author="jayvdb@gmail.com" date="1660132800">- Update to version 0.2.30:
  * fix: ensure all post steps are executed (#1286)
  * walk submodule path instead of dir name (#1282)
  * fix: add parent step id in composite action step id (#1268)
  * Made env interpolated instead of evaluated. (#1222)
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#1273)
  * Update README.md (#1260)
  * lint: add ReadHeaderTimeout (#1277)
  * fix: the number in the github event is of type number (#1252)
  * only perform chown operation for non root users (#1250)
  * fix: allow TimeoutMinutes to be expression in Jobs (#1247)
  * fix: use docker images from dockerhub (#1249)
  * Improve --eventpath example command (#1243)
  * Improve docs for events inputs (#1238)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.14 to 1.6.15 (#1239)
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 (#1240)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.31" date="1670673600">- Update to version 0.2.31:
  * fix: CI is unstable due to new linting rules (#1292)
  * help output: use consistent terminology between -j &amp; -l (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.32" date="1670673601">- Update to version 0.2.32:
  * feat: pass current matrix information to job logger (#1364)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.33" date="1670673602">- Update to version 0.2.33:
  * fix: ci is failing since 2022-10-17 (#1397)
  * fix: re-evaluate env for remote composite actions (#1385)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping workflow_dispatch inputs into the Expression inputs context (#1363)
  * test: add test for networking setup in act (#1375)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * Fix composite input handling (#1345)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1670673603">- Update to version 0.2.34:
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * feat: parse types of reusable workflows (#1414)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * fix: keep path to event json file in composite actions (#1428)
  * fix: nil pointer access ( workflow_dispatch )
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * Remove dead code (#1425)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1673438400">- Spec file:
  Fix bsc#1207021 to report the correct version when calling "act --version"
  Wrong version is fixed with sed in act-0.2.34/main.go
  Reported upstream as GH://nektos/act#1555</changelog>
  <changelog author="sebix@sebix.at" date="1683720000">- Update to version 0.2.45:
  * chore: bump VERSION to 0.2.45
  * Support cache (#1770)
  * chore: run act from cli on linux (#1758)
  * Revert breaking docker socket changes (#1763)
  * avoid using log.Fatal (#1759)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1755)
  * build(deps): bump github.com/docker/docker (#1754)
  * build(deps): bump github.com/docker/cli (#1753)
  * build(deps): bump codecov/codecov-action from 3.1.2 to 3.1.3 (#1752)
  * ci: deduplicate running workflows (#1751)
  * fix: try finding a socket, otherwise fail, respect user choice (#1745)
  * Improve watchAndRun (#1743)
  * Remove the comment-out code. (#1691)
  * typo: fix expression of warning message on macOS (#1693)
  * fix: environment handling windows (host mode) (#1732)
  * fix: ensure networkmode "host" unless explicitly specified (#1739)
  * Avoid using `log.Fatal` in `pkg/*` (#1705)
  * feat: support yaml env/secrets/inputs file (#1733)
  * build(deps): bump codecov/codecov-action from 3.1.1 to 3.1.2 (#1735)
  * fix: ghc assignment typo (#1729)
  * fix: reusable workflow panic (#1728)
  * fix: add `server_url` attribute to github context (#1727)
  * build(deps): update go-git to ce62f3e9ff86270538a514a68d3bd5563a733e3b (#1725)
  * build(deps): bump github.com/docker/docker (#1719)
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#1724)
  * build(deps): bump github.com/docker/cli (#1722)
  * build(deps): bump megalinter/megalinter from 6.22.1 to 6.22.2 (#1720)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.23 to 1.6.24 (#1721)
  * build(deps): bump golang.org/x/term from 0.6.0 to 0.7.0 (#1723)
  * build(deps): bump github.com/docker/cli (#1712)
  * build(deps): bump github.com/docker/docker (#1711)
  * build(deps): bump megalinter/megalinter from 6.21.0 to 6.22.1 (#1710)
  * chore: bump VERSION to 0.2.44
  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.5 (#1708)
  * feat: improve GetOutboundIP (#1707)
  * fix: use os.UserHomeDir (#1706)
  * Make sure working directory is respected when configured from matrix (#1686)
  * build(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.5 (#1703)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18 (#1702)
  * build(deps): bump github.com/imdario/mergo from 0.3.14 to 0.3.15 (#1701)
  * build(deps): bump actions/stale from 7 to 8 (#1700)
  * build(deps): bump megalinter/megalinter from 6.20.1 to 6.21.0 (#1699)
  * full path required for extension install (#1670)
  * build(deps): bump actions/setup-go from 3 to 4 (#1689)
  * build(deps): bump github.com/imdario/mergo from 0.3.13 to 0.3.14 (#1688)
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#1650)
  * build(deps): bump megalinter/megalinter from 6.20.0 to 6.20.1 (#1679)
  * build(deps): bump fregante/setup-git-user from 1 to 2 (#1664)
  * Add example command for collecting artifacts (#1671)
  * feat: specify matrix on command line (#1675)
  * Support for docker steps in host environment (#1674)
  * fix: correct ref and ref_name (#1672)
  * fix: return err in walk (#1667)
  * test: Enshure ForcePull config doesn't break docker actions (1661)
  * fix: crash if the id tool fails to run in the container (1660)
  * build(deps): bump github.com/moby/buildkit from 0.11.3 to 0.11.4 (#1669)
  * build(deps): bump megalinter/megalinter from 6.19.0 to 6.20.0 (#1665)
  * build(deps): bump golang.org/x/term from 0.5.0 to 0.6.0 (#1666)
  * Improve XDG Spec supporting (#1656)
  * fix: safe file name (#1651)
  * fix: compare properties of Invalid types (#1645)
  * chore: bump VERSION to 0.2.43
  * fix: github.job property is empty, GITHUB_JOB should be job id (#1646)
  * build(deps): bump github.com/opencontainers/image-spec (#1649)
  * fix: update output handling for reusable workflows (#1521)
  * fix: crash malformed composite action (#1616)
  * docs: remove help section (#1648)
  * feat: workflowpattern package (#1618)
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18 (#1637)
  * fix: add GITHUB_STEP_SUMMARY (#1607)
  * build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 (#1636)
  * build(deps): bump github.com/moby/buildkit from 0.11.2 to 0.11.3 (#1635)
  * fix: tolerate workflow that needs a missing job (#1595) (#1619)
  * chore: Remove obsolete Container.UpdateFromPath (#1631)
  * chore: use new style octal (#1630)
  * fix: don't override env (#1629)
  * ci: add Winget Releaser workflow (#1623)
  * build(deps): bump github.com/opencontainers/selinux (#1625)
  * build(deps): bump github.com/docker/docker (#1624)
  * build(deps): bump github.com/docker/cli (#1626)
  * chore: add Winget installation instructions (#1622)
  * Pass dockerfile to build executor (#1606)
  * build(deps): bump github.com/docker/cli from 23.0.0-rc.1+incompatible to 23.0.0+incompatible (#1611)
  * build(deps): bump github.com/docker/docker (#1613)
  * build(deps): bump megalinter/megalinter from 6.18.0 to 6.19.0 (#1610)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1 (#1612)
  * build(deps): bump github.com/joho/godotenv from 1.4.0 to 1.5.1 (#1614)
  * refactor: GITHUB_ENV command / remove env.PATH (#1503)
  * Update max container name length (#1597)
  * feat: allow overriding of `GITHUB_` env variables (#1582)
  * Docker build fixes (#1596)
  * fix: Apply forcePull only for prebuild docker actions (#1599)
  * chore: bump VERSION to 0.2.42
  * feat: cache notices to reduce frequency of upgrade notifications (#1592)
  * chore: fix release script to trigger gh-act
  * chore: bump VERSION to 0.2.41
  * build(deps): bump github.com/moby/buildkit from 0.11.1 to 0.11.2 (#1589)
  * build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#1590)
  * cI: make stalebot less annoying (#1587)
  * test: Do not leak step env in composite (#1585)
  * feat: step summary of test results (#1580)
  * build(deps): bump github.com/moby/buildkit from 0.11.0 to 0.11.1 (#1576)
  * build(deps): bump golang.org/x/term from 0.3.0 to 0.4.0 (#1577)
  * build(deps): bump github.com/docker/docker (#1573)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.22 to 1.6.23 (#1574)
  * build(deps): bump actions/github-script from 5 to 6 (#1572)
  * chore: update docs for installing act as GH CLI extension
  * feat: release extension
  * feat: release extension
  * feat: release extension
  * refactor: pull and rebuild docker by default (#1569)
  * feat: add remote reusable workflows (#1525)
  * Fixed auto-generated platform configuration with Micro size image (#1566)
  * Feature/allow worktrees (#1530)
  * chore: bump VERSION to 0.2.40
  * fix: update artifact server to address GHSL-2023-004 (#1565)
  * chore: bump VERSION to 0.2.39
  * chore: fix promote script
  * chore: bump version
  * chore: makefile update
  * chore: bump version
  * build(deps): bump github.com/moby/buildkit from 0.10.6 to 0.11.0 (#1563)
  * chore: push new version
  * Readme: Fix shell installation (#1547)
  * fix: allow override of artifact server bind address (#1560)
  * feat: add check for newer versions (#1562)
  * Input (#1524)
  * refactor: remove docker image list reference filter (#1501)
  * fix: add-matcher fails github workflow (#1532)
  * feat: add support for building docker actions with private registries (#1557)
  * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.12 (#1554)
  * feat: Allow building without docker support (#1507)
  * fix: extra path lost in composite actions (#1531)
  * test: make sure workflow_call is not a github event calling our workflow (#1520)
  * fix: preserve job result state in case of failure (#1519)
  * build(deps): bump megalinter/megalinter from 6.17.0 to 6.18.0 (#1550)
  * build(deps): bump megalinter/megalinter from 6.16.0 to 6.17.0 (#1540)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17 (#1539)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0 (#1541)
  * build(deps): bump megalinter/megalinter from 6.15.0 to 6.16.0 (#1534)
  * build(deps): bump actions/stale from 6 to 7 (#1535)
  * revert: deprecation of containerArchitecture (#1514)
  * build(deps): bump goreleaser/goreleaser-action from 3 to 4 (#1515)
  * build(deps): bump github.com/docker/cli (#1516)
  * build(deps): bump github.com/docker/docker (#1517)
  * fix: align runner.os / runner.arch to known values (#1510)
  * feat: Support "result" on "needs" context. (#1497)
  * fix: tail (not absolute) as entrypoint of job container (#1506)
  * refactor: fix savestate in pre steps (#1466)
  * feat: allow to spawn and run a local reusable workflow (#1423)
  * refactor: fix add-path / GITHUB_PATH commands (#1472)
  * feat: JobLoggerFactory (#1496)
  * fix: handle env-vars case sensitive (#1493)
  * fix: step env is unavailable in with property expr (#1458)
  * refactor: share UpdateFromEnv logic (#1457)
  * feat: `--container-options` (#1462)
  * refactor: move autoremove into the jobexecutor (#1463)
  * docs: clarifying skipping steps / jobs (#1480)
  * Pass `LANG=C.UTF-8` to environment (#1476)
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * Remove dead code (#1425)
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * fix: keep path to event json file in composite actions (#1428)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * fix: nil pointer access ( workflow_dispatch )
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)
  * feat: parse types of reusable workflows (#1414)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping `workflow_dispatch` inputs into the Expression `inputs` context (#1363)
  * fix: ci is failing since 2022-10-17 (#1397)
  * test: add test for networking setup in act (#1375)
  * fix: re-evaluate env for remote composite actions (#1385)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * Fix composite input handling (#1345)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * feat: pass current matrix information to job logger (#1364)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * help output: use consistent terminology between `-j` &amp; `-l` (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)
  * fix: CI is unstable due to new linting rules (#1292)</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1764417600">- Fix CVE-2025-47913 (bsc#1253608): Prevent panic in embedded
  golang.org/x/crypto/ssh/agent client when receiving unexpected
  message types for key listing or signing requests by returning
  a descriptive error instead. Adds patch fix-CVE-2025-47913-ssh-agent.patch
  adapted from upstream change https://go-review.googlesource.com/c/crypto/+/700295
  with additional regression tests (client_test.go) to exercise the new error
  paths for List() and SignWithFlags().</changelog>
</package>
<package pkgid="801852e2a473a95789c2f002071628ad8e2b6619be60416857ab2b496ce20739" name="act" arch="s390x">
  <version epoch="0" ver="0.2.45" rel="bp156.2.3.1"/>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1638619200">- Init act Package.
  Run your GitHub Actions locally. 🚀
  Current Release: v0.2.25
  Commit Hash: 8ad6c07083c7cd7f45ea9e0808e3297bf2370ab5</changelog>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1638705600">- Update to version 0.2.25:
  * feat: add option for docker image rebuild (#878)
  * Don't interpolate joboutputs, before job is done (#894)
  * Fix regex for GITHUB_ENV parsing (#893)
  * Revert "feat: allow existing logger from context (#859)" (#890)
  * docs: add brew installation from HEAD (#886)
  * build(deps): bump github.com/go-ini/ini from 1.63.2 to 1.64.0 (#882)
  * fix: fromJSON should work with any JSON (#883)
  * fix: correctly unmarshal entrypoint (#876)
  * fix: use docker lib for image ref parsing (#877)
  * Fix github SSH regex for missing .git extension (#871)</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 0.2.29:
  * build(deps): bump github.com/rhysd/actionlint from 1.6.13 to 1.6.14 (#1234)
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (#1233)
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5 (#1232)
  * fix: checkout container path should always use `/` (#1226)
  * feat: add option to bypass GHE for actions checkout (#1162)
  * revert auto changelog generator
  * ignore release-notes.md to avoid dirty check in goreleaser
  * update to use PAT
  * setup git user
  * allow workflow_dispatch on tag-monthly
  * add monthly release
  * auto generate changelog (#1225)
  * update runc and containerd (#1224)
  * feat: non root user container (#1202)
  * fix: processing of strategy.matrix.include (#1200)
  * fix: localcheckout mock (#1198)
  * Added support for chunked uploads. (#1208)
  * fix: keep action inputs (#1215)
  * Improve logging (#1171)
  * fix: allow TimeoutMinutes to be expression (#1217)
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2 (#1213)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.4 to 2.3.5 (#1214)
  * build(deps): bump github.com/docker/cli (#1211)
  * build(deps): bump github.com/docker/docker (#1212)
  * refactor: remove github.com/pkg/errors dependency (#1077)
  * fix: skip local actions pre step in any case (#1204)
  * pkg/runner: add support to replace GitHub's env (#1197)
  * fix: dryrun skip local actions + enable Tests (#1199)
  * fix: Remove volume with same name as the container again (#1203)
  * build(deps): bump github.com/go-ini/ini from 1.66.5 to 1.66.6 (#1201)
  * build(deps): bump github.com/go-ini/ini from 1.66.4 to 1.66.5 (#1189)
  * governance: fix bug report rendering (#1186)
  * update docs (#1180)
  * feat: handle context cancelation during docker exec (#1170)
  * implement pre and post steps (#1089)
  * fix: remove composite restrictions (#1128)
  * governance: new issue templates (#1048)
  * ci(choco): update chocolatey to 1.1.0 (#1164)
  * build(deps): bump goreleaser/goreleaser-action from 2 to 3 (#1179)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.12 to 1.6.13 (#1173)
  * feat: add ubuntu-22.04 (#1150)
  * feat/bug-report-extended (#1163)
  * build(deps): bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#1169)
  * build(deps): bump github.com/docker/docker (#1167)
  * build(deps): bump github.com/docker/cli (#1168)
  * fix: panic if a step in a job is nil (#1145)
  * fix: return invalid step type (#1157)
  * Remove the correct Volume (#1148)
  * fix: panic while running DRYRUN with local actions (#1141)
  * refactor: remove composite action runcontext workaround (#1085)
  * build(deps): bump github.com/moby/buildkit from 0.10.2 to 0.10.3 (#1153)
  * build(deps): bump docker/setup-qemu-action from 1 to 2 (#1156)
  * build(deps): bump github.com/docker/docker (#1155)
  * build(deps): bump github.com/docker/cli (#1154)
  * feat: support `GITHUB_REF_NAME` &amp; `GITHUB_REF_TYPE` (#1142)
  * build(deps): bump github.com/moby/buildkit from 0.10.1 to 0.10.2 (#1147)
  * fix: conclusion and outcome are no integers (#1136)
  * fix: do not error that much (#1137)
  * build(deps): bump codecov/codecov-action from 3.0.0 to 3.1.0 (#1139)
  * chore: fold integration test outputs (#1111)
  * Update README.md (#1121)
  * docs(README): remove go install (#1123)
  * ci: always grab latest go version (#1124)
  * tests: remove runTestJobFile (#1127)
  * use new paths from goreleaser (#1135)
  * README: add MacPorts badge (#1129)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.11 to 1.6.12 (#1126)
  * build(deps): bump codecov/codecov-action from 2.1.0 to 3.0.0 (#1118)
  * build(deps): bump github.com/moby/buildkit from 0.10.0 to 0.10.1 (#1116)
  * build(deps): bump actions/upload-artifact from 2 to 3 (#1119)
  * build(deps): bump actions/setup-go from 2 to 3 (#1120)
  * build(deps): bump actions/stale from 4 to 5 (#1117)
  * tests(runner): move arm64 test to own func (#1095)
  * build(deps): bump deps which dependabot doesn't want to (#1107)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.10 to 1.6.11 (#1106)
  * implement volume mount for container job (#1101)
  * feat: add option to specify git remote name (#1104)
  * Allow passed in env vars to supersede ones declared in the workflow (#1100)
  * fix: copy ignored tracked files (#1074)
  * build(deps): bump github.com/opencontainers/selinux (#1102)
  * fix: return error on reusable workflows (#1093)
  * deps: bump go.mod to go1.18 (#1088)
  * fix(editorconfig): correct braces (#1094)
  * ci: bump go to 1.18 (#1087)
  * fix: don't overwrite with empty cmd/entrypoint (#1076)
  * refactor: simplify action function signatures (#1083)
  * deps: remove shlex (#1086)
  * fix: set default version string (#1070)
  * build(deps): bump actions/cache from 2 to 3 (#1082)
  * build(deps): bump github.com/docker/docker (#1080)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.2 to 2.3.4 (#1079)
  * build(deps): bump github.com/docker/cli (#1081)
  * automatically merge PRs from dependabot (#1084)
  * deps: bump go-git (#1057)
  * feat: split job steps into its own files/structs (#1004)
  * feat: add bug-report flag (#1056)
  * Fix: panic: reflect: slice index out of range (#1066)
  * Fix: call of reflect.Value.Interface on zero Value (#1067)
  * Fix: tojson(null) == 'null' (#1068)
  * build(deps): bump github.com/docker/docker (#1062)
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1061)
  * feat: add flag to always run the checkout action (#1049)
  * Revert: Don't stop JobContainer on failure (#1041)
  * fix: remove unused TestContext (#1013)
  * feat: add step name to logger field (#1027)
  * fix: coerce booleans to numbers for comparison in exprparser (#1030)
  * feat: add json logger output (#1026)
  * build(deps): bump golangci/golangci-lint-action from 2 to 3.1.0 (#1019)
  * ci(stalebot): ignore feature requests (#1017)
  * build(deps): bump actions/checkout from 2 to 3 (#1028)
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0 (#1040)
  * build(deps): bump github.com/docker/cli (#1038)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.9 to 1.6.10 (#1039)
  * build(deps): bump github.com/docker/distribution (#1037)
  * build(deps): bump github.com/moby/buildkit from 0.9.3 to 0.10.0 (#1036)
  * fix: trim whitespace from actrc (#1024)
  * fix: hide masked values in log files (#1011)
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#955)
  * Update link to 'filesystems' GitHub docs (#1016)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.8 to 1.6.9 (#1018)
  * feat: run jobs in parallel (#1003)
  * Expression evaluator fixes (#1009)
  * build(deps): bump github.com/go-ini/ini from 1.64.0 to 1.66.4 (#997)
  * fix: print line after password prompt (#1014)
  * refactor: default empty if: statement to if: success() in evaluator &amp; remove `FixIfStatement()` (#990)
  * fix: deep evaluate matrix strategy (#964)
  * build(deps): bump github.com/docker/distribution (#994)
  * Added instructions to install on fedora using copr package (#993)
  * fix: always execute closeContainer() executor (#988)
  * refactor: extract setupAction into ActionReader (#986)
  * refactor: extract RunContext Executor in JobExecutor (#984)
  * docs: Expand the GITHUB_TOKEN section (#968)
  * ci(Mergify): configuration update (#972)
  * fix: docker cp of dangling symlink (#943) (#948)
  * Fix: regression run after failure (#971)
  * ci(Mergify): configuration update (#966)
  * build(deps): bump github.com/moby/buildkit from 0.9.2 to 0.9.3 (#958)
  * build(deps): bump github.com/docker/docker (#957)
  * build(deps): bump github.com/opencontainers/image-spec (#954)
  * build(deps): bump github.com/docker/cli (#956)
  * Test: env.ACT in if condition of the workflow (#965)
  * feat: add skipped status as step result (#950)
  * feat: try to read ref and sha from event payload if available (#889)
  * fix: set composite outputs on failure (#945)
  * Refactor expression evaluator to use parser from actionlint package (#908)
  * fix(goreleaser): add append mode for release notes (#962)
  * feat(goreleaser): format changelog, add prereleases (#942)
  * fix: update install.sh (#937)
  * refactor: export and move shared contexts into pkg/model (#931)
  * feat: add node16 support (#922)
  * Feature: uses in composite (#793)
  * lint(megalinter): disable markdown link check (#938)
  * ci: replace superlinter with megalinter (#923)
  * fix: rework setupShellCommand (#930)
  * fix: clarify --reuse and --rm flags (#929)
  * ci(Mergify): configuration update (#924)
  * fix: ::stop-commands:: should continue to print the lines (#920)
  * fix: continue jobs + steps after failure (#840)
  * Fix and test choco action (#911)
  * Docker auth (#891)
  * container credentials (#868)
  * Add more steps context support (#887)
  * feat: allow existing logger from context (#898)
  * feat: SELinux lables for --bind (#906)
  * ci(choco): fix chocolatey docker build (#903)
- Add go modules (vendor) suport in _service file
- run spec-cleaner</changelog>
  <changelog author="jayvdb@gmail.com" date="1660132800">- Update to version 0.2.30:
  * fix: ensure all post steps are executed (#1286)
  * walk submodule path instead of dir name (#1282)
  * fix: add parent step id in composite action step id (#1268)
  * Made env interpolated instead of evaluated. (#1222)
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#1273)
  * Update README.md (#1260)
  * lint: add ReadHeaderTimeout (#1277)
  * fix: the number in the github event is of type number (#1252)
  * only perform chown operation for non root users (#1250)
  * fix: allow TimeoutMinutes to be expression in Jobs (#1247)
  * fix: use docker images from dockerhub (#1249)
  * Improve --eventpath example command (#1243)
  * Improve docs for events inputs (#1238)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.14 to 1.6.15 (#1239)
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 (#1240)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.31" date="1670673600">- Update to version 0.2.31:
  * fix: CI is unstable due to new linting rules (#1292)
  * help output: use consistent terminology between -j &amp; -l (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.32" date="1670673601">- Update to version 0.2.32:
  * feat: pass current matrix information to job logger (#1364)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.33" date="1670673602">- Update to version 0.2.33:
  * fix: ci is failing since 2022-10-17 (#1397)
  * fix: re-evaluate env for remote composite actions (#1385)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping workflow_dispatch inputs into the Expression inputs context (#1363)
  * test: add test for networking setup in act (#1375)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * Fix composite input handling (#1345)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1670673603">- Update to version 0.2.34:
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * feat: parse types of reusable workflows (#1414)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * fix: keep path to event json file in composite actions (#1428)
  * fix: nil pointer access ( workflow_dispatch )
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * Remove dead code (#1425)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1673438400">- Spec file:
  Fix bsc#1207021 to report the correct version when calling "act --version"
  Wrong version is fixed with sed in act-0.2.34/main.go
  Reported upstream as GH://nektos/act#1555</changelog>
  <changelog author="sebix@sebix.at" date="1683720000">- Update to version 0.2.45:
  * chore: bump VERSION to 0.2.45
  * Support cache (#1770)
  * chore: run act from cli on linux (#1758)
  * Revert breaking docker socket changes (#1763)
  * avoid using log.Fatal (#1759)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1755)
  * build(deps): bump github.com/docker/docker (#1754)
  * build(deps): bump github.com/docker/cli (#1753)
  * build(deps): bump codecov/codecov-action from 3.1.2 to 3.1.3 (#1752)
  * ci: deduplicate running workflows (#1751)
  * fix: try finding a socket, otherwise fail, respect user choice (#1745)
  * Improve watchAndRun (#1743)
  * Remove the comment-out code. (#1691)
  * typo: fix expression of warning message on macOS (#1693)
  * fix: environment handling windows (host mode) (#1732)
  * fix: ensure networkmode "host" unless explicitly specified (#1739)
  * Avoid using `log.Fatal` in `pkg/*` (#1705)
  * feat: support yaml env/secrets/inputs file (#1733)
  * build(deps): bump codecov/codecov-action from 3.1.1 to 3.1.2 (#1735)
  * fix: ghc assignment typo (#1729)
  * fix: reusable workflow panic (#1728)
  * fix: add `server_url` attribute to github context (#1727)
  * build(deps): update go-git to ce62f3e9ff86270538a514a68d3bd5563a733e3b (#1725)
  * build(deps): bump github.com/docker/docker (#1719)
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#1724)
  * build(deps): bump github.com/docker/cli (#1722)
  * build(deps): bump megalinter/megalinter from 6.22.1 to 6.22.2 (#1720)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.23 to 1.6.24 (#1721)
  * build(deps): bump golang.org/x/term from 0.6.0 to 0.7.0 (#1723)
  * build(deps): bump github.com/docker/cli (#1712)
  * build(deps): bump github.com/docker/docker (#1711)
  * build(deps): bump megalinter/megalinter from 6.21.0 to 6.22.1 (#1710)
  * chore: bump VERSION to 0.2.44
  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.5 (#1708)
  * feat: improve GetOutboundIP (#1707)
  * fix: use os.UserHomeDir (#1706)
  * Make sure working directory is respected when configured from matrix (#1686)
  * build(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.5 (#1703)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18 (#1702)
  * build(deps): bump github.com/imdario/mergo from 0.3.14 to 0.3.15 (#1701)
  * build(deps): bump actions/stale from 7 to 8 (#1700)
  * build(deps): bump megalinter/megalinter from 6.20.1 to 6.21.0 (#1699)
  * full path required for extension install (#1670)
  * build(deps): bump actions/setup-go from 3 to 4 (#1689)
  * build(deps): bump github.com/imdario/mergo from 0.3.13 to 0.3.14 (#1688)
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#1650)
  * build(deps): bump megalinter/megalinter from 6.20.0 to 6.20.1 (#1679)
  * build(deps): bump fregante/setup-git-user from 1 to 2 (#1664)
  * Add example command for collecting artifacts (#1671)
  * feat: specify matrix on command line (#1675)
  * Support for docker steps in host environment (#1674)
  * fix: correct ref and ref_name (#1672)
  * fix: return err in walk (#1667)
  * test: Enshure ForcePull config doesn't break docker actions (1661)
  * fix: crash if the id tool fails to run in the container (1660)
  * build(deps): bump github.com/moby/buildkit from 0.11.3 to 0.11.4 (#1669)
  * build(deps): bump megalinter/megalinter from 6.19.0 to 6.20.0 (#1665)
  * build(deps): bump golang.org/x/term from 0.5.0 to 0.6.0 (#1666)
  * Improve XDG Spec supporting (#1656)
  * fix: safe file name (#1651)
  * fix: compare properties of Invalid types (#1645)
  * chore: bump VERSION to 0.2.43
  * fix: github.job property is empty, GITHUB_JOB should be job id (#1646)
  * build(deps): bump github.com/opencontainers/image-spec (#1649)
  * fix: update output handling for reusable workflows (#1521)
  * fix: crash malformed composite action (#1616)
  * docs: remove help section (#1648)
  * feat: workflowpattern package (#1618)
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18 (#1637)
  * fix: add GITHUB_STEP_SUMMARY (#1607)
  * build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 (#1636)
  * build(deps): bump github.com/moby/buildkit from 0.11.2 to 0.11.3 (#1635)
  * fix: tolerate workflow that needs a missing job (#1595) (#1619)
  * chore: Remove obsolete Container.UpdateFromPath (#1631)
  * chore: use new style octal (#1630)
  * fix: don't override env (#1629)
  * ci: add Winget Releaser workflow (#1623)
  * build(deps): bump github.com/opencontainers/selinux (#1625)
  * build(deps): bump github.com/docker/docker (#1624)
  * build(deps): bump github.com/docker/cli (#1626)
  * chore: add Winget installation instructions (#1622)
  * Pass dockerfile to build executor (#1606)
  * build(deps): bump github.com/docker/cli from 23.0.0-rc.1+incompatible to 23.0.0+incompatible (#1611)
  * build(deps): bump github.com/docker/docker (#1613)
  * build(deps): bump megalinter/megalinter from 6.18.0 to 6.19.0 (#1610)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1 (#1612)
  * build(deps): bump github.com/joho/godotenv from 1.4.0 to 1.5.1 (#1614)
  * refactor: GITHUB_ENV command / remove env.PATH (#1503)
  * Update max container name length (#1597)
  * feat: allow overriding of `GITHUB_` env variables (#1582)
  * Docker build fixes (#1596)
  * fix: Apply forcePull only for prebuild docker actions (#1599)
  * chore: bump VERSION to 0.2.42
  * feat: cache notices to reduce frequency of upgrade notifications (#1592)
  * chore: fix release script to trigger gh-act
  * chore: bump VERSION to 0.2.41
  * build(deps): bump github.com/moby/buildkit from 0.11.1 to 0.11.2 (#1589)
  * build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#1590)
  * cI: make stalebot less annoying (#1587)
  * test: Do not leak step env in composite (#1585)
  * feat: step summary of test results (#1580)
  * build(deps): bump github.com/moby/buildkit from 0.11.0 to 0.11.1 (#1576)
  * build(deps): bump golang.org/x/term from 0.3.0 to 0.4.0 (#1577)
  * build(deps): bump github.com/docker/docker (#1573)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.22 to 1.6.23 (#1574)
  * build(deps): bump actions/github-script from 5 to 6 (#1572)
  * chore: update docs for installing act as GH CLI extension
  * feat: release extension
  * feat: release extension
  * feat: release extension
  * refactor: pull and rebuild docker by default (#1569)
  * feat: add remote reusable workflows (#1525)
  * Fixed auto-generated platform configuration with Micro size image (#1566)
  * Feature/allow worktrees (#1530)
  * chore: bump VERSION to 0.2.40
  * fix: update artifact server to address GHSL-2023-004 (#1565)
  * chore: bump VERSION to 0.2.39
  * chore: fix promote script
  * chore: bump version
  * chore: makefile update
  * chore: bump version
  * build(deps): bump github.com/moby/buildkit from 0.10.6 to 0.11.0 (#1563)
  * chore: push new version
  * Readme: Fix shell installation (#1547)
  * fix: allow override of artifact server bind address (#1560)
  * feat: add check for newer versions (#1562)
  * Input (#1524)
  * refactor: remove docker image list reference filter (#1501)
  * fix: add-matcher fails github workflow (#1532)
  * feat: add support for building docker actions with private registries (#1557)
  * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.12 (#1554)
  * feat: Allow building without docker support (#1507)
  * fix: extra path lost in composite actions (#1531)
  * test: make sure workflow_call is not a github event calling our workflow (#1520)
  * fix: preserve job result state in case of failure (#1519)
  * build(deps): bump megalinter/megalinter from 6.17.0 to 6.18.0 (#1550)
  * build(deps): bump megalinter/megalinter from 6.16.0 to 6.17.0 (#1540)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17 (#1539)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0 (#1541)
  * build(deps): bump megalinter/megalinter from 6.15.0 to 6.16.0 (#1534)
  * build(deps): bump actions/stale from 6 to 7 (#1535)
  * revert: deprecation of containerArchitecture (#1514)
  * build(deps): bump goreleaser/goreleaser-action from 3 to 4 (#1515)
  * build(deps): bump github.com/docker/cli (#1516)
  * build(deps): bump github.com/docker/docker (#1517)
  * fix: align runner.os / runner.arch to known values (#1510)
  * feat: Support "result" on "needs" context. (#1497)
  * fix: tail (not absolute) as entrypoint of job container (#1506)
  * refactor: fix savestate in pre steps (#1466)
  * feat: allow to spawn and run a local reusable workflow (#1423)
  * refactor: fix add-path / GITHUB_PATH commands (#1472)
  * feat: JobLoggerFactory (#1496)
  * fix: handle env-vars case sensitive (#1493)
  * fix: step env is unavailable in with property expr (#1458)
  * refactor: share UpdateFromEnv logic (#1457)
  * feat: `--container-options` (#1462)
  * refactor: move autoremove into the jobexecutor (#1463)
  * docs: clarifying skipping steps / jobs (#1480)
  * Pass `LANG=C.UTF-8` to environment (#1476)
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * Remove dead code (#1425)
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * fix: keep path to event json file in composite actions (#1428)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * fix: nil pointer access ( workflow_dispatch )
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)
  * feat: parse types of reusable workflows (#1414)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping `workflow_dispatch` inputs into the Expression `inputs` context (#1363)
  * fix: ci is failing since 2022-10-17 (#1397)
  * test: add test for networking setup in act (#1375)
  * fix: re-evaluate env for remote composite actions (#1385)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * Fix composite input handling (#1345)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * feat: pass current matrix information to job logger (#1364)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * help output: use consistent terminology between `-j` &amp; `-l` (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)
  * fix: CI is unstable due to new linting rules (#1292)</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1764417600">- Fix CVE-2025-47913 (bsc#1253608): Prevent panic in embedded
  golang.org/x/crypto/ssh/agent client when receiving unexpected
  message types for key listing or signing requests by returning
  a descriptive error instead. Adds patch fix-CVE-2025-47913-ssh-agent.patch
  adapted from upstream change https://go-review.googlesource.com/c/crypto/+/700295
  with additional regression tests (client_test.go) to exercise the new error
  paths for List() and SignWithFlags().</changelog>
</package>
<package pkgid="2a0b50d73535464138e1886f5355c18aee1395f91e28786be5eba2f6e06af525" name="act" arch="src">
  <version epoch="0" ver="0.2.45" rel="bp156.2.3.1"/>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1638619200">- Init act Package.
  Run your GitHub Actions locally. 🚀
  Current Release: v0.2.25
  Commit Hash: 8ad6c07083c7cd7f45ea9e0808e3297bf2370ab5</changelog>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1638705600">- Update to version 0.2.25:
  * feat: add option for docker image rebuild (#878)
  * Don't interpolate joboutputs, before job is done (#894)
  * Fix regex for GITHUB_ENV parsing (#893)
  * Revert "feat: allow existing logger from context (#859)" (#890)
  * docs: add brew installation from HEAD (#886)
  * build(deps): bump github.com/go-ini/ini from 1.63.2 to 1.64.0 (#882)
  * fix: fromJSON should work with any JSON (#883)
  * fix: correctly unmarshal entrypoint (#876)
  * fix: use docker lib for image ref parsing (#877)
  * Fix github SSH regex for missing .git extension (#871)</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 0.2.29:
  * build(deps): bump github.com/rhysd/actionlint from 1.6.13 to 1.6.14 (#1234)
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (#1233)
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5 (#1232)
  * fix: checkout container path should always use `/` (#1226)
  * feat: add option to bypass GHE for actions checkout (#1162)
  * revert auto changelog generator
  * ignore release-notes.md to avoid dirty check in goreleaser
  * update to use PAT
  * setup git user
  * allow workflow_dispatch on tag-monthly
  * add monthly release
  * auto generate changelog (#1225)
  * update runc and containerd (#1224)
  * feat: non root user container (#1202)
  * fix: processing of strategy.matrix.include (#1200)
  * fix: localcheckout mock (#1198)
  * Added support for chunked uploads. (#1208)
  * fix: keep action inputs (#1215)
  * Improve logging (#1171)
  * fix: allow TimeoutMinutes to be expression (#1217)
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2 (#1213)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.4 to 2.3.5 (#1214)
  * build(deps): bump github.com/docker/cli (#1211)
  * build(deps): bump github.com/docker/docker (#1212)
  * refactor: remove github.com/pkg/errors dependency (#1077)
  * fix: skip local actions pre step in any case (#1204)
  * pkg/runner: add support to replace GitHub's env (#1197)
  * fix: dryrun skip local actions + enable Tests (#1199)
  * fix: Remove volume with same name as the container again (#1203)
  * build(deps): bump github.com/go-ini/ini from 1.66.5 to 1.66.6 (#1201)
  * build(deps): bump github.com/go-ini/ini from 1.66.4 to 1.66.5 (#1189)
  * governance: fix bug report rendering (#1186)
  * update docs (#1180)
  * feat: handle context cancelation during docker exec (#1170)
  * implement pre and post steps (#1089)
  * fix: remove composite restrictions (#1128)
  * governance: new issue templates (#1048)
  * ci(choco): update chocolatey to 1.1.0 (#1164)
  * build(deps): bump goreleaser/goreleaser-action from 2 to 3 (#1179)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.12 to 1.6.13 (#1173)
  * feat: add ubuntu-22.04 (#1150)
  * feat/bug-report-extended (#1163)
  * build(deps): bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#1169)
  * build(deps): bump github.com/docker/docker (#1167)
  * build(deps): bump github.com/docker/cli (#1168)
  * fix: panic if a step in a job is nil (#1145)
  * fix: return invalid step type (#1157)
  * Remove the correct Volume (#1148)
  * fix: panic while running DRYRUN with local actions (#1141)
  * refactor: remove composite action runcontext workaround (#1085)
  * build(deps): bump github.com/moby/buildkit from 0.10.2 to 0.10.3 (#1153)
  * build(deps): bump docker/setup-qemu-action from 1 to 2 (#1156)
  * build(deps): bump github.com/docker/docker (#1155)
  * build(deps): bump github.com/docker/cli (#1154)
  * feat: support `GITHUB_REF_NAME` &amp; `GITHUB_REF_TYPE` (#1142)
  * build(deps): bump github.com/moby/buildkit from 0.10.1 to 0.10.2 (#1147)
  * fix: conclusion and outcome are no integers (#1136)
  * fix: do not error that much (#1137)
  * build(deps): bump codecov/codecov-action from 3.0.0 to 3.1.0 (#1139)
  * chore: fold integration test outputs (#1111)
  * Update README.md (#1121)
  * docs(README): remove go install (#1123)
  * ci: always grab latest go version (#1124)
  * tests: remove runTestJobFile (#1127)
  * use new paths from goreleaser (#1135)
  * README: add MacPorts badge (#1129)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.11 to 1.6.12 (#1126)
  * build(deps): bump codecov/codecov-action from 2.1.0 to 3.0.0 (#1118)
  * build(deps): bump github.com/moby/buildkit from 0.10.0 to 0.10.1 (#1116)
  * build(deps): bump actions/upload-artifact from 2 to 3 (#1119)
  * build(deps): bump actions/setup-go from 2 to 3 (#1120)
  * build(deps): bump actions/stale from 4 to 5 (#1117)
  * tests(runner): move arm64 test to own func (#1095)
  * build(deps): bump deps which dependabot doesn't want to (#1107)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.10 to 1.6.11 (#1106)
  * implement volume mount for container job (#1101)
  * feat: add option to specify git remote name (#1104)
  * Allow passed in env vars to supersede ones declared in the workflow (#1100)
  * fix: copy ignored tracked files (#1074)
  * build(deps): bump github.com/opencontainers/selinux (#1102)
  * fix: return error on reusable workflows (#1093)
  * deps: bump go.mod to go1.18 (#1088)
  * fix(editorconfig): correct braces (#1094)
  * ci: bump go to 1.18 (#1087)
  * fix: don't overwrite with empty cmd/entrypoint (#1076)
  * refactor: simplify action function signatures (#1083)
  * deps: remove shlex (#1086)
  * fix: set default version string (#1070)
  * build(deps): bump actions/cache from 2 to 3 (#1082)
  * build(deps): bump github.com/docker/docker (#1080)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.2 to 2.3.4 (#1079)
  * build(deps): bump github.com/docker/cli (#1081)
  * automatically merge PRs from dependabot (#1084)
  * deps: bump go-git (#1057)
  * feat: split job steps into its own files/structs (#1004)
  * feat: add bug-report flag (#1056)
  * Fix: panic: reflect: slice index out of range (#1066)
  * Fix: call of reflect.Value.Interface on zero Value (#1067)
  * Fix: tojson(null) == 'null' (#1068)
  * build(deps): bump github.com/docker/docker (#1062)
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1061)
  * feat: add flag to always run the checkout action (#1049)
  * Revert: Don't stop JobContainer on failure (#1041)
  * fix: remove unused TestContext (#1013)
  * feat: add step name to logger field (#1027)
  * fix: coerce booleans to numbers for comparison in exprparser (#1030)
  * feat: add json logger output (#1026)
  * build(deps): bump golangci/golangci-lint-action from 2 to 3.1.0 (#1019)
  * ci(stalebot): ignore feature requests (#1017)
  * build(deps): bump actions/checkout from 2 to 3 (#1028)
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0 (#1040)
  * build(deps): bump github.com/docker/cli (#1038)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.9 to 1.6.10 (#1039)
  * build(deps): bump github.com/docker/distribution (#1037)
  * build(deps): bump github.com/moby/buildkit from 0.9.3 to 0.10.0 (#1036)
  * fix: trim whitespace from actrc (#1024)
  * fix: hide masked values in log files (#1011)
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#955)
  * Update link to 'filesystems' GitHub docs (#1016)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.8 to 1.6.9 (#1018)
  * feat: run jobs in parallel (#1003)
  * Expression evaluator fixes (#1009)
  * build(deps): bump github.com/go-ini/ini from 1.64.0 to 1.66.4 (#997)
  * fix: print line after password prompt (#1014)
  * refactor: default empty if: statement to if: success() in evaluator &amp; remove `FixIfStatement()` (#990)
  * fix: deep evaluate matrix strategy (#964)
  * build(deps): bump github.com/docker/distribution (#994)
  * Added instructions to install on fedora using copr package (#993)
  * fix: always execute closeContainer() executor (#988)
  * refactor: extract setupAction into ActionReader (#986)
  * refactor: extract RunContext Executor in JobExecutor (#984)
  * docs: Expand the GITHUB_TOKEN section (#968)
  * ci(Mergify): configuration update (#972)
  * fix: docker cp of dangling symlink (#943) (#948)
  * Fix: regression run after failure (#971)
  * ci(Mergify): configuration update (#966)
  * build(deps): bump github.com/moby/buildkit from 0.9.2 to 0.9.3 (#958)
  * build(deps): bump github.com/docker/docker (#957)
  * build(deps): bump github.com/opencontainers/image-spec (#954)
  * build(deps): bump github.com/docker/cli (#956)
  * Test: env.ACT in if condition of the workflow (#965)
  * feat: add skipped status as step result (#950)
  * feat: try to read ref and sha from event payload if available (#889)
  * fix: set composite outputs on failure (#945)
  * Refactor expression evaluator to use parser from actionlint package (#908)
  * fix(goreleaser): add append mode for release notes (#962)
  * feat(goreleaser): format changelog, add prereleases (#942)
  * fix: update install.sh (#937)
  * refactor: export and move shared contexts into pkg/model (#931)
  * feat: add node16 support (#922)
  * Feature: uses in composite (#793)
  * lint(megalinter): disable markdown link check (#938)
  * ci: replace superlinter with megalinter (#923)
  * fix: rework setupShellCommand (#930)
  * fix: clarify --reuse and --rm flags (#929)
  * ci(Mergify): configuration update (#924)
  * fix: ::stop-commands:: should continue to print the lines (#920)
  * fix: continue jobs + steps after failure (#840)
  * Fix and test choco action (#911)
  * Docker auth (#891)
  * container credentials (#868)
  * Add more steps context support (#887)
  * feat: allow existing logger from context (#898)
  * feat: SELinux lables for --bind (#906)
  * ci(choco): fix chocolatey docker build (#903)
- Add go modules (vendor) suport in _service file
- run spec-cleaner</changelog>
  <changelog author="jayvdb@gmail.com" date="1660132800">- Update to version 0.2.30:
  * fix: ensure all post steps are executed (#1286)
  * walk submodule path instead of dir name (#1282)
  * fix: add parent step id in composite action step id (#1268)
  * Made env interpolated instead of evaluated. (#1222)
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#1273)
  * Update README.md (#1260)
  * lint: add ReadHeaderTimeout (#1277)
  * fix: the number in the github event is of type number (#1252)
  * only perform chown operation for non root users (#1250)
  * fix: allow TimeoutMinutes to be expression in Jobs (#1247)
  * fix: use docker images from dockerhub (#1249)
  * Improve --eventpath example command (#1243)
  * Improve docs for events inputs (#1238)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.14 to 1.6.15 (#1239)
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 (#1240)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.31" date="1670673600">- Update to version 0.2.31:
  * fix: CI is unstable due to new linting rules (#1292)
  * help output: use consistent terminology between -j &amp; -l (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.32" date="1670673601">- Update to version 0.2.32:
  * feat: pass current matrix information to job logger (#1364)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.33" date="1670673602">- Update to version 0.2.33:
  * fix: ci is failing since 2022-10-17 (#1397)
  * fix: re-evaluate env for remote composite actions (#1385)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping workflow_dispatch inputs into the Expression inputs context (#1363)
  * test: add test for networking setup in act (#1375)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * Fix composite input handling (#1345)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1670673603">- Update to version 0.2.34:
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * feat: parse types of reusable workflows (#1414)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * fix: keep path to event json file in composite actions (#1428)
  * fix: nil pointer access ( workflow_dispatch )
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * Remove dead code (#1425)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1673438400">- Spec file:
  Fix bsc#1207021 to report the correct version when calling "act --version"
  Wrong version is fixed with sed in act-0.2.34/main.go
  Reported upstream as GH://nektos/act#1555</changelog>
  <changelog author="sebix@sebix.at" date="1683720000">- Update to version 0.2.45:
  * chore: bump VERSION to 0.2.45
  * Support cache (#1770)
  * chore: run act from cli on linux (#1758)
  * Revert breaking docker socket changes (#1763)
  * avoid using log.Fatal (#1759)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1755)
  * build(deps): bump github.com/docker/docker (#1754)
  * build(deps): bump github.com/docker/cli (#1753)
  * build(deps): bump codecov/codecov-action from 3.1.2 to 3.1.3 (#1752)
  * ci: deduplicate running workflows (#1751)
  * fix: try finding a socket, otherwise fail, respect user choice (#1745)
  * Improve watchAndRun (#1743)
  * Remove the comment-out code. (#1691)
  * typo: fix expression of warning message on macOS (#1693)
  * fix: environment handling windows (host mode) (#1732)
  * fix: ensure networkmode "host" unless explicitly specified (#1739)
  * Avoid using `log.Fatal` in `pkg/*` (#1705)
  * feat: support yaml env/secrets/inputs file (#1733)
  * build(deps): bump codecov/codecov-action from 3.1.1 to 3.1.2 (#1735)
  * fix: ghc assignment typo (#1729)
  * fix: reusable workflow panic (#1728)
  * fix: add `server_url` attribute to github context (#1727)
  * build(deps): update go-git to ce62f3e9ff86270538a514a68d3bd5563a733e3b (#1725)
  * build(deps): bump github.com/docker/docker (#1719)
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#1724)
  * build(deps): bump github.com/docker/cli (#1722)
  * build(deps): bump megalinter/megalinter from 6.22.1 to 6.22.2 (#1720)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.23 to 1.6.24 (#1721)
  * build(deps): bump golang.org/x/term from 0.6.0 to 0.7.0 (#1723)
  * build(deps): bump github.com/docker/cli (#1712)
  * build(deps): bump github.com/docker/docker (#1711)
  * build(deps): bump megalinter/megalinter from 6.21.0 to 6.22.1 (#1710)
  * chore: bump VERSION to 0.2.44
  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.5 (#1708)
  * feat: improve GetOutboundIP (#1707)
  * fix: use os.UserHomeDir (#1706)
  * Make sure working directory is respected when configured from matrix (#1686)
  * build(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.5 (#1703)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18 (#1702)
  * build(deps): bump github.com/imdario/mergo from 0.3.14 to 0.3.15 (#1701)
  * build(deps): bump actions/stale from 7 to 8 (#1700)
  * build(deps): bump megalinter/megalinter from 6.20.1 to 6.21.0 (#1699)
  * full path required for extension install (#1670)
  * build(deps): bump actions/setup-go from 3 to 4 (#1689)
  * build(deps): bump github.com/imdario/mergo from 0.3.13 to 0.3.14 (#1688)
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#1650)
  * build(deps): bump megalinter/megalinter from 6.20.0 to 6.20.1 (#1679)
  * build(deps): bump fregante/setup-git-user from 1 to 2 (#1664)
  * Add example command for collecting artifacts (#1671)
  * feat: specify matrix on command line (#1675)
  * Support for docker steps in host environment (#1674)
  * fix: correct ref and ref_name (#1672)
  * fix: return err in walk (#1667)
  * test: Enshure ForcePull config doesn't break docker actions (1661)
  * fix: crash if the id tool fails to run in the container (1660)
  * build(deps): bump github.com/moby/buildkit from 0.11.3 to 0.11.4 (#1669)
  * build(deps): bump megalinter/megalinter from 6.19.0 to 6.20.0 (#1665)
  * build(deps): bump golang.org/x/term from 0.5.0 to 0.6.0 (#1666)
  * Improve XDG Spec supporting (#1656)
  * fix: safe file name (#1651)
  * fix: compare properties of Invalid types (#1645)
  * chore: bump VERSION to 0.2.43
  * fix: github.job property is empty, GITHUB_JOB should be job id (#1646)
  * build(deps): bump github.com/opencontainers/image-spec (#1649)
  * fix: update output handling for reusable workflows (#1521)
  * fix: crash malformed composite action (#1616)
  * docs: remove help section (#1648)
  * feat: workflowpattern package (#1618)
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18 (#1637)
  * fix: add GITHUB_STEP_SUMMARY (#1607)
  * build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 (#1636)
  * build(deps): bump github.com/moby/buildkit from 0.11.2 to 0.11.3 (#1635)
  * fix: tolerate workflow that needs a missing job (#1595) (#1619)
  * chore: Remove obsolete Container.UpdateFromPath (#1631)
  * chore: use new style octal (#1630)
  * fix: don't override env (#1629)
  * ci: add Winget Releaser workflow (#1623)
  * build(deps): bump github.com/opencontainers/selinux (#1625)
  * build(deps): bump github.com/docker/docker (#1624)
  * build(deps): bump github.com/docker/cli (#1626)
  * chore: add Winget installation instructions (#1622)
  * Pass dockerfile to build executor (#1606)
  * build(deps): bump github.com/docker/cli from 23.0.0-rc.1+incompatible to 23.0.0+incompatible (#1611)
  * build(deps): bump github.com/docker/docker (#1613)
  * build(deps): bump megalinter/megalinter from 6.18.0 to 6.19.0 (#1610)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1 (#1612)
  * build(deps): bump github.com/joho/godotenv from 1.4.0 to 1.5.1 (#1614)
  * refactor: GITHUB_ENV command / remove env.PATH (#1503)
  * Update max container name length (#1597)
  * feat: allow overriding of `GITHUB_` env variables (#1582)
  * Docker build fixes (#1596)
  * fix: Apply forcePull only for prebuild docker actions (#1599)
  * chore: bump VERSION to 0.2.42
  * feat: cache notices to reduce frequency of upgrade notifications (#1592)
  * chore: fix release script to trigger gh-act
  * chore: bump VERSION to 0.2.41
  * build(deps): bump github.com/moby/buildkit from 0.11.1 to 0.11.2 (#1589)
  * build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#1590)
  * cI: make stalebot less annoying (#1587)
  * test: Do not leak step env in composite (#1585)
  * feat: step summary of test results (#1580)
  * build(deps): bump github.com/moby/buildkit from 0.11.0 to 0.11.1 (#1576)
  * build(deps): bump golang.org/x/term from 0.3.0 to 0.4.0 (#1577)
  * build(deps): bump github.com/docker/docker (#1573)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.22 to 1.6.23 (#1574)
  * build(deps): bump actions/github-script from 5 to 6 (#1572)
  * chore: update docs for installing act as GH CLI extension
  * feat: release extension
  * feat: release extension
  * feat: release extension
  * refactor: pull and rebuild docker by default (#1569)
  * feat: add remote reusable workflows (#1525)
  * Fixed auto-generated platform configuration with Micro size image (#1566)
  * Feature/allow worktrees (#1530)
  * chore: bump VERSION to 0.2.40
  * fix: update artifact server to address GHSL-2023-004 (#1565)
  * chore: bump VERSION to 0.2.39
  * chore: fix promote script
  * chore: bump version
  * chore: makefile update
  * chore: bump version
  * build(deps): bump github.com/moby/buildkit from 0.10.6 to 0.11.0 (#1563)
  * chore: push new version
  * Readme: Fix shell installation (#1547)
  * fix: allow override of artifact server bind address (#1560)
  * feat: add check for newer versions (#1562)
  * Input (#1524)
  * refactor: remove docker image list reference filter (#1501)
  * fix: add-matcher fails github workflow (#1532)
  * feat: add support for building docker actions with private registries (#1557)
  * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.12 (#1554)
  * feat: Allow building without docker support (#1507)
  * fix: extra path lost in composite actions (#1531)
  * test: make sure workflow_call is not a github event calling our workflow (#1520)
  * fix: preserve job result state in case of failure (#1519)
  * build(deps): bump megalinter/megalinter from 6.17.0 to 6.18.0 (#1550)
  * build(deps): bump megalinter/megalinter from 6.16.0 to 6.17.0 (#1540)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17 (#1539)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0 (#1541)
  * build(deps): bump megalinter/megalinter from 6.15.0 to 6.16.0 (#1534)
  * build(deps): bump actions/stale from 6 to 7 (#1535)
  * revert: deprecation of containerArchitecture (#1514)
  * build(deps): bump goreleaser/goreleaser-action from 3 to 4 (#1515)
  * build(deps): bump github.com/docker/cli (#1516)
  * build(deps): bump github.com/docker/docker (#1517)
  * fix: align runner.os / runner.arch to known values (#1510)
  * feat: Support "result" on "needs" context. (#1497)
  * fix: tail (not absolute) as entrypoint of job container (#1506)
  * refactor: fix savestate in pre steps (#1466)
  * feat: allow to spawn and run a local reusable workflow (#1423)
  * refactor: fix add-path / GITHUB_PATH commands (#1472)
  * feat: JobLoggerFactory (#1496)
  * fix: handle env-vars case sensitive (#1493)
  * fix: step env is unavailable in with property expr (#1458)
  * refactor: share UpdateFromEnv logic (#1457)
  * feat: `--container-options` (#1462)
  * refactor: move autoremove into the jobexecutor (#1463)
  * docs: clarifying skipping steps / jobs (#1480)
  * Pass `LANG=C.UTF-8` to environment (#1476)
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * Remove dead code (#1425)
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * fix: keep path to event json file in composite actions (#1428)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * fix: nil pointer access ( workflow_dispatch )
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)
  * feat: parse types of reusable workflows (#1414)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping `workflow_dispatch` inputs into the Expression `inputs` context (#1363)
  * fix: ci is failing since 2022-10-17 (#1397)
  * test: add test for networking setup in act (#1375)
  * fix: re-evaluate env for remote composite actions (#1385)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * Fix composite input handling (#1345)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * feat: pass current matrix information to job logger (#1364)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * help output: use consistent terminology between `-j` &amp; `-l` (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)
  * fix: CI is unstable due to new linting rules (#1292)</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1764417600">- Fix CVE-2025-47913 (bsc#1253608): Prevent panic in embedded
  golang.org/x/crypto/ssh/agent client when receiving unexpected
  message types for key listing or signing requests by returning
  a descriptive error instead. Adds patch fix-CVE-2025-47913-ssh-agent.patch
  adapted from upstream change https://go-review.googlesource.com/c/crypto/+/700295
  with additional regression tests (client_test.go) to exercise the new error
  paths for List() and SignWithFlags().</changelog>
</package>
<package pkgid="efae996c3c645834ae215caf73a646945d3f7249c77adaa06355dea14b3168ff" name="act" arch="x86_64">
  <version epoch="0" ver="0.2.45" rel="bp156.2.3.1"/>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1638619200">- Init act Package.
  Run your GitHub Actions locally. 🚀
  Current Release: v0.2.25
  Commit Hash: 8ad6c07083c7cd7f45ea9e0808e3297bf2370ab5</changelog>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1638705600">- Update to version 0.2.25:
  * feat: add option for docker image rebuild (#878)
  * Don't interpolate joboutputs, before job is done (#894)
  * Fix regex for GITHUB_ENV parsing (#893)
  * Revert "feat: allow existing logger from context (#859)" (#890)
  * docs: add brew installation from HEAD (#886)
  * build(deps): bump github.com/go-ini/ini from 1.63.2 to 1.64.0 (#882)
  * fix: fromJSON should work with any JSON (#883)
  * fix: correctly unmarshal entrypoint (#876)
  * fix: use docker lib for image ref parsing (#877)
  * Fix github SSH regex for missing .git extension (#871)</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 0.2.29:
  * build(deps): bump github.com/rhysd/actionlint from 1.6.13 to 1.6.14 (#1234)
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (#1233)
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5 (#1232)
  * fix: checkout container path should always use `/` (#1226)
  * feat: add option to bypass GHE for actions checkout (#1162)
  * revert auto changelog generator
  * ignore release-notes.md to avoid dirty check in goreleaser
  * update to use PAT
  * setup git user
  * allow workflow_dispatch on tag-monthly
  * add monthly release
  * auto generate changelog (#1225)
  * update runc and containerd (#1224)
  * feat: non root user container (#1202)
  * fix: processing of strategy.matrix.include (#1200)
  * fix: localcheckout mock (#1198)
  * Added support for chunked uploads. (#1208)
  * fix: keep action inputs (#1215)
  * Improve logging (#1171)
  * fix: allow TimeoutMinutes to be expression (#1217)
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2 (#1213)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.4 to 2.3.5 (#1214)
  * build(deps): bump github.com/docker/cli (#1211)
  * build(deps): bump github.com/docker/docker (#1212)
  * refactor: remove github.com/pkg/errors dependency (#1077)
  * fix: skip local actions pre step in any case (#1204)
  * pkg/runner: add support to replace GitHub's env (#1197)
  * fix: dryrun skip local actions + enable Tests (#1199)
  * fix: Remove volume with same name as the container again (#1203)
  * build(deps): bump github.com/go-ini/ini from 1.66.5 to 1.66.6 (#1201)
  * build(deps): bump github.com/go-ini/ini from 1.66.4 to 1.66.5 (#1189)
  * governance: fix bug report rendering (#1186)
  * update docs (#1180)
  * feat: handle context cancelation during docker exec (#1170)
  * implement pre and post steps (#1089)
  * fix: remove composite restrictions (#1128)
  * governance: new issue templates (#1048)
  * ci(choco): update chocolatey to 1.1.0 (#1164)
  * build(deps): bump goreleaser/goreleaser-action from 2 to 3 (#1179)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.12 to 1.6.13 (#1173)
  * feat: add ubuntu-22.04 (#1150)
  * feat/bug-report-extended (#1163)
  * build(deps): bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#1169)
  * build(deps): bump github.com/docker/docker (#1167)
  * build(deps): bump github.com/docker/cli (#1168)
  * fix: panic if a step in a job is nil (#1145)
  * fix: return invalid step type (#1157)
  * Remove the correct Volume (#1148)
  * fix: panic while running DRYRUN with local actions (#1141)
  * refactor: remove composite action runcontext workaround (#1085)
  * build(deps): bump github.com/moby/buildkit from 0.10.2 to 0.10.3 (#1153)
  * build(deps): bump docker/setup-qemu-action from 1 to 2 (#1156)
  * build(deps): bump github.com/docker/docker (#1155)
  * build(deps): bump github.com/docker/cli (#1154)
  * feat: support `GITHUB_REF_NAME` &amp; `GITHUB_REF_TYPE` (#1142)
  * build(deps): bump github.com/moby/buildkit from 0.10.1 to 0.10.2 (#1147)
  * fix: conclusion and outcome are no integers (#1136)
  * fix: do not error that much (#1137)
  * build(deps): bump codecov/codecov-action from 3.0.0 to 3.1.0 (#1139)
  * chore: fold integration test outputs (#1111)
  * Update README.md (#1121)
  * docs(README): remove go install (#1123)
  * ci: always grab latest go version (#1124)
  * tests: remove runTestJobFile (#1127)
  * use new paths from goreleaser (#1135)
  * README: add MacPorts badge (#1129)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.11 to 1.6.12 (#1126)
  * build(deps): bump codecov/codecov-action from 2.1.0 to 3.0.0 (#1118)
  * build(deps): bump github.com/moby/buildkit from 0.10.0 to 0.10.1 (#1116)
  * build(deps): bump actions/upload-artifact from 2 to 3 (#1119)
  * build(deps): bump actions/setup-go from 2 to 3 (#1120)
  * build(deps): bump actions/stale from 4 to 5 (#1117)
  * tests(runner): move arm64 test to own func (#1095)
  * build(deps): bump deps which dependabot doesn't want to (#1107)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.10 to 1.6.11 (#1106)
  * implement volume mount for container job (#1101)
  * feat: add option to specify git remote name (#1104)
  * Allow passed in env vars to supersede ones declared in the workflow (#1100)
  * fix: copy ignored tracked files (#1074)
  * build(deps): bump github.com/opencontainers/selinux (#1102)
  * fix: return error on reusable workflows (#1093)
  * deps: bump go.mod to go1.18 (#1088)
  * fix(editorconfig): correct braces (#1094)
  * ci: bump go to 1.18 (#1087)
  * fix: don't overwrite with empty cmd/entrypoint (#1076)
  * refactor: simplify action function signatures (#1083)
  * deps: remove shlex (#1086)
  * fix: set default version string (#1070)
  * build(deps): bump actions/cache from 2 to 3 (#1082)
  * build(deps): bump github.com/docker/docker (#1080)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.2 to 2.3.4 (#1079)
  * build(deps): bump github.com/docker/cli (#1081)
  * automatically merge PRs from dependabot (#1084)
  * deps: bump go-git (#1057)
  * feat: split job steps into its own files/structs (#1004)
  * feat: add bug-report flag (#1056)
  * Fix: panic: reflect: slice index out of range (#1066)
  * Fix: call of reflect.Value.Interface on zero Value (#1067)
  * Fix: tojson(null) == 'null' (#1068)
  * build(deps): bump github.com/docker/docker (#1062)
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (#1061)
  * feat: add flag to always run the checkout action (#1049)
  * Revert: Don't stop JobContainer on failure (#1041)
  * fix: remove unused TestContext (#1013)
  * feat: add step name to logger field (#1027)
  * fix: coerce booleans to numbers for comparison in exprparser (#1030)
  * feat: add json logger output (#1026)
  * build(deps): bump golangci/golangci-lint-action from 2 to 3.1.0 (#1019)
  * ci(stalebot): ignore feature requests (#1017)
  * build(deps): bump actions/checkout from 2 to 3 (#1028)
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0 (#1040)
  * build(deps): bump github.com/docker/cli (#1038)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.9 to 1.6.10 (#1039)
  * build(deps): bump github.com/docker/distribution (#1037)
  * build(deps): bump github.com/moby/buildkit from 0.9.3 to 0.10.0 (#1036)
  * fix: trim whitespace from actrc (#1024)
  * fix: hide masked values in log files (#1011)
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#955)
  * Update link to 'filesystems' GitHub docs (#1016)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.8 to 1.6.9 (#1018)
  * feat: run jobs in parallel (#1003)
  * Expression evaluator fixes (#1009)
  * build(deps): bump github.com/go-ini/ini from 1.64.0 to 1.66.4 (#997)
  * fix: print line after password prompt (#1014)
  * refactor: default empty if: statement to if: success() in evaluator &amp; remove `FixIfStatement()` (#990)
  * fix: deep evaluate matrix strategy (#964)
  * build(deps): bump github.com/docker/distribution (#994)
  * Added instructions to install on fedora using copr package (#993)
  * fix: always execute closeContainer() executor (#988)
  * refactor: extract setupAction into ActionReader (#986)
  * refactor: extract RunContext Executor in JobExecutor (#984)
  * docs: Expand the GITHUB_TOKEN section (#968)
  * ci(Mergify): configuration update (#972)
  * fix: docker cp of dangling symlink (#943) (#948)
  * Fix: regression run after failure (#971)
  * ci(Mergify): configuration update (#966)
  * build(deps): bump github.com/moby/buildkit from 0.9.2 to 0.9.3 (#958)
  * build(deps): bump github.com/docker/docker (#957)
  * build(deps): bump github.com/opencontainers/image-spec (#954)
  * build(deps): bump github.com/docker/cli (#956)
  * Test: env.ACT in if condition of the workflow (#965)
  * feat: add skipped status as step result (#950)
  * feat: try to read ref and sha from event payload if available (#889)
  * fix: set composite outputs on failure (#945)
  * Refactor expression evaluator to use parser from actionlint package (#908)
  * fix(goreleaser): add append mode for release notes (#962)
  * feat(goreleaser): format changelog, add prereleases (#942)
  * fix: update install.sh (#937)
  * refactor: export and move shared contexts into pkg/model (#931)
  * feat: add node16 support (#922)
  * Feature: uses in composite (#793)
  * lint(megalinter): disable markdown link check (#938)
  * ci: replace superlinter with megalinter (#923)
  * fix: rework setupShellCommand (#930)
  * fix: clarify --reuse and --rm flags (#929)
  * ci(Mergify): configuration update (#924)
  * fix: ::stop-commands:: should continue to print the lines (#920)
  * fix: continue jobs + steps after failure (#840)
  * Fix and test choco action (#911)
  * Docker auth (#891)
  * container credentials (#868)
  * Add more steps context support (#887)
  * feat: allow existing logger from context (#898)
  * feat: SELinux lables for --bind (#906)
  * ci(choco): fix chocolatey docker build (#903)
- Add go modules (vendor) suport in _service file
- run spec-cleaner</changelog>
  <changelog author="jayvdb@gmail.com" date="1660132800">- Update to version 0.2.30:
  * fix: ensure all post steps are executed (#1286)
  * walk submodule path instead of dir name (#1282)
  * fix: add parent step id in composite action step id (#1268)
  * Made env interpolated instead of evaluated. (#1222)
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#1273)
  * Update README.md (#1260)
  * lint: add ReadHeaderTimeout (#1277)
  * fix: the number in the github event is of type number (#1252)
  * only perform chown operation for non root users (#1250)
  * fix: allow TimeoutMinutes to be expression in Jobs (#1247)
  * fix: use docker images from dockerhub (#1249)
  * Improve --eventpath example command (#1243)
  * Improve docs for events inputs (#1238)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.14 to 1.6.15 (#1239)
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 (#1240)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.31" date="1670673600">- Update to version 0.2.31:
  * fix: CI is unstable due to new linting rules (#1292)
  * help output: use consistent terminology between -j &amp; -l (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.32" date="1670673601">- Update to version 0.2.32:
  * feat: pass current matrix information to job logger (#1364)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.33" date="1670673602">- Update to version 0.2.33:
  * fix: ci is failing since 2022-10-17 (#1397)
  * fix: re-evaluate env for remote composite actions (#1385)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping workflow_dispatch inputs into the Expression inputs context (#1363)
  * test: add test for networking setup in act (#1375)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * Fix composite input handling (#1345)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1670673603">- Update to version 0.2.34:
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * feat: parse types of reusable workflows (#1414)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * fix: keep path to event json file in composite actions (#1428)
  * fix: nil pointer access ( workflow_dispatch )
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * Remove dead code (#1425)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1673438400">- Spec file:
  Fix bsc#1207021 to report the correct version when calling "act --version"
  Wrong version is fixed with sed in act-0.2.34/main.go
  Reported upstream as GH://nektos/act#1555</changelog>
  <changelog author="sebix@sebix.at" date="1683720000">- Update to version 0.2.45:
  * chore: bump VERSION to 0.2.45
  * Support cache (#1770)
  * chore: run act from cli on linux (#1758)
  * Revert breaking docker socket changes (#1763)
  * avoid using log.Fatal (#1759)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1755)
  * build(deps): bump github.com/docker/docker (#1754)
  * build(deps): bump github.com/docker/cli (#1753)
  * build(deps): bump codecov/codecov-action from 3.1.2 to 3.1.3 (#1752)
  * ci: deduplicate running workflows (#1751)
  * fix: try finding a socket, otherwise fail, respect user choice (#1745)
  * Improve watchAndRun (#1743)
  * Remove the comment-out code. (#1691)
  * typo: fix expression of warning message on macOS (#1693)
  * fix: environment handling windows (host mode) (#1732)
  * fix: ensure networkmode "host" unless explicitly specified (#1739)
  * Avoid using `log.Fatal` in `pkg/*` (#1705)
  * feat: support yaml env/secrets/inputs file (#1733)
  * build(deps): bump codecov/codecov-action from 3.1.1 to 3.1.2 (#1735)
  * fix: ghc assignment typo (#1729)
  * fix: reusable workflow panic (#1728)
  * fix: add `server_url` attribute to github context (#1727)
  * build(deps): update go-git to ce62f3e9ff86270538a514a68d3bd5563a733e3b (#1725)
  * build(deps): bump github.com/docker/docker (#1719)
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#1724)
  * build(deps): bump github.com/docker/cli (#1722)
  * build(deps): bump megalinter/megalinter from 6.22.1 to 6.22.2 (#1720)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.23 to 1.6.24 (#1721)
  * build(deps): bump golang.org/x/term from 0.6.0 to 0.7.0 (#1723)
  * build(deps): bump github.com/docker/cli (#1712)
  * build(deps): bump github.com/docker/docker (#1711)
  * build(deps): bump megalinter/megalinter from 6.21.0 to 6.22.1 (#1710)
  * chore: bump VERSION to 0.2.44
  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.5 (#1708)
  * feat: improve GetOutboundIP (#1707)
  * fix: use os.UserHomeDir (#1706)
  * Make sure working directory is respected when configured from matrix (#1686)
  * build(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.5 (#1703)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18 (#1702)
  * build(deps): bump github.com/imdario/mergo from 0.3.14 to 0.3.15 (#1701)
  * build(deps): bump actions/stale from 7 to 8 (#1700)
  * build(deps): bump megalinter/megalinter from 6.20.1 to 6.21.0 (#1699)
  * full path required for extension install (#1670)
  * build(deps): bump actions/setup-go from 3 to 4 (#1689)
  * build(deps): bump github.com/imdario/mergo from 0.3.13 to 0.3.14 (#1688)
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#1650)
  * build(deps): bump megalinter/megalinter from 6.20.0 to 6.20.1 (#1679)
  * build(deps): bump fregante/setup-git-user from 1 to 2 (#1664)
  * Add example command for collecting artifacts (#1671)
  * feat: specify matrix on command line (#1675)
  * Support for docker steps in host environment (#1674)
  * fix: correct ref and ref_name (#1672)
  * fix: return err in walk (#1667)
  * test: Enshure ForcePull config doesn't break docker actions (1661)
  * fix: crash if the id tool fails to run in the container (1660)
  * build(deps): bump github.com/moby/buildkit from 0.11.3 to 0.11.4 (#1669)
  * build(deps): bump megalinter/megalinter from 6.19.0 to 6.20.0 (#1665)
  * build(deps): bump golang.org/x/term from 0.5.0 to 0.6.0 (#1666)
  * Improve XDG Spec supporting (#1656)
  * fix: safe file name (#1651)
  * fix: compare properties of Invalid types (#1645)
  * chore: bump VERSION to 0.2.43
  * fix: github.job property is empty, GITHUB_JOB should be job id (#1646)
  * build(deps): bump github.com/opencontainers/image-spec (#1649)
  * fix: update output handling for reusable workflows (#1521)
  * fix: crash malformed composite action (#1616)
  * docs: remove help section (#1648)
  * feat: workflowpattern package (#1618)
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18 (#1637)
  * fix: add GITHUB_STEP_SUMMARY (#1607)
  * build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 (#1636)
  * build(deps): bump github.com/moby/buildkit from 0.11.2 to 0.11.3 (#1635)
  * fix: tolerate workflow that needs a missing job (#1595) (#1619)
  * chore: Remove obsolete Container.UpdateFromPath (#1631)
  * chore: use new style octal (#1630)
  * fix: don't override env (#1629)
  * ci: add Winget Releaser workflow (#1623)
  * build(deps): bump github.com/opencontainers/selinux (#1625)
  * build(deps): bump github.com/docker/docker (#1624)
  * build(deps): bump github.com/docker/cli (#1626)
  * chore: add Winget installation instructions (#1622)
  * Pass dockerfile to build executor (#1606)
  * build(deps): bump github.com/docker/cli from 23.0.0-rc.1+incompatible to 23.0.0+incompatible (#1611)
  * build(deps): bump github.com/docker/docker (#1613)
  * build(deps): bump megalinter/megalinter from 6.18.0 to 6.19.0 (#1610)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1 (#1612)
  * build(deps): bump github.com/joho/godotenv from 1.4.0 to 1.5.1 (#1614)
  * refactor: GITHUB_ENV command / remove env.PATH (#1503)
  * Update max container name length (#1597)
  * feat: allow overriding of `GITHUB_` env variables (#1582)
  * Docker build fixes (#1596)
  * fix: Apply forcePull only for prebuild docker actions (#1599)
  * chore: bump VERSION to 0.2.42
  * feat: cache notices to reduce frequency of upgrade notifications (#1592)
  * chore: fix release script to trigger gh-act
  * chore: bump VERSION to 0.2.41
  * build(deps): bump github.com/moby/buildkit from 0.11.1 to 0.11.2 (#1589)
  * build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#1590)
  * cI: make stalebot less annoying (#1587)
  * test: Do not leak step env in composite (#1585)
  * feat: step summary of test results (#1580)
  * build(deps): bump github.com/moby/buildkit from 0.11.0 to 0.11.1 (#1576)
  * build(deps): bump golang.org/x/term from 0.3.0 to 0.4.0 (#1577)
  * build(deps): bump github.com/docker/docker (#1573)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.22 to 1.6.23 (#1574)
  * build(deps): bump actions/github-script from 5 to 6 (#1572)
  * chore: update docs for installing act as GH CLI extension
  * feat: release extension
  * feat: release extension
  * feat: release extension
  * refactor: pull and rebuild docker by default (#1569)
  * feat: add remote reusable workflows (#1525)
  * Fixed auto-generated platform configuration with Micro size image (#1566)
  * Feature/allow worktrees (#1530)
  * chore: bump VERSION to 0.2.40
  * fix: update artifact server to address GHSL-2023-004 (#1565)
  * chore: bump VERSION to 0.2.39
  * chore: fix promote script
  * chore: bump version
  * chore: makefile update
  * chore: bump version
  * build(deps): bump github.com/moby/buildkit from 0.10.6 to 0.11.0 (#1563)
  * chore: push new version
  * Readme: Fix shell installation (#1547)
  * fix: allow override of artifact server bind address (#1560)
  * feat: add check for newer versions (#1562)
  * Input (#1524)
  * refactor: remove docker image list reference filter (#1501)
  * fix: add-matcher fails github workflow (#1532)
  * feat: add support for building docker actions with private registries (#1557)
  * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.12 (#1554)
  * feat: Allow building without docker support (#1507)
  * fix: extra path lost in composite actions (#1531)
  * test: make sure workflow_call is not a github event calling our workflow (#1520)
  * fix: preserve job result state in case of failure (#1519)
  * build(deps): bump megalinter/megalinter from 6.17.0 to 6.18.0 (#1550)
  * build(deps): bump megalinter/megalinter from 6.16.0 to 6.17.0 (#1540)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17 (#1539)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0 (#1541)
  * build(deps): bump megalinter/megalinter from 6.15.0 to 6.16.0 (#1534)
  * build(deps): bump actions/stale from 6 to 7 (#1535)
  * revert: deprecation of containerArchitecture (#1514)
  * build(deps): bump goreleaser/goreleaser-action from 3 to 4 (#1515)
  * build(deps): bump github.com/docker/cli (#1516)
  * build(deps): bump github.com/docker/docker (#1517)
  * fix: align runner.os / runner.arch to known values (#1510)
  * feat: Support "result" on "needs" context. (#1497)
  * fix: tail (not absolute) as entrypoint of job container (#1506)
  * refactor: fix savestate in pre steps (#1466)
  * feat: allow to spawn and run a local reusable workflow (#1423)
  * refactor: fix add-path / GITHUB_PATH commands (#1472)
  * feat: JobLoggerFactory (#1496)
  * fix: handle env-vars case sensitive (#1493)
  * fix: step env is unavailable in with property expr (#1458)
  * refactor: share UpdateFromEnv logic (#1457)
  * feat: `--container-options` (#1462)
  * refactor: move autoremove into the jobexecutor (#1463)
  * docs: clarifying skipping steps / jobs (#1480)
  * Pass `LANG=C.UTF-8` to environment (#1476)
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * Remove dead code (#1425)
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * fix: keep path to event json file in composite actions (#1428)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * fix: nil pointer access ( workflow_dispatch )
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)
  * feat: parse types of reusable workflows (#1414)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping `workflow_dispatch` inputs into the Expression `inputs` context (#1363)
  * fix: ci is failing since 2022-10-17 (#1397)
  * test: add test for networking setup in act (#1375)
  * fix: re-evaluate env for remote composite actions (#1385)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * Fix composite input handling (#1345)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * feat: pass current matrix information to job logger (#1364)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * help output: use consistent terminology between `-j` &amp; `-l` (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)
  * fix: CI is unstable due to new linting rules (#1292)</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1764417600">- Fix CVE-2025-47913 (bsc#1253608): Prevent panic in embedded
  golang.org/x/crypto/ssh/agent client when receiving unexpected
  message types for key listing or signing requests by returning
  a descriptive error instead. Adds patch fix-CVE-2025-47913-ssh-agent.patch
  adapted from upstream change https://go-review.googlesource.com/c/crypto/+/700295
  with additional regression tests (client_test.go) to exercise the new error
  paths for List() and SignWithFlags().</changelog>
</package>
<package pkgid="da9e370a2471f0a9c0d2f975ccb262a72f1018b50db6afc63b37ec849d339577" name="adios-gnu-mpich-hpc" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="6e94bb1a44d62ef66aac56b3cce6bdf6f720557ccedb8c78d94a02876ece8f82" name="adios-gnu-mpich-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="0a69938709661fa8c04de7e6e2be754cd9264d4ab2dac57c15e0d8623ca0ea8d" name="adios-gnu-mpich-hpc-devel-static" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="162ebad992037aad4e1564b6006962b88f2f5a36f14040aedb0ec22929a162b6" name="adios-gnu-mvapich2-hpc" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="df2211c8b8c490329fd9f7d0fb25f009ede153c6ccd21dda994e329703c32c69" name="adios-gnu-mvapich2-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="2dfd34f5feabccbab3fe55a44c88b8c2d682e6e2ac4be02c02bbb230f9fd3c1b" name="adios-gnu-mvapich2-hpc-devel-static" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="9308b4a623aa89f963d52df757e53436d72dbbc719a576d8bc8f20c9113f90a7" name="adios-gnu-openmpi2-hpc" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="53b8626402cfe101488ae10ccd32769abb1530cab0d94b6362e5d6a66941d89d" name="adios-gnu-openmpi2-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="f8f3f930db412c81f3df4f0dafeb488d79863b0fd6e98deb3f9cd0b0bc85581a" name="adios-gnu-openmpi2-hpc-devel-static" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="9bdb98d4e6ef417a221d4c1887e5aae9515af274acb6c3625aa9bacff13b77a9" name="adios-gnu-openmpi3-hpc" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="90910ec1a04abb52a5010e7a6a5a1dbbe94b12abe0bad97d0eb1148704510d30" name="adios-gnu-openmpi3-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="033434c181e6f0b8695ce54a42cef421514e7a785291e425a0c52b58c51c34de" name="adios-gnu-openmpi3-hpc-devel-static" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="c7bc99fd297a164559ebe22d5c84f4657fd85c14305bb251758ddb2b0366cb95" name="adios-gnu-openmpi4-hpc" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="62db531794af3d963bd2f909ab8019f4d9e2660be4c3244ab04094fdb618ca5c" name="adios-gnu-openmpi4-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="30152dffb72964fbedbda3de707d0a8c60fa5e7b3fa3b4b998a0899ed63ed669" name="adios-gnu-openmpi4-hpc-devel-static" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="89358725bfae28d3492327f9ff403fe2f1a0d902cbfd31b7085c7a4b6411ba04" name="adios-openmpi2" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="9cd872f77f860a95e20e48334755466767fccf68ca505f697179d7f228ba8b9e" name="adios-openmpi2" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="c881b8fc3cb8b2dd14c764bc0b4f03f6bdb12dab20065efdcf68de751d39954b" name="adios-openmpi2" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="708ef81b5a7048df0658fb4148c0ab47392dd4eb11c54874830be2bf2970df08" name="adios-openmpi2" arch="src">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="37a07b840113c5ff561f7280cbced54f9716d15dd91e69a55d95e832a6c71ac2" name="adios-openmpi2" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="57205ce36ec01668b22753607a04516fc16a57818a2342ea43e6105a4e94a23c" name="adios-openmpi2-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="167ec465a28989e9bc25de92105df91b1871ad0d512e5771a19872b8aab47b06" name="adios-openmpi2-devel" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="abe5c6a7f76cef482ae68cd531e8e179058d2a54077afa9bf7191ed570130d27" name="adios-openmpi2-devel" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="f1a08ed4d41ca5dfd4410d6853bd6fce3206f67da1f802db96cf2865fd9adabe" name="adios-openmpi2-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="d11fd028c71d784ed35a36e4dd7dd92aa8e9b03caea9f5e5879325cb708e4e4d" name="adios-openmpi2-devel-static" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="bf91b2cb3f9b2c009c2db70043bb251c7195f9e1fa833921bd434cf66fa7ec32" name="adios-openmpi2-devel-static" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="f484e5b2f1202f00b39222f911b9abf534b86649704074bae8180cad3b6747c6" name="adios-openmpi2-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="d97daa6916bac06dd5bcd3d95bd355be66bca8ed4d4b61852cccad99022d95ce" name="adios-openmpi2-devel-static" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="e02982ba47dd90613306192d82cac84005364869ed323160da1b402fd2b25ef3" name="adios-openmpi3" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="3c5afdf6f03f9c482cadd2e881ea67bf5b62a7d2a9d4e380e441c792077bfed8" name="adios-openmpi3" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="3e825b92ed307f395eac8ffce1cc74a4e407b5fa3203cc22e0c1231d9db9656b" name="adios-openmpi3" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="1fe3f9659eb359c2e7a7878e86f653eaeb2a30ee1d58158b597d8366fc74dc83" name="adios-openmpi3" arch="src">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="306910556f977b49fd591074ec660c36c9f7ad9b3c5f78e059cfa05e38e72207" name="adios-openmpi3" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="eb273b30ce5f9fb24ea7b81ebc902a07e770868327dc3de7b7cda7bca1681277" name="adios-openmpi3-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="44f747072bb0b689c08581762c213f6b0d02327caa490daada04712ad28b2fa3" name="adios-openmpi3-devel" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="da8828b51c6a7374dd5cff683fefe2d6f1842dc60039c5bc4c2629104d556bed" name="adios-openmpi3-devel" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="d655e4ade41182e3ee5caa77d949c0496e01b34597c497eac855e29b9d5e869e" name="adios-openmpi3-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="c85e66e1c5828626f0f471934421325ef1b5a27b2eebac132aaea775dee48018" name="adios-openmpi3-devel-static" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="95c9f7990b17ae7d315d08de4690f2636e5467c93fd663996af8a758fc3bc140" name="adios-openmpi3-devel-static" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="74faa8b93b81baf1231266849f3c40932e16e70c7050676414b772c5f1c0f5e3" name="adios-openmpi3-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="8f35da0fe808927116867e24a58c979f7d4dd7aff89f3cb064a493ff5e28505c" name="adios-openmpi3-devel-static" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="8d926abb8c7ae8f5c09d435895e2ded19ed01b03f9078eb8c3af3b1e7456974a" name="adios-openmpi4" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="0e19e5a44e5fd6e09bfafed6a442c25d10e9b45fb1c0049039973180f9fd82fc" name="adios-openmpi4" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="caac48889540cc7dc4cb1bb4e08a92c1e052e4592a8f151f9803629b9e815dd0" name="adios-openmpi4" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="257f00b419ff1fd603bb539016d2e4997655065d3110dde227511f924b1bcce7" name="adios-openmpi4" arch="src">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="57d532cfce18fbf16fc76f81a0e524eb8c39bb73cf3c4df35c22db55ee2e37f8" name="adios-openmpi4" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="be3f9b3a9662218cd9ef442bda30b5e2e2bb10794719c442081e286acf14930a" name="adios-openmpi4-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="c5677b3dfb43297b840d43dfb4b96ba46eea53b4170916843e08e66a53439d4c" name="adios-openmpi4-devel" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="c97366ae2e527c45c7272ffbb51fb37ce0848f91ca0acf86b0ff3b664b99885a" name="adios-openmpi4-devel" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="2ec6096173675c24fb2cbbf032aea35f4f90e11f98168430d4f1fd7717cafc20" name="adios-openmpi4-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="d581157e29b5cbd762f96ba4b60353a57765538465683808d577a5f0ed9bc422" name="adios-openmpi4-devel-static" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="75ec49b61d963a5aa9650dd57172e9d147f5686ae3268b03a3093f906e689c57" name="adios-openmpi4-devel-static" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="7d30c9dc3715c7a4d0706fa5bf3774d6e84dc5c05c8118aa6cae15b015fd04df" name="adios-openmpi4-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="55d67acdb910df3bc8d14d1e2b567a29c67038adaa430aa79933e5f217502f43" name="adios-openmpi4-devel-static" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="6c80218f8bcf2f8429c4f04cc1e48d94e928d1dc2b1218a00df68843de6bd9c9" name="adios_1_13_1-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="8c628d1905719b7b3908c9e87088d4851c4ee18f89bb302801398472fc4614fe" name="adios_1_13_1-gnu-mpich-hpc" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="caef421dc37c4dd98338225c2e3ed797214da23fafc478bf05f0794fec0c8fa4" name="adios_1_13_1-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="01d5c5271166a539c658ebf28212709960280286406eeeab7630a8c3d123c23b" name="adios_1_13_1-gnu-mpich-hpc" arch="src">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="0e133e5a0ce98602e8de7e93626e3d03626c47164894ce33e76a939443fbd5ea" name="adios_1_13_1-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="caf0bab178eb67faea9d55dd3a12b2b88a63c68bf1ce86a32253f3980203e9fc" name="adios_1_13_1-gnu-mpich-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="5149e873b5a6bdc0bd592daa47cd93cc53956c0bba5a2b0c6629dcfe485d9172" name="adios_1_13_1-gnu-mpich-hpc-devel" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="93f14c3304789ab4728c07ad37de0bba46efecd400dee93196fc65eab2864dd5" name="adios_1_13_1-gnu-mpich-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="31b28887eff01028390ab822ec7627a98094b8121ca9f5cebba63525e452cba1" name="adios_1_13_1-gnu-mpich-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="bf78be5a6f1920413f7b5e035d9432615bd1a655f3300cbbdc0ca096f310d6a4" name="adios_1_13_1-gnu-mpich-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="b2f274623ff1ab709ee0e7a4cd312d5f1fb493556296e881dc53f20ee23e866c" name="adios_1_13_1-gnu-mpich-hpc-devel-static" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="ada0bd197b6020ad650fe5f8daab2bb9a3cf85dabedf1021209276fc0e259e32" name="adios_1_13_1-gnu-mpich-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="4ab0edc9735d898583a510d5cb4c747ae5064058e6e28c423edcb6632b2a6dfa" name="adios_1_13_1-gnu-mpich-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="f4e7e7cdead7141d676f098bc98306f5ea08ad6a909c17102cb3c50dbde5fd39" name="adios_1_13_1-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="9850f587a7dd8b48b8848314a365916a72a4c1e58e46030354c0867c02f0971d" name="adios_1_13_1-gnu-mvapich2-hpc" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="ecf983e8b0fe3c43451486505a28313359d97a351c95f3e80eb876dbe93df0e3" name="adios_1_13_1-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="780ba02b62b12c85137f8d00c10db3b0255ee1d5e2d4d5a02eae76389d3f201c" name="adios_1_13_1-gnu-mvapich2-hpc" arch="src">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="7dffaa1bc19640c8cc85bd4dde129b6b946d25ddb6bfefb14910775db0f3aaee" name="adios_1_13_1-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="3d26949fcc518dbfe808c144a8f41593c864a150f35234095e1a9865605f57cb" name="adios_1_13_1-gnu-mvapich2-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="0d458cd8542e2f8ab9f212728c069d0efe258e6c721f8020ea7669a18af0ca00" name="adios_1_13_1-gnu-mvapich2-hpc-devel" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="3bb013259a3a7f5f9af24ec0119df329b790a93d47d346269a8ff09e068c3eab" name="adios_1_13_1-gnu-mvapich2-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="f875672d9d4c86cc30a971de2def08a44efa37bf3162bb4e8550f29cafee3087" name="adios_1_13_1-gnu-mvapich2-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="f353ebdd8baaec3d7085348bd32618c1264c1692a28ed955a5fff5ae1416743f" name="adios_1_13_1-gnu-mvapich2-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="a223f3639beba1dcf1cce579fcc6fb1488271acd0a6edc6f0a6046036b9aa788" name="adios_1_13_1-gnu-mvapich2-hpc-devel-static" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="1648b57b304c0a0dc994a69e6d0b2443a70401c1a9f9c9d8db40f862545ca80f" name="adios_1_13_1-gnu-mvapich2-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="f42f218f6e4fc4947c4ac51d1bec64cbe7b40e1ddeba7337c57fd26d4f137cd2" name="adios_1_13_1-gnu-mvapich2-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="3afab26748a5fd6f68e9101c7ff635fca97dc9e6b423d92cfc5bd5b6f9e891ec" name="adios_1_13_1-gnu-openmpi2-hpc" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="49fc2a782598ff841226e50ecd6f473e114afdfe57b38bb18b8524fbaa554591" name="adios_1_13_1-gnu-openmpi2-hpc" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="30716c3bbb37fbfca77f80e14dbbc27ec6b7d16edb9e86dbde185487dda395e3" name="adios_1_13_1-gnu-openmpi2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="e8fd218c62b3cdb91f44f7e9601b51092a3f758dd6cbe9d00c957d75fa40eca4" name="adios_1_13_1-gnu-openmpi2-hpc" arch="src">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="535a8cfe0afd3f6447de1f4f20f05110bebaac21aa2e60af84bd2d2971cb08f1" name="adios_1_13_1-gnu-openmpi2-hpc" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="ce2e85672468d38d9f34ea80207e6355db5ec007ad4b176c80cc34ce8c02e758" name="adios_1_13_1-gnu-openmpi2-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="7fc8068373251c4c2563a67877dd1af7912d4e6c79f6431b1c3ebc9a4f68ab6b" name="adios_1_13_1-gnu-openmpi2-hpc-devel" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="206c5ee0477d92667db1b5f64a9c6a60c862e9d24e795644ad172010b1274b78" name="adios_1_13_1-gnu-openmpi2-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="8ba343bf2df25773bb830172af042b7850ed00d360cfeed1d9c5a780f93d4187" name="adios_1_13_1-gnu-openmpi2-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="3cba2aa7af06da1f8ac495a7105b4514177289acd2187c476831c74de24dcf63" name="adios_1_13_1-gnu-openmpi2-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="8f97883dc3ffafdb3bf26a80751f836bc43ab93cd57b7c352f4e051adab80b1e" name="adios_1_13_1-gnu-openmpi2-hpc-devel-static" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="1ebc82ed910ce3fe75eb1681510965e51658be19e89fdcdb3aac9464854cf1e2" name="adios_1_13_1-gnu-openmpi2-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="78ffb587e8dcf193c1a5acc52115eab96555885ef5a38d32dcb8e3a86eb68ecb" name="adios_1_13_1-gnu-openmpi2-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="f3272e0348c7de0f9313497dd38a88af0115899a5eb82bbe10d38c11b4d4f596" name="adios_1_13_1-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="e8b1f01e8278bc9176d749298af968f985c367d34127e89faccfb249d25f6fc2" name="adios_1_13_1-gnu-openmpi3-hpc" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="4f6a5f7cc98afcd5700eee8b0080b80b1c05660dcc8fd7bf9f877d28390dc564" name="adios_1_13_1-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="8c9736863dae37c81beba7f05c1bdfd3f647cb584464261b4feec5e496097a96" name="adios_1_13_1-gnu-openmpi3-hpc" arch="src">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="26ec8ddeb0c23b402d8c03f7b4fe7468f700afb8a2c306ef28a23d96e629475b" name="adios_1_13_1-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="1852a0caeb56b0a3624d29bf1657cfe6773ece82b3d6b1f5185cb36208f5fba3" name="adios_1_13_1-gnu-openmpi3-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="349eea78c42028eaeb416e494a2565d61459c978b8eb69f6dd7379b2cb402aa3" name="adios_1_13_1-gnu-openmpi3-hpc-devel" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="b883434e554aacb8e7ea75c26922b9383c77ca1b2f511f358d87db809705cb36" name="adios_1_13_1-gnu-openmpi3-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="847f8321aa03a0556597feda6497eaceb4213ff9ce68b81ac06fd0be2d79164e" name="adios_1_13_1-gnu-openmpi3-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="d315c4498ee6e74c22f619f643d17224f805670ebcb123edc89e6be62f730467" name="adios_1_13_1-gnu-openmpi3-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="d31c4f167342ec0e48940d1b48fd32e27fe789ff163aa623271f196c67092ae6" name="adios_1_13_1-gnu-openmpi3-hpc-devel-static" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="1347fc4983b43e106a50e45a36a040a98cc66e04743ef9068c44d8bec9b6fda7" name="adios_1_13_1-gnu-openmpi3-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="6ea212725c9129f396ba7aeb4e620658ca7b251de52508d0e38b81b3fc62271c" name="adios_1_13_1-gnu-openmpi3-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="36386015a41a2e3f4790436b5c1b47972fa98c335ed2755adacfb06ffea44996" name="adios_1_13_1-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="5bf630cb4b9c2a3b80b6807a722042340331fa1028793dd05d12b51c7b236c42" name="adios_1_13_1-gnu-openmpi4-hpc" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="a03e5c47f0a795df451382bb41961b5bb4dbcc6a28e67239f9a5f4d26d5c448d" name="adios_1_13_1-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="7f6b9d9094204d9a42cb20c262748e074d1f3147d7a4aa31623af28374ef95f6" name="adios_1_13_1-gnu-openmpi4-hpc" arch="src">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="bacf167e4a706062046ac80c7ea8073cb0690d55d12b3759e464bcd60782dfef" name="adios_1_13_1-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="cb4b34d264805bc803bbd97562ce3aeb7d18a41e70051b252c2664bf49141b71" name="adios_1_13_1-gnu-openmpi4-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="ec69d4031730ed7952a0baa391d6ef94e642c33286268d29de1633b120d9a4fe" name="adios_1_13_1-gnu-openmpi4-hpc-devel" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="e8ba2aec131f446b1d01ad91463983348390276d3a747e7cdf50df689d793065" name="adios_1_13_1-gnu-openmpi4-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="758488f6641bd347daa53666c1a99fed6e0cb89a9be33ccee40d8b2f5312f669" name="adios_1_13_1-gnu-openmpi4-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="8846a72d544e54d267cc66ad9a70ab6bc39c332de5c15d3a3fc6eceb62aa7814" name="adios_1_13_1-gnu-openmpi4-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="b733998b069276dcffa9979032ca8d4e34ee6961158ed49defdf2fcff3ee8568" name="adios_1_13_1-gnu-openmpi4-hpc-devel-static" arch="i586">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="a7253e9dd0080abc858773efc1ba16aa3e845070284fc0c03494a31d3fa4557e" name="adios_1_13_1-gnu-openmpi4-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="d4fe130b3f3e40652cbc6e9d451a4bc37ac87a2702a7847f2928157c23dd0059" name="adios_1_13_1-gnu-openmpi4-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp156.4.3.1"/>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="Ana Guerrero L&#xF3;pez &lt;aguerrero@suse.com&gt;" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554724800">- Update Licensing.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1725019200">- Require python3-PyYAML instead of non-existent python-PyYAML
  (bsc#1228146)</changelog>
</package>
<package pkgid="c90a0565d156891ddc533672bf3f82d3d677c66a7eb98cff979ee9e93c71edc8" name="afl" arch="aarch64">
  <version epoch="0" ver="4.21c" rel="bp156.2.3.1"/>
  <changelog author="Peace Peters &lt;peacepeters.pp@gmail.com&gt;" date="1626350400">- s390x added to the compiler files</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1626696000">- updated to 3.14c
  - afl-fuzz:
  - fix -F when a '/' was part of the parameter
  - fixed a crash for cmplog for very slow inputs
  - fix for AFLfast schedule counting
  - removed implied -D determinstic from -M main
  - if the target becomes unavailable check out out/default/error.txt
    for an indicator why
  - AFL_CAL_FAST was a dead env, now does the same as AFL_FAST_CAL
  - reverse read the queue on resumes (more effective)
  - fix custom mutator trimming
  - afl-cc:
  - Update to COMPCOV/laf-intel that speeds up the instrumentation
    process a lot - thanks to Michael Rodler/f0rki for the PR!
  - Fix for failures for some sized string instrumentations
  - Fix to instrument global namespace functions in c++
  - Fix for llvm 13
  - support partial linking
  - do honor AFL_LLVM_{ALLOW/DENY}LIST for LTO autodictionary and DICT2FILE
  - We do support llvm versions from 3.8 to 5.0 again
  - frida_mode:
  - several fixes for cmplog
  - remove need for AFL_FRIDA_PERSISTENT_RETADDR_OFFSET
  - less coverage collision
  - feature parity of aarch64 with intel now (persistent, cmplog,
    in-memory testcases, asan)
  - afl-cmin and afl-showmap -i do now descend into subdirectories
    (like afl-fuzz does) - note that afl-cmin.bash does not!
  - afl_analyze:
  - fix timeout handling
  - add forkserver support for better performance
  - ensure afl-compiler-rt is built for gcc_module
  - always build aflpp_driver for libfuzzer harnesses
  - added `AFL_NO_FORKSRV` env variable support to
    afl-cmin, afl-tmin, and afl-showmap, by @jhertz
  - removed outdated documents, improved existing documentation</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1632657600">- enable gcc-plugin on factory
- build with 32bit plugins on x86_64</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1643630400">- updated to 4.00c
  - complete documentation restructuring, made possible by Google Season
    of Docs :) thank you Jana!
  - we renamed several UI and fuzzer_stat entries to be more precise,
    e.g. "unique crashes" -&gt; "saved crashes", "total paths" -&gt;
    "corpus count", "current path" -&gt; "current item".
    This might need changing custom scripting!
  - Nyx mode (full system emulation with snapshot capability) has been
    added - thanks to @schumilo and @eqv!
  - unicorn_mode:
  - Moved to unicorn2! by Ziqiao Kong (@lazymio)
  - Faster, more accurate emulation (newer QEMU base), risc-v support
  - removed indirections in rust callbacks
  - new binary-only fuzzing mode: coresight_mode for aarch64 CPUs :)
    thanks to RICSecLab submitting!
  - if instrumented libaries are dlopen()'ed after the forkserver you
    will now see a crash. Before you would have colliding coverage.
    We changed this to force fixing a broken setup rather then allowing
    ineffective fuzzing.
  - See docs/best_practices.md how to fix such setups.
  - afl-fuzz:
  - cmplog binaries will need to be recompiled for this version
    (it is better!)
  - fix a regression introduced in 3.10 that resulted in less
    coverage being detected. thanks to Collin May for reporting!
  - ensure all spawned targets are killed on exit
  - added AFL_IGNORE_PROBLEMS, plus checks to identify and abort on
    incorrect LTO usage setups and enhanced the READMEs for better
    information on how to deal with instrumenting libraries
  - fix -n dumb mode (nobody should use this mode though)
  - fix stability issue with LTO and cmplog
  - better banner
  - more effective cmplog mode
  - more often update the UI when in input2stage mode
  - qemu_mode/unicorn_mode: fixed OOB write when using libcompcov,
    thanks to kotee4ko for reporting!
  - frida_mode:
  - better performance, bug fixes
  - David Carlier added Android support :)
  - afl-showmap, afl-tmin and afl-analyze:
  - honor persistent mode for more speed. thanks to dloffre-snl
    for reporting!
  - fix bug where targets are not killed on timeouts
  - moved hidden afl-showmap -A option to -H to be used for
    coresight_mode
  - Prevent accidentaly killing non-afl/fuzz services when aborting
    afl-showmap and other tools.
  - afl-cc:
  - detect overflow reads on initial input buffer for asan
  - new cmplog mode (incompatible with older afl++ versions)
  - support llvm IR select instrumentation for default PCGUARD and LTO
  - fix for shared linking on MacOS
  - better selective instrumentation AFL_LLVM_{ALLOW|DENY}LIST
    on filename matching (requires llvm 11 or newer)
  - fixed a potential crash in targets for LAF string handling
  - fixed a bad assert in LAF split switches
  - added AFL_USE_TSAN thread sanitizer support
  - llvm and LTO mode modified to work with new llvm 14-dev (again.)
  - fix for AFL_REAL_LD
  - more -z defs filtering
  - make -v without options work
  - added the very good grammar mutator "GramaTron" to the
    custom_mutators
  - added optimin, a faster and better corpus minimizer by
    Adrian Herrera. Thank you!
  - added afl-persistent-config script to set perform permanent system
    configuration settings for fuzzing, for Linux and Macos.
    thanks to jhertz!
  - added xml, curl &amp; exotic string functions to llvm dictionary feature
  - fix AFL_PRELOAD issues on MacOS
  - removed utils/afl_frida because frida_mode/ is now so much better
  - added uninstall target to makefile (todo: update new readme!)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1645617600">- Fix build with armv7l on Leap: we have afl-llvm-rt-lto{,-32}.o.
- Fix build with ppc64le: we don't seem to have the 32-bit object
  files available there and there is also no gcc-32bit.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1654344000">- Add llvm14-fix-build.patch: fix build with LLVM 14.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1656417600">- updated to 4.01c
  - fixed */build_...sh scripts to work outside of git
  - new custom_mutator: libafl with token fuzzing :)
  - afl-fuzz:
  - when you just want to compile once and set CMPLOG, then just
    set -c 0 to tell afl-fuzz that the fuzzing binary is also for
    CMPLOG.
  - new commandline options -g/G to set min/max length of generated
    fuzz inputs
  - you can set the time for syncing to other fuzzer now with
    AFL_SYNC_TIME
  - reintroduced AFL_PERSISTENT and AFL_DEFER_FORKSRV to allow
    persistent mode and manual forkserver support if these are not
    in the target binary (e.g. are in a shared library)
  - add AFL_EARLY_FORKSERVER to install the forkserver as earliest as
    possible in the target (for afl-gcc-fast/afl-clang-fast/
    afl-clang-lto)
  - "saved timeouts" was wrong information, timeouts are still thrown
    away by default even if they have new coverage (hangs are always
    kept), unless AFL_KEEP_TIMEOUTS are set
  - AFL never implemented auto token inserts (but user token inserts,
    user token overwrite and auto token overwrite), added now!
  - fixed a mutation type in havoc mode
  - Mopt fix to always select the correct algorithm
  - fix effector map calculation (deterministic mode)
  - fix custom mutator post_process functionality
  - document and auto-activate pizza mode on condition
  - afl-cc:
  - due a bug in lld of llvm 15 LTO instrumentation wont work atm :-(
  - converted all passed to use the new llvm pass manager for llvm 11+
  - AFL++ PCGUARD mode is not available for 10.0.1 anymore (11+ only)
  - trying to stay on top on all these #$&amp;§!! changes in llvm 15 ...
  - frida_mode:
  - update to new frida release, handles now c++ throw/catch
  - unicorn_mode:
  - update unicorn engine, fix C example
  - utils:
  - removed optimin because it looses coverage due to a bug and is
    unmaintained :-(
- removed upstream llvm14-fix-build.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1660996800">- updated to 4.02c
  - afl-cc:
  - important fix for the default pcguard mode when LLVM IR vector
    selects are produced, thanks to @juppytt for reporting!
  - gcc_plugin:
  - Adacore submitted CMPLOG support to the gcc_plugin! :-)
  - llvm_mode:
  - laf cmp splitting fixed for more comparison types
  - frida_mode:
  - now works on Android!
  - afl-fuzz:
  - change post_process hook to allow returning NULL and 0 length to
    tell afl-fuzz to skip this mutated input</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1663675200">- updated to 4.03c
  - Building now gives a build summary what succeeded and what not
  - afl-fuzz:
  - added AFL_NO_STARTUP_CALIBRATION to start fuzzing at once instead
    of calibrating all initial seeds first. Good for large queues
    and long execution times, especially in CIs.
  - default calibration cycles set to 7 from 8, and only add 5 cycles
    to variables queue items instead of 12.
  - afl-cc:
  - fixed off-by-one bug in our pcguard implemenation, thanks for
    @tokatoka for reporting
  - fix for llvm 15 and reenabling LTO, thanks to nikic for the PR!
  - better handling of -fsanitize=..,...,.. lists
  - support added for LLVMFuzzerRunDriver()
  - fix gcc_mode cmplog
  - obtain the map size of a target with setting AFL_DUMP_MAP_SIZE=1
    note that this will exit the target before main()
  - qemu_mode:
  - added AFL_QEMU_TRACK_UNSTABLE to log the addresses of unstable
    edges (together with AFL_DEBUG=1 afl-fuzz). thanks to
    worksbutnottested!
  - afl-analyze broke at some point, fix by CodeLogicError, thank you!
  - afl-cmin/afl-cmin.bash now have an -A option to allow also crashing
    and timeout inputs
  - unicorn_mode:
  - updated upstream unicorn version
  - fixed builds for aarch64
  - build now uses all available cores</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1666353600">- updated to 4.04c
  - fix gramatron and grammar_mutator build scripts
  - enhancements to the afl-persistent-config and afl-system-config
  - scripts
  - afl-fuzz:
  - force writing all stats on exit
  - afl-cc:
  - make gcc_mode (afl-gcc-fast) work with gcc down to version 3.6
  - qemu_mode:
  - fixed 10x speed degredation in v4.03c
  - added qemu_mode/fastexit helper library
  - unicorn_mode:
  - Enabled tricore arch (by @jma-qb)
  - Updated Capstone version in Rust bindings
  - llvm-mode:
  - AFL runtime will always pass inputs via shared memory, when possible,
    ignoring the command line.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1666440000">- Update file list for riscv64</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1672920000">- updated to 4.05c
  - afl-fuzz:
  - added afl_custom_fuzz_send custom mutator feature. Now your can
    send fuzz data to the target as you need, e.g. via IPC.
  - cmplog mode now has a -l R option for random colorization, thanks
    to guyf2010 for the PR!
  - queue statistics are written every 30 minutes to
    out/NAME/queue_data if compiled with INTROSPECTION
  - new env: AFL_FORK_SERVER_KILL_SIGNAL
  - afl-showmap/afl-cmin
  - `-t none` now translates to `-t 120000` (120 seconds)
  - unicorn_mode updated
  - updated rust custom mutator dependencies and LibAFL custom mutator
  - several minor bugfixes</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1681300800">- Pin to llvm15 for the time being: code fails to build with
  llvm16.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1681732800">- updated to 4.06c
  - afl-fuzz:
  - ensure temporary file descriptor is closed when not used
  - added `AFL_NO_WARN_INSTABILITY`
  - added time_wo_finds to fuzzer_stats
  - fixed a crash in pizza (1st april easter egg) mode. Sorry for
    everyone who was affected!
  - allow pizza mode to be disabled when AFL_PIZZA_MODE is set to -1
  - option `-p mmopt` now also selects new queue items more often
  - fix bug in post_process custom mutator implementation
  - print name of custom mutator in UI
  - slight changes that improve fuzzer performance
  - afl-cc:
  - add CFI sanitizer variant to gcc targets
  - llvm 16 + 17 support (thanks to @devnexen!)
  - support llvm 15 native pcguard changes
  - support for LLVMFuzzerTestOneInput -1 return
  - LTO autoken and llvm_mode: added AFL_LLVM_DICT2FILE_NO_MAIN support
  - qemu_mode:
  - fix _RANGES envs to allow hyphens in the filenames
  - basic riscv support
  - frida_mode:
  - added `AFL_FRIDA_STATS_INTERVAL`
  - fix issue on MacOS
  - unicorn_mode:
  - updated and minor issues fixed
  - nyx_mode support for all tools
  - better sanitizer default options support for all tools
  - new custom module: autotoken, a grammar free fuzzer for text inputs
  - fixed custom mutator C examples
  - more minor fixes and cross-platform support</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1686571200">- updated to 4.07c
  - afl-fuzz:
  - reverse reading the seeds only on restarts (increases performance)
  - new env `AFL_POST_PROCESS_KEEP_ORIGINAL` to keep the orignal
    data before post process on finds (for atnwalk custom mutator)
  - new env `AFL_IGNORE_PROBLEMS_COVERAGE` to ignore coverage from
    loaded libs after forkserver initialization (required by Mozilla)
  - afl-cc:
  - added @responsefile support
  - new env `AFL_LLVM_LTO_SKIPINIT` to support the AFL++ based WASM
    (https://github.com/fgsect/WAFL) project
  - error and print help if afl-clan-lto is used with lto=thin
  - rewrote our PCGUARD pass to be compatible with LLVM 15+ shenanigans,
    requires LLVM 13+ now instead of 10.0.1+
  - fallback to native LLVM PCGUARD if our PCGUARD is unavailable
  - fixed a crash in GCC CMPLOG
  - afl-showmap:
  - added custom mutator post_process and send support
  - add `-I filelist` option, an alternative to `-i in_dir`
  - afl-cmin + afl-cmin.bash:
  - `-T threads` parallel task support, can be a huge speedup!
  - qemu_mode:
  - Persistent mode + QASAN support for ppc32 targets by @worksbutnottested
  - a new grammar custom mutator atnwalk was submitted by @voidptr127 !
  - two new custom mutators are now available:
  - TritonDSE in custom_mutators/aflpp_tritondse
  - SymQEMU in custom_mutators/symqemu
- removed ppc64le condition (failed parsing), we have no 32bit ppc64le</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1691755200">- updated to 4.08c
  - afl-fuzz:
  - new mutation engine: mutations that favor discovery more paths are
    prefered until no new finds for 10 minutes then switching to mutations
    that favor triggering crashes. Modes and switch time can be configured
    with `-P`. Also input mode for the target can be defined with `-a` to
    be `text` or `binary` (defaults to `generic`)
  - new custom mutator that has the new afl++ engine (so it can easily
    incorporated into new custom mutators), and also comes with a standalone
    command line tool! See custom_mutators/aflpp/standalone/
  - display the state of the fuzzing run in the UI :-)
  - fix timeout setting if '+' is used or a session is restarted
  - -l X option to enable base64 transformation solving
  - allow to disable CMPLOG with '-c -' (e.g. afl.rs enforces '-c 0' on
    every instance which is counterproductive).
  - afl-cmin/afl-cmin.bash:
  - fixed a bug inherited from vanilla AFL where a coverage of
    map[123] = 11 would be the same as map[1123] = 1
  - warn on crashing inputs
  - adjust threads if less inputs than threads specified
  - afl-cc:
  - fixed an off-by-one instrumentation of iselect, hurting coverage a bit.
    Thanks to @amykweon for spotting and fixing!
  - @toka fixed a bug in laf-intel signed integer comparison splitting,
    thanks a lot!!
  - more LLVM compatability
  - frida_mode:
  - support for long form instrumentation on x86_x64 and arm64
  - renamed utils/get_symbol_addr.sh to utils/frida_get_symbol_addr.sh
  - qemu_mode:
  - added qemu_mode/utils/qemu_get_symbol_addr.sh</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1702814400">- updated to 4.09c
  - afl-fuzz:
  - fixed the new mutation implementation for two bugs
  - added `AFL_FINAL_SYNC` which forces a final fuzzer sync (also for `-F`)
    before terminating.
  - added AFL_IGNORE_SEED_PROBLEMS to skip over seeds that time out instead
    of exiting with an error message
  - allow -S/-M naming up to 50 characters (from 24)
  - CMPLOG:
  - added scale support (-l S)
  - skip unhelpful insertions (u8)
  - added --version and --help command line parameters
  - fixed endless loop when reading malformed dictionaries
  - new custom mutator function: post_run - thanks to yangzao!
  - afl-whatsup:
  - detect instanced that are starting up and show them as such as not dead
  - now also shows coverage reached
  - option -m shows only very relevant stats
  - option -n will not use color in the output
  - instrumentation:
  - fix for a few string compare transform functions for LAF
  - we are instrumenting __cxx internal functions again. this might break
    a few targets, please report if so.
  - frida_mode:
  - fixes support for large map offsets
  - support for AFL_FUZZER_LOOPCOUNT for afl.rs and LLVMFuzzerTestOneInput
  - afl-cmin/afl-cmin.bash: prevent unneeded file errors
  - added new tool afl-addseeds that adds new seeds to a running campaign
  - added benchmark/benchmark.py if you want to see how good your fuzzing
    speed is in comparison to other setups.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1707134400">- updated to 4.10c
  - afl-fuzz:
  - default power schedule is now EXPLORE, due a fix in fast schedules
    explore is slightly better now.
  - fixed minor issues in the mutation engine, thanks to @futhewo for
    reporting!
  - better deterministic fuzzing is now available, benchmarks have shown
    to improve fuzzing. Enable with -D. Thanks to @kdsjZh for the PR!
  - afl-cc:
  - large rewrite by @SonicStark which fixes a few corner cases, thanks!
  - LTO mode now requires llvm 12+
  - workaround for ASAN with gcc_plugin mode
  - instrumentation:
  - LLVM 18 support, thanks to @devnexen!
  - Injection (SQL, LDAP, XSS) fuzzing feature now available, see
    `instrumentation/README.injections.md` how to activate/use/expand.
  - compcov/LAF-intel:
  - floating point splitting bug fix by @hexcoder
  - due a bug in LLVM 17 integer splitting is disabled there!
  - when splitting floats was selected, integers were always split as well,
    fixed to require AFL_LLVM_LAF_SPLIT_COMPARES or _ALL as it should
  - dynamic instrumentation filtering for LLVM NATIVE, thanks @Mozilla!
    see utils/dynamic_covfilter/README.md
  - qemu_mode:
  - plugins are now activated by default and a new module is included that
    produces drcov compatible traces for lighthouse/lightkeeper/...
    thanks to @JRomainG to submitting!
  - updated Nyx checkout (fixes a bug) and some QOL
  - updated the custom grammar mutator
  - document afl-cmin does not work on macOS (but afl-cmin.bash does)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1713182400">- updated to 4.20c
  + A new forkserver communication model is now introduced. afl-fuzz is
    backward compatible to old compiled targets if they are not built
    for CMPLOG/Redqueen, but new compiled targets will not work with
    old afl-fuzz versions!
  + Recompile all targets that are instrumented for CMPLOG/Redqueen!
  - AFL++ now supports up to 4 billion coverage edges, up from 6 million.
  - New compile option: `make PERFORMANCE=1` - this will enable special
    CPU dependent optimizations that make everything more performant - but
    the binaries will likely won't work on different platforms. Also
    enables a faster hasher if the CPU requirements are met.
  - The persistent record feature (see config.h) was expanded to also
    support replay, thanks to @quarta-qti !
  - afl-fuzz:
  - the new deterministic fuzzing feature is now activated by default,
    deactivate with -z. Parameters -d and -D are ignored.
  - small improvements to CMPLOG/redqueen
  - workround for a bug with MOpt -L when used with -M - in the future
    we will either remove or rewrite MOpt.
  - fix for `-t xxx+` feature
  - -e extension option now saves the queue items, crashes, etc. with the
    extension too
  - fixes for trimmming, correct -V time and reading stats on resume by eqv
    thanks a lot!
  - afl-cc:
  - added collision free caller instrumentation to LTO mode. activate with
    `AFL_LLVM_LTO_CALLER=1`. You can set a max depth to go through single
    block functions with `AFL_LLVM_LTO_CALLER_DEPTH` (default 0)
  - fixes for COMPCOV/LAF and most other modules
  - fix for GCC_PLUGIN cmplog that broke on std::strings
  - afl-whatsup:
  - now also displays current average speed
  - small bugfixes
  - Fixes for aflpp custom mutator and standalone tool
  - Minor edits to afl-persistent-config
  - Prevent temporary files being left behind on aborted afl-whatsup
  - More CPU benchmarks added to benchmark/</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1718020800">- updated to 4.21c
  * afl-fuzz
  - fixed a regression in afl-fuzz that resulted in a 5-10% performace loss
    do a switch from gettimeofday() to clock_gettime() which should be rather
    three times faster. The reason for this is unknown.
  - new queue selection algorithm based on 2 core years of queue data
    analysis. gives a noticable improvement on coverage although the results
    seem counterintuitive :-)
  - added AFL_DISABLE_REDUNDANT for huge queues
  - added `AFL_NO_SYNC` environment variable that does what you think it does
  - fix AFL_PERSISTENT_RECORD
  - run custom_post_process after standard trimming
  - prevent filenames in the queue that have spaces
  - minor fix for FAST schedules
  - more frequent stats update when syncing (todo: check performance impact)
  - now timing of calibration, trimming and syncing is measured seperately,
    thanks to @eqv!
  - -V timing is now accurately the fuzz time (without syncing), before
    long calibration times and syncing could result in now fuzzing being
    made when the time was already run out until then, thanks to @eqv!
  - fix -n uninstrumented mode when ending fuzzing
  - enhanced the ASAN configuration
  - make afl-fuzz use less memory with cmplog and fix a memleak
  * afl-cc:
  - re-enable i386 support that was accidently disabled
  - fixes for LTO and outdated afl-gcc mode for i386
  - fix COMPCOV split compare for old LLVMs
  - disable xml/curl/g_ string transform functions because we do not check
    for null pointers ... TODO
  - ensure shared memory variables are visible in weird build setups
  - compatability to new LLVM 19 changes
  * afl-cmin
  - work with input files that have a space
  * afl-showmap
  - fix memory leak on shmem testcase usage (thanks to @ndrewh)
  - minor fix to collect coverage -C (thanks to @bet4it)
  * Fixed a shmem mmap bug (that rarely came up on MacOS)
  * libtokencap: script generate_libtoken_dict.sh added by @a-shvedov</changelog>
</package>
<package pkgid="0b60c797cb16dc209d28e68b2167e3c69d572f521c124ee4ae5dc3f77ac56797" name="afl" arch="i586">
  <version epoch="0" ver="4.21c" rel="bp156.2.3.1"/>
  <changelog author="Peace Peters &lt;peacepeters.pp@gmail.com&gt;" date="1626350400">- s390x added to the compiler files</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1626696000">- updated to 3.14c
  - afl-fuzz:
  - fix -F when a '/' was part of the parameter
  - fixed a crash for cmplog for very slow inputs
  - fix for AFLfast schedule counting
  - removed implied -D determinstic from -M main
  - if the target becomes unavailable check out out/default/error.txt
    for an indicator why
  - AFL_CAL_FAST was a dead env, now does the same as AFL_FAST_CAL
  - reverse read the queue on resumes (more effective)
  - fix custom mutator trimming
  - afl-cc:
  - Update to COMPCOV/laf-intel that speeds up the instrumentation
    process a lot - thanks to Michael Rodler/f0rki for the PR!
  - Fix for failures for some sized string instrumentations
  - Fix to instrument global namespace functions in c++
  - Fix for llvm 13
  - support partial linking
  - do honor AFL_LLVM_{ALLOW/DENY}LIST for LTO autodictionary and DICT2FILE
  - We do support llvm versions from 3.8 to 5.0 again
  - frida_mode:
  - several fixes for cmplog
  - remove need for AFL_FRIDA_PERSISTENT_RETADDR_OFFSET
  - less coverage collision
  - feature parity of aarch64 with intel now (persistent, cmplog,
    in-memory testcases, asan)
  - afl-cmin and afl-showmap -i do now descend into subdirectories
    (like afl-fuzz does) - note that afl-cmin.bash does not!
  - afl_analyze:
  - fix timeout handling
  - add forkserver support for better performance
  - ensure afl-compiler-rt is built for gcc_module
  - always build aflpp_driver for libfuzzer harnesses
  - added `AFL_NO_FORKSRV` env variable support to
    afl-cmin, afl-tmin, and afl-showmap, by @jhertz
  - removed outdated documents, improved existing documentation</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1632657600">- enable gcc-plugin on factory
- build with 32bit plugins on x86_64</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1643630400">- updated to 4.00c
  - complete documentation restructuring, made possible by Google Season
    of Docs :) thank you Jana!
  - we renamed several UI and fuzzer_stat entries to be more precise,
    e.g. "unique crashes" -&gt; "saved crashes", "total paths" -&gt;
    "corpus count", "current path" -&gt; "current item".
    This might need changing custom scripting!
  - Nyx mode (full system emulation with snapshot capability) has been
    added - thanks to @schumilo and @eqv!
  - unicorn_mode:
  - Moved to unicorn2! by Ziqiao Kong (@lazymio)
  - Faster, more accurate emulation (newer QEMU base), risc-v support
  - removed indirections in rust callbacks
  - new binary-only fuzzing mode: coresight_mode for aarch64 CPUs :)
    thanks to RICSecLab submitting!
  - if instrumented libaries are dlopen()'ed after the forkserver you
    will now see a crash. Before you would have colliding coverage.
    We changed this to force fixing a broken setup rather then allowing
    ineffective fuzzing.
  - See docs/best_practices.md how to fix such setups.
  - afl-fuzz:
  - cmplog binaries will need to be recompiled for this version
    (it is better!)
  - fix a regression introduced in 3.10 that resulted in less
    coverage being detected. thanks to Collin May for reporting!
  - ensure all spawned targets are killed on exit
  - added AFL_IGNORE_PROBLEMS, plus checks to identify and abort on
    incorrect LTO usage setups and enhanced the READMEs for better
    information on how to deal with instrumenting libraries
  - fix -n dumb mode (nobody should use this mode though)
  - fix stability issue with LTO and cmplog
  - better banner
  - more effective cmplog mode
  - more often update the UI when in input2stage mode
  - qemu_mode/unicorn_mode: fixed OOB write when using libcompcov,
    thanks to kotee4ko for reporting!
  - frida_mode:
  - better performance, bug fixes
  - David Carlier added Android support :)
  - afl-showmap, afl-tmin and afl-analyze:
  - honor persistent mode for more speed. thanks to dloffre-snl
    for reporting!
  - fix bug where targets are not killed on timeouts
  - moved hidden afl-showmap -A option to -H to be used for
    coresight_mode
  - Prevent accidentaly killing non-afl/fuzz services when aborting
    afl-showmap and other tools.
  - afl-cc:
  - detect overflow reads on initial input buffer for asan
  - new cmplog mode (incompatible with older afl++ versions)
  - support llvm IR select instrumentation for default PCGUARD and LTO
  - fix for shared linking on MacOS
  - better selective instrumentation AFL_LLVM_{ALLOW|DENY}LIST
    on filename matching (requires llvm 11 or newer)
  - fixed a potential crash in targets for LAF string handling
  - fixed a bad assert in LAF split switches
  - added AFL_USE_TSAN thread sanitizer support
  - llvm and LTO mode modified to work with new llvm 14-dev (again.)
  - fix for AFL_REAL_LD
  - more -z defs filtering
  - make -v without options work
  - added the very good grammar mutator "GramaTron" to the
    custom_mutators
  - added optimin, a faster and better corpus minimizer by
    Adrian Herrera. Thank you!
  - added afl-persistent-config script to set perform permanent system
    configuration settings for fuzzing, for Linux and Macos.
    thanks to jhertz!
  - added xml, curl &amp; exotic string functions to llvm dictionary feature
  - fix AFL_PRELOAD issues on MacOS
  - removed utils/afl_frida because frida_mode/ is now so much better
  - added uninstall target to makefile (todo: update new readme!)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1645617600">- Fix build with armv7l on Leap: we have afl-llvm-rt-lto{,-32}.o.
- Fix build with ppc64le: we don't seem to have the 32-bit object
  files available there and there is also no gcc-32bit.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1654344000">- Add llvm14-fix-build.patch: fix build with LLVM 14.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1656417600">- updated to 4.01c
  - fixed */build_...sh scripts to work outside of git
  - new custom_mutator: libafl with token fuzzing :)
  - afl-fuzz:
  - when you just want to compile once and set CMPLOG, then just
    set -c 0 to tell afl-fuzz that the fuzzing binary is also for
    CMPLOG.
  - new commandline options -g/G to set min/max length of generated
    fuzz inputs
  - you can set the time for syncing to other fuzzer now with
    AFL_SYNC_TIME
  - reintroduced AFL_PERSISTENT and AFL_DEFER_FORKSRV to allow
    persistent mode and manual forkserver support if these are not
    in the target binary (e.g. are in a shared library)
  - add AFL_EARLY_FORKSERVER to install the forkserver as earliest as
    possible in the target (for afl-gcc-fast/afl-clang-fast/
    afl-clang-lto)
  - "saved timeouts" was wrong information, timeouts are still thrown
    away by default even if they have new coverage (hangs are always
    kept), unless AFL_KEEP_TIMEOUTS are set
  - AFL never implemented auto token inserts (but user token inserts,
    user token overwrite and auto token overwrite), added now!
  - fixed a mutation type in havoc mode
  - Mopt fix to always select the correct algorithm
  - fix effector map calculation (deterministic mode)
  - fix custom mutator post_process functionality
  - document and auto-activate pizza mode on condition
  - afl-cc:
  - due a bug in lld of llvm 15 LTO instrumentation wont work atm :-(
  - converted all passed to use the new llvm pass manager for llvm 11+
  - AFL++ PCGUARD mode is not available for 10.0.1 anymore (11+ only)
  - trying to stay on top on all these #$&amp;§!! changes in llvm 15 ...
  - frida_mode:
  - update to new frida release, handles now c++ throw/catch
  - unicorn_mode:
  - update unicorn engine, fix C example
  - utils:
  - removed optimin because it looses coverage due to a bug and is
    unmaintained :-(
- removed upstream llvm14-fix-build.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1660996800">- updated to 4.02c
  - afl-cc:
  - important fix for the default pcguard mode when LLVM IR vector
    selects are produced, thanks to @juppytt for reporting!
  - gcc_plugin:
  - Adacore submitted CMPLOG support to the gcc_plugin! :-)
  - llvm_mode:
  - laf cmp splitting fixed for more comparison types
  - frida_mode:
  - now works on Android!
  - afl-fuzz:
  - change post_process hook to allow returning NULL and 0 length to
    tell afl-fuzz to skip this mutated input</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1663675200">- updated to 4.03c
  - Building now gives a build summary what succeeded and what not
  - afl-fuzz:
  - added AFL_NO_STARTUP_CALIBRATION to start fuzzing at once instead
    of calibrating all initial seeds first. Good for large queues
    and long execution times, especially in CIs.
  - default calibration cycles set to 7 from 8, and only add 5 cycles
    to variables queue items instead of 12.
  - afl-cc:
  - fixed off-by-one bug in our pcguard implemenation, thanks for
    @tokatoka for reporting
  - fix for llvm 15 and reenabling LTO, thanks to nikic for the PR!
  - better handling of -fsanitize=..,...,.. lists
  - support added for LLVMFuzzerRunDriver()
  - fix gcc_mode cmplog
  - obtain the map size of a target with setting AFL_DUMP_MAP_SIZE=1
    note that this will exit the target before main()
  - qemu_mode:
  - added AFL_QEMU_TRACK_UNSTABLE to log the addresses of unstable
    edges (together with AFL_DEBUG=1 afl-fuzz). thanks to
    worksbutnottested!
  - afl-analyze broke at some point, fix by CodeLogicError, thank you!
  - afl-cmin/afl-cmin.bash now have an -A option to allow also crashing
    and timeout inputs
  - unicorn_mode:
  - updated upstream unicorn version
  - fixed builds for aarch64
  - build now uses all available cores</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1666353600">- updated to 4.04c
  - fix gramatron and grammar_mutator build scripts
  - enhancements to the afl-persistent-config and afl-system-config
  - scripts
  - afl-fuzz:
  - force writing all stats on exit
  - afl-cc:
  - make gcc_mode (afl-gcc-fast) work with gcc down to version 3.6
  - qemu_mode:
  - fixed 10x speed degredation in v4.03c
  - added qemu_mode/fastexit helper library
  - unicorn_mode:
  - Enabled tricore arch (by @jma-qb)
  - Updated Capstone version in Rust bindings
  - llvm-mode:
  - AFL runtime will always pass inputs via shared memory, when possible,
    ignoring the command line.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1666440000">- Update file list for riscv64</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1672920000">- updated to 4.05c
  - afl-fuzz:
  - added afl_custom_fuzz_send custom mutator feature. Now your can
    send fuzz data to the target as you need, e.g. via IPC.
  - cmplog mode now has a -l R option for random colorization, thanks
    to guyf2010 for the PR!
  - queue statistics are written every 30 minutes to
    out/NAME/queue_data if compiled with INTROSPECTION
  - new env: AFL_FORK_SERVER_KILL_SIGNAL
  - afl-showmap/afl-cmin
  - `-t none` now translates to `-t 120000` (120 seconds)
  - unicorn_mode updated
  - updated rust custom mutator dependencies and LibAFL custom mutator
  - several minor bugfixes</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1681300800">- Pin to llvm15 for the time being: code fails to build with
  llvm16.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1681732800">- updated to 4.06c
  - afl-fuzz:
  - ensure temporary file descriptor is closed when not used
  - added `AFL_NO_WARN_INSTABILITY`
  - added time_wo_finds to fuzzer_stats
  - fixed a crash in pizza (1st april easter egg) mode. Sorry for
    everyone who was affected!
  - allow pizza mode to be disabled when AFL_PIZZA_MODE is set to -1
  - option `-p mmopt` now also selects new queue items more often
  - fix bug in post_process custom mutator implementation
  - print name of custom mutator in UI
  - slight changes that improve fuzzer performance
  - afl-cc:
  - add CFI sanitizer variant to gcc targets
  - llvm 16 + 17 support (thanks to @devnexen!)
  - support llvm 15 native pcguard changes
  - support for LLVMFuzzerTestOneInput -1 return
  - LTO autoken and llvm_mode: added AFL_LLVM_DICT2FILE_NO_MAIN support
  - qemu_mode:
  - fix _RANGES envs to allow hyphens in the filenames
  - basic riscv support
  - frida_mode:
  - added `AFL_FRIDA_STATS_INTERVAL`
  - fix issue on MacOS
  - unicorn_mode:
  - updated and minor issues fixed
  - nyx_mode support for all tools
  - better sanitizer default options support for all tools
  - new custom module: autotoken, a grammar free fuzzer for text inputs
  - fixed custom mutator C examples
  - more minor fixes and cross-platform support</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1686571200">- updated to 4.07c
  - afl-fuzz:
  - reverse reading the seeds only on restarts (increases performance)
  - new env `AFL_POST_PROCESS_KEEP_ORIGINAL` to keep the orignal
    data before post process on finds (for atnwalk custom mutator)
  - new env `AFL_IGNORE_PROBLEMS_COVERAGE` to ignore coverage from
    loaded libs after forkserver initialization (required by Mozilla)
  - afl-cc:
  - added @responsefile support
  - new env `AFL_LLVM_LTO_SKIPINIT` to support the AFL++ based WASM
    (https://github.com/fgsect/WAFL) project
  - error and print help if afl-clan-lto is used with lto=thin
  - rewrote our PCGUARD pass to be compatible with LLVM 15+ shenanigans,
    requires LLVM 13+ now instead of 10.0.1+
  - fallback to native LLVM PCGUARD if our PCGUARD is unavailable
  - fixed a crash in GCC CMPLOG
  - afl-showmap:
  - added custom mutator post_process and send support
  - add `-I filelist` option, an alternative to `-i in_dir`
  - afl-cmin + afl-cmin.bash:
  - `-T threads` parallel task support, can be a huge speedup!
  - qemu_mode:
  - Persistent mode + QASAN support for ppc32 targets by @worksbutnottested
  - a new grammar custom mutator atnwalk was submitted by @voidptr127 !
  - two new custom mutators are now available:
  - TritonDSE in custom_mutators/aflpp_tritondse
  - SymQEMU in custom_mutators/symqemu
- removed ppc64le condition (failed parsing), we have no 32bit ppc64le</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1691755200">- updated to 4.08c
  - afl-fuzz:
  - new mutation engine: mutations that favor discovery more paths are
    prefered until no new finds for 10 minutes then switching to mutations
    that favor triggering crashes. Modes and switch time can be configured
    with `-P`. Also input mode for the target can be defined with `-a` to
    be `text` or `binary` (defaults to `generic`)
  - new custom mutator that has the new afl++ engine (so it can easily
    incorporated into new custom mutators), and also comes with a standalone
    command line tool! See custom_mutators/aflpp/standalone/
  - display the state of the fuzzing run in the UI :-)
  - fix timeout setting if '+' is used or a session is restarted
  - -l X option to enable base64 transformation solving
  - allow to disable CMPLOG with '-c -' (e.g. afl.rs enforces '-c 0' on
    every instance which is counterproductive).
  - afl-cmin/afl-cmin.bash:
  - fixed a bug inherited from vanilla AFL where a coverage of
    map[123] = 11 would be the same as map[1123] = 1
  - warn on crashing inputs
  - adjust threads if less inputs than threads specified
  - afl-cc:
  - fixed an off-by-one instrumentation of iselect, hurting coverage a bit.
    Thanks to @amykweon for spotting and fixing!
  - @toka fixed a bug in laf-intel signed integer comparison splitting,
    thanks a lot!!
  - more LLVM compatability
  - frida_mode:
  - support for long form instrumentation on x86_x64 and arm64
  - renamed utils/get_symbol_addr.sh to utils/frida_get_symbol_addr.sh
  - qemu_mode:
  - added qemu_mode/utils/qemu_get_symbol_addr.sh</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1702814400">- updated to 4.09c
  - afl-fuzz:
  - fixed the new mutation implementation for two bugs
  - added `AFL_FINAL_SYNC` which forces a final fuzzer sync (also for `-F`)
    before terminating.
  - added AFL_IGNORE_SEED_PROBLEMS to skip over seeds that time out instead
    of exiting with an error message
  - allow -S/-M naming up to 50 characters (from 24)
  - CMPLOG:
  - added scale support (-l S)
  - skip unhelpful insertions (u8)
  - added --version and --help command line parameters
  - fixed endless loop when reading malformed dictionaries
  - new custom mutator function: post_run - thanks to yangzao!
  - afl-whatsup:
  - detect instanced that are starting up and show them as such as not dead
  - now also shows coverage reached
  - option -m shows only very relevant stats
  - option -n will not use color in the output
  - instrumentation:
  - fix for a few string compare transform functions for LAF
  - we are instrumenting __cxx internal functions again. this might break
    a few targets, please report if so.
  - frida_mode:
  - fixes support for large map offsets
  - support for AFL_FUZZER_LOOPCOUNT for afl.rs and LLVMFuzzerTestOneInput
  - afl-cmin/afl-cmin.bash: prevent unneeded file errors
  - added new tool afl-addseeds that adds new seeds to a running campaign
  - added benchmark/benchmark.py if you want to see how good your fuzzing
    speed is in comparison to other setups.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1707134400">- updated to 4.10c
  - afl-fuzz:
  - default power schedule is now EXPLORE, due a fix in fast schedules
    explore is slightly better now.
  - fixed minor issues in the mutation engine, thanks to @futhewo for
    reporting!
  - better deterministic fuzzing is now available, benchmarks have shown
    to improve fuzzing. Enable with -D. Thanks to @kdsjZh for the PR!
  - afl-cc:
  - large rewrite by @SonicStark which fixes a few corner cases, thanks!
  - LTO mode now requires llvm 12+
  - workaround for ASAN with gcc_plugin mode
  - instrumentation:
  - LLVM 18 support, thanks to @devnexen!
  - Injection (SQL, LDAP, XSS) fuzzing feature now available, see
    `instrumentation/README.injections.md` how to activate/use/expand.
  - compcov/LAF-intel:
  - floating point splitting bug fix by @hexcoder
  - due a bug in LLVM 17 integer splitting is disabled there!
  - when splitting floats was selected, integers were always split as well,
    fixed to require AFL_LLVM_LAF_SPLIT_COMPARES or _ALL as it should
  - dynamic instrumentation filtering for LLVM NATIVE, thanks @Mozilla!
    see utils/dynamic_covfilter/README.md
  - qemu_mode:
  - plugins are now activated by default and a new module is included that
    produces drcov compatible traces for lighthouse/lightkeeper/...
    thanks to @JRomainG to submitting!
  - updated Nyx checkout (fixes a bug) and some QOL
  - updated the custom grammar mutator
  - document afl-cmin does not work on macOS (but afl-cmin.bash does)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1713182400">- updated to 4.20c
  + A new forkserver communication model is now introduced. afl-fuzz is
    backward compatible to old compiled targets if they are not built
    for CMPLOG/Redqueen, but new compiled targets will not work with
    old afl-fuzz versions!
  + Recompile all targets that are instrumented for CMPLOG/Redqueen!
  - AFL++ now supports up to 4 billion coverage edges, up from 6 million.
  - New compile option: `make PERFORMANCE=1` - this will enable special
    CPU dependent optimizations that make everything more performant - but
    the binaries will likely won't work on different platforms. Also
    enables a faster hasher if the CPU requirements are met.
  - The persistent record feature (see config.h) was expanded to also
    support replay, thanks to @quarta-qti !
  - afl-fuzz:
  - the new deterministic fuzzing feature is now activated by default,
    deactivate with -z. Parameters -d and -D are ignored.
  - small improvements to CMPLOG/redqueen
  - workround for a bug with MOpt -L when used with -M - in the future
    we will either remove or rewrite MOpt.
  - fix for `-t xxx+` feature
  - -e extension option now saves the queue items, crashes, etc. with the
    extension too
  - fixes for trimmming, correct -V time and reading stats on resume by eqv
    thanks a lot!
  - afl-cc:
  - added collision free caller instrumentation to LTO mode. activate with
    `AFL_LLVM_LTO_CALLER=1`. You can set a max depth to go through single
    block functions with `AFL_LLVM_LTO_CALLER_DEPTH` (default 0)
  - fixes for COMPCOV/LAF and most other modules
  - fix for GCC_PLUGIN cmplog that broke on std::strings
  - afl-whatsup:
  - now also displays current average speed
  - small bugfixes
  - Fixes for aflpp custom mutator and standalone tool
  - Minor edits to afl-persistent-config
  - Prevent temporary files being left behind on aborted afl-whatsup
  - More CPU benchmarks added to benchmark/</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1718020800">- updated to 4.21c
  * afl-fuzz
  - fixed a regression in afl-fuzz that resulted in a 5-10% performace loss
    do a switch from gettimeofday() to clock_gettime() which should be rather
    three times faster. The reason for this is unknown.
  - new queue selection algorithm based on 2 core years of queue data
    analysis. gives a noticable improvement on coverage although the results
    seem counterintuitive :-)
  - added AFL_DISABLE_REDUNDANT for huge queues
  - added `AFL_NO_SYNC` environment variable that does what you think it does
  - fix AFL_PERSISTENT_RECORD
  - run custom_post_process after standard trimming
  - prevent filenames in the queue that have spaces
  - minor fix for FAST schedules
  - more frequent stats update when syncing (todo: check performance impact)
  - now timing of calibration, trimming and syncing is measured seperately,
    thanks to @eqv!
  - -V timing is now accurately the fuzz time (without syncing), before
    long calibration times and syncing could result in now fuzzing being
    made when the time was already run out until then, thanks to @eqv!
  - fix -n uninstrumented mode when ending fuzzing
  - enhanced the ASAN configuration
  - make afl-fuzz use less memory with cmplog and fix a memleak
  * afl-cc:
  - re-enable i386 support that was accidently disabled
  - fixes for LTO and outdated afl-gcc mode for i386
  - fix COMPCOV split compare for old LLVMs
  - disable xml/curl/g_ string transform functions because we do not check
    for null pointers ... TODO
  - ensure shared memory variables are visible in weird build setups
  - compatability to new LLVM 19 changes
  * afl-cmin
  - work with input files that have a space
  * afl-showmap
  - fix memory leak on shmem testcase usage (thanks to @ndrewh)
  - minor fix to collect coverage -C (thanks to @bet4it)
  * Fixed a shmem mmap bug (that rarely came up on MacOS)
  * libtokencap: script generate_libtoken_dict.sh added by @a-shvedov</changelog>
</package>
<package pkgid="fd01c43704c1776c43940000803691eb48ba88a378d09ef3fd2dafd667bc5a11" name="afl" arch="ppc64le">
  <version epoch="0" ver="4.21c" rel="bp156.2.3.1"/>
  <changelog author="Peace Peters &lt;peacepeters.pp@gmail.com&gt;" date="1626350400">- s390x added to the compiler files</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1626696000">- updated to 3.14c
  - afl-fuzz:
  - fix -F when a '/' was part of the parameter
  - fixed a crash for cmplog for very slow inputs
  - fix for AFLfast schedule counting
  - removed implied -D determinstic from -M main
  - if the target becomes unavailable check out out/default/error.txt
    for an indicator why
  - AFL_CAL_FAST was a dead env, now does the same as AFL_FAST_CAL
  - reverse read the queue on resumes (more effective)
  - fix custom mutator trimming
  - afl-cc:
  - Update to COMPCOV/laf-intel that speeds up the instrumentation
    process a lot - thanks to Michael Rodler/f0rki for the PR!
  - Fix for failures for some sized string instrumentations
  - Fix to instrument global namespace functions in c++
  - Fix for llvm 13
  - support partial linking
  - do honor AFL_LLVM_{ALLOW/DENY}LIST for LTO autodictionary and DICT2FILE
  - We do support llvm versions from 3.8 to 5.0 again
  - frida_mode:
  - several fixes for cmplog
  - remove need for AFL_FRIDA_PERSISTENT_RETADDR_OFFSET
  - less coverage collision
  - feature parity of aarch64 with intel now (persistent, cmplog,
    in-memory testcases, asan)
  - afl-cmin and afl-showmap -i do now descend into subdirectories
    (like afl-fuzz does) - note that afl-cmin.bash does not!
  - afl_analyze:
  - fix timeout handling
  - add forkserver support for better performance
  - ensure afl-compiler-rt is built for gcc_module
  - always build aflpp_driver for libfuzzer harnesses
  - added `AFL_NO_FORKSRV` env variable support to
    afl-cmin, afl-tmin, and afl-showmap, by @jhertz
  - removed outdated documents, improved existing documentation</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1632657600">- enable gcc-plugin on factory
- build with 32bit plugins on x86_64</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1643630400">- updated to 4.00c
  - complete documentation restructuring, made possible by Google Season
    of Docs :) thank you Jana!
  - we renamed several UI and fuzzer_stat entries to be more precise,
    e.g. "unique crashes" -&gt; "saved crashes", "total paths" -&gt;
    "corpus count", "current path" -&gt; "current item".
    This might need changing custom scripting!
  - Nyx mode (full system emulation with snapshot capability) has been
    added - thanks to @schumilo and @eqv!
  - unicorn_mode:
  - Moved to unicorn2! by Ziqiao Kong (@lazymio)
  - Faster, more accurate emulation (newer QEMU base), risc-v support
  - removed indirections in rust callbacks
  - new binary-only fuzzing mode: coresight_mode for aarch64 CPUs :)
    thanks to RICSecLab submitting!
  - if instrumented libaries are dlopen()'ed after the forkserver you
    will now see a crash. Before you would have colliding coverage.
    We changed this to force fixing a broken setup rather then allowing
    ineffective fuzzing.
  - See docs/best_practices.md how to fix such setups.
  - afl-fuzz:
  - cmplog binaries will need to be recompiled for this version
    (it is better!)
  - fix a regression introduced in 3.10 that resulted in less
    coverage being detected. thanks to Collin May for reporting!
  - ensure all spawned targets are killed on exit
  - added AFL_IGNORE_PROBLEMS, plus checks to identify and abort on
    incorrect LTO usage setups and enhanced the READMEs for better
    information on how to deal with instrumenting libraries
  - fix -n dumb mode (nobody should use this mode though)
  - fix stability issue with LTO and cmplog
  - better banner
  - more effective cmplog mode
  - more often update the UI when in input2stage mode
  - qemu_mode/unicorn_mode: fixed OOB write when using libcompcov,
    thanks to kotee4ko for reporting!
  - frida_mode:
  - better performance, bug fixes
  - David Carlier added Android support :)
  - afl-showmap, afl-tmin and afl-analyze:
  - honor persistent mode for more speed. thanks to dloffre-snl
    for reporting!
  - fix bug where targets are not killed on timeouts
  - moved hidden afl-showmap -A option to -H to be used for
    coresight_mode
  - Prevent accidentaly killing non-afl/fuzz services when aborting
    afl-showmap and other tools.
  - afl-cc:
  - detect overflow reads on initial input buffer for asan
  - new cmplog mode (incompatible with older afl++ versions)
  - support llvm IR select instrumentation for default PCGUARD and LTO
  - fix for shared linking on MacOS
  - better selective instrumentation AFL_LLVM_{ALLOW|DENY}LIST
    on filename matching (requires llvm 11 or newer)
  - fixed a potential crash in targets for LAF string handling
  - fixed a bad assert in LAF split switches
  - added AFL_USE_TSAN thread sanitizer support
  - llvm and LTO mode modified to work with new llvm 14-dev (again.)
  - fix for AFL_REAL_LD
  - more -z defs filtering
  - make -v without options work
  - added the very good grammar mutator "GramaTron" to the
    custom_mutators
  - added optimin, a faster and better corpus minimizer by
    Adrian Herrera. Thank you!
  - added afl-persistent-config script to set perform permanent system
    configuration settings for fuzzing, for Linux and Macos.
    thanks to jhertz!
  - added xml, curl &amp; exotic string functions to llvm dictionary feature
  - fix AFL_PRELOAD issues on MacOS
  - removed utils/afl_frida because frida_mode/ is now so much better
  - added uninstall target to makefile (todo: update new readme!)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1645617600">- Fix build with armv7l on Leap: we have afl-llvm-rt-lto{,-32}.o.
- Fix build with ppc64le: we don't seem to have the 32-bit object
  files available there and there is also no gcc-32bit.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1654344000">- Add llvm14-fix-build.patch: fix build with LLVM 14.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1656417600">- updated to 4.01c
  - fixed */build_...sh scripts to work outside of git
  - new custom_mutator: libafl with token fuzzing :)
  - afl-fuzz:
  - when you just want to compile once and set CMPLOG, then just
    set -c 0 to tell afl-fuzz that the fuzzing binary is also for
    CMPLOG.
  - new commandline options -g/G to set min/max length of generated
    fuzz inputs
  - you can set the time for syncing to other fuzzer now with
    AFL_SYNC_TIME
  - reintroduced AFL_PERSISTENT and AFL_DEFER_FORKSRV to allow
    persistent mode and manual forkserver support if these are not
    in the target binary (e.g. are in a shared library)
  - add AFL_EARLY_FORKSERVER to install the forkserver as earliest as
    possible in the target (for afl-gcc-fast/afl-clang-fast/
    afl-clang-lto)
  - "saved timeouts" was wrong information, timeouts are still thrown
    away by default even if they have new coverage (hangs are always
    kept), unless AFL_KEEP_TIMEOUTS are set
  - AFL never implemented auto token inserts (but user token inserts,
    user token overwrite and auto token overwrite), added now!
  - fixed a mutation type in havoc mode
  - Mopt fix to always select the correct algorithm
  - fix effector map calculation (deterministic mode)
  - fix custom mutator post_process functionality
  - document and auto-activate pizza mode on condition
  - afl-cc:
  - due a bug in lld of llvm 15 LTO instrumentation wont work atm :-(
  - converted all passed to use the new llvm pass manager for llvm 11+
  - AFL++ PCGUARD mode is not available for 10.0.1 anymore (11+ only)
  - trying to stay on top on all these #$&amp;§!! changes in llvm 15 ...
  - frida_mode:
  - update to new frida release, handles now c++ throw/catch
  - unicorn_mode:
  - update unicorn engine, fix C example
  - utils:
  - removed optimin because it looses coverage due to a bug and is
    unmaintained :-(
- removed upstream llvm14-fix-build.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1660996800">- updated to 4.02c
  - afl-cc:
  - important fix for the default pcguard mode when LLVM IR vector
    selects are produced, thanks to @juppytt for reporting!
  - gcc_plugin:
  - Adacore submitted CMPLOG support to the gcc_plugin! :-)
  - llvm_mode:
  - laf cmp splitting fixed for more comparison types
  - frida_mode:
  - now works on Android!
  - afl-fuzz:
  - change post_process hook to allow returning NULL and 0 length to
    tell afl-fuzz to skip this mutated input</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1663675200">- updated to 4.03c
  - Building now gives a build summary what succeeded and what not
  - afl-fuzz:
  - added AFL_NO_STARTUP_CALIBRATION to start fuzzing at once instead
    of calibrating all initial seeds first. Good for large queues
    and long execution times, especially in CIs.
  - default calibration cycles set to 7 from 8, and only add 5 cycles
    to variables queue items instead of 12.
  - afl-cc:
  - fixed off-by-one bug in our pcguard implemenation, thanks for
    @tokatoka for reporting
  - fix for llvm 15 and reenabling LTO, thanks to nikic for the PR!
  - better handling of -fsanitize=..,...,.. lists
  - support added for LLVMFuzzerRunDriver()
  - fix gcc_mode cmplog
  - obtain the map size of a target with setting AFL_DUMP_MAP_SIZE=1
    note that this will exit the target before main()
  - qemu_mode:
  - added AFL_QEMU_TRACK_UNSTABLE to log the addresses of unstable
    edges (together with AFL_DEBUG=1 afl-fuzz). thanks to
    worksbutnottested!
  - afl-analyze broke at some point, fix by CodeLogicError, thank you!
  - afl-cmin/afl-cmin.bash now have an -A option to allow also crashing
    and timeout inputs
  - unicorn_mode:
  - updated upstream unicorn version
  - fixed builds for aarch64
  - build now uses all available cores</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1666353600">- updated to 4.04c
  - fix gramatron and grammar_mutator build scripts
  - enhancements to the afl-persistent-config and afl-system-config
  - scripts
  - afl-fuzz:
  - force writing all stats on exit
  - afl-cc:
  - make gcc_mode (afl-gcc-fast) work with gcc down to version 3.6
  - qemu_mode:
  - fixed 10x speed degredation in v4.03c
  - added qemu_mode/fastexit helper library
  - unicorn_mode:
  - Enabled tricore arch (by @jma-qb)
  - Updated Capstone version in Rust bindings
  - llvm-mode:
  - AFL runtime will always pass inputs via shared memory, when possible,
    ignoring the command line.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1666440000">- Update file list for riscv64</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1672920000">- updated to 4.05c
  - afl-fuzz:
  - added afl_custom_fuzz_send custom mutator feature. Now your can
    send fuzz data to the target as you need, e.g. via IPC.
  - cmplog mode now has a -l R option for random colorization, thanks
    to guyf2010 for the PR!
  - queue statistics are written every 30 minutes to
    out/NAME/queue_data if compiled with INTROSPECTION
  - new env: AFL_FORK_SERVER_KILL_SIGNAL
  - afl-showmap/afl-cmin
  - `-t none` now translates to `-t 120000` (120 seconds)
  - unicorn_mode updated
  - updated rust custom mutator dependencies and LibAFL custom mutator
  - several minor bugfixes</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1681300800">- Pin to llvm15 for the time being: code fails to build with
  llvm16.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1681732800">- updated to 4.06c
  - afl-fuzz:
  - ensure temporary file descriptor is closed when not used
  - added `AFL_NO_WARN_INSTABILITY`
  - added time_wo_finds to fuzzer_stats
  - fixed a crash in pizza (1st april easter egg) mode. Sorry for
    everyone who was affected!
  - allow pizza mode to be disabled when AFL_PIZZA_MODE is set to -1
  - option `-p mmopt` now also selects new queue items more often
  - fix bug in post_process custom mutator implementation
  - print name of custom mutator in UI
  - slight changes that improve fuzzer performance
  - afl-cc:
  - add CFI sanitizer variant to gcc targets
  - llvm 16 + 17 support (thanks to @devnexen!)
  - support llvm 15 native pcguard changes
  - support for LLVMFuzzerTestOneInput -1 return
  - LTO autoken and llvm_mode: added AFL_LLVM_DICT2FILE_NO_MAIN support
  - qemu_mode:
  - fix _RANGES envs to allow hyphens in the filenames
  - basic riscv support
  - frida_mode:
  - added `AFL_FRIDA_STATS_INTERVAL`
  - fix issue on MacOS
  - unicorn_mode:
  - updated and minor issues fixed
  - nyx_mode support for all tools
  - better sanitizer default options support for all tools
  - new custom module: autotoken, a grammar free fuzzer for text inputs
  - fixed custom mutator C examples
  - more minor fixes and cross-platform support</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1686571200">- updated to 4.07c
  - afl-fuzz:
  - reverse reading the seeds only on restarts (increases performance)
  - new env `AFL_POST_PROCESS_KEEP_ORIGINAL` to keep the orignal
    data before post process on finds (for atnwalk custom mutator)
  - new env `AFL_IGNORE_PROBLEMS_COVERAGE` to ignore coverage from
    loaded libs after forkserver initialization (required by Mozilla)
  - afl-cc:
  - added @responsefile support
  - new env `AFL_LLVM_LTO_SKIPINIT` to support the AFL++ based WASM
    (https://github.com/fgsect/WAFL) project
  - error and print help if afl-clan-lto is used with lto=thin
  - rewrote our PCGUARD pass to be compatible with LLVM 15+ shenanigans,
    requires LLVM 13+ now instead of 10.0.1+
  - fallback to native LLVM PCGUARD if our PCGUARD is unavailable
  - fixed a crash in GCC CMPLOG
  - afl-showmap:
  - added custom mutator post_process and send support
  - add `-I filelist` option, an alternative to `-i in_dir`
  - afl-cmin + afl-cmin.bash:
  - `-T threads` parallel task support, can be a huge speedup!
  - qemu_mode:
  - Persistent mode + QASAN support for ppc32 targets by @worksbutnottested
  - a new grammar custom mutator atnwalk was submitted by @voidptr127 !
  - two new custom mutators are now available:
  - TritonDSE in custom_mutators/aflpp_tritondse
  - SymQEMU in custom_mutators/symqemu
- removed ppc64le condition (failed parsing), we have no 32bit ppc64le</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1691755200">- updated to 4.08c
  - afl-fuzz:
  - new mutation engine: mutations that favor discovery more paths are
    prefered until no new finds for 10 minutes then switching to mutations
    that favor triggering crashes. Modes and switch time can be configured
    with `-P`. Also input mode for the target can be defined with `-a` to
    be `text` or `binary` (defaults to `generic`)
  - new custom mutator that has the new afl++ engine (so it can easily
    incorporated into new custom mutators), and also comes with a standalone
    command line tool! See custom_mutators/aflpp/standalone/
  - display the state of the fuzzing run in the UI :-)
  - fix timeout setting if '+' is used or a session is restarted
  - -l X option to enable base64 transformation solving
  - allow to disable CMPLOG with '-c -' (e.g. afl.rs enforces '-c 0' on
    every instance which is counterproductive).
  - afl-cmin/afl-cmin.bash:
  - fixed a bug inherited from vanilla AFL where a coverage of
    map[123] = 11 would be the same as map[1123] = 1
  - warn on crashing inputs
  - adjust threads if less inputs than threads specified
  - afl-cc:
  - fixed an off-by-one instrumentation of iselect, hurting coverage a bit.
    Thanks to @amykweon for spotting and fixing!
  - @toka fixed a bug in laf-intel signed integer comparison splitting,
    thanks a lot!!
  - more LLVM compatability
  - frida_mode:
  - support for long form instrumentation on x86_x64 and arm64
  - renamed utils/get_symbol_addr.sh to utils/frida_get_symbol_addr.sh
  - qemu_mode:
  - added qemu_mode/utils/qemu_get_symbol_addr.sh</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1702814400">- updated to 4.09c
  - afl-fuzz:
  - fixed the new mutation implementation for two bugs
  - added `AFL_FINAL_SYNC` which forces a final fuzzer sync (also for `-F`)
    before terminating.
  - added AFL_IGNORE_SEED_PROBLEMS to skip over seeds that time out instead
    of exiting with an error message
  - allow -S/-M naming up to 50 characters (from 24)
  - CMPLOG:
  - added scale support (-l S)
  - skip unhelpful insertions (u8)
  - added --version and --help command line parameters
  - fixed endless loop when reading malformed dictionaries
  - new custom mutator function: post_run - thanks to yangzao!
  - afl-whatsup:
  - detect instanced that are starting up and show them as such as not dead
  - now also shows coverage reached
  - option -m shows only very relevant stats
  - option -n will not use color in the output
  - instrumentation:
  - fix for a few string compare transform functions for LAF
  - we are instrumenting __cxx internal functions again. this might break
    a few targets, please report if so.
  - frida_mode:
  - fixes support for large map offsets
  - support for AFL_FUZZER_LOOPCOUNT for afl.rs and LLVMFuzzerTestOneInput
  - afl-cmin/afl-cmin.bash: prevent unneeded file errors
  - added new tool afl-addseeds that adds new seeds to a running campaign
  - added benchmark/benchmark.py if you want to see how good your fuzzing
    speed is in comparison to other setups.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1707134400">- updated to 4.10c
  - afl-fuzz:
  - default power schedule is now EXPLORE, due a fix in fast schedules
    explore is slightly better now.
  - fixed minor issues in the mutation engine, thanks to @futhewo for
    reporting!
  - better deterministic fuzzing is now available, benchmarks have shown
    to improve fuzzing. Enable with -D. Thanks to @kdsjZh for the PR!
  - afl-cc:
  - large rewrite by @SonicStark which fixes a few corner cases, thanks!
  - LTO mode now requires llvm 12+
  - workaround for ASAN with gcc_plugin mode
  - instrumentation:
  - LLVM 18 support, thanks to @devnexen!
  - Injection (SQL, LDAP, XSS) fuzzing feature now available, see
    `instrumentation/README.injections.md` how to activate/use/expand.
  - compcov/LAF-intel:
  - floating point splitting bug fix by @hexcoder
  - due a bug in LLVM 17 integer splitting is disabled there!
  - when splitting floats was selected, integers were always split as well,
    fixed to require AFL_LLVM_LAF_SPLIT_COMPARES or _ALL as it should
  - dynamic instrumentation filtering for LLVM NATIVE, thanks @Mozilla!
    see utils/dynamic_covfilter/README.md
  - qemu_mode:
  - plugins are now activated by default and a new module is included that
    produces drcov compatible traces for lighthouse/lightkeeper/...
    thanks to @JRomainG to submitting!
  - updated Nyx checkout (fixes a bug) and some QOL
  - updated the custom grammar mutator
  - document afl-cmin does not work on macOS (but afl-cmin.bash does)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1713182400">- updated to 4.20c
  + A new forkserver communication model is now introduced. afl-fuzz is
    backward compatible to old compiled targets if they are not built
    for CMPLOG/Redqueen, but new compiled targets will not work with
    old afl-fuzz versions!
  + Recompile all targets that are instrumented for CMPLOG/Redqueen!
  - AFL++ now supports up to 4 billion coverage edges, up from 6 million.
  - New compile option: `make PERFORMANCE=1` - this will enable special
    CPU dependent optimizations that make everything more performant - but
    the binaries will likely won't work on different platforms. Also
    enables a faster hasher if the CPU requirements are met.
  - The persistent record feature (see config.h) was expanded to also
    support replay, thanks to @quarta-qti !
  - afl-fuzz:
  - the new deterministic fuzzing feature is now activated by default,
    deactivate with -z. Parameters -d and -D are ignored.
  - small improvements to CMPLOG/redqueen
  - workround for a bug with MOpt -L when used with -M - in the future
    we will either remove or rewrite MOpt.
  - fix for `-t xxx+` feature
  - -e extension option now saves the queue items, crashes, etc. with the
    extension too
  - fixes for trimmming, correct -V time and reading stats on resume by eqv
    thanks a lot!
  - afl-cc:
  - added collision free caller instrumentation to LTO mode. activate with
    `AFL_LLVM_LTO_CALLER=1`. You can set a max depth to go through single
    block functions with `AFL_LLVM_LTO_CALLER_DEPTH` (default 0)
  - fixes for COMPCOV/LAF and most other modules
  - fix for GCC_PLUGIN cmplog that broke on std::strings
  - afl-whatsup:
  - now also displays current average speed
  - small bugfixes
  - Fixes for aflpp custom mutator and standalone tool
  - Minor edits to afl-persistent-config
  - Prevent temporary files being left behind on aborted afl-whatsup
  - More CPU benchmarks added to benchmark/</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1718020800">- updated to 4.21c
  * afl-fuzz
  - fixed a regression in afl-fuzz that resulted in a 5-10% performace loss
    do a switch from gettimeofday() to clock_gettime() which should be rather
    three times faster. The reason for this is unknown.
  - new queue selection algorithm based on 2 core years of queue data
    analysis. gives a noticable improvement on coverage although the results
    seem counterintuitive :-)
  - added AFL_DISABLE_REDUNDANT for huge queues
  - added `AFL_NO_SYNC` environment variable that does what you think it does
  - fix AFL_PERSISTENT_RECORD
  - run custom_post_process after standard trimming
  - prevent filenames in the queue that have spaces
  - minor fix for FAST schedules
  - more frequent stats update when syncing (todo: check performance impact)
  - now timing of calibration, trimming and syncing is measured seperately,
    thanks to @eqv!
  - -V timing is now accurately the fuzz time (without syncing), before
    long calibration times and syncing could result in now fuzzing being
    made when the time was already run out until then, thanks to @eqv!
  - fix -n uninstrumented mode when ending fuzzing
  - enhanced the ASAN configuration
  - make afl-fuzz use less memory with cmplog and fix a memleak
  * afl-cc:
  - re-enable i386 support that was accidently disabled
  - fixes for LTO and outdated afl-gcc mode for i386
  - fix COMPCOV split compare for old LLVMs
  - disable xml/curl/g_ string transform functions because we do not check
    for null pointers ... TODO
  - ensure shared memory variables are visible in weird build setups
  - compatability to new LLVM 19 changes
  * afl-cmin
  - work with input files that have a space
  * afl-showmap
  - fix memory leak on shmem testcase usage (thanks to @ndrewh)
  - minor fix to collect coverage -C (thanks to @bet4it)
  * Fixed a shmem mmap bug (that rarely came up on MacOS)
  * libtokencap: script generate_libtoken_dict.sh added by @a-shvedov</changelog>
</package>
<package pkgid="ead14e8ec2e75b0c85d18990e96d29c1b88abba677dd3b674616d0f6cd4aef2e" name="afl" arch="s390x">
  <version epoch="0" ver="4.21c" rel="bp156.2.3.1"/>
  <changelog author="Peace Peters &lt;peacepeters.pp@gmail.com&gt;" date="1626350400">- s390x added to the compiler files</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1626696000">- updated to 3.14c
  - afl-fuzz:
  - fix -F when a '/' was part of the parameter
  - fixed a crash for cmplog for very slow inputs
  - fix for AFLfast schedule counting
  - removed implied -D determinstic from -M main
  - if the target becomes unavailable check out out/default/error.txt
    for an indicator why
  - AFL_CAL_FAST was a dead env, now does the same as AFL_FAST_CAL
  - reverse read the queue on resumes (more effective)
  - fix custom mutator trimming
  - afl-cc:
  - Update to COMPCOV/laf-intel that speeds up the instrumentation
    process a lot - thanks to Michael Rodler/f0rki for the PR!
  - Fix for failures for some sized string instrumentations
  - Fix to instrument global namespace functions in c++
  - Fix for llvm 13
  - support partial linking
  - do honor AFL_LLVM_{ALLOW/DENY}LIST for LTO autodictionary and DICT2FILE
  - We do support llvm versions from 3.8 to 5.0 again
  - frida_mode:
  - several fixes for cmplog
  - remove need for AFL_FRIDA_PERSISTENT_RETADDR_OFFSET
  - less coverage collision
  - feature parity of aarch64 with intel now (persistent, cmplog,
    in-memory testcases, asan)
  - afl-cmin and afl-showmap -i do now descend into subdirectories
    (like afl-fuzz does) - note that afl-cmin.bash does not!
  - afl_analyze:
  - fix timeout handling
  - add forkserver support for better performance
  - ensure afl-compiler-rt is built for gcc_module
  - always build aflpp_driver for libfuzzer harnesses
  - added `AFL_NO_FORKSRV` env variable support to
    afl-cmin, afl-tmin, and afl-showmap, by @jhertz
  - removed outdated documents, improved existing documentation</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1632657600">- enable gcc-plugin on factory
- build with 32bit plugins on x86_64</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1643630400">- updated to 4.00c
  - complete documentation restructuring, made possible by Google Season
    of Docs :) thank you Jana!
  - we renamed several UI and fuzzer_stat entries to be more precise,
    e.g. "unique crashes" -&gt; "saved crashes", "total paths" -&gt;
    "corpus count", "current path" -&gt; "current item".
    This might need changing custom scripting!
  - Nyx mode (full system emulation with snapshot capability) has been
    added - thanks to @schumilo and @eqv!
  - unicorn_mode:
  - Moved to unicorn2! by Ziqiao Kong (@lazymio)
  - Faster, more accurate emulation (newer QEMU base), risc-v support
  - removed indirections in rust callbacks
  - new binary-only fuzzing mode: coresight_mode for aarch64 CPUs :)
    thanks to RICSecLab submitting!
  - if instrumented libaries are dlopen()'ed after the forkserver you
    will now see a crash. Before you would have colliding coverage.
    We changed this to force fixing a broken setup rather then allowing
    ineffective fuzzing.
  - See docs/best_practices.md how to fix such setups.
  - afl-fuzz:
  - cmplog binaries will need to be recompiled for this version
    (it is better!)
  - fix a regression introduced in 3.10 that resulted in less
    coverage being detected. thanks to Collin May for reporting!
  - ensure all spawned targets are killed on exit
  - added AFL_IGNORE_PROBLEMS, plus checks to identify and abort on
    incorrect LTO usage setups and enhanced the READMEs for better
    information on how to deal with instrumenting libraries
  - fix -n dumb mode (nobody should use this mode though)
  - fix stability issue with LTO and cmplog
  - better banner
  - more effective cmplog mode
  - more often update the UI when in input2stage mode
  - qemu_mode/unicorn_mode: fixed OOB write when using libcompcov,
    thanks to kotee4ko for reporting!
  - frida_mode:
  - better performance, bug fixes
  - David Carlier added Android support :)
  - afl-showmap, afl-tmin and afl-analyze:
  - honor persistent mode for more speed. thanks to dloffre-snl
    for reporting!
  - fix bug where targets are not killed on timeouts
  - moved hidden afl-showmap -A option to -H to be used for
    coresight_mode
  - Prevent accidentaly killing non-afl/fuzz services when aborting
    afl-showmap and other tools.
  - afl-cc:
  - detect overflow reads on initial input buffer for asan
  - new cmplog mode (incompatible with older afl++ versions)
  - support llvm IR select instrumentation for default PCGUARD and LTO
  - fix for shared linking on MacOS
  - better selective instrumentation AFL_LLVM_{ALLOW|DENY}LIST
    on filename matching (requires llvm 11 or newer)
  - fixed a potential crash in targets for LAF string handling
  - fixed a bad assert in LAF split switches
  - added AFL_USE_TSAN thread sanitizer support
  - llvm and LTO mode modified to work with new llvm 14-dev (again.)
  - fix for AFL_REAL_LD
  - more -z defs filtering
  - make -v without options work
  - added the very good grammar mutator "GramaTron" to the
    custom_mutators
  - added optimin, a faster and better corpus minimizer by
    Adrian Herrera. Thank you!
  - added afl-persistent-config script to set perform permanent system
    configuration settings for fuzzing, for Linux and Macos.
    thanks to jhertz!
  - added xml, curl &amp; exotic string functions to llvm dictionary feature
  - fix AFL_PRELOAD issues on MacOS
  - removed utils/afl_frida because frida_mode/ is now so much better
  - added uninstall target to makefile (todo: update new readme!)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1645617600">- Fix build with armv7l on Leap: we have afl-llvm-rt-lto{,-32}.o.
- Fix build with ppc64le: we don't seem to have the 32-bit object
  files available there and there is also no gcc-32bit.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1654344000">- Add llvm14-fix-build.patch: fix build with LLVM 14.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1656417600">- updated to 4.01c
  - fixed */build_...sh scripts to work outside of git
  - new custom_mutator: libafl with token fuzzing :)
  - afl-fuzz:
  - when you just want to compile once and set CMPLOG, then just
    set -c 0 to tell afl-fuzz that the fuzzing binary is also for
    CMPLOG.
  - new commandline options -g/G to set min/max length of generated
    fuzz inputs
  - you can set the time for syncing to other fuzzer now with
    AFL_SYNC_TIME
  - reintroduced AFL_PERSISTENT and AFL_DEFER_FORKSRV to allow
    persistent mode and manual forkserver support if these are not
    in the target binary (e.g. are in a shared library)
  - add AFL_EARLY_FORKSERVER to install the forkserver as earliest as
    possible in the target (for afl-gcc-fast/afl-clang-fast/
    afl-clang-lto)
  - "saved timeouts" was wrong information, timeouts are still thrown
    away by default even if they have new coverage (hangs are always
    kept), unless AFL_KEEP_TIMEOUTS are set
  - AFL never implemented auto token inserts (but user token inserts,
    user token overwrite and auto token overwrite), added now!
  - fixed a mutation type in havoc mode
  - Mopt fix to always select the correct algorithm
  - fix effector map calculation (deterministic mode)
  - fix custom mutator post_process functionality
  - document and auto-activate pizza mode on condition
  - afl-cc:
  - due a bug in lld of llvm 15 LTO instrumentation wont work atm :-(
  - converted all passed to use the new llvm pass manager for llvm 11+
  - AFL++ PCGUARD mode is not available for 10.0.1 anymore (11+ only)
  - trying to stay on top on all these #$&amp;§!! changes in llvm 15 ...
  - frida_mode:
  - update to new frida release, handles now c++ throw/catch
  - unicorn_mode:
  - update unicorn engine, fix C example
  - utils:
  - removed optimin because it looses coverage due to a bug and is
    unmaintained :-(
- removed upstream llvm14-fix-build.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1660996800">- updated to 4.02c
  - afl-cc:
  - important fix for the default pcguard mode when LLVM IR vector
    selects are produced, thanks to @juppytt for reporting!
  - gcc_plugin:
  - Adacore submitted CMPLOG support to the gcc_plugin! :-)
  - llvm_mode:
  - laf cmp splitting fixed for more comparison types
  - frida_mode:
  - now works on Android!
  - afl-fuzz:
  - change post_process hook to allow returning NULL and 0 length to
    tell afl-fuzz to skip this mutated input</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1663675200">- updated to 4.03c
  - Building now gives a build summary what succeeded and what not
  - afl-fuzz:
  - added AFL_NO_STARTUP_CALIBRATION to start fuzzing at once instead
    of calibrating all initial seeds first. Good for large queues
    and long execution times, especially in CIs.
  - default calibration cycles set to 7 from 8, and only add 5 cycles
    to variables queue items instead of 12.
  - afl-cc:
  - fixed off-by-one bug in our pcguard implemenation, thanks for
    @tokatoka for reporting
  - fix for llvm 15 and reenabling LTO, thanks to nikic for the PR!
  - better handling of -fsanitize=..,...,.. lists
  - support added for LLVMFuzzerRunDriver()
  - fix gcc_mode cmplog
  - obtain the map size of a target with setting AFL_DUMP_MAP_SIZE=1
    note that this will exit the target before main()
  - qemu_mode:
  - added AFL_QEMU_TRACK_UNSTABLE to log the addresses of unstable
    edges (together with AFL_DEBUG=1 afl-fuzz). thanks to
    worksbutnottested!
  - afl-analyze broke at some point, fix by CodeLogicError, thank you!
  - afl-cmin/afl-cmin.bash now have an -A option to allow also crashing
    and timeout inputs
  - unicorn_mode:
  - updated upstream unicorn version
  - fixed builds for aarch64
  - build now uses all available cores</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1666353600">- updated to 4.04c
  - fix gramatron and grammar_mutator build scripts
  - enhancements to the afl-persistent-config and afl-system-config
  - scripts
  - afl-fuzz:
  - force writing all stats on exit
  - afl-cc:
  - make gcc_mode (afl-gcc-fast) work with gcc down to version 3.6
  - qemu_mode:
  - fixed 10x speed degredation in v4.03c
  - added qemu_mode/fastexit helper library
  - unicorn_mode:
  - Enabled tricore arch (by @jma-qb)
  - Updated Capstone version in Rust bindings
  - llvm-mode:
  - AFL runtime will always pass inputs via shared memory, when possible,
    ignoring the command line.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1666440000">- Update file list for riscv64</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1672920000">- updated to 4.05c
  - afl-fuzz:
  - added afl_custom_fuzz_send custom mutator feature. Now your can
    send fuzz data to the target as you need, e.g. via IPC.
  - cmplog mode now has a -l R option for random colorization, thanks
    to guyf2010 for the PR!
  - queue statistics are written every 30 minutes to
    out/NAME/queue_data if compiled with INTROSPECTION
  - new env: AFL_FORK_SERVER_KILL_SIGNAL
  - afl-showmap/afl-cmin
  - `-t none` now translates to `-t 120000` (120 seconds)
  - unicorn_mode updated
  - updated rust custom mutator dependencies and LibAFL custom mutator
  - several minor bugfixes</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1681300800">- Pin to llvm15 for the time being: code fails to build with
  llvm16.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1681732800">- updated to 4.06c
  - afl-fuzz:
  - ensure temporary file descriptor is closed when not used
  - added `AFL_NO_WARN_INSTABILITY`
  - added time_wo_finds to fuzzer_stats
  - fixed a crash in pizza (1st april easter egg) mode. Sorry for
    everyone who was affected!
  - allow pizza mode to be disabled when AFL_PIZZA_MODE is set to -1
  - option `-p mmopt` now also selects new queue items more often
  - fix bug in post_process custom mutator implementation
  - print name of custom mutator in UI
  - slight changes that improve fuzzer performance
  - afl-cc:
  - add CFI sanitizer variant to gcc targets
  - llvm 16 + 17 support (thanks to @devnexen!)
  - support llvm 15 native pcguard changes
  - support for LLVMFuzzerTestOneInput -1 return
  - LTO autoken and llvm_mode: added AFL_LLVM_DICT2FILE_NO_MAIN support
  - qemu_mode:
  - fix _RANGES envs to allow hyphens in the filenames
  - basic riscv support
  - frida_mode:
  - added `AFL_FRIDA_STATS_INTERVAL`
  - fix issue on MacOS
  - unicorn_mode:
  - updated and minor issues fixed
  - nyx_mode support for all tools
  - better sanitizer default options support for all tools
  - new custom module: autotoken, a grammar free fuzzer for text inputs
  - fixed custom mutator C examples
  - more minor fixes and cross-platform support</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1686571200">- updated to 4.07c
  - afl-fuzz:
  - reverse reading the seeds only on restarts (increases performance)
  - new env `AFL_POST_PROCESS_KEEP_ORIGINAL` to keep the orignal
    data before post process on finds (for atnwalk custom mutator)
  - new env `AFL_IGNORE_PROBLEMS_COVERAGE` to ignore coverage from
    loaded libs after forkserver initialization (required by Mozilla)
  - afl-cc:
  - added @responsefile support
  - new env `AFL_LLVM_LTO_SKIPINIT` to support the AFL++ based WASM
    (https://github.com/fgsect/WAFL) project
  - error and print help if afl-clan-lto is used with lto=thin
  - rewrote our PCGUARD pass to be compatible with LLVM 15+ shenanigans,
    requires LLVM 13+ now instead of 10.0.1+
  - fallback to native LLVM PCGUARD if our PCGUARD is unavailable
  - fixed a crash in GCC CMPLOG
  - afl-showmap:
  - added custom mutator post_process and send support
  - add `-I filelist` option, an alternative to `-i in_dir`
  - afl-cmin + afl-cmin.bash:
  - `-T threads` parallel task support, can be a huge speedup!
  - qemu_mode:
  - Persistent mode + QASAN support for ppc32 targets by @worksbutnottested
  - a new grammar custom mutator atnwalk was submitted by @voidptr127 !
  - two new custom mutators are now available:
  - TritonDSE in custom_mutators/aflpp_tritondse
  - SymQEMU in custom_mutators/symqemu
- removed ppc64le condition (failed parsing), we have no 32bit ppc64le</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1691755200">- updated to 4.08c
  - afl-fuzz:
  - new mutation engine: mutations that favor discovery more paths are
    prefered until no new finds for 10 minutes then switching to mutations
    that favor triggering crashes. Modes and switch time can be configured
    with `-P`. Also input mode for the target can be defined with `-a` to
    be `text` or `binary` (defaults to `generic`)
  - new custom mutator that has the new afl++ engine (so it can easily
    incorporated into new custom mutators), and also comes with a standalone
    command line tool! See custom_mutators/aflpp/standalone/
  - display the state of the fuzzing run in the UI :-)
  - fix timeout setting if '+' is used or a session is restarted
  - -l X option to enable base64 transformation solving
  - allow to disable CMPLOG with '-c -' (e.g. afl.rs enforces '-c 0' on
    every instance which is counterproductive).
  - afl-cmin/afl-cmin.bash:
  - fixed a bug inherited from vanilla AFL where a coverage of
    map[123] = 11 would be the same as map[1123] = 1
  - warn on crashing inputs
  - adjust threads if less inputs than threads specified
  - afl-cc:
  - fixed an off-by-one instrumentation of iselect, hurting coverage a bit.
    Thanks to @amykweon for spotting and fixing!
  - @toka fixed a bug in laf-intel signed integer comparison splitting,
    thanks a lot!!
  - more LLVM compatability
  - frida_mode:
  - support for long form instrumentation on x86_x64 and arm64
  - renamed utils/get_symbol_addr.sh to utils/frida_get_symbol_addr.sh
  - qemu_mode:
  - added qemu_mode/utils/qemu_get_symbol_addr.sh</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1702814400">- updated to 4.09c
  - afl-fuzz:
  - fixed the new mutation implementation for two bugs
  - added `AFL_FINAL_SYNC` which forces a final fuzzer sync (also for `-F`)
    before terminating.
  - added AFL_IGNORE_SEED_PROBLEMS to skip over seeds that time out instead
    of exiting with an error message
  - allow -S/-M naming up to 50 characters (from 24)
  - CMPLOG:
  - added scale support (-l S)
  - skip unhelpful insertions (u8)
  - added --version and --help command line parameters
  - fixed endless loop when reading malformed dictionaries
  - new custom mutator function: post_run - thanks to yangzao!
  - afl-whatsup:
  - detect instanced that are starting up and show them as such as not dead
  - now also shows coverage reached
  - option -m shows only very relevant stats
  - option -n will not use color in the output
  - instrumentation:
  - fix for a few string compare transform functions for LAF
  - we are instrumenting __cxx internal functions again. this might break
    a few targets, please report if so.
  - frida_mode:
  - fixes support for large map offsets
  - support for AFL_FUZZER_LOOPCOUNT for afl.rs and LLVMFuzzerTestOneInput
  - afl-cmin/afl-cmin.bash: prevent unneeded file errors
  - added new tool afl-addseeds that adds new seeds to a running campaign
  - added benchmark/benchmark.py if you want to see how good your fuzzing
    speed is in comparison to other setups.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1707134400">- updated to 4.10c
  - afl-fuzz:
  - default power schedule is now EXPLORE, due a fix in fast schedules
    explore is slightly better now.
  - fixed minor issues in the mutation engine, thanks to @futhewo for
    reporting!
  - better deterministic fuzzing is now available, benchmarks have shown
    to improve fuzzing. Enable with -D. Thanks to @kdsjZh for the PR!
  - afl-cc:
  - large rewrite by @SonicStark which fixes a few corner cases, thanks!
  - LTO mode now requires llvm 12+
  - workaround for ASAN with gcc_plugin mode
  - instrumentation:
  - LLVM 18 support, thanks to @devnexen!
  - Injection (SQL, LDAP, XSS) fuzzing feature now available, see
    `instrumentation/README.injections.md` how to activate/use/expand.
  - compcov/LAF-intel:
  - floating point splitting bug fix by @hexcoder
  - due a bug in LLVM 17 integer splitting is disabled there!
  - when splitting floats was selected, integers were always split as well,
    fixed to require AFL_LLVM_LAF_SPLIT_COMPARES or _ALL as it should
  - dynamic instrumentation filtering for LLVM NATIVE, thanks @Mozilla!
    see utils/dynamic_covfilter/README.md
  - qemu_mode:
  - plugins are now activated by default and a new module is included that
    produces drcov compatible traces for lighthouse/lightkeeper/...
    thanks to @JRomainG to submitting!
  - updated Nyx checkout (fixes a bug) and some QOL
  - updated the custom grammar mutator
  - document afl-cmin does not work on macOS (but afl-cmin.bash does)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1713182400">- updated to 4.20c
  + A new forkserver communication model is now introduced. afl-fuzz is
    backward compatible to old compiled targets if they are not built
    for CMPLOG/Redqueen, but new compiled targets will not work with
    old afl-fuzz versions!
  + Recompile all targets that are instrumented for CMPLOG/Redqueen!
  - AFL++ now supports up to 4 billion coverage edges, up from 6 million.
  - New compile option: `make PERFORMANCE=1` - this will enable special
    CPU dependent optimizations that make everything more performant - but
    the binaries will likely won't work on different platforms. Also
    enables a faster hasher if the CPU requirements are met.
  - The persistent record feature (see config.h) was expanded to also
    support replay, thanks to @quarta-qti !
  - afl-fuzz:
  - the new deterministic fuzzing feature is now activated by default,
    deactivate with -z. Parameters -d and -D are ignored.
  - small improvements to CMPLOG/redqueen
  - workround for a bug with MOpt -L when used with -M - in the future
    we will either remove or rewrite MOpt.
  - fix for `-t xxx+` feature
  - -e extension option now saves the queue items, crashes, etc. with the
    extension too
  - fixes for trimmming, correct -V time and reading stats on resume by eqv
    thanks a lot!
  - afl-cc:
  - added collision free caller instrumentation to LTO mode. activate with
    `AFL_LLVM_LTO_CALLER=1`. You can set a max depth to go through single
    block functions with `AFL_LLVM_LTO_CALLER_DEPTH` (default 0)
  - fixes for COMPCOV/LAF and most other modules
  - fix for GCC_PLUGIN cmplog that broke on std::strings
  - afl-whatsup:
  - now also displays current average speed
  - small bugfixes
  - Fixes for aflpp custom mutator and standalone tool
  - Minor edits to afl-persistent-config
  - Prevent temporary files being left behind on aborted afl-whatsup
  - More CPU benchmarks added to benchmark/</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1718020800">- updated to 4.21c
  * afl-fuzz
  - fixed a regression in afl-fuzz that resulted in a 5-10% performace loss
    do a switch from gettimeofday() to clock_gettime() which should be rather
    three times faster. The reason for this is unknown.
  - new queue selection algorithm based on 2 core years of queue data
    analysis. gives a noticable improvement on coverage although the results
    seem counterintuitive :-)
  - added AFL_DISABLE_REDUNDANT for huge queues
  - added `AFL_NO_SYNC` environment variable that does what you think it does
  - fix AFL_PERSISTENT_RECORD
  - run custom_post_process after standard trimming
  - prevent filenames in the queue that have spaces
  - minor fix for FAST schedules
  - more frequent stats update when syncing (todo: check performance impact)
  - now timing of calibration, trimming and syncing is measured seperately,
    thanks to @eqv!
  - -V timing is now accurately the fuzz time (without syncing), before
    long calibration times and syncing could result in now fuzzing being
    made when the time was already run out until then, thanks to @eqv!
  - fix -n uninstrumented mode when ending fuzzing
  - enhanced the ASAN configuration
  - make afl-fuzz use less memory with cmplog and fix a memleak
  * afl-cc:
  - re-enable i386 support that was accidently disabled
  - fixes for LTO and outdated afl-gcc mode for i386
  - fix COMPCOV split compare for old LLVMs
  - disable xml/curl/g_ string transform functions because we do not check
    for null pointers ... TODO
  - ensure shared memory variables are visible in weird build setups
  - compatability to new LLVM 19 changes
  * afl-cmin
  - work with input files that have a space
  * afl-showmap
  - fix memory leak on shmem testcase usage (thanks to @ndrewh)
  - minor fix to collect coverage -C (thanks to @bet4it)
  * Fixed a shmem mmap bug (that rarely came up on MacOS)
  * libtokencap: script generate_libtoken_dict.sh added by @a-shvedov</changelog>
</package>
<package pkgid="c4429cd65bc3e1c5cfe35f6de61bbfca105f4ddca1e101036c888aa8ff46d1fe" name="afl" arch="src">
  <version epoch="0" ver="4.21c" rel="bp156.2.3.1"/>
  <changelog author="Peace Peters &lt;peacepeters.pp@gmail.com&gt;" date="1626350400">- s390x added to the compiler files</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1626696000">- updated to 3.14c
  - afl-fuzz:
  - fix -F when a '/' was part of the parameter
  - fixed a crash for cmplog for very slow inputs
  - fix for AFLfast schedule counting
  - removed implied -D determinstic from -M main
  - if the target becomes unavailable check out out/default/error.txt
    for an indicator why
  - AFL_CAL_FAST was a dead env, now does the same as AFL_FAST_CAL
  - reverse read the queue on resumes (more effective)
  - fix custom mutator trimming
  - afl-cc:
  - Update to COMPCOV/laf-intel that speeds up the instrumentation
    process a lot - thanks to Michael Rodler/f0rki for the PR!
  - Fix for failures for some sized string instrumentations
  - Fix to instrument global namespace functions in c++
  - Fix for llvm 13
  - support partial linking
  - do honor AFL_LLVM_{ALLOW/DENY}LIST for LTO autodictionary and DICT2FILE
  - We do support llvm versions from 3.8 to 5.0 again
  - frida_mode:
  - several fixes for cmplog
  - remove need for AFL_FRIDA_PERSISTENT_RETADDR_OFFSET
  - less coverage collision
  - feature parity of aarch64 with intel now (persistent, cmplog,
    in-memory testcases, asan)
  - afl-cmin and afl-showmap -i do now descend into subdirectories
    (like afl-fuzz does) - note that afl-cmin.bash does not!
  - afl_analyze:
  - fix timeout handling
  - add forkserver support for better performance
  - ensure afl-compiler-rt is built for gcc_module
  - always build aflpp_driver for libfuzzer harnesses
  - added `AFL_NO_FORKSRV` env variable support to
    afl-cmin, afl-tmin, and afl-showmap, by @jhertz
  - removed outdated documents, improved existing documentation</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1632657600">- enable gcc-plugin on factory
- build with 32bit plugins on x86_64</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1643630400">- updated to 4.00c
  - complete documentation restructuring, made possible by Google Season
    of Docs :) thank you Jana!
  - we renamed several UI and fuzzer_stat entries to be more precise,
    e.g. "unique crashes" -&gt; "saved crashes", "total paths" -&gt;
    "corpus count", "current path" -&gt; "current item".
    This might need changing custom scripting!
  - Nyx mode (full system emulation with snapshot capability) has been
    added - thanks to @schumilo and @eqv!
  - unicorn_mode:
  - Moved to unicorn2! by Ziqiao Kong (@lazymio)
  - Faster, more accurate emulation (newer QEMU base), risc-v support
  - removed indirections in rust callbacks
  - new binary-only fuzzing mode: coresight_mode for aarch64 CPUs :)
    thanks to RICSecLab submitting!
  - if instrumented libaries are dlopen()'ed after the forkserver you
    will now see a crash. Before you would have colliding coverage.
    We changed this to force fixing a broken setup rather then allowing
    ineffective fuzzing.
  - See docs/best_practices.md how to fix such setups.
  - afl-fuzz:
  - cmplog binaries will need to be recompiled for this version
    (it is better!)
  - fix a regression introduced in 3.10 that resulted in less
    coverage being detected. thanks to Collin May for reporting!
  - ensure all spawned targets are killed on exit
  - added AFL_IGNORE_PROBLEMS, plus checks to identify and abort on
    incorrect LTO usage setups and enhanced the READMEs for better
    information on how to deal with instrumenting libraries
  - fix -n dumb mode (nobody should use this mode though)
  - fix stability issue with LTO and cmplog
  - better banner
  - more effective cmplog mode
  - more often update the UI when in input2stage mode
  - qemu_mode/unicorn_mode: fixed OOB write when using libcompcov,
    thanks to kotee4ko for reporting!
  - frida_mode:
  - better performance, bug fixes
  - David Carlier added Android support :)
  - afl-showmap, afl-tmin and afl-analyze:
  - honor persistent mode for more speed. thanks to dloffre-snl
    for reporting!
  - fix bug where targets are not killed on timeouts
  - moved hidden afl-showmap -A option to -H to be used for
    coresight_mode
  - Prevent accidentaly killing non-afl/fuzz services when aborting
    afl-showmap and other tools.
  - afl-cc:
  - detect overflow reads on initial input buffer for asan
  - new cmplog mode (incompatible with older afl++ versions)
  - support llvm IR select instrumentation for default PCGUARD and LTO
  - fix for shared linking on MacOS
  - better selective instrumentation AFL_LLVM_{ALLOW|DENY}LIST
    on filename matching (requires llvm 11 or newer)
  - fixed a potential crash in targets for LAF string handling
  - fixed a bad assert in LAF split switches
  - added AFL_USE_TSAN thread sanitizer support
  - llvm and LTO mode modified to work with new llvm 14-dev (again.)
  - fix for AFL_REAL_LD
  - more -z defs filtering
  - make -v without options work
  - added the very good grammar mutator "GramaTron" to the
    custom_mutators
  - added optimin, a faster and better corpus minimizer by
    Adrian Herrera. Thank you!
  - added afl-persistent-config script to set perform permanent system
    configuration settings for fuzzing, for Linux and Macos.
    thanks to jhertz!
  - added xml, curl &amp; exotic string functions to llvm dictionary feature
  - fix AFL_PRELOAD issues on MacOS
  - removed utils/afl_frida because frida_mode/ is now so much better
  - added uninstall target to makefile (todo: update new readme!)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1645617600">- Fix build with armv7l on Leap: we have afl-llvm-rt-lto{,-32}.o.
- Fix build with ppc64le: we don't seem to have the 32-bit object
  files available there and there is also no gcc-32bit.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1654344000">- Add llvm14-fix-build.patch: fix build with LLVM 14.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1656417600">- updated to 4.01c
  - fixed */build_...sh scripts to work outside of git
  - new custom_mutator: libafl with token fuzzing :)
  - afl-fuzz:
  - when you just want to compile once and set CMPLOG, then just
    set -c 0 to tell afl-fuzz that the fuzzing binary is also for
    CMPLOG.
  - new commandline options -g/G to set min/max length of generated
    fuzz inputs
  - you can set the time for syncing to other fuzzer now with
    AFL_SYNC_TIME
  - reintroduced AFL_PERSISTENT and AFL_DEFER_FORKSRV to allow
    persistent mode and manual forkserver support if these are not
    in the target binary (e.g. are in a shared library)
  - add AFL_EARLY_FORKSERVER to install the forkserver as earliest as
    possible in the target (for afl-gcc-fast/afl-clang-fast/
    afl-clang-lto)
  - "saved timeouts" was wrong information, timeouts are still thrown
    away by default even if they have new coverage (hangs are always
    kept), unless AFL_KEEP_TIMEOUTS are set
  - AFL never implemented auto token inserts (but user token inserts,
    user token overwrite and auto token overwrite), added now!
  - fixed a mutation type in havoc mode
  - Mopt fix to always select the correct algorithm
  - fix effector map calculation (deterministic mode)
  - fix custom mutator post_process functionality
  - document and auto-activate pizza mode on condition
  - afl-cc:
  - due a bug in lld of llvm 15 LTO instrumentation wont work atm :-(
  - converted all passed to use the new llvm pass manager for llvm 11+
  - AFL++ PCGUARD mode is not available for 10.0.1 anymore (11+ only)
  - trying to stay on top on all these #$&amp;§!! changes in llvm 15 ...
  - frida_mode:
  - update to new frida release, handles now c++ throw/catch
  - unicorn_mode:
  - update unicorn engine, fix C example
  - utils:
  - removed optimin because it looses coverage due to a bug and is
    unmaintained :-(
- removed upstream llvm14-fix-build.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1660996800">- updated to 4.02c
  - afl-cc:
  - important fix for the default pcguard mode when LLVM IR vector
    selects are produced, thanks to @juppytt for reporting!
  - gcc_plugin:
  - Adacore submitted CMPLOG support to the gcc_plugin! :-)
  - llvm_mode:
  - laf cmp splitting fixed for more comparison types
  - frida_mode:
  - now works on Android!
  - afl-fuzz:
  - change post_process hook to allow returning NULL and 0 length to
    tell afl-fuzz to skip this mutated input</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1663675200">- updated to 4.03c
  - Building now gives a build summary what succeeded and what not
  - afl-fuzz:
  - added AFL_NO_STARTUP_CALIBRATION to start fuzzing at once instead
    of calibrating all initial seeds first. Good for large queues
    and long execution times, especially in CIs.
  - default calibration cycles set to 7 from 8, and only add 5 cycles
    to variables queue items instead of 12.
  - afl-cc:
  - fixed off-by-one bug in our pcguard implemenation, thanks for
    @tokatoka for reporting
  - fix for llvm 15 and reenabling LTO, thanks to nikic for the PR!
  - better handling of -fsanitize=..,...,.. lists
  - support added for LLVMFuzzerRunDriver()
  - fix gcc_mode cmplog
  - obtain the map size of a target with setting AFL_DUMP_MAP_SIZE=1
    note that this will exit the target before main()
  - qemu_mode:
  - added AFL_QEMU_TRACK_UNSTABLE to log the addresses of unstable
    edges (together with AFL_DEBUG=1 afl-fuzz). thanks to
    worksbutnottested!
  - afl-analyze broke at some point, fix by CodeLogicError, thank you!
  - afl-cmin/afl-cmin.bash now have an -A option to allow also crashing
    and timeout inputs
  - unicorn_mode:
  - updated upstream unicorn version
  - fixed builds for aarch64
  - build now uses all available cores</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1666353600">- updated to 4.04c
  - fix gramatron and grammar_mutator build scripts
  - enhancements to the afl-persistent-config and afl-system-config
  - scripts
  - afl-fuzz:
  - force writing all stats on exit
  - afl-cc:
  - make gcc_mode (afl-gcc-fast) work with gcc down to version 3.6
  - qemu_mode:
  - fixed 10x speed degredation in v4.03c
  - added qemu_mode/fastexit helper library
  - unicorn_mode:
  - Enabled tricore arch (by @jma-qb)
  - Updated Capstone version in Rust bindings
  - llvm-mode:
  - AFL runtime will always pass inputs via shared memory, when possible,
    ignoring the command line.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1666440000">- Update file list for riscv64</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1672920000">- updated to 4.05c
  - afl-fuzz:
  - added afl_custom_fuzz_send custom mutator feature. Now your can
    send fuzz data to the target as you need, e.g. via IPC.
  - cmplog mode now has a -l R option for random colorization, thanks
    to guyf2010 for the PR!
  - queue statistics are written every 30 minutes to
    out/NAME/queue_data if compiled with INTROSPECTION
  - new env: AFL_FORK_SERVER_KILL_SIGNAL
  - afl-showmap/afl-cmin
  - `-t none` now translates to `-t 120000` (120 seconds)
  - unicorn_mode updated
  - updated rust custom mutator dependencies and LibAFL custom mutator
  - several minor bugfixes</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1681300800">- Pin to llvm15 for the time being: code fails to build with
  llvm16.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1681732800">- updated to 4.06c
  - afl-fuzz:
  - ensure temporary file descriptor is closed when not used
  - added `AFL_NO_WARN_INSTABILITY`
  - added time_wo_finds to fuzzer_stats
  - fixed a crash in pizza (1st april easter egg) mode. Sorry for
    everyone who was affected!
  - allow pizza mode to be disabled when AFL_PIZZA_MODE is set to -1
  - option `-p mmopt` now also selects new queue items more often
  - fix bug in post_process custom mutator implementation
  - print name of custom mutator in UI
  - slight changes that improve fuzzer performance
  - afl-cc:
  - add CFI sanitizer variant to gcc targets
  - llvm 16 + 17 support (thanks to @devnexen!)
  - support llvm 15 native pcguard changes
  - support for LLVMFuzzerTestOneInput -1 return
  - LTO autoken and llvm_mode: added AFL_LLVM_DICT2FILE_NO_MAIN support
  - qemu_mode:
  - fix _RANGES envs to allow hyphens in the filenames
  - basic riscv support
  - frida_mode:
  - added `AFL_FRIDA_STATS_INTERVAL`
  - fix issue on MacOS
  - unicorn_mode:
  - updated and minor issues fixed
  - nyx_mode support for all tools
  - better sanitizer default options support for all tools
  - new custom module: autotoken, a grammar free fuzzer for text inputs
  - fixed custom mutator C examples
  - more minor fixes and cross-platform support</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1686571200">- updated to 4.07c
  - afl-fuzz:
  - reverse reading the seeds only on restarts (increases performance)
  - new env `AFL_POST_PROCESS_KEEP_ORIGINAL` to keep the orignal
    data before post process on finds (for atnwalk custom mutator)
  - new env `AFL_IGNORE_PROBLEMS_COVERAGE` to ignore coverage from
    loaded libs after forkserver initialization (required by Mozilla)
  - afl-cc:
  - added @responsefile support
  - new env `AFL_LLVM_LTO_SKIPINIT` to support the AFL++ based WASM
    (https://github.com/fgsect/WAFL) project
  - error and print help if afl-clan-lto is used with lto=thin
  - rewrote our PCGUARD pass to be compatible with LLVM 15+ shenanigans,
    requires LLVM 13+ now instead of 10.0.1+
  - fallback to native LLVM PCGUARD if our PCGUARD is unavailable
  - fixed a crash in GCC CMPLOG
  - afl-showmap:
  - added custom mutator post_process and send support
  - add `-I filelist` option, an alternative to `-i in_dir`
  - afl-cmin + afl-cmin.bash:
  - `-T threads` parallel task support, can be a huge speedup!
  - qemu_mode:
  - Persistent mode + QASAN support for ppc32 targets by @worksbutnottested
  - a new grammar custom mutator atnwalk was submitted by @voidptr127 !
  - two new custom mutators are now available:
  - TritonDSE in custom_mutators/aflpp_tritondse
  - SymQEMU in custom_mutators/symqemu
- removed ppc64le condition (failed parsing), we have no 32bit ppc64le</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1691755200">- updated to 4.08c
  - afl-fuzz:
  - new mutation engine: mutations that favor discovery more paths are
    prefered until no new finds for 10 minutes then switching to mutations
    that favor triggering crashes. Modes and switch time can be configured
    with `-P`. Also input mode for the target can be defined with `-a` to
    be `text` or `binary` (defaults to `generic`)
  - new custom mutator that has the new afl++ engine (so it can easily
    incorporated into new custom mutators), and also comes with a standalone
    command line tool! See custom_mutators/aflpp/standalone/
  - display the state of the fuzzing run in the UI :-)
  - fix timeout setting if '+' is used or a session is restarted
  - -l X option to enable base64 transformation solving
  - allow to disable CMPLOG with '-c -' (e.g. afl.rs enforces '-c 0' on
    every instance which is counterproductive).
  - afl-cmin/afl-cmin.bash:
  - fixed a bug inherited from vanilla AFL where a coverage of
    map[123] = 11 would be the same as map[1123] = 1
  - warn on crashing inputs
  - adjust threads if less inputs than threads specified
  - afl-cc:
  - fixed an off-by-one instrumentation of iselect, hurting coverage a bit.
    Thanks to @amykweon for spotting and fixing!
  - @toka fixed a bug in laf-intel signed integer comparison splitting,
    thanks a lot!!
  - more LLVM compatability
  - frida_mode:
  - support for long form instrumentation on x86_x64 and arm64
  - renamed utils/get_symbol_addr.sh to utils/frida_get_symbol_addr.sh
  - qemu_mode:
  - added qemu_mode/utils/qemu_get_symbol_addr.sh</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1702814400">- updated to 4.09c
  - afl-fuzz:
  - fixed the new mutation implementation for two bugs
  - added `AFL_FINAL_SYNC` which forces a final fuzzer sync (also for `-F`)
    before terminating.
  - added AFL_IGNORE_SEED_PROBLEMS to skip over seeds that time out instead
    of exiting with an error message
  - allow -S/-M naming up to 50 characters (from 24)
  - CMPLOG:
  - added scale support (-l S)
  - skip unhelpful insertions (u8)
  - added --version and --help command line parameters
  - fixed endless loop when reading malformed dictionaries
  - new custom mutator function: post_run - thanks to yangzao!
  - afl-whatsup:
  - detect instanced that are starting up and show them as such as not dead
  - now also shows coverage reached
  - option -m shows only very relevant stats
  - option -n will not use color in the output
  - instrumentation:
  - fix for a few string compare transform functions for LAF
  - we are instrumenting __cxx internal functions again. this might break
    a few targets, please report if so.
  - frida_mode:
  - fixes support for large map offsets
  - support for AFL_FUZZER_LOOPCOUNT for afl.rs and LLVMFuzzerTestOneInput
  - afl-cmin/afl-cmin.bash: prevent unneeded file errors
  - added new tool afl-addseeds that adds new seeds to a running campaign
  - added benchmark/benchmark.py if you want to see how good your fuzzing
    speed is in comparison to other setups.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1707134400">- updated to 4.10c
  - afl-fuzz:
  - default power schedule is now EXPLORE, due a fix in fast schedules
    explore is slightly better now.
  - fixed minor issues in the mutation engine, thanks to @futhewo for
    reporting!
  - better deterministic fuzzing is now available, benchmarks have shown
    to improve fuzzing. Enable with -D. Thanks to @kdsjZh for the PR!
  - afl-cc:
  - large rewrite by @SonicStark which fixes a few corner cases, thanks!
  - LTO mode now requires llvm 12+
  - workaround for ASAN with gcc_plugin mode
  - instrumentation:
  - LLVM 18 support, thanks to @devnexen!
  - Injection (SQL, LDAP, XSS) fuzzing feature now available, see
    `instrumentation/README.injections.md` how to activate/use/expand.
  - compcov/LAF-intel:
  - floating point splitting bug fix by @hexcoder
  - due a bug in LLVM 17 integer splitting is disabled there!
  - when splitting floats was selected, integers were always split as well,
    fixed to require AFL_LLVM_LAF_SPLIT_COMPARES or _ALL as it should
  - dynamic instrumentation filtering for LLVM NATIVE, thanks @Mozilla!
    see utils/dynamic_covfilter/README.md
  - qemu_mode:
  - plugins are now activated by default and a new module is included that
    produces drcov compatible traces for lighthouse/lightkeeper/...
    thanks to @JRomainG to submitting!
  - updated Nyx checkout (fixes a bug) and some QOL
  - updated the custom grammar mutator
  - document afl-cmin does not work on macOS (but afl-cmin.bash does)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1713182400">- updated to 4.20c
  + A new forkserver communication model is now introduced. afl-fuzz is
    backward compatible to old compiled targets if they are not built
    for CMPLOG/Redqueen, but new compiled targets will not work with
    old afl-fuzz versions!
  + Recompile all targets that are instrumented for CMPLOG/Redqueen!
  - AFL++ now supports up to 4 billion coverage edges, up from 6 million.
  - New compile option: `make PERFORMANCE=1` - this will enable special
    CPU dependent optimizations that make everything more performant - but
    the binaries will likely won't work on different platforms. Also
    enables a faster hasher if the CPU requirements are met.
  - The persistent record feature (see config.h) was expanded to also
    support replay, thanks to @quarta-qti !
  - afl-fuzz:
  - the new deterministic fuzzing feature is now activated by default,
    deactivate with -z. Parameters -d and -D are ignored.
  - small improvements to CMPLOG/redqueen
  - workround for a bug with MOpt -L when used with -M - in the future
    we will either remove or rewrite MOpt.
  - fix for `-t xxx+` feature
  - -e extension option now saves the queue items, crashes, etc. with the
    extension too
  - fixes for trimmming, correct -V time and reading stats on resume by eqv
    thanks a lot!
  - afl-cc:
  - added collision free caller instrumentation to LTO mode. activate with
    `AFL_LLVM_LTO_CALLER=1`. You can set a max depth to go through single
    block functions with `AFL_LLVM_LTO_CALLER_DEPTH` (default 0)
  - fixes for COMPCOV/LAF and most other modules
  - fix for GCC_PLUGIN cmplog that broke on std::strings
  - afl-whatsup:
  - now also displays current average speed
  - small bugfixes
  - Fixes for aflpp custom mutator and standalone tool
  - Minor edits to afl-persistent-config
  - Prevent temporary files being left behind on aborted afl-whatsup
  - More CPU benchmarks added to benchmark/</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1718020800">- updated to 4.21c
  * afl-fuzz
  - fixed a regression in afl-fuzz that resulted in a 5-10% performace loss
    do a switch from gettimeofday() to clock_gettime() which should be rather
    three times faster. The reason for this is unknown.
  - new queue selection algorithm based on 2 core years of queue data
    analysis. gives a noticable improvement on coverage although the results
    seem counterintuitive :-)
  - added AFL_DISABLE_REDUNDANT for huge queues
  - added `AFL_NO_SYNC` environment variable that does what you think it does
  - fix AFL_PERSISTENT_RECORD
  - run custom_post_process after standard trimming
  - prevent filenames in the queue that have spaces
  - minor fix for FAST schedules
  - more frequent stats update when syncing (todo: check performance impact)
  - now timing of calibration, trimming and syncing is measured seperately,
    thanks to @eqv!
  - -V timing is now accurately the fuzz time (without syncing), before
    long calibration times and syncing could result in now fuzzing being
    made when the time was already run out until then, thanks to @eqv!
  - fix -n uninstrumented mode when ending fuzzing
  - enhanced the ASAN configuration
  - make afl-fuzz use less memory with cmplog and fix a memleak
  * afl-cc:
  - re-enable i386 support that was accidently disabled
  - fixes for LTO and outdated afl-gcc mode for i386
  - fix COMPCOV split compare for old LLVMs
  - disable xml/curl/g_ string transform functions because we do not check
    for null pointers ... TODO
  - ensure shared memory variables are visible in weird build setups
  - compatability to new LLVM 19 changes
  * afl-cmin
  - work with input files that have a space
  * afl-showmap
  - fix memory leak on shmem testcase usage (thanks to @ndrewh)
  - minor fix to collect coverage -C (thanks to @bet4it)
  * Fixed a shmem mmap bug (that rarely came up on MacOS)
  * libtokencap: script generate_libtoken_dict.sh added by @a-shvedov</changelog>
</package>
<package pkgid="1e176a1b89175e33d87908162cedef231d51fce5116b5ea6d493deadffd92527" name="afl" arch="x86_64">
  <version epoch="0" ver="4.21c" rel="bp156.2.3.1"/>
  <changelog author="Peace Peters &lt;peacepeters.pp@gmail.com&gt;" date="1626350400">- s390x added to the compiler files</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1626696000">- updated to 3.14c
  - afl-fuzz:
  - fix -F when a '/' was part of the parameter
  - fixed a crash for cmplog for very slow inputs
  - fix for AFLfast schedule counting
  - removed implied -D determinstic from -M main
  - if the target becomes unavailable check out out/default/error.txt
    for an indicator why
  - AFL_CAL_FAST was a dead env, now does the same as AFL_FAST_CAL
  - reverse read the queue on resumes (more effective)
  - fix custom mutator trimming
  - afl-cc:
  - Update to COMPCOV/laf-intel that speeds up the instrumentation
    process a lot - thanks to Michael Rodler/f0rki for the PR!
  - Fix for failures for some sized string instrumentations
  - Fix to instrument global namespace functions in c++
  - Fix for llvm 13
  - support partial linking
  - do honor AFL_LLVM_{ALLOW/DENY}LIST for LTO autodictionary and DICT2FILE
  - We do support llvm versions from 3.8 to 5.0 again
  - frida_mode:
  - several fixes for cmplog
  - remove need for AFL_FRIDA_PERSISTENT_RETADDR_OFFSET
  - less coverage collision
  - feature parity of aarch64 with intel now (persistent, cmplog,
    in-memory testcases, asan)
  - afl-cmin and afl-showmap -i do now descend into subdirectories
    (like afl-fuzz does) - note that afl-cmin.bash does not!
  - afl_analyze:
  - fix timeout handling
  - add forkserver support for better performance
  - ensure afl-compiler-rt is built for gcc_module
  - always build aflpp_driver for libfuzzer harnesses
  - added `AFL_NO_FORKSRV` env variable support to
    afl-cmin, afl-tmin, and afl-showmap, by @jhertz
  - removed outdated documents, improved existing documentation</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1632657600">- enable gcc-plugin on factory
- build with 32bit plugins on x86_64</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1643630400">- updated to 4.00c
  - complete documentation restructuring, made possible by Google Season
    of Docs :) thank you Jana!
  - we renamed several UI and fuzzer_stat entries to be more precise,
    e.g. "unique crashes" -&gt; "saved crashes", "total paths" -&gt;
    "corpus count", "current path" -&gt; "current item".
    This might need changing custom scripting!
  - Nyx mode (full system emulation with snapshot capability) has been
    added - thanks to @schumilo and @eqv!
  - unicorn_mode:
  - Moved to unicorn2! by Ziqiao Kong (@lazymio)
  - Faster, more accurate emulation (newer QEMU base), risc-v support
  - removed indirections in rust callbacks
  - new binary-only fuzzing mode: coresight_mode for aarch64 CPUs :)
    thanks to RICSecLab submitting!
  - if instrumented libaries are dlopen()'ed after the forkserver you
    will now see a crash. Before you would have colliding coverage.
    We changed this to force fixing a broken setup rather then allowing
    ineffective fuzzing.
  - See docs/best_practices.md how to fix such setups.
  - afl-fuzz:
  - cmplog binaries will need to be recompiled for this version
    (it is better!)
  - fix a regression introduced in 3.10 that resulted in less
    coverage being detected. thanks to Collin May for reporting!
  - ensure all spawned targets are killed on exit
  - added AFL_IGNORE_PROBLEMS, plus checks to identify and abort on
    incorrect LTO usage setups and enhanced the READMEs for better
    information on how to deal with instrumenting libraries
  - fix -n dumb mode (nobody should use this mode though)
  - fix stability issue with LTO and cmplog
  - better banner
  - more effective cmplog mode
  - more often update the UI when in input2stage mode
  - qemu_mode/unicorn_mode: fixed OOB write when using libcompcov,
    thanks to kotee4ko for reporting!
  - frida_mode:
  - better performance, bug fixes
  - David Carlier added Android support :)
  - afl-showmap, afl-tmin and afl-analyze:
  - honor persistent mode for more speed. thanks to dloffre-snl
    for reporting!
  - fix bug where targets are not killed on timeouts
  - moved hidden afl-showmap -A option to -H to be used for
    coresight_mode
  - Prevent accidentaly killing non-afl/fuzz services when aborting
    afl-showmap and other tools.
  - afl-cc:
  - detect overflow reads on initial input buffer for asan
  - new cmplog mode (incompatible with older afl++ versions)
  - support llvm IR select instrumentation for default PCGUARD and LTO
  - fix for shared linking on MacOS
  - better selective instrumentation AFL_LLVM_{ALLOW|DENY}LIST
    on filename matching (requires llvm 11 or newer)
  - fixed a potential crash in targets for LAF string handling
  - fixed a bad assert in LAF split switches
  - added AFL_USE_TSAN thread sanitizer support
  - llvm and LTO mode modified to work with new llvm 14-dev (again.)
  - fix for AFL_REAL_LD
  - more -z defs filtering
  - make -v without options work
  - added the very good grammar mutator "GramaTron" to the
    custom_mutators
  - added optimin, a faster and better corpus minimizer by
    Adrian Herrera. Thank you!
  - added afl-persistent-config script to set perform permanent system
    configuration settings for fuzzing, for Linux and Macos.
    thanks to jhertz!
  - added xml, curl &amp; exotic string functions to llvm dictionary feature
  - fix AFL_PRELOAD issues on MacOS
  - removed utils/afl_frida because frida_mode/ is now so much better
  - added uninstall target to makefile (todo: update new readme!)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1645617600">- Fix build with armv7l on Leap: we have afl-llvm-rt-lto{,-32}.o.
- Fix build with ppc64le: we don't seem to have the 32-bit object
  files available there and there is also no gcc-32bit.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1654344000">- Add llvm14-fix-build.patch: fix build with LLVM 14.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1656417600">- updated to 4.01c
  - fixed */build_...sh scripts to work outside of git
  - new custom_mutator: libafl with token fuzzing :)
  - afl-fuzz:
  - when you just want to compile once and set CMPLOG, then just
    set -c 0 to tell afl-fuzz that the fuzzing binary is also for
    CMPLOG.
  - new commandline options -g/G to set min/max length of generated
    fuzz inputs
  - you can set the time for syncing to other fuzzer now with
    AFL_SYNC_TIME
  - reintroduced AFL_PERSISTENT and AFL_DEFER_FORKSRV to allow
    persistent mode and manual forkserver support if these are not
    in the target binary (e.g. are in a shared library)
  - add AFL_EARLY_FORKSERVER to install the forkserver as earliest as
    possible in the target (for afl-gcc-fast/afl-clang-fast/
    afl-clang-lto)
  - "saved timeouts" was wrong information, timeouts are still thrown
    away by default even if they have new coverage (hangs are always
    kept), unless AFL_KEEP_TIMEOUTS are set
  - AFL never implemented auto token inserts (but user token inserts,
    user token overwrite and auto token overwrite), added now!
  - fixed a mutation type in havoc mode
  - Mopt fix to always select the correct algorithm
  - fix effector map calculation (deterministic mode)
  - fix custom mutator post_process functionality
  - document and auto-activate pizza mode on condition
  - afl-cc:
  - due a bug in lld of llvm 15 LTO instrumentation wont work atm :-(
  - converted all passed to use the new llvm pass manager for llvm 11+
  - AFL++ PCGUARD mode is not available for 10.0.1 anymore (11+ only)
  - trying to stay on top on all these #$&amp;§!! changes in llvm 15 ...
  - frida_mode:
  - update to new frida release, handles now c++ throw/catch
  - unicorn_mode:
  - update unicorn engine, fix C example
  - utils:
  - removed optimin because it looses coverage due to a bug and is
    unmaintained :-(
- removed upstream llvm14-fix-build.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1660996800">- updated to 4.02c
  - afl-cc:
  - important fix for the default pcguard mode when LLVM IR vector
    selects are produced, thanks to @juppytt for reporting!
  - gcc_plugin:
  - Adacore submitted CMPLOG support to the gcc_plugin! :-)
  - llvm_mode:
  - laf cmp splitting fixed for more comparison types
  - frida_mode:
  - now works on Android!
  - afl-fuzz:
  - change post_process hook to allow returning NULL and 0 length to
    tell afl-fuzz to skip this mutated input</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1663675200">- updated to 4.03c
  - Building now gives a build summary what succeeded and what not
  - afl-fuzz:
  - added AFL_NO_STARTUP_CALIBRATION to start fuzzing at once instead
    of calibrating all initial seeds first. Good for large queues
    and long execution times, especially in CIs.
  - default calibration cycles set to 7 from 8, and only add 5 cycles
    to variables queue items instead of 12.
  - afl-cc:
  - fixed off-by-one bug in our pcguard implemenation, thanks for
    @tokatoka for reporting
  - fix for llvm 15 and reenabling LTO, thanks to nikic for the PR!
  - better handling of -fsanitize=..,...,.. lists
  - support added for LLVMFuzzerRunDriver()
  - fix gcc_mode cmplog
  - obtain the map size of a target with setting AFL_DUMP_MAP_SIZE=1
    note that this will exit the target before main()
  - qemu_mode:
  - added AFL_QEMU_TRACK_UNSTABLE to log the addresses of unstable
    edges (together with AFL_DEBUG=1 afl-fuzz). thanks to
    worksbutnottested!
  - afl-analyze broke at some point, fix by CodeLogicError, thank you!
  - afl-cmin/afl-cmin.bash now have an -A option to allow also crashing
    and timeout inputs
  - unicorn_mode:
  - updated upstream unicorn version
  - fixed builds for aarch64
  - build now uses all available cores</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1666353600">- updated to 4.04c
  - fix gramatron and grammar_mutator build scripts
  - enhancements to the afl-persistent-config and afl-system-config
  - scripts
  - afl-fuzz:
  - force writing all stats on exit
  - afl-cc:
  - make gcc_mode (afl-gcc-fast) work with gcc down to version 3.6
  - qemu_mode:
  - fixed 10x speed degredation in v4.03c
  - added qemu_mode/fastexit helper library
  - unicorn_mode:
  - Enabled tricore arch (by @jma-qb)
  - Updated Capstone version in Rust bindings
  - llvm-mode:
  - AFL runtime will always pass inputs via shared memory, when possible,
    ignoring the command line.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1666440000">- Update file list for riscv64</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1672920000">- updated to 4.05c
  - afl-fuzz:
  - added afl_custom_fuzz_send custom mutator feature. Now your can
    send fuzz data to the target as you need, e.g. via IPC.
  - cmplog mode now has a -l R option for random colorization, thanks
    to guyf2010 for the PR!
  - queue statistics are written every 30 minutes to
    out/NAME/queue_data if compiled with INTROSPECTION
  - new env: AFL_FORK_SERVER_KILL_SIGNAL
  - afl-showmap/afl-cmin
  - `-t none` now translates to `-t 120000` (120 seconds)
  - unicorn_mode updated
  - updated rust custom mutator dependencies and LibAFL custom mutator
  - several minor bugfixes</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1681300800">- Pin to llvm15 for the time being: code fails to build with
  llvm16.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1681732800">- updated to 4.06c
  - afl-fuzz:
  - ensure temporary file descriptor is closed when not used
  - added `AFL_NO_WARN_INSTABILITY`
  - added time_wo_finds to fuzzer_stats
  - fixed a crash in pizza (1st april easter egg) mode. Sorry for
    everyone who was affected!
  - allow pizza mode to be disabled when AFL_PIZZA_MODE is set to -1
  - option `-p mmopt` now also selects new queue items more often
  - fix bug in post_process custom mutator implementation
  - print name of custom mutator in UI
  - slight changes that improve fuzzer performance
  - afl-cc:
  - add CFI sanitizer variant to gcc targets
  - llvm 16 + 17 support (thanks to @devnexen!)
  - support llvm 15 native pcguard changes
  - support for LLVMFuzzerTestOneInput -1 return
  - LTO autoken and llvm_mode: added AFL_LLVM_DICT2FILE_NO_MAIN support
  - qemu_mode:
  - fix _RANGES envs to allow hyphens in the filenames
  - basic riscv support
  - frida_mode:
  - added `AFL_FRIDA_STATS_INTERVAL`
  - fix issue on MacOS
  - unicorn_mode:
  - updated and minor issues fixed
  - nyx_mode support for all tools
  - better sanitizer default options support for all tools
  - new custom module: autotoken, a grammar free fuzzer for text inputs
  - fixed custom mutator C examples
  - more minor fixes and cross-platform support</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1686571200">- updated to 4.07c
  - afl-fuzz:
  - reverse reading the seeds only on restarts (increases performance)
  - new env `AFL_POST_PROCESS_KEEP_ORIGINAL` to keep the orignal
    data before post process on finds (for atnwalk custom mutator)
  - new env `AFL_IGNORE_PROBLEMS_COVERAGE` to ignore coverage from
    loaded libs after forkserver initialization (required by Mozilla)
  - afl-cc:
  - added @responsefile support
  - new env `AFL_LLVM_LTO_SKIPINIT` to support the AFL++ based WASM
    (https://github.com/fgsect/WAFL) project
  - error and print help if afl-clan-lto is used with lto=thin
  - rewrote our PCGUARD pass to be compatible with LLVM 15+ shenanigans,
    requires LLVM 13+ now instead of 10.0.1+
  - fallback to native LLVM PCGUARD if our PCGUARD is unavailable
  - fixed a crash in GCC CMPLOG
  - afl-showmap:
  - added custom mutator post_process and send support
  - add `-I filelist` option, an alternative to `-i in_dir`
  - afl-cmin + afl-cmin.bash:
  - `-T threads` parallel task support, can be a huge speedup!
  - qemu_mode:
  - Persistent mode + QASAN support for ppc32 targets by @worksbutnottested
  - a new grammar custom mutator atnwalk was submitted by @voidptr127 !
  - two new custom mutators are now available:
  - TritonDSE in custom_mutators/aflpp_tritondse
  - SymQEMU in custom_mutators/symqemu
- removed ppc64le condition (failed parsing), we have no 32bit ppc64le</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1691755200">- updated to 4.08c
  - afl-fuzz:
  - new mutation engine: mutations that favor discovery more paths are
    prefered until no new finds for 10 minutes then switching to mutations
    that favor triggering crashes. Modes and switch time can be configured
    with `-P`. Also input mode for the target can be defined with `-a` to
    be `text` or `binary` (defaults to `generic`)
  - new custom mutator that has the new afl++ engine (so it can easily
    incorporated into new custom mutators), and also comes with a standalone
    command line tool! See custom_mutators/aflpp/standalone/
  - display the state of the fuzzing run in the UI :-)
  - fix timeout setting if '+' is used or a session is restarted
  - -l X option to enable base64 transformation solving
  - allow to disable CMPLOG with '-c -' (e.g. afl.rs enforces '-c 0' on
    every instance which is counterproductive).
  - afl-cmin/afl-cmin.bash:
  - fixed a bug inherited from vanilla AFL where a coverage of
    map[123] = 11 would be the same as map[1123] = 1
  - warn on crashing inputs
  - adjust threads if less inputs than threads specified
  - afl-cc:
  - fixed an off-by-one instrumentation of iselect, hurting coverage a bit.
    Thanks to @amykweon for spotting and fixing!
  - @toka fixed a bug in laf-intel signed integer comparison splitting,
    thanks a lot!!
  - more LLVM compatability
  - frida_mode:
  - support for long form instrumentation on x86_x64 and arm64
  - renamed utils/get_symbol_addr.sh to utils/frida_get_symbol_addr.sh
  - qemu_mode:
  - added qemu_mode/utils/qemu_get_symbol_addr.sh</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1702814400">- updated to 4.09c
  - afl-fuzz:
  - fixed the new mutation implementation for two bugs
  - added `AFL_FINAL_SYNC` which forces a final fuzzer sync (also for `-F`)
    before terminating.
  - added AFL_IGNORE_SEED_PROBLEMS to skip over seeds that time out instead
    of exiting with an error message
  - allow -S/-M naming up to 50 characters (from 24)
  - CMPLOG:
  - added scale support (-l S)
  - skip unhelpful insertions (u8)
  - added --version and --help command line parameters
  - fixed endless loop when reading malformed dictionaries
  - new custom mutator function: post_run - thanks to yangzao!
  - afl-whatsup:
  - detect instanced that are starting up and show them as such as not dead
  - now also shows coverage reached
  - option -m shows only very relevant stats
  - option -n will not use color in the output
  - instrumentation:
  - fix for a few string compare transform functions for LAF
  - we are instrumenting __cxx internal functions again. this might break
    a few targets, please report if so.
  - frida_mode:
  - fixes support for large map offsets
  - support for AFL_FUZZER_LOOPCOUNT for afl.rs and LLVMFuzzerTestOneInput
  - afl-cmin/afl-cmin.bash: prevent unneeded file errors
  - added new tool afl-addseeds that adds new seeds to a running campaign
  - added benchmark/benchmark.py if you want to see how good your fuzzing
    speed is in comparison to other setups.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1707134400">- updated to 4.10c
  - afl-fuzz:
  - default power schedule is now EXPLORE, due a fix in fast schedules
    explore is slightly better now.
  - fixed minor issues in the mutation engine, thanks to @futhewo for
    reporting!
  - better deterministic fuzzing is now available, benchmarks have shown
    to improve fuzzing. Enable with -D. Thanks to @kdsjZh for the PR!
  - afl-cc:
  - large rewrite by @SonicStark which fixes a few corner cases, thanks!
  - LTO mode now requires llvm 12+
  - workaround for ASAN with gcc_plugin mode
  - instrumentation:
  - LLVM 18 support, thanks to @devnexen!
  - Injection (SQL, LDAP, XSS) fuzzing feature now available, see
    `instrumentation/README.injections.md` how to activate/use/expand.
  - compcov/LAF-intel:
  - floating point splitting bug fix by @hexcoder
  - due a bug in LLVM 17 integer splitting is disabled there!
  - when splitting floats was selected, integers were always split as well,
    fixed to require AFL_LLVM_LAF_SPLIT_COMPARES or _ALL as it should
  - dynamic instrumentation filtering for LLVM NATIVE, thanks @Mozilla!
    see utils/dynamic_covfilter/README.md
  - qemu_mode:
  - plugins are now activated by default and a new module is included that
    produces drcov compatible traces for lighthouse/lightkeeper/...
    thanks to @JRomainG to submitting!
  - updated Nyx checkout (fixes a bug) and some QOL
  - updated the custom grammar mutator
  - document afl-cmin does not work on macOS (but afl-cmin.bash does)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1713182400">- updated to 4.20c
  + A new forkserver communication model is now introduced. afl-fuzz is
    backward compatible to old compiled targets if they are not built
    for CMPLOG/Redqueen, but new compiled targets will not work with
    old afl-fuzz versions!
  + Recompile all targets that are instrumented for CMPLOG/Redqueen!
  - AFL++ now supports up to 4 billion coverage edges, up from 6 million.
  - New compile option: `make PERFORMANCE=1` - this will enable special
    CPU dependent optimizations that make everything more performant - but
    the binaries will likely won't work on different platforms. Also
    enables a faster hasher if the CPU requirements are met.
  - The persistent record feature (see config.h) was expanded to also
    support replay, thanks to @quarta-qti !
  - afl-fuzz:
  - the new deterministic fuzzing feature is now activated by default,
    deactivate with -z. Parameters -d and -D are ignored.
  - small improvements to CMPLOG/redqueen
  - workround for a bug with MOpt -L when used with -M - in the future
    we will either remove or rewrite MOpt.
  - fix for `-t xxx+` feature
  - -e extension option now saves the queue items, crashes, etc. with the
    extension too
  - fixes for trimmming, correct -V time and reading stats on resume by eqv
    thanks a lot!
  - afl-cc:
  - added collision free caller instrumentation to LTO mode. activate with
    `AFL_LLVM_LTO_CALLER=1`. You can set a max depth to go through single
    block functions with `AFL_LLVM_LTO_CALLER_DEPTH` (default 0)
  - fixes for COMPCOV/LAF and most other modules
  - fix for GCC_PLUGIN cmplog that broke on std::strings
  - afl-whatsup:
  - now also displays current average speed
  - small bugfixes
  - Fixes for aflpp custom mutator and standalone tool
  - Minor edits to afl-persistent-config
  - Prevent temporary files being left behind on aborted afl-whatsup
  - More CPU benchmarks added to benchmark/</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1718020800">- updated to 4.21c
  * afl-fuzz
  - fixed a regression in afl-fuzz that resulted in a 5-10% performace loss
    do a switch from gettimeofday() to clock_gettime() which should be rather
    three times faster. The reason for this is unknown.
  - new queue selection algorithm based on 2 core years of queue data
    analysis. gives a noticable improvement on coverage although the results
    seem counterintuitive :-)
  - added AFL_DISABLE_REDUNDANT for huge queues
  - added `AFL_NO_SYNC` environment variable that does what you think it does
  - fix AFL_PERSISTENT_RECORD
  - run custom_post_process after standard trimming
  - prevent filenames in the queue that have spaces
  - minor fix for FAST schedules
  - more frequent stats update when syncing (todo: check performance impact)
  - now timing of calibration, trimming and syncing is measured seperately,
    thanks to @eqv!
  - -V timing is now accurately the fuzz time (without syncing), before
    long calibration times and syncing could result in now fuzzing being
    made when the time was already run out until then, thanks to @eqv!
  - fix -n uninstrumented mode when ending fuzzing
  - enhanced the ASAN configuration
  - make afl-fuzz use less memory with cmplog and fix a memleak
  * afl-cc:
  - re-enable i386 support that was accidently disabled
  - fixes for LTO and outdated afl-gcc mode for i386
  - fix COMPCOV split compare for old LLVMs
  - disable xml/curl/g_ string transform functions because we do not check
    for null pointers ... TODO
  - ensure shared memory variables are visible in weird build setups
  - compatability to new LLVM 19 changes
  * afl-cmin
  - work with input files that have a space
  * afl-showmap
  - fix memory leak on shmem testcase usage (thanks to @ndrewh)
  - minor fix to collect coverage -C (thanks to @bet4it)
  * Fixed a shmem mmap bug (that rarely came up on MacOS)
  * libtokencap: script generate_libtoken_dict.sh added by @a-shvedov</changelog>
</package>
<package pkgid="f8905a5da6d5ea476fc3c39f5fdd299c940f3db074af1c2c54f1e1eb761f22cb" name="afterburn" arch="aarch64">
  <version epoch="0" ver="5.8.2" rel="bp156.2.3.1"/>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1616155200">- Set rust version to minimum required by upstream</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 5.0.0
  * Update minimum rust toolchain version 1.44
  * Switch from error-chain to anyhow
  * Remove cl-legacy feature
  * ibmcloud: don't ignore I/O error when parsing metadata
  * providers: fix clippy::unnecessary_wraps lint on 1.50
  * workflows: update pinned lint toolchain to 1.50.0
  * cli: stop wrapping command-line parse errors
  * github: release checklist cleanups
  * providers: add Azure Stack Hub</changelog>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1623412800">- Add dracut modules for afterburn</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
</package>
<package pkgid="b4340658d62c0daee056c886868d0d6c7e9db4f19be9351252ab3043e535c9bf" name="afterburn" arch="i586">
  <version epoch="0" ver="5.8.2" rel="bp156.2.3.1"/>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1616155200">- Set rust version to minimum required by upstream</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 5.0.0
  * Update minimum rust toolchain version 1.44
  * Switch from error-chain to anyhow
  * Remove cl-legacy feature
  * ibmcloud: don't ignore I/O error when parsing metadata
  * providers: fix clippy::unnecessary_wraps lint on 1.50
  * workflows: update pinned lint toolchain to 1.50.0
  * cli: stop wrapping command-line parse errors
  * github: release checklist cleanups
  * providers: add Azure Stack Hub</changelog>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1623412800">- Add dracut modules for afterburn</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
</package>
<package pkgid="6dc2f9b5b87197ba0c0800f36bdc785bf5b1576ee87da5ed6f09c61231925a81" name="afterburn" arch="ppc64le">
  <version epoch="0" ver="5.8.2" rel="bp156.2.3.1"/>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1616155200">- Set rust version to minimum required by upstream</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 5.0.0
  * Update minimum rust toolchain version 1.44
  * Switch from error-chain to anyhow
  * Remove cl-legacy feature
  * ibmcloud: don't ignore I/O error when parsing metadata
  * providers: fix clippy::unnecessary_wraps lint on 1.50
  * workflows: update pinned lint toolchain to 1.50.0
  * cli: stop wrapping command-line parse errors
  * github: release checklist cleanups
  * providers: add Azure Stack Hub</changelog>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1623412800">- Add dracut modules for afterburn</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
</package>
<package pkgid="8e1172b7c96c773adf05c54fb8b4869a8e377671045ad3e1efdce263f6b415ae" name="afterburn" arch="s390x">
  <version epoch="0" ver="5.8.2" rel="bp156.2.3.1"/>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1616155200">- Set rust version to minimum required by upstream</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 5.0.0
  * Update minimum rust toolchain version 1.44
  * Switch from error-chain to anyhow
  * Remove cl-legacy feature
  * ibmcloud: don't ignore I/O error when parsing metadata
  * providers: fix clippy::unnecessary_wraps lint on 1.50
  * workflows: update pinned lint toolchain to 1.50.0
  * cli: stop wrapping command-line parse errors
  * github: release checklist cleanups
  * providers: add Azure Stack Hub</changelog>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1623412800">- Add dracut modules for afterburn</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
</package>
<package pkgid="7f6232f359011e8b41b893802a78fa69c5de28c068f9ab359f40b875a046cbe7" name="afterburn" arch="src">
  <version epoch="0" ver="5.8.2" rel="bp156.2.3.1"/>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1616155200">- Set rust version to minimum required by upstream</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 5.0.0
  * Update minimum rust toolchain version 1.44
  * Switch from error-chain to anyhow
  * Remove cl-legacy feature
  * ibmcloud: don't ignore I/O error when parsing metadata
  * providers: fix clippy::unnecessary_wraps lint on 1.50
  * workflows: update pinned lint toolchain to 1.50.0
  * cli: stop wrapping command-line parse errors
  * github: release checklist cleanups
  * providers: add Azure Stack Hub</changelog>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1623412800">- Add dracut modules for afterburn</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
</package>
<package pkgid="0589f07c9dd8b57d2c14c9b4352bd917d456ee31e280fb59e685adb2bd5d5cba" name="afterburn" arch="x86_64">
  <version epoch="0" ver="5.8.2" rel="bp156.2.3.1"/>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1616155200">- Set rust version to minimum required by upstream</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 5.0.0
  * Update minimum rust toolchain version 1.44
  * Switch from error-chain to anyhow
  * Remove cl-legacy feature
  * ibmcloud: don't ignore I/O error when parsing metadata
  * providers: fix clippy::unnecessary_wraps lint on 1.50
  * workflows: update pinned lint toolchain to 1.50.0
  * cli: stop wrapping command-line parse errors
  * github: release checklist cleanups
  * providers: add Azure Stack Hub</changelog>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1623412800">- Add dracut modules for afterburn</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
</package>
<package pkgid="611ff401b2031fb2de14e5e64482268f48bc7501e299e86e973679ac1c80e8ca" name="afterburn" arch="aarch64">
  <version epoch="0" ver="5.9.0.git21.a73f509" rel="bp156.2.8.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
    though not vulnerable as unused but lib had CVE-2025-5791
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1753358400">- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1758801600">- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one, fixes bsc#1250471
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙</changelog>
</package>
<package pkgid="9616498ac35292ae69a8efc15e7fcb3efae025534f2ffd89a147bfb69095de84" name="afterburn" arch="i586">
  <version epoch="0" ver="5.9.0.git21.a73f509" rel="bp156.2.8.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
    though not vulnerable as unused but lib had CVE-2025-5791
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1753358400">- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1758801600">- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one, fixes bsc#1250471
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙</changelog>
</package>
<package pkgid="c6c3b22985bbbad7d128258f865b9e9c7049e5b12babe55266d5e30be9539281" name="afterburn" arch="ppc64le">
  <version epoch="0" ver="5.9.0.git21.a73f509" rel="bp156.2.8.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
    though not vulnerable as unused but lib had CVE-2025-5791
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1753358400">- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1758801600">- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one, fixes bsc#1250471
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙</changelog>
</package>
<package pkgid="7bb76103b1146eee6ab10f44c907fe13fe6b85a9ee04505542ac3d735c7a3d3f" name="afterburn" arch="s390x">
  <version epoch="0" ver="5.9.0.git21.a73f509" rel="bp156.2.8.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
    though not vulnerable as unused but lib had CVE-2025-5791
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1753358400">- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1758801600">- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one, fixes bsc#1250471
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙</changelog>
</package>
<package pkgid="9b34105f76d7e74dc8ccbafa4c2ac366a61f960ab2fdb201ed526a35f4e2129d" name="afterburn" arch="src">
  <version epoch="0" ver="5.9.0.git21.a73f509" rel="bp156.2.8.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
    though not vulnerable as unused but lib had CVE-2025-5791
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1753358400">- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1758801600">- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one, fixes bsc#1250471
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙</changelog>
</package>
<package pkgid="49b6c3029c64be922be944f3b3df43a439fa3548fdf3571741a9a01ba81cb2f4" name="afterburn" arch="x86_64">
  <version epoch="0" ver="5.9.0.git21.a73f509" rel="bp156.2.8.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
    though not vulnerable as unused but lib had CVE-2025-5791
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1753358400">- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1758801600">- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one, fixes bsc#1250471
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙</changelog>
</package>
<package pkgid="3dc2559d6a0bbd2beb053b66eed02b8f993a297a1f36fa8afed40d53a64b5f0b" name="afterburn-dracut" arch="noarch">
  <version epoch="0" ver="5.8.2" rel="bp156.2.3.1"/>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1616155200">- Set rust version to minimum required by upstream</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 5.0.0
  * Update minimum rust toolchain version 1.44
  * Switch from error-chain to anyhow
  * Remove cl-legacy feature
  * ibmcloud: don't ignore I/O error when parsing metadata
  * providers: fix clippy::unnecessary_wraps lint on 1.50
  * workflows: update pinned lint toolchain to 1.50.0
  * cli: stop wrapping command-line parse errors
  * github: release checklist cleanups
  * providers: add Azure Stack Hub</changelog>
  <changelog author="Sayali Lunkad &lt;sayali.lunkad@suse.com&gt;" date="1623412800">- Add dracut modules for afterburn</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
</package>
<package pkgid="bd67f5be8816b56ec324111e28bb76f152c358c4961c699cd67cd76305296a37" name="afterburn-dracut" arch="noarch">
  <version epoch="0" ver="5.9.0.git21.a73f509" rel="bp156.2.8.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1653307200">- Update to version 5.3.0:
  * cargo: Afterburn release 5.3.0
  * build(deps): bump nix from 0.24.0 to 0.24.1
  * build(deps): bump anyhow from 1.0.56 to 1.0.57
  * build(deps): bump nix from 0.23.1 to 0.24.0
  * systemd: enable sshkeys on Power VS platform
  * network: Encode information for systemd-networkd-wait-online
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
  * build(deps): bump crossbeam-channel from 0.5.2 to 0.5.4
  * cargo: update to clap 3.1
  * cargo: enable clap wrap_help feature
  * cli: run clap tests
  * cli: avoid deprecated clap constructs
  * cargo: update to clap 3.0
  * cli: use clap mechanism to require exp subcommand
  * build(deps): bump pnet_datalink from 0.28.0 to 0.29.0
  * build(deps): bump pnet_base from 0.28.0 to 0.29.0
  * build(deps): bump slog-term from 2.8.1 to 2.9.0
  * cargo: declare MSRV in Cargo.toml
  * cargo: update to Rust 2021; bump MSRV to 1.56.0
  * workflows: update clippy to 1.59.0
  * copr: abort if specfile fetch fails
  * providers/aws: add AWS_IPV6 attribute
  * providers/aws: bump metadata version to 2021-01-03
  * kubevirt: Add KubeVirt platform support
  * *.service: add/update Documentation field
  * build(deps): bump regex from 1.5.4 to 1.5.5
    fixes RUSTSEC-2022-0013 AKA CVE-2022-24713
  * build(deps): bump reqwest from 0.11.9 to 0.11.10
  * github/release-checklist: Remove Windows binaries from vendored sources
  * build(deps): bump anyhow from 1.0.55 to 1.0.56
  * build(deps): bump mockito from 0.30.0 to 0.31.0
    fixes RUSTSEC-2020-0095
  * aws/mock_tests: explicitly drop mocks before resetting
  * aws/mock_tests: split out IMDS tests
  * aws/mock_tests: factor out map building
  * build(deps): bump anyhow from 1.0.54 to 1.0.55
  * workflows/rpm: reword workflow and job name
  * workflows/rpm: do full git clone
  * build(deps): bump anyhow from 1.0.53 to 1.0.54
  * workflows: add "RPM build" test
  * templates/release-checklist: add Fedora/RHCOS packaging instructions
  * lockfile: refresh
  * tests: explicitly scope conflicting mocks
  * Add COPR integration Makefile
  * build(deps): bump serde_json from 1.0.78 to 1.0.79
  * build(deps): bump crossbeam-utils from 0.8.5 to 0.8.7
  * build(deps): bump block-buffer from 0.10.0 to 0.10.2
  * build(deps): bump thread_local from 1.1.3 to 1.1.4
    fixes RUSTSEC-2022-0006
  * build(deps): bump slog-term from 2.8.0 to 2.8.1
  * build(deps): bump serde from 1.0.135 to 1.0.136
  * *: use `RemainAfterExit` on all oneshot services
  * build(deps): bump anyhow from 1.0.52 to 1.0.53
  * build(deps): bump serde_json from 1.0.75 to 1.0.78
  * build(deps): bump mailparse from 0.13.7 to 0.13.8
  * build(deps): bump serde from 1.0.134 to 1.0.135
  * ci: skip broken kdump.crash kola test Issue: https://github.com/coreos/fedora-coreos-tracker/issues/1075
  * build(deps): bump serde from 1.0.133 to 1.0.134
  * build(deps): bump serde_json from 1.0.74 to 1.0.75</changelog>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1722859200">- enable upstream tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
    though not vulnerable as unused but lib had CVE-2025-5791
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1753358400">- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1758801600">- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one, fixes bsc#1250471
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙</changelog>
</package>
<package pkgid="52fb5533de0d207339f310b074efdf56ddacaa04790b976932003840e740a84f" name="ansible-core" arch="noarch">
  <version epoch="0" ver="2.16.5" rel="bp156.2.3.1"/>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1682337600">- update to 2.14.5:
  https://github.com/ansible/ansible/blob/v2.14.5/changelogs/
  CHANGELOG-v2.14.rst
  * Bugfixes
  - ansible-doc - stop generating wrong module URLs for module
    see-alsos. The URLs for modules in ansible.builtin do now
    work, and URLs for modules outside ansible.builtin are no
    longer added (#80280).
  - ansible-galaxy - Improve retries for collection installs, to
    properly retry, and extend retry logic to common URL related
    connection errors (#80170 #80174)
  - ansible-galaxy - reduce API calls to servers by fetching
    signatures only for final candidates.
  - ansible-test - Add support for argcomplete version 3.
  - jinja2_native - fix intermittent 'could not find job'
    failures when a value of ansible_job_id from a result of an
    async task was inadvertently changed during execution; to
    prevent this a format of ansible_job_id was changed.
  - password lookup now correctly reads stored ident fields.
  - pep517 build backend - Use the documented import_module
    import from importlib.
  - roles - Fix templating public, allow_duplicates and
    rolespec_validate (#80304).
  - syntax check - Limit --syntax-check to ansible-playbook only,
    as that is the only CLI affected by this argument (#80506)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1682942400">- BuildRequire python3.9 to follow upstream (does not matter on
  Tumbleweed which is using 3.10 already...)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1683288000">- change python version on Leap15/SLES15 to python3.11 to use the
  new stack supported by SUSE</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1684065600">- modify %if-condition to allow building for python3.10 or
  python3.11 on SLES15</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1684152000">- major update to 2.15.0:
  https://github.com/ansible/ansible/blob/v2.15.0/changelogs/
  CHANGELOG-v2.15.rst</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1687348800">- update to 2.15.1:
  * Minor Changes
  - ansible-test - Allow float values for the --timeout option to
    the env command. This simplifies testing.
  - ansible-test - Refactored env command logic and timeout
    handling.
  - ansible-test - Use datetime.datetime.now with tz specified
    instead of datetime.datetime.utcnow.
  * Bugfixes
  - Properly disable jinja2_native in the template module when
    jinja2 override is used in the template (#80605)
  - ansible-galaxy - Fix variable type error when installing
    subdir collections (#80943)
  - ansible-test - Fix a traceback that occurs when attempting to
    test Ansible source using a different ansible-test. A clear
    error message is now given when this scenario occurs.
  - ansible-test - Fix handling of timeouts exceeding one day.
  - ansible-test - Fix various cases where the test timeout could
    expire without terminating the tests.
  - ansible-test local change detection - use git merge-base
    &lt;branch&gt; HEAD instead of git merge-base --fork-point &lt;branch&gt;
    (#79734).
  - deb822_repository - use http-agent for receiving content
    (#80809).
  - dnf5 - Update dnf5 module to handle API change for setting
    the download directory (#80887)
  - man page build - Remove the dependency on the docs directory
    for building man pages.
  - pep517 build backend - Copy symlinks when copying the source
    tree. This avoids tracebacks in various scenarios, such as
    when a venv is present in the source tree.
  - uri - fix search for JSON type to include complex strings
    containing '+'</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1689681600">- update to 2.15.2:
  * Minor Changes
  - Utilize gpg check provided internally by the transaction.run
    method as oppose to calling it manually.
  - ansible-test - Add Fedora 38 remote.
  - ansible-test - Use a context manager to perform cleanup at
    exit instead of using the built-in atexit module.
  - dnf5 - enable environment groups installation testing in CI
    as its support was added.
  - dnf5 - enable now implemented cacheonly functionality
  * Bugfixes
  - From issue #80880, when notifying a handler from another
    handler, handler notifications must be registered immediately
    as the flush_handler call is not recursive.
  - ansible-galaxy - Fix issue installing collections containing
    directories with more than 100 characters on python versions
    before 3.10.6
  - paramiko_ssh, psrp, and ssh connection plugins - ensure that
    all values for options that should be strings are actually
    converted to strings (#81029).
  - templating - In the template action and lookup, use local
    jinja2 environment overlay overrides instead of mutating the
    templars environment
  * Known Issues
  - ansible-test - The Fedora 37 remote is known to occasionally
    hang during boot. It is no longer routinely tested as a
    result. If possible, use the Fedora 38 remote instead.</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1694001600">- as example files were split out into a separate package
  ansible-documentation upstream, this package now Recommends that
  package
- update to 2.15.3:
  * Minor Changes
  - Removed exclude and recursive-exclude commands for generated
    files from the MANIFEST.in file. These excludes were
    unnecessary since releases are expected to be built with a
    clean worktree.
  - Removed exclude commands for sanity test files from the
    MANIFEST.in file. These tests were previously excluded
    because they did not pass when run from an sdist. However,
    sanity tests are not expected to pass from an sdist, so
    excluding some (but not all) of the failing tests makes
    little sense.
  - Removed redundant include commands from the MANIFEST.in file.
    These includes either duplicated default behavior or another
    command.
  - The ansible-core sdist no longer contains pre-generated man
    pages. Instead, a packaging/cli-doc/build.py script is
    included in the sdist. This script can generate man pages and
    standalone RST documentation for ansible-core CLI programs.
  - The docs and examples directories are no longer included in
    the ansible-core sdist. These directories have been moved to
    the https://github.com/ansible/ansible-documentation
    repository.
  - Use include where recursive-include is unnecessary in the
    MANIFEST.in file.
  - ansible-test - Update the logic used to detect when
    ansible-test is running from source.
  - ansible-test - Updated the CloudStack test container to
    version 1.6.1.
  * Bugfixes
  - Exclude internal options from man pages and docs.
  - Fix ansible-config init man page option indentation.
  - The ansible-config init command now has a documentation
    description.
  - The ansible-galaxy collection download command now has a
    documentation description.
  - The ansible-galaxy collection install command documentation
    is now visible (previously hidden by a decorator).
  - The ansible-galaxy collection verify command now has a
    documentation description.
  - The ansible-galaxy role install command documentation is now
    visible (previously hidden by a decorator).
  - The ansible-inventory command command now has a documentation
    description (previously used as the epilog).
  - Update module_utils.urls unit test to work with cryptography
    &gt;= 41.0.0.
  - When generating man pages, use func to find the command
    function instead of looking it up by the command name.
  - ansible-galaxy now considers all collection paths when
    identifying which collection requirements are already
    installed. Use the COLLECTIONS_PATHS and
    COLLECTIONS_SCAN_SYS_PATHS config options to modify these.
    Previously only the install path was considered when
    resolving the candidates. The install path will remain the
    only one potentially modified. (#79767, #81163)
  - ansible-test - Fix several possible tracebacks when using the
  - e option with sanity tests.
  - ansible-test - Pre-build a PyYAML wheel before installing
    requirements to avoid a potential Cython build failure.
  - ansible-test - Remove redundant warning about missing
    programs before attempting to execute them.
  - core will now also look at the connection plugin to force
    'local' interpreter for networking path compatibility as just
    ansible_network_os could be misleading.
  - man page build - Sub commands of ansible-galaxy role and
    ansible-galaxy collection are now documented.
  - password_hash - fix salt format for crypt (only used if
    passlib is not installed) for the bcrypt algorithm.
  - urls.py - fixed cert_file and key_file parameters when
    running on Python 3.12 - #80490</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1694520000">- update to 2.15.4:
  * Deprecated Features
  - vault and unfault filters - the undocumented vaultid
    parameter is deprecated and will be removed in ansible-core
    2.20. Use vault_id instead.
  * Bugfixes
  - PowerShell - Remove some code which is no longer valid for
    dotnet 5+
  - Prompting - add a short sleep between polling for user input
    to reduce CPU consumption (#81516).
  - ansible-galaxy - Enabled the data tarfile filter during role
    installation for Python versions that support it. A probing
    mechanism is used to avoid Python versions with a broken
    implementation.
  - ansible-test - Always use ansible-test managed entry points
    for ansible-core CLI tools when not running from source. This
    fixes issues where CLI entry points created during install
    are not compatible with ansible-test.
  - first found lookup has been updated to use the normalized
    argument parsing (pythonic) matching the documented examples.
  - handlers - the listen keyword can affect only one handler
    with the same name, the last one defined as it is a case with
    the notify keyword (#81013)
  - include_role - expose variables from parent roles to role's
    handlers (#80459)
  - tarfile - handle data filter deprecation warning message for
    extract and extractall (#80832).
  - vault and unvault filters now properly take vault_id
    parameter.</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1696939200">- update to 2.15.5:
  * Minor Changes
  - ansible-galaxy dependency resolution messages have changed
    the unexplained 'virtual' collection for the specific type
    ('scm', 'dir', etc) that is more user friendly
  * Security Fixes
  - ansible-galaxy - Prevent roles from using symlinks to
    overwrite files outside of the installation directory
    (CVE-2023-5115)
  * Bugfixes
  - Allow for searching handler subdir for included task via
    include_role (#81722)
  - PluginLoader - fix Jinja plugin performance issues (#79652)
  - ansible.module_utils.service - ensure binary data
    transmission in daemonize()
  - ansible.module_utils.service - fix inter-process
    communication in daemonize()
  - ansible-galaxy - started allowing the use of pre-releases for
    collections that do not have any stable versions published.
    (#81606)
  - ansible-galaxy - started allowing the use of pre-releases for
    dependencies on any level of the dependency tree that
    specifically demand exact pre-release versions of collections
    and not version ranges. (#81606)
  - ansible-galaxy error on dependency resolution will not error
    itself due to 'virtual' collections not having a
    name/namespace.
  - ansible-galaxy info - fix reporting no role found when
    lookup_role_by_name returns None.
  - role deduplication - don't deduplicate before a role has had
    a task run for that particular host (#81486).
  - uri/urls - Add compat function to handle the ability to parse
    the filename from a Content-Disposition header (#81806)
  - winrm - Better handle send input failures when communicating
    with hosts under load</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1699358400">- update to 2.15.6:
  * Minor Changes
  - ansible-test - Windows 2012 and 2012-R2 instances are now
    requested from Azure instead of AWS.
  * Bugfixes
  - Fix run_once being incorrectly interpreted on handlers
    (#81666)
  - Plugin loader does not dedupe nor cache filter/test plugins
    by file basename, but full path name.
  - Properly template tags in parent blocks (#81053)
  - Restoring the ability of filters/tests can have same file
    base name but different tests/filters defined inside.
  - import_role reverts to previous behavior of exporting vars at
    compile time.
  - ansible-galaxy - Provide a better error message when using a
    requirements file with an invalid format - #81901
  - ansible-inventory - index available_hosts for major
    performance boost when dumping large inventories
  - ansible-test - Fix parsing of cgroup entries which contain a
    : in the path (#81977).</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1701777600">- update to 2.15.7:
  This release includes a fix for CVE-2023-5764, where internal
  templating actions could result in unsafe data losing its unsafe
  designation.
  * Breaking Changes / Porting Guide
  - assert - Nested templating may result in an inability for the
    conditional to be evaluated. See the porting guide for more
    information.
  * Security Fixes
  - templating - Address issues where internal templating can
    cause unsafe variables to lose their unsafe designation
    (CVE-2023-5764)
  * Bugfixes
  - ansible-pull now will expand relative paths for the
  - d|--directory option is now expanded before use.
  - flush_handlers - properly handle a handler failure in a
    nested block when force_handlers is set
    (http://github.com/ansible/ansible/issues/81532)
  - module no_log will no longer affect top level booleans, for
    example no_log_module_parameter='a' will no longer hide
    changed=False as a 'no log value' (matches 'a').
  - modules/user.py - Add check for valid directory when creating
    new user homedir (allows /dev/null as skeleton) (#75063)
  - role params now have higher precedence than host facts again,
    matching documentation, this had unintentionally changed in
    2.15.
  - wait_for should not handle 'non mmapable files' again.</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1702382400">- update to 2.15.8:
  * Minor Changes
  - ansible-test - Add FreeBSD 13.2 remote.
  - ansible-test - Removed freebsd/13.1 remote.
  * Bugfixes
  - unsafe data - Address an incompatibility when iterating or
    getting a single index from AnsibleUnsafeBytes
  - unsafe data - Address an incompatibility with
    AnsibleUnsafeText and AnsibleUnsafeBytes when pickling with
    protocol=0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1705838400">- update to 2.16.0:
  https://github.com/ansible/ansible/blob/v2.16.0/changelogs/CHANGELOG-v2.16.rst
  * Bugfixes and Minor changes omitted for brevity, see full
    changelog
  * Breaking Changes / Porting Guide
  - Any plugin using the config system and the cli entry to use
    the timeout from the command line, will see the value change
    if the use had configured it in any of the lower precedence
    methods. If relying on this behaviour to consume the
    global/generic timeout from the DEFAULT_TIMEOUT constant,
    please consult the documentation on plugin configuration to
    add the overlaping entries.
  - ansible-test - Test plugins that rely on containers no longer
    support reusing running containers. The previous behavior was
    an undocumented, untested feature.
  - service module will not permanently configure variables/flags
    for openbsd when doing enable/disable operation anymore, this
    module was never meant to do this type of work, just to
    manage the service state itself. A rcctl_config or similar
    module should be created and used instead.
  * Deprecated Features
  - Deprecated ini config option collections_paths, use the
    singular form collections_path instead
  - Deprecated the env var ANSIBLE_COLLECTIONS_PATHS, use the
    singular form ANSIBLE_COLLECTIONS_PATH instead
  - Old style vars plugins which use the entrypoints
    get_host_vars or get_group_vars are deprecated. The plugin
    should be updated to inherit from BaseVarsPlugin and define a
    get_vars method as the entrypoint.
  - Support for Windows Server 2012 and 2012 R2 has been removed
    as the support end of life from Microsoft is October 10th
    2023. These versions of Windows will no longer be tested in
    this Ansible release and it cannot be guaranteed that they
    will continue to work going forward.
  - STRING_CONVERSION_ACTION config option is deprecated as it is
    no longer used in the Ansible Core code base.
  - the 'smart' option for setting a connection plugin is being
    removed as it's main purpose (choosing between ssh and
    paramiko) is now irrelevant.
  - vault and unfault filters - the undocumented vaultid
    parameter is deprecated and will be removed in ansible-core
    2.20. Use vault_id instead.
  - yum_repository - deprecated parameter 'keepcache' (#78693).
  * Removed Features (previously deprecated)
  - ActionBase - remove deprecated _remote_checksum method
  - PlayIterator - remove deprecated cache_block_tasks and
    get_original_task methods
  - Remove deprecated FileLock class
  - Removed Python 3.9 as a supported version on the controller.
    Python 3.10 or newer is required.
  - Removed include which has been deprecated in Ansible 2.12.
    Use include_tasks or import_tasks instead.
  - Templar - remove deprecated shared_loader_obj parameter of
    __init__
  - fetch_url - remove auto disabling decompress when gzip is not
    available
  - get_action_args_with_defaults - remove deprecated
    redirected_names method parameter
  - ansible-test - Removed support for the remote Windows targets
    2012 and 2012-R2
  - inventory_cache - remove deprecated
    default.fact_caching_prefix ini configuration option, use
    defaults.fact_caching_prefix instead.
  - module_utils/basic.py - Removed Python 3.5 as a supported
    remote version. Python 2.7 or Python 3.6+ is now required.
  - stat - removed unused get_md5 parameter.
  * Security Fixes
  - ansible-galaxy - Prevent roles from using symlinks to
    overwrite files outside of the installation directory
    (CVE-2023-5115)
  * Known issues
  - ansible-galaxy - dies in the middle of installing a role when
    that role contains Java inner classes (files with $ in the
    file name). This is by design, to exclude temporary or backup
    files. (#81553).
  - ansible-test - The pep8 sanity test is unable to detect
    f-string spacing issues (E201, E202) on Python 3.10 and 3.11.
    They are correctly detected under Python 3.12. See
    (PyCQA/pycodestyle#1190).</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1705838401">- update to 2.16.1:
  https://github.com/ansible/ansible/blob/v2.16.1/changelogs/CHANGELOG-v2.16.rst
  * Breaking Changes / Porting Guide
  - assert - Nested templating may result in an inability for the
    conditional to be evaluated. See the porting guide for more
    information.
  * Security Fixes
  - templating - Address issues where internal templating can
    cause unsafe variables to lose their unsafe designation
    (CVE-2023-5764)
  * Bugfixes
  - Fix issue where an include_tasks handler in a role was not
    able to locate a file in tasks/ when tasks_from was used as a
    role entry point and main.yml was not present (#82241)
  - Plugin loader does not dedupe nor cache filter/test plugins
    by file basename, but full path name.
  - Restoring the ability of filters/tests can have same file
    base name but different tests/filters defined inside.
  - ansible-pull now will expand relative paths for the
  - d|--directory option is now expanded before use.
  - ansible-pull will now correctly handle become and connection
    password file options for ansible-playbook.
  - flush_handlers - properly handle a handler failure in a
    nested block when force_handlers is set
    (http://github.com/ansible/ansible/issues/81532)
  - module no_log will no longer affect top level booleans, for
    example no_log_module_parameter='a' will no longer hide
    changed=False as a 'no log value' (matches 'a').
  - role params now have higher precedence than host facts again,
    matching documentation, this had unintentionally changed in
    2.15.
  - wait_for should not handle 'non mmapable files' again.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1705838402">- update to 2.16.2:
  https://github.com/ansible/ansible/blob/v2.16.2/changelogs/CHANGELOG-v2.16.rst
  * Bugfixes
  - unsafe data - Address an incompatibility when iterating or
    getting a single index from AnsibleUnsafeBytes
  - unsafe data - Address an incompatibility with
    AnsibleUnsafeText and AnsibleUnsafeBytes when pickling with
    protocol=0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1706616000">- update to 2.16.3:
  https://github.com/ansible/ansible/blob/v2.16.3/changelogs/CHANGELOG-v2.16.rst
  * Security Fixes
  - ANSIBLE_NO_LOG - Address issue where ANSIBLE_NO_LOG was
    ignored (CVE-2024-0690)
  * Bugfixes
  - Run all handlers with the same listen topic, even when
    notified from another handler (#82363).
  - ansible-galaxy role import - fix using the role_name in a
    standalone role's galaxy_info metadata by disabling automatic
    removal of the ansible-role- prefix. This matches the
    behavior of the Galaxy UI which also no longer implicitly
    removes the ansible-role- prefix. Use the --role-name option
    or add a role_name to the galaxy_info dictionary in the
    role's meta/main.yml to use an alternate role name.
  - ansible-test sanity --test runtime-metadata - add
    action_plugin as a valid field for modules in the schema
    (#82562).
  - ansible-config init will now dedupe ini entries from plugins.
  - ansible-galaxy role import - exit with 1 when the import
    fails (#82175).
  - ansible-galaxy role install - normalize tarfile paths and
    symlinks using ansible.utils.path.unfrackpath and consider
    them valid as long as the realpath is in the tarfile's role
    directory (#81965).
  - delegate_to when set to an empty or undefined variable will
    now give a proper error.
  - dwim functions for lookups should be better at detectging
    role context even in abscense of tasks/main.
  - roles, code cleanup and performance optimization of
    dependencies, now cached, and public setting is now
    determined once, at role instantiation.
  - roles, the static property is now correctly set, this will
    fix issues with public and DEFAULT_PRIVATE_ROLE_VARS controls
    on exporting vars.
  - unsafe data - Enable directly using AnsibleUnsafeText with
    Python pathlib (#82414)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590400">- update to 2.16.4:
  https://github.com/ansible/ansible/blob/v2.16.4/changelogs/CHANGELOG-v2.16.rst
  * Bugfixes
  - Fix loading vars_plugins in roles (#82239).
  - expect - fix argument spec error using timeout=null (#80982).
  - include_vars - fix calculating depth relative to the root and
    ensure all files are included (#80987).
  - templating - ensure syntax errors originating from a template
    being compiled into Python code object result in a failure
    (#82606)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1711540800">- update to 2.16.5:
  https://github.com/ansible/ansible/blob/v2.16.5/changelogs/CHANGELOG-v2.16.rst
  * Minor Changes
  - ansible-test - Add a work-around for permission denied errors
    when using pytest &gt;= 8 on multi-user systems with an
    installed version of ansible-test.
  * Bugfixes
  - Fix an issue when setting a plugin name from an unsafe source
    resulted in ValueError: unmarshallable object (#82708)
  - Harden python templates for respawn and ansiballz around str
    literal quoting
  - ansible-test - The libexpat package is automatically upgraded
    during remote bootstrapping to maintain compatibility with
    newer Python packages.
  - template - Fix error when templating an unsafe string which
    corresponds to an invalid type in Python (#82600).
  - winrm - does not hang when attempting to get process output
    when stdin write failed</changelog>
  <changelog author="Martin Wilck &lt;martin.wilck@suse.com&gt;" date="1738929600">- Add support for recent new SUSE and openSUSE distribution flavors
  * add 0001-Add-Alp-Dolomite-to-Suse-family-list-82496.patch
    (gh#ansible/ansible##82496)
  * add 0002-Add-SL-Micro-to-Suse-family-list-83541.patch
    (gh#ansible/ansible##83541)
  * add 0003-Add-openSUSE-MicroOS-to-SUSE-family-list.patch
    (gh#ansible/ansible#84685)</changelog>
</package>
<package pkgid="d94cf9e13669f974b5f3259f03c7506382b7b86dd3a9bc54cec37911bacecdac" name="ansible-core" arch="src">
  <version epoch="0" ver="2.16.5" rel="bp156.2.3.1"/>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1682337600">- update to 2.14.5:
  https://github.com/ansible/ansible/blob/v2.14.5/changelogs/
  CHANGELOG-v2.14.rst
  * Bugfixes
  - ansible-doc - stop generating wrong module URLs for module
    see-alsos. The URLs for modules in ansible.builtin do now
    work, and URLs for modules outside ansible.builtin are no
    longer added (#80280).
  - ansible-galaxy - Improve retries for collection installs, to
    properly retry, and extend retry logic to common URL related
    connection errors (#80170 #80174)
  - ansible-galaxy - reduce API calls to servers by fetching
    signatures only for final candidates.
  - ansible-test - Add support for argcomplete version 3.
  - jinja2_native - fix intermittent 'could not find job'
    failures when a value of ansible_job_id from a result of an
    async task was inadvertently changed during execution; to
    prevent this a format of ansible_job_id was changed.
  - password lookup now correctly reads stored ident fields.
  - pep517 build backend - Use the documented import_module
    import from importlib.
  - roles - Fix templating public, allow_duplicates and
    rolespec_validate (#80304).
  - syntax check - Limit --syntax-check to ansible-playbook only,
    as that is the only CLI affected by this argument (#80506)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1682942400">- BuildRequire python3.9 to follow upstream (does not matter on
  Tumbleweed which is using 3.10 already...)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1683288000">- change python version on Leap15/SLES15 to python3.11 to use the
  new stack supported by SUSE</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1684065600">- modify %if-condition to allow building for python3.10 or
  python3.11 on SLES15</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1684152000">- major update to 2.15.0:
  https://github.com/ansible/ansible/blob/v2.15.0/changelogs/
  CHANGELOG-v2.15.rst</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1687348800">- update to 2.15.1:
  * Minor Changes
  - ansible-test - Allow float values for the --timeout option to
    the env command. This simplifies testing.
  - ansible-test - Refactored env command logic and timeout
    handling.
  - ansible-test - Use datetime.datetime.now with tz specified
    instead of datetime.datetime.utcnow.
  * Bugfixes
  - Properly disable jinja2_native in the template module when
    jinja2 override is used in the template (#80605)
  - ansible-galaxy - Fix variable type error when installing
    subdir collections (#80943)
  - ansible-test - Fix a traceback that occurs when attempting to
    test Ansible source using a different ansible-test. A clear
    error message is now given when this scenario occurs.
  - ansible-test - Fix handling of timeouts exceeding one day.
  - ansible-test - Fix various cases where the test timeout could
    expire without terminating the tests.
  - ansible-test local change detection - use git merge-base
    &lt;branch&gt; HEAD instead of git merge-base --fork-point &lt;branch&gt;
    (#79734).
  - deb822_repository - use http-agent for receiving content
    (#80809).
  - dnf5 - Update dnf5 module to handle API change for setting
    the download directory (#80887)
  - man page build - Remove the dependency on the docs directory
    for building man pages.
  - pep517 build backend - Copy symlinks when copying the source
    tree. This avoids tracebacks in various scenarios, such as
    when a venv is present in the source tree.
  - uri - fix search for JSON type to include complex strings
    containing '+'</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1689681600">- update to 2.15.2:
  * Minor Changes
  - Utilize gpg check provided internally by the transaction.run
    method as oppose to calling it manually.
  - ansible-test - Add Fedora 38 remote.
  - ansible-test - Use a context manager to perform cleanup at
    exit instead of using the built-in atexit module.
  - dnf5 - enable environment groups installation testing in CI
    as its support was added.
  - dnf5 - enable now implemented cacheonly functionality
  * Bugfixes
  - From issue #80880, when notifying a handler from another
    handler, handler notifications must be registered immediately
    as the flush_handler call is not recursive.
  - ansible-galaxy - Fix issue installing collections containing
    directories with more than 100 characters on python versions
    before 3.10.6
  - paramiko_ssh, psrp, and ssh connection plugins - ensure that
    all values for options that should be strings are actually
    converted to strings (#81029).
  - templating - In the template action and lookup, use local
    jinja2 environment overlay overrides instead of mutating the
    templars environment
  * Known Issues
  - ansible-test - The Fedora 37 remote is known to occasionally
    hang during boot. It is no longer routinely tested as a
    result. If possible, use the Fedora 38 remote instead.</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1694001600">- as example files were split out into a separate package
  ansible-documentation upstream, this package now Recommends that
  package
- update to 2.15.3:
  * Minor Changes
  - Removed exclude and recursive-exclude commands for generated
    files from the MANIFEST.in file. These excludes were
    unnecessary since releases are expected to be built with a
    clean worktree.
  - Removed exclude commands for sanity test files from the
    MANIFEST.in file. These tests were previously excluded
    because they did not pass when run from an sdist. However,
    sanity tests are not expected to pass from an sdist, so
    excluding some (but not all) of the failing tests makes
    little sense.
  - Removed redundant include commands from the MANIFEST.in file.
    These includes either duplicated default behavior or another
    command.
  - The ansible-core sdist no longer contains pre-generated man
    pages. Instead, a packaging/cli-doc/build.py script is
    included in the sdist. This script can generate man pages and
    standalone RST documentation for ansible-core CLI programs.
  - The docs and examples directories are no longer included in
    the ansible-core sdist. These directories have been moved to
    the https://github.com/ansible/ansible-documentation
    repository.
  - Use include where recursive-include is unnecessary in the
    MANIFEST.in file.
  - ansible-test - Update the logic used to detect when
    ansible-test is running from source.
  - ansible-test - Updated the CloudStack test container to
    version 1.6.1.
  * Bugfixes
  - Exclude internal options from man pages and docs.
  - Fix ansible-config init man page option indentation.
  - The ansible-config init command now has a documentation
    description.
  - The ansible-galaxy collection download command now has a
    documentation description.
  - The ansible-galaxy collection install command documentation
    is now visible (previously hidden by a decorator).
  - The ansible-galaxy collection verify command now has a
    documentation description.
  - The ansible-galaxy role install command documentation is now
    visible (previously hidden by a decorator).
  - The ansible-inventory command command now has a documentation
    description (previously used as the epilog).
  - Update module_utils.urls unit test to work with cryptography
    &gt;= 41.0.0.
  - When generating man pages, use func to find the command
    function instead of looking it up by the command name.
  - ansible-galaxy now considers all collection paths when
    identifying which collection requirements are already
    installed. Use the COLLECTIONS_PATHS and
    COLLECTIONS_SCAN_SYS_PATHS config options to modify these.
    Previously only the install path was considered when
    resolving the candidates. The install path will remain the
    only one potentially modified. (#79767, #81163)
  - ansible-test - Fix several possible tracebacks when using the
  - e option with sanity tests.
  - ansible-test - Pre-build a PyYAML wheel before installing
    requirements to avoid a potential Cython build failure.
  - ansible-test - Remove redundant warning about missing
    programs before attempting to execute them.
  - core will now also look at the connection plugin to force
    'local' interpreter for networking path compatibility as just
    ansible_network_os could be misleading.
  - man page build - Sub commands of ansible-galaxy role and
    ansible-galaxy collection are now documented.
  - password_hash - fix salt format for crypt (only used if
    passlib is not installed) for the bcrypt algorithm.
  - urls.py - fixed cert_file and key_file parameters when
    running on Python 3.12 - #80490</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1694520000">- update to 2.15.4:
  * Deprecated Features
  - vault and unfault filters - the undocumented vaultid
    parameter is deprecated and will be removed in ansible-core
    2.20. Use vault_id instead.
  * Bugfixes
  - PowerShell - Remove some code which is no longer valid for
    dotnet 5+
  - Prompting - add a short sleep between polling for user input
    to reduce CPU consumption (#81516).
  - ansible-galaxy - Enabled the data tarfile filter during role
    installation for Python versions that support it. A probing
    mechanism is used to avoid Python versions with a broken
    implementation.
  - ansible-test - Always use ansible-test managed entry points
    for ansible-core CLI tools when not running from source. This
    fixes issues where CLI entry points created during install
    are not compatible with ansible-test.
  - first found lookup has been updated to use the normalized
    argument parsing (pythonic) matching the documented examples.
  - handlers - the listen keyword can affect only one handler
    with the same name, the last one defined as it is a case with
    the notify keyword (#81013)
  - include_role - expose variables from parent roles to role's
    handlers (#80459)
  - tarfile - handle data filter deprecation warning message for
    extract and extractall (#80832).
  - vault and unvault filters now properly take vault_id
    parameter.</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1696939200">- update to 2.15.5:
  * Minor Changes
  - ansible-galaxy dependency resolution messages have changed
    the unexplained 'virtual' collection for the specific type
    ('scm', 'dir', etc) that is more user friendly
  * Security Fixes
  - ansible-galaxy - Prevent roles from using symlinks to
    overwrite files outside of the installation directory
    (CVE-2023-5115)
  * Bugfixes
  - Allow for searching handler subdir for included task via
    include_role (#81722)
  - PluginLoader - fix Jinja plugin performance issues (#79652)
  - ansible.module_utils.service - ensure binary data
    transmission in daemonize()
  - ansible.module_utils.service - fix inter-process
    communication in daemonize()
  - ansible-galaxy - started allowing the use of pre-releases for
    collections that do not have any stable versions published.
    (#81606)
  - ansible-galaxy - started allowing the use of pre-releases for
    dependencies on any level of the dependency tree that
    specifically demand exact pre-release versions of collections
    and not version ranges. (#81606)
  - ansible-galaxy error on dependency resolution will not error
    itself due to 'virtual' collections not having a
    name/namespace.
  - ansible-galaxy info - fix reporting no role found when
    lookup_role_by_name returns None.
  - role deduplication - don't deduplicate before a role has had
    a task run for that particular host (#81486).
  - uri/urls - Add compat function to handle the ability to parse
    the filename from a Content-Disposition header (#81806)
  - winrm - Better handle send input failures when communicating
    with hosts under load</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1699358400">- update to 2.15.6:
  * Minor Changes
  - ansible-test - Windows 2012 and 2012-R2 instances are now
    requested from Azure instead of AWS.
  * Bugfixes
  - Fix run_once being incorrectly interpreted on handlers
    (#81666)
  - Plugin loader does not dedupe nor cache filter/test plugins
    by file basename, but full path name.
  - Properly template tags in parent blocks (#81053)
  - Restoring the ability of filters/tests can have same file
    base name but different tests/filters defined inside.
  - import_role reverts to previous behavior of exporting vars at
    compile time.
  - ansible-galaxy - Provide a better error message when using a
    requirements file with an invalid format - #81901
  - ansible-inventory - index available_hosts for major
    performance boost when dumping large inventories
  - ansible-test - Fix parsing of cgroup entries which contain a
    : in the path (#81977).</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1701777600">- update to 2.15.7:
  This release includes a fix for CVE-2023-5764, where internal
  templating actions could result in unsafe data losing its unsafe
  designation.
  * Breaking Changes / Porting Guide
  - assert - Nested templating may result in an inability for the
    conditional to be evaluated. See the porting guide for more
    information.
  * Security Fixes
  - templating - Address issues where internal templating can
    cause unsafe variables to lose their unsafe designation
    (CVE-2023-5764)
  * Bugfixes
  - ansible-pull now will expand relative paths for the
  - d|--directory option is now expanded before use.
  - flush_handlers - properly handle a handler failure in a
    nested block when force_handlers is set
    (http://github.com/ansible/ansible/issues/81532)
  - module no_log will no longer affect top level booleans, for
    example no_log_module_parameter='a' will no longer hide
    changed=False as a 'no log value' (matches 'a').
  - modules/user.py - Add check for valid directory when creating
    new user homedir (allows /dev/null as skeleton) (#75063)
  - role params now have higher precedence than host facts again,
    matching documentation, this had unintentionally changed in
    2.15.
  - wait_for should not handle 'non mmapable files' again.</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1702382400">- update to 2.15.8:
  * Minor Changes
  - ansible-test - Add FreeBSD 13.2 remote.
  - ansible-test - Removed freebsd/13.1 remote.
  * Bugfixes
  - unsafe data - Address an incompatibility when iterating or
    getting a single index from AnsibleUnsafeBytes
  - unsafe data - Address an incompatibility with
    AnsibleUnsafeText and AnsibleUnsafeBytes when pickling with
    protocol=0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1705838400">- update to 2.16.0:
  https://github.com/ansible/ansible/blob/v2.16.0/changelogs/CHANGELOG-v2.16.rst
  * Bugfixes and Minor changes omitted for brevity, see full
    changelog
  * Breaking Changes / Porting Guide
  - Any plugin using the config system and the cli entry to use
    the timeout from the command line, will see the value change
    if the use had configured it in any of the lower precedence
    methods. If relying on this behaviour to consume the
    global/generic timeout from the DEFAULT_TIMEOUT constant,
    please consult the documentation on plugin configuration to
    add the overlaping entries.
  - ansible-test - Test plugins that rely on containers no longer
    support reusing running containers. The previous behavior was
    an undocumented, untested feature.
  - service module will not permanently configure variables/flags
    for openbsd when doing enable/disable operation anymore, this
    module was never meant to do this type of work, just to
    manage the service state itself. A rcctl_config or similar
    module should be created and used instead.
  * Deprecated Features
  - Deprecated ini config option collections_paths, use the
    singular form collections_path instead
  - Deprecated the env var ANSIBLE_COLLECTIONS_PATHS, use the
    singular form ANSIBLE_COLLECTIONS_PATH instead
  - Old style vars plugins which use the entrypoints
    get_host_vars or get_group_vars are deprecated. The plugin
    should be updated to inherit from BaseVarsPlugin and define a
    get_vars method as the entrypoint.
  - Support for Windows Server 2012 and 2012 R2 has been removed
    as the support end of life from Microsoft is October 10th
    2023. These versions of Windows will no longer be tested in
    this Ansible release and it cannot be guaranteed that they
    will continue to work going forward.
  - STRING_CONVERSION_ACTION config option is deprecated as it is
    no longer used in the Ansible Core code base.
  - the 'smart' option for setting a connection plugin is being
    removed as it's main purpose (choosing between ssh and
    paramiko) is now irrelevant.
  - vault and unfault filters - the undocumented vaultid
    parameter is deprecated and will be removed in ansible-core
    2.20. Use vault_id instead.
  - yum_repository - deprecated parameter 'keepcache' (#78693).
  * Removed Features (previously deprecated)
  - ActionBase - remove deprecated _remote_checksum method
  - PlayIterator - remove deprecated cache_block_tasks and
    get_original_task methods
  - Remove deprecated FileLock class
  - Removed Python 3.9 as a supported version on the controller.
    Python 3.10 or newer is required.
  - Removed include which has been deprecated in Ansible 2.12.
    Use include_tasks or import_tasks instead.
  - Templar - remove deprecated shared_loader_obj parameter of
    __init__
  - fetch_url - remove auto disabling decompress when gzip is not
    available
  - get_action_args_with_defaults - remove deprecated
    redirected_names method parameter
  - ansible-test - Removed support for the remote Windows targets
    2012 and 2012-R2
  - inventory_cache - remove deprecated
    default.fact_caching_prefix ini configuration option, use
    defaults.fact_caching_prefix instead.
  - module_utils/basic.py - Removed Python 3.5 as a supported
    remote version. Python 2.7 or Python 3.6+ is now required.
  - stat - removed unused get_md5 parameter.
  * Security Fixes
  - ansible-galaxy - Prevent roles from using symlinks to
    overwrite files outside of the installation directory
    (CVE-2023-5115)
  * Known issues
  - ansible-galaxy - dies in the middle of installing a role when
    that role contains Java inner classes (files with $ in the
    file name). This is by design, to exclude temporary or backup
    files. (#81553).
  - ansible-test - The pep8 sanity test is unable to detect
    f-string spacing issues (E201, E202) on Python 3.10 and 3.11.
    They are correctly detected under Python 3.12. See
    (PyCQA/pycodestyle#1190).</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1705838401">- update to 2.16.1:
  https://github.com/ansible/ansible/blob/v2.16.1/changelogs/CHANGELOG-v2.16.rst
  * Breaking Changes / Porting Guide
  - assert - Nested templating may result in an inability for the
    conditional to be evaluated. See the porting guide for more
    information.
  * Security Fixes
  - templating - Address issues where internal templating can
    cause unsafe variables to lose their unsafe designation
    (CVE-2023-5764)
  * Bugfixes
  - Fix issue where an include_tasks handler in a role was not
    able to locate a file in tasks/ when tasks_from was used as a
    role entry point and main.yml was not present (#82241)
  - Plugin loader does not dedupe nor cache filter/test plugins
    by file basename, but full path name.
  - Restoring the ability of filters/tests can have same file
    base name but different tests/filters defined inside.
  - ansible-pull now will expand relative paths for the
  - d|--directory option is now expanded before use.
  - ansible-pull will now correctly handle become and connection
    password file options for ansible-playbook.
  - flush_handlers - properly handle a handler failure in a
    nested block when force_handlers is set
    (http://github.com/ansible/ansible/issues/81532)
  - module no_log will no longer affect top level booleans, for
    example no_log_module_parameter='a' will no longer hide
    changed=False as a 'no log value' (matches 'a').
  - role params now have higher precedence than host facts again,
    matching documentation, this had unintentionally changed in
    2.15.
  - wait_for should not handle 'non mmapable files' again.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1705838402">- update to 2.16.2:
  https://github.com/ansible/ansible/blob/v2.16.2/changelogs/CHANGELOG-v2.16.rst
  * Bugfixes
  - unsafe data - Address an incompatibility when iterating or
    getting a single index from AnsibleUnsafeBytes
  - unsafe data - Address an incompatibility with
    AnsibleUnsafeText and AnsibleUnsafeBytes when pickling with
    protocol=0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1706616000">- update to 2.16.3:
  https://github.com/ansible/ansible/blob/v2.16.3/changelogs/CHANGELOG-v2.16.rst
  * Security Fixes
  - ANSIBLE_NO_LOG - Address issue where ANSIBLE_NO_LOG was
    ignored (CVE-2024-0690)
  * Bugfixes
  - Run all handlers with the same listen topic, even when
    notified from another handler (#82363).
  - ansible-galaxy role import - fix using the role_name in a
    standalone role's galaxy_info metadata by disabling automatic
    removal of the ansible-role- prefix. This matches the
    behavior of the Galaxy UI which also no longer implicitly
    removes the ansible-role- prefix. Use the --role-name option
    or add a role_name to the galaxy_info dictionary in the
    role's meta/main.yml to use an alternate role name.
  - ansible-test sanity --test runtime-metadata - add
    action_plugin as a valid field for modules in the schema
    (#82562).
  - ansible-config init will now dedupe ini entries from plugins.
  - ansible-galaxy role import - exit with 1 when the import
    fails (#82175).
  - ansible-galaxy role install - normalize tarfile paths and
    symlinks using ansible.utils.path.unfrackpath and consider
    them valid as long as the realpath is in the tarfile's role
    directory (#81965).
  - delegate_to when set to an empty or undefined variable will
    now give a proper error.
  - dwim functions for lookups should be better at detectging
    role context even in abscense of tasks/main.
  - roles, code cleanup and performance optimization of
    dependencies, now cached, and public setting is now
    determined once, at role instantiation.
  - roles, the static property is now correctly set, this will
    fix issues with public and DEFAULT_PRIVATE_ROLE_VARS controls
    on exporting vars.
  - unsafe data - Enable directly using AnsibleUnsafeText with
    Python pathlib (#82414)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590400">- update to 2.16.4:
  https://github.com/ansible/ansible/blob/v2.16.4/changelogs/CHANGELOG-v2.16.rst
  * Bugfixes
  - Fix loading vars_plugins in roles (#82239).
  - expect - fix argument spec error using timeout=null (#80982).
  - include_vars - fix calculating depth relative to the root and
    ensure all files are included (#80987).
  - templating - ensure syntax errors originating from a template
    being compiled into Python code object result in a failure
    (#82606)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1711540800">- update to 2.16.5:
  https://github.com/ansible/ansible/blob/v2.16.5/changelogs/CHANGELOG-v2.16.rst
  * Minor Changes
  - ansible-test - Add a work-around for permission denied errors
    when using pytest &gt;= 8 on multi-user systems with an
    installed version of ansible-test.
  * Bugfixes
  - Fix an issue when setting a plugin name from an unsafe source
    resulted in ValueError: unmarshallable object (#82708)
  - Harden python templates for respawn and ansiballz around str
    literal quoting
  - ansible-test - The libexpat package is automatically upgraded
    during remote bootstrapping to maintain compatibility with
    newer Python packages.
  - template - Fix error when templating an unsafe string which
    corresponds to an invalid type in Python (#82600).
  - winrm - does not hang when attempting to get process output
    when stdin write failed</changelog>
  <changelog author="Martin Wilck &lt;martin.wilck@suse.com&gt;" date="1738929600">- Add support for recent new SUSE and openSUSE distribution flavors
  * add 0001-Add-Alp-Dolomite-to-Suse-family-list-82496.patch
    (gh#ansible/ansible##82496)
  * add 0002-Add-SL-Micro-to-Suse-family-list-83541.patch
    (gh#ansible/ansible##83541)
  * add 0003-Add-openSUSE-MicroOS-to-SUSE-family-list.patch
    (gh#ansible/ansible#84685)</changelog>
</package>
<package pkgid="52900b595305f5204d0e5db59cb5000aabd00d8816643303fa9cfe8145176783" name="ansible-sap-launchpad" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="bp156.4.2"/>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1737374400">- 1.1.1
  - Initial release.</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1744027200">- 1.2.0
  - Changes:
  - sap_software_download: New Ansible Role with enhanced logic for downloading software using Ansible Module software_center_download
  - sap_software_download: Download stack XML option
  - software_center_download: Add option to search for latest packages
  - maintenance_planner modules: Add option to use Display ID instead of name
  - Collection Readme update and preparation for 1.2.0 release
  - Bugfixes:
  - fix: cache gigya sdk build number</changelog>
</package>
<package pkgid="83ddc3a74a26c6cc8b9348bfea24413c0a0cdf9f5af0354e6e11cebf32ba15ad" name="ansible-sap-launchpad" arch="src">
  <version epoch="0" ver="1.2.0" rel="bp156.4.2"/>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1737374400">- 1.1.1
  - Initial release.</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1744027200">- 1.2.0
  - Changes:
  - sap_software_download: New Ansible Role with enhanced logic for downloading software using Ansible Module software_center_download
  - sap_software_download: Download stack XML option
  - software_center_download: Add option to search for latest packages
  - maintenance_planner modules: Add option to use Display ID instead of name
  - Collection Readme update and preparation for 1.2.0 release
  - Bugfixes:
  - fix: cache gigya sdk build number</changelog>
</package>
<package pkgid="f5a21069f51061ad84eb9e8850bbf618cfe7820e971bbaca825d9bd5b87eb3e6" name="ansible-sap-launchpad" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="bp156.7.1"/>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1737374400">- 1.1.1
  - Initial release.</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1744027200">- 1.2.0
  - Changes:
  - sap_software_download: New Ansible Role with enhanced logic for downloading software using Ansible Module software_center_download
  - sap_software_download: Download stack XML option
  - software_center_download: Add option to search for latest packages
  - maintenance_planner modules: Add option to use Display ID instead of name
  - Collection Readme update and preparation for 1.2.0 release
  - Bugfixes:
  - fix: cache gigya sdk build number</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1751976000">- 1.2.1
  - Bugfixes:
  - software_center_download: Improved logic for skipping existing files and getting valid filename
  - sap_software_download: Add SLES 16 python313 support and update changelog</changelog>
</package>
<package pkgid="1fd04584de4dfb6d375a794266fa6205450a69f3ce6cfacb78232831bacf3ce6" name="ansible-sap-launchpad" arch="src">
  <version epoch="0" ver="1.2.1" rel="bp156.7.1"/>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1737374400">- 1.1.1
  - Initial release.</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1744027200">- 1.2.0
  - Changes:
  - sap_software_download: New Ansible Role with enhanced logic for downloading software using Ansible Module software_center_download
  - sap_software_download: Download stack XML option
  - software_center_download: Add option to search for latest packages
  - maintenance_planner modules: Add option to use Display ID instead of name
  - Collection Readme update and preparation for 1.2.0 release
  - Bugfixes:
  - fix: cache gigya sdk build number</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1751976000">- 1.2.1
  - Bugfixes:
  - software_center_download: Improved logic for skipping existing files and getting valid filename
  - sap_software_download: Add SLES 16 python313 support and update changelog</changelog>
</package>
<package pkgid="bf1319984e015c2d937e25bf879ec49280ce143077a4ced0dc8aadd65e212d39" name="ansible-test" arch="noarch">
  <version epoch="0" ver="2.16.5" rel="bp156.2.3.1"/>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1682337600">- update to 2.14.5:
  https://github.com/ansible/ansible/blob/v2.14.5/changelogs/
  CHANGELOG-v2.14.rst
  * Bugfixes
  - ansible-doc - stop generating wrong module URLs for module
    see-alsos. The URLs for modules in ansible.builtin do now
    work, and URLs for modules outside ansible.builtin are no
    longer added (#80280).
  - ansible-galaxy - Improve retries for collection installs, to
    properly retry, and extend retry logic to common URL related
    connection errors (#80170 #80174)
  - ansible-galaxy - reduce API calls to servers by fetching
    signatures only for final candidates.
  - ansible-test - Add support for argcomplete version 3.
  - jinja2_native - fix intermittent 'could not find job'
    failures when a value of ansible_job_id from a result of an
    async task was inadvertently changed during execution; to
    prevent this a format of ansible_job_id was changed.
  - password lookup now correctly reads stored ident fields.
  - pep517 build backend - Use the documented import_module
    import from importlib.
  - roles - Fix templating public, allow_duplicates and
    rolespec_validate (#80304).
  - syntax check - Limit --syntax-check to ansible-playbook only,
    as that is the only CLI affected by this argument (#80506)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1682942400">- BuildRequire python3.9 to follow upstream (does not matter on
  Tumbleweed which is using 3.10 already...)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1683288000">- change python version on Leap15/SLES15 to python3.11 to use the
  new stack supported by SUSE</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1684065600">- modify %if-condition to allow building for python3.10 or
  python3.11 on SLES15</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1684152000">- major update to 2.15.0:
  https://github.com/ansible/ansible/blob/v2.15.0/changelogs/
  CHANGELOG-v2.15.rst</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1687348800">- update to 2.15.1:
  * Minor Changes
  - ansible-test - Allow float values for the --timeout option to
    the env command. This simplifies testing.
  - ansible-test - Refactored env command logic and timeout
    handling.
  - ansible-test - Use datetime.datetime.now with tz specified
    instead of datetime.datetime.utcnow.
  * Bugfixes
  - Properly disable jinja2_native in the template module when
    jinja2 override is used in the template (#80605)
  - ansible-galaxy - Fix variable type error when installing
    subdir collections (#80943)
  - ansible-test - Fix a traceback that occurs when attempting to
    test Ansible source using a different ansible-test. A clear
    error message is now given when this scenario occurs.
  - ansible-test - Fix handling of timeouts exceeding one day.
  - ansible-test - Fix various cases where the test timeout could
    expire without terminating the tests.
  - ansible-test local change detection - use git merge-base
    &lt;branch&gt; HEAD instead of git merge-base --fork-point &lt;branch&gt;
    (#79734).
  - deb822_repository - use http-agent for receiving content
    (#80809).
  - dnf5 - Update dnf5 module to handle API change for setting
    the download directory (#80887)
  - man page build - Remove the dependency on the docs directory
    for building man pages.
  - pep517 build backend - Copy symlinks when copying the source
    tree. This avoids tracebacks in various scenarios, such as
    when a venv is present in the source tree.
  - uri - fix search for JSON type to include complex strings
    containing '+'</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1689681600">- update to 2.15.2:
  * Minor Changes
  - Utilize gpg check provided internally by the transaction.run
    method as oppose to calling it manually.
  - ansible-test - Add Fedora 38 remote.
  - ansible-test - Use a context manager to perform cleanup at
    exit instead of using the built-in atexit module.
  - dnf5 - enable environment groups installation testing in CI
    as its support was added.
  - dnf5 - enable now implemented cacheonly functionality
  * Bugfixes
  - From issue #80880, when notifying a handler from another
    handler, handler notifications must be registered immediately
    as the flush_handler call is not recursive.
  - ansible-galaxy - Fix issue installing collections containing
    directories with more than 100 characters on python versions
    before 3.10.6
  - paramiko_ssh, psrp, and ssh connection plugins - ensure that
    all values for options that should be strings are actually
    converted to strings (#81029).
  - templating - In the template action and lookup, use local
    jinja2 environment overlay overrides instead of mutating the
    templars environment
  * Known Issues
  - ansible-test - The Fedora 37 remote is known to occasionally
    hang during boot. It is no longer routinely tested as a
    result. If possible, use the Fedora 38 remote instead.</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1694001600">- as example files were split out into a separate package
  ansible-documentation upstream, this package now Recommends that
  package
- update to 2.15.3:
  * Minor Changes
  - Removed exclude and recursive-exclude commands for generated
    files from the MANIFEST.in file. These excludes were
    unnecessary since releases are expected to be built with a
    clean worktree.
  - Removed exclude commands for sanity test files from the
    MANIFEST.in file. These tests were previously excluded
    because they did not pass when run from an sdist. However,
    sanity tests are not expected to pass from an sdist, so
    excluding some (but not all) of the failing tests makes
    little sense.
  - Removed redundant include commands from the MANIFEST.in file.
    These includes either duplicated default behavior or another
    command.
  - The ansible-core sdist no longer contains pre-generated man
    pages. Instead, a packaging/cli-doc/build.py script is
    included in the sdist. This script can generate man pages and
    standalone RST documentation for ansible-core CLI programs.
  - The docs and examples directories are no longer included in
    the ansible-core sdist. These directories have been moved to
    the https://github.com/ansible/ansible-documentation
    repository.
  - Use include where recursive-include is unnecessary in the
    MANIFEST.in file.
  - ansible-test - Update the logic used to detect when
    ansible-test is running from source.
  - ansible-test - Updated the CloudStack test container to
    version 1.6.1.
  * Bugfixes
  - Exclude internal options from man pages and docs.
  - Fix ansible-config init man page option indentation.
  - The ansible-config init command now has a documentation
    description.
  - The ansible-galaxy collection download command now has a
    documentation description.
  - The ansible-galaxy collection install command documentation
    is now visible (previously hidden by a decorator).
  - The ansible-galaxy collection verify command now has a
    documentation description.
  - The ansible-galaxy role install command documentation is now
    visible (previously hidden by a decorator).
  - The ansible-inventory command command now has a documentation
    description (previously used as the epilog).
  - Update module_utils.urls unit test to work with cryptography
    &gt;= 41.0.0.
  - When generating man pages, use func to find the command
    function instead of looking it up by the command name.
  - ansible-galaxy now considers all collection paths when
    identifying which collection requirements are already
    installed. Use the COLLECTIONS_PATHS and
    COLLECTIONS_SCAN_SYS_PATHS config options to modify these.
    Previously only the install path was considered when
    resolving the candidates. The install path will remain the
    only one potentially modified. (#79767, #81163)
  - ansible-test - Fix several possible tracebacks when using the
  - e option with sanity tests.
  - ansible-test - Pre-build a PyYAML wheel before installing
    requirements to avoid a potential Cython build failure.
  - ansible-test - Remove redundant warning about missing
    programs before attempting to execute them.
  - core will now also look at the connection plugin to force
    'local' interpreter for networking path compatibility as just
    ansible_network_os could be misleading.
  - man page build - Sub commands of ansible-galaxy role and
    ansible-galaxy collection are now documented.
  - password_hash - fix salt format for crypt (only used if
    passlib is not installed) for the bcrypt algorithm.
  - urls.py - fixed cert_file and key_file parameters when
    running on Python 3.12 - #80490</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1694520000">- update to 2.15.4:
  * Deprecated Features
  - vault and unfault filters - the undocumented vaultid
    parameter is deprecated and will be removed in ansible-core
    2.20. Use vault_id instead.
  * Bugfixes
  - PowerShell - Remove some code which is no longer valid for
    dotnet 5+
  - Prompting - add a short sleep between polling for user input
    to reduce CPU consumption (#81516).
  - ansible-galaxy - Enabled the data tarfile filter during role
    installation for Python versions that support it. A probing
    mechanism is used to avoid Python versions with a broken
    implementation.
  - ansible-test - Always use ansible-test managed entry points
    for ansible-core CLI tools when not running from source. This
    fixes issues where CLI entry points created during install
    are not compatible with ansible-test.
  - first found lookup has been updated to use the normalized
    argument parsing (pythonic) matching the documented examples.
  - handlers - the listen keyword can affect only one handler
    with the same name, the last one defined as it is a case with
    the notify keyword (#81013)
  - include_role - expose variables from parent roles to role's
    handlers (#80459)
  - tarfile - handle data filter deprecation warning message for
    extract and extractall (#80832).
  - vault and unvault filters now properly take vault_id
    parameter.</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1696939200">- update to 2.15.5:
  * Minor Changes
  - ansible-galaxy dependency resolution messages have changed
    the unexplained 'virtual' collection for the specific type
    ('scm', 'dir', etc) that is more user friendly
  * Security Fixes
  - ansible-galaxy - Prevent roles from using symlinks to
    overwrite files outside of the installation directory
    (CVE-2023-5115)
  * Bugfixes
  - Allow for searching handler subdir for included task via
    include_role (#81722)
  - PluginLoader - fix Jinja plugin performance issues (#79652)
  - ansible.module_utils.service - ensure binary data
    transmission in daemonize()
  - ansible.module_utils.service - fix inter-process
    communication in daemonize()
  - ansible-galaxy - started allowing the use of pre-releases for
    collections that do not have any stable versions published.
    (#81606)
  - ansible-galaxy - started allowing the use of pre-releases for
    dependencies on any level of the dependency tree that
    specifically demand exact pre-release versions of collections
    and not version ranges. (#81606)
  - ansible-galaxy error on dependency resolution will not error
    itself due to 'virtual' collections not having a
    name/namespace.
  - ansible-galaxy info - fix reporting no role found when
    lookup_role_by_name returns None.
  - role deduplication - don't deduplicate before a role has had
    a task run for that particular host (#81486).
  - uri/urls - Add compat function to handle the ability to parse
    the filename from a Content-Disposition header (#81806)
  - winrm - Better handle send input failures when communicating
    with hosts under load</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1699358400">- update to 2.15.6:
  * Minor Changes
  - ansible-test - Windows 2012 and 2012-R2 instances are now
    requested from Azure instead of AWS.
  * Bugfixes
  - Fix run_once being incorrectly interpreted on handlers
    (#81666)
  - Plugin loader does not dedupe nor cache filter/test plugins
    by file basename, but full path name.
  - Properly template tags in parent blocks (#81053)
  - Restoring the ability of filters/tests can have same file
    base name but different tests/filters defined inside.
  - import_role reverts to previous behavior of exporting vars at
    compile time.
  - ansible-galaxy - Provide a better error message when using a
    requirements file with an invalid format - #81901
  - ansible-inventory - index available_hosts for major
    performance boost when dumping large inventories
  - ansible-test - Fix parsing of cgroup entries which contain a
    : in the path (#81977).</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1701777600">- update to 2.15.7:
  This release includes a fix for CVE-2023-5764, where internal
  templating actions could result in unsafe data losing its unsafe
  designation.
  * Breaking Changes / Porting Guide
  - assert - Nested templating may result in an inability for the
    conditional to be evaluated. See the porting guide for more
    information.
  * Security Fixes
  - templating - Address issues where internal templating can
    cause unsafe variables to lose their unsafe designation
    (CVE-2023-5764)
  * Bugfixes
  - ansible-pull now will expand relative paths for the
  - d|--directory option is now expanded before use.
  - flush_handlers - properly handle a handler failure in a
    nested block when force_handlers is set
    (http://github.com/ansible/ansible/issues/81532)
  - module no_log will no longer affect top level booleans, for
    example no_log_module_parameter='a' will no longer hide
    changed=False as a 'no log value' (matches 'a').
  - modules/user.py - Add check for valid directory when creating
    new user homedir (allows /dev/null as skeleton) (#75063)
  - role params now have higher precedence than host facts again,
    matching documentation, this had unintentionally changed in
    2.15.
  - wait_for should not handle 'non mmapable files' again.</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1702382400">- update to 2.15.8:
  * Minor Changes
  - ansible-test - Add FreeBSD 13.2 remote.
  - ansible-test - Removed freebsd/13.1 remote.
  * Bugfixes
  - unsafe data - Address an incompatibility when iterating or
    getting a single index from AnsibleUnsafeBytes
  - unsafe data - Address an incompatibility with
    AnsibleUnsafeText and AnsibleUnsafeBytes when pickling with
    protocol=0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1705838400">- update to 2.16.0:
  https://github.com/ansible/ansible/blob/v2.16.0/changelogs/CHANGELOG-v2.16.rst
  * Bugfixes and Minor changes omitted for brevity, see full
    changelog
  * Breaking Changes / Porting Guide
  - Any plugin using the config system and the cli entry to use
    the timeout from the command line, will see the value change
    if the use had configured it in any of the lower precedence
    methods. If relying on this behaviour to consume the
    global/generic timeout from the DEFAULT_TIMEOUT constant,
    please consult the documentation on plugin configuration to
    add the overlaping entries.
  - ansible-test - Test plugins that rely on containers no longer
    support reusing running containers. The previous behavior was
    an undocumented, untested feature.
  - service module will not permanently configure variables/flags
    for openbsd when doing enable/disable operation anymore, this
    module was never meant to do this type of work, just to
    manage the service state itself. A rcctl_config or similar
    module should be created and used instead.
  * Deprecated Features
  - Deprecated ini config option collections_paths, use the
    singular form collections_path instead
  - Deprecated the env var ANSIBLE_COLLECTIONS_PATHS, use the
    singular form ANSIBLE_COLLECTIONS_PATH instead
  - Old style vars plugins which use the entrypoints
    get_host_vars or get_group_vars are deprecated. The plugin
    should be updated to inherit from BaseVarsPlugin and define a
    get_vars method as the entrypoint.
  - Support for Windows Server 2012 and 2012 R2 has been removed
    as the support end of life from Microsoft is October 10th
    2023. These versions of Windows will no longer be tested in
    this Ansible release and it cannot be guaranteed that they
    will continue to work going forward.
  - STRING_CONVERSION_ACTION config option is deprecated as it is
    no longer used in the Ansible Core code base.
  - the 'smart' option for setting a connection plugin is being
    removed as it's main purpose (choosing between ssh and
    paramiko) is now irrelevant.
  - vault and unfault filters - the undocumented vaultid
    parameter is deprecated and will be removed in ansible-core
    2.20. Use vault_id instead.
  - yum_repository - deprecated parameter 'keepcache' (#78693).
  * Removed Features (previously deprecated)
  - ActionBase - remove deprecated _remote_checksum method
  - PlayIterator - remove deprecated cache_block_tasks and
    get_original_task methods
  - Remove deprecated FileLock class
  - Removed Python 3.9 as a supported version on the controller.
    Python 3.10 or newer is required.
  - Removed include which has been deprecated in Ansible 2.12.
    Use include_tasks or import_tasks instead.
  - Templar - remove deprecated shared_loader_obj parameter of
    __init__
  - fetch_url - remove auto disabling decompress when gzip is not
    available
  - get_action_args_with_defaults - remove deprecated
    redirected_names method parameter
  - ansible-test - Removed support for the remote Windows targets
    2012 and 2012-R2
  - inventory_cache - remove deprecated
    default.fact_caching_prefix ini configuration option, use
    defaults.fact_caching_prefix instead.
  - module_utils/basic.py - Removed Python 3.5 as a supported
    remote version. Python 2.7 or Python 3.6+ is now required.
  - stat - removed unused get_md5 parameter.
  * Security Fixes
  - ansible-galaxy - Prevent roles from using symlinks to
    overwrite files outside of the installation directory
    (CVE-2023-5115)
  * Known issues
  - ansible-galaxy - dies in the middle of installing a role when
    that role contains Java inner classes (files with $ in the
    file name). This is by design, to exclude temporary or backup
    files. (#81553).
  - ansible-test - The pep8 sanity test is unable to detect
    f-string spacing issues (E201, E202) on Python 3.10 and 3.11.
    They are correctly detected under Python 3.12. See
    (PyCQA/pycodestyle#1190).</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1705838401">- update to 2.16.1:
  https://github.com/ansible/ansible/blob/v2.16.1/changelogs/CHANGELOG-v2.16.rst
  * Breaking Changes / Porting Guide
  - assert - Nested templating may result in an inability for the
    conditional to be evaluated. See the porting guide for more
    information.
  * Security Fixes
  - templating - Address issues where internal templating can
    cause unsafe variables to lose their unsafe designation
    (CVE-2023-5764)
  * Bugfixes
  - Fix issue where an include_tasks handler in a role was not
    able to locate a file in tasks/ when tasks_from was used as a
    role entry point and main.yml was not present (#82241)
  - Plugin loader does not dedupe nor cache filter/test plugins
    by file basename, but full path name.
  - Restoring the ability of filters/tests can have same file
    base name but different tests/filters defined inside.
  - ansible-pull now will expand relative paths for the
  - d|--directory option is now expanded before use.
  - ansible-pull will now correctly handle become and connection
    password file options for ansible-playbook.
  - flush_handlers - properly handle a handler failure in a
    nested block when force_handlers is set
    (http://github.com/ansible/ansible/issues/81532)
  - module no_log will no longer affect top level booleans, for
    example no_log_module_parameter='a' will no longer hide
    changed=False as a 'no log value' (matches 'a').
  - role params now have higher precedence than host facts again,
    matching documentation, this had unintentionally changed in
    2.15.
  - wait_for should not handle 'non mmapable files' again.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1705838402">- update to 2.16.2:
  https://github.com/ansible/ansible/blob/v2.16.2/changelogs/CHANGELOG-v2.16.rst
  * Bugfixes
  - unsafe data - Address an incompatibility when iterating or
    getting a single index from AnsibleUnsafeBytes
  - unsafe data - Address an incompatibility with
    AnsibleUnsafeText and AnsibleUnsafeBytes when pickling with
    protocol=0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1706616000">- update to 2.16.3:
  https://github.com/ansible/ansible/blob/v2.16.3/changelogs/CHANGELOG-v2.16.rst
  * Security Fixes
  - ANSIBLE_NO_LOG - Address issue where ANSIBLE_NO_LOG was
    ignored (CVE-2024-0690)
  * Bugfixes
  - Run all handlers with the same listen topic, even when
    notified from another handler (#82363).
  - ansible-galaxy role import - fix using the role_name in a
    standalone role's galaxy_info metadata by disabling automatic
    removal of the ansible-role- prefix. This matches the
    behavior of the Galaxy UI which also no longer implicitly
    removes the ansible-role- prefix. Use the --role-name option
    or add a role_name to the galaxy_info dictionary in the
    role's meta/main.yml to use an alternate role name.
  - ansible-test sanity --test runtime-metadata - add
    action_plugin as a valid field for modules in the schema
    (#82562).
  - ansible-config init will now dedupe ini entries from plugins.
  - ansible-galaxy role import - exit with 1 when the import
    fails (#82175).
  - ansible-galaxy role install - normalize tarfile paths and
    symlinks using ansible.utils.path.unfrackpath and consider
    them valid as long as the realpath is in the tarfile's role
    directory (#81965).
  - delegate_to when set to an empty or undefined variable will
    now give a proper error.
  - dwim functions for lookups should be better at detectging
    role context even in abscense of tasks/main.
  - roles, code cleanup and performance optimization of
    dependencies, now cached, and public setting is now
    determined once, at role instantiation.
  - roles, the static property is now correctly set, this will
    fix issues with public and DEFAULT_PRIVATE_ROLE_VARS controls
    on exporting vars.
  - unsafe data - Enable directly using AnsibleUnsafeText with
    Python pathlib (#82414)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590400">- update to 2.16.4:
  https://github.com/ansible/ansible/blob/v2.16.4/changelogs/CHANGELOG-v2.16.rst
  * Bugfixes
  - Fix loading vars_plugins in roles (#82239).
  - expect - fix argument spec error using timeout=null (#80982).
  - include_vars - fix calculating depth relative to the root and
    ensure all files are included (#80987).
  - templating - ensure syntax errors originating from a template
    being compiled into Python code object result in a failure
    (#82606)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1711540800">- update to 2.16.5:
  https://github.com/ansible/ansible/blob/v2.16.5/changelogs/CHANGELOG-v2.16.rst
  * Minor Changes
  - ansible-test - Add a work-around for permission denied errors
    when using pytest &gt;= 8 on multi-user systems with an
    installed version of ansible-test.
  * Bugfixes
  - Fix an issue when setting a plugin name from an unsafe source
    resulted in ValueError: unmarshallable object (#82708)
  - Harden python templates for respawn and ansiballz around str
    literal quoting
  - ansible-test - The libexpat package is automatically upgraded
    during remote bootstrapping to maintain compatibility with
    newer Python packages.
  - template - Fix error when templating an unsafe string which
    corresponds to an invalid type in Python (#82600).
  - winrm - does not hang when attempting to get process output
    when stdin write failed</changelog>
  <changelog author="Martin Wilck &lt;martin.wilck@suse.com&gt;" date="1738929600">- Add support for recent new SUSE and openSUSE distribution flavors
  * add 0001-Add-Alp-Dolomite-to-Suse-family-list-82496.patch
    (gh#ansible/ansible##82496)
  * add 0002-Add-SL-Micro-to-Suse-family-list-83541.patch
    (gh#ansible/ansible##83541)
  * add 0003-Add-openSUSE-MicroOS-to-SUSE-family-list.patch
    (gh#ansible/ansible#84685)</changelog>
</package>
<package pkgid="08a8a31fbfb4eb878c81e39abf3c7c02484948fefd010b18f9cdd5a53c6a7b44" name="arch-install-scripts" arch="noarch">
  <version epoch="0" ver="29" rel="bp156.3.3.1"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt; - 24" date="1641297600">- Initial packaging of version 24 for openSUSE.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt; - 25" date="1656936000">- New upstream version 25
  * arch-chroot: add unshare mode
  * arch-chroot: resolv.conf recursive host + target symlinks
  * arch-chroot: Make run a tmpfs mount</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt; - 26" date="1659268800">- New upstream version 26
  * arch-chroot: Use separate pid namespace for worker processes</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1664452800">- New upstream release 27
  * update pseudofs and fsck lists</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1669032000">- New upstream release 28
  * genfstab: disable fsck for btrfs (it does not need it and the binary is a no-op)
  * genfstab: remove subvolid= from btrfs options if subvol= is set</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1733227200">- New upstream release 29
  * arch-chroot: fix unshare chroot /dev symlinks
  * arch-chroot: bind mount over a /etc/resolv.conf symlink (requires mount &gt;= 2.39)
  * arch-chroot: add option to preserve the chroot resolv.conf
  * arch-chroot: ensure /run is mounted with --make-private
  * genfstab: ensure swap devices adhere to -f
  * genfstab: remove atgc mount option</changelog>
</package>
<package pkgid="6cca18bf56d556e60192a880ce58bfbe009e934a2f6906765ed62020516dbf3c" name="arch-install-scripts" arch="src">
  <version epoch="0" ver="29" rel="bp156.3.3.1"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt; - 24" date="1641297600">- Initial packaging of version 24 for openSUSE.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt; - 25" date="1656936000">- New upstream version 25
  * arch-chroot: add unshare mode
  * arch-chroot: resolv.conf recursive host + target symlinks
  * arch-chroot: Make run a tmpfs mount</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt; - 26" date="1659268800">- New upstream version 26
  * arch-chroot: Use separate pid namespace for worker processes</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1664452800">- New upstream release 27
  * update pseudofs and fsck lists</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1669032000">- New upstream release 28
  * genfstab: disable fsck for btrfs (it does not need it and the binary is a no-op)
  * genfstab: remove subvolid= from btrfs options if subvol= is set</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1733227200">- New upstream release 29
  * arch-chroot: fix unshare chroot /dev symlinks
  * arch-chroot: bind mount over a /etc/resolv.conf symlink (requires mount &gt;= 2.39)
  * arch-chroot: add option to preserve the chroot resolv.conf
  * arch-chroot: ensure /run is mounted with --make-private
  * genfstab: ensure swap devices adhere to -f
  * genfstab: remove atgc mount option</changelog>
</package>
<package pkgid="d8c722f1733322539f01305a0bf2ecaa0cc94dab504714036244f28bcc756599" name="ark" arch="aarch64">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * lastPathSegment: don't strip slash if it is the only character in the path (kde#469795)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Make sure welcomeview messages are extracted (kde#472341)
  * Port QString::count() which is deprecated in qt6
  * Disable doc build for Qt6 for now
  * Adjust CI to KF6
  * Adapt part metadata handling to KF6
  * Adapt part factory to KF6
  * Remove unused include
  * Convert desktop file metadata to JSON for KF6
  * Allow building against KF6 libs
  * doc: usa a non-deprecated entity in the man page
  * loadtest: add test for a simple static library
  * loadtest: test number of entries
  * lastPathSegment: don't strip slash if it is the only character in the path (kde#469795)
  * Update homepage URL to https://apps.kde.org/ark (kde#469583)
  * Port sidebar to QDockWidget
  * Small code improvements
  * Fix leaking actions
  * Call showWelcomeScreen() only when needed
  * Bump KF_MIN_VERSION to 5.101
  * New welcome screen UI</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- Changes since 23.08.1:
  * snapcraft: put rar in list.
  * snapcraft: rar in amd64 only.
  * snapcraft: set qt plugin path in build and runtime env.
  * snapcraft: Initial add file
  * Drop unused ItemModels dependency
  * Add missing KWindowSystem dependency</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1697284800">- Add patch to fix bzip2 support with shared-mime-info &gt;= 2.3:
  * 0001-Fix-support-for-bzip2-format-with-shared-mime-info-2.patch
- Drop patch, not necessary since Leap 15.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * Fix opening of AppImage files
  * Fix checks using old ISO mimetype
  * Don't hardcode bzip2 mimetype in tests
  * Fix support for bzip2 format with shared-mime-info 2.3
  * Explicitly support new application/vnd.efi.iso mimetype
  * snapcraft: bump content pack version.
- Drop patch, merged upstream:
  * 0001-Fix-support-for-bzip2-format-with-shared-mime-info-2.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * snapcraft: remove non-existant accessibility plug, use unity7</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738929600">- Add patch (CVE-2024-57966, boo#1236737)
  * 0001-Treat-absolute-paths-as-relative-paths-during-extrac.patch</changelog>
</package>
<package pkgid="a6294bd5306731c5321befb178840247c2dc8adfc81f5190b820803a6624a862" name="ark" arch="ppc64le">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * lastPathSegment: don't strip slash if it is the only character in the path (kde#469795)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Make sure welcomeview messages are extracted (kde#472341)
  * Port QString::count() which is deprecated in qt6
  * Disable doc build for Qt6 for now
  * Adjust CI to KF6
  * Adapt part metadata handling to KF6
  * Adapt part factory to KF6
  * Remove unused include
  * Convert desktop file metadata to JSON for KF6
  * Allow building against KF6 libs
  * doc: usa a non-deprecated entity in the man page
  * loadtest: add test for a simple static library
  * loadtest: test number of entries
  * lastPathSegment: don't strip slash if it is the only character in the path (kde#469795)
  * Update homepage URL to https://apps.kde.org/ark (kde#469583)
  * Port sidebar to QDockWidget
  * Small code improvements
  * Fix leaking actions
  * Call showWelcomeScreen() only when needed
  * Bump KF_MIN_VERSION to 5.101
  * New welcome screen UI</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- Changes since 23.08.1:
  * snapcraft: put rar in list.
  * snapcraft: rar in amd64 only.
  * snapcraft: set qt plugin path in build and runtime env.
  * snapcraft: Initial add file
  * Drop unused ItemModels dependency
  * Add missing KWindowSystem dependency</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1697284800">- Add patch to fix bzip2 support with shared-mime-info &gt;= 2.3:
  * 0001-Fix-support-for-bzip2-format-with-shared-mime-info-2.patch
- Drop patch, not necessary since Leap 15.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * Fix opening of AppImage files
  * Fix checks using old ISO mimetype
  * Don't hardcode bzip2 mimetype in tests
  * Fix support for bzip2 format with shared-mime-info 2.3
  * Explicitly support new application/vnd.efi.iso mimetype
  * snapcraft: bump content pack version.
- Drop patch, merged upstream:
  * 0001-Fix-support-for-bzip2-format-with-shared-mime-info-2.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * snapcraft: remove non-existant accessibility plug, use unity7</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738929600">- Add patch (CVE-2024-57966, boo#1236737)
  * 0001-Treat-absolute-paths-as-relative-paths-during-extrac.patch</changelog>
</package>
<package pkgid="8d55b240785222b7a6ad2a2f29bac3c31cd8dbb5474809552649d73398e45ef2" name="ark" arch="s390x">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * lastPathSegment: don't strip slash if it is the only character in the path (kde#469795)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Make sure welcomeview messages are extracted (kde#472341)
  * Port QString::count() which is deprecated in qt6
  * Disable doc build for Qt6 for now
  * Adjust CI to KF6
  * Adapt part metadata handling to KF6
  * Adapt part factory to KF6
  * Remove unused include
  * Convert desktop file metadata to JSON for KF6
  * Allow building against KF6 libs
  * doc: usa a non-deprecated entity in the man page
  * loadtest: add test for a simple static library
  * loadtest: test number of entries
  * lastPathSegment: don't strip slash if it is the only character in the path (kde#469795)
  * Update homepage URL to https://apps.kde.org/ark (kde#469583)
  * Port sidebar to QDockWidget
  * Small code improvements
  * Fix leaking actions
  * Call showWelcomeScreen() only when needed
  * Bump KF_MIN_VERSION to 5.101
  * New welcome screen UI</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- Changes since 23.08.1:
  * snapcraft: put rar in list.
  * snapcraft: rar in amd64 only.
  * snapcraft: set qt plugin path in build and runtime env.
  * snapcraft: Initial add file
  * Drop unused ItemModels dependency
  * Add missing KWindowSystem dependency</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1697284800">- Add patch to fix bzip2 support with shared-mime-info &gt;= 2.3:
  * 0001-Fix-support-for-bzip2-format-with-shared-mime-info-2.patch
- Drop patch, not necessary since Leap 15.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * Fix opening of AppImage files
  * Fix checks using old ISO mimetype
  * Don't hardcode bzip2 mimetype in tests
  * Fix support for bzip2 format with shared-mime-info 2.3
  * Explicitly support new application/vnd.efi.iso mimetype
  * snapcraft: bump content pack version.
- Drop patch, merged upstream:
  * 0001-Fix-support-for-bzip2-format-with-shared-mime-info-2.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * snapcraft: remove non-existant accessibility plug, use unity7</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738929600">- Add patch (CVE-2024-57966, boo#1236737)
  * 0001-Treat-absolute-paths-as-relative-paths-during-extrac.patch</changelog>
</package>
<package pkgid="9ff0548d672474387bd393b8afcdd41ef7b7533310e971fc2227762c0f0eb263" name="ark" arch="src">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * lastPathSegment: don't strip slash if it is the only character in the path (kde#469795)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Make sure welcomeview messages are extracted (kde#472341)
  * Port QString::count() which is deprecated in qt6
  * Disable doc build for Qt6 for now
  * Adjust CI to KF6
  * Adapt part metadata handling to KF6
  * Adapt part factory to KF6
  * Remove unused include
  * Convert desktop file metadata to JSON for KF6
  * Allow building against KF6 libs
  * doc: usa a non-deprecated entity in the man page
  * loadtest: add test for a simple static library
  * loadtest: test number of entries
  * lastPathSegment: don't strip slash if it is the only character in the path (kde#469795)
  * Update homepage URL to https://apps.kde.org/ark (kde#469583)
  * Port sidebar to QDockWidget
  * Small code improvements
  * Fix leaking actions
  * Call showWelcomeScreen() only when needed
  * Bump KF_MIN_VERSION to 5.101
  * New welcome screen UI</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- Changes since 23.08.1:
  * snapcraft: put rar in list.
  * snapcraft: rar in amd64 only.
  * snapcraft: set qt plugin path in build and runtime env.
  * snapcraft: Initial add file
  * Drop unused ItemModels dependency
  * Add missing KWindowSystem dependency</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1697284800">- Add patch to fix bzip2 support with shared-mime-info &gt;= 2.3:
  * 0001-Fix-support-for-bzip2-format-with-shared-mime-info-2.patch
- Drop patch, not necessary since Leap 15.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * Fix opening of AppImage files
  * Fix checks using old ISO mimetype
  * Don't hardcode bzip2 mimetype in tests
  * Fix support for bzip2 format with shared-mime-info 2.3
  * Explicitly support new application/vnd.efi.iso mimetype
  * snapcraft: bump content pack version.
- Drop patch, merged upstream:
  * 0001-Fix-support-for-bzip2-format-with-shared-mime-info-2.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * snapcraft: remove non-existant accessibility plug, use unity7</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738929600">- Add patch (CVE-2024-57966, boo#1236737)
  * 0001-Treat-absolute-paths-as-relative-paths-during-extrac.patch</changelog>
</package>
<package pkgid="643a3fc87b11c2e17830899f5cb37975b8e552ceb1524b63327e57abd3fe9294" name="ark" arch="x86_64">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * lastPathSegment: don't strip slash if it is the only character in the path (kde#469795)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Make sure welcomeview messages are extracted (kde#472341)
  * Port QString::count() which is deprecated in qt6
  * Disable doc build for Qt6 for now
  * Adjust CI to KF6
  * Adapt part metadata handling to KF6
  * Adapt part factory to KF6
  * Remove unused include
  * Convert desktop file metadata to JSON for KF6
  * Allow building against KF6 libs
  * doc: usa a non-deprecated entity in the man page
  * loadtest: add test for a simple static library
  * loadtest: test number of entries
  * lastPathSegment: don't strip slash if it is the only character in the path (kde#469795)
  * Update homepage URL to https://apps.kde.org/ark (kde#469583)
  * Port sidebar to QDockWidget
  * Small code improvements
  * Fix leaking actions
  * Call showWelcomeScreen() only when needed
  * Bump KF_MIN_VERSION to 5.101
  * New welcome screen UI</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- Changes since 23.08.1:
  * snapcraft: put rar in list.
  * snapcraft: rar in amd64 only.
  * snapcraft: set qt plugin path in build and runtime env.
  * snapcraft: Initial add file
  * Drop unused ItemModels dependency
  * Add missing KWindowSystem dependency</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1697284800">- Add patch to fix bzip2 support with shared-mime-info &gt;= 2.3:
  * 0001-Fix-support-for-bzip2-format-with-shared-mime-info-2.patch
- Drop patch, not necessary since Leap 15.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * Fix opening of AppImage files
  * Fix checks using old ISO mimetype
  * Don't hardcode bzip2 mimetype in tests
  * Fix support for bzip2 format with shared-mime-info 2.3
  * Explicitly support new application/vnd.efi.iso mimetype
  * snapcraft: bump content pack version.
- Drop patch, merged upstream:
  * 0001-Fix-support-for-bzip2-format-with-shared-mime-info-2.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * snapcraft: remove non-existant accessibility plug, use unity7</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738929600">- Add patch (CVE-2024-57966, boo#1236737)
  * 0001-Treat-absolute-paths-as-relative-paths-during-extrac.patch</changelog>
</package>
<package pkgid="120054378d84d07c2a2b387726470353cb1a011fa1cc1a4081e05cb02794c5e3" name="ark-lang" arch="noarch">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670846400">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * lastPathSegment: don't strip slash if it is the only character in the path (kde#469795)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Make sure welcomeview messages are extracted (kde#472341)
  * Port QString::count() which is deprecated in qt6
  * Disable doc build for Qt6 for now
  * Adjust CI to KF6
  * Adapt part metadata handling to KF6
  * Adapt part factory to KF6
  * Remove unused include
  * Convert desktop file metadata to JSON for KF6
  * Allow building against KF6 libs
  * doc: usa a non-deprecated entity in the man page
  * loadtest: add test for a simple static library
  * loadtest: test number of entries
  * lastPathSegment: don't strip slash if it is the only character in the path (kde#469795)
  * Update homepage URL to https://apps.kde.org/ark (kde#469583)
  * Port sidebar to QDockWidget
  * Small code improvements
  * Fix leaking actions
  * Call showWelcomeScreen() only when needed
  * Bump KF_MIN_VERSION to 5.101
  * New welcome screen UI</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- Changes since 23.08.1:
  * snapcraft: put rar in list.
  * snapcraft: rar in amd64 only.
  * snapcraft: set qt plugin path in build and runtime env.
  * snapcraft: Initial add file
  * Drop unused ItemModels dependency
  * Add missing KWindowSystem dependency</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1697284800">- Add patch to fix bzip2 support with shared-mime-info &gt;= 2.3:
  * 0001-Fix-support-for-bzip2-format-with-shared-mime-info-2.patch
- Drop patch, not necessary since Leap 15.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * Fix opening of AppImage files
  * Fix checks using old ISO mimetype
  * Don't hardcode bzip2 mimetype in tests
  * Fix support for bzip2 format with shared-mime-info 2.3
  * Explicitly support new application/vnd.efi.iso mimetype
  * snapcraft: bump content pack version.
- Drop patch, merged upstream:
  * 0001-Fix-support-for-bzip2-format-with-shared-mime-info-2.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * snapcraft: remove non-existant accessibility plug, use unity7</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738929600">- Add patch (CVE-2024-57966, boo#1236737)
  * 0001-Treat-absolute-paths-as-relative-paths-during-extrac.patch</changelog>
</package>
<package pkgid="018379d578e6449b5df75f4cc5f706b1adcd5bf650d8e88bd60b55361da7e2ee" name="assimp" arch="src">
  <version epoch="0" ver="5.3.1" rel="bp156.3.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1769083200">- Adding CVE-2025-3548.patch to address CVE-2025-3548 / bsc#1241367
  * This .patch takes the spirit of https://github.com/assimp/assimp/pull/6073
    as mentioned in the bug; adjusted to the code as it stands in the version
    of assimp (5.3.1) in use for openSUSE:Backports:SLE-15-SP6:Update</changelog>
</package>
<package pkgid="f51222ded8ab3e6414e03e53b51ec403772166967e9f553ff4b1a7e1e4594882" name="assimp" arch="src">
  <version epoch="0" ver="5.3.1" rel="bp156.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Add patch to fix build with GCC11:
  * 0001-Fix-build-with-GCC-11.patch (boo#1181859)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
</package>
<package pkgid="74022d82b7c836df84d14214181ddbee8e2ba85df19e44785468c7a4a63240f2" name="assimp" arch="src">
  <version epoch="0" ver="5.3.1" rel="bp156.3.6.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
</package>
<package pkgid="0ba1ebaec8877475f6ca5f63c586ebe74c0fafe969e6ab1c3bc3875693fa3af0" name="assimp" arch="src">
  <version epoch="0" ver="5.3.1" rel="bp156.3.9.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
</package>
<package pkgid="bcf74b277f1c0bff21af87e0bf6c6b156344085f8b7a8eaf5d321f612a11162b" name="assimp-devel" arch="aarch64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1769083200">- Adding CVE-2025-3548.patch to address CVE-2025-3548 / bsc#1241367
  * This .patch takes the spirit of https://github.com/assimp/assimp/pull/6073
    as mentioned in the bug; adjusted to the code as it stands in the version
    of assimp (5.3.1) in use for openSUSE:Backports:SLE-15-SP6:Update</changelog>
</package>
<package pkgid="d368f38f18df8cae321e75951346966f4e4448c104d7ee133adc13a91b9e2573" name="assimp-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.1" rel="bp156.3.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1769083200">- Adding CVE-2025-3548.patch to address CVE-2025-3548 / bsc#1241367
  * This .patch takes the spirit of https://github.com/assimp/assimp/pull/6073
    as mentioned in the bug; adjusted to the code as it stands in the version
    of assimp (5.3.1) in use for openSUSE:Backports:SLE-15-SP6:Update</changelog>
</package>
<package pkgid="1b7fa10e896fbfca15a264a6d1ca18dd083cf6327a9ddf6dc0c61ac55b87d110" name="assimp-devel" arch="s390x">
  <version epoch="0" ver="5.3.1" rel="bp156.3.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1769083200">- Adding CVE-2025-3548.patch to address CVE-2025-3548 / bsc#1241367
  * This .patch takes the spirit of https://github.com/assimp/assimp/pull/6073
    as mentioned in the bug; adjusted to the code as it stands in the version
    of assimp (5.3.1) in use for openSUSE:Backports:SLE-15-SP6:Update</changelog>
</package>
<package pkgid="f1971374871e161fb2209923fdd59eb8a7f68d8823169571ba46ec095ca6672a" name="assimp-devel" arch="x86_64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1769083200">- Adding CVE-2025-3548.patch to address CVE-2025-3548 / bsc#1241367
  * This .patch takes the spirit of https://github.com/assimp/assimp/pull/6073
    as mentioned in the bug; adjusted to the code as it stands in the version
    of assimp (5.3.1) in use for openSUSE:Backports:SLE-15-SP6:Update</changelog>
</package>
<package pkgid="20b9d99b3fd45d768910a305c0f01f9811ce0cb0fab6d5030721e783f2f2c75d" name="assimp-devel" arch="aarch64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Add patch to fix build with GCC11:
  * 0001-Fix-build-with-GCC-11.patch (boo#1181859)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
</package>
<package pkgid="34606cd60c7e6953c89b2695c104c12def411774450bce5334c6190ace78a628" name="assimp-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.1" rel="bp156.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Add patch to fix build with GCC11:
  * 0001-Fix-build-with-GCC-11.patch (boo#1181859)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
</package>
<package pkgid="3aa44b919dc6199551f494aa5f5bf3c5bc8e393cccb89647fd2260dadb931871" name="assimp-devel" arch="s390x">
  <version epoch="0" ver="5.3.1" rel="bp156.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Add patch to fix build with GCC11:
  * 0001-Fix-build-with-GCC-11.patch (boo#1181859)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
</package>
<package pkgid="8d4a9da8d9c0583aa7b0dc433e912784fed223a97ccb4dc1944d79c414627141" name="assimp-devel" arch="x86_64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Add patch to fix build with GCC11:
  * 0001-Fix-build-with-GCC-11.patch (boo#1181859)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
</package>
<package pkgid="b3dadf50fa70b99addd11067213178daab7f4bd349c09e658f0ce23c13dd3b1c" name="assimp-devel" arch="aarch64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.6.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
</package>
<package pkgid="1f37ed1c30c982baeeb0045338de7c02ac7b833f592133041b86b7ce1b21c10c" name="assimp-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.1" rel="bp156.3.6.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
</package>
<package pkgid="25dcf94913ce757bbb16f6498436b5d02cec06ffcf88a8fc073fd586494b3b7d" name="assimp-devel" arch="s390x">
  <version epoch="0" ver="5.3.1" rel="bp156.3.6.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
</package>
<package pkgid="b3afcaa76880c560060b6b1d8b6515dfb1049603cdbbaf4669fa85c7a6b39433" name="assimp-devel" arch="x86_64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.6.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
</package>
<package pkgid="58d073b03b4d6e8e8074af155cf98049b6f41a8c8b4c969fb08542ad7a3e916e" name="assimp-devel" arch="aarch64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.9.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
</package>
<package pkgid="0bfc7991c6761aa291244f8fdf3908373b8b4c83f9ddbe498058a40615548617" name="assimp-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.1" rel="bp156.3.9.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
</package>
<package pkgid="9d61d94dd1618393a2b220c5107a78f8362e110d32819e280c923c72feb0c82f" name="assimp-devel" arch="s390x">
  <version epoch="0" ver="5.3.1" rel="bp156.3.9.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
</package>
<package pkgid="9146cabf54a1e74c9272aefed1cd6bd64c1e718d4b00b1f5a3b0e96491af1a18" name="assimp-devel" arch="x86_64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.9.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
</package>
<package pkgid="45346c9a0674b1e766941a2204d66afab60be7cd4eeff2554e2a0bcae530e078" name="atop" arch="aarch64">
  <version epoch="0" ver="2.11.1" rel="bp156.3.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1672660800">- Update to 2.8.0:
  * Rename AUTHOR in spec file
  * Adapt atopconvert for conversion to version 2.8
  * Atopacct.service verifies if psacct/acct is active (#227)
    To avoid that the atopacctd daemon and the (ps)acct service both
    try to activate process accounting continuously, the atopacct.service
    refuses to start when the (ps)acct service is already active.
  * Fix LLC output for Json
  * Solve format-overflow/maybe-uninitialized warnings
  * Reshuffle counters to ease raw file conversion
  * Recalculate average queue in parseable output
  * Corrected the order of inflight/avque
  * Add inflight and avque counters to parseable data
  * Fix BDELAY in priphead call to make_proc_prints for schedprocs
  * Correct the array index used for previous samples per-container CPU values
  * Reinstate dropped printing of avio msec values between 99.95 and 9995
  * photosyst: add ceph rbd disk display
  * photosys.c: correct the numa number for NUM and NUC
  * Timeout when setting semaphore in atop (#207)
  * Current CPU set to -1 for terminated process (#201)
    When a process has terminated (status 'E') the current CPU will be
    set to -1 (means: unknown) in the parsable output with label PRC.
  * Typo corrections and correction in man page
  * Introduce JSON output by '-J xxx'
  * Add missing counter iInCsumErrors to ICMP counters
  * supplement inflight I/O requests
  * Man page: clarify elapsed time in PRG parseable output
  * Exponent calulation for high counter might exceed column width
    When a column width was defined of e.g. 4 positions, the value
    99999 was shown as 100e3 instead of 99e3 (upward rounding caused
    an extra position).
  * PID selection can not be undone for same interval When pressing
    'I' to select particular PIDs and pressing 'I' again within the
    same interval to deselect by pressing the Enter-key, the deselection
    is ignored. Solved by reinitializing the input buffer.
  * Split the MEM line into two lines and add pagetable size Since it was
    hardly possible to view the values in the MEM line (too many), the memory
    utilization has been spread over two lines. The amount of memory used
    for page tables has been added.
  * Memory usage for TCP/UDP sockets
  * Add Documentation key to atop-rotate.service/.timer (#206)
  * Correct typos in man pages (#205)
  * Add cgroup support (#127) The current cgroup is registered
    for systems that are based on cgroup v2. Apart from the group name also
    relevant controller information is maintained, like the cpu.max and the
    memory.max (for the group itself and the most restrictive value in the
    parent groups).
  * Fix compiling error with -DHTTPSTATS
  * supplement tcpsock and udpsock memory consumption
  * Store PID width in header of raw log Register the number of positions
    for PID and TID numbers on the measured system in the raw log. In this
    way, the viewing of the raw log on another system will use the proper
    column width for PID/TID.
  * showhdrline: fix OOB access when COLS is too small
  * Fix disk busy in man page
  * Add block I/O delay to processes/threads
  * Move run_in_guest into various.c
  * Minor changes to text, column priority and coloring
  * Support pgin &amp; pgout
  * Correction on calibration (one too many)
  * Detect vmmemctl at two locations
  * Use dup2 instead of close+dup
  * Fix compiling warning
  * Calibrate the value of nthr for each process
  * photosyst.c: fixed path for vmmemctl
  * Fix typo in man page
  * Added link
  * Only print current CPU frequency when supported by CPU architecture
  * Lower priority of column 'numnode' in MEM line
  * Support per-second counter for LLC
  * Reformat status line info in initial screen
  * Add LLC in atop man page
  * Support LLC collection
  * Add OpenRC init scripts (atop, atopacct)
  * Support LLC collection
- Refresh patches:
  * harden_atop-rotate.service.patch
  * harden_atopacct.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673092800">- Update to 2.8.1:
  * Correct NUMA conversion in logfiles from version 2.7 to 2.8
  * Avoid buffer overflows during value formatting
  * Solve compiler warnings about format-truncation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683979200">- Update to 2.9.0:
  * Avoid compiler warning by limiting PSI average
  * Install cleanup function to avoid termination of parent process
  * add man for PAG steal
  * Oomkills event should not remain orange after boot values
  * Clarified atop man page
  * Closing bracket missing in synopsis
  * Add highlight concerning bar graph mode
  * Introduce bar graph mode Besides all detailed information that
    is supplied by atop on system and process level, a (character-based)
    bar graph can be shown about the utilization of the most critical system resources
  * Freeing ethlink should depend of ifdef
  * Added reset to indicate shadow file to be closed
  * fix atopacctd.c: failed to start atopacct.service
  * acctatop: reacquire acctfd to collect nprocexit for some bad cases
  * Calibrate nprocexit to avoid atop coredumps unexpectedly
  * json.c: fix avque counters output
  * Resolve compiler warnings from latest versions of GCC
  * Added versdate.h to make clean target
  * Revert "Added versdate.h to make clean target"
  * Added versdate.h to make clean target
  * fix calculation for scan and steal
  * only call str.decode if nvml returned bytes
  * Add exit epoch to parseable output PRG (solves issue #242)
  * Minor correction in man page for NVCSW/NIVCSW
  * Context switches (voluntary and involuntary) on process level incorrect
  * Various modifications releated to (non)voluntary context switches
  * Add nvcsw and nivcsw for each process
  * ifprop.c: Fix possible memory leak
  * Code cleanup and prototype additions
  * Consistency check on number of threads (solves issue #232)
  * atop-rotate.service: use restart instead of try-restart
  * Add link to atophttpd
- Update patches:
  * atop-makefile.patch
  * harden_atop-rotate.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704456000">- Update to 2.10.0:
  * Additional memory statistics on system level: amount of available
    memory, amount of memory used for Transparant Huge Pages, amount
    of memory used by two categories of static huge pages (usually
    2MiB and 1GiB), and the number of pages transferred to/from zswap.
  * Additional counters for the number of idle threads on system
    level and process level.
  * Refined view of memory bar graph, including free static huge pages.
  * Generic way to determine the container id or pod name for
    containerized processes.
  * Support for a BPF-based alternative[1] for the netatop kernel
    module to gather network statistics per process/thread.
  * Use the -z flag followed by a regex to prepend matching environment
    variables to the full command line that is shown per process (with key 'c').
  * Various bugfixes (like memory leak when switching to bar graph mode)
    and minor improvements.
  * Bugfix: failing malloc while starting atopsar (unprivileged) for a live measurement.
  * The program atophide can be used to make an extraction from an input
    raw log to an output raw log, optionally specifying a begin time and/or an
    end time. The output raw log can be anonymized, i.e. the hostname
    will be replaced, command names of non-standard commands will be
    replaced, all command arguments will be wiped, logical volume names
    will be replaced and NFS mounted volume names will be replaced.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722254400">- Update to 2.11.0:
  * Cgroups (version 2) support.
    Show the hierarchical structure of cgroups and the related metrics
    with key/option 'G', and define the cgroup depth with the keys/options
    2 till 7. Key/option 8 also shows the processes per cgroup level,
    except the kernel processes in the root cgroup. Key/option 9 shows
    the related processes per cgroup level including the kernel processes
    in the root cgroup. With key/option 'C' the output is sorted on
    CPU consumption (default), with key/option 'M' on memory consumption,
    and with key/option 'D' (requires root privileges) on disk utilization.
    Note: The collection of cgroup information per process is not supported any more.
  * Twin mode: live measurement with review option.
    In twin mode atop spawns into a lower level process that gathers
    the counters and writes them to a temporary raw file, and an upper level
    process that reads the counters from the temporary raw file and presents them to
    the user.
    The reading of the upper level process keeps in pace with the written samples
    of the lower level process for live measurements. However, when pressing the
    'r' (reset to measurement begin), the 'b' (branch to time stamp),
    or the 'T' (previous sample), the upper level process implicitly
    pauses with the possibility to review previous samples.
    The 'z' (explicit pause) can also be used to pause the live measurement.
    When pressing the 'z' again (continue after pause) viewing of the
    live measurement will be continued.
  * Various corrections related to JSON output.
  * Improved gathering of current CPU frequency.
  * Support more than 500 CPUs.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.
- Update atop-makefile.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1743422400">- Update to 2.11.1:
  * Atop will not connect to the TCP port of 'atopgpud' daemon any more
    by default. The flag -k can be used explicitly when 'atopgpud' is
    active. Also the code to parse the received strings is improved to
    avoid future issues with heap corruption.
  * The flag -K has been implemented to connect to netatop/netatop-bpf.
  * Fix CVE-2025-31160 (boo#1240393)</changelog>
</package>
<package pkgid="899dd14298df4afdef3ca4aab93098788c0bcc6347f5c6ca6ea4873cf61e6e60" name="atop" arch="i586">
  <version epoch="0" ver="2.11.1" rel="bp156.3.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1672660800">- Update to 2.8.0:
  * Rename AUTHOR in spec file
  * Adapt atopconvert for conversion to version 2.8
  * Atopacct.service verifies if psacct/acct is active (#227)
    To avoid that the atopacctd daemon and the (ps)acct service both
    try to activate process accounting continuously, the atopacct.service
    refuses to start when the (ps)acct service is already active.
  * Fix LLC output for Json
  * Solve format-overflow/maybe-uninitialized warnings
  * Reshuffle counters to ease raw file conversion
  * Recalculate average queue in parseable output
  * Corrected the order of inflight/avque
  * Add inflight and avque counters to parseable data
  * Fix BDELAY in priphead call to make_proc_prints for schedprocs
  * Correct the array index used for previous samples per-container CPU values
  * Reinstate dropped printing of avio msec values between 99.95 and 9995
  * photosyst: add ceph rbd disk display
  * photosys.c: correct the numa number for NUM and NUC
  * Timeout when setting semaphore in atop (#207)
  * Current CPU set to -1 for terminated process (#201)
    When a process has terminated (status 'E') the current CPU will be
    set to -1 (means: unknown) in the parsable output with label PRC.
  * Typo corrections and correction in man page
  * Introduce JSON output by '-J xxx'
  * Add missing counter iInCsumErrors to ICMP counters
  * supplement inflight I/O requests
  * Man page: clarify elapsed time in PRG parseable output
  * Exponent calulation for high counter might exceed column width
    When a column width was defined of e.g. 4 positions, the value
    99999 was shown as 100e3 instead of 99e3 (upward rounding caused
    an extra position).
  * PID selection can not be undone for same interval When pressing
    'I' to select particular PIDs and pressing 'I' again within the
    same interval to deselect by pressing the Enter-key, the deselection
    is ignored. Solved by reinitializing the input buffer.
  * Split the MEM line into two lines and add pagetable size Since it was
    hardly possible to view the values in the MEM line (too many), the memory
    utilization has been spread over two lines. The amount of memory used
    for page tables has been added.
  * Memory usage for TCP/UDP sockets
  * Add Documentation key to atop-rotate.service/.timer (#206)
  * Correct typos in man pages (#205)
  * Add cgroup support (#127) The current cgroup is registered
    for systems that are based on cgroup v2. Apart from the group name also
    relevant controller information is maintained, like the cpu.max and the
    memory.max (for the group itself and the most restrictive value in the
    parent groups).
  * Fix compiling error with -DHTTPSTATS
  * supplement tcpsock and udpsock memory consumption
  * Store PID width in header of raw log Register the number of positions
    for PID and TID numbers on the measured system in the raw log. In this
    way, the viewing of the raw log on another system will use the proper
    column width for PID/TID.
  * showhdrline: fix OOB access when COLS is too small
  * Fix disk busy in man page
  * Add block I/O delay to processes/threads
  * Move run_in_guest into various.c
  * Minor changes to text, column priority and coloring
  * Support pgin &amp; pgout
  * Correction on calibration (one too many)
  * Detect vmmemctl at two locations
  * Use dup2 instead of close+dup
  * Fix compiling warning
  * Calibrate the value of nthr for each process
  * photosyst.c: fixed path for vmmemctl
  * Fix typo in man page
  * Added link
  * Only print current CPU frequency when supported by CPU architecture
  * Lower priority of column 'numnode' in MEM line
  * Support per-second counter for LLC
  * Reformat status line info in initial screen
  * Add LLC in atop man page
  * Support LLC collection
  * Add OpenRC init scripts (atop, atopacct)
  * Support LLC collection
- Refresh patches:
  * harden_atop-rotate.service.patch
  * harden_atopacct.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673092800">- Update to 2.8.1:
  * Correct NUMA conversion in logfiles from version 2.7 to 2.8
  * Avoid buffer overflows during value formatting
  * Solve compiler warnings about format-truncation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683979200">- Update to 2.9.0:
  * Avoid compiler warning by limiting PSI average
  * Install cleanup function to avoid termination of parent process
  * add man for PAG steal
  * Oomkills event should not remain orange after boot values
  * Clarified atop man page
  * Closing bracket missing in synopsis
  * Add highlight concerning bar graph mode
  * Introduce bar graph mode Besides all detailed information that
    is supplied by atop on system and process level, a (character-based)
    bar graph can be shown about the utilization of the most critical system resources
  * Freeing ethlink should depend of ifdef
  * Added reset to indicate shadow file to be closed
  * fix atopacctd.c: failed to start atopacct.service
  * acctatop: reacquire acctfd to collect nprocexit for some bad cases
  * Calibrate nprocexit to avoid atop coredumps unexpectedly
  * json.c: fix avque counters output
  * Resolve compiler warnings from latest versions of GCC
  * Added versdate.h to make clean target
  * Revert "Added versdate.h to make clean target"
  * Added versdate.h to make clean target
  * fix calculation for scan and steal
  * only call str.decode if nvml returned bytes
  * Add exit epoch to parseable output PRG (solves issue #242)
  * Minor correction in man page for NVCSW/NIVCSW
  * Context switches (voluntary and involuntary) on process level incorrect
  * Various modifications releated to (non)voluntary context switches
  * Add nvcsw and nivcsw for each process
  * ifprop.c: Fix possible memory leak
  * Code cleanup and prototype additions
  * Consistency check on number of threads (solves issue #232)
  * atop-rotate.service: use restart instead of try-restart
  * Add link to atophttpd
- Update patches:
  * atop-makefile.patch
  * harden_atop-rotate.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704456000">- Update to 2.10.0:
  * Additional memory statistics on system level: amount of available
    memory, amount of memory used for Transparant Huge Pages, amount
    of memory used by two categories of static huge pages (usually
    2MiB and 1GiB), and the number of pages transferred to/from zswap.
  * Additional counters for the number of idle threads on system
    level and process level.
  * Refined view of memory bar graph, including free static huge pages.
  * Generic way to determine the container id or pod name for
    containerized processes.
  * Support for a BPF-based alternative[1] for the netatop kernel
    module to gather network statistics per process/thread.
  * Use the -z flag followed by a regex to prepend matching environment
    variables to the full command line that is shown per process (with key 'c').
  * Various bugfixes (like memory leak when switching to bar graph mode)
    and minor improvements.
  * Bugfix: failing malloc while starting atopsar (unprivileged) for a live measurement.
  * The program atophide can be used to make an extraction from an input
    raw log to an output raw log, optionally specifying a begin time and/or an
    end time. The output raw log can be anonymized, i.e. the hostname
    will be replaced, command names of non-standard commands will be
    replaced, all command arguments will be wiped, logical volume names
    will be replaced and NFS mounted volume names will be replaced.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722254400">- Update to 2.11.0:
  * Cgroups (version 2) support.
    Show the hierarchical structure of cgroups and the related metrics
    with key/option 'G', and define the cgroup depth with the keys/options
    2 till 7. Key/option 8 also shows the processes per cgroup level,
    except the kernel processes in the root cgroup. Key/option 9 shows
    the related processes per cgroup level including the kernel processes
    in the root cgroup. With key/option 'C' the output is sorted on
    CPU consumption (default), with key/option 'M' on memory consumption,
    and with key/option 'D' (requires root privileges) on disk utilization.
    Note: The collection of cgroup information per process is not supported any more.
  * Twin mode: live measurement with review option.
    In twin mode atop spawns into a lower level process that gathers
    the counters and writes them to a temporary raw file, and an upper level
    process that reads the counters from the temporary raw file and presents them to
    the user.
    The reading of the upper level process keeps in pace with the written samples
    of the lower level process for live measurements. However, when pressing the
    'r' (reset to measurement begin), the 'b' (branch to time stamp),
    or the 'T' (previous sample), the upper level process implicitly
    pauses with the possibility to review previous samples.
    The 'z' (explicit pause) can also be used to pause the live measurement.
    When pressing the 'z' again (continue after pause) viewing of the
    live measurement will be continued.
  * Various corrections related to JSON output.
  * Improved gathering of current CPU frequency.
  * Support more than 500 CPUs.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.
- Update atop-makefile.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1743422400">- Update to 2.11.1:
  * Atop will not connect to the TCP port of 'atopgpud' daemon any more
    by default. The flag -k can be used explicitly when 'atopgpud' is
    active. Also the code to parse the received strings is improved to
    avoid future issues with heap corruption.
  * The flag -K has been implemented to connect to netatop/netatop-bpf.
  * Fix CVE-2025-31160 (boo#1240393)</changelog>
</package>
<package pkgid="60eb0c7fe0712dfc143eb627d976440208104348a75c6798fb4312fa642ccd0d" name="atop" arch="ppc64le">
  <version epoch="0" ver="2.11.1" rel="bp156.3.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1672660800">- Update to 2.8.0:
  * Rename AUTHOR in spec file
  * Adapt atopconvert for conversion to version 2.8
  * Atopacct.service verifies if psacct/acct is active (#227)
    To avoid that the atopacctd daemon and the (ps)acct service both
    try to activate process accounting continuously, the atopacct.service
    refuses to start when the (ps)acct service is already active.
  * Fix LLC output for Json
  * Solve format-overflow/maybe-uninitialized warnings
  * Reshuffle counters to ease raw file conversion
  * Recalculate average queue in parseable output
  * Corrected the order of inflight/avque
  * Add inflight and avque counters to parseable data
  * Fix BDELAY in priphead call to make_proc_prints for schedprocs
  * Correct the array index used for previous samples per-container CPU values
  * Reinstate dropped printing of avio msec values between 99.95 and 9995
  * photosyst: add ceph rbd disk display
  * photosys.c: correct the numa number for NUM and NUC
  * Timeout when setting semaphore in atop (#207)
  * Current CPU set to -1 for terminated process (#201)
    When a process has terminated (status 'E') the current CPU will be
    set to -1 (means: unknown) in the parsable output with label PRC.
  * Typo corrections and correction in man page
  * Introduce JSON output by '-J xxx'
  * Add missing counter iInCsumErrors to ICMP counters
  * supplement inflight I/O requests
  * Man page: clarify elapsed time in PRG parseable output
  * Exponent calulation for high counter might exceed column width
    When a column width was defined of e.g. 4 positions, the value
    99999 was shown as 100e3 instead of 99e3 (upward rounding caused
    an extra position).
  * PID selection can not be undone for same interval When pressing
    'I' to select particular PIDs and pressing 'I' again within the
    same interval to deselect by pressing the Enter-key, the deselection
    is ignored. Solved by reinitializing the input buffer.
  * Split the MEM line into two lines and add pagetable size Since it was
    hardly possible to view the values in the MEM line (too many), the memory
    utilization has been spread over two lines. The amount of memory used
    for page tables has been added.
  * Memory usage for TCP/UDP sockets
  * Add Documentation key to atop-rotate.service/.timer (#206)
  * Correct typos in man pages (#205)
  * Add cgroup support (#127) The current cgroup is registered
    for systems that are based on cgroup v2. Apart from the group name also
    relevant controller information is maintained, like the cpu.max and the
    memory.max (for the group itself and the most restrictive value in the
    parent groups).
  * Fix compiling error with -DHTTPSTATS
  * supplement tcpsock and udpsock memory consumption
  * Store PID width in header of raw log Register the number of positions
    for PID and TID numbers on the measured system in the raw log. In this
    way, the viewing of the raw log on another system will use the proper
    column width for PID/TID.
  * showhdrline: fix OOB access when COLS is too small
  * Fix disk busy in man page
  * Add block I/O delay to processes/threads
  * Move run_in_guest into various.c
  * Minor changes to text, column priority and coloring
  * Support pgin &amp; pgout
  * Correction on calibration (one too many)
  * Detect vmmemctl at two locations
  * Use dup2 instead of close+dup
  * Fix compiling warning
  * Calibrate the value of nthr for each process
  * photosyst.c: fixed path for vmmemctl
  * Fix typo in man page
  * Added link
  * Only print current CPU frequency when supported by CPU architecture
  * Lower priority of column 'numnode' in MEM line
  * Support per-second counter for LLC
  * Reformat status line info in initial screen
  * Add LLC in atop man page
  * Support LLC collection
  * Add OpenRC init scripts (atop, atopacct)
  * Support LLC collection
- Refresh patches:
  * harden_atop-rotate.service.patch
  * harden_atopacct.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673092800">- Update to 2.8.1:
  * Correct NUMA conversion in logfiles from version 2.7 to 2.8
  * Avoid buffer overflows during value formatting
  * Solve compiler warnings about format-truncation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683979200">- Update to 2.9.0:
  * Avoid compiler warning by limiting PSI average
  * Install cleanup function to avoid termination of parent process
  * add man for PAG steal
  * Oomkills event should not remain orange after boot values
  * Clarified atop man page
  * Closing bracket missing in synopsis
  * Add highlight concerning bar graph mode
  * Introduce bar graph mode Besides all detailed information that
    is supplied by atop on system and process level, a (character-based)
    bar graph can be shown about the utilization of the most critical system resources
  * Freeing ethlink should depend of ifdef
  * Added reset to indicate shadow file to be closed
  * fix atopacctd.c: failed to start atopacct.service
  * acctatop: reacquire acctfd to collect nprocexit for some bad cases
  * Calibrate nprocexit to avoid atop coredumps unexpectedly
  * json.c: fix avque counters output
  * Resolve compiler warnings from latest versions of GCC
  * Added versdate.h to make clean target
  * Revert "Added versdate.h to make clean target"
  * Added versdate.h to make clean target
  * fix calculation for scan and steal
  * only call str.decode if nvml returned bytes
  * Add exit epoch to parseable output PRG (solves issue #242)
  * Minor correction in man page for NVCSW/NIVCSW
  * Context switches (voluntary and involuntary) on process level incorrect
  * Various modifications releated to (non)voluntary context switches
  * Add nvcsw and nivcsw for each process
  * ifprop.c: Fix possible memory leak
  * Code cleanup and prototype additions
  * Consistency check on number of threads (solves issue #232)
  * atop-rotate.service: use restart instead of try-restart
  * Add link to atophttpd
- Update patches:
  * atop-makefile.patch
  * harden_atop-rotate.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704456000">- Update to 2.10.0:
  * Additional memory statistics on system level: amount of available
    memory, amount of memory used for Transparant Huge Pages, amount
    of memory used by two categories of static huge pages (usually
    2MiB and 1GiB), and the number of pages transferred to/from zswap.
  * Additional counters for the number of idle threads on system
    level and process level.
  * Refined view of memory bar graph, including free static huge pages.
  * Generic way to determine the container id or pod name for
    containerized processes.
  * Support for a BPF-based alternative[1] for the netatop kernel
    module to gather network statistics per process/thread.
  * Use the -z flag followed by a regex to prepend matching environment
    variables to the full command line that is shown per process (with key 'c').
  * Various bugfixes (like memory leak when switching to bar graph mode)
    and minor improvements.
  * Bugfix: failing malloc while starting atopsar (unprivileged) for a live measurement.
  * The program atophide can be used to make an extraction from an input
    raw log to an output raw log, optionally specifying a begin time and/or an
    end time. The output raw log can be anonymized, i.e. the hostname
    will be replaced, command names of non-standard commands will be
    replaced, all command arguments will be wiped, logical volume names
    will be replaced and NFS mounted volume names will be replaced.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722254400">- Update to 2.11.0:
  * Cgroups (version 2) support.
    Show the hierarchical structure of cgroups and the related metrics
    with key/option 'G', and define the cgroup depth with the keys/options
    2 till 7. Key/option 8 also shows the processes per cgroup level,
    except the kernel processes in the root cgroup. Key/option 9 shows
    the related processes per cgroup level including the kernel processes
    in the root cgroup. With key/option 'C' the output is sorted on
    CPU consumption (default), with key/option 'M' on memory consumption,
    and with key/option 'D' (requires root privileges) on disk utilization.
    Note: The collection of cgroup information per process is not supported any more.
  * Twin mode: live measurement with review option.
    In twin mode atop spawns into a lower level process that gathers
    the counters and writes them to a temporary raw file, and an upper level
    process that reads the counters from the temporary raw file and presents them to
    the user.
    The reading of the upper level process keeps in pace with the written samples
    of the lower level process for live measurements. However, when pressing the
    'r' (reset to measurement begin), the 'b' (branch to time stamp),
    or the 'T' (previous sample), the upper level process implicitly
    pauses with the possibility to review previous samples.
    The 'z' (explicit pause) can also be used to pause the live measurement.
    When pressing the 'z' again (continue after pause) viewing of the
    live measurement will be continued.
  * Various corrections related to JSON output.
  * Improved gathering of current CPU frequency.
  * Support more than 500 CPUs.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.
- Update atop-makefile.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1743422400">- Update to 2.11.1:
  * Atop will not connect to the TCP port of 'atopgpud' daemon any more
    by default. The flag -k can be used explicitly when 'atopgpud' is
    active. Also the code to parse the received strings is improved to
    avoid future issues with heap corruption.
  * The flag -K has been implemented to connect to netatop/netatop-bpf.
  * Fix CVE-2025-31160 (boo#1240393)</changelog>
</package>
<package pkgid="f6b5e6c9e89c46f427380a8a62ed3b3aba577bf9960c1f2920ed6cc902dcc5a7" name="atop" arch="s390x">
  <version epoch="0" ver="2.11.1" rel="bp156.3.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1672660800">- Update to 2.8.0:
  * Rename AUTHOR in spec file
  * Adapt atopconvert for conversion to version 2.8
  * Atopacct.service verifies if psacct/acct is active (#227)
    To avoid that the atopacctd daemon and the (ps)acct service both
    try to activate process accounting continuously, the atopacct.service
    refuses to start when the (ps)acct service is already active.
  * Fix LLC output for Json
  * Solve format-overflow/maybe-uninitialized warnings
  * Reshuffle counters to ease raw file conversion
  * Recalculate average queue in parseable output
  * Corrected the order of inflight/avque
  * Add inflight and avque counters to parseable data
  * Fix BDELAY in priphead call to make_proc_prints for schedprocs
  * Correct the array index used for previous samples per-container CPU values
  * Reinstate dropped printing of avio msec values between 99.95 and 9995
  * photosyst: add ceph rbd disk display
  * photosys.c: correct the numa number for NUM and NUC
  * Timeout when setting semaphore in atop (#207)
  * Current CPU set to -1 for terminated process (#201)
    When a process has terminated (status 'E') the current CPU will be
    set to -1 (means: unknown) in the parsable output with label PRC.
  * Typo corrections and correction in man page
  * Introduce JSON output by '-J xxx'
  * Add missing counter iInCsumErrors to ICMP counters
  * supplement inflight I/O requests
  * Man page: clarify elapsed time in PRG parseable output
  * Exponent calulation for high counter might exceed column width
    When a column width was defined of e.g. 4 positions, the value
    99999 was shown as 100e3 instead of 99e3 (upward rounding caused
    an extra position).
  * PID selection can not be undone for same interval When pressing
    'I' to select particular PIDs and pressing 'I' again within the
    same interval to deselect by pressing the Enter-key, the deselection
    is ignored. Solved by reinitializing the input buffer.
  * Split the MEM line into two lines and add pagetable size Since it was
    hardly possible to view the values in the MEM line (too many), the memory
    utilization has been spread over two lines. The amount of memory used
    for page tables has been added.
  * Memory usage for TCP/UDP sockets
  * Add Documentation key to atop-rotate.service/.timer (#206)
  * Correct typos in man pages (#205)
  * Add cgroup support (#127) The current cgroup is registered
    for systems that are based on cgroup v2. Apart from the group name also
    relevant controller information is maintained, like the cpu.max and the
    memory.max (for the group itself and the most restrictive value in the
    parent groups).
  * Fix compiling error with -DHTTPSTATS
  * supplement tcpsock and udpsock memory consumption
  * Store PID width in header of raw log Register the number of positions
    for PID and TID numbers on the measured system in the raw log. In this
    way, the viewing of the raw log on another system will use the proper
    column width for PID/TID.
  * showhdrline: fix OOB access when COLS is too small
  * Fix disk busy in man page
  * Add block I/O delay to processes/threads
  * Move run_in_guest into various.c
  * Minor changes to text, column priority and coloring
  * Support pgin &amp; pgout
  * Correction on calibration (one too many)
  * Detect vmmemctl at two locations
  * Use dup2 instead of close+dup
  * Fix compiling warning
  * Calibrate the value of nthr for each process
  * photosyst.c: fixed path for vmmemctl
  * Fix typo in man page
  * Added link
  * Only print current CPU frequency when supported by CPU architecture
  * Lower priority of column 'numnode' in MEM line
  * Support per-second counter for LLC
  * Reformat status line info in initial screen
  * Add LLC in atop man page
  * Support LLC collection
  * Add OpenRC init scripts (atop, atopacct)
  * Support LLC collection
- Refresh patches:
  * harden_atop-rotate.service.patch
  * harden_atopacct.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673092800">- Update to 2.8.1:
  * Correct NUMA conversion in logfiles from version 2.7 to 2.8
  * Avoid buffer overflows during value formatting
  * Solve compiler warnings about format-truncation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683979200">- Update to 2.9.0:
  * Avoid compiler warning by limiting PSI average
  * Install cleanup function to avoid termination of parent process
  * add man for PAG steal
  * Oomkills event should not remain orange after boot values
  * Clarified atop man page
  * Closing bracket missing in synopsis
  * Add highlight concerning bar graph mode
  * Introduce bar graph mode Besides all detailed information that
    is supplied by atop on system and process level, a (character-based)
    bar graph can be shown about the utilization of the most critical system resources
  * Freeing ethlink should depend of ifdef
  * Added reset to indicate shadow file to be closed
  * fix atopacctd.c: failed to start atopacct.service
  * acctatop: reacquire acctfd to collect nprocexit for some bad cases
  * Calibrate nprocexit to avoid atop coredumps unexpectedly
  * json.c: fix avque counters output
  * Resolve compiler warnings from latest versions of GCC
  * Added versdate.h to make clean target
  * Revert "Added versdate.h to make clean target"
  * Added versdate.h to make clean target
  * fix calculation for scan and steal
  * only call str.decode if nvml returned bytes
  * Add exit epoch to parseable output PRG (solves issue #242)
  * Minor correction in man page for NVCSW/NIVCSW
  * Context switches (voluntary and involuntary) on process level incorrect
  * Various modifications releated to (non)voluntary context switches
  * Add nvcsw and nivcsw for each process
  * ifprop.c: Fix possible memory leak
  * Code cleanup and prototype additions
  * Consistency check on number of threads (solves issue #232)
  * atop-rotate.service: use restart instead of try-restart
  * Add link to atophttpd
- Update patches:
  * atop-makefile.patch
  * harden_atop-rotate.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704456000">- Update to 2.10.0:
  * Additional memory statistics on system level: amount of available
    memory, amount of memory used for Transparant Huge Pages, amount
    of memory used by two categories of static huge pages (usually
    2MiB and 1GiB), and the number of pages transferred to/from zswap.
  * Additional counters for the number of idle threads on system
    level and process level.
  * Refined view of memory bar graph, including free static huge pages.
  * Generic way to determine the container id or pod name for
    containerized processes.
  * Support for a BPF-based alternative[1] for the netatop kernel
    module to gather network statistics per process/thread.
  * Use the -z flag followed by a regex to prepend matching environment
    variables to the full command line that is shown per process (with key 'c').
  * Various bugfixes (like memory leak when switching to bar graph mode)
    and minor improvements.
  * Bugfix: failing malloc while starting atopsar (unprivileged) for a live measurement.
  * The program atophide can be used to make an extraction from an input
    raw log to an output raw log, optionally specifying a begin time and/or an
    end time. The output raw log can be anonymized, i.e. the hostname
    will be replaced, command names of non-standard commands will be
    replaced, all command arguments will be wiped, logical volume names
    will be replaced and NFS mounted volume names will be replaced.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722254400">- Update to 2.11.0:
  * Cgroups (version 2) support.
    Show the hierarchical structure of cgroups and the related metrics
    with key/option 'G', and define the cgroup depth with the keys/options
    2 till 7. Key/option 8 also shows the processes per cgroup level,
    except the kernel processes in the root cgroup. Key/option 9 shows
    the related processes per cgroup level including the kernel processes
    in the root cgroup. With key/option 'C' the output is sorted on
    CPU consumption (default), with key/option 'M' on memory consumption,
    and with key/option 'D' (requires root privileges) on disk utilization.
    Note: The collection of cgroup information per process is not supported any more.
  * Twin mode: live measurement with review option.
    In twin mode atop spawns into a lower level process that gathers
    the counters and writes them to a temporary raw file, and an upper level
    process that reads the counters from the temporary raw file and presents them to
    the user.
    The reading of the upper level process keeps in pace with the written samples
    of the lower level process for live measurements. However, when pressing the
    'r' (reset to measurement begin), the 'b' (branch to time stamp),
    or the 'T' (previous sample), the upper level process implicitly
    pauses with the possibility to review previous samples.
    The 'z' (explicit pause) can also be used to pause the live measurement.
    When pressing the 'z' again (continue after pause) viewing of the
    live measurement will be continued.
  * Various corrections related to JSON output.
  * Improved gathering of current CPU frequency.
  * Support more than 500 CPUs.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.
- Update atop-makefile.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1743422400">- Update to 2.11.1:
  * Atop will not connect to the TCP port of 'atopgpud' daemon any more
    by default. The flag -k can be used explicitly when 'atopgpud' is
    active. Also the code to parse the received strings is improved to
    avoid future issues with heap corruption.
  * The flag -K has been implemented to connect to netatop/netatop-bpf.
  * Fix CVE-2025-31160 (boo#1240393)</changelog>
</package>
<package pkgid="dc0cd7a47bec764bc6ebce5c238577a186fecd826b4fa62cf9df041d1ca28188" name="atop" arch="src">
  <version epoch="0" ver="2.11.1" rel="bp156.3.3.1"/>
  <changelog author="graham@andtech.eu" date="1326110400">- change License: and %if statement in .spec</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1326110401">- remove licenses package mumbo-jumbo altogether
- use pristine upstream tarball instead of recompressing as bz2
- added Recommends for logrotate and cron in the -daemon subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1343304000">- update to 1.27-3:
  * service file for systemd
  * solved division-by-zero when maxfreq=0 and more precise coloring of
    concerning CPU-values when CPU overloaded
  * if setuid-root is set for atop, root-privileges are regained when reading
    /proc/pid/io (nowadays only readable for root) to obtain the disk stats per
    process
  * added EMC Power device recognition
  * better recognition of version of process accounting file
  * improved error handling when not enough columns or lines
  * suppress sorting of system resources by key F or flag -F (toggle)
  * create unique /tmp name for decompressed raw file
  * numerous cosmetic changes and man-page updates
  * improved screen handling
  * limited maximum file-size for process accounting file (200 MiB)
  * improved handling of process accounting
  * new key 'S' to make selections of system resources like logical volumes,
    disks and network interfaces (regular expression)
  * use of arrow-keys and PgUp/PgDown for vertical scroll
  * use of -&gt; and &lt;- keys for horizontal scroll of command line
  * support statistics for virtio disks (vd*)
  * fetching and displaying of individual threads
  * add various details about the memory usage of processes, like stack size,
    data size, shared library size and size used on swap
  * show new value about swap space usage per process
  * colors are shown now for separate system-level counters instead of for the
    entire line with counters
  * enhanced security: improved dropping of root privileges</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1672660800">- Update to 2.8.0:
  * Rename AUTHOR in spec file
  * Adapt atopconvert for conversion to version 2.8
  * Atopacct.service verifies if psacct/acct is active (#227)
    To avoid that the atopacctd daemon and the (ps)acct service both
    try to activate process accounting continuously, the atopacct.service
    refuses to start when the (ps)acct service is already active.
  * Fix LLC output for Json
  * Solve format-overflow/maybe-uninitialized warnings
  * Reshuffle counters to ease raw file conversion
  * Recalculate average queue in parseable output
  * Corrected the order of inflight/avque
  * Add inflight and avque counters to parseable data
  * Fix BDELAY in priphead call to make_proc_prints for schedprocs
  * Correct the array index used for previous samples per-container CPU values
  * Reinstate dropped printing of avio msec values between 99.95 and 9995
  * photosyst: add ceph rbd disk display
  * photosys.c: correct the numa number for NUM and NUC
  * Timeout when setting semaphore in atop (#207)
  * Current CPU set to -1 for terminated process (#201)
    When a process has terminated (status 'E') the current CPU will be
    set to -1 (means: unknown) in the parsable output with label PRC.
  * Typo corrections and correction in man page
  * Introduce JSON output by '-J xxx'
  * Add missing counter iInCsumErrors to ICMP counters
  * supplement inflight I/O requests
  * Man page: clarify elapsed time in PRG parseable output
  * Exponent calulation for high counter might exceed column width
    When a column width was defined of e.g. 4 positions, the value
    99999 was shown as 100e3 instead of 99e3 (upward rounding caused
    an extra position).
  * PID selection can not be undone for same interval When pressing
    'I' to select particular PIDs and pressing 'I' again within the
    same interval to deselect by pressing the Enter-key, the deselection
    is ignored. Solved by reinitializing the input buffer.
  * Split the MEM line into two lines and add pagetable size Since it was
    hardly possible to view the values in the MEM line (too many), the memory
    utilization has been spread over two lines. The amount of memory used
    for page tables has been added.
  * Memory usage for TCP/UDP sockets
  * Add Documentation key to atop-rotate.service/.timer (#206)
  * Correct typos in man pages (#205)
  * Add cgroup support (#127) The current cgroup is registered
    for systems that are based on cgroup v2. Apart from the group name also
    relevant controller information is maintained, like the cpu.max and the
    memory.max (for the group itself and the most restrictive value in the
    parent groups).
  * Fix compiling error with -DHTTPSTATS
  * supplement tcpsock and udpsock memory consumption
  * Store PID width in header of raw log Register the number of positions
    for PID and TID numbers on the measured system in the raw log. In this
    way, the viewing of the raw log on another system will use the proper
    column width for PID/TID.
  * showhdrline: fix OOB access when COLS is too small
  * Fix disk busy in man page
  * Add block I/O delay to processes/threads
  * Move run_in_guest into various.c
  * Minor changes to text, column priority and coloring
  * Support pgin &amp; pgout
  * Correction on calibration (one too many)
  * Detect vmmemctl at two locations
  * Use dup2 instead of close+dup
  * Fix compiling warning
  * Calibrate the value of nthr for each process
  * photosyst.c: fixed path for vmmemctl
  * Fix typo in man page
  * Added link
  * Only print current CPU frequency when supported by CPU architecture
  * Lower priority of column 'numnode' in MEM line
  * Support per-second counter for LLC
  * Reformat status line info in initial screen
  * Add LLC in atop man page
  * Support LLC collection
  * Add OpenRC init scripts (atop, atopacct)
  * Support LLC collection
- Refresh patches:
  * harden_atop-rotate.service.patch
  * harden_atopacct.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673092800">- Update to 2.8.1:
  * Correct NUMA conversion in logfiles from version 2.7 to 2.8
  * Avoid buffer overflows during value formatting
  * Solve compiler warnings about format-truncation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683979200">- Update to 2.9.0:
  * Avoid compiler warning by limiting PSI average
  * Install cleanup function to avoid termination of parent process
  * add man for PAG steal
  * Oomkills event should not remain orange after boot values
  * Clarified atop man page
  * Closing bracket missing in synopsis
  * Add highlight concerning bar graph mode
  * Introduce bar graph mode Besides all detailed information that
    is supplied by atop on system and process level, a (character-based)
    bar graph can be shown about the utilization of the most critical system resources
  * Freeing ethlink should depend of ifdef
  * Added reset to indicate shadow file to be closed
  * fix atopacctd.c: failed to start atopacct.service
  * acctatop: reacquire acctfd to collect nprocexit for some bad cases
  * Calibrate nprocexit to avoid atop coredumps unexpectedly
  * json.c: fix avque counters output
  * Resolve compiler warnings from latest versions of GCC
  * Added versdate.h to make clean target
  * Revert "Added versdate.h to make clean target"
  * Added versdate.h to make clean target
  * fix calculation for scan and steal
  * only call str.decode if nvml returned bytes
  * Add exit epoch to parseable output PRG (solves issue #242)
  * Minor correction in man page for NVCSW/NIVCSW
  * Context switches (voluntary and involuntary) on process level incorrect
  * Various modifications releated to (non)voluntary context switches
  * Add nvcsw and nivcsw for each process
  * ifprop.c: Fix possible memory leak
  * Code cleanup and prototype additions
  * Consistency check on number of threads (solves issue #232)
  * atop-rotate.service: use restart instead of try-restart
  * Add link to atophttpd
- Update patches:
  * atop-makefile.patch
  * harden_atop-rotate.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704456000">- Update to 2.10.0:
  * Additional memory statistics on system level: amount of available
    memory, amount of memory used for Transparant Huge Pages, amount
    of memory used by two categories of static huge pages (usually
    2MiB and 1GiB), and the number of pages transferred to/from zswap.
  * Additional counters for the number of idle threads on system
    level and process level.
  * Refined view of memory bar graph, including free static huge pages.
  * Generic way to determine the container id or pod name for
    containerized processes.
  * Support for a BPF-based alternative[1] for the netatop kernel
    module to gather network statistics per process/thread.
  * Use the -z flag followed by a regex to prepend matching environment
    variables to the full command line that is shown per process (with key 'c').
  * Various bugfixes (like memory leak when switching to bar graph mode)
    and minor improvements.
  * Bugfix: failing malloc while starting atopsar (unprivileged) for a live measurement.
  * The program atophide can be used to make an extraction from an input
    raw log to an output raw log, optionally specifying a begin time and/or an
    end time. The output raw log can be anonymized, i.e. the hostname
    will be replaced, command names of non-standard commands will be
    replaced, all command arguments will be wiped, logical volume names
    will be replaced and NFS mounted volume names will be replaced.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722254400">- Update to 2.11.0:
  * Cgroups (version 2) support.
    Show the hierarchical structure of cgroups and the related metrics
    with key/option 'G', and define the cgroup depth with the keys/options
    2 till 7. Key/option 8 also shows the processes per cgroup level,
    except the kernel processes in the root cgroup. Key/option 9 shows
    the related processes per cgroup level including the kernel processes
    in the root cgroup. With key/option 'C' the output is sorted on
    CPU consumption (default), with key/option 'M' on memory consumption,
    and with key/option 'D' (requires root privileges) on disk utilization.
    Note: The collection of cgroup information per process is not supported any more.
  * Twin mode: live measurement with review option.
    In twin mode atop spawns into a lower level process that gathers
    the counters and writes them to a temporary raw file, and an upper level
    process that reads the counters from the temporary raw file and presents them to
    the user.
    The reading of the upper level process keeps in pace with the written samples
    of the lower level process for live measurements. However, when pressing the
    'r' (reset to measurement begin), the 'b' (branch to time stamp),
    or the 'T' (previous sample), the upper level process implicitly
    pauses with the possibility to review previous samples.
    The 'z' (explicit pause) can also be used to pause the live measurement.
    When pressing the 'z' again (continue after pause) viewing of the
    live measurement will be continued.
  * Various corrections related to JSON output.
  * Improved gathering of current CPU frequency.
  * Support more than 500 CPUs.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.
- Update atop-makefile.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1743422400">- Update to 2.11.1:
  * Atop will not connect to the TCP port of 'atopgpud' daemon any more
    by default. The flag -k can be used explicitly when 'atopgpud' is
    active. Also the code to parse the received strings is improved to
    avoid future issues with heap corruption.
  * The flag -K has been implemented to connect to netatop/netatop-bpf.
  * Fix CVE-2025-31160 (boo#1240393)</changelog>
</package>
<package pkgid="399703900a52b4954d51d6d417be6bd9496d8d344ca6ae0af4fef2412914312a" name="atop" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="bp156.3.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1672660800">- Update to 2.8.0:
  * Rename AUTHOR in spec file
  * Adapt atopconvert for conversion to version 2.8
  * Atopacct.service verifies if psacct/acct is active (#227)
    To avoid that the atopacctd daemon and the (ps)acct service both
    try to activate process accounting continuously, the atopacct.service
    refuses to start when the (ps)acct service is already active.
  * Fix LLC output for Json
  * Solve format-overflow/maybe-uninitialized warnings
  * Reshuffle counters to ease raw file conversion
  * Recalculate average queue in parseable output
  * Corrected the order of inflight/avque
  * Add inflight and avque counters to parseable data
  * Fix BDELAY in priphead call to make_proc_prints for schedprocs
  * Correct the array index used for previous samples per-container CPU values
  * Reinstate dropped printing of avio msec values between 99.95 and 9995
  * photosyst: add ceph rbd disk display
  * photosys.c: correct the numa number for NUM and NUC
  * Timeout when setting semaphore in atop (#207)
  * Current CPU set to -1 for terminated process (#201)
    When a process has terminated (status 'E') the current CPU will be
    set to -1 (means: unknown) in the parsable output with label PRC.
  * Typo corrections and correction in man page
  * Introduce JSON output by '-J xxx'
  * Add missing counter iInCsumErrors to ICMP counters
  * supplement inflight I/O requests
  * Man page: clarify elapsed time in PRG parseable output
  * Exponent calulation for high counter might exceed column width
    When a column width was defined of e.g. 4 positions, the value
    99999 was shown as 100e3 instead of 99e3 (upward rounding caused
    an extra position).
  * PID selection can not be undone for same interval When pressing
    'I' to select particular PIDs and pressing 'I' again within the
    same interval to deselect by pressing the Enter-key, the deselection
    is ignored. Solved by reinitializing the input buffer.
  * Split the MEM line into two lines and add pagetable size Since it was
    hardly possible to view the values in the MEM line (too many), the memory
    utilization has been spread over two lines. The amount of memory used
    for page tables has been added.
  * Memory usage for TCP/UDP sockets
  * Add Documentation key to atop-rotate.service/.timer (#206)
  * Correct typos in man pages (#205)
  * Add cgroup support (#127) The current cgroup is registered
    for systems that are based on cgroup v2. Apart from the group name also
    relevant controller information is maintained, like the cpu.max and the
    memory.max (for the group itself and the most restrictive value in the
    parent groups).
  * Fix compiling error with -DHTTPSTATS
  * supplement tcpsock and udpsock memory consumption
  * Store PID width in header of raw log Register the number of positions
    for PID and TID numbers on the measured system in the raw log. In this
    way, the viewing of the raw log on another system will use the proper
    column width for PID/TID.
  * showhdrline: fix OOB access when COLS is too small
  * Fix disk busy in man page
  * Add block I/O delay to processes/threads
  * Move run_in_guest into various.c
  * Minor changes to text, column priority and coloring
  * Support pgin &amp; pgout
  * Correction on calibration (one too many)
  * Detect vmmemctl at two locations
  * Use dup2 instead of close+dup
  * Fix compiling warning
  * Calibrate the value of nthr for each process
  * photosyst.c: fixed path for vmmemctl
  * Fix typo in man page
  * Added link
  * Only print current CPU frequency when supported by CPU architecture
  * Lower priority of column 'numnode' in MEM line
  * Support per-second counter for LLC
  * Reformat status line info in initial screen
  * Add LLC in atop man page
  * Support LLC collection
  * Add OpenRC init scripts (atop, atopacct)
  * Support LLC collection
- Refresh patches:
  * harden_atop-rotate.service.patch
  * harden_atopacct.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673092800">- Update to 2.8.1:
  * Correct NUMA conversion in logfiles from version 2.7 to 2.8
  * Avoid buffer overflows during value formatting
  * Solve compiler warnings about format-truncation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683979200">- Update to 2.9.0:
  * Avoid compiler warning by limiting PSI average
  * Install cleanup function to avoid termination of parent process
  * add man for PAG steal
  * Oomkills event should not remain orange after boot values
  * Clarified atop man page
  * Closing bracket missing in synopsis
  * Add highlight concerning bar graph mode
  * Introduce bar graph mode Besides all detailed information that
    is supplied by atop on system and process level, a (character-based)
    bar graph can be shown about the utilization of the most critical system resources
  * Freeing ethlink should depend of ifdef
  * Added reset to indicate shadow file to be closed
  * fix atopacctd.c: failed to start atopacct.service
  * acctatop: reacquire acctfd to collect nprocexit for some bad cases
  * Calibrate nprocexit to avoid atop coredumps unexpectedly
  * json.c: fix avque counters output
  * Resolve compiler warnings from latest versions of GCC
  * Added versdate.h to make clean target
  * Revert "Added versdate.h to make clean target"
  * Added versdate.h to make clean target
  * fix calculation for scan and steal
  * only call str.decode if nvml returned bytes
  * Add exit epoch to parseable output PRG (solves issue #242)
  * Minor correction in man page for NVCSW/NIVCSW
  * Context switches (voluntary and involuntary) on process level incorrect
  * Various modifications releated to (non)voluntary context switches
  * Add nvcsw and nivcsw for each process
  * ifprop.c: Fix possible memory leak
  * Code cleanup and prototype additions
  * Consistency check on number of threads (solves issue #232)
  * atop-rotate.service: use restart instead of try-restart
  * Add link to atophttpd
- Update patches:
  * atop-makefile.patch
  * harden_atop-rotate.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704456000">- Update to 2.10.0:
  * Additional memory statistics on system level: amount of available
    memory, amount of memory used for Transparant Huge Pages, amount
    of memory used by two categories of static huge pages (usually
    2MiB and 1GiB), and the number of pages transferred to/from zswap.
  * Additional counters for the number of idle threads on system
    level and process level.
  * Refined view of memory bar graph, including free static huge pages.
  * Generic way to determine the container id or pod name for
    containerized processes.
  * Support for a BPF-based alternative[1] for the netatop kernel
    module to gather network statistics per process/thread.
  * Use the -z flag followed by a regex to prepend matching environment
    variables to the full command line that is shown per process (with key 'c').
  * Various bugfixes (like memory leak when switching to bar graph mode)
    and minor improvements.
  * Bugfix: failing malloc while starting atopsar (unprivileged) for a live measurement.
  * The program atophide can be used to make an extraction from an input
    raw log to an output raw log, optionally specifying a begin time and/or an
    end time. The output raw log can be anonymized, i.e. the hostname
    will be replaced, command names of non-standard commands will be
    replaced, all command arguments will be wiped, logical volume names
    will be replaced and NFS mounted volume names will be replaced.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722254400">- Update to 2.11.0:
  * Cgroups (version 2) support.
    Show the hierarchical structure of cgroups and the related metrics
    with key/option 'G', and define the cgroup depth with the keys/options
    2 till 7. Key/option 8 also shows the processes per cgroup level,
    except the kernel processes in the root cgroup. Key/option 9 shows
    the related processes per cgroup level including the kernel processes
    in the root cgroup. With key/option 'C' the output is sorted on
    CPU consumption (default), with key/option 'M' on memory consumption,
    and with key/option 'D' (requires root privileges) on disk utilization.
    Note: The collection of cgroup information per process is not supported any more.
  * Twin mode: live measurement with review option.
    In twin mode atop spawns into a lower level process that gathers
    the counters and writes them to a temporary raw file, and an upper level
    process that reads the counters from the temporary raw file and presents them to
    the user.
    The reading of the upper level process keeps in pace with the written samples
    of the lower level process for live measurements. However, when pressing the
    'r' (reset to measurement begin), the 'b' (branch to time stamp),
    or the 'T' (previous sample), the upper level process implicitly
    pauses with the possibility to review previous samples.
    The 'z' (explicit pause) can also be used to pause the live measurement.
    When pressing the 'z' again (continue after pause) viewing of the
    live measurement will be continued.
  * Various corrections related to JSON output.
  * Improved gathering of current CPU frequency.
  * Support more than 500 CPUs.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.
- Update atop-makefile.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1743422400">- Update to 2.11.1:
  * Atop will not connect to the TCP port of 'atopgpud' daemon any more
    by default. The flag -k can be used explicitly when 'atopgpud' is
    active. Also the code to parse the received strings is improved to
    avoid future issues with heap corruption.
  * The flag -K has been implemented to connect to netatop/netatop-bpf.
  * Fix CVE-2025-31160 (boo#1240393)</changelog>
</package>
<package pkgid="6250256ccb7b70bae75a3fb83c0cb30b5acccd8b73c247a064444cbbda233054" name="atop-daemon" arch="aarch64">
  <version epoch="0" ver="2.11.1" rel="bp156.3.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1672660800">- Update to 2.8.0:
  * Rename AUTHOR in spec file
  * Adapt atopconvert for conversion to version 2.8
  * Atopacct.service verifies if psacct/acct is active (#227)
    To avoid that the atopacctd daemon and the (ps)acct service both
    try to activate process accounting continuously, the atopacct.service
    refuses to start when the (ps)acct service is already active.
  * Fix LLC output for Json
  * Solve format-overflow/maybe-uninitialized warnings
  * Reshuffle counters to ease raw file conversion
  * Recalculate average queue in parseable output
  * Corrected the order of inflight/avque
  * Add inflight and avque counters to parseable data
  * Fix BDELAY in priphead call to make_proc_prints for schedprocs
  * Correct the array index used for previous samples per-container CPU values
  * Reinstate dropped printing of avio msec values between 99.95 and 9995
  * photosyst: add ceph rbd disk display
  * photosys.c: correct the numa number for NUM and NUC
  * Timeout when setting semaphore in atop (#207)
  * Current CPU set to -1 for terminated process (#201)
    When a process has terminated (status 'E') the current CPU will be
    set to -1 (means: unknown) in the parsable output with label PRC.
  * Typo corrections and correction in man page
  * Introduce JSON output by '-J xxx'
  * Add missing counter iInCsumErrors to ICMP counters
  * supplement inflight I/O requests
  * Man page: clarify elapsed time in PRG parseable output
  * Exponent calulation for high counter might exceed column width
    When a column width was defined of e.g. 4 positions, the value
    99999 was shown as 100e3 instead of 99e3 (upward rounding caused
    an extra position).
  * PID selection can not be undone for same interval When pressing
    'I' to select particular PIDs and pressing 'I' again within the
    same interval to deselect by pressing the Enter-key, the deselection
    is ignored. Solved by reinitializing the input buffer.
  * Split the MEM line into two lines and add pagetable size Since it was
    hardly possible to view the values in the MEM line (too many), the memory
    utilization has been spread over two lines. The amount of memory used
    for page tables has been added.
  * Memory usage for TCP/UDP sockets
  * Add Documentation key to atop-rotate.service/.timer (#206)
  * Correct typos in man pages (#205)
  * Add cgroup support (#127) The current cgroup is registered
    for systems that are based on cgroup v2. Apart from the group name also
    relevant controller information is maintained, like the cpu.max and the
    memory.max (for the group itself and the most restrictive value in the
    parent groups).
  * Fix compiling error with -DHTTPSTATS
  * supplement tcpsock and udpsock memory consumption
  * Store PID width in header of raw log Register the number of positions
    for PID and TID numbers on the measured system in the raw log. In this
    way, the viewing of the raw log on another system will use the proper
    column width for PID/TID.
  * showhdrline: fix OOB access when COLS is too small
  * Fix disk busy in man page
  * Add block I/O delay to processes/threads
  * Move run_in_guest into various.c
  * Minor changes to text, column priority and coloring
  * Support pgin &amp; pgout
  * Correction on calibration (one too many)
  * Detect vmmemctl at two locations
  * Use dup2 instead of close+dup
  * Fix compiling warning
  * Calibrate the value of nthr for each process
  * photosyst.c: fixed path for vmmemctl
  * Fix typo in man page
  * Added link
  * Only print current CPU frequency when supported by CPU architecture
  * Lower priority of column 'numnode' in MEM line
  * Support per-second counter for LLC
  * Reformat status line info in initial screen
  * Add LLC in atop man page
  * Support LLC collection
  * Add OpenRC init scripts (atop, atopacct)
  * Support LLC collection
- Refresh patches:
  * harden_atop-rotate.service.patch
  * harden_atopacct.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673092800">- Update to 2.8.1:
  * Correct NUMA conversion in logfiles from version 2.7 to 2.8
  * Avoid buffer overflows during value formatting
  * Solve compiler warnings about format-truncation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683979200">- Update to 2.9.0:
  * Avoid compiler warning by limiting PSI average
  * Install cleanup function to avoid termination of parent process
  * add man for PAG steal
  * Oomkills event should not remain orange after boot values
  * Clarified atop man page
  * Closing bracket missing in synopsis
  * Add highlight concerning bar graph mode
  * Introduce bar graph mode Besides all detailed information that
    is supplied by atop on system and process level, a (character-based)
    bar graph can be shown about the utilization of the most critical system resources
  * Freeing ethlink should depend of ifdef
  * Added reset to indicate shadow file to be closed
  * fix atopacctd.c: failed to start atopacct.service
  * acctatop: reacquire acctfd to collect nprocexit for some bad cases
  * Calibrate nprocexit to avoid atop coredumps unexpectedly
  * json.c: fix avque counters output
  * Resolve compiler warnings from latest versions of GCC
  * Added versdate.h to make clean target
  * Revert "Added versdate.h to make clean target"
  * Added versdate.h to make clean target
  * fix calculation for scan and steal
  * only call str.decode if nvml returned bytes
  * Add exit epoch to parseable output PRG (solves issue #242)
  * Minor correction in man page for NVCSW/NIVCSW
  * Context switches (voluntary and involuntary) on process level incorrect
  * Various modifications releated to (non)voluntary context switches
  * Add nvcsw and nivcsw for each process
  * ifprop.c: Fix possible memory leak
  * Code cleanup and prototype additions
  * Consistency check on number of threads (solves issue #232)
  * atop-rotate.service: use restart instead of try-restart
  * Add link to atophttpd
- Update patches:
  * atop-makefile.patch
  * harden_atop-rotate.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704456000">- Update to 2.10.0:
  * Additional memory statistics on system level: amount of available
    memory, amount of memory used for Transparant Huge Pages, amount
    of memory used by two categories of static huge pages (usually
    2MiB and 1GiB), and the number of pages transferred to/from zswap.
  * Additional counters for the number of idle threads on system
    level and process level.
  * Refined view of memory bar graph, including free static huge pages.
  * Generic way to determine the container id or pod name for
    containerized processes.
  * Support for a BPF-based alternative[1] for the netatop kernel
    module to gather network statistics per process/thread.
  * Use the -z flag followed by a regex to prepend matching environment
    variables to the full command line that is shown per process (with key 'c').
  * Various bugfixes (like memory leak when switching to bar graph mode)
    and minor improvements.
  * Bugfix: failing malloc while starting atopsar (unprivileged) for a live measurement.
  * The program atophide can be used to make an extraction from an input
    raw log to an output raw log, optionally specifying a begin time and/or an
    end time. The output raw log can be anonymized, i.e. the hostname
    will be replaced, command names of non-standard commands will be
    replaced, all command arguments will be wiped, logical volume names
    will be replaced and NFS mounted volume names will be replaced.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722254400">- Update to 2.11.0:
  * Cgroups (version 2) support.
    Show the hierarchical structure of cgroups and the related metrics
    with key/option 'G', and define the cgroup depth with the keys/options
    2 till 7. Key/option 8 also shows the processes per cgroup level,
    except the kernel processes in the root cgroup. Key/option 9 shows
    the related processes per cgroup level including the kernel processes
    in the root cgroup. With key/option 'C' the output is sorted on
    CPU consumption (default), with key/option 'M' on memory consumption,
    and with key/option 'D' (requires root privileges) on disk utilization.
    Note: The collection of cgroup information per process is not supported any more.
  * Twin mode: live measurement with review option.
    In twin mode atop spawns into a lower level process that gathers
    the counters and writes them to a temporary raw file, and an upper level
    process that reads the counters from the temporary raw file and presents them to
    the user.
    The reading of the upper level process keeps in pace with the written samples
    of the lower level process for live measurements. However, when pressing the
    'r' (reset to measurement begin), the 'b' (branch to time stamp),
    or the 'T' (previous sample), the upper level process implicitly
    pauses with the possibility to review previous samples.
    The 'z' (explicit pause) can also be used to pause the live measurement.
    When pressing the 'z' again (continue after pause) viewing of the
    live measurement will be continued.
  * Various corrections related to JSON output.
  * Improved gathering of current CPU frequency.
  * Support more than 500 CPUs.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.
- Update atop-makefile.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1743422400">- Update to 2.11.1:
  * Atop will not connect to the TCP port of 'atopgpud' daemon any more
    by default. The flag -k can be used explicitly when 'atopgpud' is
    active. Also the code to parse the received strings is improved to
    avoid future issues with heap corruption.
  * The flag -K has been implemented to connect to netatop/netatop-bpf.
  * Fix CVE-2025-31160 (boo#1240393)</changelog>
</package>
<package pkgid="6914ee747282eb73dfed0f0528e579b201a65a1f23ca64e3d548b4614e75ca1b" name="atop-daemon" arch="i586">
  <version epoch="0" ver="2.11.1" rel="bp156.3.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1672660800">- Update to 2.8.0:
  * Rename AUTHOR in spec file
  * Adapt atopconvert for conversion to version 2.8
  * Atopacct.service verifies if psacct/acct is active (#227)
    To avoid that the atopacctd daemon and the (ps)acct service both
    try to activate process accounting continuously, the atopacct.service
    refuses to start when the (ps)acct service is already active.
  * Fix LLC output for Json
  * Solve format-overflow/maybe-uninitialized warnings
  * Reshuffle counters to ease raw file conversion
  * Recalculate average queue in parseable output
  * Corrected the order of inflight/avque
  * Add inflight and avque counters to parseable data
  * Fix BDELAY in priphead call to make_proc_prints for schedprocs
  * Correct the array index used for previous samples per-container CPU values
  * Reinstate dropped printing of avio msec values between 99.95 and 9995
  * photosyst: add ceph rbd disk display
  * photosys.c: correct the numa number for NUM and NUC
  * Timeout when setting semaphore in atop (#207)
  * Current CPU set to -1 for terminated process (#201)
    When a process has terminated (status 'E') the current CPU will be
    set to -1 (means: unknown) in the parsable output with label PRC.
  * Typo corrections and correction in man page
  * Introduce JSON output by '-J xxx'
  * Add missing counter iInCsumErrors to ICMP counters
  * supplement inflight I/O requests
  * Man page: clarify elapsed time in PRG parseable output
  * Exponent calulation for high counter might exceed column width
    When a column width was defined of e.g. 4 positions, the value
    99999 was shown as 100e3 instead of 99e3 (upward rounding caused
    an extra position).
  * PID selection can not be undone for same interval When pressing
    'I' to select particular PIDs and pressing 'I' again within the
    same interval to deselect by pressing the Enter-key, the deselection
    is ignored. Solved by reinitializing the input buffer.
  * Split the MEM line into two lines and add pagetable size Since it was
    hardly possible to view the values in the MEM line (too many), the memory
    utilization has been spread over two lines. The amount of memory used
    for page tables has been added.
  * Memory usage for TCP/UDP sockets
  * Add Documentation key to atop-rotate.service/.timer (#206)
  * Correct typos in man pages (#205)
  * Add cgroup support (#127) The current cgroup is registered
    for systems that are based on cgroup v2. Apart from the group name also
    relevant controller information is maintained, like the cpu.max and the
    memory.max (for the group itself and the most restrictive value in the
    parent groups).
  * Fix compiling error with -DHTTPSTATS
  * supplement tcpsock and udpsock memory consumption
  * Store PID width in header of raw log Register the number of positions
    for PID and TID numbers on the measured system in the raw log. In this
    way, the viewing of the raw log on another system will use the proper
    column width for PID/TID.
  * showhdrline: fix OOB access when COLS is too small
  * Fix disk busy in man page
  * Add block I/O delay to processes/threads
  * Move run_in_guest into various.c
  * Minor changes to text, column priority and coloring
  * Support pgin &amp; pgout
  * Correction on calibration (one too many)
  * Detect vmmemctl at two locations
  * Use dup2 instead of close+dup
  * Fix compiling warning
  * Calibrate the value of nthr for each process
  * photosyst.c: fixed path for vmmemctl
  * Fix typo in man page
  * Added link
  * Only print current CPU frequency when supported by CPU architecture
  * Lower priority of column 'numnode' in MEM line
  * Support per-second counter for LLC
  * Reformat status line info in initial screen
  * Add LLC in atop man page
  * Support LLC collection
  * Add OpenRC init scripts (atop, atopacct)
  * Support LLC collection
- Refresh patches:
  * harden_atop-rotate.service.patch
  * harden_atopacct.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673092800">- Update to 2.8.1:
  * Correct NUMA conversion in logfiles from version 2.7 to 2.8
  * Avoid buffer overflows during value formatting
  * Solve compiler warnings about format-truncation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683979200">- Update to 2.9.0:
  * Avoid compiler warning by limiting PSI average
  * Install cleanup function to avoid termination of parent process
  * add man for PAG steal
  * Oomkills event should not remain orange after boot values
  * Clarified atop man page
  * Closing bracket missing in synopsis
  * Add highlight concerning bar graph mode
  * Introduce bar graph mode Besides all detailed information that
    is supplied by atop on system and process level, a (character-based)
    bar graph can be shown about the utilization of the most critical system resources
  * Freeing ethlink should depend of ifdef
  * Added reset to indicate shadow file to be closed
  * fix atopacctd.c: failed to start atopacct.service
  * acctatop: reacquire acctfd to collect nprocexit for some bad cases
  * Calibrate nprocexit to avoid atop coredumps unexpectedly
  * json.c: fix avque counters output
  * Resolve compiler warnings from latest versions of GCC
  * Added versdate.h to make clean target
  * Revert "Added versdate.h to make clean target"
  * Added versdate.h to make clean target
  * fix calculation for scan and steal
  * only call str.decode if nvml returned bytes
  * Add exit epoch to parseable output PRG (solves issue #242)
  * Minor correction in man page for NVCSW/NIVCSW
  * Context switches (voluntary and involuntary) on process level incorrect
  * Various modifications releated to (non)voluntary context switches
  * Add nvcsw and nivcsw for each process
  * ifprop.c: Fix possible memory leak
  * Code cleanup and prototype additions
  * Consistency check on number of threads (solves issue #232)
  * atop-rotate.service: use restart instead of try-restart
  * Add link to atophttpd
- Update patches:
  * atop-makefile.patch
  * harden_atop-rotate.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704456000">- Update to 2.10.0:
  * Additional memory statistics on system level: amount of available
    memory, amount of memory used for Transparant Huge Pages, amount
    of memory used by two categories of static huge pages (usually
    2MiB and 1GiB), and the number of pages transferred to/from zswap.
  * Additional counters for the number of idle threads on system
    level and process level.
  * Refined view of memory bar graph, including free static huge pages.
  * Generic way to determine the container id or pod name for
    containerized processes.
  * Support for a BPF-based alternative[1] for the netatop kernel
    module to gather network statistics per process/thread.
  * Use the -z flag followed by a regex to prepend matching environment
    variables to the full command line that is shown per process (with key 'c').
  * Various bugfixes (like memory leak when switching to bar graph mode)
    and minor improvements.
  * Bugfix: failing malloc while starting atopsar (unprivileged) for a live measurement.
  * The program atophide can be used to make an extraction from an input
    raw log to an output raw log, optionally specifying a begin time and/or an
    end time. The output raw log can be anonymized, i.e. the hostname
    will be replaced, command names of non-standard commands will be
    replaced, all command arguments will be wiped, logical volume names
    will be replaced and NFS mounted volume names will be replaced.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722254400">- Update to 2.11.0:
  * Cgroups (version 2) support.
    Show the hierarchical structure of cgroups and the related metrics
    with key/option 'G', and define the cgroup depth with the keys/options
    2 till 7. Key/option 8 also shows the processes per cgroup level,
    except the kernel processes in the root cgroup. Key/option 9 shows
    the related processes per cgroup level including the kernel processes
    in the root cgroup. With key/option 'C' the output is sorted on
    CPU consumption (default), with key/option 'M' on memory consumption,
    and with key/option 'D' (requires root privileges) on disk utilization.
    Note: The collection of cgroup information per process is not supported any more.
  * Twin mode: live measurement with review option.
    In twin mode atop spawns into a lower level process that gathers
    the counters and writes them to a temporary raw file, and an upper level
    process that reads the counters from the temporary raw file and presents them to
    the user.
    The reading of the upper level process keeps in pace with the written samples
    of the lower level process for live measurements. However, when pressing the
    'r' (reset to measurement begin), the 'b' (branch to time stamp),
    or the 'T' (previous sample), the upper level process implicitly
    pauses with the possibility to review previous samples.
    The 'z' (explicit pause) can also be used to pause the live measurement.
    When pressing the 'z' again (continue after pause) viewing of the
    live measurement will be continued.
  * Various corrections related to JSON output.
  * Improved gathering of current CPU frequency.
  * Support more than 500 CPUs.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.
- Update atop-makefile.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1743422400">- Update to 2.11.1:
  * Atop will not connect to the TCP port of 'atopgpud' daemon any more
    by default. The flag -k can be used explicitly when 'atopgpud' is
    active. Also the code to parse the received strings is improved to
    avoid future issues with heap corruption.
  * The flag -K has been implemented to connect to netatop/netatop-bpf.
  * Fix CVE-2025-31160 (boo#1240393)</changelog>
</package>
<package pkgid="ea7b28e51db19629b17408fedbdc7b2374b50847829092fa79bae35a8765ce9a" name="atop-daemon" arch="ppc64le">
  <version epoch="0" ver="2.11.1" rel="bp156.3.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1672660800">- Update to 2.8.0:
  * Rename AUTHOR in spec file
  * Adapt atopconvert for conversion to version 2.8
  * Atopacct.service verifies if psacct/acct is active (#227)
    To avoid that the atopacctd daemon and the (ps)acct service both
    try to activate process accounting continuously, the atopacct.service
    refuses to start when the (ps)acct service is already active.
  * Fix LLC output for Json
  * Solve format-overflow/maybe-uninitialized warnings
  * Reshuffle counters to ease raw file conversion
  * Recalculate average queue in parseable output
  * Corrected the order of inflight/avque
  * Add inflight and avque counters to parseable data
  * Fix BDELAY in priphead call to make_proc_prints for schedprocs
  * Correct the array index used for previous samples per-container CPU values
  * Reinstate dropped printing of avio msec values between 99.95 and 9995
  * photosyst: add ceph rbd disk display
  * photosys.c: correct the numa number for NUM and NUC
  * Timeout when setting semaphore in atop (#207)
  * Current CPU set to -1 for terminated process (#201)
    When a process has terminated (status 'E') the current CPU will be
    set to -1 (means: unknown) in the parsable output with label PRC.
  * Typo corrections and correction in man page
  * Introduce JSON output by '-J xxx'
  * Add missing counter iInCsumErrors to ICMP counters
  * supplement inflight I/O requests
  * Man page: clarify elapsed time in PRG parseable output
  * Exponent calulation for high counter might exceed column width
    When a column width was defined of e.g. 4 positions, the value
    99999 was shown as 100e3 instead of 99e3 (upward rounding caused
    an extra position).
  * PID selection can not be undone for same interval When pressing
    'I' to select particular PIDs and pressing 'I' again within the
    same interval to deselect by pressing the Enter-key, the deselection
    is ignored. Solved by reinitializing the input buffer.
  * Split the MEM line into two lines and add pagetable size Since it was
    hardly possible to view the values in the MEM line (too many), the memory
    utilization has been spread over two lines. The amount of memory used
    for page tables has been added.
  * Memory usage for TCP/UDP sockets
  * Add Documentation key to atop-rotate.service/.timer (#206)
  * Correct typos in man pages (#205)
  * Add cgroup support (#127) The current cgroup is registered
    for systems that are based on cgroup v2. Apart from the group name also
    relevant controller information is maintained, like the cpu.max and the
    memory.max (for the group itself and the most restrictive value in the
    parent groups).
  * Fix compiling error with -DHTTPSTATS
  * supplement tcpsock and udpsock memory consumption
  * Store PID width in header of raw log Register the number of positions
    for PID and TID numbers on the measured system in the raw log. In this
    way, the viewing of the raw log on another system will use the proper
    column width for PID/TID.
  * showhdrline: fix OOB access when COLS is too small
  * Fix disk busy in man page
  * Add block I/O delay to processes/threads
  * Move run_in_guest into various.c
  * Minor changes to text, column priority and coloring
  * Support pgin &amp; pgout
  * Correction on calibration (one too many)
  * Detect vmmemctl at two locations
  * Use dup2 instead of close+dup
  * Fix compiling warning
  * Calibrate the value of nthr for each process
  * photosyst.c: fixed path for vmmemctl
  * Fix typo in man page
  * Added link
  * Only print current CPU frequency when supported by CPU architecture
  * Lower priority of column 'numnode' in MEM line
  * Support per-second counter for LLC
  * Reformat status line info in initial screen
  * Add LLC in atop man page
  * Support LLC collection
  * Add OpenRC init scripts (atop, atopacct)
  * Support LLC collection
- Refresh patches:
  * harden_atop-rotate.service.patch
  * harden_atopacct.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673092800">- Update to 2.8.1:
  * Correct NUMA conversion in logfiles from version 2.7 to 2.8
  * Avoid buffer overflows during value formatting
  * Solve compiler warnings about format-truncation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683979200">- Update to 2.9.0:
  * Avoid compiler warning by limiting PSI average
  * Install cleanup function to avoid termination of parent process
  * add man for PAG steal
  * Oomkills event should not remain orange after boot values
  * Clarified atop man page
  * Closing bracket missing in synopsis
  * Add highlight concerning bar graph mode
  * Introduce bar graph mode Besides all detailed information that
    is supplied by atop on system and process level, a (character-based)
    bar graph can be shown about the utilization of the most critical system resources
  * Freeing ethlink should depend of ifdef
  * Added reset to indicate shadow file to be closed
  * fix atopacctd.c: failed to start atopacct.service
  * acctatop: reacquire acctfd to collect nprocexit for some bad cases
  * Calibrate nprocexit to avoid atop coredumps unexpectedly
  * json.c: fix avque counters output
  * Resolve compiler warnings from latest versions of GCC
  * Added versdate.h to make clean target
  * Revert "Added versdate.h to make clean target"
  * Added versdate.h to make clean target
  * fix calculation for scan and steal
  * only call str.decode if nvml returned bytes
  * Add exit epoch to parseable output PRG (solves issue #242)
  * Minor correction in man page for NVCSW/NIVCSW
  * Context switches (voluntary and involuntary) on process level incorrect
  * Various modifications releated to (non)voluntary context switches
  * Add nvcsw and nivcsw for each process
  * ifprop.c: Fix possible memory leak
  * Code cleanup and prototype additions
  * Consistency check on number of threads (solves issue #232)
  * atop-rotate.service: use restart instead of try-restart
  * Add link to atophttpd
- Update patches:
  * atop-makefile.patch
  * harden_atop-rotate.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704456000">- Update to 2.10.0:
  * Additional memory statistics on system level: amount of available
    memory, amount of memory used for Transparant Huge Pages, amount
    of memory used by two categories of static huge pages (usually
    2MiB and 1GiB), and the number of pages transferred to/from zswap.
  * Additional counters for the number of idle threads on system
    level and process level.
  * Refined view of memory bar graph, including free static huge pages.
  * Generic way to determine the container id or pod name for
    containerized processes.
  * Support for a BPF-based alternative[1] for the netatop kernel
    module to gather network statistics per process/thread.
  * Use the -z flag followed by a regex to prepend matching environment
    variables to the full command line that is shown per process (with key 'c').
  * Various bugfixes (like memory leak when switching to bar graph mode)
    and minor improvements.
  * Bugfix: failing malloc while starting atopsar (unprivileged) for a live measurement.
  * The program atophide can be used to make an extraction from an input
    raw log to an output raw log, optionally specifying a begin time and/or an
    end time. The output raw log can be anonymized, i.e. the hostname
    will be replaced, command names of non-standard commands will be
    replaced, all command arguments will be wiped, logical volume names
    will be replaced and NFS mounted volume names will be replaced.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722254400">- Update to 2.11.0:
  * Cgroups (version 2) support.
    Show the hierarchical structure of cgroups and the related metrics
    with key/option 'G', and define the cgroup depth with the keys/options
    2 till 7. Key/option 8 also shows the processes per cgroup level,
    except the kernel processes in the root cgroup. Key/option 9 shows
    the related processes per cgroup level including the kernel processes
    in the root cgroup. With key/option 'C' the output is sorted on
    CPU consumption (default), with key/option 'M' on memory consumption,
    and with key/option 'D' (requires root privileges) on disk utilization.
    Note: The collection of cgroup information per process is not supported any more.
  * Twin mode: live measurement with review option.
    In twin mode atop spawns into a lower level process that gathers
    the counters and writes them to a temporary raw file, and an upper level
    process that reads the counters from the temporary raw file and presents them to
    the user.
    The reading of the upper level process keeps in pace with the written samples
    of the lower level process for live measurements. However, when pressing the
    'r' (reset to measurement begin), the 'b' (branch to time stamp),
    or the 'T' (previous sample), the upper level process implicitly
    pauses with the possibility to review previous samples.
    The 'z' (explicit pause) can also be used to pause the live measurement.
    When pressing the 'z' again (continue after pause) viewing of the
    live measurement will be continued.
  * Various corrections related to JSON output.
  * Improved gathering of current CPU frequency.
  * Support more than 500 CPUs.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.
- Update atop-makefile.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1743422400">- Update to 2.11.1:
  * Atop will not connect to the TCP port of 'atopgpud' daemon any more
    by default. The flag -k can be used explicitly when 'atopgpud' is
    active. Also the code to parse the received strings is improved to
    avoid future issues with heap corruption.
  * The flag -K has been implemented to connect to netatop/netatop-bpf.
  * Fix CVE-2025-31160 (boo#1240393)</changelog>
</package>
<package pkgid="32a29172858f3bf313b6e27ac0aeb6e4165d01cb8f6f25061a55b942dc14466d" name="atop-daemon" arch="s390x">
  <version epoch="0" ver="2.11.1" rel="bp156.3.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1672660800">- Update to 2.8.0:
  * Rename AUTHOR in spec file
  * Adapt atopconvert for conversion to version 2.8
  * Atopacct.service verifies if psacct/acct is active (#227)
    To avoid that the atopacctd daemon and the (ps)acct service both
    try to activate process accounting continuously, the atopacct.service
    refuses to start when the (ps)acct service is already active.
  * Fix LLC output for Json
  * Solve format-overflow/maybe-uninitialized warnings
  * Reshuffle counters to ease raw file conversion
  * Recalculate average queue in parseable output
  * Corrected the order of inflight/avque
  * Add inflight and avque counters to parseable data
  * Fix BDELAY in priphead call to make_proc_prints for schedprocs
  * Correct the array index used for previous samples per-container CPU values
  * Reinstate dropped printing of avio msec values between 99.95 and 9995
  * photosyst: add ceph rbd disk display
  * photosys.c: correct the numa number for NUM and NUC
  * Timeout when setting semaphore in atop (#207)
  * Current CPU set to -1 for terminated process (#201)
    When a process has terminated (status 'E') the current CPU will be
    set to -1 (means: unknown) in the parsable output with label PRC.
  * Typo corrections and correction in man page
  * Introduce JSON output by '-J xxx'
  * Add missing counter iInCsumErrors to ICMP counters
  * supplement inflight I/O requests
  * Man page: clarify elapsed time in PRG parseable output
  * Exponent calulation for high counter might exceed column width
    When a column width was defined of e.g. 4 positions, the value
    99999 was shown as 100e3 instead of 99e3 (upward rounding caused
    an extra position).
  * PID selection can not be undone for same interval When pressing
    'I' to select particular PIDs and pressing 'I' again within the
    same interval to deselect by pressing the Enter-key, the deselection
    is ignored. Solved by reinitializing the input buffer.
  * Split the MEM line into two lines and add pagetable size Since it was
    hardly possible to view the values in the MEM line (too many), the memory
    utilization has been spread over two lines. The amount of memory used
    for page tables has been added.
  * Memory usage for TCP/UDP sockets
  * Add Documentation key to atop-rotate.service/.timer (#206)
  * Correct typos in man pages (#205)
  * Add cgroup support (#127) The current cgroup is registered
    for systems that are based on cgroup v2. Apart from the group name also
    relevant controller information is maintained, like the cpu.max and the
    memory.max (for the group itself and the most restrictive value in the
    parent groups).
  * Fix compiling error with -DHTTPSTATS
  * supplement tcpsock and udpsock memory consumption
  * Store PID width in header of raw log Register the number of positions
    for PID and TID numbers on the measured system in the raw log. In this
    way, the viewing of the raw log on another system will use the proper
    column width for PID/TID.
  * showhdrline: fix OOB access when COLS is too small
  * Fix disk busy in man page
  * Add block I/O delay to processes/threads
  * Move run_in_guest into various.c
  * Minor changes to text, column priority and coloring
  * Support pgin &amp; pgout
  * Correction on calibration (one too many)
  * Detect vmmemctl at two locations
  * Use dup2 instead of close+dup
  * Fix compiling warning
  * Calibrate the value of nthr for each process
  * photosyst.c: fixed path for vmmemctl
  * Fix typo in man page
  * Added link
  * Only print current CPU frequency when supported by CPU architecture
  * Lower priority of column 'numnode' in MEM line
  * Support per-second counter for LLC
  * Reformat status line info in initial screen
  * Add LLC in atop man page
  * Support LLC collection
  * Add OpenRC init scripts (atop, atopacct)
  * Support LLC collection
- Refresh patches:
  * harden_atop-rotate.service.patch
  * harden_atopacct.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673092800">- Update to 2.8.1:
  * Correct NUMA conversion in logfiles from version 2.7 to 2.8
  * Avoid buffer overflows during value formatting
  * Solve compiler warnings about format-truncation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683979200">- Update to 2.9.0:
  * Avoid compiler warning by limiting PSI average
  * Install cleanup function to avoid termination of parent process
  * add man for PAG steal
  * Oomkills event should not remain orange after boot values
  * Clarified atop man page
  * Closing bracket missing in synopsis
  * Add highlight concerning bar graph mode
  * Introduce bar graph mode Besides all detailed information that
    is supplied by atop on system and process level, a (character-based)
    bar graph can be shown about the utilization of the most critical system resources
  * Freeing ethlink should depend of ifdef
  * Added reset to indicate shadow file to be closed
  * fix atopacctd.c: failed to start atopacct.service
  * acctatop: reacquire acctfd to collect nprocexit for some bad cases
  * Calibrate nprocexit to avoid atop coredumps unexpectedly
  * json.c: fix avque counters output
  * Resolve compiler warnings from latest versions of GCC
  * Added versdate.h to make clean target
  * Revert "Added versdate.h to make clean target"
  * Added versdate.h to make clean target
  * fix calculation for scan and steal
  * only call str.decode if nvml returned bytes
  * Add exit epoch to parseable output PRG (solves issue #242)
  * Minor correction in man page for NVCSW/NIVCSW
  * Context switches (voluntary and involuntary) on process level incorrect
  * Various modifications releated to (non)voluntary context switches
  * Add nvcsw and nivcsw for each process
  * ifprop.c: Fix possible memory leak
  * Code cleanup and prototype additions
  * Consistency check on number of threads (solves issue #232)
  * atop-rotate.service: use restart instead of try-restart
  * Add link to atophttpd
- Update patches:
  * atop-makefile.patch
  * harden_atop-rotate.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704456000">- Update to 2.10.0:
  * Additional memory statistics on system level: amount of available
    memory, amount of memory used for Transparant Huge Pages, amount
    of memory used by two categories of static huge pages (usually
    2MiB and 1GiB), and the number of pages transferred to/from zswap.
  * Additional counters for the number of idle threads on system
    level and process level.
  * Refined view of memory bar graph, including free static huge pages.
  * Generic way to determine the container id or pod name for
    containerized processes.
  * Support for a BPF-based alternative[1] for the netatop kernel
    module to gather network statistics per process/thread.
  * Use the -z flag followed by a regex to prepend matching environment
    variables to the full command line that is shown per process (with key 'c').
  * Various bugfixes (like memory leak when switching to bar graph mode)
    and minor improvements.
  * Bugfix: failing malloc while starting atopsar (unprivileged) for a live measurement.
  * The program atophide can be used to make an extraction from an input
    raw log to an output raw log, optionally specifying a begin time and/or an
    end time. The output raw log can be anonymized, i.e. the hostname
    will be replaced, command names of non-standard commands will be
    replaced, all command arguments will be wiped, logical volume names
    will be replaced and NFS mounted volume names will be replaced.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722254400">- Update to 2.11.0:
  * Cgroups (version 2) support.
    Show the hierarchical structure of cgroups and the related metrics
    with key/option 'G', and define the cgroup depth with the keys/options
    2 till 7. Key/option 8 also shows the processes per cgroup level,
    except the kernel processes in the root cgroup. Key/option 9 shows
    the related processes per cgroup level including the kernel processes
    in the root cgroup. With key/option 'C' the output is sorted on
    CPU consumption (default), with key/option 'M' on memory consumption,
    and with key/option 'D' (requires root privileges) on disk utilization.
    Note: The collection of cgroup information per process is not supported any more.
  * Twin mode: live measurement with review option.
    In twin mode atop spawns into a lower level process that gathers
    the counters and writes them to a temporary raw file, and an upper level
    process that reads the counters from the temporary raw file and presents them to
    the user.
    The reading of the upper level process keeps in pace with the written samples
    of the lower level process for live measurements. However, when pressing the
    'r' (reset to measurement begin), the 'b' (branch to time stamp),
    or the 'T' (previous sample), the upper level process implicitly
    pauses with the possibility to review previous samples.
    The 'z' (explicit pause) can also be used to pause the live measurement.
    When pressing the 'z' again (continue after pause) viewing of the
    live measurement will be continued.
  * Various corrections related to JSON output.
  * Improved gathering of current CPU frequency.
  * Support more than 500 CPUs.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.
- Update atop-makefile.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1743422400">- Update to 2.11.1:
  * Atop will not connect to the TCP port of 'atopgpud' daemon any more
    by default. The flag -k can be used explicitly when 'atopgpud' is
    active. Also the code to parse the received strings is improved to
    avoid future issues with heap corruption.
  * The flag -K has been implemented to connect to netatop/netatop-bpf.
  * Fix CVE-2025-31160 (boo#1240393)</changelog>
</package>
<package pkgid="e3fdb6fb52e8f76dfe3fc60da1380b747e3a43cea1d8f5ab28123d312857a324" name="atop-daemon" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="bp156.3.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1413633600">- update to 2.1:
  * OpenVZ support: virtual environment identifier per process (envID)
  * Bug solution: when the screen-width is larger than the total number of
    columns to be printed, empty columns are added, however one column too many
  * Removed useless empty column for memory statistics
  * Introduce the 'G' key to suppress showing/accumulating exited processes
    in the output
  * Support CPU frequencies for systems with Intel P-state driver
  * Introduction of new daemon atopacctd. This daemon switches on process
    accounting and transfers every accounting record to an accounting shadow
    file. The source accounting file will regularly be truncated, while the
    shadow files are written with a limited size in a queued way. Non-used
    shadow files are deleted regularly.
  * Bug-solution: segmentation fault when one of the process names in the
    system contains a newline
  * Introduce configurable colors: in the atoprc file, colors can be defined
    for information messages (default green), threads (default yellow), almost
    critical resources (default cyan) and critical resources (default red).
  * Limit the names of network interfaces to six characters max
  * Introduction of proportional memory size (PSIZE) per process. For the
    resident memory parts used by a process that are shared with other
    processes, only a proportional part (shared memory part divided by the
    number of sharers) is accounted to the process. Since the gathering of this
    value is rather time-consuming (reading the smaps file of every process),
    it is optional ('R' key or '-R' flag).
  * Increased number of LVMs and disks supported
  * Support for huge pages (total and in use).</changelog>
  <changelog author="coolo@suse.com" date="1479816000">- update to 2.2:
  * Modifications for atop:
    a. New keys for process selection:
    '/' to select processes containing a particular search string in the command line arguments.
    'I' to select processes running with particular PIDs.
    b. New counters for NFS activity:
    On system level, counters are maintained about NFS traffic. Three new labels are introduced for this purpose:
    'NFS' for NFS server statistics (overall).
    'NFC' for NFS client statistics (overall).
    'NFM' for NFS client statistics per mounted NFS filesystem (so multiple lines possible).
    c. New counters for OpenVZ containers:
    CPU consumption and memory occupation are shown per container on system level (label 'CON').
    Container ID and virtual PID are shown on process level (when using key 'v' or 's').
    d. Bug fixes:
    The maximum transfer rate larger than 1 Gbit for ethernet interfaces is now correctly shown.
    The maximum transfer rate for wifi connections is now shown.
    For interfaces in general, the maximum transfer rate is shown as a separate column ('sp').
    Counters about virtual disk type 'xvd[a-z]' are shown.
    Several minor bugs have been solved.
  * Modifications for atopacct:
    a. Avoid that process accounting is reactivated too frequently (and unnecessary).
  * Modifications for atopsar:
    a. Add flags for NFS traffic ('-n' for NFS mounts, '-j' for overall NFS
    client activity and '-J' for overall NFS server activity).
  * General:
    a. Support for systemd-based distributions has been added.
    b. The format of the raw file is incompatible with earlier versions. However,
    the earlier version of atop is automatically activated when accessing an
    older raw file.
- cleanup spec file - remove support for &lt; 12.1</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.3:
  * Modifications for atop:
    + Support for Docker containers.
    + Improved gathering of process data.
    + Improved memory figures for processes.
    + Variable width for PID column.
    + Better handling when started via sudo (not entering stopped
    + state).
    + Handling of disk drives starting with 'xvd...'.
  * Modifications for atopacct:
    + Better error handling of Netlink interface.
    + Immediate reaction when receiving SIGTERM signal.
    + Bypass for kernel bug 190711 (Netlink interface not
    available).
    + Bypass for kernel bug 190271 (process accounting does not
    always start).
  * Modifications for atopsar:
    + Top-3 of resource consuming processes only shows active
    processes now.
  * General:
    + The format of the raw file is upward compatible with version
    2.2-3.
- Clean with spec-cleaner.</changelog>
  <changelog author="rbrown@suse.com" date="1529928000">- Correct copyright attribution</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1550404800">- Update to 2.4.0
  * Modifications for atop:
    + Support for Nvidia GPU statistics:
    A separate daemon atopgpud has been developed to maintain statistics of
  Nvidia GPUs in the system. When this daemon is running, atop will
  connect to this daemon and will get/show the GPU statistics with every
  interval on system level and process level (key 'e').
    The atopgpud daemon will only be active when it is explicitly enabled
  (see man pages for more info).
    + Support for Infiniband statistics:
    Counters showing the bandwidth utilization of Infiniband ports
  (system level) are added.
    + Support for Pressure Stall Information (PSI):
    The average pressure percentages of CPU, memory and I/O are reported
  for the last 10, 60 and 300 seconds. These percentage are provided from
  kernel 4.20 onwards.
    + Faster startup of atop:
    The allocation strategy for processes and threads has been improved,
  which will specifically be noticable on larger systems with lots of
  multi-threaded processes.
    + Configurable options for atop running in the background:
    Default options of script atop.daily can be overruled by
  /etc/default/atop file.
    + CPU Instructions Per Cycle (IPC):
    For every CPU, the average number of instructions per CPU cycle is
  shown as 'ipc'. Besides, a column is shown with the number of cycles
  executed per second as `cycl` (shown as effective Hz frequency).
    + Various fixes:
    Various NFS counters corrected.
    Recognition of nvme and nbd disks.
    Recognition of DEADLINE scheduling policy.
    Proper handling of memory locking (improper handling caused malloc
  failures in previous versions).
  * New program atopconvert:
    + This program can be used to convert the layout of older raw files to
  newer raw files. Raw files from atop 2.0 onwards can be converted to
  the newest version (now: 2.4).
  * Modifications for atopsar:
    + Reports can be printed now about the utilization of GPUs and Infiniband,
  and about the PSI percentages.
  * General:
    + The format of the raw file is incompatible with earlier versions.
  However, old raw files can be converted now by the program atopconvert
  to be read or extended by newer atop versions.
- Clean with spec-cleaner
- Refresh atop-makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- Package /etc/cron.d, as this is now part of cron which we don't
  want to require</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596196800">- Update to version 2.5.0
  Modifications for atop:
  * Avoid using perf counters in VM
    New option 'perfevents' in the atoprc file to define if the Instructions
  Per Cycle (IPC) should be retrieved via the 'perf' counters. Specify
  value 'auto' (default), 'enable' or 'disable'. In case of 'auto', the
  Instructions Per Cycle counter will not be retrieved on VMs due to the
  overhead of reading this counter in a guest.
  * Improve daily rotation of logfile for systemd-based systems.
    Exchange the files /etc/cron.d/atop, /etc/logrotate.d/psaccs_atop,
  /etc/logrotate.d/psaccu_atop, /usr/share/atop/atop.daily,
  /var/log/atop/dummy_after and /var/log/atop/dummy_before by
  atop-rotate.service and atop-rotate.timer.
  * Bug fixes:
    Correction of PSI value 'io full'.
    Use smaps_rollup (if present) instead of smaps for better performance.
    Use writev instead of 3 single writes to avoid logfile corruption.
    Modified handling of error messages (remain visible after window is
  closed).
    Correct CID for containers created by Kubernetes.
    Allow reading a logfile via a named pipe (non-seekable).
  Modifications for atopconvert:
  * Show version of input file (even if only one parameter specified).
  General:
  * The format of the raw file is compatible with version 2.4.
- Run spec-cleaner
- Remove requires for cron and logrotate now that there is systemd service
  and timers handling logrotation
- Remove Requires(post) for permissions since atop does not use cron files anymore
- Refresh patch:
  * atop-makefile.patch
- Add atop defaults in /etc/default/atop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1672660800">- Update to 2.8.0:
  * Rename AUTHOR in spec file
  * Adapt atopconvert for conversion to version 2.8
  * Atopacct.service verifies if psacct/acct is active (#227)
    To avoid that the atopacctd daemon and the (ps)acct service both
    try to activate process accounting continuously, the atopacct.service
    refuses to start when the (ps)acct service is already active.
  * Fix LLC output for Json
  * Solve format-overflow/maybe-uninitialized warnings
  * Reshuffle counters to ease raw file conversion
  * Recalculate average queue in parseable output
  * Corrected the order of inflight/avque
  * Add inflight and avque counters to parseable data
  * Fix BDELAY in priphead call to make_proc_prints for schedprocs
  * Correct the array index used for previous samples per-container CPU values
  * Reinstate dropped printing of avio msec values between 99.95 and 9995
  * photosyst: add ceph rbd disk display
  * photosys.c: correct the numa number for NUM and NUC
  * Timeout when setting semaphore in atop (#207)
  * Current CPU set to -1 for terminated process (#201)
    When a process has terminated (status 'E') the current CPU will be
    set to -1 (means: unknown) in the parsable output with label PRC.
  * Typo corrections and correction in man page
  * Introduce JSON output by '-J xxx'
  * Add missing counter iInCsumErrors to ICMP counters
  * supplement inflight I/O requests
  * Man page: clarify elapsed time in PRG parseable output
  * Exponent calulation for high counter might exceed column width
    When a column width was defined of e.g. 4 positions, the value
    99999 was shown as 100e3 instead of 99e3 (upward rounding caused
    an extra position).
  * PID selection can not be undone for same interval When pressing
    'I' to select particular PIDs and pressing 'I' again within the
    same interval to deselect by pressing the Enter-key, the deselection
    is ignored. Solved by reinitializing the input buffer.
  * Split the MEM line into two lines and add pagetable size Since it was
    hardly possible to view the values in the MEM line (too many), the memory
    utilization has been spread over two lines. The amount of memory used
    for page tables has been added.
  * Memory usage for TCP/UDP sockets
  * Add Documentation key to atop-rotate.service/.timer (#206)
  * Correct typos in man pages (#205)
  * Add cgroup support (#127) The current cgroup is registered
    for systems that are based on cgroup v2. Apart from the group name also
    relevant controller information is maintained, like the cpu.max and the
    memory.max (for the group itself and the most restrictive value in the
    parent groups).
  * Fix compiling error with -DHTTPSTATS
  * supplement tcpsock and udpsock memory consumption
  * Store PID width in header of raw log Register the number of positions
    for PID and TID numbers on the measured system in the raw log. In this
    way, the viewing of the raw log on another system will use the proper
    column width for PID/TID.
  * showhdrline: fix OOB access when COLS is too small
  * Fix disk busy in man page
  * Add block I/O delay to processes/threads
  * Move run_in_guest into various.c
  * Minor changes to text, column priority and coloring
  * Support pgin &amp; pgout
  * Correction on calibration (one too many)
  * Detect vmmemctl at two locations
  * Use dup2 instead of close+dup
  * Fix compiling warning
  * Calibrate the value of nthr for each process
  * photosyst.c: fixed path for vmmemctl
  * Fix typo in man page
  * Added link
  * Only print current CPU frequency when supported by CPU architecture
  * Lower priority of column 'numnode' in MEM line
  * Support per-second counter for LLC
  * Reformat status line info in initial screen
  * Add LLC in atop man page
  * Support LLC collection
  * Add OpenRC init scripts (atop, atopacct)
  * Support LLC collection
- Refresh patches:
  * harden_atop-rotate.service.patch
  * harden_atopacct.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673092800">- Update to 2.8.1:
  * Correct NUMA conversion in logfiles from version 2.7 to 2.8
  * Avoid buffer overflows during value formatting
  * Solve compiler warnings about format-truncation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683979200">- Update to 2.9.0:
  * Avoid compiler warning by limiting PSI average
  * Install cleanup function to avoid termination of parent process
  * add man for PAG steal
  * Oomkills event should not remain orange after boot values
  * Clarified atop man page
  * Closing bracket missing in synopsis
  * Add highlight concerning bar graph mode
  * Introduce bar graph mode Besides all detailed information that
    is supplied by atop on system and process level, a (character-based)
    bar graph can be shown about the utilization of the most critical system resources
  * Freeing ethlink should depend of ifdef
  * Added reset to indicate shadow file to be closed
  * fix atopacctd.c: failed to start atopacct.service
  * acctatop: reacquire acctfd to collect nprocexit for some bad cases
  * Calibrate nprocexit to avoid atop coredumps unexpectedly
  * json.c: fix avque counters output
  * Resolve compiler warnings from latest versions of GCC
  * Added versdate.h to make clean target
  * Revert "Added versdate.h to make clean target"
  * Added versdate.h to make clean target
  * fix calculation for scan and steal
  * only call str.decode if nvml returned bytes
  * Add exit epoch to parseable output PRG (solves issue #242)
  * Minor correction in man page for NVCSW/NIVCSW
  * Context switches (voluntary and involuntary) on process level incorrect
  * Various modifications releated to (non)voluntary context switches
  * Add nvcsw and nivcsw for each process
  * ifprop.c: Fix possible memory leak
  * Code cleanup and prototype additions
  * Consistency check on number of threads (solves issue #232)
  * atop-rotate.service: use restart instead of try-restart
  * Add link to atophttpd
- Update patches:
  * atop-makefile.patch
  * harden_atop-rotate.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704456000">- Update to 2.10.0:
  * Additional memory statistics on system level: amount of available
    memory, amount of memory used for Transparant Huge Pages, amount
    of memory used by two categories of static huge pages (usually
    2MiB and 1GiB), and the number of pages transferred to/from zswap.
  * Additional counters for the number of idle threads on system
    level and process level.
  * Refined view of memory bar graph, including free static huge pages.
  * Generic way to determine the container id or pod name for
    containerized processes.
  * Support for a BPF-based alternative[1] for the netatop kernel
    module to gather network statistics per process/thread.
  * Use the -z flag followed by a regex to prepend matching environment
    variables to the full command line that is shown per process (with key 'c').
  * Various bugfixes (like memory leak when switching to bar graph mode)
    and minor improvements.
  * Bugfix: failing malloc while starting atopsar (unprivileged) for a live measurement.
  * The program atophide can be used to make an extraction from an input
    raw log to an output raw log, optionally specifying a begin time and/or an
    end time. The output raw log can be anonymized, i.e. the hostname
    will be replaced, command names of non-standard commands will be
    replaced, all command arguments will be wiped, logical volume names
    will be replaced and NFS mounted volume names will be replaced.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722254400">- Update to 2.11.0:
  * Cgroups (version 2) support.
    Show the hierarchical structure of cgroups and the related metrics
    with key/option 'G', and define the cgroup depth with the keys/options
    2 till 7. Key/option 8 also shows the processes per cgroup level,
    except the kernel processes in the root cgroup. Key/option 9 shows
    the related processes per cgroup level including the kernel processes
    in the root cgroup. With key/option 'C' the output is sorted on
    CPU consumption (default), with key/option 'M' on memory consumption,
    and with key/option 'D' (requires root privileges) on disk utilization.
    Note: The collection of cgroup information per process is not supported any more.
  * Twin mode: live measurement with review option.
    In twin mode atop spawns into a lower level process that gathers
    the counters and writes them to a temporary raw file, and an upper level
    process that reads the counters from the temporary raw file and presents them to
    the user.
    The reading of the upper level process keeps in pace with the written samples
    of the lower level process for live measurements. However, when pressing the
    'r' (reset to measurement begin), the 'b' (branch to time stamp),
    or the 'T' (previous sample), the upper level process implicitly
    pauses with the possibility to review previous samples.
    The 'z' (explicit pause) can also be used to pause the live measurement.
    When pressing the 'z' again (continue after pause) viewing of the
    live measurement will be continued.
  * Various corrections related to JSON output.
  * Improved gathering of current CPU frequency.
  * Support more than 500 CPUs.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.
- Update atop-makefile.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1743422400">- Update to 2.11.1:
  * Atop will not connect to the TCP port of 'atopgpud' daemon any more
    by default. The flag -k can be used explicitly when 'atopgpud' is
    active. Also the code to parse the received strings is improved to
    avoid future issues with heap corruption.
  * The flag -K has been implemented to connect to netatop/netatop-bpf.
  * Fix CVE-2025-31160 (boo#1240393)</changelog>
</package>
<package pkgid="87e92be99f7ab7954608304c57143908e1586eae0c147c5f1a945038eb6b1166" name="awf-gtk2" arch="aarch64">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
</package>
<package pkgid="b51332fb2f026502af35449c0a911705c865d941aeff483b0db3754825e14a7f" name="awf-gtk2" arch="ppc64le">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
</package>
<package pkgid="5e101f3a43fa0b20b504564d361367c08246c843adf685c6991bc0652a80b2ce" name="awf-gtk2" arch="s390x">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
</package>
<package pkgid="a6a9d668fb580c4afd3c6613e9d87c1463a6e3ffc16b8046bb60269dc4b6d3a0" name="awf-gtk2" arch="src">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
</package>
<package pkgid="279df393069b3907dc48c848f69370a185b29a41ffca7c25d0360870b9ec9fc8" name="awf-gtk2" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
</package>
<package pkgid="cf62fb7a8a06ce68454fa9ecade9ea1231442796964bf6d50e742093bdf9eef4" name="awf-gtk2" arch="aarch64">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="07a061027f82bd6a350599300e0c7a5295ff38eb252b44468cc558bf3cbd0680" name="awf-gtk2" arch="ppc64le">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="a8b3a75ccbca57f694598dd25603dea52375a9a7805afdc2cbb6be1f63eb5c4a" name="awf-gtk2" arch="s390x">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="10785bbf16eb5204fd8e2b38b9e667246d383ca20356b8b5fef9c57ed2e83140" name="awf-gtk2" arch="src">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="d7cc3ee30db5668737cf7ec3ecd3483b8e9961c4c7ddd8e047c51cf812bc1739" name="awf-gtk2" arch="x86_64">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="66a93bf3376bf1b8f017243aafb3819778895a05f67903a3318a8aabd23297f2" name="awf-gtk2" arch="aarch64">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="be6cf6cc3fa583ac196b726e05307f88af9a02dc061228955faa5593cf9aa10c" name="awf-gtk2" arch="ppc64le">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="b377d84992657a9ffb4cc64adb683073c94d0528458f9caef6071fcca7b39e7d" name="awf-gtk2" arch="s390x">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="48f126503adc9c0f08d0d16335aafc65abb5d637b2b94c663fb467f95dc2596c" name="awf-gtk2" arch="src">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="389e3b014c810eed099e4e4c4ffb4e10685ccb19209485b5eb1d7d1f5c9df9ee" name="awf-gtk2" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="08ad7b2339e54ef357e980a8f759a8f061fc2b2406b15bf01cfaad69b2db160a" name="awf-gtk2" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change from GLIB 2.32
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs</changelog>
</package>
<package pkgid="81e9db667022b8e27c50fb76a8362311cf1b3dbe5099a1f86059171853d98220" name="awf-gtk2" arch="ppc64le">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change from GLIB 2.32
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs</changelog>
</package>
<package pkgid="23bd8f2d773134a7ef4494be232b9c8e96a40ddd9085e63d41f206d80431d2fd" name="awf-gtk2" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change from GLIB 2.32
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs</changelog>
</package>
<package pkgid="867c6197a4128223444dae0f773d70271d46d02719956ad498d210fc1e2e73f7" name="awf-gtk2" arch="src">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change from GLIB 2.32
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs</changelog>
</package>
<package pkgid="47130018294ee936306b643ba43698b5dd6601bb7c3e4dd4cbb243bb4eb6e9da" name="awf-gtk2" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1617883200">- spec cleaning</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change from GLIB 2.32
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs</changelog>
</package>
<package pkgid="d772a69dbd6f833ac37cf143935ab3bd5e74bd8cc432198016a57573a7b88fd9" name="awf-gtk3" arch="aarch64">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
</package>
<package pkgid="a1d7ebc73a2bfbf5babbca7fd929945b64e5bba011b33a4c9be8a2de3a935a45" name="awf-gtk3" arch="ppc64le">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
</package>
<package pkgid="52b233b722c57505c1d20092dd6f0fb1023632f8b73bdb049b8917081f6cb543" name="awf-gtk3" arch="s390x">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
</package>
<package pkgid="ab25beaf934d8a9106e9d251765054e34c06474114948bfcf1ec5e140de8ef4d" name="awf-gtk3" arch="src">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
</package>
<package pkgid="01a3069d738d5d2d3ca63afdbf712e779d8bf1038802b98ade4bb311ea078e17" name="awf-gtk3" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
</package>
<package pkgid="85faf999ab0508effdf1218fb471e38b893839ddc010b04f281cfaf077293d67" name="awf-gtk3" arch="aarch64">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="92e9b490824a89fd093f0515a2f5527c6427549099b8d891cdd3d5646a85a305" name="awf-gtk3" arch="ppc64le">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="eba3e2e2f9d21491178aad5d6afe713e0ae32105d975613119733ceb23f67944" name="awf-gtk3" arch="s390x">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="fa0e2419d35fda3b0a9cb56183ccd2f94b1bacf94f857efd9124272846444974" name="awf-gtk3" arch="src">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="ecab757d3e609ad0e5031593b0ba1a76994fc4b56c2759cfd65d1d71dc403391" name="awf-gtk3" arch="x86_64">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="e74e3f75b9bdd34362cd911a2e92a5dda9b897966ce64dc5c1f245797d1d6ad4" name="awf-gtk3" arch="aarch64">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="4a3ac1a59936996cd67d43bdf7066a8b88328c148e5301457e20a72a0477420c" name="awf-gtk3" arch="ppc64le">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="e04a498e7b949a8e650f29aca0e4b1944a48def2c2a3c2620d34c44aaeb2ec28" name="awf-gtk3" arch="s390x">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="37c79c540a557c0872e9537ee427099e98eeab3eae10c3903e1cd77d5e4dce04" name="awf-gtk3" arch="src">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="d1b87063d3b055288793d2468ab03ef024a03365a834b7cc88313d36994cf4bc" name="awf-gtk3" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="29fd7b664b7b2c8aec65151f8fcce80e1a3af9f785a86f77566d1e34abe12207" name="awf-gtk3" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  from GLIB 2.32 &amp; GTK 3.4
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change from GLIB 2.32
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs
  * use CSD dialogs when using GTK_CSD=1
  * add GtkInspector menuitem from GTK 3.14</changelog>
</package>
<package pkgid="6ba570f82dfb1c8fb6a8bb6d4996adffca65087dd5a56a1775a8615535119788" name="awf-gtk3" arch="ppc64le">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  from GLIB 2.32 &amp; GTK 3.4
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change from GLIB 2.32
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs
  * use CSD dialogs when using GTK_CSD=1
  * add GtkInspector menuitem from GTK 3.14</changelog>
</package>
<package pkgid="d39358a65499fe131f56ebd0e4302b8c4c523f4531db9808c9b69208748b57f5" name="awf-gtk3" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  from GLIB 2.32 &amp; GTK 3.4
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change from GLIB 2.32
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs
  * use CSD dialogs when using GTK_CSD=1
  * add GtkInspector menuitem from GTK 3.14</changelog>
</package>
<package pkgid="75af31d3e5d3956f75f151aa5498779312954c28f55eca3c05f422685eb46c11" name="awf-gtk3" arch="src">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  from GLIB 2.32 &amp; GTK 3.4
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change from GLIB 2.32
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs
  * use CSD dialogs when using GTK_CSD=1
  * add GtkInspector menuitem from GTK 3.14</changelog>
</package>
<package pkgid="60e1aa811a4ce6e1074bf2ada23cfce91fc02b1e3c58c8cdc4c358d8998dc4db" name="awf-gtk3" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  from GLIB 2.32 &amp; GTK 3.4
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change from GLIB 2.32
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs
  * use CSD dialogs when using GTK_CSD=1
  * add GtkInspector menuitem from GTK 3.14</changelog>
</package>
<package pkgid="164023087d7319e70a48830d3751e069666709092f819a675a568bcd9db96e73" name="awf-gtk4" arch="aarch64">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
</package>
<package pkgid="6ccd494edb7a54253773e457ec18abeb10997e012eb76afe1e21f6ca9e5775b8" name="awf-gtk4" arch="ppc64le">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
</package>
<package pkgid="47bc3ca5e0b4fc1bea8f09edc8b78530d407c59ab80de36217158ea17c6c91d2" name="awf-gtk4" arch="s390x">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
</package>
<package pkgid="4bde78f8736aae04b6e85b81472818351d22af80a62183f5e4dbfa1aa15ed1a5" name="awf-gtk4" arch="src">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
</package>
<package pkgid="86fa0862f325dde884a52f992a97db15284d5fc7955802da1066f48adf2e3be2" name="awf-gtk4" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
</package>
<package pkgid="97200b87a14b5de39d3e01bb4703e8091ad62cbd8f949a46570beb4a47a00e74" name="awf-gtk4" arch="aarch64">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="0dca22382f7a38befc05a3633a3bf93fa7908212942695e3ab6f5ec83815d24b" name="awf-gtk4" arch="ppc64le">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="1e7ac9c39ee60c26e872ed71419821051076dc2159142ecbb38cffdadcff6eba" name="awf-gtk4" arch="s390x">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="76a02d7b309241666ac57eaec75fb8112147c61d215b4da0ed626fd27234a0e3" name="awf-gtk4" arch="src">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="e0b7722d031bf5f95de143584005cc8adc8153b4553f016ad3e3bd8d449993aa" name="awf-gtk4" arch="x86_64">
  <version epoch="0" ver="2.9.0" rel="bp156.2.6.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
</package>
<package pkgid="e329551c20b7027ae023ba8bc35e58b3b548c28aa29fea12bff4116f8deb39cc" name="awf-gtk4" arch="aarch64">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="f2cc1dbc96ddf2aae9907ec1c20576771e41487c2a5ddc4876e82f4e2b0541f5" name="awf-gtk4" arch="ppc64le">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="76aae5b6fb40af13dbf62ca2b4ee2fd2e56d8790921b1283cac8baf2ba4579e4" name="awf-gtk4" arch="s390x">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="0f53b6c3b4bf50af22723d4462d2b89615ead9ab39c105b2a248d7ceca2d9fea" name="awf-gtk4" arch="src">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="1942c813bc56fa12b155a056951cdb19cfdfb643435043cf2cc4abd7b304ba8a" name="awf-gtk4" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error with GLIB 2.83 and/or with GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * add headerbar for CSD window
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
</package>
<package pkgid="1b319f6987443858848466f7edb61bb3d0c736e8335d1dfde1351d641dd08f03" name="awf-gtk4" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs
  * use CSD dialogs when using GTK_CSD=1
  * add GtkInspector menuitem + disable Open recent file menuitem
  * add icons in menubar and in CSD main menu
  * add missing buttons for scales and calendar dialogs
  * add close action for inactive dialog buttons</changelog>
</package>
<package pkgid="f37673c706312a321c75120444d157b9fa560dd5bce180d381fa6ddfae92a816" name="awf-gtk4" arch="ppc64le">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs
  * use CSD dialogs when using GTK_CSD=1
  * add GtkInspector menuitem + disable Open recent file menuitem
  * add icons in menubar and in CSD main menu
  * add missing buttons for scales and calendar dialogs
  * add close action for inactive dialog buttons</changelog>
</package>
<package pkgid="137709eb48035a6ab79a3d6e2428f74857ae1c8e0c5f282580113cd4af62459d" name="awf-gtk4" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs
  * use CSD dialogs when using GTK_CSD=1
  * add GtkInspector menuitem + disable Open recent file menuitem
  * add icons in menubar and in CSD main menu
  * add missing buttons for scales and calendar dialogs
  * add close action for inactive dialog buttons</changelog>
</package>
<package pkgid="254bf50dd85743b579b75f7a0208f4b8d1a53b3c4aa4f272ab50abda820f93b0" name="awf-gtk4" arch="src">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs
  * use CSD dialogs when using GTK_CSD=1
  * add GtkInspector menuitem + disable Open recent file menuitem
  * add icons in menubar and in CSD main menu
  * add missing buttons for scales and calendar dialogs
  * add close action for inactive dialog buttons</changelog>
</package>
<package pkgid="23502ae94c18010a9d398600091fcbe3da4da046071def99242087742afb83d0" name="awf-gtk4" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs
  * use CSD dialogs when using GTK_CSD=1
  * add GtkInspector menuitem + disable Open recent file menuitem
  * add icons in menubar and in CSD main menu
  * add missing buttons for scales and calendar dialogs
  * add close action for inactive dialog buttons</changelog>
</package>
<package pkgid="481573c96b4763f78e7cf693214102590cce90c7ea086ca69af20b263512d3a4" name="bash-git-prompt" arch="noarch">
  <version epoch="0" ver="2.7.1" rel="bp156.3.3.1"/>
  <changelog author="Justin Zhang &lt;schnell18@gmail.com&gt;" date="1407499200">bash-git-prompt 1.0.1-1
- Initial version of package</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1582200000">- Version 2.7.1</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1582545600">- Use profile.d instead of editing /etc/bashrc.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1589112000">- Add configuration file.</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1758542400">- add use-safe-tempfile.diff: this fixes bsc#1247489, an insecure predictable
  /tmp file usage in bash-git-prompt.</changelog>
</package>
<package pkgid="25d9a16ede83f57bfabfa4ff35c54dc49a66345ae15ae27b52bbc4b192b61e44" name="bash-git-prompt" arch="src">
  <version epoch="0" ver="2.7.1" rel="bp156.3.3.1"/>
  <changelog author="Justin Zhang &lt;schnell18@gmail.com&gt;" date="1407499200">bash-git-prompt 1.0.1-1
- Initial version of package</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1582200000">- Version 2.7.1</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1582545600">- Use profile.d instead of editing /etc/bashrc.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1589112000">- Add configuration file.</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1758542400">- add use-safe-tempfile.diff: this fixes bsc#1247489, an insecure predictable
  /tmp file usage in bash-git-prompt.</changelog>
</package>
<package pkgid="eb8f4927ef2b3fed256dae1d3fe04e4ccc5c0055dabe61aecbc1aebe521aa7a6" name="bluebird-theme" arch="src">
  <version epoch="0" ver="1.3" rel="bp156.4.3.1"/>
  <changelog author="seiler@b1-systems.de" date="1372766400">- initial commit</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to v1.2 (latest release)
  mostly minor tweaks and GTK3 fixes</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543060800">- update to v1.3
  * New version of the gtk3 theme based on the latest version of Greybird
  * Fixing broken compatibility with the latest versions of GTK+ 3
  * New index.theme file
- added %license macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607774400">- Updated upstream URL</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1738411200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  features.
- Don't pass any arguments to %build and %install; rpm-4.20 does
  not like it!</changelog>
</package>
<package pkgid="a67fa3c47643def6ffbcb184c600f59b96cabe01034513ffd884aadaf9549538" name="brlist" arch="noarch">
  <version epoch="0" ver="0.2" rel="bp156.2.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1736510400">- Initial checkin</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1736769600">- Version 0.2
  * Add full OVS support
  * List bridges with no interfaces attached</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1738411200">- Use no macros in url in .spec for packtrack</changelog>
</package>
<package pkgid="a6c14cea07cde3da1c6b20b637b8c899fcb4d21b2ed30bf5a205a7686c2261ce" name="brlist" arch="src">
  <version epoch="0" ver="0.2" rel="bp156.2.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1736510400">- Initial checkin</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1736769600">- Version 0.2
  * Add full OVS support
  * List bridges with no interfaces attached</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1738411200">- Use no macros in url in .spec for packtrack</changelog>
</package>
<package pkgid="651295dc9d299260539ff63d778573f4a834c3789bb4d761d4e66cd63cfb7c02" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.27" rel="bp156.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti 1.2.17:
  * Fix incorrect handling of fields led to potential XSS issues
  * CVE-2020-35701: Fix SQL Injection vulnerability (boo#1180804)
  * Fix various XSS issues with HTML Forms handling
  * Fix handling of Daylight Saving Time changes
  * Multiple fixes and extensions to plugins
  * Fix multiple display, export, and input validation issues
  * SNMPv3 Password field was not correctly limited
  * Improved regular expression handling for searcu
  * Improved support for RRDproxy
  * Improved behavior on large systems
  * MariaDB/MysQL: Support persistent connections and improve
    multiple operations and options
  * Add Theme 'Midwinter'
  * Modify automation to test for data before creating graphs
  * Add hooks for plugins to show customize graph source and customize
    template url
  * Allow CSRF security key to be refreshed at command line
  * Allow remote pollers statistics to be cleared
  * Allow user to be automatically logged out after admin defined
    period
  * When replicating, ensure Cacti can detect and verify replica
    servers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625918400">- cacti 1.2.18:
  * CVE-2020-14424: Lack of escaping on template import can lead to
    XSS exposure under 'midwinter' theme (boo#1188188)
  * Real time graphs can expose XSS issue</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti 1.2.19:
  * Further fixes for grave character security protection (boo#1192408)
  * Fix Over aggressive escaping causing menu visibility issues on Create Device page
  * Add SHA256 and AES256 security levels for SNMP polling
  * Import graph template(Preview Only) show color_id new value as a blank area
  * Fix Editing graphs errors due to missing sequence
  * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen
  * Fix 2hen RealTime is not active, console errors may appear
  * Fix race conditions may occur when multiple RRDtool processes are running
  * Fix errors creating graphs from templates
  * Fix errors when duplicating reports
  * Fix Boost may be blocked by overflowing poller_output table
  * Fix Template import may be blocked due to unmet dependency warnings with snmp ports
  * Fix Newer MySQL versions may error if committing a transaction when not in one
  * Fix SNMP Agent may not find a cache item
  * Fix Correct issues running under PHP 8.x
  * Fix When polling is disabled, boost may crash and creates many arch tables
  * Fix When poller runs, memory tables may not always be present
  * Fix Timezones may sometimes be incorrectly calculated
  * Fix Allow monitoring IPv6 with interface graphs
  * Fix When a data source uses a Data Input Method, those without a mapping should be flagged
  * Fix When RRDfile is not yet created, errors may appear when displaying the graph
  * Fix Cacti missing key indexes that result in Preset pages slowdowns
  * Fix Data Sources page shows no name when Data Source has no name cache
  * Fix db_update_table function can not alter table from signed to unsigned
  * Fix data remains in poller_output table even if it's flushed to rrd files
  * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places
  * Fix Offset is a reserved word in MariaDB 10.6 affecting Report
  * Fix Rendering large trees slowed due to lack of permission caching
  * Fix Error on interpretation of snmpUtime, when to big
  * Fix Applying right axis formatting creates an error-image
  * Fix Unable to Save Graph Settings from the Graphs pages
  * Fix Graph Template Cache is nullified too often when Graph Automation is running
  * Fix When Adding a Data Query to a Device, no Progress Spinner is shown
  * Fix New Browser Breaks Plugins that depend on non UTC date time data
  * Fix errors when testing remote poller connectivity
  * Fix errors when renaming poller
  * Fix Removing spikes by Variance does not appear to be working beyond the first RRA
  * Fix LDAP API lacks timeout options leading to bad login experiences
  * Add a normal/wrap class for general use
  * Limit File Types available for Template Import operations
  * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication
  * Support Stronger Encryption Available Starting in Net-SNMP v5.8
  * Allow Cacti to use multiple possible LDAP servers
  * Add a 15 minute polling/sampling interval
  * Provide additional admin email notifications
  * Add warnings for undesired changes to plugin hook return values
  * When creating a Graph, make testing the Data Sources optional by Template
  * Update phpseclib to 2.0.33
  * Update jstree.js to 3.3.12
  * Improve performance of Cacti poller on heavily loaded systems
  * MariaDB recommendations need some tuning for recent updates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650628800">- Update to 1.2.20
  * Security fix for CVE-2022-0730, boo#1196692
    Under certain ldap conditions, Cacti authentication can be
    bypassed with certain credential types.
  * Security fix: Device, Graph, Graph Template,
    and Graph Items may be vulnerable to XSS issues
  * Security fix: Lockout policies are not properly applied to LDAP
    and Domain Users
  * Security fix: When using 'remember me' option, incorrect realm
    may be selected
  * Security fix: User and Group maintenance are vulnerable to SQL attacks
  * Security fix: Color Templates are vulnerable to XSS attack
  * Features:
  * When creating a Data Source Profile, allow additional choices for Heartbeat
  * Change select all options to use Font Awesome icons
  * Improve spine performance by storing the total number of system snmp_ports in use
  * Prevent Template User Accounts from being Removed
  * When managing by users, allow filtering by Realm
  * Allow plugins to supply template account names
  * When viewing logs, additional message types should be filterable
  * When creating a Graph Template Item, allow filtering by Data Template
  * Allow language handler to be selected via UI
  * Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco
  * Add Advanced Ping Graph Template to initial Installable templates
  * Add LDAP Debug Mode option
  * Allow Reports to include devices not on a Tree
  * Allow Basic Authentication to display custom failure message
  * Fix: When replicating data during installation/upgrade,
    system may appear to hang
  * Fix: Graph Template Items may have duplicated entries
  * Fix: Unable to Save Graph Settings
  * Fix: Script Server may crash if an OID is missing or unavailable
  * Fix: When system-wide polling is disabled,
    remote pollers may fail to sync changed settings
  * Fix: When updating poller name, duplicate name protection may be over zealous
  * Fix: Titles may show "Missing Datasource" incorectly
  * Fix: Checking for MIB Cache can cause crashes
  * Fix: Polling cycles may not always complete as expected
  * Fix: When viewing graph data, non-numeric values may appear
  * Fix: Utilities view has calculation errors when there are no data sources
  * Fix: When editing Reports, drag and drop may not function as intended
  * Fix: When data drive is full, viewing a Graph can result in errors
  * Various other bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti 1.2.21:
  * Add a CLI script to install/enable/disable/uninstall plugins
  * Add log message when purging DS stats and poller repopulate
  * A collection of bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti 1.2.22, providing one security fix, a number of bug fixes
  and a collection of improvements:
  * When creating new graphs, cross site injection is possible
    (boo#1203952)
  * When creating user from template, multiple Domain FullName and
    Mail are not propagated
  * Nectar Aggregate 95th emailed report broken
  * Boost may not find archive tables correctly
  * Users may be unable to change their password when forced during
    a login
  * Net-SNMP Memory Graph Template has Wrong GPRINT
  * Search in tree view unusable on larger installations
  * Increased bulk insert size to avoid partial inserts and potential
    data loss.
  * Call to undefined function boost_debug in Cacti log
  * When no guest template is set, login cookies are not properly set
  * Later RRDtool releases do not need to check last_update time
  * Regex filters are not always long enough
  * Domains based LDAP and AD Fullname and Email not auto-populated
  * Cacti polling and boost report the wrong number of Data Sources
    when Devices are disabled
  * When editing Graph Template Items there are cases where VDEF's
    are hidden when they should be shown
  * Database SSL setting lacks default value
  * Update default path cacti under *BSD by xmacan
  * Web Basic authentication not creating template user
  * Unable to change the Heartbeat of a Data Source Profile
  * Tree Search Does Not Properly Search All Trees
  * When structured paths are setup, RRDfiles may not always be
    created when possible
  * When parsing the logs, caching would help speed up processing
  * Deprecation warnings when attempting real-time Graphs with PHP8.1
  * Custom Timespan is lost when clicking other tree branches
  * Non device based Data Sources not being polled
  * When Resource XML file inproperly formatted, graph creation can
    fail with errors
  * Update code style to support PHP 8 requirements
  * None" shows all graphs
  * Realtime popup window experiences issues on some browsers
  * Auth settings do not always properly reflect the options selected
    by ddb4github
  * MySQL can cause cacti to become stalled due to locking issues
  * Boost process can get hung under rare conditions until the poller
    times out
  * Exporting graphs under PHP 8 can cause errors
  * Host table has wrong default for disabled and deleted columns
  * RRD storage paths do not scale properly
  * When importing, make it possible to only import certain
    components
  * Update change_device script to include new features by
    bmfmancini
  * Make help pages use latest online version wherever possible
  * Cacti should show PHP INI locations during install
  * Detect PHP INI values that are different in the INI vs running
    config
  * Added Gradient Color support for AREA charts by thurban
  * Update CDEF functions for RRDtool
  * When boost is running, it's not clear which processes are
    running and how long they have to complete</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti 1.2.23, providing security fixes, feature improvements and
  bug fixes:
  * CVE-2022-46169: Unauthenticated Command Injection in Remote
    Agent (boo#1206185)
  * Security: Add .htaccess file to scripts folder
  * When using Single Sign-on Frameworks, revocation was not always
    detected in callbacks
  * Fixes to the installer, and compatibility with PHP and MySQL
  * Performance improvements for certain conditions
  * Various UI fixes
  * Bug fixes related to SNMP, RRDtools, and agents</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677499200">- cacti 1.2.24
  * Fix: Unable to import Local Linux Machine template
  * Fix multiple charting and display issues
  * Compatibility changes for SNMP under PHP 8.2, and other PHP
    compatibility updates
  * Fix multiple issues editing settings
  * timeout fixes for Basic Auth
  * multiple data poller bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1694001600">- cacti 1.2.25:
  * CVE-2023-30534: Protect against Insecure deserialization of filter data (boo#1215082)
  * CVE-2023-39360: Cross-Site Scripting vulnerability when creating new graphs (boo#1215044)
  * CVE-2023-39361: Unauthenticated SQL Injection when viewing graphs (boo#1215045)
  * CVE-2023-39357: SQL Injection when saving data with sql_save() (boo#1215040)
  * CVE-2023-39362: Authenticated command injection when using SNMP options (boo#1215047)
  * CVE-2023-39359: Authenticated SQL injection vulnerability when managing graphs (boo#1215043)
  * CVE-2023-39358: Authenticated SQL injection vulnerability when managing reports (boo#1215042)
  * CVE-2023-39365: SQL Injection when using regular expressions (boo#1215051)
  * CVE-2023-39364: redirect in change password functionality (boo#1215050)
  * CVE-2023-39366: Cross-Site Scripting vulnerability with Device Name when managing Data Sources (boo#1215052)
  * CVE-2023-39510: Cross-Site Scripting vulnerability with Device Name when administrating Reports (boo#1215053)
  * CVE-2023-39511: Cross-Site Scripting vulnerability with Device Name when editing Graphs whilst managing Reports (boo#1215081)
  * CVE-2023-39512: Cross-Site Scripting vulnerability with Device Name when managing Data Sources (boo#1215054)
  * CVE-2023-39513: Cross-Site Scripting vulnerability with Device Name when debugging data queries (boo#1215055)
  * CVE-2023-39514: Cross-Site Scripting vulnerability with Data Source Name when managing Graphs (boo#1215056)
  * CVE-2023-39515: Cross-Site Scripting vulnerability with Data Source Name when debugging Data Queries (boo#1215058)
  * CVE-2023-39516: Cross-Site Scripting vulnerability with Data Source Information when managing Data Sources (boo#1215059)
  * When rebuilding the Poller Cache from command line, allow it to be multi-threaded
  * When searching tree or list views, the URL does not update after changes
  * When creating a Data Source Template with a specific snmp port, the port is not always applied
  * When a Data Query references a file, the filename should be trimmed to remove spurious spaces
  * THold plugin may not always install or upgrade properly
  * RRD file structures are not always updated properly, if there are more Data Sources in the Data Template than the Graph Template
  * When reindexing devices, errors may sometimes be shown
  * Boost may loose data when the database server is overloaded
  * Boost can sometimes output unexpected or invalid values
  * Boost should not attempt to start if there are no items to process
  * Rebuilding the poller cache does not always work as expected
  * Host CPU items may not work poll as expected when on a remote data collector where hmib is also enabled
  * When creating new graphs, invalid offset errors may be generated
  * When importing packages, SQL errors may be generated
  * When managing plugins from command line, the --plugin option is not properly handled
  * When automating an install of Cacti, error messages can be appear
  * When performing automated install of a plugin, warnings can be thrown
  * Automation references the wrong table name causing errors
  * Data Source Info Mode produces invalid recommendations
  * Data Source Debug 'Run All' generates too many log messages
  * The description of rebuild poller cache in utilities does not display properly
  * When reindexing a device, debug information may not always display properly
  * Upon displaying a form with errors, the session error fields variable isn't cleared
  * MariaDB clusters will no longer support exclusive locks
  * RRDtool can fail to update when sources in Data Template and Graph Template data sources do not match
  * Compatibility improvements for Boost under PHP 8.x
  * When searching the tree, increase the time before querying for items
  * Device Location drop down does not always populate correctly
  * When viewing Realtime graphs, undefined variable errors may be reported
  * SNMP Uptime is not always ignored for spikekills
  * Improve detection of downed Devices
  * When reporting missing functions from Plugins, ensure messages do not occur too often
  * When starting the Cacti daemon, database errors may be reported when there is no problem
  * When reporting from RRDcheck, ensure prefix is in the correct casing
  * Improve Orphaned Data Source options and display
  * Parsing the PHP Configuration may sometimes produce errors
  * Security processes attempt to check for a user lockout even if there is no user logged in
  * When attempting to edit a tree, the search filter for Graphs remains disabled
  * When reindexing, a Data Source that could be un-orphaned may not always be unorphaned
  * When parsing a date value, there could be more than 30 chars
  * Untemplated Data Sources can fail to update due to lack of an assigned Graph
  * When processing items to check, do not include disabled hosts
  * When saving a Data Source Template, SQL errors may be reported
  * When importing a Template, errors may be recorded
  * Some display strings have invalid formatting that cannot be parsed
  * When filtering with regular expressions, the 'does not match' option does not always function as expected
  * When enabling a plugin, sometimes it can appear as if nothing happens
  * Ensure the Rows Per Page option shows limitations set by configuration
  * Plugins are unable to modify fields in the setting 'Change Device Settings'
  * When reporting emails being sent, ensure BCC addresses are also included
  * Improve compatibility of SNMP class trim handling under PHP 8.x
  * When importing legacy Data Query Templates, the Template can become unusable
  * Provide ability to raise an event when extending the settings form
  * Prevent unsupported SQL Mode flags from being set
  * The DSStats summary does not always display expected values
  * When performing a fresh install, device classification may be missing.
  * Duplication functions for Graph/Template and Data Source/Template do not return and id
  * Duplication of Device Templates should be an API call
  * Unable to convert database to latin1 instead of utf8 if desired
  * When creating Graphs, the process may become slower over time as more items exist
  * When a bulk walk size is set to automatic, this is not always set to the optimal value
  * Update copyright notice on import packages
  * When viewing Orphan Graphs, SQL errors may be reported
  * When reindexing hosts from command line, ensure only one process runs at once
  * When a Data Query has no Graphs, it may not be deletable
  * When duplicating a Graph Template, provide an option to not duplicate Data Query association
  * When duplicating a Data Template errors can appear in the Cacti log
  * When importing a Package, previewing makes unexpected changes to Cacti Templates
  * When enabling boost on a fresh install, an error may be reported
  * Improve compatibility for backtrace logging under PHP 8.x
  * Improve compatibility for Advanced Ping under PHP 8.x
  * Provide new templates for Fortigate and Aruba Cluster to be available during install
  * Provide new template for SNMP Printer to be available during install
  * When importing devices, allow a device classification to be known
  * Extend length of maximum name in settings table
  * Extend length of maximum name in user settings table
  * Data Queries do not have a Duplication function
  * Upgrade d3.js v7.8.2 and billboard.js v3.7.4
  * Upgrade ua-parser.js to version 1.0.35
  * Update Cisco Device Template to include HSRP graph template
  * New hook for device template change 'device_template_change'</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1703419200">- cacti 1.2.26:
  * CVE-2023-50250: XSS vulnerability when importing a template file (boo#1218380)
  * CVE-2023-49084: RCE vulnerability when managing links (boo#1218360)
  * CVE-2023-49085: SQL Injection vulnerability when managing poller devices (boo#1218378)
  * CVE-2023-49086: XSS vulnerability when adding new devices (boo#1218366)
  * CVE-2023-49088: XSS vulnerability when viewing data sources in debug mode (boo#1218379)
  * CVE-2023-51448: SQL Injection vulnerability when managing SNMP Notification Receivers (boo#1218381)
  * When viewing data sources, an undefined variable error may be seen
  * Improvements for Poller Last Run Date
  * Attempting to edit a Data Query that does not exist throws warnings and not an GUI error
  * Improve PHP 8.1 support when adding devices
  * Viewing Data Query Cache can cause errors to be logged
  * Preserve option is not properly honoured when removing devices at command line
  * Infinite recursion is possible during a database failure
  * Monitoring Host CPU's does not always work on Windows endpoints
  * Multi select drop down list box not rendered correctly in Chrome and Edge
  * Selective Plugin Debugging may not always work as intended
  * During upgrades, Plugins may be falsely reported as incompatible
  * Plugin management at command line does not work with multiple plugins
  * Improve PHP 8.1 support for incrementing only numbers
  * Allow the renaming of guest and template accounts
  * DS Stats issues warnings when the RRDfile has not been initialized
  * When upgrading, missing data source profile can cause errors to be logged
  * When deleting a single Data Source, purge historical debug data
  * Improvements to form element warnings
  * Some interface aliases do not appear correctly
  * Aggregate graph does not show other percentiles
  * Settings table updates for large values reverted by database repair
  * When obtaining graph records, error messages may be recorded
  * Unable to change a device's community at command line
  * Increase timeout for RRDChecker
  * When viewing a graph, option to edit template may lead to incorrect URL
  * When upgrading, failures may occur due to missing color table keys
  * On installation, allow a more appropriate template to be used as the default
  * When data input parameters are allowed to be null, allow null
  * CSV Exports may not always output data correctly
  * When debugging a graph, long CDEF's can cause undesirable scrolling
  * Secondary LDAP server not evaluated when the first one has failed
  * When adding a device, using the bulk walk option can make version information appear
  * When parsing a Data Query resource, an error can be reported if no direction is specified
  * Database reconnection can cause errors to be reported incorrectly
  * fix returned value if $sau is empty
  * Add Aruba switch, Aruba controller and HPE iLO templates
  * Add OSCX 6x00 templates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- cacti 1.2.27:
  * CVE-2024-34340: Authentication Bypass when using using older password hashes (boo#1224240)
  * CVE-2024-25641: RCE vulnerability when importing packages (boo#1224229)
  * CVE-2024-31459: RCE vulnerability when plugins include files (boo#1224238)
  * CVE-2024-31460: SQL Injection vulnerability when using tree rules through Automation API (boo#1224239)
  * CVE-2024-29894: XSS vulnerability when using JavaScript based messaging API (boo#1224231)
  * CVE-2024-31458: SQL Injection vulnerability when using form templates (boo#1224241)
  * CVE-2024-31444: XSS vulnerability when reading tree rules with Automation API (boo#1224236)
  * CVE-2024-31443: XSS vulnerability when managing data queries (boo#1224235)
  * CVE-2024-31445: SQL Injection vulnerability when retrieving graphs using Automation API (boo#1224237)
  * CVE-2024-27082: XSS vulnerability when managing trees (boo#1224230)
  * Improve PHP 8.3 support
  * When importing packages via command line, data source profile could not be selected
  * When changing password, returning to previous page does not always work
  * When using LDAP authentication the first time, warnings may appear in logs
  * When editing/viewing devices, add IPv6 info to hostname tooltip
  * Improve speed of polling when Boost is enabled
  * Improve support for Half-Hour time zones
  * When user session not found, device lists can be incorrectly returned
  * On import, legacy templates may generate warnings
  * Improve support for alternate locations of Ping
  * Improve PHP 8.1 support for Installer
  * Fix issues with number formatting
  * Improve PHP 8.1 support when SpikeKill is run first time
  * Improve PHP 8.1 support for SpikeKill
  * When using Chinese to search for graphics, garbled characters appear.
  * When importing templates, preview mode will not always load
  * When remote poller is installed, MySQL TimeZone DB checks are not performed
  * When Remote Poller installation completes, no finish button is shown
  * Unauthorized agents should be recorded into logs
  * Poller cache may not always update if hostname changes
  * When using CMD poller, Failure and Recovery dates may have incorrect values
  * Saving a Tree can cause the tree to become unpublished
  * Web Basic Authentication does not record user logins
  * When using Accent-based languages, translations may not work properly
  * Fix automation expressions for device rules
  * Improve PHP 8.1 Support during fresh install with boost
  * Add a device "enabled/disabled" indicator next to the graphs
  * Notify the admin periodically when a remote data collector goes into heartbeat status
  * Add template for Aruba Clearpass
  * Add fliter/sort of Device Templates by Graph Templates</changelog>
</package>
<package pkgid="5fed2034b25336588ce45c3da42f3d315c286b7ed12309b57a6f337a76c8503c" name="cacti" arch="src">
  <version epoch="0" ver="1.2.27" rel="bp156.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti 1.2.17:
  * Fix incorrect handling of fields led to potential XSS issues
  * CVE-2020-35701: Fix SQL Injection vulnerability (boo#1180804)
  * Fix various XSS issues with HTML Forms handling
  * Fix handling of Daylight Saving Time changes
  * Multiple fixes and extensions to plugins
  * Fix multiple display, export, and input validation issues
  * SNMPv3 Password field was not correctly limited
  * Improved regular expression handling for searcu
  * Improved support for RRDproxy
  * Improved behavior on large systems
  * MariaDB/MysQL: Support persistent connections and improve
    multiple operations and options
  * Add Theme 'Midwinter'
  * Modify automation to test for data before creating graphs
  * Add hooks for plugins to show customize graph source and customize
    template url
  * Allow CSRF security key to be refreshed at command line
  * Allow remote pollers statistics to be cleared
  * Allow user to be automatically logged out after admin defined
    period
  * When replicating, ensure Cacti can detect and verify replica
    servers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625918400">- cacti 1.2.18:
  * CVE-2020-14424: Lack of escaping on template import can lead to
    XSS exposure under 'midwinter' theme (boo#1188188)
  * Real time graphs can expose XSS issue</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti 1.2.19:
  * Further fixes for grave character security protection (boo#1192408)
  * Fix Over aggressive escaping causing menu visibility issues on Create Device page
  * Add SHA256 and AES256 security levels for SNMP polling
  * Import graph template(Preview Only) show color_id new value as a blank area
  * Fix Editing graphs errors due to missing sequence
  * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen
  * Fix 2hen RealTime is not active, console errors may appear
  * Fix race conditions may occur when multiple RRDtool processes are running
  * Fix errors creating graphs from templates
  * Fix errors when duplicating reports
  * Fix Boost may be blocked by overflowing poller_output table
  * Fix Template import may be blocked due to unmet dependency warnings with snmp ports
  * Fix Newer MySQL versions may error if committing a transaction when not in one
  * Fix SNMP Agent may not find a cache item
  * Fix Correct issues running under PHP 8.x
  * Fix When polling is disabled, boost may crash and creates many arch tables
  * Fix When poller runs, memory tables may not always be present
  * Fix Timezones may sometimes be incorrectly calculated
  * Fix Allow monitoring IPv6 with interface graphs
  * Fix When a data source uses a Data Input Method, those without a mapping should be flagged
  * Fix When RRDfile is not yet created, errors may appear when displaying the graph
  * Fix Cacti missing key indexes that result in Preset pages slowdowns
  * Fix Data Sources page shows no name when Data Source has no name cache
  * Fix db_update_table function can not alter table from signed to unsigned
  * Fix data remains in poller_output table even if it's flushed to rrd files
  * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places
  * Fix Offset is a reserved word in MariaDB 10.6 affecting Report
  * Fix Rendering large trees slowed due to lack of permission caching
  * Fix Error on interpretation of snmpUtime, when to big
  * Fix Applying right axis formatting creates an error-image
  * Fix Unable to Save Graph Settings from the Graphs pages
  * Fix Graph Template Cache is nullified too often when Graph Automation is running
  * Fix When Adding a Data Query to a Device, no Progress Spinner is shown
  * Fix New Browser Breaks Plugins that depend on non UTC date time data
  * Fix errors when testing remote poller connectivity
  * Fix errors when renaming poller
  * Fix Removing spikes by Variance does not appear to be working beyond the first RRA
  * Fix LDAP API lacks timeout options leading to bad login experiences
  * Add a normal/wrap class for general use
  * Limit File Types available for Template Import operations
  * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication
  * Support Stronger Encryption Available Starting in Net-SNMP v5.8
  * Allow Cacti to use multiple possible LDAP servers
  * Add a 15 minute polling/sampling interval
  * Provide additional admin email notifications
  * Add warnings for undesired changes to plugin hook return values
  * When creating a Graph, make testing the Data Sources optional by Template
  * Update phpseclib to 2.0.33
  * Update jstree.js to 3.3.12
  * Improve performance of Cacti poller on heavily loaded systems
  * MariaDB recommendations need some tuning for recent updates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650628800">- Update to 1.2.20
  * Security fix for CVE-2022-0730, boo#1196692
    Under certain ldap conditions, Cacti authentication can be
    bypassed with certain credential types.
  * Security fix: Device, Graph, Graph Template,
    and Graph Items may be vulnerable to XSS issues
  * Security fix: Lockout policies are not properly applied to LDAP
    and Domain Users
  * Security fix: When using 'remember me' option, incorrect realm
    may be selected
  * Security fix: User and Group maintenance are vulnerable to SQL attacks
  * Security fix: Color Templates are vulnerable to XSS attack
  * Features:
  * When creating a Data Source Profile, allow additional choices for Heartbeat
  * Change select all options to use Font Awesome icons
  * Improve spine performance by storing the total number of system snmp_ports in use
  * Prevent Template User Accounts from being Removed
  * When managing by users, allow filtering by Realm
  * Allow plugins to supply template account names
  * When viewing logs, additional message types should be filterable
  * When creating a Graph Template Item, allow filtering by Data Template
  * Allow language handler to be selected via UI
  * Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco
  * Add Advanced Ping Graph Template to initial Installable templates
  * Add LDAP Debug Mode option
  * Allow Reports to include devices not on a Tree
  * Allow Basic Authentication to display custom failure message
  * Fix: When replicating data during installation/upgrade,
    system may appear to hang
  * Fix: Graph Template Items may have duplicated entries
  * Fix: Unable to Save Graph Settings
  * Fix: Script Server may crash if an OID is missing or unavailable
  * Fix: When system-wide polling is disabled,
    remote pollers may fail to sync changed settings
  * Fix: When updating poller name, duplicate name protection may be over zealous
  * Fix: Titles may show "Missing Datasource" incorectly
  * Fix: Checking for MIB Cache can cause crashes
  * Fix: Polling cycles may not always complete as expected
  * Fix: When viewing graph data, non-numeric values may appear
  * Fix: Utilities view has calculation errors when there are no data sources
  * Fix: When editing Reports, drag and drop may not function as intended
  * Fix: When data drive is full, viewing a Graph can result in errors
  * Various other bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti 1.2.21:
  * Add a CLI script to install/enable/disable/uninstall plugins
  * Add log message when purging DS stats and poller repopulate
  * A collection of bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti 1.2.22, providing one security fix, a number of bug fixes
  and a collection of improvements:
  * When creating new graphs, cross site injection is possible
    (boo#1203952)
  * When creating user from template, multiple Domain FullName and
    Mail are not propagated
  * Nectar Aggregate 95th emailed report broken
  * Boost may not find archive tables correctly
  * Users may be unable to change their password when forced during
    a login
  * Net-SNMP Memory Graph Template has Wrong GPRINT
  * Search in tree view unusable on larger installations
  * Increased bulk insert size to avoid partial inserts and potential
    data loss.
  * Call to undefined function boost_debug in Cacti log
  * When no guest template is set, login cookies are not properly set
  * Later RRDtool releases do not need to check last_update time
  * Regex filters are not always long enough
  * Domains based LDAP and AD Fullname and Email not auto-populated
  * Cacti polling and boost report the wrong number of Data Sources
    when Devices are disabled
  * When editing Graph Template Items there are cases where VDEF's
    are hidden when they should be shown
  * Database SSL setting lacks default value
  * Update default path cacti under *BSD by xmacan
  * Web Basic authentication not creating template user
  * Unable to change the Heartbeat of a Data Source Profile
  * Tree Search Does Not Properly Search All Trees
  * When structured paths are setup, RRDfiles may not always be
    created when possible
  * When parsing the logs, caching would help speed up processing
  * Deprecation warnings when attempting real-time Graphs with PHP8.1
  * Custom Timespan is lost when clicking other tree branches
  * Non device based Data Sources not being polled
  * When Resource XML file inproperly formatted, graph creation can
    fail with errors
  * Update code style to support PHP 8 requirements
  * None" shows all graphs
  * Realtime popup window experiences issues on some browsers
  * Auth settings do not always properly reflect the options selected
    by ddb4github
  * MySQL can cause cacti to become stalled due to locking issues
  * Boost process can get hung under rare conditions until the poller
    times out
  * Exporting graphs under PHP 8 can cause errors
  * Host table has wrong default for disabled and deleted columns
  * RRD storage paths do not scale properly
  * When importing, make it possible to only import certain
    components
  * Update change_device script to include new features by
    bmfmancini
  * Make help pages use latest online version wherever possible
  * Cacti should show PHP INI locations during install
  * Detect PHP INI values that are different in the INI vs running
    config
  * Added Gradient Color support for AREA charts by thurban
  * Update CDEF functions for RRDtool
  * When boost is running, it's not clear which processes are
    running and how long they have to complete</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti 1.2.23, providing security fixes, feature improvements and
  bug fixes:
  * CVE-2022-46169: Unauthenticated Command Injection in Remote
    Agent (boo#1206185)
  * Security: Add .htaccess file to scripts folder
  * When using Single Sign-on Frameworks, revocation was not always
    detected in callbacks
  * Fixes to the installer, and compatibility with PHP and MySQL
  * Performance improvements for certain conditions
  * Various UI fixes
  * Bug fixes related to SNMP, RRDtools, and agents</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677499200">- cacti 1.2.24
  * Fix: Unable to import Local Linux Machine template
  * Fix multiple charting and display issues
  * Compatibility changes for SNMP under PHP 8.2, and other PHP
    compatibility updates
  * Fix multiple issues editing settings
  * timeout fixes for Basic Auth
  * multiple data poller bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1694001600">- cacti 1.2.25:
  * CVE-2023-30534: Protect against Insecure deserialization of filter data (boo#1215082)
  * CVE-2023-39360: Cross-Site Scripting vulnerability when creating new graphs (boo#1215044)
  * CVE-2023-39361: Unauthenticated SQL Injection when viewing graphs (boo#1215045)
  * CVE-2023-39357: SQL Injection when saving data with sql_save() (boo#1215040)
  * CVE-2023-39362: Authenticated command injection when using SNMP options (boo#1215047)
  * CVE-2023-39359: Authenticated SQL injection vulnerability when managing graphs (boo#1215043)
  * CVE-2023-39358: Authenticated SQL injection vulnerability when managing reports (boo#1215042)
  * CVE-2023-39365: SQL Injection when using regular expressions (boo#1215051)
  * CVE-2023-39364: redirect in change password functionality (boo#1215050)
  * CVE-2023-39366: Cross-Site Scripting vulnerability with Device Name when managing Data Sources (boo#1215052)
  * CVE-2023-39510: Cross-Site Scripting vulnerability with Device Name when administrating Reports (boo#1215053)
  * CVE-2023-39511: Cross-Site Scripting vulnerability with Device Name when editing Graphs whilst managing Reports (boo#1215081)
  * CVE-2023-39512: Cross-Site Scripting vulnerability with Device Name when managing Data Sources (boo#1215054)
  * CVE-2023-39513: Cross-Site Scripting vulnerability with Device Name when debugging data queries (boo#1215055)
  * CVE-2023-39514: Cross-Site Scripting vulnerability with Data Source Name when managing Graphs (boo#1215056)
  * CVE-2023-39515: Cross-Site Scripting vulnerability with Data Source Name when debugging Data Queries (boo#1215058)
  * CVE-2023-39516: Cross-Site Scripting vulnerability with Data Source Information when managing Data Sources (boo#1215059)
  * When rebuilding the Poller Cache from command line, allow it to be multi-threaded
  * When searching tree or list views, the URL does not update after changes
  * When creating a Data Source Template with a specific snmp port, the port is not always applied
  * When a Data Query references a file, the filename should be trimmed to remove spurious spaces
  * THold plugin may not always install or upgrade properly
  * RRD file structures are not always updated properly, if there are more Data Sources in the Data Template than the Graph Template
  * When reindexing devices, errors may sometimes be shown
  * Boost may loose data when the database server is overloaded
  * Boost can sometimes output unexpected or invalid values
  * Boost should not attempt to start if there are no items to process
  * Rebuilding the poller cache does not always work as expected
  * Host CPU items may not work poll as expected when on a remote data collector where hmib is also enabled
  * When creating new graphs, invalid offset errors may be generated
  * When importing packages, SQL errors may be generated
  * When managing plugins from command line, the --plugin option is not properly handled
  * When automating an install of Cacti, error messages can be appear
  * When performing automated install of a plugin, warnings can be thrown
  * Automation references the wrong table name causing errors
  * Data Source Info Mode produces invalid recommendations
  * Data Source Debug 'Run All' generates too many log messages
  * The description of rebuild poller cache in utilities does not display properly
  * When reindexing a device, debug information may not always display properly
  * Upon displaying a form with errors, the session error fields variable isn't cleared
  * MariaDB clusters will no longer support exclusive locks
  * RRDtool can fail to update when sources in Data Template and Graph Template data sources do not match
  * Compatibility improvements for Boost under PHP 8.x
  * When searching the tree, increase the time before querying for items
  * Device Location drop down does not always populate correctly
  * When viewing Realtime graphs, undefined variable errors may be reported
  * SNMP Uptime is not always ignored for spikekills
  * Improve detection of downed Devices
  * When reporting missing functions from Plugins, ensure messages do not occur too often
  * When starting the Cacti daemon, database errors may be reported when there is no problem
  * When reporting from RRDcheck, ensure prefix is in the correct casing
  * Improve Orphaned Data Source options and display
  * Parsing the PHP Configuration may sometimes produce errors
  * Security processes attempt to check for a user lockout even if there is no user logged in
  * When attempting to edit a tree, the search filter for Graphs remains disabled
  * When reindexing, a Data Source that could be un-orphaned may not always be unorphaned
  * When parsing a date value, there could be more than 30 chars
  * Untemplated Data Sources can fail to update due to lack of an assigned Graph
  * When processing items to check, do not include disabled hosts
  * When saving a Data Source Template, SQL errors may be reported
  * When importing a Template, errors may be recorded
  * Some display strings have invalid formatting that cannot be parsed
  * When filtering with regular expressions, the 'does not match' option does not always function as expected
  * When enabling a plugin, sometimes it can appear as if nothing happens
  * Ensure the Rows Per Page option shows limitations set by configuration
  * Plugins are unable to modify fields in the setting 'Change Device Settings'
  * When reporting emails being sent, ensure BCC addresses are also included
  * Improve compatibility of SNMP class trim handling under PHP 8.x
  * When importing legacy Data Query Templates, the Template can become unusable
  * Provide ability to raise an event when extending the settings form
  * Prevent unsupported SQL Mode flags from being set
  * The DSStats summary does not always display expected values
  * When performing a fresh install, device classification may be missing.
  * Duplication functions for Graph/Template and Data Source/Template do not return and id
  * Duplication of Device Templates should be an API call
  * Unable to convert database to latin1 instead of utf8 if desired
  * When creating Graphs, the process may become slower over time as more items exist
  * When a bulk walk size is set to automatic, this is not always set to the optimal value
  * Update copyright notice on import packages
  * When viewing Orphan Graphs, SQL errors may be reported
  * When reindexing hosts from command line, ensure only one process runs at once
  * When a Data Query has no Graphs, it may not be deletable
  * When duplicating a Graph Template, provide an option to not duplicate Data Query association
  * When duplicating a Data Template errors can appear in the Cacti log
  * When importing a Package, previewing makes unexpected changes to Cacti Templates
  * When enabling boost on a fresh install, an error may be reported
  * Improve compatibility for backtrace logging under PHP 8.x
  * Improve compatibility for Advanced Ping under PHP 8.x
  * Provide new templates for Fortigate and Aruba Cluster to be available during install
  * Provide new template for SNMP Printer to be available during install
  * When importing devices, allow a device classification to be known
  * Extend length of maximum name in settings table
  * Extend length of maximum name in user settings table
  * Data Queries do not have a Duplication function
  * Upgrade d3.js v7.8.2 and billboard.js v3.7.4
  * Upgrade ua-parser.js to version 1.0.35
  * Update Cisco Device Template to include HSRP graph template
  * New hook for device template change 'device_template_change'</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1703419200">- cacti 1.2.26:
  * CVE-2023-50250: XSS vulnerability when importing a template file (boo#1218380)
  * CVE-2023-49084: RCE vulnerability when managing links (boo#1218360)
  * CVE-2023-49085: SQL Injection vulnerability when managing poller devices (boo#1218378)
  * CVE-2023-49086: XSS vulnerability when adding new devices (boo#1218366)
  * CVE-2023-49088: XSS vulnerability when viewing data sources in debug mode (boo#1218379)
  * CVE-2023-51448: SQL Injection vulnerability when managing SNMP Notification Receivers (boo#1218381)
  * When viewing data sources, an undefined variable error may be seen
  * Improvements for Poller Last Run Date
  * Attempting to edit a Data Query that does not exist throws warnings and not an GUI error
  * Improve PHP 8.1 support when adding devices
  * Viewing Data Query Cache can cause errors to be logged
  * Preserve option is not properly honoured when removing devices at command line
  * Infinite recursion is possible during a database failure
  * Monitoring Host CPU's does not always work on Windows endpoints
  * Multi select drop down list box not rendered correctly in Chrome and Edge
  * Selective Plugin Debugging may not always work as intended
  * During upgrades, Plugins may be falsely reported as incompatible
  * Plugin management at command line does not work with multiple plugins
  * Improve PHP 8.1 support for incrementing only numbers
  * Allow the renaming of guest and template accounts
  * DS Stats issues warnings when the RRDfile has not been initialized
  * When upgrading, missing data source profile can cause errors to be logged
  * When deleting a single Data Source, purge historical debug data
  * Improvements to form element warnings
  * Some interface aliases do not appear correctly
  * Aggregate graph does not show other percentiles
  * Settings table updates for large values reverted by database repair
  * When obtaining graph records, error messages may be recorded
  * Unable to change a device's community at command line
  * Increase timeout for RRDChecker
  * When viewing a graph, option to edit template may lead to incorrect URL
  * When upgrading, failures may occur due to missing color table keys
  * On installation, allow a more appropriate template to be used as the default
  * When data input parameters are allowed to be null, allow null
  * CSV Exports may not always output data correctly
  * When debugging a graph, long CDEF's can cause undesirable scrolling
  * Secondary LDAP server not evaluated when the first one has failed
  * When adding a device, using the bulk walk option can make version information appear
  * When parsing a Data Query resource, an error can be reported if no direction is specified
  * Database reconnection can cause errors to be reported incorrectly
  * fix returned value if $sau is empty
  * Add Aruba switch, Aruba controller and HPE iLO templates
  * Add OSCX 6x00 templates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- cacti 1.2.27:
  * CVE-2024-34340: Authentication Bypass when using using older password hashes (boo#1224240)
  * CVE-2024-25641: RCE vulnerability when importing packages (boo#1224229)
  * CVE-2024-31459: RCE vulnerability when plugins include files (boo#1224238)
  * CVE-2024-31460: SQL Injection vulnerability when using tree rules through Automation API (boo#1224239)
  * CVE-2024-29894: XSS vulnerability when using JavaScript based messaging API (boo#1224231)
  * CVE-2024-31458: SQL Injection vulnerability when using form templates (boo#1224241)
  * CVE-2024-31444: XSS vulnerability when reading tree rules with Automation API (boo#1224236)
  * CVE-2024-31443: XSS vulnerability when managing data queries (boo#1224235)
  * CVE-2024-31445: SQL Injection vulnerability when retrieving graphs using Automation API (boo#1224237)
  * CVE-2024-27082: XSS vulnerability when managing trees (boo#1224230)
  * Improve PHP 8.3 support
  * When importing packages via command line, data source profile could not be selected
  * When changing password, returning to previous page does not always work
  * When using LDAP authentication the first time, warnings may appear in logs
  * When editing/viewing devices, add IPv6 info to hostname tooltip
  * Improve speed of polling when Boost is enabled
  * Improve support for Half-Hour time zones
  * When user session not found, device lists can be incorrectly returned
  * On import, legacy templates may generate warnings
  * Improve support for alternate locations of Ping
  * Improve PHP 8.1 support for Installer
  * Fix issues with number formatting
  * Improve PHP 8.1 support when SpikeKill is run first time
  * Improve PHP 8.1 support for SpikeKill
  * When using Chinese to search for graphics, garbled characters appear.
  * When importing templates, preview mode will not always load
  * When remote poller is installed, MySQL TimeZone DB checks are not performed
  * When Remote Poller installation completes, no finish button is shown
  * Unauthorized agents should be recorded into logs
  * Poller cache may not always update if hostname changes
  * When using CMD poller, Failure and Recovery dates may have incorrect values
  * Saving a Tree can cause the tree to become unpublished
  * Web Basic Authentication does not record user logins
  * When using Accent-based languages, translations may not work properly
  * Fix automation expressions for device rules
  * Improve PHP 8.1 Support during fresh install with boost
  * Add a device "enabled/disabled" indicator next to the graphs
  * Notify the admin periodically when a remote data collector goes into heartbeat status
  * Add template for Aruba Clearpass
  * Add fliter/sort of Device Templates by Graph Templates</changelog>
</package>
<package pkgid="90cbcd38950377478479e5ca13c53ffdd631484d9a50c8c3973429121a4efd7e" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.30" rel="bp156.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625918400">- cacti 1.2.18:
  * CVE-2020-14424: Lack of escaping on template import can lead to
    XSS exposure under 'midwinter' theme (boo#1188188)
  * Real time graphs can expose XSS issue</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti 1.2.19:
  * Further fixes for grave character security protection (boo#1192408)
  * Fix Over aggressive escaping causing menu visibility issues on Create Device page
  * Add SHA256 and AES256 security levels for SNMP polling
  * Import graph template(Preview Only) show color_id new value as a blank area
  * Fix Editing graphs errors due to missing sequence
  * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen
  * Fix 2hen RealTime is not active, console errors may appear
  * Fix race conditions may occur when multiple RRDtool processes are running
  * Fix errors creating graphs from templates
  * Fix errors when duplicating reports
  * Fix Boost may be blocked by overflowing poller_output table
  * Fix Template import may be blocked due to unmet dependency warnings with snmp ports
  * Fix Newer MySQL versions may error if committing a transaction when not in one
  * Fix SNMP Agent may not find a cache item
  * Fix Correct issues running under PHP 8.x
  * Fix When polling is disabled, boost may crash and creates many arch tables
  * Fix When poller runs, memory tables may not always be present
  * Fix Timezones may sometimes be incorrectly calculated
  * Fix Allow monitoring IPv6 with interface graphs
  * Fix When a data source uses a Data Input Method, those without a mapping should be flagged
  * Fix When RRDfile is not yet created, errors may appear when displaying the graph
  * Fix Cacti missing key indexes that result in Preset pages slowdowns
  * Fix Data Sources page shows no name when Data Source has no name cache
  * Fix db_update_table function can not alter table from signed to unsigned
  * Fix data remains in poller_output table even if it's flushed to rrd files
  * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places
  * Fix Offset is a reserved word in MariaDB 10.6 affecting Report
  * Fix Rendering large trees slowed due to lack of permission caching
  * Fix Error on interpretation of snmpUtime, when to big
  * Fix Applying right axis formatting creates an error-image
  * Fix Unable to Save Graph Settings from the Graphs pages
  * Fix Graph Template Cache is nullified too often when Graph Automation is running
  * Fix When Adding a Data Query to a Device, no Progress Spinner is shown
  * Fix New Browser Breaks Plugins that depend on non UTC date time data
  * Fix errors when testing remote poller connectivity
  * Fix errors when renaming poller
  * Fix Removing spikes by Variance does not appear to be working beyond the first RRA
  * Fix LDAP API lacks timeout options leading to bad login experiences
  * Add a normal/wrap class for general use
  * Limit File Types available for Template Import operations
  * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication
  * Support Stronger Encryption Available Starting in Net-SNMP v5.8
  * Allow Cacti to use multiple possible LDAP servers
  * Add a 15 minute polling/sampling interval
  * Provide additional admin email notifications
  * Add warnings for undesired changes to plugin hook return values
  * When creating a Graph, make testing the Data Sources optional by Template
  * Update phpseclib to 2.0.33
  * Update jstree.js to 3.3.12
  * Improve performance of Cacti poller on heavily loaded systems
  * MariaDB recommendations need some tuning for recent updates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650628800">- Update to 1.2.20
  * Security fix for CVE-2022-0730, boo#1196692
    Under certain ldap conditions, Cacti authentication can be
    bypassed with certain credential types.
  * Security fix: Device, Graph, Graph Template,
    and Graph Items may be vulnerable to XSS issues
  * Security fix: Lockout policies are not properly applied to LDAP
    and Domain Users
  * Security fix: When using 'remember me' option, incorrect realm
    may be selected
  * Security fix: User and Group maintenance are vulnerable to SQL attacks
  * Security fix: Color Templates are vulnerable to XSS attack
  * Features:
  * When creating a Data Source Profile, allow additional choices for Heartbeat
  * Change select all options to use Font Awesome icons
  * Improve spine performance by storing the total number of system snmp_ports in use
  * Prevent Template User Accounts from being Removed
  * When managing by users, allow filtering by Realm
  * Allow plugins to supply template account names
  * When viewing logs, additional message types should be filterable
  * When creating a Graph Template Item, allow filtering by Data Template
  * Allow language handler to be selected via UI
  * Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco
  * Add Advanced Ping Graph Template to initial Installable templates
  * Add LDAP Debug Mode option
  * Allow Reports to include devices not on a Tree
  * Allow Basic Authentication to display custom failure message
  * Fix: When replicating data during installation/upgrade,
    system may appear to hang
  * Fix: Graph Template Items may have duplicated entries
  * Fix: Unable to Save Graph Settings
  * Fix: Script Server may crash if an OID is missing or unavailable
  * Fix: When system-wide polling is disabled,
    remote pollers may fail to sync changed settings
  * Fix: When updating poller name, duplicate name protection may be over zealous
  * Fix: Titles may show "Missing Datasource" incorectly
  * Fix: Checking for MIB Cache can cause crashes
  * Fix: Polling cycles may not always complete as expected
  * Fix: When viewing graph data, non-numeric values may appear
  * Fix: Utilities view has calculation errors when there are no data sources
  * Fix: When editing Reports, drag and drop may not function as intended
  * Fix: When data drive is full, viewing a Graph can result in errors
  * Various other bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti 1.2.21:
  * Add a CLI script to install/enable/disable/uninstall plugins
  * Add log message when purging DS stats and poller repopulate
  * A collection of bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti 1.2.22, providing one security fix, a number of bug fixes
  and a collection of improvements:
  * When creating new graphs, cross site injection is possible
    (boo#1203952)
  * When creating user from template, multiple Domain FullName and
    Mail are not propagated
  * Nectar Aggregate 95th emailed report broken
  * Boost may not find archive tables correctly
  * Users may be unable to change their password when forced during
    a login
  * Net-SNMP Memory Graph Template has Wrong GPRINT
  * Search in tree view unusable on larger installations
  * Increased bulk insert size to avoid partial inserts and potential
    data loss.
  * Call to undefined function boost_debug in Cacti log
  * When no guest template is set, login cookies are not properly set
  * Later RRDtool releases do not need to check last_update time
  * Regex filters are not always long enough
  * Domains based LDAP and AD Fullname and Email not auto-populated
  * Cacti polling and boost report the wrong number of Data Sources
    when Devices are disabled
  * When editing Graph Template Items there are cases where VDEF's
    are hidden when they should be shown
  * Database SSL setting lacks default value
  * Update default path cacti under *BSD by xmacan
  * Web Basic authentication not creating template user
  * Unable to change the Heartbeat of a Data Source Profile
  * Tree Search Does Not Properly Search All Trees
  * When structured paths are setup, RRDfiles may not always be
    created when possible
  * When parsing the logs, caching would help speed up processing
  * Deprecation warnings when attempting real-time Graphs with PHP8.1
  * Custom Timespan is lost when clicking other tree branches
  * Non device based Data Sources not being polled
  * When Resource XML file inproperly formatted, graph creation can
    fail with errors
  * Update code style to support PHP 8 requirements
  * None" shows all graphs
  * Realtime popup window experiences issues on some browsers
  * Auth settings do not always properly reflect the options selected
    by ddb4github
  * MySQL can cause cacti to become stalled due to locking issues
  * Boost process can get hung under rare conditions until the poller
    times out
  * Exporting graphs under PHP 8 can cause errors
  * Host table has wrong default for disabled and deleted columns
  * RRD storage paths do not scale properly
  * When importing, make it possible to only import certain
    components
  * Update change_device script to include new features by
    bmfmancini
  * Make help pages use latest online version wherever possible
  * Cacti should show PHP INI locations during install
  * Detect PHP INI values that are different in the INI vs running
    config
  * Added Gradient Color support for AREA charts by thurban
  * Update CDEF functions for RRDtool
  * When boost is running, it's not clear which processes are
    running and how long they have to complete</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti 1.2.23, providing security fixes, feature improvements and
  bug fixes:
  * CVE-2022-46169: Unauthenticated Command Injection in Remote
    Agent (boo#1206185)
  * Security: Add .htaccess file to scripts folder
  * When using Single Sign-on Frameworks, revocation was not always
    detected in callbacks
  * Fixes to the installer, and compatibility with PHP and MySQL
  * Performance improvements for certain conditions
  * Various UI fixes
  * Bug fixes related to SNMP, RRDtools, and agents</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677499200">- cacti 1.2.24
  * Fix: Unable to import Local Linux Machine template
  * Fix multiple charting and display issues
  * Compatibility changes for SNMP under PHP 8.2, and other PHP
    compatibility updates
  * Fix multiple issues editing settings
  * timeout fixes for Basic Auth
  * multiple data poller bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1694001600">- cacti 1.2.25:
  * CVE-2023-30534: Protect against Insecure deserialization of filter data (boo#1215082)
  * CVE-2023-39360: Cross-Site Scripting vulnerability when creating new graphs (boo#1215044)
  * CVE-2023-39361: Unauthenticated SQL Injection when viewing graphs (boo#1215045)
  * CVE-2023-39357: SQL Injection when saving data with sql_save() (boo#1215040)
  * CVE-2023-39362: Authenticated command injection when using SNMP options (boo#1215047)
  * CVE-2023-39359: Authenticated SQL injection vulnerability when managing graphs (boo#1215043)
  * CVE-2023-39358: Authenticated SQL injection vulnerability when managing reports (boo#1215042)
  * CVE-2023-39365: SQL Injection when using regular expressions (boo#1215051)
  * CVE-2023-39364: redirect in change password functionality (boo#1215050)
  * CVE-2023-39366: Cross-Site Scripting vulnerability with Device Name when managing Data Sources (boo#1215052)
  * CVE-2023-39510: Cross-Site Scripting vulnerability with Device Name when administrating Reports (boo#1215053)
  * CVE-2023-39511: Cross-Site Scripting vulnerability with Device Name when editing Graphs whilst managing Reports (boo#1215081)
  * CVE-2023-39512: Cross-Site Scripting vulnerability with Device Name when managing Data Sources (boo#1215054)
  * CVE-2023-39513: Cross-Site Scripting vulnerability with Device Name when debugging data queries (boo#1215055)
  * CVE-2023-39514: Cross-Site Scripting vulnerability with Data Source Name when managing Graphs (boo#1215056)
  * CVE-2023-39515: Cross-Site Scripting vulnerability with Data Source Name when debugging Data Queries (boo#1215058)
  * CVE-2023-39516: Cross-Site Scripting vulnerability with Data Source Information when managing Data Sources (boo#1215059)
  * When rebuilding the Poller Cache from command line, allow it to be multi-threaded
  * When searching tree or list views, the URL does not update after changes
  * When creating a Data Source Template with a specific snmp port, the port is not always applied
  * When a Data Query references a file, the filename should be trimmed to remove spurious spaces
  * THold plugin may not always install or upgrade properly
  * RRD file structures are not always updated properly, if there are more Data Sources in the Data Template than the Graph Template
  * When reindexing devices, errors may sometimes be shown
  * Boost may loose data when the database server is overloaded
  * Boost can sometimes output unexpected or invalid values
  * Boost should not attempt to start if there are no items to process
  * Rebuilding the poller cache does not always work as expected
  * Host CPU items may not work poll as expected when on a remote data collector where hmib is also enabled
  * When creating new graphs, invalid offset errors may be generated
  * When importing packages, SQL errors may be generated
  * When managing plugins from command line, the --plugin option is not properly handled
  * When automating an install of Cacti, error messages can be appear
  * When performing automated install of a plugin, warnings can be thrown
  * Automation references the wrong table name causing errors
  * Data Source Info Mode produces invalid recommendations
  * Data Source Debug 'Run All' generates too many log messages
  * The description of rebuild poller cache in utilities does not display properly
  * When reindexing a device, debug information may not always display properly
  * Upon displaying a form with errors, the session error fields variable isn't cleared
  * MariaDB clusters will no longer support exclusive locks
  * RRDtool can fail to update when sources in Data Template and Graph Template data sources do not match
  * Compatibility improvements for Boost under PHP 8.x
  * When searching the tree, increase the time before querying for items
  * Device Location drop down does not always populate correctly
  * When viewing Realtime graphs, undefined variable errors may be reported
  * SNMP Uptime is not always ignored for spikekills
  * Improve detection of downed Devices
  * When reporting missing functions from Plugins, ensure messages do not occur too often
  * When starting the Cacti daemon, database errors may be reported when there is no problem
  * When reporting from RRDcheck, ensure prefix is in the correct casing
  * Improve Orphaned Data Source options and display
  * Parsing the PHP Configuration may sometimes produce errors
  * Security processes attempt to check for a user lockout even if there is no user logged in
  * When attempting to edit a tree, the search filter for Graphs remains disabled
  * When reindexing, a Data Source that could be un-orphaned may not always be unorphaned
  * When parsing a date value, there could be more than 30 chars
  * Untemplated Data Sources can fail to update due to lack of an assigned Graph
  * When processing items to check, do not include disabled hosts
  * When saving a Data Source Template, SQL errors may be reported
  * When importing a Template, errors may be recorded
  * Some display strings have invalid formatting that cannot be parsed
  * When filtering with regular expressions, the 'does not match' option does not always function as expected
  * When enabling a plugin, sometimes it can appear as if nothing happens
  * Ensure the Rows Per Page option shows limitations set by configuration
  * Plugins are unable to modify fields in the setting 'Change Device Settings'
  * When reporting emails being sent, ensure BCC addresses are also included
  * Improve compatibility of SNMP class trim handling under PHP 8.x
  * When importing legacy Data Query Templates, the Template can become unusable
  * Provide ability to raise an event when extending the settings form
  * Prevent unsupported SQL Mode flags from being set
  * The DSStats summary does not always display expected values
  * When performing a fresh install, device classification may be missing.
  * Duplication functions for Graph/Template and Data Source/Template do not return and id
  * Duplication of Device Templates should be an API call
  * Unable to convert database to latin1 instead of utf8 if desired
  * When creating Graphs, the process may become slower over time as more items exist
  * When a bulk walk size is set to automatic, this is not always set to the optimal value
  * Update copyright notice on import packages
  * When viewing Orphan Graphs, SQL errors may be reported
  * When reindexing hosts from command line, ensure only one process runs at once
  * When a Data Query has no Graphs, it may not be deletable
  * When duplicating a Graph Template, provide an option to not duplicate Data Query association
  * When duplicating a Data Template errors can appear in the Cacti log
  * When importing a Package, previewing makes unexpected changes to Cacti Templates
  * When enabling boost on a fresh install, an error may be reported
  * Improve compatibility for backtrace logging under PHP 8.x
  * Improve compatibility for Advanced Ping under PHP 8.x
  * Provide new templates for Fortigate and Aruba Cluster to be available during install
  * Provide new template for SNMP Printer to be available during install
  * When importing devices, allow a device classification to be known
  * Extend length of maximum name in settings table
  * Extend length of maximum name in user settings table
  * Data Queries do not have a Duplication function
  * Upgrade d3.js v7.8.2 and billboard.js v3.7.4
  * Upgrade ua-parser.js to version 1.0.35
  * Update Cisco Device Template to include HSRP graph template
  * New hook for device template change 'device_template_change'</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1703419200">- cacti 1.2.26:
  * CVE-2023-50250: XSS vulnerability when importing a template file (boo#1218380)
  * CVE-2023-49084: RCE vulnerability when managing links (boo#1218360)
  * CVE-2023-49085: SQL Injection vulnerability when managing poller devices (boo#1218378)
  * CVE-2023-49086: XSS vulnerability when adding new devices (boo#1218366)
  * CVE-2023-49088: XSS vulnerability when viewing data sources in debug mode (boo#1218379)
  * CVE-2023-51448: SQL Injection vulnerability when managing SNMP Notification Receivers (boo#1218381)
  * When viewing data sources, an undefined variable error may be seen
  * Improvements for Poller Last Run Date
  * Attempting to edit a Data Query that does not exist throws warnings and not an GUI error
  * Improve PHP 8.1 support when adding devices
  * Viewing Data Query Cache can cause errors to be logged
  * Preserve option is not properly honoured when removing devices at command line
  * Infinite recursion is possible during a database failure
  * Monitoring Host CPU's does not always work on Windows endpoints
  * Multi select drop down list box not rendered correctly in Chrome and Edge
  * Selective Plugin Debugging may not always work as intended
  * During upgrades, Plugins may be falsely reported as incompatible
  * Plugin management at command line does not work with multiple plugins
  * Improve PHP 8.1 support for incrementing only numbers
  * Allow the renaming of guest and template accounts
  * DS Stats issues warnings when the RRDfile has not been initialized
  * When upgrading, missing data source profile can cause errors to be logged
  * When deleting a single Data Source, purge historical debug data
  * Improvements to form element warnings
  * Some interface aliases do not appear correctly
  * Aggregate graph does not show other percentiles
  * Settings table updates for large values reverted by database repair
  * When obtaining graph records, error messages may be recorded
  * Unable to change a device's community at command line
  * Increase timeout for RRDChecker
  * When viewing a graph, option to edit template may lead to incorrect URL
  * When upgrading, failures may occur due to missing color table keys
  * On installation, allow a more appropriate template to be used as the default
  * When data input parameters are allowed to be null, allow null
  * CSV Exports may not always output data correctly
  * When debugging a graph, long CDEF's can cause undesirable scrolling
  * Secondary LDAP server not evaluated when the first one has failed
  * When adding a device, using the bulk walk option can make version information appear
  * When parsing a Data Query resource, an error can be reported if no direction is specified
  * Database reconnection can cause errors to be reported incorrectly
  * fix returned value if $sau is empty
  * Add Aruba switch, Aruba controller and HPE iLO templates
  * Add OSCX 6x00 templates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- cacti 1.2.27:
  * CVE-2024-34340: Authentication Bypass when using using older password hashes (boo#1224240)
  * CVE-2024-25641: RCE vulnerability when importing packages (boo#1224229)
  * CVE-2024-31459: RCE vulnerability when plugins include files (boo#1224238)
  * CVE-2024-31460: SQL Injection vulnerability when using tree rules through Automation API (boo#1224239)
  * CVE-2024-29894: XSS vulnerability when using JavaScript based messaging API (boo#1224231)
  * CVE-2024-31458: SQL Injection vulnerability when using form templates (boo#1224241)
  * CVE-2024-31444: XSS vulnerability when reading tree rules with Automation API (boo#1224236)
  * CVE-2024-31443: XSS vulnerability when managing data queries (boo#1224235)
  * CVE-2024-31445: SQL Injection vulnerability when retrieving graphs using Automation API (boo#1224237)
  * CVE-2024-27082: XSS vulnerability when managing trees (boo#1224230)
  * Improve PHP 8.3 support
  * When importing packages via command line, data source profile could not be selected
  * When changing password, returning to previous page does not always work
  * When using LDAP authentication the first time, warnings may appear in logs
  * When editing/viewing devices, add IPv6 info to hostname tooltip
  * Improve speed of polling when Boost is enabled
  * Improve support for Half-Hour time zones
  * When user session not found, device lists can be incorrectly returned
  * On import, legacy templates may generate warnings
  * Improve support for alternate locations of Ping
  * Improve PHP 8.1 support for Installer
  * Fix issues with number formatting
  * Improve PHP 8.1 support when SpikeKill is run first time
  * Improve PHP 8.1 support for SpikeKill
  * When using Chinese to search for graphics, garbled characters appear.
  * When importing templates, preview mode will not always load
  * When remote poller is installed, MySQL TimeZone DB checks are not performed
  * When Remote Poller installation completes, no finish button is shown
  * Unauthorized agents should be recorded into logs
  * Poller cache may not always update if hostname changes
  * When using CMD poller, Failure and Recovery dates may have incorrect values
  * Saving a Tree can cause the tree to become unpublished
  * Web Basic Authentication does not record user logins
  * When using Accent-based languages, translations may not work properly
  * Fix automation expressions for device rules
  * Improve PHP 8.1 Support during fresh install with boost
  * Add a device "enabled/disabled" indicator next to the graphs
  * Notify the admin periodically when a remote data collector goes into heartbeat status
  * Add template for Aruba Clearpass
  * Add fliter/sort of Device Templates by Graph Templates</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1723032000">- Recent builds are being placed in /usr/share instead of existing /srv/www/cacti. This is an attempt to fix</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1726228800">- attempt to set permissions on several sub folders
  to fix https://build.opensuse.org/package/show/openSUSE:Factory/cacti#comment-1466121</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1728475200">- cacti 1.2.28:
    security #GHSA-49f2-hwx9-qffr: XSS vulnerability when creating external links with the consolenewsection parameter
    security #GHSA-fgc6-g8gc-wcg5: XSS vulnerability when creating external links with the title parameter
    security #GHSA-gxq4-mv8h-6qj4: RCE vulnerability can be executed via Log Poisoning
    security #GHSA-wh9c-v56x-v77c: XSS vulnerability when creating external links with the fileurl parameter
    issue #5636: When using LDAP authentication the first time, warnings may appear in logs
    issue #5754: When installing, a replication loop for plugin_realms may occur
    issue #5759: When installing, remote poller may attempt to sync with other pollers
    issue #5768: When a Data Query has a space, indexes may not be properly escaped
    issue #5771: Boost does not always order data source records properly
    issue #5772: Add IP address to the login audit for successful logins by xmacan
    issue #5773: Undefined variable error may sometimes occur when dealing with RRD output by MSS970
    issue #5777: When export to CSV, only the first line of notes is included
    issue #5780: When rendering forms, missing default value can cause errors
    issue #5782: Allow hosted content to be executable for the links page
    issue #5783: When closing database connections, some may linger incorrectly
    issue #5785: When changing passwords, an infinite loop may occur by ddb4github
    issue #5790: When using Cacti Daemon, a "Cron out of sync" message may be reported
    issue #5791: Add ability to filter/sort users by group or last login time
    issue #5792: When using List View, unable to add Graphs to a Report
    issue #5797: When using SNMPv3, some devices may show polling issues
    issue #5802: Limit table conversion to Cacti core tables
    issue #5806: Fix issues with posix-based kills on Windows
    issue #5813: When installing, password changes may fail on new installations
    issue #5814: When using structured RRD folders, permission issues may be flagged incorrectly
    issue #5823: When unable to locate a valid theme, new default will be Modern
    issue #5824: Properly cache the data source information for dsstats processing
    issue #5840: When reindexing, verify all fields may not work as intended
    feature #5784: Add ability to log database connections/disconnections
    feature #5796: Add Ping Method where connection refused assumes host is up
    feature #5819: When displaying graphs, default end time does not show full 24 hour period
    feature #5825: Add --id to remove_device.php
    feature #5828: Add Location and Site to Graph List View
    feature #5830: Add more verbose logging to Boost
    feature: Update jQuery to 3.7.1
    feature: Update jQueryUI to 1.14.0
    feature: Update Purify.js to 3.1.6
    feature: Update billboard.js to 3.13.0
    feature: Improve the performance of the repopulation of the poller cache</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1728475201">- replace cacti-cron.timer &amp; cacti-cron.service with cactid.service
  to fix thold &amp; other "sub poller" poller processes not running.</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1732276800">- fix for cacti-cron.timer &amp; cacti-cron.service failing after upgrade has already removed</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1734609600">- Add /srv/www directories to filelist [bsc#1231027]</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1739275200">- cacti 1.2.29
  - security - GHSA-c5j8-jxj3-hh36 - Authenticated RCE via multi-line SNMP responses
  - security - GHSA-f9c7-7rc3-574c - SQL Injection vulnerability when using tree rules through Automation API
  - security - GHSA-fh3x-69rr-qqpp - SQL Injection vulnerability when request automation devices
  - security - GHSA-fxrq-fr7h-9rqq - Arbitrary File Creation leading to RCE
  - security - GHSA-pv2c-97pp-vxwg - Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log Path
  - security - GHSA-vj9g-P7F2-4wqj - SQL Injection vulnerability when view host template
  - issue - 5843 - Temporary table names may incorrectly think they have a schema
  - issue - 5847 - When using Preset Time to view graphs, it is using a fixed point rather than relative time
  - issue - 5848 - Fix issue where RRA files are not automatically removed
  - issue - 5856 - Fix invalid help link for Automation Networks
  - issue - 5867 - Unable to disable a tree within the GUI
  - issue - 5868 - When removing graphs, RRA files may be left behind
  - issue - 5869 - Improve compatibility with ping under FreeBSD
  - issue - 5870 - Improve compatibility wtih Slice RRD tool under PHP 8.x
  - issue - 5874 - Allow IPv6 formats to use colons without port
  - issue - 5884 - Update Fortigate, Aruba OSCX and Clearpass templates
  - issue - 5927 - When a plugin is disabled, unable to use GUI to enable it again
  - issue - 5932 - When upgrading, ensure that replication only runs as necessary
  - issue - 5961 - Improve caching and syncing issues with replication
  - issue - 5963 - Improve caching techniques for database calls
  - issue - 5986 - Improve compatibility for Error constants under PHP 8.4
  - issue - 5987 - When running the upgrade database script, cursor is left in the middle of the row
  - issue - 6065 - Guest page does not automatically refresh
  - issue - 6078 - When installing, conversion of tables may produce collation errors
  - feature - 5921 - Add HPE Nimble/Alletra template
  - feature - 5933 - When installing, only convert core cacti tables
- Updated patch for config.php for new name config.php.dist</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1742385600">- to fix openSUSE:Factory/cacti package acceptance
  - Oct 9 2024 Changelog did not describe cactid_service.patch
  - Feb 11 2025 Changelog mispelled cacti-config-dist.patch
  - Removed obsolete cacti-cron.timer cacti-cron.service cacti-config.patch</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1743681600">- cacti 1.2.30
  - issue#6089: Unable to add new users
  - issue#6090: When using Automation Rules, specifying graph criteria may cause issues
  - issue#6099: When transferring a system from a backup if the poller has not run recently rrdtool issues are found
  - issue#6172: When translating, quotes may cause incorrect text to appear
  - issue#6173: When using Boost for the first time, warnings may appear
  - issue#6183: When refreshing forms, items may be checked incorrectly by xmacan</changelog>
</package>
<package pkgid="f33f14f04b6076920b2e76a0ea601150b24488e0ac8b19d9aeef9102f531f841" name="cacti" arch="src">
  <version epoch="0" ver="1.2.30" rel="bp156.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625918400">- cacti 1.2.18:
  * CVE-2020-14424: Lack of escaping on template import can lead to
    XSS exposure under 'midwinter' theme (boo#1188188)
  * Real time graphs can expose XSS issue</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti 1.2.19:
  * Further fixes for grave character security protection (boo#1192408)
  * Fix Over aggressive escaping causing menu visibility issues on Create Device page
  * Add SHA256 and AES256 security levels for SNMP polling
  * Import graph template(Preview Only) show color_id new value as a blank area
  * Fix Editing graphs errors due to missing sequence
  * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen
  * Fix 2hen RealTime is not active, console errors may appear
  * Fix race conditions may occur when multiple RRDtool processes are running
  * Fix errors creating graphs from templates
  * Fix errors when duplicating reports
  * Fix Boost may be blocked by overflowing poller_output table
  * Fix Template import may be blocked due to unmet dependency warnings with snmp ports
  * Fix Newer MySQL versions may error if committing a transaction when not in one
  * Fix SNMP Agent may not find a cache item
  * Fix Correct issues running under PHP 8.x
  * Fix When polling is disabled, boost may crash and creates many arch tables
  * Fix When poller runs, memory tables may not always be present
  * Fix Timezones may sometimes be incorrectly calculated
  * Fix Allow monitoring IPv6 with interface graphs
  * Fix When a data source uses a Data Input Method, those without a mapping should be flagged
  * Fix When RRDfile is not yet created, errors may appear when displaying the graph
  * Fix Cacti missing key indexes that result in Preset pages slowdowns
  * Fix Data Sources page shows no name when Data Source has no name cache
  * Fix db_update_table function can not alter table from signed to unsigned
  * Fix data remains in poller_output table even if it's flushed to rrd files
  * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places
  * Fix Offset is a reserved word in MariaDB 10.6 affecting Report
  * Fix Rendering large trees slowed due to lack of permission caching
  * Fix Error on interpretation of snmpUtime, when to big
  * Fix Applying right axis formatting creates an error-image
  * Fix Unable to Save Graph Settings from the Graphs pages
  * Fix Graph Template Cache is nullified too often when Graph Automation is running
  * Fix When Adding a Data Query to a Device, no Progress Spinner is shown
  * Fix New Browser Breaks Plugins that depend on non UTC date time data
  * Fix errors when testing remote poller connectivity
  * Fix errors when renaming poller
  * Fix Removing spikes by Variance does not appear to be working beyond the first RRA
  * Fix LDAP API lacks timeout options leading to bad login experiences
  * Add a normal/wrap class for general use
  * Limit File Types available for Template Import operations
  * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication
  * Support Stronger Encryption Available Starting in Net-SNMP v5.8
  * Allow Cacti to use multiple possible LDAP servers
  * Add a 15 minute polling/sampling interval
  * Provide additional admin email notifications
  * Add warnings for undesired changes to plugin hook return values
  * When creating a Graph, make testing the Data Sources optional by Template
  * Update phpseclib to 2.0.33
  * Update jstree.js to 3.3.12
  * Improve performance of Cacti poller on heavily loaded systems
  * MariaDB recommendations need some tuning for recent updates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650628800">- Update to 1.2.20
  * Security fix for CVE-2022-0730, boo#1196692
    Under certain ldap conditions, Cacti authentication can be
    bypassed with certain credential types.
  * Security fix: Device, Graph, Graph Template,
    and Graph Items may be vulnerable to XSS issues
  * Security fix: Lockout policies are not properly applied to LDAP
    and Domain Users
  * Security fix: When using 'remember me' option, incorrect realm
    may be selected
  * Security fix: User and Group maintenance are vulnerable to SQL attacks
  * Security fix: Color Templates are vulnerable to XSS attack
  * Features:
  * When creating a Data Source Profile, allow additional choices for Heartbeat
  * Change select all options to use Font Awesome icons
  * Improve spine performance by storing the total number of system snmp_ports in use
  * Prevent Template User Accounts from being Removed
  * When managing by users, allow filtering by Realm
  * Allow plugins to supply template account names
  * When viewing logs, additional message types should be filterable
  * When creating a Graph Template Item, allow filtering by Data Template
  * Allow language handler to be selected via UI
  * Updated Device packages for Synology, Citrix NetScaler, Cisco ASA/Cisco
  * Add Advanced Ping Graph Template to initial Installable templates
  * Add LDAP Debug Mode option
  * Allow Reports to include devices not on a Tree
  * Allow Basic Authentication to display custom failure message
  * Fix: When replicating data during installation/upgrade,
    system may appear to hang
  * Fix: Graph Template Items may have duplicated entries
  * Fix: Unable to Save Graph Settings
  * Fix: Script Server may crash if an OID is missing or unavailable
  * Fix: When system-wide polling is disabled,
    remote pollers may fail to sync changed settings
  * Fix: When updating poller name, duplicate name protection may be over zealous
  * Fix: Titles may show "Missing Datasource" incorectly
  * Fix: Checking for MIB Cache can cause crashes
  * Fix: Polling cycles may not always complete as expected
  * Fix: When viewing graph data, non-numeric values may appear
  * Fix: Utilities view has calculation errors when there are no data sources
  * Fix: When editing Reports, drag and drop may not function as intended
  * Fix: When data drive is full, viewing a Graph can result in errors
  * Various other bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti 1.2.21:
  * Add a CLI script to install/enable/disable/uninstall plugins
  * Add log message when purging DS stats and poller repopulate
  * A collection of bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti 1.2.22, providing one security fix, a number of bug fixes
  and a collection of improvements:
  * When creating new graphs, cross site injection is possible
    (boo#1203952)
  * When creating user from template, multiple Domain FullName and
    Mail are not propagated
  * Nectar Aggregate 95th emailed report broken
  * Boost may not find archive tables correctly
  * Users may be unable to change their password when forced during
    a login
  * Net-SNMP Memory Graph Template has Wrong GPRINT
  * Search in tree view unusable on larger installations
  * Increased bulk insert size to avoid partial inserts and potential
    data loss.
  * Call to undefined function boost_debug in Cacti log
  * When no guest template is set, login cookies are not properly set
  * Later RRDtool releases do not need to check last_update time
  * Regex filters are not always long enough
  * Domains based LDAP and AD Fullname and Email not auto-populated
  * Cacti polling and boost report the wrong number of Data Sources
    when Devices are disabled
  * When editing Graph Template Items there are cases where VDEF's
    are hidden when they should be shown
  * Database SSL setting lacks default value
  * Update default path cacti under *BSD by xmacan
  * Web Basic authentication not creating template user
  * Unable to change the Heartbeat of a Data Source Profile
  * Tree Search Does Not Properly Search All Trees
  * When structured paths are setup, RRDfiles may not always be
    created when possible
  * When parsing the logs, caching would help speed up processing
  * Deprecation warnings when attempting real-time Graphs with PHP8.1
  * Custom Timespan is lost when clicking other tree branches
  * Non device based Data Sources not being polled
  * When Resource XML file inproperly formatted, graph creation can
    fail with errors
  * Update code style to support PHP 8 requirements
  * None" shows all graphs
  * Realtime popup window experiences issues on some browsers
  * Auth settings do not always properly reflect the options selected
    by ddb4github
  * MySQL can cause cacti to become stalled due to locking issues
  * Boost process can get hung under rare conditions until the poller
    times out
  * Exporting graphs under PHP 8 can cause errors
  * Host table has wrong default for disabled and deleted columns
  * RRD storage paths do not scale properly
  * When importing, make it possible to only import certain
    components
  * Update change_device script to include new features by
    bmfmancini
  * Make help pages use latest online version wherever possible
  * Cacti should show PHP INI locations during install
  * Detect PHP INI values that are different in the INI vs running
    config
  * Added Gradient Color support for AREA charts by thurban
  * Update CDEF functions for RRDtool
  * When boost is running, it's not clear which processes are
    running and how long they have to complete</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti 1.2.23, providing security fixes, feature improvements and
  bug fixes:
  * CVE-2022-46169: Unauthenticated Command Injection in Remote
    Agent (boo#1206185)
  * Security: Add .htaccess file to scripts folder
  * When using Single Sign-on Frameworks, revocation was not always
    detected in callbacks
  * Fixes to the installer, and compatibility with PHP and MySQL
  * Performance improvements for certain conditions
  * Various UI fixes
  * Bug fixes related to SNMP, RRDtools, and agents</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677499200">- cacti 1.2.24
  * Fix: Unable to import Local Linux Machine template
  * Fix multiple charting and display issues
  * Compatibility changes for SNMP under PHP 8.2, and other PHP
    compatibility updates
  * Fix multiple issues editing settings
  * timeout fixes for Basic Auth
  * multiple data poller bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1694001600">- cacti 1.2.25:
  * CVE-2023-30534: Protect against Insecure deserialization of filter data (boo#1215082)
  * CVE-2023-39360: Cross-Site Scripting vulnerability when creating new graphs (boo#1215044)
  * CVE-2023-39361: Unauthenticated SQL Injection when viewing graphs (boo#1215045)
  * CVE-2023-39357: SQL Injection when saving data with sql_save() (boo#1215040)
  * CVE-2023-39362: Authenticated command injection when using SNMP options (boo#1215047)
  * CVE-2023-39359: Authenticated SQL injection vulnerability when managing graphs (boo#1215043)
  * CVE-2023-39358: Authenticated SQL injection vulnerability when managing reports (boo#1215042)
  * CVE-2023-39365: SQL Injection when using regular expressions (boo#1215051)
  * CVE-2023-39364: redirect in change password functionality (boo#1215050)
  * CVE-2023-39366: Cross-Site Scripting vulnerability with Device Name when managing Data Sources (boo#1215052)
  * CVE-2023-39510: Cross-Site Scripting vulnerability with Device Name when administrating Reports (boo#1215053)
  * CVE-2023-39511: Cross-Site Scripting vulnerability with Device Name when editing Graphs whilst managing Reports (boo#1215081)
  * CVE-2023-39512: Cross-Site Scripting vulnerability with Device Name when managing Data Sources (boo#1215054)
  * CVE-2023-39513: Cross-Site Scripting vulnerability with Device Name when debugging data queries (boo#1215055)
  * CVE-2023-39514: Cross-Site Scripting vulnerability with Data Source Name when managing Graphs (boo#1215056)
  * CVE-2023-39515: Cross-Site Scripting vulnerability with Data Source Name when debugging Data Queries (boo#1215058)
  * CVE-2023-39516: Cross-Site Scripting vulnerability with Data Source Information when managing Data Sources (boo#1215059)
  * When rebuilding the Poller Cache from command line, allow it to be multi-threaded
  * When searching tree or list views, the URL does not update after changes
  * When creating a Data Source Template with a specific snmp port, the port is not always applied
  * When a Data Query references a file, the filename should be trimmed to remove spurious spaces
  * THold plugin may not always install or upgrade properly
  * RRD file structures are not always updated properly, if there are more Data Sources in the Data Template than the Graph Template
  * When reindexing devices, errors may sometimes be shown
  * Boost may loose data when the database server is overloaded
  * Boost can sometimes output unexpected or invalid values
  * Boost should not attempt to start if there are no items to process
  * Rebuilding the poller cache does not always work as expected
  * Host CPU items may not work poll as expected when on a remote data collector where hmib is also enabled
  * When creating new graphs, invalid offset errors may be generated
  * When importing packages, SQL errors may be generated
  * When managing plugins from command line, the --plugin option is not properly handled
  * When automating an install of Cacti, error messages can be appear
  * When performing automated install of a plugin, warnings can be thrown
  * Automation references the wrong table name causing errors
  * Data Source Info Mode produces invalid recommendations
  * Data Source Debug 'Run All' generates too many log messages
  * The description of rebuild poller cache in utilities does not display properly
  * When reindexing a device, debug information may not always display properly
  * Upon displaying a form with errors, the session error fields variable isn't cleared
  * MariaDB clusters will no longer support exclusive locks
  * RRDtool can fail to update when sources in Data Template and Graph Template data sources do not match
  * Compatibility improvements for Boost under PHP 8.x
  * When searching the tree, increase the time before querying for items
  * Device Location drop down does not always populate correctly
  * When viewing Realtime graphs, undefined variable errors may be reported
  * SNMP Uptime is not always ignored for spikekills
  * Improve detection of downed Devices
  * When reporting missing functions from Plugins, ensure messages do not occur too often
  * When starting the Cacti daemon, database errors may be reported when there is no problem
  * When reporting from RRDcheck, ensure prefix is in the correct casing
  * Improve Orphaned Data Source options and display
  * Parsing the PHP Configuration may sometimes produce errors
  * Security processes attempt to check for a user lockout even if there is no user logged in
  * When attempting to edit a tree, the search filter for Graphs remains disabled
  * When reindexing, a Data Source that could be un-orphaned may not always be unorphaned
  * When parsing a date value, there could be more than 30 chars
  * Untemplated Data Sources can fail to update due to lack of an assigned Graph
  * When processing items to check, do not include disabled hosts
  * When saving a Data Source Template, SQL errors may be reported
  * When importing a Template, errors may be recorded
  * Some display strings have invalid formatting that cannot be parsed
  * When filtering with regular expressions, the 'does not match' option does not always function as expected
  * When enabling a plugin, sometimes it can appear as if nothing happens
  * Ensure the Rows Per Page option shows limitations set by configuration
  * Plugins are unable to modify fields in the setting 'Change Device Settings'
  * When reporting emails being sent, ensure BCC addresses are also included
  * Improve compatibility of SNMP class trim handling under PHP 8.x
  * When importing legacy Data Query Templates, the Template can become unusable
  * Provide ability to raise an event when extending the settings form
  * Prevent unsupported SQL Mode flags from being set
  * The DSStats summary does not always display expected values
  * When performing a fresh install, device classification may be missing.
  * Duplication functions for Graph/Template and Data Source/Template do not return and id
  * Duplication of Device Templates should be an API call
  * Unable to convert database to latin1 instead of utf8 if desired
  * When creating Graphs, the process may become slower over time as more items exist
  * When a bulk walk size is set to automatic, this is not always set to the optimal value
  * Update copyright notice on import packages
  * When viewing Orphan Graphs, SQL errors may be reported
  * When reindexing hosts from command line, ensure only one process runs at once
  * When a Data Query has no Graphs, it may not be deletable
  * When duplicating a Graph Template, provide an option to not duplicate Data Query association
  * When duplicating a Data Template errors can appear in the Cacti log
  * When importing a Package, previewing makes unexpected changes to Cacti Templates
  * When enabling boost on a fresh install, an error may be reported
  * Improve compatibility for backtrace logging under PHP 8.x
  * Improve compatibility for Advanced Ping under PHP 8.x
  * Provide new templates for Fortigate and Aruba Cluster to be available during install
  * Provide new template for SNMP Printer to be available during install
  * When importing devices, allow a device classification to be known
  * Extend length of maximum name in settings table
  * Extend length of maximum name in user settings table
  * Data Queries do not have a Duplication function
  * Upgrade d3.js v7.8.2 and billboard.js v3.7.4
  * Upgrade ua-parser.js to version 1.0.35
  * Update Cisco Device Template to include HSRP graph template
  * New hook for device template change 'device_template_change'</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1703419200">- cacti 1.2.26:
  * CVE-2023-50250: XSS vulnerability when importing a template file (boo#1218380)
  * CVE-2023-49084: RCE vulnerability when managing links (boo#1218360)
  * CVE-2023-49085: SQL Injection vulnerability when managing poller devices (boo#1218378)
  * CVE-2023-49086: XSS vulnerability when adding new devices (boo#1218366)
  * CVE-2023-49088: XSS vulnerability when viewing data sources in debug mode (boo#1218379)
  * CVE-2023-51448: SQL Injection vulnerability when managing SNMP Notification Receivers (boo#1218381)
  * When viewing data sources, an undefined variable error may be seen
  * Improvements for Poller Last Run Date
  * Attempting to edit a Data Query that does not exist throws warnings and not an GUI error
  * Improve PHP 8.1 support when adding devices
  * Viewing Data Query Cache can cause errors to be logged
  * Preserve option is not properly honoured when removing devices at command line
  * Infinite recursion is possible during a database failure
  * Monitoring Host CPU's does not always work on Windows endpoints
  * Multi select drop down list box not rendered correctly in Chrome and Edge
  * Selective Plugin Debugging may not always work as intended
  * During upgrades, Plugins may be falsely reported as incompatible
  * Plugin management at command line does not work with multiple plugins
  * Improve PHP 8.1 support for incrementing only numbers
  * Allow the renaming of guest and template accounts
  * DS Stats issues warnings when the RRDfile has not been initialized
  * When upgrading, missing data source profile can cause errors to be logged
  * When deleting a single Data Source, purge historical debug data
  * Improvements to form element warnings
  * Some interface aliases do not appear correctly
  * Aggregate graph does not show other percentiles
  * Settings table updates for large values reverted by database repair
  * When obtaining graph records, error messages may be recorded
  * Unable to change a device's community at command line
  * Increase timeout for RRDChecker
  * When viewing a graph, option to edit template may lead to incorrect URL
  * When upgrading, failures may occur due to missing color table keys
  * On installation, allow a more appropriate template to be used as the default
  * When data input parameters are allowed to be null, allow null
  * CSV Exports may not always output data correctly
  * When debugging a graph, long CDEF's can cause undesirable scrolling
  * Secondary LDAP server not evaluated when the first one has failed
  * When adding a device, using the bulk walk option can make version information appear
  * When parsing a Data Query resource, an error can be reported if no direction is specified
  * Database reconnection can cause errors to be reported incorrectly
  * fix returned value if $sau is empty
  * Add Aruba switch, Aruba controller and HPE iLO templates
  * Add OSCX 6x00 templates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- cacti 1.2.27:
  * CVE-2024-34340: Authentication Bypass when using using older password hashes (boo#1224240)
  * CVE-2024-25641: RCE vulnerability when importing packages (boo#1224229)
  * CVE-2024-31459: RCE vulnerability when plugins include files (boo#1224238)
  * CVE-2024-31460: SQL Injection vulnerability when using tree rules through Automation API (boo#1224239)
  * CVE-2024-29894: XSS vulnerability when using JavaScript based messaging API (boo#1224231)
  * CVE-2024-31458: SQL Injection vulnerability when using form templates (boo#1224241)
  * CVE-2024-31444: XSS vulnerability when reading tree rules with Automation API (boo#1224236)
  * CVE-2024-31443: XSS vulnerability when managing data queries (boo#1224235)
  * CVE-2024-31445: SQL Injection vulnerability when retrieving graphs using Automation API (boo#1224237)
  * CVE-2024-27082: XSS vulnerability when managing trees (boo#1224230)
  * Improve PHP 8.3 support
  * When importing packages via command line, data source profile could not be selected
  * When changing password, returning to previous page does not always work
  * When using LDAP authentication the first time, warnings may appear in logs
  * When editing/viewing devices, add IPv6 info to hostname tooltip
  * Improve speed of polling when Boost is enabled
  * Improve support for Half-Hour time zones
  * When user session not found, device lists can be incorrectly returned
  * On import, legacy templates may generate warnings
  * Improve support for alternate locations of Ping
  * Improve PHP 8.1 support for Installer
  * Fix issues with number formatting
  * Improve PHP 8.1 support when SpikeKill is run first time
  * Improve PHP 8.1 support for SpikeKill
  * When using Chinese to search for graphics, garbled characters appear.
  * When importing templates, preview mode will not always load
  * When remote poller is installed, MySQL TimeZone DB checks are not performed
  * When Remote Poller installation completes, no finish button is shown
  * Unauthorized agents should be recorded into logs
  * Poller cache may not always update if hostname changes
  * When using CMD poller, Failure and Recovery dates may have incorrect values
  * Saving a Tree can cause the tree to become unpublished
  * Web Basic Authentication does not record user logins
  * When using Accent-based languages, translations may not work properly
  * Fix automation expressions for device rules
  * Improve PHP 8.1 Support during fresh install with boost
  * Add a device "enabled/disabled" indicator next to the graphs
  * Notify the admin periodically when a remote data collector goes into heartbeat status
  * Add template for Aruba Clearpass
  * Add fliter/sort of Device Templates by Graph Templates</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1723032000">- Recent builds are being placed in /usr/share instead of existing /srv/www/cacti. This is an attempt to fix</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1726228800">- attempt to set permissions on several sub folders
  to fix https://build.opensuse.org/package/show/openSUSE:Factory/cacti#comment-1466121</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1728475200">- cacti 1.2.28:
    security #GHSA-49f2-hwx9-qffr: XSS vulnerability when creating external links with the consolenewsection parameter
    security #GHSA-fgc6-g8gc-wcg5: XSS vulnerability when creating external links with the title parameter
    security #GHSA-gxq4-mv8h-6qj4: RCE vulnerability can be executed via Log Poisoning
    security #GHSA-wh9c-v56x-v77c: XSS vulnerability when creating external links with the fileurl parameter
    issue #5636: When using LDAP authentication the first time, warnings may appear in logs
    issue #5754: When installing, a replication loop for plugin_realms may occur
    issue #5759: When installing, remote poller may attempt to sync with other pollers
    issue #5768: When a Data Query has a space, indexes may not be properly escaped
    issue #5771: Boost does not always order data source records properly
    issue #5772: Add IP address to the login audit for successful logins by xmacan
    issue #5773: Undefined variable error may sometimes occur when dealing with RRD output by MSS970
    issue #5777: When export to CSV, only the first line of notes is included
    issue #5780: When rendering forms, missing default value can cause errors
    issue #5782: Allow hosted content to be executable for the links page
    issue #5783: When closing database connections, some may linger incorrectly
    issue #5785: When changing passwords, an infinite loop may occur by ddb4github
    issue #5790: When using Cacti Daemon, a "Cron out of sync" message may be reported
    issue #5791: Add ability to filter/sort users by group or last login time
    issue #5792: When using List View, unable to add Graphs to a Report
    issue #5797: When using SNMPv3, some devices may show polling issues
    issue #5802: Limit table conversion to Cacti core tables
    issue #5806: Fix issues with posix-based kills on Windows
    issue #5813: When installing, password changes may fail on new installations
    issue #5814: When using structured RRD folders, permission issues may be flagged incorrectly
    issue #5823: When unable to locate a valid theme, new default will be Modern
    issue #5824: Properly cache the data source information for dsstats processing
    issue #5840: When reindexing, verify all fields may not work as intended
    feature #5784: Add ability to log database connections/disconnections
    feature #5796: Add Ping Method where connection refused assumes host is up
    feature #5819: When displaying graphs, default end time does not show full 24 hour period
    feature #5825: Add --id to remove_device.php
    feature #5828: Add Location and Site to Graph List View
    feature #5830: Add more verbose logging to Boost
    feature: Update jQuery to 3.7.1
    feature: Update jQueryUI to 1.14.0
    feature: Update Purify.js to 3.1.6
    feature: Update billboard.js to 3.13.0
    feature: Improve the performance of the repopulation of the poller cache</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1728475201">- replace cacti-cron.timer &amp; cacti-cron.service with cactid.service
  to fix thold &amp; other "sub poller" poller processes not running.</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1732276800">- fix for cacti-cron.timer &amp; cacti-cron.service failing after upgrade has already removed</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1734609600">- Add /srv/www directories to filelist [bsc#1231027]</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1739275200">- cacti 1.2.29
  - security - GHSA-c5j8-jxj3-hh36 - Authenticated RCE via multi-line SNMP responses
  - security - GHSA-f9c7-7rc3-574c - SQL Injection vulnerability when using tree rules through Automation API
  - security - GHSA-fh3x-69rr-qqpp - SQL Injection vulnerability when request automation devices
  - security - GHSA-fxrq-fr7h-9rqq - Arbitrary File Creation leading to RCE
  - security - GHSA-pv2c-97pp-vxwg - Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log Path
  - security - GHSA-vj9g-P7F2-4wqj - SQL Injection vulnerability when view host template
  - issue - 5843 - Temporary table names may incorrectly think they have a schema
  - issue - 5847 - When using Preset Time to view graphs, it is using a fixed point rather than relative time
  - issue - 5848 - Fix issue where RRA files are not automatically removed
  - issue - 5856 - Fix invalid help link for Automation Networks
  - issue - 5867 - Unable to disable a tree within the GUI
  - issue - 5868 - When removing graphs, RRA files may be left behind
  - issue - 5869 - Improve compatibility with ping under FreeBSD
  - issue - 5870 - Improve compatibility wtih Slice RRD tool under PHP 8.x
  - issue - 5874 - Allow IPv6 formats to use colons without port
  - issue - 5884 - Update Fortigate, Aruba OSCX and Clearpass templates
  - issue - 5927 - When a plugin is disabled, unable to use GUI to enable it again
  - issue - 5932 - When upgrading, ensure that replication only runs as necessary
  - issue - 5961 - Improve caching and syncing issues with replication
  - issue - 5963 - Improve caching techniques for database calls
  - issue - 5986 - Improve compatibility for Error constants under PHP 8.4
  - issue - 5987 - When running the upgrade database script, cursor is left in the middle of the row
  - issue - 6065 - Guest page does not automatically refresh
  - issue - 6078 - When installing, conversion of tables may produce collation errors
  - feature - 5921 - Add HPE Nimble/Alletra template
  - feature - 5933 - When installing, only convert core cacti tables
- Updated patch for config.php for new name config.php.dist</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1742385600">- to fix openSUSE:Factory/cacti package acceptance
  - Oct 9 2024 Changelog did not describe cactid_service.patch
  - Feb 11 2025 Changelog mispelled cacti-config-dist.patch
  - Removed obsolete cacti-cron.timer cacti-cron.service cacti-config.patch</changelog>
  <changelog author="Joel Baltazor &lt;obs@mtlfab.com&gt;" date="1743681600">- cacti 1.2.30
  - issue#6089: Unable to add new users
  - issue#6090: When using Automation Rules, specifying graph criteria may cause issues
  - issue#6099: When transferring a system from a backup if the poller has not run recently rrdtool issues are found
  - issue#6172: When translating, quotes may cause incorrect text to appear
  - issue#6173: When using Boost for the first time, warnings may appear
  - issue#6183: When refreshing forms, items may be checked incorrectly by xmacan</changelog>
</package>
<package pkgid="14d2477a293afbdede83bf9395c7d258ca090ddc40a4bd614584705777c5e501" name="cacti-spine" arch="aarch64">
  <version epoch="0" ver="1.2.27" rel="bp156.2.3.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti-spine 1.2.23:
  * Fix unexpected reindexing when using uptime as the reindex
    method
  * Spine should prevent the script server from connecting to remote
    when offline
  * Improve Script Server Timeout Logging
  * Add SQL_NO_CACHE to Spine Queries</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677499200">- cacti-spine 1.2.24:
  * Fix segfault when ignoring older OIDs</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1694001600">- cacti-spine 1.2.25:
  * Spine should see if script to be executed is executable
  * Enhance number recognition
  * When polling devices, sort by larger number of items first
  * Log format may be corrupted when timeout occurs
  * Compile warning appears due to GCC flag on RHEL7/RHEL8
  * Downed device detection only checks one of the two uptime OIDs
  * Compile error appears due to execinfo.h on FreeBSD
  * Bootstrap shell script contains some PHP cruft
  * Padding is not always removed from the start of non-numeric
    strings
  * Improve SNMP result handling for non-numeric results
  * Further improve SNMP result handling for non-numeric results
  * Remove check for the max_oids column which has been present
    since Cacti v1.0
  * Minimize Sorting when fetching poller records for maximum
    performance
  * Spine should see if script to be executed is executable</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1703419200">- cacti-spine 1.2.26:
  * Fix: Errors when uptime OID is not present
  * Fix: MySQL reconnect option is depreciated
  * Fix: Spine does not check a host with no poller items
  * Fix: Poller may report the wrong number of devices polled
  * Feature: Allow users to override the threads setting at the command line
  * Feature: Allow spine to run in ping-only mode</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- cacti-spine 1.2.27:
  * Restore AES Support</changelog>
</package>
<package pkgid="48e93d2911475fe981821126898c67f76c3246751bee28f3022d4b89a3deb6fb" name="cacti-spine" arch="i586">
  <version epoch="0" ver="1.2.27" rel="bp156.2.3.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti-spine 1.2.23:
  * Fix unexpected reindexing when using uptime as the reindex
    method
  * Spine should prevent the script server from connecting to remote
    when offline
  * Improve Script Server Timeout Logging
  * Add SQL_NO_CACHE to Spine Queries</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677499200">- cacti-spine 1.2.24:
  * Fix segfault when ignoring older OIDs</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1694001600">- cacti-spine 1.2.25:
  * Spine should see if script to be executed is executable
  * Enhance number recognition
  * When polling devices, sort by larger number of items first
  * Log format may be corrupted when timeout occurs
  * Compile warning appears due to GCC flag on RHEL7/RHEL8
  * Downed device detection only checks one of the two uptime OIDs
  * Compile error appears due to execinfo.h on FreeBSD
  * Bootstrap shell script contains some PHP cruft
  * Padding is not always removed from the start of non-numeric
    strings
  * Improve SNMP result handling for non-numeric results
  * Further improve SNMP result handling for non-numeric results
  * Remove check for the max_oids column which has been present
    since Cacti v1.0
  * Minimize Sorting when fetching poller records for maximum
    performance
  * Spine should see if script to be executed is executable</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1703419200">- cacti-spine 1.2.26:
  * Fix: Errors when uptime OID is not present
  * Fix: MySQL reconnect option is depreciated
  * Fix: Spine does not check a host with no poller items
  * Fix: Poller may report the wrong number of devices polled
  * Feature: Allow users to override the threads setting at the command line
  * Feature: Allow spine to run in ping-only mode</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- cacti-spine 1.2.27:
  * Restore AES Support</changelog>
</package>
<package pkgid="a452bf3120e587c94a7c42195a694f69ddd3dfb65ea1faac54d23aff7b378076" name="cacti-spine" arch="ppc64le">
  <version epoch="0" ver="1.2.27" rel="bp156.2.3.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti-spine 1.2.23:
  * Fix unexpected reindexing when using uptime as the reindex
    method
  * Spine should prevent the script server from connecting to remote
    when offline
  * Improve Script Server Timeout Logging
  * Add SQL_NO_CACHE to Spine Queries</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677499200">- cacti-spine 1.2.24:
  * Fix segfault when ignoring older OIDs</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1694001600">- cacti-spine 1.2.25:
  * Spine should see if script to be executed is executable
  * Enhance number recognition
  * When polling devices, sort by larger number of items first
  * Log format may be corrupted when timeout occurs
  * Compile warning appears due to GCC flag on RHEL7/RHEL8
  * Downed device detection only checks one of the two uptime OIDs
  * Compile error appears due to execinfo.h on FreeBSD
  * Bootstrap shell script contains some PHP cruft
  * Padding is not always removed from the start of non-numeric
    strings
  * Improve SNMP result handling for non-numeric results
  * Further improve SNMP result handling for non-numeric results
  * Remove check for the max_oids column which has been present
    since Cacti v1.0
  * Minimize Sorting when fetching poller records for maximum
    performance
  * Spine should see if script to be executed is executable</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1703419200">- cacti-spine 1.2.26:
  * Fix: Errors when uptime OID is not present
  * Fix: MySQL reconnect option is depreciated
  * Fix: Spine does not check a host with no poller items
  * Fix: Poller may report the wrong number of devices polled
  * Feature: Allow users to override the threads setting at the command line
  * Feature: Allow spine to run in ping-only mode</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- cacti-spine 1.2.27:
  * Restore AES Support</changelog>
</package>
<package pkgid="66ffb6128a8c24c26a921f5661ddf6c49d2502e25a4ff133d1cad70b5e4d1e25" name="cacti-spine" arch="s390x">
  <version epoch="0" ver="1.2.27" rel="bp156.2.3.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti-spine 1.2.23:
  * Fix unexpected reindexing when using uptime as the reindex
    method
  * Spine should prevent the script server from connecting to remote
    when offline
  * Improve Script Server Timeout Logging
  * Add SQL_NO_CACHE to Spine Queries</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677499200">- cacti-spine 1.2.24:
  * Fix segfault when ignoring older OIDs</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1694001600">- cacti-spine 1.2.25:
  * Spine should see if script to be executed is executable
  * Enhance number recognition
  * When polling devices, sort by larger number of items first
  * Log format may be corrupted when timeout occurs
  * Compile warning appears due to GCC flag on RHEL7/RHEL8
  * Downed device detection only checks one of the two uptime OIDs
  * Compile error appears due to execinfo.h on FreeBSD
  * Bootstrap shell script contains some PHP cruft
  * Padding is not always removed from the start of non-numeric
    strings
  * Improve SNMP result handling for non-numeric results
  * Further improve SNMP result handling for non-numeric results
  * Remove check for the max_oids column which has been present
    since Cacti v1.0
  * Minimize Sorting when fetching poller records for maximum
    performance
  * Spine should see if script to be executed is executable</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1703419200">- cacti-spine 1.2.26:
  * Fix: Errors when uptime OID is not present
  * Fix: MySQL reconnect option is depreciated
  * Fix: Spine does not check a host with no poller items
  * Fix: Poller may report the wrong number of devices polled
  * Feature: Allow users to override the threads setting at the command line
  * Feature: Allow spine to run in ping-only mode</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- cacti-spine 1.2.27:
  * Restore AES Support</changelog>
</package>
<package pkgid="67f5199a26c62cc057fff1bf91d23c74f5bf4878fb1d82abb5c59b95eb5332e5" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.2.27" rel="bp156.2.3.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti-spine 1.2.23:
  * Fix unexpected reindexing when using uptime as the reindex
    method
  * Spine should prevent the script server from connecting to remote
    when offline
  * Improve Script Server Timeout Logging
  * Add SQL_NO_CACHE to Spine Queries</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677499200">- cacti-spine 1.2.24:
  * Fix segfault when ignoring older OIDs</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1694001600">- cacti-spine 1.2.25:
  * Spine should see if script to be executed is executable
  * Enhance number recognition
  * When polling devices, sort by larger number of items first
  * Log format may be corrupted when timeout occurs
  * Compile warning appears due to GCC flag on RHEL7/RHEL8
  * Downed device detection only checks one of the two uptime OIDs
  * Compile error appears due to execinfo.h on FreeBSD
  * Bootstrap shell script contains some PHP cruft
  * Padding is not always removed from the start of non-numeric
    strings
  * Improve SNMP result handling for non-numeric results
  * Further improve SNMP result handling for non-numeric results
  * Remove check for the max_oids column which has been present
    since Cacti v1.0
  * Minimize Sorting when fetching poller records for maximum
    performance
  * Spine should see if script to be executed is executable</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1703419200">- cacti-spine 1.2.26:
  * Fix: Errors when uptime OID is not present
  * Fix: MySQL reconnect option is depreciated
  * Fix: Spine does not check a host with no poller items
  * Fix: Poller may report the wrong number of devices polled
  * Feature: Allow users to override the threads setting at the command line
  * Feature: Allow spine to run in ping-only mode</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- cacti-spine 1.2.27:
  * Restore AES Support</changelog>
</package>
<package pkgid="86c5d8ee05f589d021d53a01cfa23544f72283a17159e9a74a57f4555f01e77a" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.2.27" rel="bp156.2.3.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1672660800">- cacti-spine 1.2.23:
  * Fix unexpected reindexing when using uptime as the reindex
    method
  * Spine should prevent the script server from connecting to remote
    when offline
  * Improve Script Server Timeout Logging
  * Add SQL_NO_CACHE to Spine Queries</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677499200">- cacti-spine 1.2.24:
  * Fix segfault when ignoring older OIDs</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1694001600">- cacti-spine 1.2.25:
  * Spine should see if script to be executed is executable
  * Enhance number recognition
  * When polling devices, sort by larger number of items first
  * Log format may be corrupted when timeout occurs
  * Compile warning appears due to GCC flag on RHEL7/RHEL8
  * Downed device detection only checks one of the two uptime OIDs
  * Compile error appears due to execinfo.h on FreeBSD
  * Bootstrap shell script contains some PHP cruft
  * Padding is not always removed from the start of non-numeric
    strings
  * Improve SNMP result handling for non-numeric results
  * Further improve SNMP result handling for non-numeric results
  * Remove check for the max_oids column which has been present
    since Cacti v1.0
  * Minimize Sorting when fetching poller records for maximum
    performance
  * Spine should see if script to be executed is executable</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1703419200">- cacti-spine 1.2.26:
  * Fix: Errors when uptime OID is not present
  * Fix: MySQL reconnect option is depreciated
  * Fix: Spine does not check a host with no poller items
  * Fix: Poller may report the wrong number of devices polled
  * Feature: Allow users to override the threads setting at the command line
  * Feature: Allow spine to run in ping-only mode</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- cacti-spine 1.2.27:
  * Restore AES Support</changelog>
</package>
<package pkgid="12f93e3725190b46b89d8fed1a0765fb75d9bf378e3bd05fe04007b04ebdcdff" name="caddy" arch="aarch64">
  <version epoch="0" ver="2.10.0" rel="bp156.3.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1744977600">- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
  * caddytls: Add remote_ip to HTTP cert manager (close #6952)
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960)
  * caddyauth: Set authentication provider error in placeholder (#6932)
  * go.mod: Upgrade acmez and certmagic
  * admin: Remove host checking for UDS (close #6832)
  * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949)
  * Fix the incorrect parameter order (#6951)
  * chore: fix comment (#6950)
  * caddyhttp: Document side effect of HTTP/3 early data (close #6936)
  * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers)
  * events: Refactor; move Event into core, so core can emit events (#6930)
  * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication
  * go.mod: Upgrade CertMagic
  * go.mod: Minor dependency upgrades
  * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)
  * core: add modular `network_proxy` support (#6399)
  * update quic-go to v0.50.1 (#6918)
  * chore: Modernize a couple for loops
  * caddytls: Initialize permission module earlier (fix #6901)
  * caddyfile: Fix formatting for backquote wrapped braces (#6903)
  * caddytls: Convert AP subjects to punycode
  * caddytls: Don't publish ECH configs if other records don't exist
  * requestbody: Fix ContentLength calculation after body replacement (#6896)
  * requestbody: Add set option to replace request body (#5795)
  * headers: Allow nil HeaderOps (fix #6893)
  * caddytls: Minor fixes for ECH
  * caddytls: Fix TrustedCACerts backwards compatibility (#6889)
  * caddytls: Pointer receiver (fix #6885)
  * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)
  * reverseproxy: more comments about buffering and add new tests (#6778)
  * chore: Remove unnecessary explicit type parameters
  * caddytls: Reorder provisioning steps (fix #6877)
  * ci: fix Go matrix (#6846)
  * caddytls: Only make DNS solver if not already set (fix #6880)
  * cmd: Promote undo maxProcs func to caller
  * cmd: Only set memory/CPU limits on run (fix #6879)
  * caddypki: Remove lifetime check at Caddyfile parse (fix #6878)
  * go.mod: Upgrade dependencies
  * caddytls: Fix broken refactor
  * caddytls: Enhance ECH documentation
  * Update min go version in readme
  * readme: update Twitter name and link (#6874)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876)
  * caddytls: Encrypted ClientHello (ECH) (#6862)
  * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871)
  * chore: upgrade cobra (#6868)
  * Fix typo in TLS group x25519mlkem768
  * caddytest: Support configuration defaults override (#6850)
  * chore: update quic-go to v0.50.0 (#6854)
  * go.mod: remove glog dependency (#6838)
  * chore: ci: upgrade Go version to 1.24 (#6839)
  * tests: tests for error handling &amp; metrics in admin endpoints (#6805)
  * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768
  * file_server: use the UTC timezone for modified time (#6830)
  * Revert "logging: Always set fields func; fix #6829"
  * logging: Always set fields func; fix #6829
  * admin: fix index validation for PUT requests (#6824)
  * reverseproxy: ignore duplicate collector registration error (#6820)
  * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814)
  * fix: update broken link to Ardan Labs (#6800)
  * reverse_proxy: re-add healthy upstreams metric (#6806)
  * caddytls: Refactor sni matcher (#6812)
  * cmd: automatically set GOMEMLIMIT (#6809)
  * caddyhttp: ResponseRecorder sets stream regardless of 1xx
  * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804)
  * chore: don't use deprecated `archives.format_overrides.format` (#6807)
  * chore: update quic-go to v0.49.0 (#6803)
  * go.mod: Upgrade CertMagic to v0.21.7
  * reverseproxy: Via header (#6275)
  * logging: Fix crash if logging error is not HandlerError (#6777)
  * caddytls: Initial support for ACME profiles
  * fastcgi: improve parsePHPFastCGI docs (#6779)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) &gt;= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.</changelog>
</package>
<package pkgid="ffc43f4503d8a30281f5fa939c53e7cce6f7724eb8412d88a5c50d001973aafd" name="caddy" arch="i586">
  <version epoch="0" ver="2.10.0" rel="bp156.3.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1744977600">- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
  * caddytls: Add remote_ip to HTTP cert manager (close #6952)
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960)
  * caddyauth: Set authentication provider error in placeholder (#6932)
  * go.mod: Upgrade acmez and certmagic
  * admin: Remove host checking for UDS (close #6832)
  * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949)
  * Fix the incorrect parameter order (#6951)
  * chore: fix comment (#6950)
  * caddyhttp: Document side effect of HTTP/3 early data (close #6936)
  * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers)
  * events: Refactor; move Event into core, so core can emit events (#6930)
  * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication
  * go.mod: Upgrade CertMagic
  * go.mod: Minor dependency upgrades
  * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)
  * core: add modular `network_proxy` support (#6399)
  * update quic-go to v0.50.1 (#6918)
  * chore: Modernize a couple for loops
  * caddytls: Initialize permission module earlier (fix #6901)
  * caddyfile: Fix formatting for backquote wrapped braces (#6903)
  * caddytls: Convert AP subjects to punycode
  * caddytls: Don't publish ECH configs if other records don't exist
  * requestbody: Fix ContentLength calculation after body replacement (#6896)
  * requestbody: Add set option to replace request body (#5795)
  * headers: Allow nil HeaderOps (fix #6893)
  * caddytls: Minor fixes for ECH
  * caddytls: Fix TrustedCACerts backwards compatibility (#6889)
  * caddytls: Pointer receiver (fix #6885)
  * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)
  * reverseproxy: more comments about buffering and add new tests (#6778)
  * chore: Remove unnecessary explicit type parameters
  * caddytls: Reorder provisioning steps (fix #6877)
  * ci: fix Go matrix (#6846)
  * caddytls: Only make DNS solver if not already set (fix #6880)
  * cmd: Promote undo maxProcs func to caller
  * cmd: Only set memory/CPU limits on run (fix #6879)
  * caddypki: Remove lifetime check at Caddyfile parse (fix #6878)
  * go.mod: Upgrade dependencies
  * caddytls: Fix broken refactor
  * caddytls: Enhance ECH documentation
  * Update min go version in readme
  * readme: update Twitter name and link (#6874)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876)
  * caddytls: Encrypted ClientHello (ECH) (#6862)
  * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871)
  * chore: upgrade cobra (#6868)
  * Fix typo in TLS group x25519mlkem768
  * caddytest: Support configuration defaults override (#6850)
  * chore: update quic-go to v0.50.0 (#6854)
  * go.mod: remove glog dependency (#6838)
  * chore: ci: upgrade Go version to 1.24 (#6839)
  * tests: tests for error handling &amp; metrics in admin endpoints (#6805)
  * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768
  * file_server: use the UTC timezone for modified time (#6830)
  * Revert "logging: Always set fields func; fix #6829"
  * logging: Always set fields func; fix #6829
  * admin: fix index validation for PUT requests (#6824)
  * reverseproxy: ignore duplicate collector registration error (#6820)
  * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814)
  * fix: update broken link to Ardan Labs (#6800)
  * reverse_proxy: re-add healthy upstreams metric (#6806)
  * caddytls: Refactor sni matcher (#6812)
  * cmd: automatically set GOMEMLIMIT (#6809)
  * caddyhttp: ResponseRecorder sets stream regardless of 1xx
  * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804)
  * chore: don't use deprecated `archives.format_overrides.format` (#6807)
  * chore: update quic-go to v0.49.0 (#6803)
  * go.mod: Upgrade CertMagic to v0.21.7
  * reverseproxy: Via header (#6275)
  * logging: Fix crash if logging error is not HandlerError (#6777)
  * caddytls: Initial support for ACME profiles
  * fastcgi: improve parsePHPFastCGI docs (#6779)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) &gt;= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.</changelog>
</package>
<package pkgid="5a4a2c40e0378f52a2e978a1aab950d7763eaf004fd6245d656066f3c5710ec7" name="caddy" arch="ppc64le">
  <version epoch="0" ver="2.10.0" rel="bp156.3.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1744977600">- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
  * caddytls: Add remote_ip to HTTP cert manager (close #6952)
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960)
  * caddyauth: Set authentication provider error in placeholder (#6932)
  * go.mod: Upgrade acmez and certmagic
  * admin: Remove host checking for UDS (close #6832)
  * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949)
  * Fix the incorrect parameter order (#6951)
  * chore: fix comment (#6950)
  * caddyhttp: Document side effect of HTTP/3 early data (close #6936)
  * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers)
  * events: Refactor; move Event into core, so core can emit events (#6930)
  * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication
  * go.mod: Upgrade CertMagic
  * go.mod: Minor dependency upgrades
  * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)
  * core: add modular `network_proxy` support (#6399)
  * update quic-go to v0.50.1 (#6918)
  * chore: Modernize a couple for loops
  * caddytls: Initialize permission module earlier (fix #6901)
  * caddyfile: Fix formatting for backquote wrapped braces (#6903)
  * caddytls: Convert AP subjects to punycode
  * caddytls: Don't publish ECH configs if other records don't exist
  * requestbody: Fix ContentLength calculation after body replacement (#6896)
  * requestbody: Add set option to replace request body (#5795)
  * headers: Allow nil HeaderOps (fix #6893)
  * caddytls: Minor fixes for ECH
  * caddytls: Fix TrustedCACerts backwards compatibility (#6889)
  * caddytls: Pointer receiver (fix #6885)
  * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)
  * reverseproxy: more comments about buffering and add new tests (#6778)
  * chore: Remove unnecessary explicit type parameters
  * caddytls: Reorder provisioning steps (fix #6877)
  * ci: fix Go matrix (#6846)
  * caddytls: Only make DNS solver if not already set (fix #6880)
  * cmd: Promote undo maxProcs func to caller
  * cmd: Only set memory/CPU limits on run (fix #6879)
  * caddypki: Remove lifetime check at Caddyfile parse (fix #6878)
  * go.mod: Upgrade dependencies
  * caddytls: Fix broken refactor
  * caddytls: Enhance ECH documentation
  * Update min go version in readme
  * readme: update Twitter name and link (#6874)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876)
  * caddytls: Encrypted ClientHello (ECH) (#6862)
  * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871)
  * chore: upgrade cobra (#6868)
  * Fix typo in TLS group x25519mlkem768
  * caddytest: Support configuration defaults override (#6850)
  * chore: update quic-go to v0.50.0 (#6854)
  * go.mod: remove glog dependency (#6838)
  * chore: ci: upgrade Go version to 1.24 (#6839)
  * tests: tests for error handling &amp; metrics in admin endpoints (#6805)
  * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768
  * file_server: use the UTC timezone for modified time (#6830)
  * Revert "logging: Always set fields func; fix #6829"
  * logging: Always set fields func; fix #6829
  * admin: fix index validation for PUT requests (#6824)
  * reverseproxy: ignore duplicate collector registration error (#6820)
  * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814)
  * fix: update broken link to Ardan Labs (#6800)
  * reverse_proxy: re-add healthy upstreams metric (#6806)
  * caddytls: Refactor sni matcher (#6812)
  * cmd: automatically set GOMEMLIMIT (#6809)
  * caddyhttp: ResponseRecorder sets stream regardless of 1xx
  * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804)
  * chore: don't use deprecated `archives.format_overrides.format` (#6807)
  * chore: update quic-go to v0.49.0 (#6803)
  * go.mod: Upgrade CertMagic to v0.21.7
  * reverseproxy: Via header (#6275)
  * logging: Fix crash if logging error is not HandlerError (#6777)
  * caddytls: Initial support for ACME profiles
  * fastcgi: improve parsePHPFastCGI docs (#6779)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) &gt;= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.</changelog>
</package>
<package pkgid="51ad459ac30105aeebc40ead86d67975e457e9046f4322820f8df5a640318f9e" name="caddy" arch="s390x">
  <version epoch="0" ver="2.10.0" rel="bp156.3.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1744977600">- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
  * caddytls: Add remote_ip to HTTP cert manager (close #6952)
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960)
  * caddyauth: Set authentication provider error in placeholder (#6932)
  * go.mod: Upgrade acmez and certmagic
  * admin: Remove host checking for UDS (close #6832)
  * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949)
  * Fix the incorrect parameter order (#6951)
  * chore: fix comment (#6950)
  * caddyhttp: Document side effect of HTTP/3 early data (close #6936)
  * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers)
  * events: Refactor; move Event into core, so core can emit events (#6930)
  * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication
  * go.mod: Upgrade CertMagic
  * go.mod: Minor dependency upgrades
  * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)
  * core: add modular `network_proxy` support (#6399)
  * update quic-go to v0.50.1 (#6918)
  * chore: Modernize a couple for loops
  * caddytls: Initialize permission module earlier (fix #6901)
  * caddyfile: Fix formatting for backquote wrapped braces (#6903)
  * caddytls: Convert AP subjects to punycode
  * caddytls: Don't publish ECH configs if other records don't exist
  * requestbody: Fix ContentLength calculation after body replacement (#6896)
  * requestbody: Add set option to replace request body (#5795)
  * headers: Allow nil HeaderOps (fix #6893)
  * caddytls: Minor fixes for ECH
  * caddytls: Fix TrustedCACerts backwards compatibility (#6889)
  * caddytls: Pointer receiver (fix #6885)
  * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)
  * reverseproxy: more comments about buffering and add new tests (#6778)
  * chore: Remove unnecessary explicit type parameters
  * caddytls: Reorder provisioning steps (fix #6877)
  * ci: fix Go matrix (#6846)
  * caddytls: Only make DNS solver if not already set (fix #6880)
  * cmd: Promote undo maxProcs func to caller
  * cmd: Only set memory/CPU limits on run (fix #6879)
  * caddypki: Remove lifetime check at Caddyfile parse (fix #6878)
  * go.mod: Upgrade dependencies
  * caddytls: Fix broken refactor
  * caddytls: Enhance ECH documentation
  * Update min go version in readme
  * readme: update Twitter name and link (#6874)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876)
  * caddytls: Encrypted ClientHello (ECH) (#6862)
  * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871)
  * chore: upgrade cobra (#6868)
  * Fix typo in TLS group x25519mlkem768
  * caddytest: Support configuration defaults override (#6850)
  * chore: update quic-go to v0.50.0 (#6854)
  * go.mod: remove glog dependency (#6838)
  * chore: ci: upgrade Go version to 1.24 (#6839)
  * tests: tests for error handling &amp; metrics in admin endpoints (#6805)
  * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768
  * file_server: use the UTC timezone for modified time (#6830)
  * Revert "logging: Always set fields func; fix #6829"
  * logging: Always set fields func; fix #6829
  * admin: fix index validation for PUT requests (#6824)
  * reverseproxy: ignore duplicate collector registration error (#6820)
  * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814)
  * fix: update broken link to Ardan Labs (#6800)
  * reverse_proxy: re-add healthy upstreams metric (#6806)
  * caddytls: Refactor sni matcher (#6812)
  * cmd: automatically set GOMEMLIMIT (#6809)
  * caddyhttp: ResponseRecorder sets stream regardless of 1xx
  * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804)
  * chore: don't use deprecated `archives.format_overrides.format` (#6807)
  * chore: update quic-go to v0.49.0 (#6803)
  * go.mod: Upgrade CertMagic to v0.21.7
  * reverseproxy: Via header (#6275)
  * logging: Fix crash if logging error is not HandlerError (#6777)
  * caddytls: Initial support for ACME profiles
  * fastcgi: improve parsePHPFastCGI docs (#6779)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) &gt;= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.</changelog>
</package>
<package pkgid="cfba5dfe13c04e805f767ce41b864397c4da9e42d798061c809db1bc0321f2dc" name="caddy" arch="src">
  <version epoch="0" ver="2.10.0" rel="bp156.3.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1744977600">- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
  * caddytls: Add remote_ip to HTTP cert manager (close #6952)
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960)
  * caddyauth: Set authentication provider error in placeholder (#6932)
  * go.mod: Upgrade acmez and certmagic
  * admin: Remove host checking for UDS (close #6832)
  * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949)
  * Fix the incorrect parameter order (#6951)
  * chore: fix comment (#6950)
  * caddyhttp: Document side effect of HTTP/3 early data (close #6936)
  * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers)
  * events: Refactor; move Event into core, so core can emit events (#6930)
  * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication
  * go.mod: Upgrade CertMagic
  * go.mod: Minor dependency upgrades
  * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)
  * core: add modular `network_proxy` support (#6399)
  * update quic-go to v0.50.1 (#6918)
  * chore: Modernize a couple for loops
  * caddytls: Initialize permission module earlier (fix #6901)
  * caddyfile: Fix formatting for backquote wrapped braces (#6903)
  * caddytls: Convert AP subjects to punycode
  * caddytls: Don't publish ECH configs if other records don't exist
  * requestbody: Fix ContentLength calculation after body replacement (#6896)
  * requestbody: Add set option to replace request body (#5795)
  * headers: Allow nil HeaderOps (fix #6893)
  * caddytls: Minor fixes for ECH
  * caddytls: Fix TrustedCACerts backwards compatibility (#6889)
  * caddytls: Pointer receiver (fix #6885)
  * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)
  * reverseproxy: more comments about buffering and add new tests (#6778)
  * chore: Remove unnecessary explicit type parameters
  * caddytls: Reorder provisioning steps (fix #6877)
  * ci: fix Go matrix (#6846)
  * caddytls: Only make DNS solver if not already set (fix #6880)
  * cmd: Promote undo maxProcs func to caller
  * cmd: Only set memory/CPU limits on run (fix #6879)
  * caddypki: Remove lifetime check at Caddyfile parse (fix #6878)
  * go.mod: Upgrade dependencies
  * caddytls: Fix broken refactor
  * caddytls: Enhance ECH documentation
  * Update min go version in readme
  * readme: update Twitter name and link (#6874)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876)
  * caddytls: Encrypted ClientHello (ECH) (#6862)
  * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871)
  * chore: upgrade cobra (#6868)
  * Fix typo in TLS group x25519mlkem768
  * caddytest: Support configuration defaults override (#6850)
  * chore: update quic-go to v0.50.0 (#6854)
  * go.mod: remove glog dependency (#6838)
  * chore: ci: upgrade Go version to 1.24 (#6839)
  * tests: tests for error handling &amp; metrics in admin endpoints (#6805)
  * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768
  * file_server: use the UTC timezone for modified time (#6830)
  * Revert "logging: Always set fields func; fix #6829"
  * logging: Always set fields func; fix #6829
  * admin: fix index validation for PUT requests (#6824)
  * reverseproxy: ignore duplicate collector registration error (#6820)
  * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814)
  * fix: update broken link to Ardan Labs (#6800)
  * reverse_proxy: re-add healthy upstreams metric (#6806)
  * caddytls: Refactor sni matcher (#6812)
  * cmd: automatically set GOMEMLIMIT (#6809)
  * caddyhttp: ResponseRecorder sets stream regardless of 1xx
  * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804)
  * chore: don't use deprecated `archives.format_overrides.format` (#6807)
  * chore: update quic-go to v0.49.0 (#6803)
  * go.mod: Upgrade CertMagic to v0.21.7
  * reverseproxy: Via header (#6275)
  * logging: Fix crash if logging error is not HandlerError (#6777)
  * caddytls: Initial support for ACME profiles
  * fastcgi: improve parsePHPFastCGI docs (#6779)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) &gt;= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.</changelog>
</package>
<package pkgid="0b5810e901ce9152473a775da928fefc7fdc163f089c415106dd7611daa7cc60" name="caddy" arch="x86_64">
  <version epoch="0" ver="2.10.0" rel="bp156.3.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1744977600">- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
  * caddytls: Add remote_ip to HTTP cert manager (close #6952)
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960)
  * caddyauth: Set authentication provider error in placeholder (#6932)
  * go.mod: Upgrade acmez and certmagic
  * admin: Remove host checking for UDS (close #6832)
  * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949)
  * Fix the incorrect parameter order (#6951)
  * chore: fix comment (#6950)
  * caddyhttp: Document side effect of HTTP/3 early data (close #6936)
  * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers)
  * events: Refactor; move Event into core, so core can emit events (#6930)
  * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication
  * go.mod: Upgrade CertMagic
  * go.mod: Minor dependency upgrades
  * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)
  * core: add modular `network_proxy` support (#6399)
  * update quic-go to v0.50.1 (#6918)
  * chore: Modernize a couple for loops
  * caddytls: Initialize permission module earlier (fix #6901)
  * caddyfile: Fix formatting for backquote wrapped braces (#6903)
  * caddytls: Convert AP subjects to punycode
  * caddytls: Don't publish ECH configs if other records don't exist
  * requestbody: Fix ContentLength calculation after body replacement (#6896)
  * requestbody: Add set option to replace request body (#5795)
  * headers: Allow nil HeaderOps (fix #6893)
  * caddytls: Minor fixes for ECH
  * caddytls: Fix TrustedCACerts backwards compatibility (#6889)
  * caddytls: Pointer receiver (fix #6885)
  * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)
  * reverseproxy: more comments about buffering and add new tests (#6778)
  * chore: Remove unnecessary explicit type parameters
  * caddytls: Reorder provisioning steps (fix #6877)
  * ci: fix Go matrix (#6846)
  * caddytls: Only make DNS solver if not already set (fix #6880)
  * cmd: Promote undo maxProcs func to caller
  * cmd: Only set memory/CPU limits on run (fix #6879)
  * caddypki: Remove lifetime check at Caddyfile parse (fix #6878)
  * go.mod: Upgrade dependencies
  * caddytls: Fix broken refactor
  * caddytls: Enhance ECH documentation
  * Update min go version in readme
  * readme: update Twitter name and link (#6874)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876)
  * caddytls: Encrypted ClientHello (ECH) (#6862)
  * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871)
  * chore: upgrade cobra (#6868)
  * Fix typo in TLS group x25519mlkem768
  * caddytest: Support configuration defaults override (#6850)
  * chore: update quic-go to v0.50.0 (#6854)
  * go.mod: remove glog dependency (#6838)
  * chore: ci: upgrade Go version to 1.24 (#6839)
  * tests: tests for error handling &amp; metrics in admin endpoints (#6805)
  * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768
  * file_server: use the UTC timezone for modified time (#6830)
  * Revert "logging: Always set fields func; fix #6829"
  * logging: Always set fields func; fix #6829
  * admin: fix index validation for PUT requests (#6824)
  * reverseproxy: ignore duplicate collector registration error (#6820)
  * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814)
  * fix: update broken link to Ardan Labs (#6800)
  * reverse_proxy: re-add healthy upstreams metric (#6806)
  * caddytls: Refactor sni matcher (#6812)
  * cmd: automatically set GOMEMLIMIT (#6809)
  * caddyhttp: ResponseRecorder sets stream regardless of 1xx
  * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804)
  * chore: don't use deprecated `archives.format_overrides.format` (#6807)
  * chore: update quic-go to v0.49.0 (#6803)
  * go.mod: Upgrade CertMagic to v0.21.7
  * reverseproxy: Via header (#6275)
  * logging: Fix crash if logging error is not HandlerError (#6777)
  * caddytls: Initial support for ACME profiles
  * fastcgi: improve parsePHPFastCGI docs (#6779)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) &gt;= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.</changelog>
</package>
<package pkgid="56fd12ea97fb9b25942ae1480fb9c9fcd6c71baba417b0137e78a048e836656f" name="caddy" arch="aarch64">
  <version epoch="0" ver="2.8.4" rel="bp156.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1682769600">- Update to version 2.6.4:
  * go.mod: Upgrade acmez and x/net
  * reverseproxy: Don't buffer chunked requests (fix #5366) (#5367)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1682856000">- Fix failing build on SLE-12 by defining _sharedstatedir /var/lib
  on SLE-12 consistent with SLE-15, openSUSE and upstream RPM docs.
  * SLE-12 _sharedstatedir was /usr/com, _localstatedir is /var as expected
  * SLE-15+ _sharedstatedir is /var/lib, _localstatedir is /var
  * _sharedstatedir used here as home directory for newly created user caddy
  * If not redefined build fails with empty /usr/com not owned by any package
  * Switch to useradd -d %{_sharedstatedir} from %{_localstatedir}/lib
    The latter is common in Factory packages possibly for historical reasons,
    opt for the less common option here for equivalence and clarity.</changelog>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
</package>
<package pkgid="86e06369a03684a8c46ce4f1886dffbcbd61de8445aa8e7c69de50b36728c320" name="caddy" arch="i586">
  <version epoch="0" ver="2.8.4" rel="bp156.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1682769600">- Update to version 2.6.4:
  * go.mod: Upgrade acmez and x/net
  * reverseproxy: Don't buffer chunked requests (fix #5366) (#5367)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1682856000">- Fix failing build on SLE-12 by defining _sharedstatedir /var/lib
  on SLE-12 consistent with SLE-15, openSUSE and upstream RPM docs.
  * SLE-12 _sharedstatedir was /usr/com, _localstatedir is /var as expected
  * SLE-15+ _sharedstatedir is /var/lib, _localstatedir is /var
  * _sharedstatedir used here as home directory for newly created user caddy
  * If not redefined build fails with empty /usr/com not owned by any package
  * Switch to useradd -d %{_sharedstatedir} from %{_localstatedir}/lib
    The latter is common in Factory packages possibly for historical reasons,
    opt for the less common option here for equivalence and clarity.</changelog>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
</package>
<package pkgid="3dba679cd6320185af3320a771705eaf0735e8adab1345e54d7c1cbb9541ca8a" name="caddy" arch="ppc64le">
  <version epoch="0" ver="2.8.4" rel="bp156.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1682769600">- Update to version 2.6.4:
  * go.mod: Upgrade acmez and x/net
  * reverseproxy: Don't buffer chunked requests (fix #5366) (#5367)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1682856000">- Fix failing build on SLE-12 by defining _sharedstatedir /var/lib
  on SLE-12 consistent with SLE-15, openSUSE and upstream RPM docs.
  * SLE-12 _sharedstatedir was /usr/com, _localstatedir is /var as expected
  * SLE-15+ _sharedstatedir is /var/lib, _localstatedir is /var
  * _sharedstatedir used here as home directory for newly created user caddy
  * If not redefined build fails with empty /usr/com not owned by any package
  * Switch to useradd -d %{_sharedstatedir} from %{_localstatedir}/lib
    The latter is common in Factory packages possibly for historical reasons,
    opt for the less common option here for equivalence and clarity.</changelog>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
</package>
<package pkgid="aa82857b8625e391c4aa62ace008d375edb4d507bcfc78fa9597887349729ac9" name="caddy" arch="s390x">
  <version epoch="0" ver="2.8.4" rel="bp156.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1682769600">- Update to version 2.6.4:
  * go.mod: Upgrade acmez and x/net
  * reverseproxy: Don't buffer chunked requests (fix #5366) (#5367)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1682856000">- Fix failing build on SLE-12 by defining _sharedstatedir /var/lib
  on SLE-12 consistent with SLE-15, openSUSE and upstream RPM docs.
  * SLE-12 _sharedstatedir was /usr/com, _localstatedir is /var as expected
  * SLE-15+ _sharedstatedir is /var/lib, _localstatedir is /var
  * _sharedstatedir used here as home directory for newly created user caddy
  * If not redefined build fails with empty /usr/com not owned by any package
  * Switch to useradd -d %{_sharedstatedir} from %{_localstatedir}/lib
    The latter is common in Factory packages possibly for historical reasons,
    opt for the less common option here for equivalence and clarity.</changelog>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
</package>
<package pkgid="1fc9128addfafbb703e3e9078d7ac3904b047492188b0becb6c636d25cb3b7bb" name="caddy" arch="src">
  <version epoch="0" ver="2.8.4" rel="bp156.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1682769600">- Update to version 2.6.4:
  * go.mod: Upgrade acmez and x/net
  * reverseproxy: Don't buffer chunked requests (fix #5366) (#5367)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1682856000">- Fix failing build on SLE-12 by defining _sharedstatedir /var/lib
  on SLE-12 consistent with SLE-15, openSUSE and upstream RPM docs.
  * SLE-12 _sharedstatedir was /usr/com, _localstatedir is /var as expected
  * SLE-15+ _sharedstatedir is /var/lib, _localstatedir is /var
  * _sharedstatedir used here as home directory for newly created user caddy
  * If not redefined build fails with empty /usr/com not owned by any package
  * Switch to useradd -d %{_sharedstatedir} from %{_localstatedir}/lib
    The latter is common in Factory packages possibly for historical reasons,
    opt for the less common option here for equivalence and clarity.</changelog>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
</package>
<package pkgid="5e958f462ed6bbd65970e148c7281ce0725a7ee13d1a7226da5dc54249109687" name="caddy" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="bp156.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1682769600">- Update to version 2.6.4:
  * go.mod: Upgrade acmez and x/net
  * reverseproxy: Don't buffer chunked requests (fix #5366) (#5367)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1682856000">- Fix failing build on SLE-12 by defining _sharedstatedir /var/lib
  on SLE-12 consistent with SLE-15, openSUSE and upstream RPM docs.
  * SLE-12 _sharedstatedir was /usr/com, _localstatedir is /var as expected
  * SLE-15+ _sharedstatedir is /var/lib, _localstatedir is /var
  * _sharedstatedir used here as home directory for newly created user caddy
  * If not redefined build fails with empty /usr/com not owned by any package
  * Switch to useradd -d %{_sharedstatedir} from %{_localstatedir}/lib
    The latter is common in Factory packages possibly for historical reasons,
    opt for the less common option here for equivalence and clarity.</changelog>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
</package>
<package pkgid="ab9c32d3bff48b2e416afd80af51a2855818035be1844ac6c62055b89e363180" name="caddy" arch="aarch64">
  <version epoch="0" ver="2.9.1" rel="bp156.3.6.1"/>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
</package>
<package pkgid="a13702a9f49d6da2322f89ba366a29747629a3b48833c815ddd0f1e351443a83" name="caddy" arch="i586">
  <version epoch="0" ver="2.9.1" rel="bp156.3.6.1"/>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
</package>
<package pkgid="fa076f33fad4c1667b55b78916152abbc961d915e0bcdb2a0dafee1200ff9fc9" name="caddy" arch="ppc64le">
  <version epoch="0" ver="2.9.1" rel="bp156.3.6.1"/>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
</package>
<package pkgid="7e810c150bee9e546688f591bf99a4c86d57865b08ad7f036371e6eda2d8ea36" name="caddy" arch="s390x">
  <version epoch="0" ver="2.9.1" rel="bp156.3.6.1"/>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
</package>
<package pkgid="1f0e245521a8e1dd608d4a536d15b61f7bfa21dcd2e4981e4319fd157883c1ce" name="caddy" arch="src">
  <version epoch="0" ver="2.9.1" rel="bp156.3.6.1"/>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
</package>
<package pkgid="faafd4ae68359e1a121e99cec14cf84602497f1815cc088dd69e0c300965132e" name="caddy" arch="x86_64">
  <version epoch="0" ver="2.9.1" rel="bp156.3.6.1"/>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
</package>
<package pkgid="e4bafe618c36569f37af8a5806eeea8bbb0aad0109a532db05cfe67f3c27be4d" name="caddy-bash-completion" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="bp156.3.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1744977600">- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
  * caddytls: Add remote_ip to HTTP cert manager (close #6952)
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960)
  * caddyauth: Set authentication provider error in placeholder (#6932)
  * go.mod: Upgrade acmez and certmagic
  * admin: Remove host checking for UDS (close #6832)
  * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949)
  * Fix the incorrect parameter order (#6951)
  * chore: fix comment (#6950)
  * caddyhttp: Document side effect of HTTP/3 early data (close #6936)
  * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers)
  * events: Refactor; move Event into core, so core can emit events (#6930)
  * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication
  * go.mod: Upgrade CertMagic
  * go.mod: Minor dependency upgrades
  * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)
  * core: add modular `network_proxy` support (#6399)
  * update quic-go to v0.50.1 (#6918)
  * chore: Modernize a couple for loops
  * caddytls: Initialize permission module earlier (fix #6901)
  * caddyfile: Fix formatting for backquote wrapped braces (#6903)
  * caddytls: Convert AP subjects to punycode
  * caddytls: Don't publish ECH configs if other records don't exist
  * requestbody: Fix ContentLength calculation after body replacement (#6896)
  * requestbody: Add set option to replace request body (#5795)
  * headers: Allow nil HeaderOps (fix #6893)
  * caddytls: Minor fixes for ECH
  * caddytls: Fix TrustedCACerts backwards compatibility (#6889)
  * caddytls: Pointer receiver (fix #6885)
  * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)
  * reverseproxy: more comments about buffering and add new tests (#6778)
  * chore: Remove unnecessary explicit type parameters
  * caddytls: Reorder provisioning steps (fix #6877)
  * ci: fix Go matrix (#6846)
  * caddytls: Only make DNS solver if not already set (fix #6880)
  * cmd: Promote undo maxProcs func to caller
  * cmd: Only set memory/CPU limits on run (fix #6879)
  * caddypki: Remove lifetime check at Caddyfile parse (fix #6878)
  * go.mod: Upgrade dependencies
  * caddytls: Fix broken refactor
  * caddytls: Enhance ECH documentation
  * Update min go version in readme
  * readme: update Twitter name and link (#6874)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876)
  * caddytls: Encrypted ClientHello (ECH) (#6862)
  * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871)
  * chore: upgrade cobra (#6868)
  * Fix typo in TLS group x25519mlkem768
  * caddytest: Support configuration defaults override (#6850)
  * chore: update quic-go to v0.50.0 (#6854)
  * go.mod: remove glog dependency (#6838)
  * chore: ci: upgrade Go version to 1.24 (#6839)
  * tests: tests for error handling &amp; metrics in admin endpoints (#6805)
  * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768
  * file_server: use the UTC timezone for modified time (#6830)
  * Revert "logging: Always set fields func; fix #6829"
  * logging: Always set fields func; fix #6829
  * admin: fix index validation for PUT requests (#6824)
  * reverseproxy: ignore duplicate collector registration error (#6820)
  * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814)
  * fix: update broken link to Ardan Labs (#6800)
  * reverse_proxy: re-add healthy upstreams metric (#6806)
  * caddytls: Refactor sni matcher (#6812)
  * cmd: automatically set GOMEMLIMIT (#6809)
  * caddyhttp: ResponseRecorder sets stream regardless of 1xx
  * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804)
  * chore: don't use deprecated `archives.format_overrides.format` (#6807)
  * chore: update quic-go to v0.49.0 (#6803)
  * go.mod: Upgrade CertMagic to v0.21.7
  * reverseproxy: Via header (#6275)
  * logging: Fix crash if logging error is not HandlerError (#6777)
  * caddytls: Initial support for ACME profiles
  * fastcgi: improve parsePHPFastCGI docs (#6779)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) &gt;= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.</changelog>
</package>
<package pkgid="54380952c826f4177cb8d7a64b523ce0adae1469b82e0f59f61a7dca8217b68d" name="caddy-bash-completion" arch="noarch">
  <version epoch="0" ver="2.8.4" rel="bp156.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1682769600">- Update to version 2.6.4:
  * go.mod: Upgrade acmez and x/net
  * reverseproxy: Don't buffer chunked requests (fix #5366) (#5367)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1682856000">- Fix failing build on SLE-12 by defining _sharedstatedir /var/lib
  on SLE-12 consistent with SLE-15, openSUSE and upstream RPM docs.
  * SLE-12 _sharedstatedir was /usr/com, _localstatedir is /var as expected
  * SLE-15+ _sharedstatedir is /var/lib, _localstatedir is /var
  * _sharedstatedir used here as home directory for newly created user caddy
  * If not redefined build fails with empty /usr/com not owned by any package
  * Switch to useradd -d %{_sharedstatedir} from %{_localstatedir}/lib
    The latter is common in Factory packages possibly for historical reasons,
    opt for the less common option here for equivalence and clarity.</changelog>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
</package>
<package pkgid="70cde5a49ad79f94dd2ef648e5d7893d87b1c31b933901a68f856e29707fefaf" name="caddy-bash-completion" arch="noarch">
  <version epoch="0" ver="2.9.1" rel="bp156.3.6.1"/>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
</package>
<package pkgid="744e7761819911ce98375e2b53efd697152a69f7a62cf8f86032b23813d95c52" name="caddy-fish-completion" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="bp156.3.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1744977600">- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
  * caddytls: Add remote_ip to HTTP cert manager (close #6952)
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960)
  * caddyauth: Set authentication provider error in placeholder (#6932)
  * go.mod: Upgrade acmez and certmagic
  * admin: Remove host checking for UDS (close #6832)
  * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949)
  * Fix the incorrect parameter order (#6951)
  * chore: fix comment (#6950)
  * caddyhttp: Document side effect of HTTP/3 early data (close #6936)
  * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers)
  * events: Refactor; move Event into core, so core can emit events (#6930)
  * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication
  * go.mod: Upgrade CertMagic
  * go.mod: Minor dependency upgrades
  * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)
  * core: add modular `network_proxy` support (#6399)
  * update quic-go to v0.50.1 (#6918)
  * chore: Modernize a couple for loops
  * caddytls: Initialize permission module earlier (fix #6901)
  * caddyfile: Fix formatting for backquote wrapped braces (#6903)
  * caddytls: Convert AP subjects to punycode
  * caddytls: Don't publish ECH configs if other records don't exist
  * requestbody: Fix ContentLength calculation after body replacement (#6896)
  * requestbody: Add set option to replace request body (#5795)
  * headers: Allow nil HeaderOps (fix #6893)
  * caddytls: Minor fixes for ECH
  * caddytls: Fix TrustedCACerts backwards compatibility (#6889)
  * caddytls: Pointer receiver (fix #6885)
  * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)
  * reverseproxy: more comments about buffering and add new tests (#6778)
  * chore: Remove unnecessary explicit type parameters
  * caddytls: Reorder provisioning steps (fix #6877)
  * ci: fix Go matrix (#6846)
  * caddytls: Only make DNS solver if not already set (fix #6880)
  * cmd: Promote undo maxProcs func to caller
  * cmd: Only set memory/CPU limits on run (fix #6879)
  * caddypki: Remove lifetime check at Caddyfile parse (fix #6878)
  * go.mod: Upgrade dependencies
  * caddytls: Fix broken refactor
  * caddytls: Enhance ECH documentation
  * Update min go version in readme
  * readme: update Twitter name and link (#6874)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876)
  * caddytls: Encrypted ClientHello (ECH) (#6862)
  * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871)
  * chore: upgrade cobra (#6868)
  * Fix typo in TLS group x25519mlkem768
  * caddytest: Support configuration defaults override (#6850)
  * chore: update quic-go to v0.50.0 (#6854)
  * go.mod: remove glog dependency (#6838)
  * chore: ci: upgrade Go version to 1.24 (#6839)
  * tests: tests for error handling &amp; metrics in admin endpoints (#6805)
  * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768
  * file_server: use the UTC timezone for modified time (#6830)
  * Revert "logging: Always set fields func; fix #6829"
  * logging: Always set fields func; fix #6829
  * admin: fix index validation for PUT requests (#6824)
  * reverseproxy: ignore duplicate collector registration error (#6820)
  * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814)
  * fix: update broken link to Ardan Labs (#6800)
  * reverse_proxy: re-add healthy upstreams metric (#6806)
  * caddytls: Refactor sni matcher (#6812)
  * cmd: automatically set GOMEMLIMIT (#6809)
  * caddyhttp: ResponseRecorder sets stream regardless of 1xx
  * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804)
  * chore: don't use deprecated `archives.format_overrides.format` (#6807)
  * chore: update quic-go to v0.49.0 (#6803)
  * go.mod: Upgrade CertMagic to v0.21.7
  * reverseproxy: Via header (#6275)
  * logging: Fix crash if logging error is not HandlerError (#6777)
  * caddytls: Initial support for ACME profiles
  * fastcgi: improve parsePHPFastCGI docs (#6779)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) &gt;= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.</changelog>
</package>
<package pkgid="fb67d66b3e8fd52cd10ea7b6b39fb598f4ea06a64d63b6c235d54cbfa4a7ba43" name="caddy-fish-completion" arch="noarch">
  <version epoch="0" ver="2.8.4" rel="bp156.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1682769600">- Update to version 2.6.4:
  * go.mod: Upgrade acmez and x/net
  * reverseproxy: Don't buffer chunked requests (fix #5366) (#5367)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1682856000">- Fix failing build on SLE-12 by defining _sharedstatedir /var/lib
  on SLE-12 consistent with SLE-15, openSUSE and upstream RPM docs.
  * SLE-12 _sharedstatedir was /usr/com, _localstatedir is /var as expected
  * SLE-15+ _sharedstatedir is /var/lib, _localstatedir is /var
  * _sharedstatedir used here as home directory for newly created user caddy
  * If not redefined build fails with empty /usr/com not owned by any package
  * Switch to useradd -d %{_sharedstatedir} from %{_localstatedir}/lib
    The latter is common in Factory packages possibly for historical reasons,
    opt for the less common option here for equivalence and clarity.</changelog>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
</package>
<package pkgid="0cbfd25c71915e29bbc53602d6cefd231ed2ead65e3384b51a106cb56842c88d" name="caddy-fish-completion" arch="noarch">
  <version epoch="0" ver="2.9.1" rel="bp156.3.6.1"/>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
</package>
<package pkgid="13d28df24d10fe6aee35ed3a3089461b5b7183fb87079757bddd44c3dbf03529" name="caddy-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="bp156.3.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1744977600">- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
  * caddytls: Add remote_ip to HTTP cert manager (close #6952)
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960)
  * caddyauth: Set authentication provider error in placeholder (#6932)
  * go.mod: Upgrade acmez and certmagic
  * admin: Remove host checking for UDS (close #6832)
  * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949)
  * Fix the incorrect parameter order (#6951)
  * chore: fix comment (#6950)
  * caddyhttp: Document side effect of HTTP/3 early data (close #6936)
  * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers)
  * events: Refactor; move Event into core, so core can emit events (#6930)
  * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication
  * go.mod: Upgrade CertMagic
  * go.mod: Minor dependency upgrades
  * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)
  * core: add modular `network_proxy` support (#6399)
  * update quic-go to v0.50.1 (#6918)
  * chore: Modernize a couple for loops
  * caddytls: Initialize permission module earlier (fix #6901)
  * caddyfile: Fix formatting for backquote wrapped braces (#6903)
  * caddytls: Convert AP subjects to punycode
  * caddytls: Don't publish ECH configs if other records don't exist
  * requestbody: Fix ContentLength calculation after body replacement (#6896)
  * requestbody: Add set option to replace request body (#5795)
  * headers: Allow nil HeaderOps (fix #6893)
  * caddytls: Minor fixes for ECH
  * caddytls: Fix TrustedCACerts backwards compatibility (#6889)
  * caddytls: Pointer receiver (fix #6885)
  * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)
  * reverseproxy: more comments about buffering and add new tests (#6778)
  * chore: Remove unnecessary explicit type parameters
  * caddytls: Reorder provisioning steps (fix #6877)
  * ci: fix Go matrix (#6846)
  * caddytls: Only make DNS solver if not already set (fix #6880)
  * cmd: Promote undo maxProcs func to caller
  * cmd: Only set memory/CPU limits on run (fix #6879)
  * caddypki: Remove lifetime check at Caddyfile parse (fix #6878)
  * go.mod: Upgrade dependencies
  * caddytls: Fix broken refactor
  * caddytls: Enhance ECH documentation
  * Update min go version in readme
  * readme: update Twitter name and link (#6874)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876)
  * caddytls: Encrypted ClientHello (ECH) (#6862)
  * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871)
  * chore: upgrade cobra (#6868)
  * Fix typo in TLS group x25519mlkem768
  * caddytest: Support configuration defaults override (#6850)
  * chore: update quic-go to v0.50.0 (#6854)
  * go.mod: remove glog dependency (#6838)
  * chore: ci: upgrade Go version to 1.24 (#6839)
  * tests: tests for error handling &amp; metrics in admin endpoints (#6805)
  * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768
  * file_server: use the UTC timezone for modified time (#6830)
  * Revert "logging: Always set fields func; fix #6829"
  * logging: Always set fields func; fix #6829
  * admin: fix index validation for PUT requests (#6824)
  * reverseproxy: ignore duplicate collector registration error (#6820)
  * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814)
  * fix: update broken link to Ardan Labs (#6800)
  * reverse_proxy: re-add healthy upstreams metric (#6806)
  * caddytls: Refactor sni matcher (#6812)
  * cmd: automatically set GOMEMLIMIT (#6809)
  * caddyhttp: ResponseRecorder sets stream regardless of 1xx
  * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804)
  * chore: don't use deprecated `archives.format_overrides.format` (#6807)
  * chore: update quic-go to v0.49.0 (#6803)
  * go.mod: Upgrade CertMagic to v0.21.7
  * reverseproxy: Via header (#6275)
  * logging: Fix crash if logging error is not HandlerError (#6777)
  * caddytls: Initial support for ACME profiles
  * fastcgi: improve parsePHPFastCGI docs (#6779)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) &gt;= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.</changelog>
</package>
<package pkgid="c1209e096cd9584e1637e7f256c72490e5559c6a10dec18de4f35c11040d0be8" name="caddy-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.8.4" rel="bp156.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1682769600">- Update to version 2.6.4:
  * go.mod: Upgrade acmez and x/net
  * reverseproxy: Don't buffer chunked requests (fix #5366) (#5367)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1682856000">- Fix failing build on SLE-12 by defining _sharedstatedir /var/lib
  on SLE-12 consistent with SLE-15, openSUSE and upstream RPM docs.
  * SLE-12 _sharedstatedir was /usr/com, _localstatedir is /var as expected
  * SLE-15+ _sharedstatedir is /var/lib, _localstatedir is /var
  * _sharedstatedir used here as home directory for newly created user caddy
  * If not redefined build fails with empty /usr/com not owned by any package
  * Switch to useradd -d %{_sharedstatedir} from %{_localstatedir}/lib
    The latter is common in Factory packages possibly for historical reasons,
    opt for the less common option here for equivalence and clarity.</changelog>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
</package>
<package pkgid="058c90a0cbaa381c472d9c528bd1031ced31c2ea84e3c627163c50522b4384ad" name="caddy-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.9.1" rel="bp156.3.6.1"/>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` &amp; logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `&gt;` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add &gt; Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) &gt;= 1.20 for guic-go bump</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691323200">- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1692273600">- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete</changelog>
  <changelog author="jkowalczyk@suse.com" date="1692273601">- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1695297600">- Switch to sysuser for user setup</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697198400">- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)
  * fileserver: Export BrowseTemplate
  * ci: ensure short-sha is exported correctly on all platforms (#5781)
  * caddyfile: Fix case where heredoc marker is empty after newline (#5769)
  * go.mod: Update quic-go to v0.38.0 (#5772)
  * chore: Appease gosec linter (#5777)
  * replacer: change timezone to UTC for "time.now.http" placeholders (#5774)
  * caddyfile: Adjust error formatting (#5765)
  * update quic-go to v0.37.6 (#5767)
  * httpcaddyfile: Stricter errors for site and upstream address schemes (#5757)
  * caddyfile: Loosen heredoc parsing (#5761)
  * fileserver: docs: clarify the ability to produce JSON array with `browse` (#5751)
  * fix package typo (#5764)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1702036800">- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1707134400">- Provide user and group (due to RPM 4.19)
- Update caddy.sysusers to also create a group</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version &lt;= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1707220801">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1711886400">- Fix --no-check build</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
</package>
<package pkgid="bb01845a444bf04865787330093dd5248bfe3271ebbaee27ff02de6e0ae9682a" name="cadvisor" arch="aarch64">
  <version epoch="0" ver="0.52.1" rel="bp156.3.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671710400">- Initial package (0.46.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718884800">- update description from Holden Fried (bsc#1222192)</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- Update to version 0.49.1:
  * build docker - add --provenance=false flag
  * Remove s390x support
  * Disable libipmctl in build
  * Ugrade base image to 1.22 and alpine 3.18
  * fix type of C.malloc in cgo
  * Bump golang.org/x/net
  * Bump grpc
  * Update docker
  * Bump runc to v1.1.12
  * Bump to bullseye
  * Bump golang to 1.22
  * Remove section about canary image
  * Add note about WebUI auth
  * Remove mentions of accelerator from the docs
  * reduce_logs_for_kubelet_use_crio
  * upgrade actions/checkout and actions/setup-go and actions/upload-artifact
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /cmd
  * add cadvisor and crio upstream changes
  * Avoid using container/podman in manager.go
  * container: skip checking for files in non-existent directories.
  * Adjust the log level of Initialize Plugins
  * add ignored device
  * fix: variable naming
  * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /cmd
  * manager: require higher verbosity level for container info misses
  * Information should be logged on increased verbosity only
  * Running do mod tidy
  * Running go mod tidy
  * Running go mod tidy
  * container/libcontainer: Improve limits file parsing perf
  * container/libcontainer: Add limit parsing benchmark
  * build(deps): bump github.com/cyphar/filepath-securejoin in /cmd
  * build(deps): bump github.com/cyphar/filepath-securejoin
  * Set verbosity after flag definition
  * fix: error message typo
  * vendor: bump runc to 1.1.9
  * Switch to use busybox from registry.k8s.io
  * Bump golang ci lint to v1.54.1
  * Bump github.com/docker/docker in /cmd
  * Bump github.com/docker/docker
  * Bump github.com/docker/distribution in /cmd
  * Bump github.com/docker/distribution
  * Update genproto dependency to isolated submodule
  * remove the check for the existence of NFS files, which will cause unnecessary requests.
  * reduce inotify watch
  * fix performance degradation of NFS
  * fix: fix type issue
  * fix: fix cgo memory leak
  * ft: export memory kernel usage
  * sysinfo: Ignore "hidden" sysfs device entries
  * Increasing required verbosity level
  * Patch to fix issue 2341
  * podman support: Enable Podman support.
  * podman support: Create Podman handler.
  * podman support: Changes in Docker handler.
  * unit test: machine_swap_bytes
  * Add documentation for machine_swap_bytes metric
  * Add a machine_swap_bytes metric
  * fix: add space trimming for label allowlist
  * Upgrade to blang/semver/v4 v4.0.0
  * docs(deploy/k8s): remote build for kustomize
  * Update dependencies
  * Change filepaths to detect online CPUs
  * Update actions/checkout to v3
  * Fix flags typo
  * Updating location of kubernetes/pause image
  * Using t.TempDir() in tests
  * Unit test: MachineInfo Clone() method
  * Bugfix: MachineInfo Clone() - clone SwapCapacity
  * Optimize network metrics collection
  * Removing calls to deprecates io/ioutil package
  * Updating minimum Go version to 1.19
  * Request the pid of another container if current pid is not longer valid
  * Restructure
  * Add CRI-O client timeout setting
  * Set containerd grpc.MaxCallRecvMsgSize to 16MB
  * Fix asset build
  * feat(logging): add verbosity to non-NUMA node warning
  * add nerdctl to ignoredDevices
  * nvm: Change the "no NVM devices" log.
  * nvm: Fix typo.
  * Fix CVE-2022-27664 (#3248)
  * resctrl: Reduce size and mode files check (#3264)
  * readme: Update Creatone contributor info. (#3265)
  * Fix comment to refer to correct client
  * build: bump golang to 1.20
  * ci: Update golang ci-lint to v1.51.2
  * build: Update shebang to python3
  * Revert "dockerfile: Fix typo in go build tags."
  * Decreasing verbosity level for "Cannot read vendor id correctly, set empty"
  * dockerfile: Fix typo in go build tags.
  * deps: Move from cloud.google.com/go/compute -&gt; cloud.google.com/go
  * use memory.min for reservation memory instead of high
  * Mark GOPATH as git safe.directory to fix CI build
  * switch to gomodule/redigo from garyburd/redigo
  * update go.mod/sum both in root and cmd/
  * Drop accelerator metrics and nvidia integration
  * Add s390x support for docker image
  * typo in MachineInfo spec for SwapCapacity
  * add support for swap in machine/info</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- update to 0.52.1:
  * Make resctrl optional/pluggable
- update to 0.52.0:
  * bump containerd related deps: api v1.8.0; errdefs v1.0.0;
    ttrpc v1.2.6
  * chore: Update Prometheus libraries
  * ci: golangci-lint bump, fixes, and cleanups
  * bump runc to v1.2.4
  * Add Pressure Stall Information Metrics
  * Switch to opencontainers/cgroups repository (includes update
    from golang 1.22 to 1.24)
  * Bump to newer opencontainers/image-spec @ v1.1.1
- update to 0.49.2:
  * Cp fix test
  * Revert "reduce_logs_for_kubelet_use_crio"
- add CVE-2025-22868.patch (CVE-2025-22868, bsc#1239291)</changelog>
</package>
<package pkgid="1208ede3b4430c89174cf3e7c8288282ea78e2f76f2d95b3377837f43c4c035e" name="cadvisor" arch="i586">
  <version epoch="0" ver="0.52.1" rel="bp156.3.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671710400">- Initial package (0.46.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718884800">- update description from Holden Fried (bsc#1222192)</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- Update to version 0.49.1:
  * build docker - add --provenance=false flag
  * Remove s390x support
  * Disable libipmctl in build
  * Ugrade base image to 1.22 and alpine 3.18
  * fix type of C.malloc in cgo
  * Bump golang.org/x/net
  * Bump grpc
  * Update docker
  * Bump runc to v1.1.12
  * Bump to bullseye
  * Bump golang to 1.22
  * Remove section about canary image
  * Add note about WebUI auth
  * Remove mentions of accelerator from the docs
  * reduce_logs_for_kubelet_use_crio
  * upgrade actions/checkout and actions/setup-go and actions/upload-artifact
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /cmd
  * add cadvisor and crio upstream changes
  * Avoid using container/podman in manager.go
  * container: skip checking for files in non-existent directories.
  * Adjust the log level of Initialize Plugins
  * add ignored device
  * fix: variable naming
  * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /cmd
  * manager: require higher verbosity level for container info misses
  * Information should be logged on increased verbosity only
  * Running do mod tidy
  * Running go mod tidy
  * Running go mod tidy
  * container/libcontainer: Improve limits file parsing perf
  * container/libcontainer: Add limit parsing benchmark
  * build(deps): bump github.com/cyphar/filepath-securejoin in /cmd
  * build(deps): bump github.com/cyphar/filepath-securejoin
  * Set verbosity after flag definition
  * fix: error message typo
  * vendor: bump runc to 1.1.9
  * Switch to use busybox from registry.k8s.io
  * Bump golang ci lint to v1.54.1
  * Bump github.com/docker/docker in /cmd
  * Bump github.com/docker/docker
  * Bump github.com/docker/distribution in /cmd
  * Bump github.com/docker/distribution
  * Update genproto dependency to isolated submodule
  * remove the check for the existence of NFS files, which will cause unnecessary requests.
  * reduce inotify watch
  * fix performance degradation of NFS
  * fix: fix type issue
  * fix: fix cgo memory leak
  * ft: export memory kernel usage
  * sysinfo: Ignore "hidden" sysfs device entries
  * Increasing required verbosity level
  * Patch to fix issue 2341
  * podman support: Enable Podman support.
  * podman support: Create Podman handler.
  * podman support: Changes in Docker handler.
  * unit test: machine_swap_bytes
  * Add documentation for machine_swap_bytes metric
  * Add a machine_swap_bytes metric
  * fix: add space trimming for label allowlist
  * Upgrade to blang/semver/v4 v4.0.0
  * docs(deploy/k8s): remote build for kustomize
  * Update dependencies
  * Change filepaths to detect online CPUs
  * Update actions/checkout to v3
  * Fix flags typo
  * Updating location of kubernetes/pause image
  * Using t.TempDir() in tests
  * Unit test: MachineInfo Clone() method
  * Bugfix: MachineInfo Clone() - clone SwapCapacity
  * Optimize network metrics collection
  * Removing calls to deprecates io/ioutil package
  * Updating minimum Go version to 1.19
  * Request the pid of another container if current pid is not longer valid
  * Restructure
  * Add CRI-O client timeout setting
  * Set containerd grpc.MaxCallRecvMsgSize to 16MB
  * Fix asset build
  * feat(logging): add verbosity to non-NUMA node warning
  * add nerdctl to ignoredDevices
  * nvm: Change the "no NVM devices" log.
  * nvm: Fix typo.
  * Fix CVE-2022-27664 (#3248)
  * resctrl: Reduce size and mode files check (#3264)
  * readme: Update Creatone contributor info. (#3265)
  * Fix comment to refer to correct client
  * build: bump golang to 1.20
  * ci: Update golang ci-lint to v1.51.2
  * build: Update shebang to python3
  * Revert "dockerfile: Fix typo in go build tags."
  * Decreasing verbosity level for "Cannot read vendor id correctly, set empty"
  * dockerfile: Fix typo in go build tags.
  * deps: Move from cloud.google.com/go/compute -&gt; cloud.google.com/go
  * use memory.min for reservation memory instead of high
  * Mark GOPATH as git safe.directory to fix CI build
  * switch to gomodule/redigo from garyburd/redigo
  * update go.mod/sum both in root and cmd/
  * Drop accelerator metrics and nvidia integration
  * Add s390x support for docker image
  * typo in MachineInfo spec for SwapCapacity
  * add support for swap in machine/info</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- update to 0.52.1:
  * Make resctrl optional/pluggable
- update to 0.52.0:
  * bump containerd related deps: api v1.8.0; errdefs v1.0.0;
    ttrpc v1.2.6
  * chore: Update Prometheus libraries
  * ci: golangci-lint bump, fixes, and cleanups
  * bump runc to v1.2.4
  * Add Pressure Stall Information Metrics
  * Switch to opencontainers/cgroups repository (includes update
    from golang 1.22 to 1.24)
  * Bump to newer opencontainers/image-spec @ v1.1.1
- update to 0.49.2:
  * Cp fix test
  * Revert "reduce_logs_for_kubelet_use_crio"
- add CVE-2025-22868.patch (CVE-2025-22868, bsc#1239291)</changelog>
</package>
<package pkgid="b431049dd7f4410e444390d1cd46d48c17af5b886055776cd8a9e72aeb44877e" name="cadvisor" arch="ppc64le">
  <version epoch="0" ver="0.52.1" rel="bp156.3.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671710400">- Initial package (0.46.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718884800">- update description from Holden Fried (bsc#1222192)</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- Update to version 0.49.1:
  * build docker - add --provenance=false flag
  * Remove s390x support
  * Disable libipmctl in build
  * Ugrade base image to 1.22 and alpine 3.18
  * fix type of C.malloc in cgo
  * Bump golang.org/x/net
  * Bump grpc
  * Update docker
  * Bump runc to v1.1.12
  * Bump to bullseye
  * Bump golang to 1.22
  * Remove section about canary image
  * Add note about WebUI auth
  * Remove mentions of accelerator from the docs
  * reduce_logs_for_kubelet_use_crio
  * upgrade actions/checkout and actions/setup-go and actions/upload-artifact
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /cmd
  * add cadvisor and crio upstream changes
  * Avoid using container/podman in manager.go
  * container: skip checking for files in non-existent directories.
  * Adjust the log level of Initialize Plugins
  * add ignored device
  * fix: variable naming
  * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /cmd
  * manager: require higher verbosity level for container info misses
  * Information should be logged on increased verbosity only
  * Running do mod tidy
  * Running go mod tidy
  * Running go mod tidy
  * container/libcontainer: Improve limits file parsing perf
  * container/libcontainer: Add limit parsing benchmark
  * build(deps): bump github.com/cyphar/filepath-securejoin in /cmd
  * build(deps): bump github.com/cyphar/filepath-securejoin
  * Set verbosity after flag definition
  * fix: error message typo
  * vendor: bump runc to 1.1.9
  * Switch to use busybox from registry.k8s.io
  * Bump golang ci lint to v1.54.1
  * Bump github.com/docker/docker in /cmd
  * Bump github.com/docker/docker
  * Bump github.com/docker/distribution in /cmd
  * Bump github.com/docker/distribution
  * Update genproto dependency to isolated submodule
  * remove the check for the existence of NFS files, which will cause unnecessary requests.
  * reduce inotify watch
  * fix performance degradation of NFS
  * fix: fix type issue
  * fix: fix cgo memory leak
  * ft: export memory kernel usage
  * sysinfo: Ignore "hidden" sysfs device entries
  * Increasing required verbosity level
  * Patch to fix issue 2341
  * podman support: Enable Podman support.
  * podman support: Create Podman handler.
  * podman support: Changes in Docker handler.
  * unit test: machine_swap_bytes
  * Add documentation for machine_swap_bytes metric
  * Add a machine_swap_bytes metric
  * fix: add space trimming for label allowlist
  * Upgrade to blang/semver/v4 v4.0.0
  * docs(deploy/k8s): remote build for kustomize
  * Update dependencies
  * Change filepaths to detect online CPUs
  * Update actions/checkout to v3
  * Fix flags typo
  * Updating location of kubernetes/pause image
  * Using t.TempDir() in tests
  * Unit test: MachineInfo Clone() method
  * Bugfix: MachineInfo Clone() - clone SwapCapacity
  * Optimize network metrics collection
  * Removing calls to deprecates io/ioutil package
  * Updating minimum Go version to 1.19
  * Request the pid of another container if current pid is not longer valid
  * Restructure
  * Add CRI-O client timeout setting
  * Set containerd grpc.MaxCallRecvMsgSize to 16MB
  * Fix asset build
  * feat(logging): add verbosity to non-NUMA node warning
  * add nerdctl to ignoredDevices
  * nvm: Change the "no NVM devices" log.
  * nvm: Fix typo.
  * Fix CVE-2022-27664 (#3248)
  * resctrl: Reduce size and mode files check (#3264)
  * readme: Update Creatone contributor info. (#3265)
  * Fix comment to refer to correct client
  * build: bump golang to 1.20
  * ci: Update golang ci-lint to v1.51.2
  * build: Update shebang to python3
  * Revert "dockerfile: Fix typo in go build tags."
  * Decreasing verbosity level for "Cannot read vendor id correctly, set empty"
  * dockerfile: Fix typo in go build tags.
  * deps: Move from cloud.google.com/go/compute -&gt; cloud.google.com/go
  * use memory.min for reservation memory instead of high
  * Mark GOPATH as git safe.directory to fix CI build
  * switch to gomodule/redigo from garyburd/redigo
  * update go.mod/sum both in root and cmd/
  * Drop accelerator metrics and nvidia integration
  * Add s390x support for docker image
  * typo in MachineInfo spec for SwapCapacity
  * add support for swap in machine/info</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- update to 0.52.1:
  * Make resctrl optional/pluggable
- update to 0.52.0:
  * bump containerd related deps: api v1.8.0; errdefs v1.0.0;
    ttrpc v1.2.6
  * chore: Update Prometheus libraries
  * ci: golangci-lint bump, fixes, and cleanups
  * bump runc to v1.2.4
  * Add Pressure Stall Information Metrics
  * Switch to opencontainers/cgroups repository (includes update
    from golang 1.22 to 1.24)
  * Bump to newer opencontainers/image-spec @ v1.1.1
- update to 0.49.2:
  * Cp fix test
  * Revert "reduce_logs_for_kubelet_use_crio"
- add CVE-2025-22868.patch (CVE-2025-22868, bsc#1239291)</changelog>
</package>
<package pkgid="1ed2cf07ed06866ea1960edacae70f874d5a10ec9fcf7150140d27c972a1ead1" name="cadvisor" arch="s390x">
  <version epoch="0" ver="0.52.1" rel="bp156.3.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671710400">- Initial package (0.46.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718884800">- update description from Holden Fried (bsc#1222192)</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- Update to version 0.49.1:
  * build docker - add --provenance=false flag
  * Remove s390x support
  * Disable libipmctl in build
  * Ugrade base image to 1.22 and alpine 3.18
  * fix type of C.malloc in cgo
  * Bump golang.org/x/net
  * Bump grpc
  * Update docker
  * Bump runc to v1.1.12
  * Bump to bullseye
  * Bump golang to 1.22
  * Remove section about canary image
  * Add note about WebUI auth
  * Remove mentions of accelerator from the docs
  * reduce_logs_for_kubelet_use_crio
  * upgrade actions/checkout and actions/setup-go and actions/upload-artifact
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /cmd
  * add cadvisor and crio upstream changes
  * Avoid using container/podman in manager.go
  * container: skip checking for files in non-existent directories.
  * Adjust the log level of Initialize Plugins
  * add ignored device
  * fix: variable naming
  * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /cmd
  * manager: require higher verbosity level for container info misses
  * Information should be logged on increased verbosity only
  * Running do mod tidy
  * Running go mod tidy
  * Running go mod tidy
  * container/libcontainer: Improve limits file parsing perf
  * container/libcontainer: Add limit parsing benchmark
  * build(deps): bump github.com/cyphar/filepath-securejoin in /cmd
  * build(deps): bump github.com/cyphar/filepath-securejoin
  * Set verbosity after flag definition
  * fix: error message typo
  * vendor: bump runc to 1.1.9
  * Switch to use busybox from registry.k8s.io
  * Bump golang ci lint to v1.54.1
  * Bump github.com/docker/docker in /cmd
  * Bump github.com/docker/docker
  * Bump github.com/docker/distribution in /cmd
  * Bump github.com/docker/distribution
  * Update genproto dependency to isolated submodule
  * remove the check for the existence of NFS files, which will cause unnecessary requests.
  * reduce inotify watch
  * fix performance degradation of NFS
  * fix: fix type issue
  * fix: fix cgo memory leak
  * ft: export memory kernel usage
  * sysinfo: Ignore "hidden" sysfs device entries
  * Increasing required verbosity level
  * Patch to fix issue 2341
  * podman support: Enable Podman support.
  * podman support: Create Podman handler.
  * podman support: Changes in Docker handler.
  * unit test: machine_swap_bytes
  * Add documentation for machine_swap_bytes metric
  * Add a machine_swap_bytes metric
  * fix: add space trimming for label allowlist
  * Upgrade to blang/semver/v4 v4.0.0
  * docs(deploy/k8s): remote build for kustomize
  * Update dependencies
  * Change filepaths to detect online CPUs
  * Update actions/checkout to v3
  * Fix flags typo
  * Updating location of kubernetes/pause image
  * Using t.TempDir() in tests
  * Unit test: MachineInfo Clone() method
  * Bugfix: MachineInfo Clone() - clone SwapCapacity
  * Optimize network metrics collection
  * Removing calls to deprecates io/ioutil package
  * Updating minimum Go version to 1.19
  * Request the pid of another container if current pid is not longer valid
  * Restructure
  * Add CRI-O client timeout setting
  * Set containerd grpc.MaxCallRecvMsgSize to 16MB
  * Fix asset build
  * feat(logging): add verbosity to non-NUMA node warning
  * add nerdctl to ignoredDevices
  * nvm: Change the "no NVM devices" log.
  * nvm: Fix typo.
  * Fix CVE-2022-27664 (#3248)
  * resctrl: Reduce size and mode files check (#3264)
  * readme: Update Creatone contributor info. (#3265)
  * Fix comment to refer to correct client
  * build: bump golang to 1.20
  * ci: Update golang ci-lint to v1.51.2
  * build: Update shebang to python3
  * Revert "dockerfile: Fix typo in go build tags."
  * Decreasing verbosity level for "Cannot read vendor id correctly, set empty"
  * dockerfile: Fix typo in go build tags.
  * deps: Move from cloud.google.com/go/compute -&gt; cloud.google.com/go
  * use memory.min for reservation memory instead of high
  * Mark GOPATH as git safe.directory to fix CI build
  * switch to gomodule/redigo from garyburd/redigo
  * update go.mod/sum both in root and cmd/
  * Drop accelerator metrics and nvidia integration
  * Add s390x support for docker image
  * typo in MachineInfo spec for SwapCapacity
  * add support for swap in machine/info</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- update to 0.52.1:
  * Make resctrl optional/pluggable
- update to 0.52.0:
  * bump containerd related deps: api v1.8.0; errdefs v1.0.0;
    ttrpc v1.2.6
  * chore: Update Prometheus libraries
  * ci: golangci-lint bump, fixes, and cleanups
  * bump runc to v1.2.4
  * Add Pressure Stall Information Metrics
  * Switch to opencontainers/cgroups repository (includes update
    from golang 1.22 to 1.24)
  * Bump to newer opencontainers/image-spec @ v1.1.1
- update to 0.49.2:
  * Cp fix test
  * Revert "reduce_logs_for_kubelet_use_crio"
- add CVE-2025-22868.patch (CVE-2025-22868, bsc#1239291)</changelog>
</package>
<package pkgid="b72a2408332d0c2f50915d0fde2b2e47bb7a291b6f15a3b54cdfa5b879493452" name="cadvisor" arch="src">
  <version epoch="0" ver="0.52.1" rel="bp156.3.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671710400">- Initial package (0.46.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718884800">- update description from Holden Fried (bsc#1222192)</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- Update to version 0.49.1:
  * build docker - add --provenance=false flag
  * Remove s390x support
  * Disable libipmctl in build
  * Ugrade base image to 1.22 and alpine 3.18
  * fix type of C.malloc in cgo
  * Bump golang.org/x/net
  * Bump grpc
  * Update docker
  * Bump runc to v1.1.12
  * Bump to bullseye
  * Bump golang to 1.22
  * Remove section about canary image
  * Add note about WebUI auth
  * Remove mentions of accelerator from the docs
  * reduce_logs_for_kubelet_use_crio
  * upgrade actions/checkout and actions/setup-go and actions/upload-artifact
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /cmd
  * add cadvisor and crio upstream changes
  * Avoid using container/podman in manager.go
  * container: skip checking for files in non-existent directories.
  * Adjust the log level of Initialize Plugins
  * add ignored device
  * fix: variable naming
  * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /cmd
  * manager: require higher verbosity level for container info misses
  * Information should be logged on increased verbosity only
  * Running do mod tidy
  * Running go mod tidy
  * Running go mod tidy
  * container/libcontainer: Improve limits file parsing perf
  * container/libcontainer: Add limit parsing benchmark
  * build(deps): bump github.com/cyphar/filepath-securejoin in /cmd
  * build(deps): bump github.com/cyphar/filepath-securejoin
  * Set verbosity after flag definition
  * fix: error message typo
  * vendor: bump runc to 1.1.9
  * Switch to use busybox from registry.k8s.io
  * Bump golang ci lint to v1.54.1
  * Bump github.com/docker/docker in /cmd
  * Bump github.com/docker/docker
  * Bump github.com/docker/distribution in /cmd
  * Bump github.com/docker/distribution
  * Update genproto dependency to isolated submodule
  * remove the check for the existence of NFS files, which will cause unnecessary requests.
  * reduce inotify watch
  * fix performance degradation of NFS
  * fix: fix type issue
  * fix: fix cgo memory leak
  * ft: export memory kernel usage
  * sysinfo: Ignore "hidden" sysfs device entries
  * Increasing required verbosity level
  * Patch to fix issue 2341
  * podman support: Enable Podman support.
  * podman support: Create Podman handler.
  * podman support: Changes in Docker handler.
  * unit test: machine_swap_bytes
  * Add documentation for machine_swap_bytes metric
  * Add a machine_swap_bytes metric
  * fix: add space trimming for label allowlist
  * Upgrade to blang/semver/v4 v4.0.0
  * docs(deploy/k8s): remote build for kustomize
  * Update dependencies
  * Change filepaths to detect online CPUs
  * Update actions/checkout to v3
  * Fix flags typo
  * Updating location of kubernetes/pause image
  * Using t.TempDir() in tests
  * Unit test: MachineInfo Clone() method
  * Bugfix: MachineInfo Clone() - clone SwapCapacity
  * Optimize network metrics collection
  * Removing calls to deprecates io/ioutil package
  * Updating minimum Go version to 1.19
  * Request the pid of another container if current pid is not longer valid
  * Restructure
  * Add CRI-O client timeout setting
  * Set containerd grpc.MaxCallRecvMsgSize to 16MB
  * Fix asset build
  * feat(logging): add verbosity to non-NUMA node warning
  * add nerdctl to ignoredDevices
  * nvm: Change the "no NVM devices" log.
  * nvm: Fix typo.
  * Fix CVE-2022-27664 (#3248)
  * resctrl: Reduce size and mode files check (#3264)
  * readme: Update Creatone contributor info. (#3265)
  * Fix comment to refer to correct client
  * build: bump golang to 1.20
  * ci: Update golang ci-lint to v1.51.2
  * build: Update shebang to python3
  * Revert "dockerfile: Fix typo in go build tags."
  * Decreasing verbosity level for "Cannot read vendor id correctly, set empty"
  * dockerfile: Fix typo in go build tags.
  * deps: Move from cloud.google.com/go/compute -&gt; cloud.google.com/go
  * use memory.min for reservation memory instead of high
  * Mark GOPATH as git safe.directory to fix CI build
  * switch to gomodule/redigo from garyburd/redigo
  * update go.mod/sum both in root and cmd/
  * Drop accelerator metrics and nvidia integration
  * Add s390x support for docker image
  * typo in MachineInfo spec for SwapCapacity
  * add support for swap in machine/info</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- update to 0.52.1:
  * Make resctrl optional/pluggable
- update to 0.52.0:
  * bump containerd related deps: api v1.8.0; errdefs v1.0.0;
    ttrpc v1.2.6
  * chore: Update Prometheus libraries
  * ci: golangci-lint bump, fixes, and cleanups
  * bump runc to v1.2.4
  * Add Pressure Stall Information Metrics
  * Switch to opencontainers/cgroups repository (includes update
    from golang 1.22 to 1.24)
  * Bump to newer opencontainers/image-spec @ v1.1.1
- update to 0.49.2:
  * Cp fix test
  * Revert "reduce_logs_for_kubelet_use_crio"
- add CVE-2025-22868.patch (CVE-2025-22868, bsc#1239291)</changelog>
</package>
<package pkgid="b8d54fd7243ceb71168a2aa7af536b2ef1c324ab99804a9a0d7553dda63b0b22" name="cadvisor" arch="x86_64">
  <version epoch="0" ver="0.52.1" rel="bp156.3.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671710400">- Initial package (0.46.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718884800">- update description from Holden Fried (bsc#1222192)</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- Update to version 0.49.1:
  * build docker - add --provenance=false flag
  * Remove s390x support
  * Disable libipmctl in build
  * Ugrade base image to 1.22 and alpine 3.18
  * fix type of C.malloc in cgo
  * Bump golang.org/x/net
  * Bump grpc
  * Update docker
  * Bump runc to v1.1.12
  * Bump to bullseye
  * Bump golang to 1.22
  * Remove section about canary image
  * Add note about WebUI auth
  * Remove mentions of accelerator from the docs
  * reduce_logs_for_kubelet_use_crio
  * upgrade actions/checkout and actions/setup-go and actions/upload-artifact
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /cmd
  * add cadvisor and crio upstream changes
  * Avoid using container/podman in manager.go
  * container: skip checking for files in non-existent directories.
  * Adjust the log level of Initialize Plugins
  * add ignored device
  * fix: variable naming
  * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /cmd
  * manager: require higher verbosity level for container info misses
  * Information should be logged on increased verbosity only
  * Running do mod tidy
  * Running go mod tidy
  * Running go mod tidy
  * container/libcontainer: Improve limits file parsing perf
  * container/libcontainer: Add limit parsing benchmark
  * build(deps): bump github.com/cyphar/filepath-securejoin in /cmd
  * build(deps): bump github.com/cyphar/filepath-securejoin
  * Set verbosity after flag definition
  * fix: error message typo
  * vendor: bump runc to 1.1.9
  * Switch to use busybox from registry.k8s.io
  * Bump golang ci lint to v1.54.1
  * Bump github.com/docker/docker in /cmd
  * Bump github.com/docker/docker
  * Bump github.com/docker/distribution in /cmd
  * Bump github.com/docker/distribution
  * Update genproto dependency to isolated submodule
  * remove the check for the existence of NFS files, which will cause unnecessary requests.
  * reduce inotify watch
  * fix performance degradation of NFS
  * fix: fix type issue
  * fix: fix cgo memory leak
  * ft: export memory kernel usage
  * sysinfo: Ignore "hidden" sysfs device entries
  * Increasing required verbosity level
  * Patch to fix issue 2341
  * podman support: Enable Podman support.
  * podman support: Create Podman handler.
  * podman support: Changes in Docker handler.
  * unit test: machine_swap_bytes
  * Add documentation for machine_swap_bytes metric
  * Add a machine_swap_bytes metric
  * fix: add space trimming for label allowlist
  * Upgrade to blang/semver/v4 v4.0.0
  * docs(deploy/k8s): remote build for kustomize
  * Update dependencies
  * Change filepaths to detect online CPUs
  * Update actions/checkout to v3
  * Fix flags typo
  * Updating location of kubernetes/pause image
  * Using t.TempDir() in tests
  * Unit test: MachineInfo Clone() method
  * Bugfix: MachineInfo Clone() - clone SwapCapacity
  * Optimize network metrics collection
  * Removing calls to deprecates io/ioutil package
  * Updating minimum Go version to 1.19
  * Request the pid of another container if current pid is not longer valid
  * Restructure
  * Add CRI-O client timeout setting
  * Set containerd grpc.MaxCallRecvMsgSize to 16MB
  * Fix asset build
  * feat(logging): add verbosity to non-NUMA node warning
  * add nerdctl to ignoredDevices
  * nvm: Change the "no NVM devices" log.
  * nvm: Fix typo.
  * Fix CVE-2022-27664 (#3248)
  * resctrl: Reduce size and mode files check (#3264)
  * readme: Update Creatone contributor info. (#3265)
  * Fix comment to refer to correct client
  * build: bump golang to 1.20
  * ci: Update golang ci-lint to v1.51.2
  * build: Update shebang to python3
  * Revert "dockerfile: Fix typo in go build tags."
  * Decreasing verbosity level for "Cannot read vendor id correctly, set empty"
  * dockerfile: Fix typo in go build tags.
  * deps: Move from cloud.google.com/go/compute -&gt; cloud.google.com/go
  * use memory.min for reservation memory instead of high
  * Mark GOPATH as git safe.directory to fix CI build
  * switch to gomodule/redigo from garyburd/redigo
  * update go.mod/sum both in root and cmd/
  * Drop accelerator metrics and nvidia integration
  * Add s390x support for docker image
  * typo in MachineInfo spec for SwapCapacity
  * add support for swap in machine/info</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- update to 0.52.1:
  * Make resctrl optional/pluggable
- update to 0.52.0:
  * bump containerd related deps: api v1.8.0; errdefs v1.0.0;
    ttrpc v1.2.6
  * chore: Update Prometheus libraries
  * ci: golangci-lint bump, fixes, and cleanups
  * bump runc to v1.2.4
  * Add Pressure Stall Information Metrics
  * Switch to opencontainers/cgroups repository (includes update
    from golang 1.22 to 1.24)
  * Bump to newer opencontainers/image-spec @ v1.1.1
- update to 0.49.2:
  * Cp fix test
  * Revert "reduce_logs_for_kubelet_use_crio"
- add CVE-2025-22868.patch (CVE-2025-22868, bsc#1239291)</changelog>
</package>
<package pkgid="a201585b635dd8addd08bb362e83a4ee38da71b80c98402b44684545bbe859b5" name="catfish" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="bp156.2.3.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1567857600">- Install appdata to metainfo (bxo#15752)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568376000">- Update to version 1.4.10
  * New Features:
  - Preferences Dialog:
  * Window layout (titlebar vs. headerbar)
  * Display options (hidden files and sidebar)
  * Custom exclude directories
  - Option to close Catfish after opening a file (bxo#14888)
  * fix path exclusions (deb#926850)
  * Improved Application Menu:
  - Better use of space, padding, and margins
  - Clearer purpose labels
  - Keyboard accelerator for the sidebar (F9) is now displayed
  * General:
  - Better use of alt-accelerators
  - Improved installation instructions (bxo#15105)
  - Reduced warnings displayed in the terminal
  - Simplified Python 2/3 compatibility code
  - Standardized icon sizes, no more wrongly-sized icons in the results
  - Various code quality fixes (pylint, flake)
  * Search (Walk Method):
  - Enable traversing symbolic links, processing real paths only once
  - Add search priority, with each level processed alphabetically:
    1. XDG paths (Desktop, Documents, etc)
    2. Visible paths
    3. Hidden paths
  * Translation Updates</changelog>
  <changelog author="ro@suse.de" date="1571832000">- fix build-requires for factory/tumbleweed
  rsvg-convert tool is now in rsvg-convert package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1576929600">- Update to version 1.4.11
  - Radio indicators are now displayed on the layout options
  - Fix crashes when GdkDisplay or GdkScreen calls return None
    (lp#1822914)
  - Fix configuration of preferred window layout (bxo#16085)
  - Fix finding files in the target directory (bxo#15985, bxo#16233)
  - Fix symbolic link looping (bxo#16272)
  - Fix home (~) expansion for the start path
  - Fix asv-summary-has-dot-suffix
    (https://appstream.debian.org/sid/main/issues/catfish.html)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1577966400">- Update to version 1.4.12
  * Wayland and GNOME Shell support (bxo#16293)
  * All dialogs now use client-side decorations and are modal
  * Fixed typo "Catifish"
  * Temporary files are now excluded from releases
  * Releases now generate .bz2 files and display contents and checksums
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1579089600">- Update to version 1.4.13
  * Optimized svg and png assets
  * Fix missing results from symbolic links (bxo#16318)
  * Do not load catfishconfig during setup as it breaks Debian
    packaging
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1581681600">- Fixed dependency conditional for Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1603800000">- Update to version 4.15.0
  * Added Ctrl+H shortcut to show/hide hidden files
    (gxo#apps/catfish#16)
  * Added "Today" and "Month" filters to the sidebar
    (gxo#apps/catfish#23)
  * Fulltext searches now include more text files
    (gxo#apps/catfish#7)
  * New app icon, now using an rDNS icon name (org.xfce.catfish)
  * Migrated ChangeLog to NEWS to better match Xfce projects
  * Renamed README to README.md and updated to match Xfce projects
  * Updated INSTALL to reference python3-specific packages
    (gxo#apps/catfish#36)
  * Various in-app icon updates (gxo#apps/catfish#15,
    gxo#apps/catfish#17, gxo#apps/catfish#26)
  * Added additional padding to Other and Custom gear icons
    (gxo#apps/catfish#20)
  * Check if zeitgeist daemon is running at startup
    (gxo#apps/catfish#34)
  * Correctly position custom filter popups above gear icon
    (gxo#apps/catfish#18)
  * Default to the current date in the custom date filters
    (gxo#apps/catfish#24)
  * Fix 'list' object has no attribute 'lower' (gxo#apps/catfish#9)
  * Fix fulltext freeze with special files (gxo#apps/catfish#32)
  * Fix python crash when some extension scheme is used
    (gxo#apps/catfish#35)
  * Fix statusbar moving on mouseover
  * Move custom file extension hint to tooltip (gxo#apps/catfish#25)
  * Sidebar entries no longer move when losing focus
    (gxo#apps/catfish#22)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1605700800">- add 0001-Force-disable-Zeitgeist-support.patch
  * avoid automatically generated typelib(Zeitgeist) dependency
    we can not provide (gxo#apps/catfish#39)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610107200">- Update to version 4.16.0
  * Fulltext now searches files with UTF-7, UTF-8, UTF-16 BE/LE,
    and UTF-32 BE/LE encodings
  * Replace Gtk/Gdk/GLib deprecated code (gxo#apps/catfish#6)
  * Use "match all" method for fulltext search (gxo#apps/catfish#30)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1627732800">- Update to version 4.16.2
  * Use standard icon name application-x-executable-symbolic
    instead of applications-other-symbolic
  * Fix install with rpm/pkgbuild/pip
    (gxo#apps/catfish#58, gxo#apps/catfish#59)
  * Added keyboard hotkeys for search entry, new open dialog
  * Fix Thunar "Show in FM" bug, better FM support
    (gxo#apps/catfish#43)
  * Stops freezes with special files when zip search enabled
  * Better and safer refreshing of selected results
    (gxo#apps/catfish#48)
  * Enable sidebar by default (gxo#apps/catfish#45)
  * Enable installation using pip (local source)
    (gxo#apps/catfish!20)
  * Add support for searching compressed files (gxo#apps/catfish#29)
  * Add persistent settings for searching file contents
    (gxo#apps/catfish#10)
  * Add persistent settings for thumbnail view (gxo#apps/catfish#14)
  * Add message and troff mimetypes to fulltext search
    (gxo#apps/catfish!22)
  * Add PDF support to fulltext search (gxo#apps/catfish#37)
  * Fix loading in Wayland (gxo#apps/catfish#50)
  * Stop current search when new one starts (gxo#apps/catfish!28)
  * Use local MIME database info (gxo#apps/catfish!21)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1629806400">- Fixed package sources that disappeared</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1632657600">- Update to version 4.16.3
  * Update "Searching..." Cursor
  * Sidebar background color bugfix
  * Fixes for syntax, fulltext zip search, special files
    (gxo#apps/catfish#62)
  * Adds symbolic link icons, better icon updating
    (gxo#apps/catfish#46)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1658059200">- Update to version 4.16.4
  * Add "Open with" right click item and dialog
    (gxo#apps/catfish#12)
  * Add a command-line option for setting default sort method
  * Add Ctrl+A accelerator for the treeview (gxo#apps/catfish#64)
  * Add option to show file size in binary or decimal
  * Cosmetic changes for search entry and delete dialog
  * Fix Ctrl+H not always toggling hidden files
  * Fix DE detection when launched from Electron apps
  * Fix exo file manager lookup for non-existent keys
    (gxo#apps/catfish#64)
  * Fix file manager lookup outside of Xfce
  * Fix GNOME DE detection in Ubuntu
  * Improve application menu appearance
  * Improve default width for the sidebar
  * Prepend the project root directory to sys.path
  * Support running without Xfconf (no preference saving)
  * Switch to using the super() method
  * Use correct executable for elementary Files
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1691323200">- Update to version 4.18.0
  * Filters: Add Archives, Other, update Apps
  * Use Gio to open files, fix "no default app" issue
  * Add symlink emblem to thumbnails in thumbnail mode
  * config: Prefer plocate over mlocate if available
  * window: Avoid IndexError on right click when selection is empty
  * Create shared filetype lists for searching and filtering
  * Ensure site-packages directory is prepended to sys.path
  * Fix double border between sidebar and results area
  * window: Fix and refactor new_column()
  * window: Fix markup warnings in thumbnail view
  * Fix GtkBuilder warnings
  * Revert "Suppress the various GTK warnings GtkBuilder outputs"
  * Fix crash and translations when install prefix != /usr
  * Update `.gitignore`
  * Remove generated file po/catfish.pot
  * Performance improvements (fix #79)
  * Translation Updates
- Refresh 0001-Force-disable-Zeitgeist-support.patch
- Remove _service file</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1700049600">- Use %%{python_module ...} to specify required Python modules to
  build this package.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1706961600">- Skip python312 for now until all required Python modules have been
  built.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220800">- Don't use %%{python_module ...} as we only build for the default
  Python interpreter. python312 still needs to be skipped due to
  python3-distutils!</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220801">- As long as a new Python version does not ship a broken
  python3-distutils, like python311 did in its early days, there is
  no need to deal with or skip a specific python version at all.
  Disable all %%{python_module ...} and skip_python... stuff again.</changelog>
</package>
<package pkgid="85c989e0102488dd675e096bf660040057a745aead643c4e2c5f64315dad5c1a" name="catfish" arch="src">
  <version epoch="0" ver="4.18.0" rel="bp156.2.3.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1567857600">- Install appdata to metainfo (bxo#15752)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568376000">- Update to version 1.4.10
  * New Features:
  - Preferences Dialog:
  * Window layout (titlebar vs. headerbar)
  * Display options (hidden files and sidebar)
  * Custom exclude directories
  - Option to close Catfish after opening a file (bxo#14888)
  * fix path exclusions (deb#926850)
  * Improved Application Menu:
  - Better use of space, padding, and margins
  - Clearer purpose labels
  - Keyboard accelerator for the sidebar (F9) is now displayed
  * General:
  - Better use of alt-accelerators
  - Improved installation instructions (bxo#15105)
  - Reduced warnings displayed in the terminal
  - Simplified Python 2/3 compatibility code
  - Standardized icon sizes, no more wrongly-sized icons in the results
  - Various code quality fixes (pylint, flake)
  * Search (Walk Method):
  - Enable traversing symbolic links, processing real paths only once
  - Add search priority, with each level processed alphabetically:
    1. XDG paths (Desktop, Documents, etc)
    2. Visible paths
    3. Hidden paths
  * Translation Updates</changelog>
  <changelog author="ro@suse.de" date="1571832000">- fix build-requires for factory/tumbleweed
  rsvg-convert tool is now in rsvg-convert package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1576929600">- Update to version 1.4.11
  - Radio indicators are now displayed on the layout options
  - Fix crashes when GdkDisplay or GdkScreen calls return None
    (lp#1822914)
  - Fix configuration of preferred window layout (bxo#16085)
  - Fix finding files in the target directory (bxo#15985, bxo#16233)
  - Fix symbolic link looping (bxo#16272)
  - Fix home (~) expansion for the start path
  - Fix asv-summary-has-dot-suffix
    (https://appstream.debian.org/sid/main/issues/catfish.html)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1577966400">- Update to version 1.4.12
  * Wayland and GNOME Shell support (bxo#16293)
  * All dialogs now use client-side decorations and are modal
  * Fixed typo "Catifish"
  * Temporary files are now excluded from releases
  * Releases now generate .bz2 files and display contents and checksums
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1579089600">- Update to version 1.4.13
  * Optimized svg and png assets
  * Fix missing results from symbolic links (bxo#16318)
  * Do not load catfishconfig during setup as it breaks Debian
    packaging
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1581681600">- Fixed dependency conditional for Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1603800000">- Update to version 4.15.0
  * Added Ctrl+H shortcut to show/hide hidden files
    (gxo#apps/catfish#16)
  * Added "Today" and "Month" filters to the sidebar
    (gxo#apps/catfish#23)
  * Fulltext searches now include more text files
    (gxo#apps/catfish#7)
  * New app icon, now using an rDNS icon name (org.xfce.catfish)
  * Migrated ChangeLog to NEWS to better match Xfce projects
  * Renamed README to README.md and updated to match Xfce projects
  * Updated INSTALL to reference python3-specific packages
    (gxo#apps/catfish#36)
  * Various in-app icon updates (gxo#apps/catfish#15,
    gxo#apps/catfish#17, gxo#apps/catfish#26)
  * Added additional padding to Other and Custom gear icons
    (gxo#apps/catfish#20)
  * Check if zeitgeist daemon is running at startup
    (gxo#apps/catfish#34)
  * Correctly position custom filter popups above gear icon
    (gxo#apps/catfish#18)
  * Default to the current date in the custom date filters
    (gxo#apps/catfish#24)
  * Fix 'list' object has no attribute 'lower' (gxo#apps/catfish#9)
  * Fix fulltext freeze with special files (gxo#apps/catfish#32)
  * Fix python crash when some extension scheme is used
    (gxo#apps/catfish#35)
  * Fix statusbar moving on mouseover
  * Move custom file extension hint to tooltip (gxo#apps/catfish#25)
  * Sidebar entries no longer move when losing focus
    (gxo#apps/catfish#22)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1605700800">- add 0001-Force-disable-Zeitgeist-support.patch
  * avoid automatically generated typelib(Zeitgeist) dependency
    we can not provide (gxo#apps/catfish#39)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610107200">- Update to version 4.16.0
  * Fulltext now searches files with UTF-7, UTF-8, UTF-16 BE/LE,
    and UTF-32 BE/LE encodings
  * Replace Gtk/Gdk/GLib deprecated code (gxo#apps/catfish#6)
  * Use "match all" method for fulltext search (gxo#apps/catfish#30)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1627732800">- Update to version 4.16.2
  * Use standard icon name application-x-executable-symbolic
    instead of applications-other-symbolic
  * Fix install with rpm/pkgbuild/pip
    (gxo#apps/catfish#58, gxo#apps/catfish#59)
  * Added keyboard hotkeys for search entry, new open dialog
  * Fix Thunar "Show in FM" bug, better FM support
    (gxo#apps/catfish#43)
  * Stops freezes with special files when zip search enabled
  * Better and safer refreshing of selected results
    (gxo#apps/catfish#48)
  * Enable sidebar by default (gxo#apps/catfish#45)
  * Enable installation using pip (local source)
    (gxo#apps/catfish!20)
  * Add support for searching compressed files (gxo#apps/catfish#29)
  * Add persistent settings for searching file contents
    (gxo#apps/catfish#10)
  * Add persistent settings for thumbnail view (gxo#apps/catfish#14)
  * Add message and troff mimetypes to fulltext search
    (gxo#apps/catfish!22)
  * Add PDF support to fulltext search (gxo#apps/catfish#37)
  * Fix loading in Wayland (gxo#apps/catfish#50)
  * Stop current search when new one starts (gxo#apps/catfish!28)
  * Use local MIME database info (gxo#apps/catfish!21)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1629806400">- Fixed package sources that disappeared</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1632657600">- Update to version 4.16.3
  * Update "Searching..." Cursor
  * Sidebar background color bugfix
  * Fixes for syntax, fulltext zip search, special files
    (gxo#apps/catfish#62)
  * Adds symbolic link icons, better icon updating
    (gxo#apps/catfish#46)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1658059200">- Update to version 4.16.4
  * Add "Open with" right click item and dialog
    (gxo#apps/catfish#12)
  * Add a command-line option for setting default sort method
  * Add Ctrl+A accelerator for the treeview (gxo#apps/catfish#64)
  * Add option to show file size in binary or decimal
  * Cosmetic changes for search entry and delete dialog
  * Fix Ctrl+H not always toggling hidden files
  * Fix DE detection when launched from Electron apps
  * Fix exo file manager lookup for non-existent keys
    (gxo#apps/catfish#64)
  * Fix file manager lookup outside of Xfce
  * Fix GNOME DE detection in Ubuntu
  * Improve application menu appearance
  * Improve default width for the sidebar
  * Prepend the project root directory to sys.path
  * Support running without Xfconf (no preference saving)
  * Switch to using the super() method
  * Use correct executable for elementary Files
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1691323200">- Update to version 4.18.0
  * Filters: Add Archives, Other, update Apps
  * Use Gio to open files, fix "no default app" issue
  * Add symlink emblem to thumbnails in thumbnail mode
  * config: Prefer plocate over mlocate if available
  * window: Avoid IndexError on right click when selection is empty
  * Create shared filetype lists for searching and filtering
  * Ensure site-packages directory is prepended to sys.path
  * Fix double border between sidebar and results area
  * window: Fix and refactor new_column()
  * window: Fix markup warnings in thumbnail view
  * Fix GtkBuilder warnings
  * Revert "Suppress the various GTK warnings GtkBuilder outputs"
  * Fix crash and translations when install prefix != /usr
  * Update `.gitignore`
  * Remove generated file po/catfish.pot
  * Performance improvements (fix #79)
  * Translation Updates
- Refresh 0001-Force-disable-Zeitgeist-support.patch
- Remove _service file</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1700049600">- Use %%{python_module ...} to specify required Python modules to
  build this package.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1706961600">- Skip python312 for now until all required Python modules have been
  built.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220800">- Don't use %%{python_module ...} as we only build for the default
  Python interpreter. python312 still needs to be skipped due to
  python3-distutils!</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220801">- As long as a new Python version does not ship a broken
  python3-distutils, like python311 did in its early days, there is
  no need to deal with or skip a specific python version at all.
  Disable all %%{python_module ...} and skip_python... stuff again.</changelog>
</package>
<package pkgid="f788304bfbe8921bf19785b5d7bde8b27362f4e3dbe0676cc42bc3f290ac5662" name="catfish" arch="noarch">
  <version epoch="0" ver="4.20.1" rel="bp156.2.6.1"/>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1567857600">- Install appdata to metainfo (bxo#15752)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568376000">- Update to version 1.4.10
  * New Features:
  - Preferences Dialog:
  * Window layout (titlebar vs. headerbar)
  * Display options (hidden files and sidebar)
  * Custom exclude directories
  - Option to close Catfish after opening a file (bxo#14888)
  * fix path exclusions (deb#926850)
  * Improved Application Menu:
  - Better use of space, padding, and margins
  - Clearer purpose labels
  - Keyboard accelerator for the sidebar (F9) is now displayed
  * General:
  - Better use of alt-accelerators
  - Improved installation instructions (bxo#15105)
  - Reduced warnings displayed in the terminal
  - Simplified Python 2/3 compatibility code
  - Standardized icon sizes, no more wrongly-sized icons in the results
  - Various code quality fixes (pylint, flake)
  * Search (Walk Method):
  - Enable traversing symbolic links, processing real paths only once
  - Add search priority, with each level processed alphabetically:
    1. XDG paths (Desktop, Documents, etc)
    2. Visible paths
    3. Hidden paths
  * Translation Updates</changelog>
  <changelog author="ro@suse.de" date="1571832000">- fix build-requires for factory/tumbleweed
  rsvg-convert tool is now in rsvg-convert package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1576929600">- Update to version 1.4.11
  - Radio indicators are now displayed on the layout options
  - Fix crashes when GdkDisplay or GdkScreen calls return None
    (lp#1822914)
  - Fix configuration of preferred window layout (bxo#16085)
  - Fix finding files in the target directory (bxo#15985, bxo#16233)
  - Fix symbolic link looping (bxo#16272)
  - Fix home (~) expansion for the start path
  - Fix asv-summary-has-dot-suffix
    (https://appstream.debian.org/sid/main/issues/catfish.html)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1577966400">- Update to version 1.4.12
  * Wayland and GNOME Shell support (bxo#16293)
  * All dialogs now use client-side decorations and are modal
  * Fixed typo "Catifish"
  * Temporary files are now excluded from releases
  * Releases now generate .bz2 files and display contents and checksums
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1579089600">- Update to version 1.4.13
  * Optimized svg and png assets
  * Fix missing results from symbolic links (bxo#16318)
  * Do not load catfishconfig during setup as it breaks Debian
    packaging
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1581681600">- Fixed dependency conditional for Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1603800000">- Update to version 4.15.0
  * Added Ctrl+H shortcut to show/hide hidden files
    (gxo#apps/catfish#16)
  * Added "Today" and "Month" filters to the sidebar
    (gxo#apps/catfish#23)
  * Fulltext searches now include more text files
    (gxo#apps/catfish#7)
  * New app icon, now using an rDNS icon name (org.xfce.catfish)
  * Migrated ChangeLog to NEWS to better match Xfce projects
  * Renamed README to README.md and updated to match Xfce projects
  * Updated INSTALL to reference python3-specific packages
    (gxo#apps/catfish#36)
  * Various in-app icon updates (gxo#apps/catfish#15,
    gxo#apps/catfish#17, gxo#apps/catfish#26)
  * Added additional padding to Other and Custom gear icons
    (gxo#apps/catfish#20)
  * Check if zeitgeist daemon is running at startup
    (gxo#apps/catfish#34)
  * Correctly position custom filter popups above gear icon
    (gxo#apps/catfish#18)
  * Default to the current date in the custom date filters
    (gxo#apps/catfish#24)
  * Fix 'list' object has no attribute 'lower' (gxo#apps/catfish#9)
  * Fix fulltext freeze with special files (gxo#apps/catfish#32)
  * Fix python crash when some extension scheme is used
    (gxo#apps/catfish#35)
  * Fix statusbar moving on mouseover
  * Move custom file extension hint to tooltip (gxo#apps/catfish#25)
  * Sidebar entries no longer move when losing focus
    (gxo#apps/catfish#22)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1605700800">- add 0001-Force-disable-Zeitgeist-support.patch
  * avoid automatically generated typelib(Zeitgeist) dependency
    we can not provide (gxo#apps/catfish#39)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610107200">- Update to version 4.16.0
  * Fulltext now searches files with UTF-7, UTF-8, UTF-16 BE/LE,
    and UTF-32 BE/LE encodings
  * Replace Gtk/Gdk/GLib deprecated code (gxo#apps/catfish#6)
  * Use "match all" method for fulltext search (gxo#apps/catfish#30)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1627732800">- Update to version 4.16.2
  * Use standard icon name application-x-executable-symbolic
    instead of applications-other-symbolic
  * Fix install with rpm/pkgbuild/pip
    (gxo#apps/catfish#58, gxo#apps/catfish#59)
  * Added keyboard hotkeys for search entry, new open dialog
  * Fix Thunar "Show in FM" bug, better FM support
    (gxo#apps/catfish#43)
  * Stops freezes with special files when zip search enabled
  * Better and safer refreshing of selected results
    (gxo#apps/catfish#48)
  * Enable sidebar by default (gxo#apps/catfish#45)
  * Enable installation using pip (local source)
    (gxo#apps/catfish!20)
  * Add support for searching compressed files (gxo#apps/catfish#29)
  * Add persistent settings for searching file contents
    (gxo#apps/catfish#10)
  * Add persistent settings for thumbnail view (gxo#apps/catfish#14)
  * Add message and troff mimetypes to fulltext search
    (gxo#apps/catfish!22)
  * Add PDF support to fulltext search (gxo#apps/catfish#37)
  * Fix loading in Wayland (gxo#apps/catfish#50)
  * Stop current search when new one starts (gxo#apps/catfish!28)
  * Use local MIME database info (gxo#apps/catfish!21)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1629806400">- Fixed package sources that disappeared</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1632657600">- Update to version 4.16.3
  * Update "Searching..." Cursor
  * Sidebar background color bugfix
  * Fixes for syntax, fulltext zip search, special files
    (gxo#apps/catfish#62)
  * Adds symbolic link icons, better icon updating
    (gxo#apps/catfish#46)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1658059200">- Update to version 4.16.4
  * Add "Open with" right click item and dialog
    (gxo#apps/catfish#12)
  * Add a command-line option for setting default sort method
  * Add Ctrl+A accelerator for the treeview (gxo#apps/catfish#64)
  * Add option to show file size in binary or decimal
  * Cosmetic changes for search entry and delete dialog
  * Fix Ctrl+H not always toggling hidden files
  * Fix DE detection when launched from Electron apps
  * Fix exo file manager lookup for non-existent keys
    (gxo#apps/catfish#64)
  * Fix file manager lookup outside of Xfce
  * Fix GNOME DE detection in Ubuntu
  * Improve application menu appearance
  * Improve default width for the sidebar
  * Prepend the project root directory to sys.path
  * Support running without Xfconf (no preference saving)
  * Switch to using the super() method
  * Use correct executable for elementary Files
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1691323200">- Update to version 4.18.0
  * Filters: Add Archives, Other, update Apps
  * Use Gio to open files, fix "no default app" issue
  * Add symlink emblem to thumbnails in thumbnail mode
  * config: Prefer plocate over mlocate if available
  * window: Avoid IndexError on right click when selection is empty
  * Create shared filetype lists for searching and filtering
  * Ensure site-packages directory is prepended to sys.path
  * Fix double border between sidebar and results area
  * window: Fix and refactor new_column()
  * window: Fix markup warnings in thumbnail view
  * Fix GtkBuilder warnings
  * Revert "Suppress the various GTK warnings GtkBuilder outputs"
  * Fix crash and translations when install prefix != /usr
  * Update `.gitignore`
  * Remove generated file po/catfish.pot
  * Performance improvements (fix #79)
  * Translation Updates
- Refresh 0001-Force-disable-Zeitgeist-support.patch
- Remove _service file</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1700049600">- Use %%{python_module ...} to specify required Python modules to
  build this package.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1706961600">- Skip python312 for now until all required Python modules have been
  built.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220800">- Don't use %%{python_module ...} as we only build for the default
  Python interpreter. python312 still needs to be skipped due to
  python3-distutils!</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220801">- As long as a new Python version does not ship a broken
  python3-distutils, like python311 did in its early days, there is
  no need to deal with or skip a specific python version at all.
  Disable all %%{python_module ...} and skip_python... stuff again.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1747915200">- Update to version 4.20.1
  - build: Require defs.py
  - build: Relax meson requirements
  - build: Document dependency version requirements
  - Prevent selection change on right-click
  - Support opening multiple files with enter key
  - Improve TreeView performance
  - Deprecated exo with libxfce4ui 4.21.0
  - Update files found in real time
  - Display search time in status bar
  - Fix unintended search
  - Add hotkey for copy location
  - Add delete hotkey
  - Rename Files
  - Add a context menu option to send selected files to a folder
  - Complete copyright in about dialog
  - Translation Updates
- Do not use 0001-Force-disable-Zeitgeist-support.patch on Tumbleweed
  as we can now use zeitgeist support
- Added relax-python-requirement.patch needed to relax Python3 version
  on Leap 15.6</changelog>
</package>
<package pkgid="c255e605360975545d5169be69af00b5426884bd1e9feffa4e0a3fe9910c33e9" name="catfish" arch="src">
  <version epoch="0" ver="4.20.1" rel="bp156.2.6.1"/>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1567857600">- Install appdata to metainfo (bxo#15752)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568376000">- Update to version 1.4.10
  * New Features:
  - Preferences Dialog:
  * Window layout (titlebar vs. headerbar)
  * Display options (hidden files and sidebar)
  * Custom exclude directories
  - Option to close Catfish after opening a file (bxo#14888)
  * fix path exclusions (deb#926850)
  * Improved Application Menu:
  - Better use of space, padding, and margins
  - Clearer purpose labels
  - Keyboard accelerator for the sidebar (F9) is now displayed
  * General:
  - Better use of alt-accelerators
  - Improved installation instructions (bxo#15105)
  - Reduced warnings displayed in the terminal
  - Simplified Python 2/3 compatibility code
  - Standardized icon sizes, no more wrongly-sized icons in the results
  - Various code quality fixes (pylint, flake)
  * Search (Walk Method):
  - Enable traversing symbolic links, processing real paths only once
  - Add search priority, with each level processed alphabetically:
    1. XDG paths (Desktop, Documents, etc)
    2. Visible paths
    3. Hidden paths
  * Translation Updates</changelog>
  <changelog author="ro@suse.de" date="1571832000">- fix build-requires for factory/tumbleweed
  rsvg-convert tool is now in rsvg-convert package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1576929600">- Update to version 1.4.11
  - Radio indicators are now displayed on the layout options
  - Fix crashes when GdkDisplay or GdkScreen calls return None
    (lp#1822914)
  - Fix configuration of preferred window layout (bxo#16085)
  - Fix finding files in the target directory (bxo#15985, bxo#16233)
  - Fix symbolic link looping (bxo#16272)
  - Fix home (~) expansion for the start path
  - Fix asv-summary-has-dot-suffix
    (https://appstream.debian.org/sid/main/issues/catfish.html)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1577966400">- Update to version 1.4.12
  * Wayland and GNOME Shell support (bxo#16293)
  * All dialogs now use client-side decorations and are modal
  * Fixed typo "Catifish"
  * Temporary files are now excluded from releases
  * Releases now generate .bz2 files and display contents and checksums
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1579089600">- Update to version 1.4.13
  * Optimized svg and png assets
  * Fix missing results from symbolic links (bxo#16318)
  * Do not load catfishconfig during setup as it breaks Debian
    packaging
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1581681600">- Fixed dependency conditional for Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1603800000">- Update to version 4.15.0
  * Added Ctrl+H shortcut to show/hide hidden files
    (gxo#apps/catfish#16)
  * Added "Today" and "Month" filters to the sidebar
    (gxo#apps/catfish#23)
  * Fulltext searches now include more text files
    (gxo#apps/catfish#7)
  * New app icon, now using an rDNS icon name (org.xfce.catfish)
  * Migrated ChangeLog to NEWS to better match Xfce projects
  * Renamed README to README.md and updated to match Xfce projects
  * Updated INSTALL to reference python3-specific packages
    (gxo#apps/catfish#36)
  * Various in-app icon updates (gxo#apps/catfish#15,
    gxo#apps/catfish#17, gxo#apps/catfish#26)
  * Added additional padding to Other and Custom gear icons
    (gxo#apps/catfish#20)
  * Check if zeitgeist daemon is running at startup
    (gxo#apps/catfish#34)
  * Correctly position custom filter popups above gear icon
    (gxo#apps/catfish#18)
  * Default to the current date in the custom date filters
    (gxo#apps/catfish#24)
  * Fix 'list' object has no attribute 'lower' (gxo#apps/catfish#9)
  * Fix fulltext freeze with special files (gxo#apps/catfish#32)
  * Fix python crash when some extension scheme is used
    (gxo#apps/catfish#35)
  * Fix statusbar moving on mouseover
  * Move custom file extension hint to tooltip (gxo#apps/catfish#25)
  * Sidebar entries no longer move when losing focus
    (gxo#apps/catfish#22)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1605700800">- add 0001-Force-disable-Zeitgeist-support.patch
  * avoid automatically generated typelib(Zeitgeist) dependency
    we can not provide (gxo#apps/catfish#39)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610107200">- Update to version 4.16.0
  * Fulltext now searches files with UTF-7, UTF-8, UTF-16 BE/LE,
    and UTF-32 BE/LE encodings
  * Replace Gtk/Gdk/GLib deprecated code (gxo#apps/catfish#6)
  * Use "match all" method for fulltext search (gxo#apps/catfish#30)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1627732800">- Update to version 4.16.2
  * Use standard icon name application-x-executable-symbolic
    instead of applications-other-symbolic
  * Fix install with rpm/pkgbuild/pip
    (gxo#apps/catfish#58, gxo#apps/catfish#59)
  * Added keyboard hotkeys for search entry, new open dialog
  * Fix Thunar "Show in FM" bug, better FM support
    (gxo#apps/catfish#43)
  * Stops freezes with special files when zip search enabled
  * Better and safer refreshing of selected results
    (gxo#apps/catfish#48)
  * Enable sidebar by default (gxo#apps/catfish#45)
  * Enable installation using pip (local source)
    (gxo#apps/catfish!20)
  * Add support for searching compressed files (gxo#apps/catfish#29)
  * Add persistent settings for searching file contents
    (gxo#apps/catfish#10)
  * Add persistent settings for thumbnail view (gxo#apps/catfish#14)
  * Add message and troff mimetypes to fulltext search
    (gxo#apps/catfish!22)
  * Add PDF support to fulltext search (gxo#apps/catfish#37)
  * Fix loading in Wayland (gxo#apps/catfish#50)
  * Stop current search when new one starts (gxo#apps/catfish!28)
  * Use local MIME database info (gxo#apps/catfish!21)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1629806400">- Fixed package sources that disappeared</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1632657600">- Update to version 4.16.3
  * Update "Searching..." Cursor
  * Sidebar background color bugfix
  * Fixes for syntax, fulltext zip search, special files
    (gxo#apps/catfish#62)
  * Adds symbolic link icons, better icon updating
    (gxo#apps/catfish#46)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1658059200">- Update to version 4.16.4
  * Add "Open with" right click item and dialog
    (gxo#apps/catfish#12)
  * Add a command-line option for setting default sort method
  * Add Ctrl+A accelerator for the treeview (gxo#apps/catfish#64)
  * Add option to show file size in binary or decimal
  * Cosmetic changes for search entry and delete dialog
  * Fix Ctrl+H not always toggling hidden files
  * Fix DE detection when launched from Electron apps
  * Fix exo file manager lookup for non-existent keys
    (gxo#apps/catfish#64)
  * Fix file manager lookup outside of Xfce
  * Fix GNOME DE detection in Ubuntu
  * Improve application menu appearance
  * Improve default width for the sidebar
  * Prepend the project root directory to sys.path
  * Support running without Xfconf (no preference saving)
  * Switch to using the super() method
  * Use correct executable for elementary Files
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1691323200">- Update to version 4.18.0
  * Filters: Add Archives, Other, update Apps
  * Use Gio to open files, fix "no default app" issue
  * Add symlink emblem to thumbnails in thumbnail mode
  * config: Prefer plocate over mlocate if available
  * window: Avoid IndexError on right click when selection is empty
  * Create shared filetype lists for searching and filtering
  * Ensure site-packages directory is prepended to sys.path
  * Fix double border between sidebar and results area
  * window: Fix and refactor new_column()
  * window: Fix markup warnings in thumbnail view
  * Fix GtkBuilder warnings
  * Revert "Suppress the various GTK warnings GtkBuilder outputs"
  * Fix crash and translations when install prefix != /usr
  * Update `.gitignore`
  * Remove generated file po/catfish.pot
  * Performance improvements (fix #79)
  * Translation Updates
- Refresh 0001-Force-disable-Zeitgeist-support.patch
- Remove _service file</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1700049600">- Use %%{python_module ...} to specify required Python modules to
  build this package.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1706961600">- Skip python312 for now until all required Python modules have been
  built.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220800">- Don't use %%{python_module ...} as we only build for the default
  Python interpreter. python312 still needs to be skipped due to
  python3-distutils!</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220801">- As long as a new Python version does not ship a broken
  python3-distutils, like python311 did in its early days, there is
  no need to deal with or skip a specific python version at all.
  Disable all %%{python_module ...} and skip_python... stuff again.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1747915200">- Update to version 4.20.1
  - build: Require defs.py
  - build: Relax meson requirements
  - build: Document dependency version requirements
  - Prevent selection change on right-click
  - Support opening multiple files with enter key
  - Improve TreeView performance
  - Deprecated exo with libxfce4ui 4.21.0
  - Update files found in real time
  - Display search time in status bar
  - Fix unintended search
  - Add hotkey for copy location
  - Add delete hotkey
  - Rename Files
  - Add a context menu option to send selected files to a folder
  - Complete copyright in about dialog
  - Translation Updates
- Do not use 0001-Force-disable-Zeitgeist-support.patch on Tumbleweed
  as we can now use zeitgeist support
- Added relax-python-requirement.patch needed to relax Python3 version
  on Leap 15.6</changelog>
</package>
<package pkgid="ed4881ff015d2694af8ff82980c7d56066e86f53d3e521f96673afec00a803b9" name="catfish" arch="noarch">
  <version epoch="0" ver="4.20.1" rel="bp156.2.9.1"/>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1567857600">- Install appdata to metainfo (bxo#15752)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568376000">- Update to version 1.4.10
  * New Features:
  - Preferences Dialog:
  * Window layout (titlebar vs. headerbar)
  * Display options (hidden files and sidebar)
  * Custom exclude directories
  - Option to close Catfish after opening a file (bxo#14888)
  * fix path exclusions (deb#926850)
  * Improved Application Menu:
  - Better use of space, padding, and margins
  - Clearer purpose labels
  - Keyboard accelerator for the sidebar (F9) is now displayed
  * General:
  - Better use of alt-accelerators
  - Improved installation instructions (bxo#15105)
  - Reduced warnings displayed in the terminal
  - Simplified Python 2/3 compatibility code
  - Standardized icon sizes, no more wrongly-sized icons in the results
  - Various code quality fixes (pylint, flake)
  * Search (Walk Method):
  - Enable traversing symbolic links, processing real paths only once
  - Add search priority, with each level processed alphabetically:
    1. XDG paths (Desktop, Documents, etc)
    2. Visible paths
    3. Hidden paths
  * Translation Updates</changelog>
  <changelog author="ro@suse.de" date="1571832000">- fix build-requires for factory/tumbleweed
  rsvg-convert tool is now in rsvg-convert package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1576929600">- Update to version 1.4.11
  - Radio indicators are now displayed on the layout options
  - Fix crashes when GdkDisplay or GdkScreen calls return None
    (lp#1822914)
  - Fix configuration of preferred window layout (bxo#16085)
  - Fix finding files in the target directory (bxo#15985, bxo#16233)
  - Fix symbolic link looping (bxo#16272)
  - Fix home (~) expansion for the start path
  - Fix asv-summary-has-dot-suffix
    (https://appstream.debian.org/sid/main/issues/catfish.html)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1577966400">- Update to version 1.4.12
  * Wayland and GNOME Shell support (bxo#16293)
  * All dialogs now use client-side decorations and are modal
  * Fixed typo "Catifish"
  * Temporary files are now excluded from releases
  * Releases now generate .bz2 files and display contents and checksums
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1579089600">- Update to version 1.4.13
  * Optimized svg and png assets
  * Fix missing results from symbolic links (bxo#16318)
  * Do not load catfishconfig during setup as it breaks Debian
    packaging
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1581681600">- Fixed dependency conditional for Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1603800000">- Update to version 4.15.0
  * Added Ctrl+H shortcut to show/hide hidden files
    (gxo#apps/catfish#16)
  * Added "Today" and "Month" filters to the sidebar
    (gxo#apps/catfish#23)
  * Fulltext searches now include more text files
    (gxo#apps/catfish#7)
  * New app icon, now using an rDNS icon name (org.xfce.catfish)
  * Migrated ChangeLog to NEWS to better match Xfce projects
  * Renamed README to README.md and updated to match Xfce projects
  * Updated INSTALL to reference python3-specific packages
    (gxo#apps/catfish#36)
  * Various in-app icon updates (gxo#apps/catfish#15,
    gxo#apps/catfish#17, gxo#apps/catfish#26)
  * Added additional padding to Other and Custom gear icons
    (gxo#apps/catfish#20)
  * Check if zeitgeist daemon is running at startup
    (gxo#apps/catfish#34)
  * Correctly position custom filter popups above gear icon
    (gxo#apps/catfish#18)
  * Default to the current date in the custom date filters
    (gxo#apps/catfish#24)
  * Fix 'list' object has no attribute 'lower' (gxo#apps/catfish#9)
  * Fix fulltext freeze with special files (gxo#apps/catfish#32)
  * Fix python crash when some extension scheme is used
    (gxo#apps/catfish#35)
  * Fix statusbar moving on mouseover
  * Move custom file extension hint to tooltip (gxo#apps/catfish#25)
  * Sidebar entries no longer move when losing focus
    (gxo#apps/catfish#22)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1605700800">- add 0001-Force-disable-Zeitgeist-support.patch
  * avoid automatically generated typelib(Zeitgeist) dependency
    we can not provide (gxo#apps/catfish#39)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610107200">- Update to version 4.16.0
  * Fulltext now searches files with UTF-7, UTF-8, UTF-16 BE/LE,
    and UTF-32 BE/LE encodings
  * Replace Gtk/Gdk/GLib deprecated code (gxo#apps/catfish#6)
  * Use "match all" method for fulltext search (gxo#apps/catfish#30)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1627732800">- Update to version 4.16.2
  * Use standard icon name application-x-executable-symbolic
    instead of applications-other-symbolic
  * Fix install with rpm/pkgbuild/pip
    (gxo#apps/catfish#58, gxo#apps/catfish#59)
  * Added keyboard hotkeys for search entry, new open dialog
  * Fix Thunar "Show in FM" bug, better FM support
    (gxo#apps/catfish#43)
  * Stops freezes with special files when zip search enabled
  * Better and safer refreshing of selected results
    (gxo#apps/catfish#48)
  * Enable sidebar by default (gxo#apps/catfish#45)
  * Enable installation using pip (local source)
    (gxo#apps/catfish!20)
  * Add support for searching compressed files (gxo#apps/catfish#29)
  * Add persistent settings for searching file contents
    (gxo#apps/catfish#10)
  * Add persistent settings for thumbnail view (gxo#apps/catfish#14)
  * Add message and troff mimetypes to fulltext search
    (gxo#apps/catfish!22)
  * Add PDF support to fulltext search (gxo#apps/catfish#37)
  * Fix loading in Wayland (gxo#apps/catfish#50)
  * Stop current search when new one starts (gxo#apps/catfish!28)
  * Use local MIME database info (gxo#apps/catfish!21)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1629806400">- Fixed package sources that disappeared</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1632657600">- Update to version 4.16.3
  * Update "Searching..." Cursor
  * Sidebar background color bugfix
  * Fixes for syntax, fulltext zip search, special files
    (gxo#apps/catfish#62)
  * Adds symbolic link icons, better icon updating
    (gxo#apps/catfish#46)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1658059200">- Update to version 4.16.4
  * Add "Open with" right click item and dialog
    (gxo#apps/catfish#12)
  * Add a command-line option for setting default sort method
  * Add Ctrl+A accelerator for the treeview (gxo#apps/catfish#64)
  * Add option to show file size in binary or decimal
  * Cosmetic changes for search entry and delete dialog
  * Fix Ctrl+H not always toggling hidden files
  * Fix DE detection when launched from Electron apps
  * Fix exo file manager lookup for non-existent keys
    (gxo#apps/catfish#64)
  * Fix file manager lookup outside of Xfce
  * Fix GNOME DE detection in Ubuntu
  * Improve application menu appearance
  * Improve default width for the sidebar
  * Prepend the project root directory to sys.path
  * Support running without Xfconf (no preference saving)
  * Switch to using the super() method
  * Use correct executable for elementary Files
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1691323200">- Update to version 4.18.0
  * Filters: Add Archives, Other, update Apps
  * Use Gio to open files, fix "no default app" issue
  * Add symlink emblem to thumbnails in thumbnail mode
  * config: Prefer plocate over mlocate if available
  * window: Avoid IndexError on right click when selection is empty
  * Create shared filetype lists for searching and filtering
  * Ensure site-packages directory is prepended to sys.path
  * Fix double border between sidebar and results area
  * window: Fix and refactor new_column()
  * window: Fix markup warnings in thumbnail view
  * Fix GtkBuilder warnings
  * Revert "Suppress the various GTK warnings GtkBuilder outputs"
  * Fix crash and translations when install prefix != /usr
  * Update `.gitignore`
  * Remove generated file po/catfish.pot
  * Performance improvements (fix #79)
  * Translation Updates
- Refresh 0001-Force-disable-Zeitgeist-support.patch
- Remove _service file</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1700049600">- Use %%{python_module ...} to specify required Python modules to
  build this package.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1706961600">- Skip python312 for now until all required Python modules have been
  built.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220800">- Don't use %%{python_module ...} as we only build for the default
  Python interpreter. python312 still needs to be skipped due to
  python3-distutils!</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220801">- As long as a new Python version does not ship a broken
  python3-distutils, like python311 did in its early days, there is
  no need to deal with or skip a specific python version at all.
  Disable all %%{python_module ...} and skip_python... stuff again.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1747915200">- Update to version 4.20.1
  - build: Require defs.py
  - build: Relax meson requirements
  - build: Document dependency version requirements
  - Prevent selection change on right-click
  - Support opening multiple files with enter key
  - Improve TreeView performance
  - Deprecated exo with libxfce4ui 4.21.0
  - Update files found in real time
  - Display search time in status bar
  - Fix unintended search
  - Add hotkey for copy location
  - Add delete hotkey
  - Rename Files
  - Add a context menu option to send selected files to a folder
  - Complete copyright in about dialog
  - Translation Updates
- Do not use 0001-Force-disable-Zeitgeist-support.patch on Tumbleweed
  as we can now use zeitgeist support
- Added relax-python-requirement.patch needed to relax Python3 version
  on Leap 15.6</changelog>
</package>
<package pkgid="d2aaa9e82534cde6555f889ab75aa6b099684ad752f381f891ad991bb6d52108" name="catfish" arch="src">
  <version epoch="0" ver="4.20.1" rel="bp156.2.9.1"/>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1567857600">- Install appdata to metainfo (bxo#15752)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568376000">- Update to version 1.4.10
  * New Features:
  - Preferences Dialog:
  * Window layout (titlebar vs. headerbar)
  * Display options (hidden files and sidebar)
  * Custom exclude directories
  - Option to close Catfish after opening a file (bxo#14888)
  * fix path exclusions (deb#926850)
  * Improved Application Menu:
  - Better use of space, padding, and margins
  - Clearer purpose labels
  - Keyboard accelerator for the sidebar (F9) is now displayed
  * General:
  - Better use of alt-accelerators
  - Improved installation instructions (bxo#15105)
  - Reduced warnings displayed in the terminal
  - Simplified Python 2/3 compatibility code
  - Standardized icon sizes, no more wrongly-sized icons in the results
  - Various code quality fixes (pylint, flake)
  * Search (Walk Method):
  - Enable traversing symbolic links, processing real paths only once
  - Add search priority, with each level processed alphabetically:
    1. XDG paths (Desktop, Documents, etc)
    2. Visible paths
    3. Hidden paths
  * Translation Updates</changelog>
  <changelog author="ro@suse.de" date="1571832000">- fix build-requires for factory/tumbleweed
  rsvg-convert tool is now in rsvg-convert package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1576929600">- Update to version 1.4.11
  - Radio indicators are now displayed on the layout options
  - Fix crashes when GdkDisplay or GdkScreen calls return None
    (lp#1822914)
  - Fix configuration of preferred window layout (bxo#16085)
  - Fix finding files in the target directory (bxo#15985, bxo#16233)
  - Fix symbolic link looping (bxo#16272)
  - Fix home (~) expansion for the start path
  - Fix asv-summary-has-dot-suffix
    (https://appstream.debian.org/sid/main/issues/catfish.html)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1577966400">- Update to version 1.4.12
  * Wayland and GNOME Shell support (bxo#16293)
  * All dialogs now use client-side decorations and are modal
  * Fixed typo "Catifish"
  * Temporary files are now excluded from releases
  * Releases now generate .bz2 files and display contents and checksums
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1579089600">- Update to version 1.4.13
  * Optimized svg and png assets
  * Fix missing results from symbolic links (bxo#16318)
  * Do not load catfishconfig during setup as it breaks Debian
    packaging
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1581681600">- Fixed dependency conditional for Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1603800000">- Update to version 4.15.0
  * Added Ctrl+H shortcut to show/hide hidden files
    (gxo#apps/catfish#16)
  * Added "Today" and "Month" filters to the sidebar
    (gxo#apps/catfish#23)
  * Fulltext searches now include more text files
    (gxo#apps/catfish#7)
  * New app icon, now using an rDNS icon name (org.xfce.catfish)
  * Migrated ChangeLog to NEWS to better match Xfce projects
  * Renamed README to README.md and updated to match Xfce projects
  * Updated INSTALL to reference python3-specific packages
    (gxo#apps/catfish#36)
  * Various in-app icon updates (gxo#apps/catfish#15,
    gxo#apps/catfish#17, gxo#apps/catfish#26)
  * Added additional padding to Other and Custom gear icons
    (gxo#apps/catfish#20)
  * Check if zeitgeist daemon is running at startup
    (gxo#apps/catfish#34)
  * Correctly position custom filter popups above gear icon
    (gxo#apps/catfish#18)
  * Default to the current date in the custom date filters
    (gxo#apps/catfish#24)
  * Fix 'list' object has no attribute 'lower' (gxo#apps/catfish#9)
  * Fix fulltext freeze with special files (gxo#apps/catfish#32)
  * Fix python crash when some extension scheme is used
    (gxo#apps/catfish#35)
  * Fix statusbar moving on mouseover
  * Move custom file extension hint to tooltip (gxo#apps/catfish#25)
  * Sidebar entries no longer move when losing focus
    (gxo#apps/catfish#22)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1605700800">- add 0001-Force-disable-Zeitgeist-support.patch
  * avoid automatically generated typelib(Zeitgeist) dependency
    we can not provide (gxo#apps/catfish#39)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610107200">- Update to version 4.16.0
  * Fulltext now searches files with UTF-7, UTF-8, UTF-16 BE/LE,
    and UTF-32 BE/LE encodings
  * Replace Gtk/Gdk/GLib deprecated code (gxo#apps/catfish#6)
  * Use "match all" method for fulltext search (gxo#apps/catfish#30)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1627732800">- Update to version 4.16.2
  * Use standard icon name application-x-executable-symbolic
    instead of applications-other-symbolic
  * Fix install with rpm/pkgbuild/pip
    (gxo#apps/catfish#58, gxo#apps/catfish#59)
  * Added keyboard hotkeys for search entry, new open dialog
  * Fix Thunar "Show in FM" bug, better FM support
    (gxo#apps/catfish#43)
  * Stops freezes with special files when zip search enabled
  * Better and safer refreshing of selected results
    (gxo#apps/catfish#48)
  * Enable sidebar by default (gxo#apps/catfish#45)
  * Enable installation using pip (local source)
    (gxo#apps/catfish!20)
  * Add support for searching compressed files (gxo#apps/catfish#29)
  * Add persistent settings for searching file contents
    (gxo#apps/catfish#10)
  * Add persistent settings for thumbnail view (gxo#apps/catfish#14)
  * Add message and troff mimetypes to fulltext search
    (gxo#apps/catfish!22)
  * Add PDF support to fulltext search (gxo#apps/catfish#37)
  * Fix loading in Wayland (gxo#apps/catfish#50)
  * Stop current search when new one starts (gxo#apps/catfish!28)
  * Use local MIME database info (gxo#apps/catfish!21)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1629806400">- Fixed package sources that disappeared</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1632657600">- Update to version 4.16.3
  * Update "Searching..." Cursor
  * Sidebar background color bugfix
  * Fixes for syntax, fulltext zip search, special files
    (gxo#apps/catfish#62)
  * Adds symbolic link icons, better icon updating
    (gxo#apps/catfish#46)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1658059200">- Update to version 4.16.4
  * Add "Open with" right click item and dialog
    (gxo#apps/catfish#12)
  * Add a command-line option for setting default sort method
  * Add Ctrl+A accelerator for the treeview (gxo#apps/catfish#64)
  * Add option to show file size in binary or decimal
  * Cosmetic changes for search entry and delete dialog
  * Fix Ctrl+H not always toggling hidden files
  * Fix DE detection when launched from Electron apps
  * Fix exo file manager lookup for non-existent keys
    (gxo#apps/catfish#64)
  * Fix file manager lookup outside of Xfce
  * Fix GNOME DE detection in Ubuntu
  * Improve application menu appearance
  * Improve default width for the sidebar
  * Prepend the project root directory to sys.path
  * Support running without Xfconf (no preference saving)
  * Switch to using the super() method
  * Use correct executable for elementary Files
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1691323200">- Update to version 4.18.0
  * Filters: Add Archives, Other, update Apps
  * Use Gio to open files, fix "no default app" issue
  * Add symlink emblem to thumbnails in thumbnail mode
  * config: Prefer plocate over mlocate if available
  * window: Avoid IndexError on right click when selection is empty
  * Create shared filetype lists for searching and filtering
  * Ensure site-packages directory is prepended to sys.path
  * Fix double border between sidebar and results area
  * window: Fix and refactor new_column()
  * window: Fix markup warnings in thumbnail view
  * Fix GtkBuilder warnings
  * Revert "Suppress the various GTK warnings GtkBuilder outputs"
  * Fix crash and translations when install prefix != /usr
  * Update `.gitignore`
  * Remove generated file po/catfish.pot
  * Performance improvements (fix #79)
  * Translation Updates
- Refresh 0001-Force-disable-Zeitgeist-support.patch
- Remove _service file</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1700049600">- Use %%{python_module ...} to specify required Python modules to
  build this package.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1706961600">- Skip python312 for now until all required Python modules have been
  built.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220800">- Don't use %%{python_module ...} as we only build for the default
  Python interpreter. python312 still needs to be skipped due to
  python3-distutils!</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220801">- As long as a new Python version does not ship a broken
  python3-distutils, like python311 did in its early days, there is
  no need to deal with or skip a specific python version at all.
  Disable all %%{python_module ...} and skip_python... stuff again.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1747915200">- Update to version 4.20.1
  - build: Require defs.py
  - build: Relax meson requirements
  - build: Document dependency version requirements
  - Prevent selection change on right-click
  - Support opening multiple files with enter key
  - Improve TreeView performance
  - Deprecated exo with libxfce4ui 4.21.0
  - Update files found in real time
  - Display search time in status bar
  - Fix unintended search
  - Add hotkey for copy location
  - Add delete hotkey
  - Rename Files
  - Add a context menu option to send selected files to a folder
  - Complete copyright in about dialog
  - Translation Updates
- Do not use 0001-Force-disable-Zeitgeist-support.patch on Tumbleweed
  as we can now use zeitgeist support
- Added relax-python-requirement.patch needed to relax Python3 version
  on Leap 15.6</changelog>
</package>
<package pkgid="2850c213bb98b500e05d1c4bba979009dd3591451b0c5baa93ae347d43e5f984" name="catfish-lang" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="bp156.2.3.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1567857600">- Install appdata to metainfo (bxo#15752)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568376000">- Update to version 1.4.10
  * New Features:
  - Preferences Dialog:
  * Window layout (titlebar vs. headerbar)
  * Display options (hidden files and sidebar)
  * Custom exclude directories
  - Option to close Catfish after opening a file (bxo#14888)
  * fix path exclusions (deb#926850)
  * Improved Application Menu:
  - Better use of space, padding, and margins
  - Clearer purpose labels
  - Keyboard accelerator for the sidebar (F9) is now displayed
  * General:
  - Better use of alt-accelerators
  - Improved installation instructions (bxo#15105)
  - Reduced warnings displayed in the terminal
  - Simplified Python 2/3 compatibility code
  - Standardized icon sizes, no more wrongly-sized icons in the results
  - Various code quality fixes (pylint, flake)
  * Search (Walk Method):
  - Enable traversing symbolic links, processing real paths only once
  - Add search priority, with each level processed alphabetically:
    1. XDG paths (Desktop, Documents, etc)
    2. Visible paths
    3. Hidden paths
  * Translation Updates</changelog>
  <changelog author="ro@suse.de" date="1571832000">- fix build-requires for factory/tumbleweed
  rsvg-convert tool is now in rsvg-convert package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1576929600">- Update to version 1.4.11
  - Radio indicators are now displayed on the layout options
  - Fix crashes when GdkDisplay or GdkScreen calls return None
    (lp#1822914)
  - Fix configuration of preferred window layout (bxo#16085)
  - Fix finding files in the target directory (bxo#15985, bxo#16233)
  - Fix symbolic link looping (bxo#16272)
  - Fix home (~) expansion for the start path
  - Fix asv-summary-has-dot-suffix
    (https://appstream.debian.org/sid/main/issues/catfish.html)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1577966400">- Update to version 1.4.12
  * Wayland and GNOME Shell support (bxo#16293)
  * All dialogs now use client-side decorations and are modal
  * Fixed typo "Catifish"
  * Temporary files are now excluded from releases
  * Releases now generate .bz2 files and display contents and checksums
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1579089600">- Update to version 1.4.13
  * Optimized svg and png assets
  * Fix missing results from symbolic links (bxo#16318)
  * Do not load catfishconfig during setup as it breaks Debian
    packaging
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1581681600">- Fixed dependency conditional for Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1603800000">- Update to version 4.15.0
  * Added Ctrl+H shortcut to show/hide hidden files
    (gxo#apps/catfish#16)
  * Added "Today" and "Month" filters to the sidebar
    (gxo#apps/catfish#23)
  * Fulltext searches now include more text files
    (gxo#apps/catfish#7)
  * New app icon, now using an rDNS icon name (org.xfce.catfish)
  * Migrated ChangeLog to NEWS to better match Xfce projects
  * Renamed README to README.md and updated to match Xfce projects
  * Updated INSTALL to reference python3-specific packages
    (gxo#apps/catfish#36)
  * Various in-app icon updates (gxo#apps/catfish#15,
    gxo#apps/catfish#17, gxo#apps/catfish#26)
  * Added additional padding to Other and Custom gear icons
    (gxo#apps/catfish#20)
  * Check if zeitgeist daemon is running at startup
    (gxo#apps/catfish#34)
  * Correctly position custom filter popups above gear icon
    (gxo#apps/catfish#18)
  * Default to the current date in the custom date filters
    (gxo#apps/catfish#24)
  * Fix 'list' object has no attribute 'lower' (gxo#apps/catfish#9)
  * Fix fulltext freeze with special files (gxo#apps/catfish#32)
  * Fix python crash when some extension scheme is used
    (gxo#apps/catfish#35)
  * Fix statusbar moving on mouseover
  * Move custom file extension hint to tooltip (gxo#apps/catfish#25)
  * Sidebar entries no longer move when losing focus
    (gxo#apps/catfish#22)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1605700800">- add 0001-Force-disable-Zeitgeist-support.patch
  * avoid automatically generated typelib(Zeitgeist) dependency
    we can not provide (gxo#apps/catfish#39)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610107200">- Update to version 4.16.0
  * Fulltext now searches files with UTF-7, UTF-8, UTF-16 BE/LE,
    and UTF-32 BE/LE encodings
  * Replace Gtk/Gdk/GLib deprecated code (gxo#apps/catfish#6)
  * Use "match all" method for fulltext search (gxo#apps/catfish#30)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1627732800">- Update to version 4.16.2
  * Use standard icon name application-x-executable-symbolic
    instead of applications-other-symbolic
  * Fix install with rpm/pkgbuild/pip
    (gxo#apps/catfish#58, gxo#apps/catfish#59)
  * Added keyboard hotkeys for search entry, new open dialog
  * Fix Thunar "Show in FM" bug, better FM support
    (gxo#apps/catfish#43)
  * Stops freezes with special files when zip search enabled
  * Better and safer refreshing of selected results
    (gxo#apps/catfish#48)
  * Enable sidebar by default (gxo#apps/catfish#45)
  * Enable installation using pip (local source)
    (gxo#apps/catfish!20)
  * Add support for searching compressed files (gxo#apps/catfish#29)
  * Add persistent settings for searching file contents
    (gxo#apps/catfish#10)
  * Add persistent settings for thumbnail view (gxo#apps/catfish#14)
  * Add message and troff mimetypes to fulltext search
    (gxo#apps/catfish!22)
  * Add PDF support to fulltext search (gxo#apps/catfish#37)
  * Fix loading in Wayland (gxo#apps/catfish#50)
  * Stop current search when new one starts (gxo#apps/catfish!28)
  * Use local MIME database info (gxo#apps/catfish!21)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1629806400">- Fixed package sources that disappeared</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1632657600">- Update to version 4.16.3
  * Update "Searching..." Cursor
  * Sidebar background color bugfix
  * Fixes for syntax, fulltext zip search, special files
    (gxo#apps/catfish#62)
  * Adds symbolic link icons, better icon updating
    (gxo#apps/catfish#46)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1658059200">- Update to version 4.16.4
  * Add "Open with" right click item and dialog
    (gxo#apps/catfish#12)
  * Add a command-line option for setting default sort method
  * Add Ctrl+A accelerator for the treeview (gxo#apps/catfish#64)
  * Add option to show file size in binary or decimal
  * Cosmetic changes for search entry and delete dialog
  * Fix Ctrl+H not always toggling hidden files
  * Fix DE detection when launched from Electron apps
  * Fix exo file manager lookup for non-existent keys
    (gxo#apps/catfish#64)
  * Fix file manager lookup outside of Xfce
  * Fix GNOME DE detection in Ubuntu
  * Improve application menu appearance
  * Improve default width for the sidebar
  * Prepend the project root directory to sys.path
  * Support running without Xfconf (no preference saving)
  * Switch to using the super() method
  * Use correct executable for elementary Files
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1691323200">- Update to version 4.18.0
  * Filters: Add Archives, Other, update Apps
  * Use Gio to open files, fix "no default app" issue
  * Add symlink emblem to thumbnails in thumbnail mode
  * config: Prefer plocate over mlocate if available
  * window: Avoid IndexError on right click when selection is empty
  * Create shared filetype lists for searching and filtering
  * Ensure site-packages directory is prepended to sys.path
  * Fix double border between sidebar and results area
  * window: Fix and refactor new_column()
  * window: Fix markup warnings in thumbnail view
  * Fix GtkBuilder warnings
  * Revert "Suppress the various GTK warnings GtkBuilder outputs"
  * Fix crash and translations when install prefix != /usr
  * Update `.gitignore`
  * Remove generated file po/catfish.pot
  * Performance improvements (fix #79)
  * Translation Updates
- Refresh 0001-Force-disable-Zeitgeist-support.patch
- Remove _service file</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1700049600">- Use %%{python_module ...} to specify required Python modules to
  build this package.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1706961600">- Skip python312 for now until all required Python modules have been
  built.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220800">- Don't use %%{python_module ...} as we only build for the default
  Python interpreter. python312 still needs to be skipped due to
  python3-distutils!</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220801">- As long as a new Python version does not ship a broken
  python3-distutils, like python311 did in its early days, there is
  no need to deal with or skip a specific python version at all.
  Disable all %%{python_module ...} and skip_python... stuff again.</changelog>
</package>
<package pkgid="63731015de83e8c7d5a9cc8b2fd12f227c8a3a5662bb32d7f8b5bc9ba4024b91" name="catfish-lang" arch="noarch">
  <version epoch="0" ver="4.20.1" rel="bp156.2.6.1"/>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1567857600">- Install appdata to metainfo (bxo#15752)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568376000">- Update to version 1.4.10
  * New Features:
  - Preferences Dialog:
  * Window layout (titlebar vs. headerbar)
  * Display options (hidden files and sidebar)
  * Custom exclude directories
  - Option to close Catfish after opening a file (bxo#14888)
  * fix path exclusions (deb#926850)
  * Improved Application Menu:
  - Better use of space, padding, and margins
  - Clearer purpose labels
  - Keyboard accelerator for the sidebar (F9) is now displayed
  * General:
  - Better use of alt-accelerators
  - Improved installation instructions (bxo#15105)
  - Reduced warnings displayed in the terminal
  - Simplified Python 2/3 compatibility code
  - Standardized icon sizes, no more wrongly-sized icons in the results
  - Various code quality fixes (pylint, flake)
  * Search (Walk Method):
  - Enable traversing symbolic links, processing real paths only once
  - Add search priority, with each level processed alphabetically:
    1. XDG paths (Desktop, Documents, etc)
    2. Visible paths
    3. Hidden paths
  * Translation Updates</changelog>
  <changelog author="ro@suse.de" date="1571832000">- fix build-requires for factory/tumbleweed
  rsvg-convert tool is now in rsvg-convert package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1576929600">- Update to version 1.4.11
  - Radio indicators are now displayed on the layout options
  - Fix crashes when GdkDisplay or GdkScreen calls return None
    (lp#1822914)
  - Fix configuration of preferred window layout (bxo#16085)
  - Fix finding files in the target directory (bxo#15985, bxo#16233)
  - Fix symbolic link looping (bxo#16272)
  - Fix home (~) expansion for the start path
  - Fix asv-summary-has-dot-suffix
    (https://appstream.debian.org/sid/main/issues/catfish.html)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1577966400">- Update to version 1.4.12
  * Wayland and GNOME Shell support (bxo#16293)
  * All dialogs now use client-side decorations and are modal
  * Fixed typo "Catifish"
  * Temporary files are now excluded from releases
  * Releases now generate .bz2 files and display contents and checksums
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1579089600">- Update to version 1.4.13
  * Optimized svg and png assets
  * Fix missing results from symbolic links (bxo#16318)
  * Do not load catfishconfig during setup as it breaks Debian
    packaging
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1581681600">- Fixed dependency conditional for Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1603800000">- Update to version 4.15.0
  * Added Ctrl+H shortcut to show/hide hidden files
    (gxo#apps/catfish#16)
  * Added "Today" and "Month" filters to the sidebar
    (gxo#apps/catfish#23)
  * Fulltext searches now include more text files
    (gxo#apps/catfish#7)
  * New app icon, now using an rDNS icon name (org.xfce.catfish)
  * Migrated ChangeLog to NEWS to better match Xfce projects
  * Renamed README to README.md and updated to match Xfce projects
  * Updated INSTALL to reference python3-specific packages
    (gxo#apps/catfish#36)
  * Various in-app icon updates (gxo#apps/catfish#15,
    gxo#apps/catfish#17, gxo#apps/catfish#26)
  * Added additional padding to Other and Custom gear icons
    (gxo#apps/catfish#20)
  * Check if zeitgeist daemon is running at startup
    (gxo#apps/catfish#34)
  * Correctly position custom filter popups above gear icon
    (gxo#apps/catfish#18)
  * Default to the current date in the custom date filters
    (gxo#apps/catfish#24)
  * Fix 'list' object has no attribute 'lower' (gxo#apps/catfish#9)
  * Fix fulltext freeze with special files (gxo#apps/catfish#32)
  * Fix python crash when some extension scheme is used
    (gxo#apps/catfish#35)
  * Fix statusbar moving on mouseover
  * Move custom file extension hint to tooltip (gxo#apps/catfish#25)
  * Sidebar entries no longer move when losing focus
    (gxo#apps/catfish#22)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1605700800">- add 0001-Force-disable-Zeitgeist-support.patch
  * avoid automatically generated typelib(Zeitgeist) dependency
    we can not provide (gxo#apps/catfish#39)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610107200">- Update to version 4.16.0
  * Fulltext now searches files with UTF-7, UTF-8, UTF-16 BE/LE,
    and UTF-32 BE/LE encodings
  * Replace Gtk/Gdk/GLib deprecated code (gxo#apps/catfish#6)
  * Use "match all" method for fulltext search (gxo#apps/catfish#30)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1627732800">- Update to version 4.16.2
  * Use standard icon name application-x-executable-symbolic
    instead of applications-other-symbolic
  * Fix install with rpm/pkgbuild/pip
    (gxo#apps/catfish#58, gxo#apps/catfish#59)
  * Added keyboard hotkeys for search entry, new open dialog
  * Fix Thunar "Show in FM" bug, better FM support
    (gxo#apps/catfish#43)
  * Stops freezes with special files when zip search enabled
  * Better and safer refreshing of selected results
    (gxo#apps/catfish#48)
  * Enable sidebar by default (gxo#apps/catfish#45)
  * Enable installation using pip (local source)
    (gxo#apps/catfish!20)
  * Add support for searching compressed files (gxo#apps/catfish#29)
  * Add persistent settings for searching file contents
    (gxo#apps/catfish#10)
  * Add persistent settings for thumbnail view (gxo#apps/catfish#14)
  * Add message and troff mimetypes to fulltext search
    (gxo#apps/catfish!22)
  * Add PDF support to fulltext search (gxo#apps/catfish#37)
  * Fix loading in Wayland (gxo#apps/catfish#50)
  * Stop current search when new one starts (gxo#apps/catfish!28)
  * Use local MIME database info (gxo#apps/catfish!21)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1629806400">- Fixed package sources that disappeared</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1632657600">- Update to version 4.16.3
  * Update "Searching..." Cursor
  * Sidebar background color bugfix
  * Fixes for syntax, fulltext zip search, special files
    (gxo#apps/catfish#62)
  * Adds symbolic link icons, better icon updating
    (gxo#apps/catfish#46)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1658059200">- Update to version 4.16.4
  * Add "Open with" right click item and dialog
    (gxo#apps/catfish#12)
  * Add a command-line option for setting default sort method
  * Add Ctrl+A accelerator for the treeview (gxo#apps/catfish#64)
  * Add option to show file size in binary or decimal
  * Cosmetic changes for search entry and delete dialog
  * Fix Ctrl+H not always toggling hidden files
  * Fix DE detection when launched from Electron apps
  * Fix exo file manager lookup for non-existent keys
    (gxo#apps/catfish#64)
  * Fix file manager lookup outside of Xfce
  * Fix GNOME DE detection in Ubuntu
  * Improve application menu appearance
  * Improve default width for the sidebar
  * Prepend the project root directory to sys.path
  * Support running without Xfconf (no preference saving)
  * Switch to using the super() method
  * Use correct executable for elementary Files
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1691323200">- Update to version 4.18.0
  * Filters: Add Archives, Other, update Apps
  * Use Gio to open files, fix "no default app" issue
  * Add symlink emblem to thumbnails in thumbnail mode
  * config: Prefer plocate over mlocate if available
  * window: Avoid IndexError on right click when selection is empty
  * Create shared filetype lists for searching and filtering
  * Ensure site-packages directory is prepended to sys.path
  * Fix double border between sidebar and results area
  * window: Fix and refactor new_column()
  * window: Fix markup warnings in thumbnail view
  * Fix GtkBuilder warnings
  * Revert "Suppress the various GTK warnings GtkBuilder outputs"
  * Fix crash and translations when install prefix != /usr
  * Update `.gitignore`
  * Remove generated file po/catfish.pot
  * Performance improvements (fix #79)
  * Translation Updates
- Refresh 0001-Force-disable-Zeitgeist-support.patch
- Remove _service file</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1700049600">- Use %%{python_module ...} to specify required Python modules to
  build this package.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1706961600">- Skip python312 for now until all required Python modules have been
  built.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220800">- Don't use %%{python_module ...} as we only build for the default
  Python interpreter. python312 still needs to be skipped due to
  python3-distutils!</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220801">- As long as a new Python version does not ship a broken
  python3-distutils, like python311 did in its early days, there is
  no need to deal with or skip a specific python version at all.
  Disable all %%{python_module ...} and skip_python... stuff again.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1747915200">- Update to version 4.20.1
  - build: Require defs.py
  - build: Relax meson requirements
  - build: Document dependency version requirements
  - Prevent selection change on right-click
  - Support opening multiple files with enter key
  - Improve TreeView performance
  - Deprecated exo with libxfce4ui 4.21.0
  - Update files found in real time
  - Display search time in status bar
  - Fix unintended search
  - Add hotkey for copy location
  - Add delete hotkey
  - Rename Files
  - Add a context menu option to send selected files to a folder
  - Complete copyright in about dialog
  - Translation Updates
- Do not use 0001-Force-disable-Zeitgeist-support.patch on Tumbleweed
  as we can now use zeitgeist support
- Added relax-python-requirement.patch needed to relax Python3 version
  on Leap 15.6</changelog>
</package>
<package pkgid="0bf063019e195e9153662f882e961c8c12a4c206405c758a039219063918b806" name="catfish-lang" arch="noarch">
  <version epoch="0" ver="4.20.1" rel="bp156.2.9.1"/>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1567857600">- Install appdata to metainfo (bxo#15752)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568376000">- Update to version 1.4.10
  * New Features:
  - Preferences Dialog:
  * Window layout (titlebar vs. headerbar)
  * Display options (hidden files and sidebar)
  * Custom exclude directories
  - Option to close Catfish after opening a file (bxo#14888)
  * fix path exclusions (deb#926850)
  * Improved Application Menu:
  - Better use of space, padding, and margins
  - Clearer purpose labels
  - Keyboard accelerator for the sidebar (F9) is now displayed
  * General:
  - Better use of alt-accelerators
  - Improved installation instructions (bxo#15105)
  - Reduced warnings displayed in the terminal
  - Simplified Python 2/3 compatibility code
  - Standardized icon sizes, no more wrongly-sized icons in the results
  - Various code quality fixes (pylint, flake)
  * Search (Walk Method):
  - Enable traversing symbolic links, processing real paths only once
  - Add search priority, with each level processed alphabetically:
    1. XDG paths (Desktop, Documents, etc)
    2. Visible paths
    3. Hidden paths
  * Translation Updates</changelog>
  <changelog author="ro@suse.de" date="1571832000">- fix build-requires for factory/tumbleweed
  rsvg-convert tool is now in rsvg-convert package</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1576929600">- Update to version 1.4.11
  - Radio indicators are now displayed on the layout options
  - Fix crashes when GdkDisplay or GdkScreen calls return None
    (lp#1822914)
  - Fix configuration of preferred window layout (bxo#16085)
  - Fix finding files in the target directory (bxo#15985, bxo#16233)
  - Fix symbolic link looping (bxo#16272)
  - Fix home (~) expansion for the start path
  - Fix asv-summary-has-dot-suffix
    (https://appstream.debian.org/sid/main/issues/catfish.html)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1577966400">- Update to version 1.4.12
  * Wayland and GNOME Shell support (bxo#16293)
  * All dialogs now use client-side decorations and are modal
  * Fixed typo "Catifish"
  * Temporary files are now excluded from releases
  * Releases now generate .bz2 files and display contents and checksums
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1579089600">- Update to version 1.4.13
  * Optimized svg and png assets
  * Fix missing results from symbolic links (bxo#16318)
  * Do not load catfishconfig during setup as it breaks Debian
    packaging
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1581681600">- Fixed dependency conditional for Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1603800000">- Update to version 4.15.0
  * Added Ctrl+H shortcut to show/hide hidden files
    (gxo#apps/catfish#16)
  * Added "Today" and "Month" filters to the sidebar
    (gxo#apps/catfish#23)
  * Fulltext searches now include more text files
    (gxo#apps/catfish#7)
  * New app icon, now using an rDNS icon name (org.xfce.catfish)
  * Migrated ChangeLog to NEWS to better match Xfce projects
  * Renamed README to README.md and updated to match Xfce projects
  * Updated INSTALL to reference python3-specific packages
    (gxo#apps/catfish#36)
  * Various in-app icon updates (gxo#apps/catfish#15,
    gxo#apps/catfish#17, gxo#apps/catfish#26)
  * Added additional padding to Other and Custom gear icons
    (gxo#apps/catfish#20)
  * Check if zeitgeist daemon is running at startup
    (gxo#apps/catfish#34)
  * Correctly position custom filter popups above gear icon
    (gxo#apps/catfish#18)
  * Default to the current date in the custom date filters
    (gxo#apps/catfish#24)
  * Fix 'list' object has no attribute 'lower' (gxo#apps/catfish#9)
  * Fix fulltext freeze with special files (gxo#apps/catfish#32)
  * Fix python crash when some extension scheme is used
    (gxo#apps/catfish#35)
  * Fix statusbar moving on mouseover
  * Move custom file extension hint to tooltip (gxo#apps/catfish#25)
  * Sidebar entries no longer move when losing focus
    (gxo#apps/catfish#22)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1605700800">- add 0001-Force-disable-Zeitgeist-support.patch
  * avoid automatically generated typelib(Zeitgeist) dependency
    we can not provide (gxo#apps/catfish#39)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610107200">- Update to version 4.16.0
  * Fulltext now searches files with UTF-7, UTF-8, UTF-16 BE/LE,
    and UTF-32 BE/LE encodings
  * Replace Gtk/Gdk/GLib deprecated code (gxo#apps/catfish#6)
  * Use "match all" method for fulltext search (gxo#apps/catfish#30)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1627732800">- Update to version 4.16.2
  * Use standard icon name application-x-executable-symbolic
    instead of applications-other-symbolic
  * Fix install with rpm/pkgbuild/pip
    (gxo#apps/catfish#58, gxo#apps/catfish#59)
  * Added keyboard hotkeys for search entry, new open dialog
  * Fix Thunar "Show in FM" bug, better FM support
    (gxo#apps/catfish#43)
  * Stops freezes with special files when zip search enabled
  * Better and safer refreshing of selected results
    (gxo#apps/catfish#48)
  * Enable sidebar by default (gxo#apps/catfish#45)
  * Enable installation using pip (local source)
    (gxo#apps/catfish!20)
  * Add support for searching compressed files (gxo#apps/catfish#29)
  * Add persistent settings for searching file contents
    (gxo#apps/catfish#10)
  * Add persistent settings for thumbnail view (gxo#apps/catfish#14)
  * Add message and troff mimetypes to fulltext search
    (gxo#apps/catfish!22)
  * Add PDF support to fulltext search (gxo#apps/catfish#37)
  * Fix loading in Wayland (gxo#apps/catfish#50)
  * Stop current search when new one starts (gxo#apps/catfish!28)
  * Use local MIME database info (gxo#apps/catfish!21)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1629806400">- Fixed package sources that disappeared</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1632657600">- Update to version 4.16.3
  * Update "Searching..." Cursor
  * Sidebar background color bugfix
  * Fixes for syntax, fulltext zip search, special files
    (gxo#apps/catfish#62)
  * Adds symbolic link icons, better icon updating
    (gxo#apps/catfish#46)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1658059200">- Update to version 4.16.4
  * Add "Open with" right click item and dialog
    (gxo#apps/catfish#12)
  * Add a command-line option for setting default sort method
  * Add Ctrl+A accelerator for the treeview (gxo#apps/catfish#64)
  * Add option to show file size in binary or decimal
  * Cosmetic changes for search entry and delete dialog
  * Fix Ctrl+H not always toggling hidden files
  * Fix DE detection when launched from Electron apps
  * Fix exo file manager lookup for non-existent keys
    (gxo#apps/catfish#64)
  * Fix file manager lookup outside of Xfce
  * Fix GNOME DE detection in Ubuntu
  * Improve application menu appearance
  * Improve default width for the sidebar
  * Prepend the project root directory to sys.path
  * Support running without Xfconf (no preference saving)
  * Switch to using the super() method
  * Use correct executable for elementary Files
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1691323200">- Update to version 4.18.0
  * Filters: Add Archives, Other, update Apps
  * Use Gio to open files, fix "no default app" issue
  * Add symlink emblem to thumbnails in thumbnail mode
  * config: Prefer plocate over mlocate if available
  * window: Avoid IndexError on right click when selection is empty
  * Create shared filetype lists for searching and filtering
  * Ensure site-packages directory is prepended to sys.path
  * Fix double border between sidebar and results area
  * window: Fix and refactor new_column()
  * window: Fix markup warnings in thumbnail view
  * Fix GtkBuilder warnings
  * Revert "Suppress the various GTK warnings GtkBuilder outputs"
  * Fix crash and translations when install prefix != /usr
  * Update `.gitignore`
  * Remove generated file po/catfish.pot
  * Performance improvements (fix #79)
  * Translation Updates
- Refresh 0001-Force-disable-Zeitgeist-support.patch
- Remove _service file</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1700049600">- Use %%{python_module ...} to specify required Python modules to
  build this package.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1706961600">- Skip python312 for now until all required Python modules have been
  built.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220800">- Don't use %%{python_module ...} as we only build for the default
  Python interpreter. python312 still needs to be skipped due to
  python3-distutils!</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220801">- As long as a new Python version does not ship a broken
  python3-distutils, like python311 did in its early days, there is
  no need to deal with or skip a specific python version at all.
  Disable all %%{python_module ...} and skip_python... stuff again.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1747915200">- Update to version 4.20.1
  - build: Require defs.py
  - build: Relax meson requirements
  - build: Document dependency version requirements
  - Prevent selection change on right-click
  - Support opening multiple files with enter key
  - Improve TreeView performance
  - Deprecated exo with libxfce4ui 4.21.0
  - Update files found in real time
  - Display search time in status bar
  - Fix unintended search
  - Add hotkey for copy location
  - Add delete hotkey
  - Rename Files
  - Add a context menu option to send selected files to a folder
  - Complete copyright in about dialog
  - Translation Updates
- Do not use 0001-Force-disable-Zeitgeist-support.patch on Tumbleweed
  as we can now use zeitgeist support
- Added relax-python-requirement.patch needed to relax Python3 version
  on Leap 15.6</changelog>
</package>
<package pkgid="f947ca3c1c2064a4f83cada972e2c0e7a63863b384013fe471da85b41136afad" name="chafa" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="07698f600a74024ce21fcc129f1cd39ee877a015aaaf5ef890f55602c0ba52ab" name="chafa" arch="i586">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="54959a0f3ed1090fa53454bbc5fb5e81473837588aeb8e4683477a72fe326c9d" name="chafa" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="952e358190616f310b50e77d9cf4e7eefaaca50e9d566d834a4f9120a77090c5" name="chafa" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="6cd7baa8ca480a7417ed446ec6d6a07888552d3a827ebd34043368ff25ef511d" name="chafa" arch="src">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="cb85c72d20f34865ab23a285095e42a51d2ccb992ca10c16f9628a82b57b0deb" name="chafa" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="eff82175684ff864a5e4ea3a621fccb17381e6e943b03aab2c4a67e6598cb769" name="chafa-devel" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="f3830103ae7327d45096c2a95461c991abfe46138eea925c81243bf3a096bcc0" name="chafa-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="16ecc754ef8f77f9eed66fb66f4fe87fe6562e9edcd4a64568714d8194ca292e" name="chafa-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="3cc250c1f14abe009f72c6a188e556863e40bfd252cbd5eeb7b84e428df8071d" name="chafa-devel" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="a01b0503628f94c13a68cb5f059b6232a5be905505d3c20bf5619e1c16337959" name="chafa-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="2b93773e6370f79dac20f75567ede98fae9cd3cc9ea6d93fda598c4a98239b73" name="chafa-doc" arch="noarch">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="2298b128460a91abbbe7085abfee76e6e88bd20a45c3f4263a57a9927f06941d" name="cheat" arch="aarch64">
  <version epoch="0" ver="4.4.2" rel="bp156.3.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
</package>
<package pkgid="d790b5ecbcd4567d1fc486a26ce042ff5c3a9145b6de384d3cfd5f6d5dd1fccb" name="cheat" arch="i586">
  <version epoch="0" ver="4.4.2" rel="bp156.3.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
</package>
<package pkgid="853137b4e6782cd06988162fcb7d48397eeec893ebde8012740889315bb6c2cd" name="cheat" arch="ppc64le">
  <version epoch="0" ver="4.4.2" rel="bp156.3.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
</package>
<package pkgid="16bc5f727230754dc53ebc81ea345e7ed750ed419fbd1b6ee57805c0670d24c7" name="cheat" arch="s390x">
  <version epoch="0" ver="4.4.2" rel="bp156.3.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
</package>
<package pkgid="993750dd873719c9cd6ec2a0fa3c08b8aeacc3ed50e0200aa629ae5d5d8cc82c" name="cheat" arch="src">
  <version epoch="0" ver="4.4.2" rel="bp156.3.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
</package>
<package pkgid="344940a38ceb27833e0979362308afe0a5e4d78e10c65c1e6e041d4026ec3706" name="cheat" arch="x86_64">
  <version epoch="0" ver="4.4.2" rel="bp156.3.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
</package>
<package pkgid="dc3246283308fec13d3930e09489b5017b0d5d0981e968c574e6c7e7a7fe830c" name="cheat" arch="aarch64">
  <version epoch="0" ver="4.4.2" rel="bp156.3.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755777600">- bsc#1247629 (CVE-2025-21613):
  * Use go-git 5.13.0 via replace in _service</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755777601">- Packaging improvements:
  * Service go_modules replace dependencies with CVEs
  * Replace github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1
    Fix GO-2025-3754 GHSA-2x5j-vhc8-9cwm
  * Replace golang.org/x/net=golang.org/x/net@v0.36.0
    Fixes GO-2025-3503 CVE-2025-22870
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.35.0
    Fixes GO-2023-2402 CVE-2023-48795 GHSA-45x7-px36-x8w8
    Fixes GO-2025-3487 CVE-2025-22869
  * Replace github.com/go-git/go-git/v5=github.com/go-git/go-git/v5@v5.13.0
    Fixes GO-2025-3367 CVE-2025-21614 GHSA-r9px-m959-cxf4
    Fixes GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m
  * Service tar_scm set mode manual from disabled
  * Service tar_scm create archive from git so we can exclude
    vendor directory upstream committed to git. Committed vendor
    directory contents have build issues even after go mod tidy.
  * Service tar_scm exclude dir vendor
  * Service set_version set mode manual from disabled
  * Service set_version remove param basename not needed</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755864000">- Packaging improvements:
  * Drop Requires: golang-packaging. The recommended Go toolchain
    dependency expression is BuildRequires: golang(API) &gt;= 1.x or
    optionally the metapackage BuildRequires: go
  * Use BuildRequires: golang(API) &gt;= 1.19 matching go.mod
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove go build -o output binary location and name. Default
    binary has the same name as package of func main() and is
    placed in the top level of the build directory.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1764244800">- Security:
  * CVE-2025-47913: Fix client process termination (bsc#1253593)
  * CVE-2025-58181: Fix potential unbounded memory consumption
    (bsc#1253922)
  * CVE-2025-47914: Fix panic due to an out of bounds read
    (bsc#1254051)
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.45.0
  * Replace golang.org/x/net=golang.org/x/net@v0.47.0
  * Replace golang.org/x/sys=golang.org/x/sys@v0.38.0</changelog>
</package>
<package pkgid="8920f80bb714f279e84696372e7d7a51fe24c47f8a74b9f224013fd035cda399" name="cheat" arch="i586">
  <version epoch="0" ver="4.4.2" rel="bp156.3.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755777600">- bsc#1247629 (CVE-2025-21613):
  * Use go-git 5.13.0 via replace in _service</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755777601">- Packaging improvements:
  * Service go_modules replace dependencies with CVEs
  * Replace github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1
    Fix GO-2025-3754 GHSA-2x5j-vhc8-9cwm
  * Replace golang.org/x/net=golang.org/x/net@v0.36.0
    Fixes GO-2025-3503 CVE-2025-22870
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.35.0
    Fixes GO-2023-2402 CVE-2023-48795 GHSA-45x7-px36-x8w8
    Fixes GO-2025-3487 CVE-2025-22869
  * Replace github.com/go-git/go-git/v5=github.com/go-git/go-git/v5@v5.13.0
    Fixes GO-2025-3367 CVE-2025-21614 GHSA-r9px-m959-cxf4
    Fixes GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m
  * Service tar_scm set mode manual from disabled
  * Service tar_scm create archive from git so we can exclude
    vendor directory upstream committed to git. Committed vendor
    directory contents have build issues even after go mod tidy.
  * Service tar_scm exclude dir vendor
  * Service set_version set mode manual from disabled
  * Service set_version remove param basename not needed</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755864000">- Packaging improvements:
  * Drop Requires: golang-packaging. The recommended Go toolchain
    dependency expression is BuildRequires: golang(API) &gt;= 1.x or
    optionally the metapackage BuildRequires: go
  * Use BuildRequires: golang(API) &gt;= 1.19 matching go.mod
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove go build -o output binary location and name. Default
    binary has the same name as package of func main() and is
    placed in the top level of the build directory.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1764244800">- Security:
  * CVE-2025-47913: Fix client process termination (bsc#1253593)
  * CVE-2025-58181: Fix potential unbounded memory consumption
    (bsc#1253922)
  * CVE-2025-47914: Fix panic due to an out of bounds read
    (bsc#1254051)
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.45.0
  * Replace golang.org/x/net=golang.org/x/net@v0.47.0
  * Replace golang.org/x/sys=golang.org/x/sys@v0.38.0</changelog>
</package>
<package pkgid="e20c30140a40fe26abb15372be9fea633788985bcc47bed405f96aae371e47c7" name="cheat" arch="ppc64le">
  <version epoch="0" ver="4.4.2" rel="bp156.3.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755777600">- bsc#1247629 (CVE-2025-21613):
  * Use go-git 5.13.0 via replace in _service</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755777601">- Packaging improvements:
  * Service go_modules replace dependencies with CVEs
  * Replace github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1
    Fix GO-2025-3754 GHSA-2x5j-vhc8-9cwm
  * Replace golang.org/x/net=golang.org/x/net@v0.36.0
    Fixes GO-2025-3503 CVE-2025-22870
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.35.0
    Fixes GO-2023-2402 CVE-2023-48795 GHSA-45x7-px36-x8w8
    Fixes GO-2025-3487 CVE-2025-22869
  * Replace github.com/go-git/go-git/v5=github.com/go-git/go-git/v5@v5.13.0
    Fixes GO-2025-3367 CVE-2025-21614 GHSA-r9px-m959-cxf4
    Fixes GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m
  * Service tar_scm set mode manual from disabled
  * Service tar_scm create archive from git so we can exclude
    vendor directory upstream committed to git. Committed vendor
    directory contents have build issues even after go mod tidy.
  * Service tar_scm exclude dir vendor
  * Service set_version set mode manual from disabled
  * Service set_version remove param basename not needed</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755864000">- Packaging improvements:
  * Drop Requires: golang-packaging. The recommended Go toolchain
    dependency expression is BuildRequires: golang(API) &gt;= 1.x or
    optionally the metapackage BuildRequires: go
  * Use BuildRequires: golang(API) &gt;= 1.19 matching go.mod
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove go build -o output binary location and name. Default
    binary has the same name as package of func main() and is
    placed in the top level of the build directory.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1764244800">- Security:
  * CVE-2025-47913: Fix client process termination (bsc#1253593)
  * CVE-2025-58181: Fix potential unbounded memory consumption
    (bsc#1253922)
  * CVE-2025-47914: Fix panic due to an out of bounds read
    (bsc#1254051)
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.45.0
  * Replace golang.org/x/net=golang.org/x/net@v0.47.0
  * Replace golang.org/x/sys=golang.org/x/sys@v0.38.0</changelog>
</package>
<package pkgid="8a888fb2d34fd6d2ce405bab0bc9aba00242fdd3445a48b2d1adbd68f06dfcb3" name="cheat" arch="s390x">
  <version epoch="0" ver="4.4.2" rel="bp156.3.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755777600">- bsc#1247629 (CVE-2025-21613):
  * Use go-git 5.13.0 via replace in _service</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755777601">- Packaging improvements:
  * Service go_modules replace dependencies with CVEs
  * Replace github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1
    Fix GO-2025-3754 GHSA-2x5j-vhc8-9cwm
  * Replace golang.org/x/net=golang.org/x/net@v0.36.0
    Fixes GO-2025-3503 CVE-2025-22870
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.35.0
    Fixes GO-2023-2402 CVE-2023-48795 GHSA-45x7-px36-x8w8
    Fixes GO-2025-3487 CVE-2025-22869
  * Replace github.com/go-git/go-git/v5=github.com/go-git/go-git/v5@v5.13.0
    Fixes GO-2025-3367 CVE-2025-21614 GHSA-r9px-m959-cxf4
    Fixes GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m
  * Service tar_scm set mode manual from disabled
  * Service tar_scm create archive from git so we can exclude
    vendor directory upstream committed to git. Committed vendor
    directory contents have build issues even after go mod tidy.
  * Service tar_scm exclude dir vendor
  * Service set_version set mode manual from disabled
  * Service set_version remove param basename not needed</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755864000">- Packaging improvements:
  * Drop Requires: golang-packaging. The recommended Go toolchain
    dependency expression is BuildRequires: golang(API) &gt;= 1.x or
    optionally the metapackage BuildRequires: go
  * Use BuildRequires: golang(API) &gt;= 1.19 matching go.mod
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove go build -o output binary location and name. Default
    binary has the same name as package of func main() and is
    placed in the top level of the build directory.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1764244800">- Security:
  * CVE-2025-47913: Fix client process termination (bsc#1253593)
  * CVE-2025-58181: Fix potential unbounded memory consumption
    (bsc#1253922)
  * CVE-2025-47914: Fix panic due to an out of bounds read
    (bsc#1254051)
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.45.0
  * Replace golang.org/x/net=golang.org/x/net@v0.47.0
  * Replace golang.org/x/sys=golang.org/x/sys@v0.38.0</changelog>
</package>
<package pkgid="69cb538a2a1f3431fa982d76dae3c71843adc744ee05586a5e5e0e9c54f9b11a" name="cheat" arch="src">
  <version epoch="0" ver="4.4.2" rel="bp156.3.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755777600">- bsc#1247629 (CVE-2025-21613):
  * Use go-git 5.13.0 via replace in _service</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755777601">- Packaging improvements:
  * Service go_modules replace dependencies with CVEs
  * Replace github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1
    Fix GO-2025-3754 GHSA-2x5j-vhc8-9cwm
  * Replace golang.org/x/net=golang.org/x/net@v0.36.0
    Fixes GO-2025-3503 CVE-2025-22870
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.35.0
    Fixes GO-2023-2402 CVE-2023-48795 GHSA-45x7-px36-x8w8
    Fixes GO-2025-3487 CVE-2025-22869
  * Replace github.com/go-git/go-git/v5=github.com/go-git/go-git/v5@v5.13.0
    Fixes GO-2025-3367 CVE-2025-21614 GHSA-r9px-m959-cxf4
    Fixes GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m
  * Service tar_scm set mode manual from disabled
  * Service tar_scm create archive from git so we can exclude
    vendor directory upstream committed to git. Committed vendor
    directory contents have build issues even after go mod tidy.
  * Service tar_scm exclude dir vendor
  * Service set_version set mode manual from disabled
  * Service set_version remove param basename not needed</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755864000">- Packaging improvements:
  * Drop Requires: golang-packaging. The recommended Go toolchain
    dependency expression is BuildRequires: golang(API) &gt;= 1.x or
    optionally the metapackage BuildRequires: go
  * Use BuildRequires: golang(API) &gt;= 1.19 matching go.mod
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove go build -o output binary location and name. Default
    binary has the same name as package of func main() and is
    placed in the top level of the build directory.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1764244800">- Security:
  * CVE-2025-47913: Fix client process termination (bsc#1253593)
  * CVE-2025-58181: Fix potential unbounded memory consumption
    (bsc#1253922)
  * CVE-2025-47914: Fix panic due to an out of bounds read
    (bsc#1254051)
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.45.0
  * Replace golang.org/x/net=golang.org/x/net@v0.47.0
  * Replace golang.org/x/sys=golang.org/x/sys@v0.38.0</changelog>
</package>
<package pkgid="e376a064eb7284d4daeafbb7c1014caf6df8e17f93239ec75d2ae7df6693f00b" name="cheat" arch="x86_64">
  <version epoch="0" ver="4.4.2" rel="bp156.3.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755777600">- bsc#1247629 (CVE-2025-21613):
  * Use go-git 5.13.0 via replace in _service</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755777601">- Packaging improvements:
  * Service go_modules replace dependencies with CVEs
  * Replace github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1
    Fix GO-2025-3754 GHSA-2x5j-vhc8-9cwm
  * Replace golang.org/x/net=golang.org/x/net@v0.36.0
    Fixes GO-2025-3503 CVE-2025-22870
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.35.0
    Fixes GO-2023-2402 CVE-2023-48795 GHSA-45x7-px36-x8w8
    Fixes GO-2025-3487 CVE-2025-22869
  * Replace github.com/go-git/go-git/v5=github.com/go-git/go-git/v5@v5.13.0
    Fixes GO-2025-3367 CVE-2025-21614 GHSA-r9px-m959-cxf4
    Fixes GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m
  * Service tar_scm set mode manual from disabled
  * Service tar_scm create archive from git so we can exclude
    vendor directory upstream committed to git. Committed vendor
    directory contents have build issues even after go mod tidy.
  * Service tar_scm exclude dir vendor
  * Service set_version set mode manual from disabled
  * Service set_version remove param basename not needed</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755864000">- Packaging improvements:
  * Drop Requires: golang-packaging. The recommended Go toolchain
    dependency expression is BuildRequires: golang(API) &gt;= 1.x or
    optionally the metapackage BuildRequires: go
  * Use BuildRequires: golang(API) &gt;= 1.19 matching go.mod
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove go build -o output binary location and name. Default
    binary has the same name as package of func main() and is
    placed in the top level of the build directory.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1764244800">- Security:
  * CVE-2025-47913: Fix client process termination (bsc#1253593)
  * CVE-2025-58181: Fix potential unbounded memory consumption
    (bsc#1253922)
  * CVE-2025-47914: Fix panic due to an out of bounds read
    (bsc#1254051)
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.45.0
  * Replace golang.org/x/net=golang.org/x/net@v0.47.0
  * Replace golang.org/x/sys=golang.org/x/sys@v0.38.0</changelog>
</package>
<package pkgid="271852b283e484662e61390bfba599d3d5d0d83da5656e8b56d8e567a580f75d" name="chmlib" arch="src">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1148299200">- Initial package of version 0.37.4</changelog>
  <changelog author="schwab@suse.de" date="1149336000">- Port to all future systems.</changelog>
  <changelog author="stbinner@suse.de" date="1155124800">- update to version 0.38:
  * fix extract_chmLib directory traversal problem (#197808)
  * bugfix to allow successful reading of more chm files</changelog>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="ca1774d466311508f622118d86aa36b2e1f9836cd91a712004f9f189295e16a9" name="chmlib-devel" arch="aarch64">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="d20573d05e0032a9ebda7cd120449410fe1f232acd6989ca0e404726cebea16c" name="chmlib-devel" arch="i586">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="f92590072b302c25d3d359c2d3d76cd5162662b9ff2b4d614fdea935af9c46ad" name="chmlib-devel" arch="ppc64le">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="e3062f2e0387a11d536e80725fa3fba8d76f7bd9260d08ab0e396d686ee35f0e" name="chmlib-devel" arch="s390x">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="5319d10f59a74fd4c21d765f3a3c15c78b85e1fac74b64d8640c4d4c0c25b248" name="chmlib-devel" arch="x86_64">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="aa515e2f7cf4a08a38c225b7c2c27d829796fb0cf25b68325c28101b938f47ca" name="chmlib-devel-32bit" arch="x86_64">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="40e0c290dc53033246629be840efcb26e0141e8dd9bf9fd780ad09ef6c49cf86" name="chmlib-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="572edd75909af6dfd002b7e2df5452158d9dfb34f37e153342b240a25c3a6d81" name="chmlib-examples" arch="aarch64">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="316462c8fa2ea3a54f66a74c3d0d216cb69c5be2e1f242e8a38ae3a48e5ee73b" name="chmlib-examples" arch="i586">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="6252d93411eebc5b8b0c2a9aecb5c4e9660ba92ebafad714f3545017aec0aaae" name="chmlib-examples" arch="ppc64le">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="2d1d66364df18e700d861906ab9ea31798b487a344991efc1cd300760b586050" name="chmlib-examples" arch="s390x">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="b33442225bd521259790f0bca130cc3cae439581e344879e6fbd61a4932da8a8" name="chmlib-examples" arch="x86_64">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="b39dbd6524ed95e4e79bb8e5ac3b2a81d936889504230b5d080b518a6fd6a650" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="125.0.6422.141" rel="bp156.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1705147200">- Chromium 120.0.6099.216 (boo#1217839, boo#1218048, boo#1218302,
  boo#1218533, boo#1218719)
  * CVE-2024-0333: Insufficient data validation in Extensions
  * CVE-2024-0222: Use after free in ANGLE
  * CVE-2024-0223: Heap buffer overflow in ANGLE
  * CVE-2024-0224: Use after free in WebAudio
  * CVE-2024-0225: Use after free in WebGPU
  * CVE-2023-7024: Heap buffer overflow in WebRTC
  * CVE-2023-6702: Type Confusion in V8
  * CVE-2023-6703: Use after free in Blink
  * CVE-2023-6704: Use after free in libavif (boo#1218303)
  * CVE-2023-6705: Use after free in WebRTC
  * CVE-2023-6706: Use after free in FedCM
  * CVE-2023-6707: Use after free in CSS
  * CVE-2023-6508: Use after free in Media Stream
  * CVE-2023-6509: Use after free in Side Panel Search
  * CVE-2023-6510: Use after free in Media Capture
  * CVE-2023-6511: Inappropriate implementation in Autofill
  * CVE-2023-6512: Inappropriate implementation in Web Browser UI
- drop patches:
  * chromium-system-libusb.patch
  * chromium-119-nullptr_t-without-namespace-std.patch
  * chromium-119-no_matching_constructor.patch
  * chromium-117-workaround_clang_bug-structured_binding.patch
- add patches:
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-emplace.patch
  * chromium-120-lp155-typename.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-emplace-struct.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
- add patches for Leap that revert braking changes:
  * chromium-120-lp155-revert-clang-build-failure.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1705233600">- Replace chromium-120-lp155-revert-clang-build-failure.patch
  with chromium-120-make_unique-struct.patch - which avoids
  reverting changes and instead provides a stub constructor to fix
  build on Leap</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1705492800">- Chromium 120.0.6099.224 (boo#1218892)
  * CVE-2024-0517: Out of bounds write in V8
  * CVE-2024-0518: Type Confusion in V8
  * CVE-2024-0519: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709380800">- Chromium 121.0.6167.184 (boo#1219118, boo#1219387, boo#1219661)
  * CVE-2024-1284: Use after free in Mojo
  * CVE-2024-1283: Heap buffer overflow in Skia
  * CVE-2024-1060: Use after free in Canvas
  * CVE-2024-1059: Use after free in WebRTC
  * CVE-2024-1077: Use after free in Network
  * CVE-2024-0807: Use after free in WebAudio
  * CVE-2024-0812: Inappropriate implementation in Accessibility
  * CVE-2024-0808: Integer underflow in WebUI
  * CVE-2024-0810: Insufficient policy enforcement in DevTools
  * CVE-2024-0814: Incorrect security UI in Payments
  * CVE-2024-0813: Use after free in Reading Mode
  * CVE-2024-0806: Use after free in Passwords
  * CVE-2024-0805: Inappropriate implementation in Downloads
  * CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
  * CVE-2024-0811: Inappropriate implementation in Extensions API
  * CVE-2024-0809: Inappropriate implementation in Autofill
- Removed patches:
  * chromium-117-includes.patch
  * chromium-118-includes.patch
  * chromium-119-dont-redefine-ATSPI-version-macros.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
  * gcc13-fix.patch
  * chromium-113-webauth-include-variant.patch
  * chromium-110-system-libffi.patch
- Added patches:
  * chromium-121-no_matching_constructor.patch
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-121-workaround_clang_bug-structured_binding.patch
  * chromium-121-missing-header-files.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-python3-invalid-escape-sequence.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-avoid-SFINAE-TypeConverter.patch
  * chromium-121-blink-libxml-const.patch
- Add patch chromium-disable-FFmpegAllowLists.patch:
  disable codec checker this will always fail (bsc#1219070)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
</package>
<package pkgid="b4682b429b910a038059c2018e0665466fccd1595ba2a5ef904f1a44b20f2302" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="125.0.6422.141" rel="bp156.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1705147200">- Chromium 120.0.6099.216 (boo#1217839, boo#1218048, boo#1218302,
  boo#1218533, boo#1218719)
  * CVE-2024-0333: Insufficient data validation in Extensions
  * CVE-2024-0222: Use after free in ANGLE
  * CVE-2024-0223: Heap buffer overflow in ANGLE
  * CVE-2024-0224: Use after free in WebAudio
  * CVE-2024-0225: Use after free in WebGPU
  * CVE-2023-7024: Heap buffer overflow in WebRTC
  * CVE-2023-6702: Type Confusion in V8
  * CVE-2023-6703: Use after free in Blink
  * CVE-2023-6704: Use after free in libavif (boo#1218303)
  * CVE-2023-6705: Use after free in WebRTC
  * CVE-2023-6706: Use after free in FedCM
  * CVE-2023-6707: Use after free in CSS
  * CVE-2023-6508: Use after free in Media Stream
  * CVE-2023-6509: Use after free in Side Panel Search
  * CVE-2023-6510: Use after free in Media Capture
  * CVE-2023-6511: Inappropriate implementation in Autofill
  * CVE-2023-6512: Inappropriate implementation in Web Browser UI
- drop patches:
  * chromium-system-libusb.patch
  * chromium-119-nullptr_t-without-namespace-std.patch
  * chromium-119-no_matching_constructor.patch
  * chromium-117-workaround_clang_bug-structured_binding.patch
- add patches:
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-emplace.patch
  * chromium-120-lp155-typename.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-emplace-struct.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
- add patches for Leap that revert braking changes:
  * chromium-120-lp155-revert-clang-build-failure.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1705233600">- Replace chromium-120-lp155-revert-clang-build-failure.patch
  with chromium-120-make_unique-struct.patch - which avoids
  reverting changes and instead provides a stub constructor to fix
  build on Leap</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1705492800">- Chromium 120.0.6099.224 (boo#1218892)
  * CVE-2024-0517: Out of bounds write in V8
  * CVE-2024-0518: Type Confusion in V8
  * CVE-2024-0519: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709380800">- Chromium 121.0.6167.184 (boo#1219118, boo#1219387, boo#1219661)
  * CVE-2024-1284: Use after free in Mojo
  * CVE-2024-1283: Heap buffer overflow in Skia
  * CVE-2024-1060: Use after free in Canvas
  * CVE-2024-1059: Use after free in WebRTC
  * CVE-2024-1077: Use after free in Network
  * CVE-2024-0807: Use after free in WebAudio
  * CVE-2024-0812: Inappropriate implementation in Accessibility
  * CVE-2024-0808: Integer underflow in WebUI
  * CVE-2024-0810: Insufficient policy enforcement in DevTools
  * CVE-2024-0814: Incorrect security UI in Payments
  * CVE-2024-0813: Use after free in Reading Mode
  * CVE-2024-0806: Use after free in Passwords
  * CVE-2024-0805: Inappropriate implementation in Downloads
  * CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
  * CVE-2024-0811: Inappropriate implementation in Extensions API
  * CVE-2024-0809: Inappropriate implementation in Autofill
- Removed patches:
  * chromium-117-includes.patch
  * chromium-118-includes.patch
  * chromium-119-dont-redefine-ATSPI-version-macros.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
  * gcc13-fix.patch
  * chromium-113-webauth-include-variant.patch
  * chromium-110-system-libffi.patch
- Added patches:
  * chromium-121-no_matching_constructor.patch
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-121-workaround_clang_bug-structured_binding.patch
  * chromium-121-missing-header-files.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-python3-invalid-escape-sequence.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-avoid-SFINAE-TypeConverter.patch
  * chromium-121-blink-libxml-const.patch
- Add patch chromium-disable-FFmpegAllowLists.patch:
  disable codec checker this will always fail (bsc#1219070)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
</package>
<package pkgid="44f9fe7053f9fa7eaeb6654ed65890a434bc0bb84f591a27ef2aff8d1ba9d7c6" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="126.0.6478.126" rel="bp156.2.6.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709380800">- Chromium 121.0.6167.184 (boo#1219118, boo#1219387, boo#1219661)
  * CVE-2024-1284: Use after free in Mojo
  * CVE-2024-1283: Heap buffer overflow in Skia
  * CVE-2024-1060: Use after free in Canvas
  * CVE-2024-1059: Use after free in WebRTC
  * CVE-2024-1077: Use after free in Network
  * CVE-2024-0807: Use after free in WebAudio
  * CVE-2024-0812: Inappropriate implementation in Accessibility
  * CVE-2024-0808: Integer underflow in WebUI
  * CVE-2024-0810: Insufficient policy enforcement in DevTools
  * CVE-2024-0814: Incorrect security UI in Payments
  * CVE-2024-0813: Use after free in Reading Mode
  * CVE-2024-0806: Use after free in Passwords
  * CVE-2024-0805: Inappropriate implementation in Downloads
  * CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
  * CVE-2024-0811: Inappropriate implementation in Extensions API
  * CVE-2024-0809: Inappropriate implementation in Autofill
- Removed patches:
  * chromium-117-includes.patch
  * chromium-118-includes.patch
  * chromium-119-dont-redefine-ATSPI-version-macros.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
  * gcc13-fix.patch
  * chromium-113-webauth-include-variant.patch
  * chromium-110-system-libffi.patch
- Added patches:
  * chromium-121-no_matching_constructor.patch
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-121-workaround_clang_bug-structured_binding.patch
  * chromium-121-missing-header-files.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-python3-invalid-escape-sequence.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-avoid-SFINAE-TypeConverter.patch
  * chromium-121-blink-libxml-const.patch
- Add patch chromium-disable-FFmpegAllowLists.patch:
  disable codec checker this will always fail (bsc#1219070)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
</package>
<package pkgid="41c67a4446033ce907fadf4981cc7cee07ea34ca4f6af1df5c22ef380ad50f95" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="126.0.6478.126" rel="bp156.2.6.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709380800">- Chromium 121.0.6167.184 (boo#1219118, boo#1219387, boo#1219661)
  * CVE-2024-1284: Use after free in Mojo
  * CVE-2024-1283: Heap buffer overflow in Skia
  * CVE-2024-1060: Use after free in Canvas
  * CVE-2024-1059: Use after free in WebRTC
  * CVE-2024-1077: Use after free in Network
  * CVE-2024-0807: Use after free in WebAudio
  * CVE-2024-0812: Inappropriate implementation in Accessibility
  * CVE-2024-0808: Integer underflow in WebUI
  * CVE-2024-0810: Insufficient policy enforcement in DevTools
  * CVE-2024-0814: Incorrect security UI in Payments
  * CVE-2024-0813: Use after free in Reading Mode
  * CVE-2024-0806: Use after free in Passwords
  * CVE-2024-0805: Inappropriate implementation in Downloads
  * CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
  * CVE-2024-0811: Inappropriate implementation in Extensions API
  * CVE-2024-0809: Inappropriate implementation in Autofill
- Removed patches:
  * chromium-117-includes.patch
  * chromium-118-includes.patch
  * chromium-119-dont-redefine-ATSPI-version-macros.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
  * gcc13-fix.patch
  * chromium-113-webauth-include-variant.patch
  * chromium-110-system-libffi.patch
- Added patches:
  * chromium-121-no_matching_constructor.patch
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-121-workaround_clang_bug-structured_binding.patch
  * chromium-121-missing-header-files.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-python3-invalid-escape-sequence.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-avoid-SFINAE-TypeConverter.patch
  * chromium-121-blink-libxml-const.patch
- Add patch chromium-disable-FFmpegAllowLists.patch:
  disable codec checker this will always fail (bsc#1219070)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
</package>
<package pkgid="0d417b18befa3b1640526138979adbfde29a8031ae7e211bfdb9ad5087813931" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="126.0.6478.182" rel="bp156.2.11.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="4315fb26a1753f46ebae99de7e124cd3b301a96a5b8961ffcecd60420e0faf38" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="126.0.6478.182" rel="bp156.2.11.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="68f33171150ff24809895fe9d789f170bab037ab49ade914101481837c8219b2" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="127.0.6533.119" rel="bp156.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
</package>
<package pkgid="8340aeebfc706371eb87346725fbd1291718d76536622231285e618d54b13686" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="127.0.6533.119" rel="bp156.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
</package>
<package pkgid="9c4dda2c377182cad64b457538db3f2fa79312019ec1c102c94d3c5ce6d6b701" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="128.0.6613.113" rel="bp156.2.20.1"/>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
</package>
<package pkgid="7e1d98ca17d8deaf6d47f19d4f9d52303078bf51cb6e702d515567b75397f797" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="128.0.6613.113" rel="bp156.2.20.1"/>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
</package>
<package pkgid="59535e75349b76a228776731afe93bae18b49355943f1eb37d77a9bc00b6bec9" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="128.0.6613.119" rel="bp156.2.23.1"/>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
</package>
<package pkgid="16ea99d228514dad14544b8f6647267af119fb5ea2b8aee33741487f8c9e5eb4" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="128.0.6613.119" rel="bp156.2.23.1"/>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
</package>
<package pkgid="2c6d1e8fa262a7ca8bc2e9a4f7f514957f5f046e2a78b6dedcac9098e7e12f07" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="128.0.6613.137" rel="bp156.2.26.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
</package>
<package pkgid="a404f6133d924be33e6fe8058986ce4d190f39efbd0a453fa0bc129835e5dad4" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="128.0.6613.137" rel="bp156.2.26.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
</package>
<package pkgid="fc79f37554b571097500bad59c0bd9cc20daee41ec4c4a89be6b01dfe5d018e1" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="128.0.6613.84" rel="bp156.2.17.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="fc7ede701fe45d0b07956f8957d7d96a81cb16ce931689007bfbaf654973b91c" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="128.0.6613.84" rel="bp156.2.17.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="b8597317daabb80cef73ef52056120a7d72e5c9dc657d19867223e469ab22f07" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="129.0.6668.100" rel="bp156.2.38.1"/>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
</package>
<package pkgid="b86eb6a11669202322ad5e8c1d3321a06c306f6c32d2b5fbaa553831b3f11f5f" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="129.0.6668.100" rel="bp156.2.38.1"/>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
</package>
<package pkgid="6369f90fdb213e72ee7193580712aa8de46b9fc5f4525f4fe9b684760168b0f2" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="129.0.6668.58" rel="bp156.2.29.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
</package>
<package pkgid="7cb80fb3d46396aa03a33480bfc695fc501115b33e171ca34881ffb076949562" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="129.0.6668.58" rel="bp156.2.29.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
</package>
<package pkgid="8b73080e93cba2d6b545f7e2e5cfb838c17e3e4371f10c8ddda5351b8869123d" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="129.0.6668.70" rel="bp156.2.32.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
</package>
<package pkgid="712bc838544e99c5b465e6db5f52d771e61312c6625c0d619956c182b76d4f05" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="129.0.6668.70" rel="bp156.2.32.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
</package>
<package pkgid="fddda238950ff8161dfb721aa147e8fb724c993fad7f7fb6ed1eebae3c3d8b57" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="129.0.6668.89" rel="bp156.2.35.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="ecf91d8ae7db651c3f4330da7becda7d3c72cde9ecdb19fc2b473e217b428bba" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="129.0.6668.89" rel="bp156.2.35.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="c919277b8704aa77a6a5fbe95fceac350f2518cf737f33f91b5c78e8b8e46bad" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="130.0.6723.116" rel="bp156.2.50.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
</package>
<package pkgid="c33f90ff8d92ee3557873453dca48afd887ce63d0a9935bf93c6643c25fc9dec" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="130.0.6723.116" rel="bp156.2.50.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
</package>
<package pkgid="7f24d3dc17f9f944ee75067355ee377022e62a6e4149d51269f4f5db03f21d78" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="130.0.6723.58" rel="bp156.2.41.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
</package>
<package pkgid="14fb1d90895dc530ac6080a6646abb3ac0a8d4b9922ed8aa95aa41df7454f498" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="130.0.6723.58" rel="bp156.2.41.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
</package>
<package pkgid="dc1304507e82d8b165267a9291a34320be51584669201143e2256c54589c7adb" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="130.0.6723.69" rel="bp156.2.44.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
</package>
<package pkgid="9e9abec2e406310a72f1a7a8b744033efb2eb9b5056cf2d21728715902d1417c" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="130.0.6723.69" rel="bp156.2.44.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
</package>
<package pkgid="73fb0be31afce5f4c7cec6f813ba7d81aa8b4c6038738f0e2e17486cb3374bb3" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="130.0.6723.91" rel="bp156.2.47.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
</package>
<package pkgid="415a94136e605aaf146469ceb92b55c4fd36abaf108975104469af979148822d" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="130.0.6723.91" rel="bp156.2.47.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
</package>
<package pkgid="3308bf29aac6e3549af4dd58ad978b540607fe26651794b35cf7eb88ea2b48bc" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="131.0.6778.108" rel="bp156.2.59.1"/>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
</package>
<package pkgid="92588b86e6a7fc87be8350b9f41022162d4c7341bb9fbdefa46d6e1fabc9db3f" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="131.0.6778.108" rel="bp156.2.59.1"/>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
</package>
<package pkgid="6946d7e4c704386bc82ecc7824fa672ed8c7efb6568deaf4214ca8f4aa01fcb3" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="131.0.6778.139" rel="bp156.2.62.1"/>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="ca1bea4815e57acd65a63aaae58961e4f0df877ec5cbe5b62dd0354bb0cd4a3a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="131.0.6778.139" rel="bp156.2.62.1"/>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="ea670a335539c7a0a39f4170c961e32edf1f7445c12b01120653342916359bf3" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="131.0.6778.204" rel="bp156.2.65.1"/>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="42bf6998f20363990dc09a2cf9e184a7eaae2b63ffb25577c0b2681f33ca9abc" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="131.0.6778.204" rel="bp156.2.65.1"/>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="9c7ebfa3a91709c759ac8097755179c8c0a35121ef6a32db16b90e520610a0b1" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="131.0.6778.69" rel="bp156.2.53.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
</package>
<package pkgid="a3fde21100406d58ebe132e1ba969088facc9aaedd40d6692bbe94c4a23e5923" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="131.0.6778.69" rel="bp156.2.53.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
</package>
<package pkgid="75b2c0002537b9c4245489f81a98b78b85d2588d795b59620a5bb2290d8cf39b" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="131.0.6778.85" rel="bp156.2.56.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
</package>
<package pkgid="d7f1ac39c025e86785497949804e7a68cec573fb32fe6c220726380cdf3cc14b" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="131.0.6778.85" rel="bp156.2.56.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
</package>
<package pkgid="21b835b19579feaac12ffd271f91536859737c6141ac437c32879be9699ed0b1" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="132.0.6834.110" rel="bp156.2.72.1"/>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="a00d2171abd50404256c0fe9a36c4b315b2a903f70a17567da9e95d8e5506624" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="132.0.6834.110" rel="bp156.2.72.1"/>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="b63325e90b668d225395479e0b4dadc14e1a17f48f5fc36c0f050adc3314f8a2" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="132.0.6834.159" rel="bp156.2.75.1"/>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
</package>
<package pkgid="4bd7774e0750eebc23610dd5a805b5379f682115e9bbf9f29cb3f19fd0734f1c" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="132.0.6834.159" rel="bp156.2.75.1"/>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
</package>
<package pkgid="bcb1d1e424c107bcb95d91745d77d84315fc64986fc731d6c719ae3762612bc8" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="132.0.6834.83" rel="bp156.2.69.1"/>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
</package>
<package pkgid="52219d2662d734863e368f289dcfa6783ab14d19b1bf882f889ab357e8b01532" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="132.0.6834.83" rel="bp156.2.69.1"/>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
</package>
<package pkgid="046babb3652ec3d8e4133f4c247e4d68f71bca841a5a43d2ca0c071b8eb72bdd" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="133.0.6943.126" rel="bp156.2.84.1"/>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
</package>
<package pkgid="db66b298686b06010d797e5e4d7b9da3641c34fd932ba9986a78bec96510006f" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="133.0.6943.126" rel="bp156.2.84.1"/>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
</package>
<package pkgid="4c65939e28a08ab6b32afcca7253be9d0bf9ba4ee509aee07ba25fe6df74f9b1" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="133.0.6943.141" rel="bp156.2.87.1"/>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="ffdc85cb16574fec56c35729ee9545d83dc89073e2fe0921172b6679d89aff48" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="133.0.6943.141" rel="bp156.2.87.1"/>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="ee4aa18cf98ab7f348f4e8828c33d3a483eacbcdbe0a039f563f3dc4e1e24533" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="133.0.6943.53" rel="bp156.2.78.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="802cbb025684c45b692c1b66053f69d6e159e9f167b486dd010e3b0a01fcb462" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="133.0.6943.53" rel="bp156.2.78.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="63bcbdebb3e097d975f77b006ffff38dc4577b7250a12110424127bf64084691" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="133.0.6943.98" rel="bp156.2.81.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="74ee6e468f7d2cab9573a88c068763fe525631bfbdc19c82e00fdd1fac307929" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="133.0.6943.98" rel="bp156.2.81.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="fdaa07fb2608f28f4e98fe62949acdc3d4b879c0a02a51decb6969e594e22061" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="134.0.6998.117" rel="bp156.2.96.1"/>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
</package>
<package pkgid="54d8e7c158f25b715c842501505e4b4c2495c1d224230f66d11c13746255cc13" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="134.0.6998.117" rel="bp156.2.96.1"/>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
</package>
<package pkgid="2c29f8f4e8f801cb9df84733770d0f0e4326d8be35c29e9eb35e09139717a1f1" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="134.0.6998.165" rel="bp156.2.99.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- disable not needed chromium-120-make_unique-struct.patch
  (context boo#1239780)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
</package>
<package pkgid="4e3456af1eb5dddc55586c93e293b174a25dd3c08ed9fb30db3f04776335f93f" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="134.0.6998.165" rel="bp156.2.99.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- disable not needed chromium-120-make_unique-struct.patch
  (context boo#1239780)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
</package>
<package pkgid="987e33895f2429618f528dba362683f608e2c8d9e7f145c20cba40231e930745" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="134.0.6998.35" rel="bp156.2.90.1"/>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
</package>
<package pkgid="331c1490889d97247db347f93bf3959b2bbd917dcf304a6f8a332a28f76a72da" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="134.0.6998.35" rel="bp156.2.90.1"/>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
</package>
<package pkgid="ba0161a44efde87d331543cc195a27386c8efc4f52013d90c5f81531e3927631" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="134.0.6998.88" rel="bp156.2.93.1"/>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
</package>
<package pkgid="c5952b691f8b8cd7785f6dd8902ef589bec25387e9a232a21ebb1a096a537fc7" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="134.0.6998.88" rel="bp156.2.93.1"/>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
</package>
<package pkgid="5fee23967cdcc0a8fa68547c1121340a3f74942ad39e644afaccc21e9db6afab" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="135.0.7049.52" rel="bp156.2.102.2"/>
  <changelog author="ro@suse.de" date="1738238400">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238401">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
</package>
<package pkgid="78cce98c4a56c97a3cc95e266026c5063e474834bf6236adc6837d74a586f4fd" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="135.0.7049.52" rel="bp156.2.102.2"/>
  <changelog author="ro@suse.de" date="1738238400">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238401">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
</package>
<package pkgid="de0015c177fdb0458dc1c4b7ed3985132cd080f72807658f8fd17a687b01855a" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="135.0.7049.84" rel="bp156.2.107.1"/>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
</package>
<package pkgid="49be672364790ccec32342bfb8b7db2059287e14681cd02b8cf4faf121a9f6f4" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="135.0.7049.84" rel="bp156.2.107.1"/>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
</package>
<package pkgid="23a865ee59177049a3febebd90bee5d92e83a877b2c58c2728d3e003a7eecb74" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="135.0.7049.95" rel="bp156.2.110.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448000">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
</package>
<package pkgid="998e057a3103f7bb3876e8e57ae93f615279ec1157bd85bf939d9dcf2448a69c" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="135.0.7049.95" rel="bp156.2.110.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448000">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
</package>
<package pkgid="81679a2cdeceb8185a63ea3a0bbf6fa5e20c38d819b10c39d04a15498020b2cc" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="136.0.7103.113" rel="bp156.2.119.1"/>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
</package>
<package pkgid="fb5783c08405203c5699a071f659152de9930d4e5b22958c34fe93154e2196d9" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="136.0.7103.113" rel="bp156.2.119.1"/>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
</package>
<package pkgid="cb53b5ebbd090e510439af441922850fdb23e330040097dabac45fa30912fcbc" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="136.0.7103.59" rel="bp156.2.113.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
</package>
<package pkgid="2e9ede19b9abef044dd9a29ba0d2e710130f1bd4d94ab869657cbe4485d8c015" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="136.0.7103.59" rel="bp156.2.113.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
</package>
<package pkgid="0f93e8036e2d09ba7c7193d4482654f4bc4dc12b041dfb7d35f537ec87b047dd" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="136.0.7103.92" rel="bp156.2.116.1"/>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
</package>
<package pkgid="d1e691e07c8ad31e782caa9b6dfcfa1b661c4b7205928f5395ffb3c357683b26" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="136.0.7103.92" rel="bp156.2.116.1"/>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
</package>
<package pkgid="958a539489502e0a00ea7607d1fd513baa45eb9e03400af7d2f9199c10716e99" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="137.0.7151.103" rel="bp156.2.128.1"/>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
</package>
<package pkgid="e3b0435219f0a394b9a53fd633ee577715ac07043fc2848169a1c041ee95e601" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="137.0.7151.103" rel="bp156.2.128.1"/>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
</package>
<package pkgid="c3ef3d89d973352031fee83369fae1c069f324024abce5606482160ab7ec1763" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="137.0.7151.103" rel="bp156.2.128.1"/>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
</package>
<package pkgid="ba30db857e7eadbb82e42ad392b1536e97873f45c8ca3c8ddf05b1baa373f942" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="137.0.7151.119" rel="bp156.2.131.1"/>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
</package>
<package pkgid="0c422a271c5b1e43bb1c24cae9fe84d90af62019cf21704b52d523a5632533ec" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="137.0.7151.119" rel="bp156.2.131.1"/>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
</package>
<package pkgid="432fec94b25f2176e9a80975a7b6579a95b36b48257006ecf8a40c2b42b5a4a5" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="137.0.7151.119" rel="bp156.2.131.1"/>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
</package>
<package pkgid="1f3dbcd94a75a34ad8b56b9c2d319960b8d8b081a3ff208c1bd950ca734fa7d0" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="137.0.7151.55" rel="bp156.2.122.2"/>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
</package>
<package pkgid="5384cb5096ee63a4ec04c9c404eafa4707195c6ce6260fe108e2f245a96e8e08" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="137.0.7151.55" rel="bp156.2.122.2"/>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
</package>
<package pkgid="ff8478846927d533c1a21894d8a971d9093e2f4de8c06669353adea0b5a33e73" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="137.0.7151.68" rel="bp156.2.125.2"/>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
</package>
<package pkgid="53cb13944d2f054962f48f92bacfbb00d79b635fe6dd22b9697767ff92f7f69b" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="137.0.7151.68" rel="bp156.2.125.2"/>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
</package>
<package pkgid="684963ace3f50e6ab2e93db14aabae2d52666dae5336649d99630ee694551a39" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="137.0.7151.68" rel="bp156.2.125.2"/>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
</package>
<package pkgid="7cf5f65a6938088940f0d59f11965570609db2a76220fd239a74948b7b8b9847" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="138.0.7204.157" rel="bp156.2.141.1"/>
  <changelog author="ro@suse.de" date="1744113600">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745409600">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747224000">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
</package>
<package pkgid="02d96c5cfba685cf57fe90cde01e77b7b549182d4e2d3787810a6b4f73bcefe0" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="138.0.7204.157" rel="bp156.2.141.1"/>
  <changelog author="ro@suse.de" date="1744113600">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745409600">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747224000">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
</package>
<package pkgid="6bbf333a7849bb784ec78337c556c6a23f842d93b3a3cb00260006f6334583d5" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="138.0.7204.157" rel="bp156.2.141.1"/>
  <changelog author="ro@suse.de" date="1744113600">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745409600">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747224000">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
</package>
<package pkgid="f16ca6f16ea3709e529cf97fbcd51d383861a0c98e193f4b0af79af8ab22b305" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="138.0.7204.168" rel="bp156.2.144.1"/>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745409600">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747224000">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="f3489ebdd73dd5886c9cb702ba959c7a6c3aeee0f9dee46d866786e5ec6d3924" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="138.0.7204.168" rel="bp156.2.144.1"/>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745409600">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747224000">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="3567c291e9e8336c3c69ab4859f4b92030f0403603cda1fb67541adac299246d" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="138.0.7204.183" rel="bp156.2.147.1"/>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
</package>
<package pkgid="e60d7ab7476acb033775e55f6768413b0f4b3332c9fc5d33a14c951cc6c117c3" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="138.0.7204.183" rel="bp156.2.147.1"/>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
</package>
<package pkgid="8958ff66d4555f908b783830eacaecbed717a20c74a7ddbf6dea72a697352414" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="138.0.7204.183" rel="bp156.2.147.1"/>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
</package>
<package pkgid="49c395a6987d17cfc671a96e5c081a60201aa921f762861a4a4954d727d40c63" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="138.0.7204.96" rel="bp156.2.138.1"/>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
</package>
<package pkgid="c9c28de7a6fac5e7e9ac3b4a63869d95fe6f0043f2d2573a98e8eefb1353a27d" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="138.0.7204.96" rel="bp156.2.138.1"/>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
</package>
<package pkgid="451b1cc8a708c049c94dea145f53020b130ce884f5b6459321f2c9f7ce301b76" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="138.0.7204.96" rel="bp156.2.138.1"/>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
</package>
<package pkgid="7d66aafda8f92c2efbaf4a354b70727d899ae288d39331a1edf005cd19ba15fc" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="139.0.7258.127" rel="bp156.2.155.1"/>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="5ada464856fe5153df651dfec417ec971ede73d9e78187b0af62a7cd305d9102" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="139.0.7258.127" rel="bp156.2.155.1"/>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="2f14e31abec4dea5aceda37e4d2d740cb977dad846a69d6c2535bdc00f248da4" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="139.0.7258.127" rel="bp156.2.155.1"/>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="cb40b4bd44bf92f27ffd078a8fb121d4af27e8178cebfb55c6444e882cfe2d0c" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="139.0.7258.138" rel="bp156.2.158.1"/>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
</package>
<package pkgid="a5fe41e4c50170cf1387b16f86fd6cc7f83463edc07a0b94b0751ff02e9331e8" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="139.0.7258.138" rel="bp156.2.158.1"/>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
</package>
<package pkgid="86b6f379aa92c3a6b997ff324d33f7e0cdca60fe2544295c8f8433fac3d69e9a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="139.0.7258.138" rel="bp156.2.158.1"/>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
</package>
<package pkgid="804b0a9da6f329f05106ea445482743aeea733d55fb2e485aaa28b0709fec06d" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="139.0.7258.154" rel="bp156.2.161.1"/>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
</package>
<package pkgid="3c87c2c60af602127729600efda31b24305d78c55ca838497e3f01d392c306e6" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="139.0.7258.154" rel="bp156.2.161.1"/>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
</package>
<package pkgid="3d8a245cd21b3438aa23f92656c42f09cc853b068cbc44af5ad517a673aa8b16" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="139.0.7258.154" rel="bp156.2.161.1"/>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
</package>
<package pkgid="1662d94a5242f768322f57236ebd785a3a8a24d6a242539480b7a3c4ce2cea4d" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="139.0.7258.66" rel="bp156.2.152.1"/>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
</package>
<package pkgid="395bb21979dd2e49fdd20f04feafb9c0b386b504f2252393848fe2af7dc651b7" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="139.0.7258.66" rel="bp156.2.152.1"/>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
</package>
<package pkgid="161214f8126e22ad7bd69d308dac528511881dfdf9e656f8916f826f0c4a8a0e" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="139.0.7258.66" rel="bp156.2.152.1"/>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
</package>
<package pkgid="bae3801a2c77bf5d9429cc7b0bf094bd8127716fa3eef4616a2268679f0defb6" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="140.0.7339.127" rel="bp156.2.167.1"/>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
</package>
<package pkgid="ced8def7060ccfa3072f4df10b418cef4b7ffb3736e1eadd33a454c1f34daa99" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="140.0.7339.127" rel="bp156.2.167.1"/>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
</package>
<package pkgid="43bf967f1e74a711396788c4e9e2f954e7a64cee4809d184ad833618e7dbfb93" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="140.0.7339.185" rel="bp156.2.170.1"/>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
</package>
<package pkgid="d0c3be1713e7f90e16db16c2023aae10ae8c4e79d4e47ec13779c9bf2fdc0996" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="140.0.7339.185" rel="bp156.2.170.1"/>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
</package>
<package pkgid="bb48efb2e96937be9cfa47bed9d0a93678efc6ffb055e0b6d89758f34b2aed46" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="140.0.7339.207" rel="bp156.2.173.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
</package>
<package pkgid="7c21856f7541b8884deb3952c954a48ad75fe9b45c907e11dfef0b84da8ff97b" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="140.0.7339.207" rel="bp156.2.173.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
</package>
<package pkgid="ec705cc5f4b0c67edc51ffecd3906c54ef82d06d35344cfe19206b6c60b1a254" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="140.0.7339.80" rel="bp156.2.164.1"/>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="a4c0a96d229cc16f6caffed24db5812a60681df1f82fd8503543ba29027db2b9" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="140.0.7339.80" rel="bp156.2.164.1"/>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="f534978baf56bde1e9d3beae89de465d6d9f76476dd12fdbb7028cdb5d215ea7" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="141.0.7390.107" rel="bp156.2.185.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
</package>
<package pkgid="4c243288caa4784e9150e82f4b82a09f8056cc057a582f8c0d7662746b4cc16f" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="141.0.7390.107" rel="bp156.2.185.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
</package>
<package pkgid="b70a194ae35ce5c2d169926b1f14a4aa055b6a4faffd84eb9a63ac3d6cd80045" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="141.0.7390.107" rel="bp156.2.185.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
</package>
<package pkgid="b56c45dcda22e686bc4b82bbd419a9f164d16a803f5fc946e493f77b6f385ceb" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="141.0.7390.122" rel="bp156.2.188.1"/>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
</package>
<package pkgid="ac510befc471e943b5c11fd4a5a98a4e6d6f5eeec5fc4b6fe511fe51134d1731" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="141.0.7390.122" rel="bp156.2.188.1"/>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
</package>
<package pkgid="74ad36a2059b70f2b819d25eb0529b07e77692ef0fea0a42fc4366d6e32f5123" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="141.0.7390.122" rel="bp156.2.188.1"/>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
</package>
<package pkgid="662f31ee80915b1d317d490d68fe63db5589323d3ca48a1f8b6ad6d3332bafdc" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="141.0.7390.54" rel="bp156.2.176.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
</package>
<package pkgid="1c1854cdd4a852d9388c335184c12bb4976983a4ce6caf31fc06394996ca9317" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="141.0.7390.54" rel="bp156.2.176.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
</package>
<package pkgid="7b429e22dc7b61cb85d89b9ba073246999f97c1433348c9c7be7fdfcaca33d62" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="141.0.7390.54" rel="bp156.2.176.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
</package>
<package pkgid="b5d057545093818f377ef849e1b7a20ed5801f8f0c44025de68898a4bc40fd1c" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="141.0.7390.65" rel="bp156.2.179.1"/>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
</package>
<package pkgid="6d15d3fdb62a9c1dcb435cd135a2f2a40b58be54e4dca0bae0133b5f079ca422" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="141.0.7390.65" rel="bp156.2.179.1"/>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
</package>
<package pkgid="f183f5f5d31ef05e8210fca644c99228782302ccd412ded5bdb2e026881bd7cf" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="141.0.7390.65" rel="bp156.2.179.1"/>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
</package>
<package pkgid="a06d0cadfaf64cb0b7d21ec9d0a2ac7156fef77859c1845b02fd9e46e4175ba8" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="141.0.7390.76" rel="bp156.2.182.1"/>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
</package>
<package pkgid="d1d3f1cf0d15a1dae0c29d94582ddf037840e45a429dfb459b474b172a0a22a4" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="141.0.7390.76" rel="bp156.2.182.1"/>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
</package>
<package pkgid="92afe4647bf267d5ed6a3048f10bec5ea2db0e28486ee0d3290edced718ef52e" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="141.0.7390.76" rel="bp156.2.182.1"/>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
</package>
<package pkgid="0ef35b60a4f84d780347cbe9167be79533cba909d4718905b1ba31b4c9f3adcb" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="142.0.7444.134" rel="bp156.2.197.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
</package>
<package pkgid="5e412b2e31c0d3e3920bbca87a0a41c620ac120bc578d203d1c93551c237546a" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="142.0.7444.134" rel="bp156.2.197.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
</package>
<package pkgid="775687ef6430ab1adc73d4e79d035d6734c34cd8fefef63bd08dc77dc9e6b2d2" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="142.0.7444.134" rel="bp156.2.197.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
</package>
<package pkgid="3dfe625a09c72eeb2ba6ce97682b842ad78160870c70d05785e3ddadb53c0124" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="142.0.7444.162" rel="bp156.2.200.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="84aae4847e5ad74bbe165700855fd1961adb51710f58d7ec26edd49626590b8d" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="142.0.7444.162" rel="bp156.2.200.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="23160a9a2614caaecd5330bbb8f0e419b26b9947d13b27b5cb877fd6edddf171" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="142.0.7444.162" rel="bp156.2.200.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="be091469b79c116213e5ba750c0f4fdfa388221014d0e42c32edcabacb6c3df2" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="142.0.7444.175" rel="bp156.2.203.1"/>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
</package>
<package pkgid="388489295103fadb26c8869b2c8ee995ff651f0c2537ea49da7935b0e32333bb" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="142.0.7444.175" rel="bp156.2.203.1"/>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
</package>
<package pkgid="ed1e138c67bee97652c889b54b622a68ef05969cf3c165ccac1f2126e742be70" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="142.0.7444.175" rel="bp156.2.203.1"/>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
</package>
<package pkgid="6a1910a5d58ff061d2cd7a56db544d1350d802444d382970465488813a14b817" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.191.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="298e7b2c3baeb476d6c8e9734d8a902d5948e58cf97505247984697b6d7f6f88" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.191.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="2e6c8358403e74f93ea8f4343a50bee289d1a3ef7669f4500d64430a2442fc30" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.191.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="05ebd256a5bfcf8418be2e28ccea59ef7e64a122c90632c093f1176f23c38fc1" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.194.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="3176aeed3080d48dc66aa60e645d0eaefb18fdcdd6dd333bcc92c68caf4ee84f" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.194.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="5c08970d955a98205df0fae345df44429260693c11529649bda19cff6764e8a6" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.194.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="712ed178ec071f7e63fd0a6741b692d23e6b7affee6bb28fbefc0f12cf5274fa" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="143.0.7499.109" rel="bp156.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814400">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * third issue with an exploit is known to exist in the wild
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
</package>
<package pkgid="3f48b16077ec4f7f34e47238dad01ae619dfc35815e7219bd12ca43446727539" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="143.0.7499.109" rel="bp156.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814400">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * third issue with an exploit is known to exist in the wild
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
</package>
<package pkgid="39cfab7b5c47d4723f0de4b1f42829d670f4978e464748f951b8480d0dd128a0" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="143.0.7499.109" rel="bp156.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814400">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * third issue with an exploit is known to exist in the wild
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
</package>
<package pkgid="dc3dc79a0824dfabbf56ef4e1b0d1d3a7e8ebe267dd4b2b68a90f602d9cd0ae4" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="143.0.7499.146" rel="bp156.2.209.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
</package>
<package pkgid="cd9310cc4d5d839852c7296d151a9e7c103915d95de4d71460434d3f1c5cae0c" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="143.0.7499.146" rel="bp156.2.209.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
</package>
<package pkgid="7da3b0b5bb5023c18aae4a123b5dbcc560c15470091d0538d1d7bf2310f26692" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="143.0.7499.146" rel="bp156.2.209.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
</package>
<package pkgid="6cd3d1289bfe783a4fa31d277c3fa30560f2bd4e5df4dc4beaa8fe7210da497b" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="143.0.7499.192" rel="bp156.2.212.1"/>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
</package>
<package pkgid="5c53dc2936d05c692ae7c17c8dccfe936bc8e962488fe71408e21f5cd3ce66db" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="143.0.7499.192" rel="bp156.2.212.1"/>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
</package>
<package pkgid="334096c064fb8f857a8b9cb0364b42f4e58f26d0ed082320f890a3b54ce14687" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="143.0.7499.192" rel="bp156.2.212.1"/>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
</package>
<package pkgid="16aa529324ad38c1b2c8e8a4d382868daa54a83693de53d51c1bcbf8be554ecc" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="143.0.7499.40" rel="bp156.2.206.1"/>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
</package>
<package pkgid="6e12539a4dce90cf71e8446747ccdca89b3aa8d8b2ebe5cc35577beda2a88c8c" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="143.0.7499.40" rel="bp156.2.206.1"/>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
</package>
<package pkgid="53601f3ecae0145321f74f7bbca427c918009518224613ba519a85b9cf086c36" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="143.0.7499.40" rel="bp156.2.206.1"/>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
</package>
<package pkgid="e353cdae948bc047872b083b41c0a9a94d7e02a8ce5d8b317e7c5477cab5d032" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="144.0.7559.109" rel="bp156.2.221.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
</package>
<package pkgid="c74e0542f84fa90d7d7c4ba845d9addcac724221309a7219c1499dc87bdb8b55" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="144.0.7559.109" rel="bp156.2.221.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
</package>
<package pkgid="cc954fc69d1859605995e5251477f9a8686178c5168b08f6afbc5c2e996ddb40" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="144.0.7559.109" rel="bp156.2.221.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
</package>
<package pkgid="77fb2e8bf871b5b1932093a27cebf2609261f971c5d872335e52463a50dddabe" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="144.0.7559.132" rel="bp156.2.224.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011200">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
</package>
<package pkgid="e62941aeabf27ccc8f97b71c0658d129587bcb9a467f606835d6a94c67622969" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="144.0.7559.132" rel="bp156.2.224.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011200">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
</package>
<package pkgid="f7ce713d5f233e13d618565357bf99ff27d47662b26036a8c8fe8ee80c40acd6" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="144.0.7559.132" rel="bp156.2.224.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011200">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
</package>
<package pkgid="af6b97b13cb5c93c916f1bcd5bf7ac50527dd7cb32433191bad2ccb3cd3c9336" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="144.0.7559.59" rel="bp156.2.215.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
</package>
<package pkgid="87fc88180fd571ea333d1219dc7c78e0dbdaf8f6f678d562bf7b222667ef5145" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="144.0.7559.59" rel="bp156.2.215.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
</package>
<package pkgid="098d6f61a3e81d313afc0e8c1b712ef6f4deff8a1817161c68b0bef2be38be7a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="144.0.7559.59" rel="bp156.2.215.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
</package>
<package pkgid="e9346f1c31b7297965824dce7132615c1e9df0bed6198e4f7af827c93e415250" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="144.0.7559.96" rel="bp156.2.218.1"/>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
</package>
<package pkgid="fbff26b77ddee4badd66ac924184a34ed5ce47e5212b069c589b34c023a3d9b0" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="144.0.7559.96" rel="bp156.2.218.1"/>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
</package>
<package pkgid="7563cfa57da9d23ee446dee5fb2a8be247c9c3ecc8a59eace2bd7b7b7d8e1673" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="144.0.7559.96" rel="bp156.2.218.1"/>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
</package>
<package pkgid="41d753a0a616f7c1a723e4dc3a4189232fd341699976cc2468baad228f78fd07" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="145.0.7632.75" rel="bp156.2.231.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
</package>
<package pkgid="0e15c5b93995d85e0592a2e59546e367982cbd6dfbd8acae7c407e380833909e" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="145.0.7632.75" rel="bp156.2.231.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
</package>
<package pkgid="c1ca50c74cbad894d34396ab1846130447f63fcafc39e885ae332ccef14d3f6e" name="chromedriver" arch="aarch64">
  <version epoch="0" ver="145.0.7632.75" rel="bp156.2.236.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
</package>
<package pkgid="bd864a3758a3b62b30dbb672f5f3d0e7b2efbf8e298eaf8da783632e44304623" name="chromedriver" arch="ppc64le">
  <version epoch="0" ver="145.0.7632.75" rel="bp156.2.236.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
</package>
<package pkgid="6094a706ea99f8e82669eafe56bf089e275869eae74df1e180919ee5200ea62e" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="145.0.7632.75" rel="bp156.2.236.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
</package>
<package pkgid="acbf94fd510aa0ad82f2f41bdaecc55ff0f1454ee5808bec51aa2276882543c6" name="chromium" arch="aarch64">
  <version epoch="0" ver="125.0.6422.141" rel="bp156.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1705147200">- Chromium 120.0.6099.216 (boo#1217839, boo#1218048, boo#1218302,
  boo#1218533, boo#1218719)
  * CVE-2024-0333: Insufficient data validation in Extensions
  * CVE-2024-0222: Use after free in ANGLE
  * CVE-2024-0223: Heap buffer overflow in ANGLE
  * CVE-2024-0224: Use after free in WebAudio
  * CVE-2024-0225: Use after free in WebGPU
  * CVE-2023-7024: Heap buffer overflow in WebRTC
  * CVE-2023-6702: Type Confusion in V8
  * CVE-2023-6703: Use after free in Blink
  * CVE-2023-6704: Use after free in libavif (boo#1218303)
  * CVE-2023-6705: Use after free in WebRTC
  * CVE-2023-6706: Use after free in FedCM
  * CVE-2023-6707: Use after free in CSS
  * CVE-2023-6508: Use after free in Media Stream
  * CVE-2023-6509: Use after free in Side Panel Search
  * CVE-2023-6510: Use after free in Media Capture
  * CVE-2023-6511: Inappropriate implementation in Autofill
  * CVE-2023-6512: Inappropriate implementation in Web Browser UI
- drop patches:
  * chromium-system-libusb.patch
  * chromium-119-nullptr_t-without-namespace-std.patch
  * chromium-119-no_matching_constructor.patch
  * chromium-117-workaround_clang_bug-structured_binding.patch
- add patches:
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-emplace.patch
  * chromium-120-lp155-typename.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-emplace-struct.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
- add patches for Leap that revert braking changes:
  * chromium-120-lp155-revert-clang-build-failure.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1705233600">- Replace chromium-120-lp155-revert-clang-build-failure.patch
  with chromium-120-make_unique-struct.patch - which avoids
  reverting changes and instead provides a stub constructor to fix
  build on Leap</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1705492800">- Chromium 120.0.6099.224 (boo#1218892)
  * CVE-2024-0517: Out of bounds write in V8
  * CVE-2024-0518: Type Confusion in V8
  * CVE-2024-0519: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709380800">- Chromium 121.0.6167.184 (boo#1219118, boo#1219387, boo#1219661)
  * CVE-2024-1284: Use after free in Mojo
  * CVE-2024-1283: Heap buffer overflow in Skia
  * CVE-2024-1060: Use after free in Canvas
  * CVE-2024-1059: Use after free in WebRTC
  * CVE-2024-1077: Use after free in Network
  * CVE-2024-0807: Use after free in WebAudio
  * CVE-2024-0812: Inappropriate implementation in Accessibility
  * CVE-2024-0808: Integer underflow in WebUI
  * CVE-2024-0810: Insufficient policy enforcement in DevTools
  * CVE-2024-0814: Incorrect security UI in Payments
  * CVE-2024-0813: Use after free in Reading Mode
  * CVE-2024-0806: Use after free in Passwords
  * CVE-2024-0805: Inappropriate implementation in Downloads
  * CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
  * CVE-2024-0811: Inappropriate implementation in Extensions API
  * CVE-2024-0809: Inappropriate implementation in Autofill
- Removed patches:
  * chromium-117-includes.patch
  * chromium-118-includes.patch
  * chromium-119-dont-redefine-ATSPI-version-macros.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
  * gcc13-fix.patch
  * chromium-113-webauth-include-variant.patch
  * chromium-110-system-libffi.patch
- Added patches:
  * chromium-121-no_matching_constructor.patch
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-121-workaround_clang_bug-structured_binding.patch
  * chromium-121-missing-header-files.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-python3-invalid-escape-sequence.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-avoid-SFINAE-TypeConverter.patch
  * chromium-121-blink-libxml-const.patch
- Add patch chromium-disable-FFmpegAllowLists.patch:
  disable codec checker this will always fail (bsc#1219070)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
</package>
<package pkgid="156f5857d16bcaf9291fc7348923dc02554e70ac772536f63bd1ad400a954872" name="chromium" arch="src">
  <version epoch="0" ver="125.0.6422.141" rel="bp156.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1705147200">- Chromium 120.0.6099.216 (boo#1217839, boo#1218048, boo#1218302,
  boo#1218533, boo#1218719)
  * CVE-2024-0333: Insufficient data validation in Extensions
  * CVE-2024-0222: Use after free in ANGLE
  * CVE-2024-0223: Heap buffer overflow in ANGLE
  * CVE-2024-0224: Use after free in WebAudio
  * CVE-2024-0225: Use after free in WebGPU
  * CVE-2023-7024: Heap buffer overflow in WebRTC
  * CVE-2023-6702: Type Confusion in V8
  * CVE-2023-6703: Use after free in Blink
  * CVE-2023-6704: Use after free in libavif (boo#1218303)
  * CVE-2023-6705: Use after free in WebRTC
  * CVE-2023-6706: Use after free in FedCM
  * CVE-2023-6707: Use after free in CSS
  * CVE-2023-6508: Use after free in Media Stream
  * CVE-2023-6509: Use after free in Side Panel Search
  * CVE-2023-6510: Use after free in Media Capture
  * CVE-2023-6511: Inappropriate implementation in Autofill
  * CVE-2023-6512: Inappropriate implementation in Web Browser UI
- drop patches:
  * chromium-system-libusb.patch
  * chromium-119-nullptr_t-without-namespace-std.patch
  * chromium-119-no_matching_constructor.patch
  * chromium-117-workaround_clang_bug-structured_binding.patch
- add patches:
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-emplace.patch
  * chromium-120-lp155-typename.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-emplace-struct.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
- add patches for Leap that revert braking changes:
  * chromium-120-lp155-revert-clang-build-failure.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1705233600">- Replace chromium-120-lp155-revert-clang-build-failure.patch
  with chromium-120-make_unique-struct.patch - which avoids
  reverting changes and instead provides a stub constructor to fix
  build on Leap</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1705492800">- Chromium 120.0.6099.224 (boo#1218892)
  * CVE-2024-0517: Out of bounds write in V8
  * CVE-2024-0518: Type Confusion in V8
  * CVE-2024-0519: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709380800">- Chromium 121.0.6167.184 (boo#1219118, boo#1219387, boo#1219661)
  * CVE-2024-1284: Use after free in Mojo
  * CVE-2024-1283: Heap buffer overflow in Skia
  * CVE-2024-1060: Use after free in Canvas
  * CVE-2024-1059: Use after free in WebRTC
  * CVE-2024-1077: Use after free in Network
  * CVE-2024-0807: Use after free in WebAudio
  * CVE-2024-0812: Inappropriate implementation in Accessibility
  * CVE-2024-0808: Integer underflow in WebUI
  * CVE-2024-0810: Insufficient policy enforcement in DevTools
  * CVE-2024-0814: Incorrect security UI in Payments
  * CVE-2024-0813: Use after free in Reading Mode
  * CVE-2024-0806: Use after free in Passwords
  * CVE-2024-0805: Inappropriate implementation in Downloads
  * CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
  * CVE-2024-0811: Inappropriate implementation in Extensions API
  * CVE-2024-0809: Inappropriate implementation in Autofill
- Removed patches:
  * chromium-117-includes.patch
  * chromium-118-includes.patch
  * chromium-119-dont-redefine-ATSPI-version-macros.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
  * gcc13-fix.patch
  * chromium-113-webauth-include-variant.patch
  * chromium-110-system-libffi.patch
- Added patches:
  * chromium-121-no_matching_constructor.patch
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-121-workaround_clang_bug-structured_binding.patch
  * chromium-121-missing-header-files.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-python3-invalid-escape-sequence.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-avoid-SFINAE-TypeConverter.patch
  * chromium-121-blink-libxml-const.patch
- Add patch chromium-disable-FFmpegAllowLists.patch:
  disable codec checker this will always fail (bsc#1219070)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
</package>
<package pkgid="f19427b23cc349225d8e5547bbb2827dc4e9b0e8a97fd05ae47049c052963085" name="chromium" arch="x86_64">
  <version epoch="0" ver="125.0.6422.141" rel="bp156.2.3.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1705147200">- Chromium 120.0.6099.216 (boo#1217839, boo#1218048, boo#1218302,
  boo#1218533, boo#1218719)
  * CVE-2024-0333: Insufficient data validation in Extensions
  * CVE-2024-0222: Use after free in ANGLE
  * CVE-2024-0223: Heap buffer overflow in ANGLE
  * CVE-2024-0224: Use after free in WebAudio
  * CVE-2024-0225: Use after free in WebGPU
  * CVE-2023-7024: Heap buffer overflow in WebRTC
  * CVE-2023-6702: Type Confusion in V8
  * CVE-2023-6703: Use after free in Blink
  * CVE-2023-6704: Use after free in libavif (boo#1218303)
  * CVE-2023-6705: Use after free in WebRTC
  * CVE-2023-6706: Use after free in FedCM
  * CVE-2023-6707: Use after free in CSS
  * CVE-2023-6508: Use after free in Media Stream
  * CVE-2023-6509: Use after free in Side Panel Search
  * CVE-2023-6510: Use after free in Media Capture
  * CVE-2023-6511: Inappropriate implementation in Autofill
  * CVE-2023-6512: Inappropriate implementation in Web Browser UI
- drop patches:
  * chromium-system-libusb.patch
  * chromium-119-nullptr_t-without-namespace-std.patch
  * chromium-119-no_matching_constructor.patch
  * chromium-117-workaround_clang_bug-structured_binding.patch
- add patches:
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-emplace.patch
  * chromium-120-lp155-typename.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-emplace-struct.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
- add patches for Leap that revert braking changes:
  * chromium-120-lp155-revert-clang-build-failure.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1705233600">- Replace chromium-120-lp155-revert-clang-build-failure.patch
  with chromium-120-make_unique-struct.patch - which avoids
  reverting changes and instead provides a stub constructor to fix
  build on Leap</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1705492800">- Chromium 120.0.6099.224 (boo#1218892)
  * CVE-2024-0517: Out of bounds write in V8
  * CVE-2024-0518: Type Confusion in V8
  * CVE-2024-0519: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709380800">- Chromium 121.0.6167.184 (boo#1219118, boo#1219387, boo#1219661)
  * CVE-2024-1284: Use after free in Mojo
  * CVE-2024-1283: Heap buffer overflow in Skia
  * CVE-2024-1060: Use after free in Canvas
  * CVE-2024-1059: Use after free in WebRTC
  * CVE-2024-1077: Use after free in Network
  * CVE-2024-0807: Use after free in WebAudio
  * CVE-2024-0812: Inappropriate implementation in Accessibility
  * CVE-2024-0808: Integer underflow in WebUI
  * CVE-2024-0810: Insufficient policy enforcement in DevTools
  * CVE-2024-0814: Incorrect security UI in Payments
  * CVE-2024-0813: Use after free in Reading Mode
  * CVE-2024-0806: Use after free in Passwords
  * CVE-2024-0805: Inappropriate implementation in Downloads
  * CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
  * CVE-2024-0811: Inappropriate implementation in Extensions API
  * CVE-2024-0809: Inappropriate implementation in Autofill
- Removed patches:
  * chromium-117-includes.patch
  * chromium-118-includes.patch
  * chromium-119-dont-redefine-ATSPI-version-macros.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
  * gcc13-fix.patch
  * chromium-113-webauth-include-variant.patch
  * chromium-110-system-libffi.patch
- Added patches:
  * chromium-121-no_matching_constructor.patch
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-121-workaround_clang_bug-structured_binding.patch
  * chromium-121-missing-header-files.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-python3-invalid-escape-sequence.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-avoid-SFINAE-TypeConverter.patch
  * chromium-121-blink-libxml-const.patch
- Add patch chromium-disable-FFmpegAllowLists.patch:
  disable codec checker this will always fail (bsc#1219070)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
</package>
<package pkgid="fed45f3ff05be65c6363f0242dc16116fce9b2a3ada19d17033c4150679f4104" name="chromium" arch="aarch64">
  <version epoch="0" ver="126.0.6478.126" rel="bp156.2.6.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709380800">- Chromium 121.0.6167.184 (boo#1219118, boo#1219387, boo#1219661)
  * CVE-2024-1284: Use after free in Mojo
  * CVE-2024-1283: Heap buffer overflow in Skia
  * CVE-2024-1060: Use after free in Canvas
  * CVE-2024-1059: Use after free in WebRTC
  * CVE-2024-1077: Use after free in Network
  * CVE-2024-0807: Use after free in WebAudio
  * CVE-2024-0812: Inappropriate implementation in Accessibility
  * CVE-2024-0808: Integer underflow in WebUI
  * CVE-2024-0810: Insufficient policy enforcement in DevTools
  * CVE-2024-0814: Incorrect security UI in Payments
  * CVE-2024-0813: Use after free in Reading Mode
  * CVE-2024-0806: Use after free in Passwords
  * CVE-2024-0805: Inappropriate implementation in Downloads
  * CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
  * CVE-2024-0811: Inappropriate implementation in Extensions API
  * CVE-2024-0809: Inappropriate implementation in Autofill
- Removed patches:
  * chromium-117-includes.patch
  * chromium-118-includes.patch
  * chromium-119-dont-redefine-ATSPI-version-macros.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
  * gcc13-fix.patch
  * chromium-113-webauth-include-variant.patch
  * chromium-110-system-libffi.patch
- Added patches:
  * chromium-121-no_matching_constructor.patch
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-121-workaround_clang_bug-structured_binding.patch
  * chromium-121-missing-header-files.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-python3-invalid-escape-sequence.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-avoid-SFINAE-TypeConverter.patch
  * chromium-121-blink-libxml-const.patch
- Add patch chromium-disable-FFmpegAllowLists.patch:
  disable codec checker this will always fail (bsc#1219070)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
</package>
<package pkgid="5d13c67413c1565348e4b0ad547373afbfecedd0ebccf7b9f11883afdb5a33c7" name="chromium" arch="src">
  <version epoch="0" ver="126.0.6478.126" rel="bp156.2.6.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709380800">- Chromium 121.0.6167.184 (boo#1219118, boo#1219387, boo#1219661)
  * CVE-2024-1284: Use after free in Mojo
  * CVE-2024-1283: Heap buffer overflow in Skia
  * CVE-2024-1060: Use after free in Canvas
  * CVE-2024-1059: Use after free in WebRTC
  * CVE-2024-1077: Use after free in Network
  * CVE-2024-0807: Use after free in WebAudio
  * CVE-2024-0812: Inappropriate implementation in Accessibility
  * CVE-2024-0808: Integer underflow in WebUI
  * CVE-2024-0810: Insufficient policy enforcement in DevTools
  * CVE-2024-0814: Incorrect security UI in Payments
  * CVE-2024-0813: Use after free in Reading Mode
  * CVE-2024-0806: Use after free in Passwords
  * CVE-2024-0805: Inappropriate implementation in Downloads
  * CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
  * CVE-2024-0811: Inappropriate implementation in Extensions API
  * CVE-2024-0809: Inappropriate implementation in Autofill
- Removed patches:
  * chromium-117-includes.patch
  * chromium-118-includes.patch
  * chromium-119-dont-redefine-ATSPI-version-macros.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
  * gcc13-fix.patch
  * chromium-113-webauth-include-variant.patch
  * chromium-110-system-libffi.patch
- Added patches:
  * chromium-121-no_matching_constructor.patch
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-121-workaround_clang_bug-structured_binding.patch
  * chromium-121-missing-header-files.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-python3-invalid-escape-sequence.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-avoid-SFINAE-TypeConverter.patch
  * chromium-121-blink-libxml-const.patch
- Add patch chromium-disable-FFmpegAllowLists.patch:
  disable codec checker this will always fail (bsc#1219070)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
</package>
<package pkgid="bd0055c8d75388bd7afb71646253e70c85f2500c5032675fe47cf220c7d359bd" name="chromium" arch="x86_64">
  <version epoch="0" ver="126.0.6478.126" rel="bp156.2.6.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709380800">- Chromium 121.0.6167.184 (boo#1219118, boo#1219387, boo#1219661)
  * CVE-2024-1284: Use after free in Mojo
  * CVE-2024-1283: Heap buffer overflow in Skia
  * CVE-2024-1060: Use after free in Canvas
  * CVE-2024-1059: Use after free in WebRTC
  * CVE-2024-1077: Use after free in Network
  * CVE-2024-0807: Use after free in WebAudio
  * CVE-2024-0812: Inappropriate implementation in Accessibility
  * CVE-2024-0808: Integer underflow in WebUI
  * CVE-2024-0810: Insufficient policy enforcement in DevTools
  * CVE-2024-0814: Incorrect security UI in Payments
  * CVE-2024-0813: Use after free in Reading Mode
  * CVE-2024-0806: Use after free in Passwords
  * CVE-2024-0805: Inappropriate implementation in Downloads
  * CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
  * CVE-2024-0811: Inappropriate implementation in Extensions API
  * CVE-2024-0809: Inappropriate implementation in Autofill
- Removed patches:
  * chromium-117-includes.patch
  * chromium-118-includes.patch
  * chromium-119-dont-redefine-ATSPI-version-macros.patch
  * chromium-120-missing-header-files.patch
  * chromium-120-no_matching_constructor.patch
  * chromium-120-nullptr_t-without-namespace-std.patch
  * chromium-120-workaround_clang_bug-structured_binding.patch
  * gcc13-fix.patch
  * chromium-113-webauth-include-variant.patch
  * chromium-110-system-libffi.patch
- Added patches:
  * chromium-121-no_matching_constructor.patch
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-121-workaround_clang_bug-structured_binding.patch
  * chromium-121-missing-header-files.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-python3-invalid-escape-sequence.patch
  * chromium-121-rust-clang_lib.patch
  * chromium-121-avoid-SFINAE-TypeConverter.patch
  * chromium-121-blink-libxml-const.patch
- Add patch chromium-disable-FFmpegAllowLists.patch:
  disable codec checker this will always fail (bsc#1219070)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
</package>
<package pkgid="0e4d2fd823116891c4850c1f5ea2eeff40aa7c22b56c8d1a818d5e95f89f94d6" name="chromium" arch="aarch64">
  <version epoch="0" ver="126.0.6478.182" rel="bp156.2.11.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="4d06958ac78e35aed1336772870604c2b89366819e7614b4e02106f312d08bd3" name="chromium" arch="src">
  <version epoch="0" ver="126.0.6478.182" rel="bp156.2.11.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="286fb76fa0164aa9a667b3f30206ea427bc5f0143482fa9708279411789f6950" name="chromium" arch="x86_64">
  <version epoch="0" ver="126.0.6478.182" rel="bp156.2.11.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1709899200">- Add Cr121-ffmpeg-new-channel-layout.patch to rollback more FFmpeg
  changes so that FFmpeg 4 will work on Leap
- Prepare for libxml 2.12</changelog>
  <changelog author="ro@suse.de" date="1709899201">- Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105)
  * New upstream security release.
  * CVE-2024-2173: Out of bounds memory access in V8.
  * CVE-2024-2174: Inappropriate implementation in V8.
  * CVE-2024-2176: Use after free in FedCM.
- Chromium 122.0.6261.94
  * CVE-2024-1669: Out of bounds memory access in Blink.
  * CVE-2024-1670: Use after free in Mojo.
  * CVE-2024-1671: Inappropriate implementation in Site Isolation.
  * CVE-2024-1672: Inappropriate implementation in Content Security Policy.
  * CVE-2024-1673: Use after free in Accessibility.
  * CVE-2024-1674: Inappropriate implementation in Navigation.
  * CVE-2024-1675: Insufficient policy enforcement in Download.
  * CVE-2024-1676: Inappropriate implementation in Navigation.
  * Type Confusion in V8
  * rediff chromium-disable-GlobalMediaControlsCastStartStop.patch
  * drop chromium-114-lld-argument.patch
    replaced by chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-113-webview-namespace.patch (obsolete)
  * reduce chromium-norar.patch
    by the hunks in chromium-122-norar.patch
  * drop chromium-114-revert-av1enc-lp154.patch
    replaced by chromium-122-revert-av1enc-el9.patch
  * drop chromium-115-lp155-typename.patch
    chromium-116-lp155-typenames.patch
    chromium-117-lp155-typename.patch
    chromium-120-lp155-typename.patch
    replaced by chromium-122-typename.patch
  * drop chromium-121-missing-header-files.patch
    replaced by chromium-122-missing-header-files.patch
  * drop chromium-121-workaround_clang_bug-structured_binding.patch
    replaced by chromium-122-workaround_clang_bug-structured_binding.patch
  * drop chromium-121-no_matching_constructor.patch
    replaced by chromium-122-no_matching_constructor.patch
  * drop chromium-121-python3-invalid-escape-sequence.patch (upstream)
  * drop chromium-disable-FFmpegAllowLists.patch
    replaced by chromium-122-disable-FFmpegAllowLists.patch
  * drop chromium-121-avoid-SFINAE-TypeConverter.patch
    replaced by chromium-122-avoid-SFINAE-TypeConverter.patch
  * add buildrequires for rust
  * add patches from fedora package for 121 and 122
  * chromium-121-el7-clang-version-warning.patch
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-constexpr.patch
  * chromium-122-disable-FFmpegAllowLists.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-missing-header-files.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-norar.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-revert-av1enc-el9.patch
  * chromium-122-static-assert.patch
  * chromium-122-typename.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * from debian add
  * chromium-122-undo-internal-alloc.patch
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-mojo.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * added compile fix needed on code15
    chromium-122-skip_bubble_contents_wrapper_static_assert.patch
    to prevent "static assertion expression is not an integral constant expression"
    "in call to 'operator+(&amp;"."[0], ShoppingInsightsSidePanelUI::GetWebUIName())'"
    in bubble_contents_wrapper.h:153
- replace Cr121-ffmpeg-new-channel-layout.patch by
  Cr122-ffmpeg-new-channel-layout.patch (rediff against 122)
- drop chromium-121-system-old-ffmpeg.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="0cf44ad3d2d3eaac7d295c85161080e0c5301e5422aa44627889c91ce70a0c3c" name="chromium" arch="aarch64">
  <version epoch="0" ver="127.0.6533.119" rel="bp156.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
</package>
<package pkgid="1c42c4516068a40aef9caddf1399ad7a558969449a3b2e797e498781cac37a4c" name="chromium" arch="src">
  <version epoch="0" ver="127.0.6533.119" rel="bp156.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
</package>
<package pkgid="0036dcd1b463c2599e3914b9cf9c21e655d8235e84d7466059a838a236a9d123" name="chromium" arch="x86_64">
  <version epoch="0" ver="127.0.6533.119" rel="bp156.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710331200">- Chromium 122.0.6261.128 (boo#1221335)
  * CVE-2024-2400: Use after free in Performance Manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1710763200">- Use Python 3.11 on Leap
- Rename chromium-122-skip_bubble_contents_wrapper_static_assert.patch
  to chromium-122-WebUI-static_assert.patch
- Rename chromium-122-disable-FFmpegAllowLists.patch to
  chromium-disable-FFmpegAllowLists.patch
- Rename chromium-122-static-assert.patch to
  chromium-122-BookmarkNode-missing-operator.patch
- Rename chromium-122-undo-internal-alloc.patch to
  chromium-122-PA-undo-internal-alloc.patch
- Rename chromium-122-typename.patch to
  chromium-122-lp155-typename.patch
- Removed patches:
  * chromium-121-v8-c++20-p1.patch
  * chromium-121-v8-c++20.patch
  * chromium-122-unique_ptr.patch
  * chromium-122-python3-assignment-expressions.patch
  * chromium-122-el8-support-64kpage.patch
  * chromium-122-el7-inline-function.patch
  * chromium-122-el7-extra-operator.patch
  * chromium-122-el7-default-constructor-involving-anonymous-union.patch
  * chromium-122-constexpr.patch
  * chromium-122-clang-build-flags.patch
  * chromium-122-clang16-disable-auto-upgrade-debug-info.patch
  * chromium-122-clang16-buildflags.patch
  * chromium-122-arm64-memory_tagging.patch
  * chromium-121-el7-clang-version-warning.patch
  * chromium-116-lp155-url_load_stats-size-t.patch
  * chromium-icu72-2.patch
  * chromium-122-debian-upstream-mojo.patch
- Patches merged into other patches:
  * chromium-122-debian-upstream-bitset.patch
  * chromium-122-debian-upstream-optional.patch
  * chromium-122-debian-upstream-uniqptr.patch
  * chromium-122-debian-fixes-optional.patch
  * chromium-122-norar.patch
- Restore time clamper change to
  chromium-122-missing-header-files.patch
- Fix missing/invalid casting in
  chromium-122-no_matching_constructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
</package>
<package pkgid="7001e55b3624909e3d640dbdaf092564ef0b7b4a4c676d7f2453e751bfc4ac98" name="chromium" arch="aarch64">
  <version epoch="0" ver="128.0.6613.113" rel="bp156.2.20.1"/>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
</package>
<package pkgid="667b0835c1b01107e37d2543e6ab47c3963f19b9bd8505996a2a266b1d197f8b" name="chromium" arch="src">
  <version epoch="0" ver="128.0.6613.113" rel="bp156.2.20.1"/>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
</package>
<package pkgid="a7613371932c1e9a9cf70e2da18828569365bbdfafdebf1f85cb66eaa023351a" name="chromium" arch="x86_64">
  <version epoch="0" ver="128.0.6613.113" rel="bp156.2.20.1"/>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
</package>
<package pkgid="a60c1783ea5ad86323db8428ae36a80b6d9c59887fdd74f53d7a62641d411b0f" name="chromium" arch="aarch64">
  <version epoch="0" ver="128.0.6613.119" rel="bp156.2.23.1"/>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
</package>
<package pkgid="96426c07b481902d5c00a0ef1fe0faf3e0e68f7b0d2db12ac3c507ac6f1fcce2" name="chromium" arch="src">
  <version epoch="0" ver="128.0.6613.119" rel="bp156.2.23.1"/>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
</package>
<package pkgid="4f66def3f3dfb32dac9180a6f088824959366db3dd342d1158046568d85b478f" name="chromium" arch="x86_64">
  <version epoch="0" ver="128.0.6613.119" rel="bp156.2.23.1"/>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
</package>
<package pkgid="66cb1dd15cdacdf18d1cb1760836b23813fb38a8dea7dfe4638a4be5f3c7ae19" name="chromium" arch="aarch64">
  <version epoch="0" ver="128.0.6613.137" rel="bp156.2.26.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
</package>
<package pkgid="bb7bebfbe33fecdd072bb7dff71a65cd8e04acd90589c4deec30ad9cce1a5f01" name="chromium" arch="src">
  <version epoch="0" ver="128.0.6613.137" rel="bp156.2.26.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
</package>
<package pkgid="c2cfd41383b89f4ef66ecb9dbceca76b235864f9082db8c5e42447e547b2d370" name="chromium" arch="x86_64">
  <version epoch="0" ver="128.0.6613.137" rel="bp156.2.26.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
</package>
<package pkgid="1cdddf3534b8345c85014de924ce5f5a2a947be0d54d8ecbbf2f32b3ef9b5701" name="chromium" arch="aarch64">
  <version epoch="0" ver="128.0.6613.84" rel="bp156.2.17.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="69f4eca9cf211733518b0c3f9249e64388f3dcafaee24e50e1c444e4d97e0ce5" name="chromium" arch="src">
  <version epoch="0" ver="128.0.6613.84" rel="bp156.2.17.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="13b1af1c46d4dc10941c72357a255683584b971d8d60a5eca515fb3bbacead73" name="chromium" arch="x86_64">
  <version epoch="0" ver="128.0.6613.84" rel="bp156.2.17.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1713096000">- Chromium 123.0.6312.122 (boo#1222707)
  * CVE-2024-3157: Out of bounds write in Compositing
  * CVE-2024-3516: Heap buffer overflow in ANGLE
  * CVE-2024-3515: Use after free in Dawn
- Chromium 123.0.6312.105 (boo#1222260)
  * CVE-2024-3156: Inappropriate implementation in V8
  * CVE-2024-3158: Use after free in Bookmarks
  * CVE-2024-3159: Out of bounds memory access in V8
- Chromium 123.0.6312.86 (boo#1222035)
  * CVE-2024-2883: Use after free in ANGLE
  * CVE-2024-2885: Use after free in Dawn
  * CVE-2024-2886: Use after free in WebCodecs
  * CVE-2024-2887: Type Confusion in WebAssembly
- Chromium 123.0.6312.58 (boo#1221732)
  * CVE-2024-2625: Object lifecycle issue in V8
  * CVE-2024-2626: Out of bounds read in Swiftshader
  * CVE-2024-2627: Use after free in Canvas
  * CVE-2024-2628: Inappropriate implementation in Downloads
- drop patches:
  * chromium-117-blink-BUILD-mnemonic.patch
  * chromium-121-blink-libxml-const.patch
  * chromium-122-BookmarkNode-missing-operator.patch
  * chromium-122-WebUI-static_assert.patch
  * chromium-122-PA-undo-internal-alloc.patch</changelog>
  <changelog author="ro@suse.de" date="1713355200">- Chromium 124.0.6367.60 (boo#1222958)
  * CVE-2024-3832: Object corruption in V8.
  * CVE-2024-3833: Object corruption in WebAssembly.
  * CVE-2024-3834: Use after free in Downloads. Reported by ChaobinZhang
  * CVE-2024-3837: Use after free in QUIC.
  * CVE-2024-3838: Inappropriate implementation in Autofill.
  * CVE-2024-3839: Out of bounds read in Fonts.
  * CVE-2024-3840: Insufficient policy enforcement in Site Isolation.
  * CVE-2024-3841: Insufficient data validation in Browser Switcher.
  * CVE-2024-3843: Insufficient data validation in Downloads.
  * CVE-2024-3844: Inappropriate implementation in Extensions.
  * CVE-2024-3845: Inappropriate implementation in Network.
  * CVE-2024-3846: Inappropriate implementation in Prompts.
  * CVE-2024-3847: Insufficient policy enforcement in WebUI.
- drop patches:
  * chromium-123-optional2.patch
  * chromium-122-avoid-SFINAE-TypeConverter.patch
  * chromium-123-PA-InternalAllocator.patch
- rediff patches:
  * chromium-110-compiler.patch
  * chromium-120-emplace.patch
  * chromium-122-no_matching_constructor.patch
  * chromium-122-lp155-typename.patch
- add patches: from debian/fixes
  * chromium-123-stats-collector.patch
- add patches: from debian/upstream
  * chromium-124-angle-powf.patch
  * chromium-124-atomic.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-uint-includes.patch
  * chromium-124-webgpu-optional.patch
- add patches:
  * chromium-123-WebUI-static_assert.patch
    workaround for compile issue in webui_contents_wrapper.h
  * chromium-124-system-libxml.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1714132800">- Chromium 124.0.6367.78 (boo#1223845)
  * CVE-2024-4058: Type Confusion in ANGLE
  * CVE-2024-4059: Out of bounds read in V8 API
  * CVE-2024-4060: Use after free in Dawn</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1714564800">- Add patches:
  * chromium-123-missing-QtGui.patch
- Restore libxml 2.12 check for chromium-124-system-libxml.patch
  which replaced chromium-121-blink-libxml-const.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="33a20dc0c491a43e95571ce5bfe84ae8658395f504f9250cc587d5a83c439721" name="chromium" arch="aarch64">
  <version epoch="0" ver="129.0.6668.100" rel="bp156.2.38.1"/>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
</package>
<package pkgid="f15af351713258238f743e65284d99adc00d16ebab985fb7e88d7c6fac0703b3" name="chromium" arch="src">
  <version epoch="0" ver="129.0.6668.100" rel="bp156.2.38.1"/>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
</package>
<package pkgid="ef3d4c729d5d5a5d9bdefa607bb25f5d1b8b5b161eaa70ff70747d0f248b9ca2" name="chromium" arch="x86_64">
  <version epoch="0" ver="129.0.6668.100" rel="bp156.2.38.1"/>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
</package>
<package pkgid="75cfa2eb1246c13a997a7877ec683ffaa904a4dfa9e9e0c6b35b1e58e1de974b" name="chromium" arch="aarch64">
  <version epoch="0" ver="129.0.6668.58" rel="bp156.2.29.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
</package>
<package pkgid="b94ea59a13a850ff322e2b7fc54111bc4d2339490e722f6e978cabf0b93cc4dc" name="chromium" arch="src">
  <version epoch="0" ver="129.0.6668.58" rel="bp156.2.29.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
</package>
<package pkgid="e8ad36feb5de617ce364bb253033a17894a9e1372c43bd94f691dd56bdd8025c" name="chromium" arch="x86_64">
  <version epoch="0" ver="129.0.6668.58" rel="bp156.2.29.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1714651200">- Chromium 124.0.6367.118 (boo#1223846)
  * CVE-2024-4331: Use after free in Picture In Picture
  * CVE-2024-4368: Use after free in Dawn</changelog>
  <changelog author="ro@suse.de" date="1714737600">- drop patches:
  * chromium-123-WebUI-static_assert.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
</package>
<package pkgid="f319ede565fc2dce6dd4892ceaf9a06181f565a945949d6d19497ec33a993139" name="chromium" arch="aarch64">
  <version epoch="0" ver="129.0.6668.70" rel="bp156.2.32.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
</package>
<package pkgid="c9bef7e4db085c94582a9a0f3421544b44ba5fa0718125190b1d2efbb0ae5456" name="chromium" arch="src">
  <version epoch="0" ver="129.0.6668.70" rel="bp156.2.32.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
</package>
<package pkgid="f505eb86d112a6959d52ac0497aad39f7f09d5a3e60832d0aa3020c638d2e961" name="chromium" arch="x86_64">
  <version epoch="0" ver="129.0.6668.70" rel="bp156.2.32.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715342400">- Chromium 124.0.6367.201 (boo#1224208)
  * CVE-2024-4671: Use after free in Visuals
- Chromium 124.0.6367.155 (boo#1224045)
  * CVE-2024-4558: Use after free in ANGLE
  * CVE-2024-4559: Heap buffer overflow in WebAudio</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
</package>
<package pkgid="089628b0d19e02debbcbe2ef82a4eb58cc8c647d71a0c095ba5df11b093bae6c" name="chromium" arch="aarch64">
  <version epoch="0" ver="129.0.6668.89" rel="bp156.2.35.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="d01fc52bcf82a29116513339be80be99b44168258ed03253348dc0608fa59ffb" name="chromium" arch="src">
  <version epoch="0" ver="129.0.6668.89" rel="bp156.2.35.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="06ffc37772354d94c5f4b9e2ed22699e8403d3b06712046b12ad1d308d71d1b8" name="chromium" arch="x86_64">
  <version epoch="0" ver="129.0.6668.89" rel="bp156.2.35.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715688000">- Chromium 124.0.6367.207 (boo#1224294)
  * CVE-2024-4761: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1715860800">- Chromium 125.0.6422.60 (boo#1224341)
  * CVE-2024-4947: Type Confusion in V8
  * CVE-2024-4948: Use after free in Dawn
  * CVE-2024-4949: Use after free in V8
  * CVE-2024-4950: Inappropriate implementation in Downloads
- Chromium 125.0.6422.41
  * New upstream (early) stable release.
- drop upstreamed patches:
  * chromium-124-uint-includes.patch
  * chromium-124-fps-optional.patch
  * chromium-124-span-optional.patch
  * chromium-124-extractor-bitset.patch
  * chromium-124-atomic.patch
  * chromium-124-webgpu-optional.patch
  * chromium-124-angle-powf.patch
- add debian upstream patches added for 125:
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-tabstrip-include.patch
  * chromium-125-ninja.patch
- add debian fixes patches to fix font gc crashes:
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc1.patch
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- add from fedora (reverse applied for older ffmpeg):
  * chromium-125-ffmpeg-5.x-reordered_opaque.patch
- re-diff and rename:
  * from chromium-110-compiler.patch
    to chromium-125-compiler.patch
  * from chromium-120-emplace-struct.patch
    to chromium-125-emplace-struct.patch
  * from chromium-disable-FFmpegAllowLists.patch
    to chromium-125-disable-FFmpegAllowLists.patch
  * from chromium-122-missing-header-files.patch
    to chromium-125-missing-header-files.patch
  * from chromium-122-no_matching_constructor.patch
    to chromium-125-no_matching_constructor.patch
  * from chromium-122-lp155-typename.patch
    to chromium-125-lp155-typename.patch
- third_party/zstd
  added to keeplibs for
  third_party/blink/renderer/platform:platform
- third_party/tflite/src/third_party/xla/xla/tsl/util
  added to keeplibs for
  third_party/tflite/tflite
- third_party/lens_server_proto
  added to keeplibs for
  gen/third_party/lens_server_proto</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1724068800">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="b6d99e816aab7f1610670446cdb69cad7f33538ff1bc927d19356fce7e247bfc" name="chromium" arch="aarch64">
  <version epoch="0" ver="130.0.6723.116" rel="bp156.2.50.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
</package>
<package pkgid="0a76bf5c9f360e5905269b99059657faaea22e92f00c0ef3e1863612e8370b79" name="chromium" arch="src">
  <version epoch="0" ver="130.0.6723.116" rel="bp156.2.50.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
</package>
<package pkgid="d9e0f3787d5a7835224d3e4c0d4468028fc3c4a501f88d5d7eb5efe25f9ed267" name="chromium" arch="x86_64">
  <version epoch="0" ver="130.0.6723.116" rel="bp156.2.50.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
</package>
<package pkgid="73a041bed7129981ff2985613a20b49fca1a16850169cc132ce1a22160322b05" name="chromium" arch="aarch64">
  <version epoch="0" ver="130.0.6723.58" rel="bp156.2.41.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
</package>
<package pkgid="1f61135b573e3e31f16c12cd66e738baffdc19d6b0e9a747d43f74810bc4f0dc" name="chromium" arch="src">
  <version epoch="0" ver="130.0.6723.58" rel="bp156.2.41.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
</package>
<package pkgid="0b3a31a73063e5e29a79d235be86c157b7fdf7da967d75ddddc59c36a35ab7a2" name="chromium" arch="x86_64">
  <version epoch="0" ver="130.0.6723.58" rel="bp156.2.41.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- Chromium 125.0.6422.76 (boo#1224818)
  * CVE-2024-5157: Use after free in Scheduling
  * CVE-2024-5158: Type Confusion in V8
  * CVE-2024-5159: Heap buffer overflow in ANGLE
  * CVE-2024-5160: Heap buffer overflow in Dawn
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
</package>
<package pkgid="25154438a20a4b184e2feda5c216df32db0dc1bd0290d29809679b585e0f1fbf" name="chromium" arch="aarch64">
  <version epoch="0" ver="130.0.6723.69" rel="bp156.2.44.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
</package>
<package pkgid="be3803893c365ee241c07d85cdc35ce0ffa23d8414488757b87b4cc78b58c4cc" name="chromium" arch="src">
  <version epoch="0" ver="130.0.6723.69" rel="bp156.2.44.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
</package>
<package pkgid="32575986740ee512a95345d7bea6b23a487e0ee75a8c26b3cf9c010e7f444985" name="chromium" arch="x86_64">
  <version epoch="0" ver="130.0.6723.69" rel="bp156.2.44.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716552000">- Chromium 125.0.6422.112
  * CVE-2024-5274: Type Confusion in V8 (boo#1225199)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717156800">- Chromium 125.0.6422.141 (boo#1225690)
  * CVE-2024-5493: Heap buffer overflow in WebRTC
  * CVE-2024-5494: Use after free in Dawn
  * CVE-2024-5495: Use after free in Dawn
  * CVE-2024-5496: Use after free in Media Session
  * CVE-2024-5497: Out of bounds memory access in Keyboard Inputs
  * CVE-2024-5498: Use after free in Presentation API
  * CVE-2024-5499: Out of bounds write in Streams API</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
</package>
<package pkgid="aafcaff81596b4f7c4cdcad9efe6ebc68f3fb712ec351320d11d81a26dd46e1c" name="chromium" arch="aarch64">
  <version epoch="0" ver="130.0.6723.91" rel="bp156.2.47.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
</package>
<package pkgid="bb7809c778ad20042eff2a56e05cc775845a078276c64f85269cd7d3830b060e" name="chromium" arch="src">
  <version epoch="0" ver="130.0.6723.91" rel="bp156.2.47.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
</package>
<package pkgid="3a51339b0cb18f9926ea22a168a53bbd131977c2972122863b0ed60e86e73033" name="chromium" arch="x86_64">
  <version epoch="0" ver="130.0.6723.91" rel="bp156.2.47.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1718193600">- Amend fix_building_widevinecdm_with_chromium.patch to allow
  Widevine on ARM64 (bsc#1226170)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1719835200">- Chromium 126.0.6478.126 (boo#1226504, boo#1226205, boo#1226933)
  * CVE-2024-6290: Use after free in Dawn
  * CVE-2024-6291: Use after free in Swiftshader
  * CVE-2024-6292: Use after free in Dawn
  * CVE-2024-6293: Use after free in Dawn
  * CVE-2024-6100: Type Confusion in V8
  * CVE-2024-6101: Inappropriate implementation in WebAssembly
  * CVE-2024-6102: Out of bounds memory access in Dawn
  * CVE-2024-6103: Use after free in Dawn
  * CVE-2024-5830: Type Confusion in V8
  * CVE-2024-5831: Use after free in Dawn
  * CVE-2024-5832: Use after free in Dawn
  * CVE-2024-5833: Type Confusion in V8
  * CVE-2024-5834: Inappropriate implementation in Dawn
  * CVE-2024-5835: Heap buffer overflow in Tab Groups
  * CVE-2024-5836: Inappropriate Implementation in DevTools
  * CVE-2024-5837: Type Confusion in V8
  * CVE-2024-5838: Type Confusion in V8
  * CVE-2024-5839: Inappropriate Implementation in Memory Allocator
  * CVE-2024-5840: Policy Bypass in CORS
  * CVE-2024-5841: Use after free in V8
  * CVE-2024-5842: Use after free in Browser UI
  * CVE-2024-5843: Inappropriate implementation in Downloads
  * CVE-2024-5844: Heap buffer overflow in Tab Strip
  * CVE-2024-5845: Use after free in Audio
  * CVE-2024-5846: Use after free in PDFium
  * CVE-2024-5847: Use after free in PDFium
- drop patches:
  * chromium-disable-parallel-gold.patch
  * chromium-125-appservice-include.patch
  * chromium-125-lens-include.patch
  * chromium-125-mojo-bindings-include.patch
  * chromium-125-no-vector-consts.patch
  * chromium-125-vulkan-include.patch
  * chromium-125-ninja.patch
  * chromium-125-no_matching_constructor.patch
  * chromium-125-missing-header-files.patch
- add patches:
  * chromium-126-missing-header-files.patch
  * chromium-126-quiche-interator.patch
  * chromium-126-no_matching_constructor.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
</package>
<package pkgid="af582da36bf0f947aecd1bb9adc0d23d911cd886aa9736fd80cb57ddda283191" name="chromium" arch="aarch64">
  <version epoch="0" ver="131.0.6778.108" rel="bp156.2.59.1"/>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
</package>
<package pkgid="e9f0e65d9b9c316ac86444200bc7749efc051d1901215386b1568103c283af76" name="chromium" arch="src">
  <version epoch="0" ver="131.0.6778.108" rel="bp156.2.59.1"/>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
</package>
<package pkgid="47286e9a1e3e447e57dcc8b3653148a2ce8085e9c92508875c861d5d7bd546d9" name="chromium" arch="x86_64">
  <version epoch="0" ver="131.0.6778.108" rel="bp156.2.59.1"/>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
</package>
<package pkgid="8e1eedf8bf29fae49594abe5d302d2a86aa103e074fe33ba257d5e723e08ecc4" name="chromium" arch="aarch64">
  <version epoch="0" ver="131.0.6778.139" rel="bp156.2.62.1"/>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="ac4d1bc186ad1e99a9de73271b697408b9b04c01aee83be1a02a7dad627af4fa" name="chromium" arch="src">
  <version epoch="0" ver="131.0.6778.139" rel="bp156.2.62.1"/>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="4936bfe32629d33ec8071bd5c36e4ba09510f31d923630396d8b2d6d008c8b33" name="chromium" arch="x86_64">
  <version epoch="0" ver="131.0.6778.139" rel="bp156.2.62.1"/>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="50733873096a22e3c5486055f708df8c0b830e53335449cbe5caa5e7bfcc9c47" name="chromium" arch="aarch64">
  <version epoch="0" ver="131.0.6778.204" rel="bp156.2.65.1"/>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="b3acc497bc26d70b14884a9e2980a5c3cf8135c009f051daa533a76decbc876f" name="chromium" arch="src">
  <version epoch="0" ver="131.0.6778.204" rel="bp156.2.65.1"/>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="bf6efb9ce7f84b9b63c4b2ee2832488a75d73691502c9b7cd1e2688f860ec461" name="chromium" arch="x86_64">
  <version epoch="0" ver="131.0.6778.204" rel="bp156.2.65.1"/>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="bab4a501f118f1d3a63385bbb94106e65d19b021d7692c2af3a85b12841c780c" name="chromium" arch="aarch64">
  <version epoch="0" ver="131.0.6778.69" rel="bp156.2.53.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
</package>
<package pkgid="c6b8c07f21870b0fe8cfd43a18b8720e1a736a83557792d8f87161770823ad48" name="chromium" arch="src">
  <version epoch="0" ver="131.0.6778.69" rel="bp156.2.53.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
</package>
<package pkgid="e1824d07fd46098c5678fd3ed6d5f25d88abbc6ca13d2971f40cacad0671262f" name="chromium" arch="x86_64">
  <version epoch="0" ver="131.0.6778.69" rel="bp156.2.53.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1720526400">- Finalize 126
- Removed patches:
  * chromium-125-debian-bad-font-gc2.patch
  * chromium-125-debian-bad-font-gc3.patch
- Added patches:
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
  * chromium-126-no-format.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
</package>
<package pkgid="c8bb4d4db18296977f008390a01dcac5cfeb764da694e91816f6e90fb7eaf9e9" name="chromium" arch="aarch64">
  <version epoch="0" ver="131.0.6778.85" rel="bp156.2.56.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
</package>
<package pkgid="92abe1584c02935e3d5008be50bdbe6ad8193822cf801c64ba60aba770f9da01" name="chromium" arch="src">
  <version epoch="0" ver="131.0.6778.85" rel="bp156.2.56.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
</package>
<package pkgid="a4d66915393c75a862166dd1ecdf9838a5f45de96caa63c09caeeab40c00fb0a" name="chromium" arch="x86_64">
  <version epoch="0" ver="131.0.6778.85" rel="bp156.2.56.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1721217600">- Chromium 126.0.6478.182 (boo#1227979)
  * CVE-2024-6772: Inappropriate implementation in V8
  * CVE-2024-6773: Type Confusion in V8
  * CVE-2024-6774: Use after free in Screen Capture
  * CVE-2024-6775: Use after free in Media Stream
  * CVE-2024-6776: Use after free in Audio
  * CVE-2024-6777: Use after free in Navigation
  * CVE-2024-6778: Race in DevTools
  * CVE-2024-6779: Out of bounds memory access in V8</changelog>
  <changelog author="ro@suse.de" date="1722513600">- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)
  * CVE-2024-6988: Use after free in Downloads
  * CVE-2024-6989: Use after free in Loader
  * CVE-2024-6991: Use after free in Dawn
  * CVE-2024-6992: Out of bounds memory access in ANGLE
  * CVE-2024-6993: Inappropriate implementation in Canvas
  * CVE-2024-6994: Heap buffer overflow in Layout
  * CVE-2024-6995: Inappropriate implementation in Fullscreen
  * CVE-2024-6996: Race in Frames
  * CVE-2024-6997: Use after free in Tabs
  * CVE-2024-6998: Use after free in User Education
  * CVE-2024-6999: Inappropriate implementation in FedCM
  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  * CVE-2024-7001: Inappropriate implementation in HTML
  * CVE-2024-7003: Inappropriate implementation in FedCM
  * CVE-2024-7004: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-7005: Insufficient validation of untrusted input
    in Safe Browsing
  * CVE-2024-6990: Uninitialized Use in Dawn
  * CVE-2024-7255: Out of bounds read in WebTransport
  * CVE-2024-7256: Insufficient data validation in Dawn
- drop patches:
  * chromium-115-compiler-SkColor4f.patch only for llvm &lt; 16
  * chromium-117-system-zstd.patch upstreamed
  * chromium-122-workaround_clang_bug-structured_binding.patch
  * chromium-125-tabstrip-include.patch upstreamed
  * chromium-126-missing-header-files.patch
  * chromium-126-RealTimeReportingBindings-missing-decl.patch
    upstreamed
  * chromium-126-no_matching_constructor.patch
  * chromium-126-no-format.patch upstreamed
- switch from libstdc++ to libc++
- drop patches obsolete when using libc++
  * chromium-126-debian-bad-font-gc00000.patch
  * chromium-126-debian-bad-font-gc2.patch
  * chromium-126-debian-bad-font-gc1.patch
  * chromium-126-debian-bad-font-gc00.patch
  * chromium-126-debian-bad-font-gc000.patch
  * chromium-126-debian-bad-font-gc11.patch
  * chromium-126-debian-bad-font-gc0.patch
  * chromium-126-debian-bad-font-gc0000.patch
  * chromium-126-debian-bad-font-gc3.patch
- modify patches:
  * chromium-125-lp155-typename.patch
  - drop hunk in model_execution_util.h
  - drop hunk in model_quality_log_entry.h
- dropping from keeplibs: (does not exist)
  base/third_party/valgrind
  third_party/maldoca
  third_party/maldoca/src/third_party
- requires updated gn to build (newer than Feb 14 2024)
- add patches:
  * chromium-127-bindgen.patch (from debian/patches/fixes))
  * chromium-127-rust-clanglib.patch (just first hunk from fedora)
  * chromium-127-clang17-traitors.patch
    workaround for clang &lt; 18 from debiana (only used on 15.6)
  * chromium-127-constexpr.patch (from debian/patches/bookworm)
  * chromium-127-paint-layer-header.patch (from debian/patches/upstream)
  * chromium-127-ninja-1.21.1-deps-part0.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part1.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part2.patch (from fedora)
  * chromium-127-ninja-1.21.1-deps-part3.patch (from fedora)
- buildrequire rust-bindgen to get proper binaries per arch
- use qt5 for factory as well, qt6 fails with:
  ld.lld: error: undefined symbol: QByteArray::toStdString() const
  referenced by qt_shim.cc
  obj/ui/qt/qt6_shim/libqt6_shim.so.lto.qt_shim.o:(qt::QtShim::GetFontDescription() const)
- drop patches:
  * chromium-125-debian-bad-font-gc11.patch
  * chromium-125-debian-bad-font-gc0000.patch
  * chromium-125-debian-bad-font-gc00.patch
  * chromium-125-debian-bad-font-gc0.patch
  * chromium-125-debian-bad-font-gc000.patch
  * chromium-125-debian-bad-font-gc1.patch</changelog>
  <changelog author="ro@suse.de" date="1723723200">- Chromium 127.0.6533.119 (boo#1228941)
  * CVE-2024-7532: Out of bounds memory access in ANGLE
  * CVE-2024-7533: Use after free in Sharing
  * CVE-2024-7550: Type Confusion in V8
  * CVE-2024-7534: Heap buffer overflow in Layout
  * CVE-2024-7535: Inappropriate implementation in V8
  * CVE-2024-7536: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1723982400">- Chromium 128.0.6613.36 (boo#1229426)
- modified patches:
  * chromium-norar.patch drop most hunks,
    upstream has a config for this now
  * gcc-enable-lto.patch update context
  * chromium-125-compiler.patch update context
  * chromium-127-constexpr.patch update context
- drop patches: (should be obsolete with llvm&gt;17 and libc++)
  chromium-120-emplace.patch
  chromium-125-emplace-struct.patch
- drop patches: (upstream)
  * chromium-121-nullptr_t-without-namespace-std.patch
  * chromium-123-stats-collector.patch
  * chromium-127-paint-layer-header.patch
  * chromium-127-ninja-1.21.1-deps-part0.patch
  * chromium-127-ninja-1.21.1-deps-part1.patch
  * chromium-127-ninja-1.21.1-deps-part2.patch
  * chromium-127-ninja-1.21.1-deps-part3.patch
- disable rpmlint only for factory/tw where it is broken because
  of the large archive size of the source here
- keeplibs add
  third_party/devtools-frontend/src/front_end/third_party/
  puppeteer/package/lib/esm/third_party/parsel-js
  third_party/tflite/src/third_party/xla/xla/tsl/framework
- buildflags add
  safe_browsing_use_unrar=false</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724241600">- Chromium 128.0.6613.84 (boo#1229591)
  * CVE-2024-7964: Use after free in Passwords
  * CVE-2024-7965: Inappropriate implementation in V8
  * CVE-2024-7966: Out of bounds memory access in Skia
  * CVE-2024-7967: Heap buffer overflow in Fonts
  * CVE-2024-7968: Use after free in Autofill
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-7971: Type confusion in V8
  * CVE-2024-7972: Inappropriate implementation in V8
  * CVE-2024-7973: Heap buffer overflow in PDFium
  * CVE-2024-7974: Insufficient data validation in V8 API
  * CVE-2024-7975: Inappropriate implementation in Permissions
  * CVE-2024-7976: Inappropriate implementation in FedCM
  * CVE-2024-7977: Insufficient data validation in Installer
  * CVE-2024-7978: Insufficient policy enforcement in Data Transfer
  * CVE-2024-7979: Insufficient data validation in Installer
  * CVE-2024-7980: Insufficient data validation in Installer
  * CVE-2024-7981: Inappropriate implementation in Views
  * CVE-2024-8033: Inappropriate implementation in WebApp Installs
  * CVE-2024-8034: Inappropriate implementation in Custom Tabs
  * CVE-2024-8035: Inappropriate implementation in Extensions
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1724932800">- Chromium 128.0.6613.113 (boo#1229897)
  * CVE-2024-7969: Type Confusion in V8
  * CVE-2024-8193: Heap buffer overflow in Skia
  * CVE-2024-8194: Type Confusion in V8
  * CVE-2024-8198: Heap buffer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
</package>
<package pkgid="3bfdb7faa86f9c7723fca4499b5151c6f380ceaa0f3a127d741953175ee1b653" name="chromium" arch="aarch64">
  <version epoch="0" ver="132.0.6834.110" rel="bp156.2.72.1"/>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="397c9a84e9f0d9009080bd13cee0148f7acf0b722ec1b9d6e1f273a08cbfcec3" name="chromium" arch="src">
  <version epoch="0" ver="132.0.6834.110" rel="bp156.2.72.1"/>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="eda35f2819b85ae72cf4e31128987862ab657cb6f128df7fc5d982aedd6521d1" name="chromium" arch="x86_64">
  <version epoch="0" ver="132.0.6834.110" rel="bp156.2.72.1"/>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="ca261fe32502f03f8faa6ee19a124f63b54e35739c3ac37b7031b21e53d06e73" name="chromium" arch="aarch64">
  <version epoch="0" ver="132.0.6834.159" rel="bp156.2.75.1"/>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
</package>
<package pkgid="809eee12ef896a2654b9abec850054114bdccf0d96fe4c631a44eb725330a8b5" name="chromium" arch="src">
  <version epoch="0" ver="132.0.6834.159" rel="bp156.2.75.1"/>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
</package>
<package pkgid="b5f46de2efb69e4cf447556e5b29d8c46d6d48485bf2b64ea205d1746890d6fb" name="chromium" arch="x86_64">
  <version epoch="0" ver="132.0.6834.159" rel="bp156.2.75.1"/>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
</package>
<package pkgid="f9abfe513c7e584f13576aafceeda80b3ff607f54bdc0a2d3d7e1ffba9816eb6" name="chromium" arch="aarch64">
  <version epoch="0" ver="132.0.6834.83" rel="bp156.2.69.1"/>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
</package>
<package pkgid="f8645d0a42c381f8411fa15f3d4a22604d54ca2a13ca4cefcfafec4d0379e418" name="chromium" arch="src">
  <version epoch="0" ver="132.0.6834.83" rel="bp156.2.69.1"/>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
</package>
<package pkgid="c6e434cc5a5020e63ed01e2c61af2f50d69a3e7df0eca2f8de508255fa828b82" name="chromium" arch="x86_64">
  <version epoch="0" ver="132.0.6834.83" rel="bp156.2.69.1"/>
  <changelog author="ro@suse.de" date="1725364800">- Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108)
  * CVE-2024-8362: Use after free in WebAudio
  * CVE-2024-7970: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1726056000">- Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)
  * CVE-2024-8636: Heap buffer overflow in Skia
  * CVE-2024-8637: Use after free in Media Router
  * CVE-2024-8638: Type Confusion in V8
  * CVE-2024-8639: Use after free in Autofill</changelog>
  <changelog author="ro@suse.de" date="1726660800">- Chromium 129.0.6668.58 (stable released 2024-09-17)
  (boo#1230678)
  * CVE-2024-8904: Type Confusion in V8
  * CVE-2024-8905: Inappropriate implementation in V8
  * CVE-2024-8906: Incorrect security UI in Downloads
  * CVE-2024-8907: Insufficient data validation in Omnibox
  * CVE-2024-8908: Inappropriate implementation in Autofill
  * CVE-2024-8909: Inappropriate implementation in UI
- modified patches:
  * chromium-prop-codecs.patch update context
- add to keeplibs:
  third_party/rapidhash
- drop from keeplibs:
  third_party/libudev dropped upstream
  third_party/catapult/third_party/html5lib-python dropped upstream
- add patches:
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (not in our ffmpeg yet)</changelog>
  <changelog author="ro@suse.de" date="1726747200">- bump BR for nodejs to minimal 20.0
- dropped patches:
  * chromium-disable-GlobalMediaControlsCastStartStop.patch
    it was applied at the wrong place and the crash is gone</changelog>
  <changelog author="ro@suse.de" date="1727265600">- Chromium 129.0.6668.70 (stable released 2024-09-24)
  (boo#1230964)
  * CVE-2024-9120: Use after free in Dawn
  * CVE-2024-9121: Inappropriate implementation in V8
  * CVE-2024-9122: Type Confusion in V8
  * CVE-2024-9123: Integer overflow in Skia</changelog>
  <changelog author="ro@suse.de" date="1727870400">- Chromium 129.0.6668.89 (stable released 2024-09-24)
  (boo#1231232)
  * CVE-2024-7025: Integer overflow in Layout
  * CVE-2024-9369: Insufficient data validation in Mojo
  * CVE-2024-9370: Inappropriate implementation in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
</package>
<package pkgid="c8eb736af8b3eb7005f64058b88cf10e535651e3fc7aae59830f86ece064681b" name="chromium" arch="aarch64">
  <version epoch="0" ver="133.0.6943.126" rel="bp156.2.84.1"/>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
</package>
<package pkgid="f507c0b65d6b58f0d9e2904439bf86c65b3d857e3546dc3e22729d7eeeb7ffb3" name="chromium" arch="src">
  <version epoch="0" ver="133.0.6943.126" rel="bp156.2.84.1"/>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
</package>
<package pkgid="0b6d31e53e3efb76547f76912d873ca48b665994b283e260e17eb74b431017a6" name="chromium" arch="x86_64">
  <version epoch="0" ver="133.0.6943.126" rel="bp156.2.84.1"/>
  <changelog author="ro@suse.de" date="1730808000">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
</package>
<package pkgid="0d6b5542c76e6099c991fa70bdc172040c49a262d660ea253acc31f13c123a8f" name="chromium" arch="aarch64">
  <version epoch="0" ver="133.0.6943.141" rel="bp156.2.87.1"/>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="748b2a9fd5baaeaaec18ea176383ffabe134946b1bb0cb7ac15e98974730e9d4" name="chromium" arch="src">
  <version epoch="0" ver="133.0.6943.141" rel="bp156.2.87.1"/>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="e6b92d1d6b6554e42d872ea96c0dbcae3198224d8c2481d4bc31d55e5b1fec4a" name="chromium" arch="x86_64">
  <version epoch="0" ver="133.0.6943.141" rel="bp156.2.87.1"/>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="3d61feb25763d7b09dfa1e81ecd9beb9b70f75e652016f9fb01026c17493a7e3" name="chromium" arch="aarch64">
  <version epoch="0" ver="133.0.6943.53" rel="bp156.2.78.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="540aae8e95a62687ea09406012ba0889bc14fd653f9883bef11d4d5221a178df" name="chromium" arch="src">
  <version epoch="0" ver="133.0.6943.53" rel="bp156.2.78.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="63d70e3dd15210f4f2cc7697817c758c22b66741ae7c0f0b67177781fce76b4c" name="chromium" arch="x86_64">
  <version epoch="0" ver="133.0.6943.53" rel="bp156.2.78.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 129.0.6668.100 (boo#1231420)
  * CVE-2024-9602: Type Confusion in V8
  * CVE-2024-9603: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734401">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="40e0d0cbe234206fa98c6a98968546cc6cce931fa18b9216c913c96b7bc18ba6" name="chromium" arch="aarch64">
  <version epoch="0" ver="133.0.6943.98" rel="bp156.2.81.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="334133ee6bc848391c729dd7de77bd1694a098f20c398aca92e28833e166ba2a" name="chromium" arch="src">
  <version epoch="0" ver="133.0.6943.98" rel="bp156.2.81.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="19b4e692782c05c44b54c19a498cfd964011b1b3177130ff37de8a14cff82f0a" name="chromium" arch="x86_64">
  <version epoch="0" ver="133.0.6943.98" rel="bp156.2.81.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1728734400">- Chromium 130.0.6723.58 (boo#1231694)
  * CVE-2024-9954: Use after free in AI
  * CVE-2024-9955: Use after free in Web Authentication
  * CVE-2024-9956: Inappropriate implementation in Web Authentication
  * CVE-2024-9957: Use after free in UI
  * CVE-2024-9958: Inappropriate implementation in PictureInPicture
  * CVE-2024-9959: Use after free in DevTools
  * CVE-2024-9960: Use after free in Dawn
  * CVE-2024-9961: Use after free in Parcel Tracking
  * CVE-2024-9962: Inappropriate implementation in Permissions
  * CVE-2024-9963: Insufficient data validation in Downloads
  * CVE-2024-9964: Inappropriate implementation in Payments
  * CVE-2024-9965: Insufficient data validation in DevTools
  * CVE-2024-9966: Inappropriate implementation in Navigations
- modified patches:
  * exclude_ymp.patch update context
  * chromium-125-compiler.patch update context
  * chromium-125-lp155-typename.patch drop hunks for rewritten
    proto_fetcher.h
  * chromium-127-bindgen.patch update context
- added patches:
  * chromium-130-missing-includes.patch include optional, stack
  * chromium-130-no-hardware_destructive_interference_size.patch
    workaround for older libcpp
- drop from keeplibs:
  courgette/third_party dropped upstream
- add to keepllibs:
  third_party/fast_float needed by v8/src/numbers/conversion.cc</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1729944000">- Chromium 130.0.6723.69 (boo#1232060)
  * CVE-2024-10229: Inappropriate implementation in Extensions
  * CVE-2024-10230: Type Confusion in V8
  * CVE-2024-10231: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1730116800">- change BR for rust to require version 1.81
  (1.82 uses a newer llvm)</changelog>
  <changelog author="ro@suse.de" date="1730289600">- Chromium 130.0.6723.91 (boo#1232566)
  * CVE-2024-10487: Out of bounds write in Dawn
  * CVE-2024-10488: Use after free in WebRTC</changelog>
  <changelog author="ro@suse.de" date="1730894400">- Chromium 130.0.6723.116 (boo#1232843)
  * CVE-2024-10826: Use after free in Family Experiences
  * CVE-2024-10827: Use after free in Serial</changelog>
  <changelog author="ro@suse.de" date="1730980800">- Chromium 131.0.6778.69
  (stable released 2024-11-12) (boo#1233311)
  * CVE-2024-11110: Inappropriate implementation in Blink.
  * CVE-2024-11111: Inappropriate implementation in Autofill.
  * CVE-2024-11112: Use after free in Media.
    (n/a for linux)
  * CVE-2024-11113: Use after free in Accessibility.
  * CVE-2024-11114: Inappropriate implementation in Views.
    (n/a for linux)
  * CVE-2024-11115: Insufficient policy enforcement in Navigation.
    (n/a for linux)
  * CVE-2024-11116: Inappropriate implementation in Paint.
  * CVE-2024-11117: Inappropriate implementation in FileSystem.
- dropped patches:
  * chromium-130-missing-includes.patch (upstream)
  * chromium-125-lp155-typename.patch (not required with llvm)
- modified patches:
  * chromium-127-bindgen.patch (drop all allowlist changes)
  * chromium-127-constexpr.patch (update from debian patch)
- added patches:
  * chromium-131-unbundle-enable-freetype.patch
    from git, missing in 131 release
  * chromium-131-clang-stack-protector.patch
    (partial revert of upstream commit
    c3dadb02f611a360fb40fd8844ed3c1ef1e7834e)
- drop from keeplibs: (deleted upstream)
  third_party/devtools-frontend/src/front_end/third_party/lodash-isequal
- add to keeplibs:
  third_party/tflite/src/third_party/xla/xla/tsl (drop subdirs)
  third_party/ink</changelog>
  <changelog author="ro@suse.de" date="1732104000">- Chromium 131.0.6778.85
  (stable released 2024-11-19) (boo#1233534)
  * CVE-2024-11395: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="495ff33d1f3818a249e27817a4cb62a58786f362cf33b57d872523494df50df3" name="chromium" arch="aarch64">
  <version epoch="0" ver="134.0.6998.117" rel="bp156.2.96.1"/>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
</package>
<package pkgid="287f3c35cb2c0976e0a3f967833efbe0bbfba69e5f19393f7d35b6e923b1b8b6" name="chromium" arch="src">
  <version epoch="0" ver="134.0.6998.117" rel="bp156.2.96.1"/>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
</package>
<package pkgid="fa82e792cbd6a92e66a5c1869a02ba0f54aa17335508589f62c1fa21dce0a95d" name="chromium" arch="x86_64">
  <version epoch="0" ver="134.0.6998.117" rel="bp156.2.96.1"/>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
</package>
<package pkgid="84b3a7a7ac6b52c03332c48e8c77594c98c78a9ece57e2dffebfac6e57e20204" name="chromium" arch="aarch64">
  <version epoch="0" ver="134.0.6998.165" rel="bp156.2.99.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- disable not needed chromium-120-make_unique-struct.patch
  (context boo#1239780)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
</package>
<package pkgid="7a19c3be7c475e5ce1d99fa4f3fcd85afeb331aba874e10e84e77a07f4df3044" name="chromium" arch="src">
  <version epoch="0" ver="134.0.6998.165" rel="bp156.2.99.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- disable not needed chromium-120-make_unique-struct.patch
  (context boo#1239780)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
</package>
<package pkgid="2ad69097a229af81417a8a3525acfef8002456e019a82cc620bd8053d9e705bf" name="chromium" arch="x86_64">
  <version epoch="0" ver="134.0.6998.165" rel="bp156.2.99.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- disable not needed chromium-120-make_unique-struct.patch
  (context boo#1239780)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
</package>
<package pkgid="6e3dafe4a3662b489eedb84fb15e7c18a3da36558327dc0c1bfdabe4641737c3" name="chromium" arch="aarch64">
  <version epoch="0" ver="134.0.6998.35" rel="bp156.2.90.1"/>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
</package>
<package pkgid="c851d5d45aa06d52a7188c14722e5cf03dde5d0199cae87e07c604a241eb339f" name="chromium" arch="src">
  <version epoch="0" ver="134.0.6998.35" rel="bp156.2.90.1"/>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
</package>
<package pkgid="ff26bdfc912a792b566e441de86736e1b7fdb5d34c933b46feeeeec99dcf6ad5" name="chromium" arch="x86_64">
  <version epoch="0" ver="134.0.6998.35" rel="bp156.2.90.1"/>
  <changelog author="ro@suse.de" date="1733313600">- Chromium 131.0.6778.108
  (stable released 2024-12-04) (boo#1234118)
  * CVE-2024-12053: Type Confusion in V8
- update patches:
  chromium-127-constexpr.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1733918400">- Chromium 131.0.6778.139 (boo#1234361)
  * CVE-2024-12381: Type Confusion in V8
  * CVE-2024-12382: Use after free in Translate
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
</package>
<package pkgid="9189abd780ee66e81e317581eb4ccda1103f2521a3c04a14e168dffa8f09a1ba" name="chromium" arch="aarch64">
  <version epoch="0" ver="134.0.6998.88" rel="bp156.2.93.1"/>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
</package>
<package pkgid="f855657682817042b6f0802524ca3d175575b783e18404b7a8a97a37791cfd2f" name="chromium" arch="src">
  <version epoch="0" ver="134.0.6998.88" rel="bp156.2.93.1"/>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
</package>
<package pkgid="f89bf488a74ef14d093c991366d1c9708c470e4f314ad5d5ed9dc603cf7ecbf8" name="chromium" arch="x86_64">
  <version epoch="0" ver="134.0.6998.88" rel="bp156.2.93.1"/>
  <changelog author="ro@suse.de" date="1734609600">- Chromium 131.0.6778.204 (boo#1234704)
  * CVE-2024-12692: Type Confusion in V8
  * CVE-2024-12693: Out of bounds memory access in V8
  * CVE-2024-12694: Use after free in Compositing
  * CVE-2024-12695: Out of bounds write in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736337600">- Chromium 131.0.6778.264 (boo#1235422)
  * CVE-2025-0291: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1736510400">- more work on 15.7/15-SP7 using recent llvm,rust,gcc
- cleanup use of suse_version macro
- cleanup use of conditionally applied patches, switch from
  autoset to setup/autopatch which allows to specify a range
  and apply remaining patches conditionally</changelog>
  <changelog author="ro@suse.de" date="1736769600">- Chromium 132.0.6834.83
  (stable released 2024-01-14) (bsc#1235892)
  * CVE-2025-0434: Out of bounds memory access in V8
  * CVE-2025-0435: Inappropriate implementation in Navigation
  * CVE-2025-0436: Integer overflow in Skia
  * CVE-2025-0437: Out of bounds read in Metrics
  * CVE-2025-0438: Stack buffer overflow in Tracing
  * CVE-2025-0439: Race in Frames
  * CVE-2025-0440: Inappropriate implementation in Fullscreen
  * CVE-2025-0441: Inappropriate implementation in Fenced Frames
  * CVE-2025-0442: Inappropriate implementation in Payments
  * CVE-2025-0443: Insufficient data validation in Extensions
  * CVE-2025-0446: Inappropriate implementation in Extensions
  * CVE-2025-0447: Inappropriate implementation in Navigation
  * CVE-2025-0448: Inappropriate implementation in Compositing
- dropped patches:
  * chromium-131-unbundle-enable-freetype.patch (upstream)
- added patches:
  * chromium-8d882c289f17e3a67d6d67d5ff7e9d16ebb4f19a.patch
    (apply git upstream reverse for 15.x with llvm17)
  * chromium-93-ffmpeg-4.4-rest.patch
    (split off to only apply after the reverse)
  * chromium-132-old_libdrm.patch
    (applied only on 15.5 with libdrm &lt; 2.4.116)
  * chromium-132-pdfium-explicit-template.patch
    (error: alias template requires template arguments)
- update context in
  * chromium-125-compiler.patch
  * chromium-127-rust-clanglib.patch
  * Cr122-ffmpeg-new-channel-layout.patch
  * gcc-enable-lto.patch
  * chromium-127-constexpr.patch
- update esbuild to 0.24.0
  - drop old tarball
  - use upstream release tarball for 0.24.0
  - add vendor tarball for golang.org/x/sys
- add to keeplibs:
  third_party/libtess2
  third_party/devtools-frontend/src/node_modules/fast-glob</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1737633600">- Chromium 132.0.6834.110 (boo#1236306)
  * CVE-2025-0611: Object corruption in V8
  * CVE-2025-0612: Out of bounds memory access in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1738152000">- Chromium 132.0.6834.159 (boo#1236586)
  * CVE-2025-0762: Use after free in DevTools</changelog>
  <changelog author="ro@suse.de" date="1738238400">- drop chromium-132-old_libdrm.patch
  obsolete as we are not building for 15.5 anymore</changelog>
  <changelog author="ro@suse.de" date="1738238401">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238402">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
</package>
<package pkgid="80ffcf84f6ae59fef892e1fce153d305be6ca69732020d7a7e6e57b3c520e7d7" name="chromium" arch="aarch64">
  <version epoch="0" ver="135.0.7049.52" rel="bp156.2.102.2"/>
  <changelog author="ro@suse.de" date="1738238400">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238401">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
</package>
<package pkgid="329ad8ac720d11b9c5df640c7452f1a427f292c85c7cd3f581f5afb45c86537b" name="chromium" arch="src">
  <version epoch="0" ver="135.0.7049.52" rel="bp156.2.102.2"/>
  <changelog author="ro@suse.de" date="1738238400">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238401">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
</package>
<package pkgid="249d93aa911c3926173d505cb41c1639b9b443dc55a614841a2c8d2ba30c662a" name="chromium" arch="x86_64">
  <version epoch="0" ver="135.0.7049.52" rel="bp156.2.102.2"/>
  <changelog author="ro@suse.de" date="1738238400">- Chromium 133.0.6943.35
  (beta released 2025-01-29)
- use llvm19 also on 15.6/SLE-15-SP6
- dropped patches:
  chromium-125-disable-FFmpegAllowLists.patch
  chromium-119-assert.patch
  (code dropped upstream)
- modified patches
  chromium-129-revert-AVFMT_FLAG_NOH264PARSE.patch
  (rest of code is gone upstream, see commit
  574c1e6678da435efb2ea9dba5dd890c2704b8af)
- update context in
  chromium-102-regex_pattern-array.patch
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
- add to keeplibs:
  third_party/simdutf
  third_party/wasm_tts_engine (needed by tools/grit)
  v8/third_party/siphash (moved inside of v8)
  v8/third_party/utf8-decoder (moved inside of v8)
  v8/third_party/valgrind (moved inside of v8)
- drop from keeplibs (gone in source):
  third_party/jstemplate does not exist
  third_party/qcms does not exist
- drop buildreq for libevent and libevent from system libs
  as the lib was dropped upstream
- added patches (as revert for llvm17 in sp6):
  chromium-add-atomicops.patch
  (upstream commit d29b01737a841b5627249d50f007dcdc7e26462b)
  (upstream commit 780efe38034cfdc1bdf4c74e82e7ca7c14e8ac5b
  does not seem to be in 133 yet)
  chromium-133-string_view.patch
  (one more place to use string_view, also only llvm17)
- update INSTALL.sh to generate appdata.xml from template</changelog>
  <changelog author="ro@suse.de" date="1738238401">- dropped patches: (obsolete with recent llvm)
  chromium-130-no-hardware_destructive_interference_size.patch</changelog>
  <changelog author="ro@suse.de" date="1738756800">- Chromium 133.0.6943.53
  (stable released 2024-02-04) (bsc#1236806)
  * CVE-2025-0444: Use after free in Skia
  * CVE-2025-0445: Use after free in V8
  * CVE-2025-0451: Inappropriate implementation in Extensions API</changelog>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
</package>
<package pkgid="a8639ef9c8e97566c4e8069f0590ffcbf6f4814a255a880f9fbbe1bf46b09843" name="chromium" arch="aarch64">
  <version epoch="0" ver="135.0.7049.84" rel="bp156.2.107.1"/>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
</package>
<package pkgid="7696d3a148f88c689b3c04922d8d0d45aa00dc8ce16b85d783c16ad4ccb89a45" name="chromium" arch="src">
  <version epoch="0" ver="135.0.7049.84" rel="bp156.2.107.1"/>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
</package>
<package pkgid="b2d9ae6b998c203df57daa4f69f9e5eab0484b01c98baf34c9bcbdc0d733901f" name="chromium" arch="x86_64">
  <version epoch="0" ver="135.0.7049.84" rel="bp156.2.107.1"/>
  <changelog author="ro@suse.de" date="1739448000">- Chromium 133.0.6943.98
  (stable released 2025-02-12) (bsc#1237121)
  * CVE-2025-0995: Use after free in V8
  * CVE-2025-0996: Inappropriate implementation in Browser UI
  * CVE-2025-0997: Use after free in Navigation
  * CVE-2025-0998: Out of bounds memory access in V8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448001">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
</package>
<package pkgid="2a28188743595dd87cc7125fc8499d81ffd8557b2bcca920450c4f2bd6560868" name="chromium" arch="aarch64">
  <version epoch="0" ver="135.0.7049.95" rel="bp156.2.110.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448000">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
</package>
<package pkgid="2cc602881b7348172a6d3818369e10ee7596e16b3f3d0942fd22acea892d8a7a" name="chromium" arch="src">
  <version epoch="0" ver="135.0.7049.95" rel="bp156.2.110.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448000">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
</package>
<package pkgid="717e3b0a93abdb927b6f908fa3ddd34e688dc0963c2d64094a8f7caa2111fb0c" name="chromium" arch="x86_64">
  <version epoch="0" ver="135.0.7049.95" rel="bp156.2.110.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739448000">- Add patch to fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1739534400">- Fix patch to actually fix build with pipewire 1.3.82:
  * fix-build-with-pipewire-1.3.82.patch</changelog>
  <changelog author="ro@suse.de" date="1739880000">- replace "with qt" by "with qt5"
- add patch chromium-133-bring_back_and_disable_allowlist.patch
  trying to fix issues with YT playback (bsc#1237071)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
</package>
<package pkgid="a03c5cc851ddf9edfb831c84517011b73319d77a809bafd3a68bfc4f9034be97" name="chromium" arch="aarch64">
  <version epoch="0" ver="136.0.7103.113" rel="bp156.2.119.1"/>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
</package>
<package pkgid="fc10153be69d0157684de08fbacef3be18306a45a35873852c49117c82cc505b" name="chromium" arch="src">
  <version epoch="0" ver="136.0.7103.113" rel="bp156.2.119.1"/>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
</package>
<package pkgid="ffd9b15930a4155a09f8965a55bfd7bfdf61954eae7fb453d8b47dbbf003f788" name="chromium" arch="x86_64">
  <version epoch="0" ver="136.0.7103.113" rel="bp156.2.119.1"/>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
</package>
<package pkgid="f269ad64c07ae510e16be8d2297e394ab7ba176f97c83119d8a6732194056b2c" name="chromium" arch="aarch64">
  <version epoch="0" ver="136.0.7103.59" rel="bp156.2.113.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
</package>
<package pkgid="43dd453760bf32373074c8efa3ae349f7d4781cead7902fa429cb4db12eae3a8" name="chromium" arch="src">
  <version epoch="0" ver="136.0.7103.59" rel="bp156.2.113.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
</package>
<package pkgid="e7e98dc0ab4436129faf813c8f21de5a9897d985dca3c73b3fe62a1d5bc2ff1e" name="chromium" arch="x86_64">
  <version epoch="0" ver="136.0.7103.59" rel="bp156.2.113.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1739966400">- Chromium 133.0.6943.126 (boo#1237343)
  * CVE-2025-0999: Heap buffer overflow in V8
  * CVE-2025-1426: Heap buffer overflow in GPU
  * CVE-2025-1006: Use after free in Network</changelog>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
</package>
<package pkgid="2dc19ab6e03f457407088fd81ba4abc7d4081fb751d0b9309e7725133db4350e" name="chromium" arch="aarch64">
  <version epoch="0" ver="136.0.7103.92" rel="bp156.2.116.1"/>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
</package>
<package pkgid="e2fb89bc9ff1944d9641455715c8596a979229c665b92b85132498e54fce03e5" name="chromium" arch="src">
  <version epoch="0" ver="136.0.7103.92" rel="bp156.2.116.1"/>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
</package>
<package pkgid="15e04e6144965ac42ab8508ec1e41923e560e3ba0bbb7e2d9cf997f4db4d8fd3" name="chromium" arch="x86_64">
  <version epoch="0" ver="136.0.7103.92" rel="bp156.2.116.1"/>
  <changelog author="ro@suse.de" date="1740398400">- fix build with qt6 and enable qt6 also for 15.x
- added patches:
  chromium-131-fix-qt-ui.pach (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1740571200">- Chromium 133.0.6943.141 (boo#1237699)
  This update includes 1 security fix.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="ro@suse.de" date="1740657600">- Chromium 134.0.6998.35
  (stable release 2025-03-04) (boo#1238575)
  * CVE-2025-1914: Out of bounds read in V8
  * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
  * CVE-2025-1916: Use after free in Profiles
  * CVE-2025-1917: Inappropriate Implementation in Browser UI
  * CVE-2025-1918: Out of bounds read in PDFium
  * CVE-2025-1919: Out of bounds read in Media
  * CVE-2025-1921: Inappropriate Implementation in Media Stream
  * CVE-2025-1922: Inappropriate Implementation in Selection
  * CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- modified patches:
  fix_building_widevinecdm_with_chromium.patch
  (do not define WIDEVINE_CDM_VERSION_STRING, gone upstream)
  system-libdrm.patch (context update)
- added patches:
  chromium-134-revert-allowlist.patch
  (avoid having to update gn on all targets)
  chromium-134-revert-rust-adler2.patch
  (revert rust change from adler to adler2 while we have 1.83)
  chromium-134-specialize-some-to_value_list.patch
- dropped patches (llvm17 is gone):
  chromium-127-clang17-traitors.patch
  chromium-add-atomicops.patch
  chromium-133-string_view.patch
- add to keeplibs:
  third_party/search_engines_data
  v8/third_party/rapidhash-v8
- drop from keeplibs:
  third_party/libavif (gone) (FIXME cleanup)
- reenable qt6 for TW</changelog>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
</package>
<package pkgid="45269256a3928c1d3830c95933699a1bf7907df5cab33bb1a50447548122336d" name="chromium" arch="aarch64">
  <version epoch="0" ver="137.0.7151.103" rel="bp156.2.128.1"/>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
</package>
<package pkgid="f6b41011034f990da142684c09436a9b17fe6d126e315354b5a55a6d0f542399" name="chromium" arch="ppc64le">
  <version epoch="0" ver="137.0.7151.103" rel="bp156.2.128.1"/>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
</package>
<package pkgid="93e194585684ce7dd564edb28ff244957df0525424b58f5c3a400a21a973228d" name="chromium" arch="src">
  <version epoch="0" ver="137.0.7151.103" rel="bp156.2.128.1"/>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
</package>
<package pkgid="6c6428f0753507ea365b27b4c235e98278fb4f8e54ded2224f27d67d9d361aad" name="chromium" arch="x86_64">
  <version epoch="0" ver="137.0.7151.103" rel="bp156.2.128.1"/>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
</package>
<package pkgid="3594c07a23529945e38a2f4ec51e5b562ea44f6ae6399476fcdf3a2806f5a657" name="chromium" arch="aarch64">
  <version epoch="0" ver="137.0.7151.119" rel="bp156.2.131.1"/>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
</package>
<package pkgid="130adbba3eb8d4d889f9fe62ae37b1ef18807679bdf57f04940c685832145caa" name="chromium" arch="ppc64le">
  <version epoch="0" ver="137.0.7151.119" rel="bp156.2.131.1"/>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
</package>
<package pkgid="ee494dc887657faa172b67747fc0ee61b9d81a57dc14f14118b65947c515b1aa" name="chromium" arch="src">
  <version epoch="0" ver="137.0.7151.119" rel="bp156.2.131.1"/>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
</package>
<package pkgid="c1005db46634cd0ede366b6979c5c4e1f1c5cabb07a0a38166fc203fcc23f465" name="chromium" arch="x86_64">
  <version epoch="0" ver="137.0.7151.119" rel="bp156.2.131.1"/>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
</package>
<package pkgid="675484d63beff205af6821bc62517c26a4d05669c16e0b6707b4309f09921b90" name="chromium" arch="aarch64">
  <version epoch="0" ver="137.0.7151.55" rel="bp156.2.122.2"/>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
</package>
<package pkgid="b1b31a2998f1207df9d63d531f1bf52bea1bf4ccac37642f030ba83a837b6fae" name="chromium" arch="src">
  <version epoch="0" ver="137.0.7151.55" rel="bp156.2.122.2"/>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
</package>
<package pkgid="9cf41fb6bb800291324826ae4bed1bdc8cc819ffaa3d8a86c5535d7e3eafe0ad" name="chromium" arch="x86_64">
  <version epoch="0" ver="137.0.7151.55" rel="bp156.2.122.2"/>
  <changelog author="ro@suse.de" date="1741176000">- replace patch
  chromium-134-specialize-some-to_value_list.patch
  by patch
  chromium-134-type-mismatch-error.patch (from fedora)</changelog>
  <changelog author="ro@suse.de" date="1741694400">- Chromium 134.0.6998.88
  (stable released 2025-03-11) (boo#1239216)
  * CVE-2025-1920: Type Confusion in V8
  * CVE-2025-2135: Type Confusion in V8
  * CVE-TBD: Out of bounds write in GPU
  * CVE-2025-2136: Use after free in Inspector
  * CVE-2025-2137: Out of bounds read in V8</changelog>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
</package>
<package pkgid="9ea74d5d3f9bc9d100700381c5f85ba694de18b3a1d1c63d7cd1d5e5720a035e" name="chromium" arch="aarch64">
  <version epoch="0" ver="137.0.7151.68" rel="bp156.2.125.2"/>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
</package>
<package pkgid="877a1e513d12040035ca0d3401a5bbbe322ddd89f62e9b74a6dce4042feba5c5" name="chromium" arch="ppc64le">
  <version epoch="0" ver="137.0.7151.68" rel="bp156.2.125.2"/>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
</package>
<package pkgid="1564247ac3a485b62f641628c33fd9a3649ecdabd78a8af658e3bfdee1826114" name="chromium" arch="src">
  <version epoch="0" ver="137.0.7151.68" rel="bp156.2.125.2"/>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
</package>
<package pkgid="e4600da6ddb53f6d90b41a1444ccc4460f8877b42a4ae1128d8b8280f3fef168" name="chromium" arch="x86_64">
  <version epoch="0" ver="137.0.7151.68" rel="bp156.2.125.2"/>
  <changelog author="ro@suse.de" date="1741953600">- drop chromium-94-ffmpeg-roll.patch
  (build fail after ffmpeg updated from 4.4 to 4.4.5 in code15)</changelog>
  <changelog author="ro@suse.de" date="1742385600">- use rust1.85</changelog>
  <changelog author="ro@suse.de" date="1742472000">- Chromium 134.0.6998.117
  (stable released 2025-03-20) (boo#1239819)
  * CVE-2025-2476: Use after free in Lens</changelog>
  <changelog author="ro@suse.de" date="1742558400">- drop chromium-120-make_unique-struct.patch (not needed)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742644800">- Chromium 134.0.6998.165
  * stability fixes (boo#1240022)</changelog>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
</package>
<package pkgid="63fd0a5c02c5b317fdf6d33fd96f867c2a0cb34c9ae192211480eb90347cb41b" name="chromium" arch="aarch64">
  <version epoch="0" ver="138.0.7204.157" rel="bp156.2.141.1"/>
  <changelog author="ro@suse.de" date="1744113600">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745409600">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747224000">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
</package>
<package pkgid="085e50ba8fdac5b1cb15d2b3896dbee99dac03b8bfbdcc2c1418ced60598a757" name="chromium" arch="ppc64le">
  <version epoch="0" ver="138.0.7204.157" rel="bp156.2.141.1"/>
  <changelog author="ro@suse.de" date="1744113600">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745409600">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747224000">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
</package>
<package pkgid="e58926988554e089851a60c38fca723351131c2ad0329df7a40d4473fce66f0d" name="chromium" arch="src">
  <version epoch="0" ver="138.0.7204.157" rel="bp156.2.141.1"/>
  <changelog author="ro@suse.de" date="1744113600">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745409600">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747224000">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
</package>
<package pkgid="27e2c4a4e1ff28fd482307c2793ed0f4e159b9be8b804181e9b037d0b9e5cd42" name="chromium" arch="x86_64">
  <version epoch="0" ver="138.0.7204.157" rel="bp156.2.141.1"/>
  <changelog author="ro@suse.de" date="1744113600">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745409600">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747224000">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
</package>
<package pkgid="9927049e6210ec67d8f68f0ed624c95af9dc32147675878fed4bdb19a53c30f3" name="chromium" arch="aarch64">
  <version epoch="0" ver="138.0.7204.168" rel="bp156.2.144.1"/>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745409600">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747224000">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="438667619c82855c44aa00349d851e42a153db62bd34f15a9934787c96a72483" name="chromium" arch="src">
  <version epoch="0" ver="138.0.7204.168" rel="bp156.2.144.1"/>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745409600">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747224000">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="b12d32dadb08677732578dbea35f8d2aeab507e86b7e7e4fdcb91b9327185d6e" name="chromium" arch="x86_64">
  <version epoch="0" ver="138.0.7204.168" rel="bp156.2.144.1"/>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745409600">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747224000">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="bb7c5064e85075949db80d6a028bb76bf9a481f04f4ddaa7ac43ecbb47853702" name="chromium" arch="aarch64">
  <version epoch="0" ver="138.0.7204.183" rel="bp156.2.147.1"/>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
</package>
<package pkgid="be87065fc594b4ed1520504c9904de0ae4edd7985fe7d401715ede70df936cb9" name="chromium" arch="ppc64le">
  <version epoch="0" ver="138.0.7204.183" rel="bp156.2.147.1"/>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
</package>
<package pkgid="9f12264e87f6ca98d33ed38d1b243a15381c2131d340b6ed889b7768078a0fee" name="chromium" arch="src">
  <version epoch="0" ver="138.0.7204.183" rel="bp156.2.147.1"/>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
</package>
<package pkgid="644d23abd04d2de5c5afd10f953258fa820c4f996e6c267cf72553156c1b2d3c" name="chromium" arch="x86_64">
  <version epoch="0" ver="138.0.7204.183" rel="bp156.2.147.1"/>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
</package>
<package pkgid="375c32b2e779891d62048dc24e8293d05a9f4c9ff1798b7476a69d2ab7dd501b" name="chromium" arch="aarch64">
  <version epoch="0" ver="138.0.7204.96" rel="bp156.2.138.1"/>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
</package>
<package pkgid="fb717c59ee800a560df2c82ee0c722f4ad54924f6904448cdfba4ef6970e2d6f" name="chromium" arch="ppc64le">
  <version epoch="0" ver="138.0.7204.96" rel="bp156.2.138.1"/>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
</package>
<package pkgid="f5a4c25155f3c83645888fab34ea064f0b10c53ac77aac64402eacbd59ece558" name="chromium" arch="src">
  <version epoch="0" ver="138.0.7204.96" rel="bp156.2.138.1"/>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
</package>
<package pkgid="d9c2cb1732505ab417d284f8e3b7435c65583e204e0830388559913003706b81" name="chromium" arch="x86_64">
  <version epoch="0" ver="138.0.7204.96" rel="bp156.2.138.1"/>
  <changelog author="ro@suse.de" date="1742990400">- drop chromium-134-revert-allowlist.patch
  (obsolete, gn has been updated)
- also use nodejs 22 for sle15</changelog>
  <changelog author="ro@suse.de" date="1743595200">- Chromium 135.0.7049.52
  (stable release 2025-04-01) (boo#1240555)
  * CVE-2025-3066: Use after free in Navigations
  * CVE-2025-3067: Inappropriate implementation in Custom Tabs
  * CVE-2025-3068: Inappropriate implementation in Intents
  * CVE-2025-3069: Inappropriate implementation in Extensions
  * CVE-2025-3070: Insufficient validation of untrusted input in Extensions
  * CVE-2025-3071: Inappropriate implementation in Navigations
  * CVE-2025-3072: Inappropriate implementation in Custom Tabs
  * CVE-2025-3073: Inappropriate implementation in Autofill
  * CVE-2025-3074: Inappropriate implementation in Downloads
- modified patches:
  system-libdrm.patch (context update)
  gcc-enable-lto.patch (context update)
  chromium-127-constexpr.patch (context update)
  chromium-norar.patch (context update)
- added patches:
  gtk-414.patch (reverse apply since our gtk4 is too old)
- add to keeplibs:
  third_party/protobuf/third_party/utf8_range
- drop from keeplibs:
  third_party/iccjpeg (gone upstream)
- config variable changed from use_qt to use_qt5
- bump buildrequires for gn to 0.20250306</changelog>
  <changelog author="ro@suse.de" date="1743768000">- add patch chromium-135-add_map_droppable.patch
  add MAP_DROPPABLE introduced by recent QT
  (boo#1238826, boo#1239780)</changelog>
  <changelog author="ro@suse.de" date="1744200000">- Chromium 135.0.7049.84
  (stable release 2025-04-08) (boo#1240968)
  * CVE-2025-3066: Use after free in Site Isolation</changelog>
  <changelog author="ro@suse.de" date="1744286400">- update chromium-121-rust-clang_lib.patch to apply cleanly</changelog>
  <changelog author="ro@suse.de" date="1744804800">- Chromium 135.0.7049.95
  (stable release 2025-04-15) (boo#1241288)
  * CVE-2025-3619: Heap buffer overflow in Codecs
  * CVE-2025-3620: Use after free in USB</changelog>
  <changelog author="ro@suse.de" date="1745323200">- add patch chromium-135-gperf-output.patch from upstream
  to fix compilation when using gperp-3.2 and above
  which resolved the issue with the FALLTHROUGH comment</changelog>
  <changelog author="ro@suse.de" date="1745496000">- Chromium 135.0.7049.114
  (stable release 2025-04-22)
  * stability fixes</changelog>
  <changelog author="ro@suse.de" date="1746187200">- Chromium 136.0.7103.48
  (stable release 2025-04-29) (boo#1242153)
  * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11
  * CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09
  * CVE-2025-4051: Insufficient data validation in DevTools. Reported by Daniel Fröjdendahl on 2025-03-1
  * CVE-2025-4052: Inappropriate implementation in DevTools. Reported by vanillawebdev on 2025-03-10
- added patches:
  chromium-warning-suppression-mappings.patch
  (from upstream, revert for llvm &lt; 20)
- dropped patches:
  fix-build-with-pipewire-1.3.82.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  gtk-414.patch (one more place with GSK_SUBSURFACE_NODE)
- bump esbuild from 0.24.0 to 0.25.1
  * Fix incorrect paths in inline source maps (#4070, #4075, #4105)
  * Fix invalid generated source maps (#4080, #4082, #4104, #4107)
  * Fix a regression with non-file source map paths (#4078)
  * Update Go from 1.23.5 to 1.23.7 (#4076, #4077)</changelog>
  <changelog author="ro@suse.de" date="1746619200">- Chromium 136.0.7103.92
  (stable release 2025-05-06) (boo#1242717)
  * CVE-2025-4372: Use after free in WebAudio</changelog>
  <changelog author="ro@suse.de" date="1747051200">- try build on ppc64le
- added patches (from fedora)
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-skia-vsx-instructions.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-fix-clang-selection.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-memory-allocator-dcheck-assert-fix.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-fix-ppc64-rust_png-build-error.patch
- added patches
    ppc-chromium-136-clang-config.patch
- disable swiftshader on ppc64le like on aarch64</changelog>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
</package>
<package pkgid="8d913872d533c07e495e779687b9c6e665cb4ce7a3976446aa4a2306c1491d98" name="chromium" arch="aarch64">
  <version epoch="0" ver="139.0.7258.127" rel="bp156.2.155.1"/>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="3de73aa071a53ca353df4f169565e178b9be3ab98777e5e77164f1c706535705" name="chromium" arch="ppc64le">
  <version epoch="0" ver="139.0.7258.127" rel="bp156.2.155.1"/>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="a8c5624b06fca866a51b78dd485e85e46743ad7513eeb3fe19b4159494d5bd9a" name="chromium" arch="src">
  <version epoch="0" ver="139.0.7258.127" rel="bp156.2.155.1"/>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="df9a2aeb803e8f3680865dd5e316b0383822c2d5263eb7d076e9cc9e2fa8f18b" name="chromium" arch="x86_64">
  <version epoch="0" ver="139.0.7258.127" rel="bp156.2.155.1"/>
  <changelog author="ro@suse.de" date="1748347200">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="65471f7c4a2a08be39acac59936aef80c46d3b14cd49b42e49b05dd1fc103969" name="chromium" arch="aarch64">
  <version epoch="0" ver="139.0.7258.138" rel="bp156.2.158.1"/>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
</package>
<package pkgid="274ab7629b093b1029b202f11b2b90fd300b0a83dc3c974c5656c4536e75cc61" name="chromium" arch="ppc64le">
  <version epoch="0" ver="139.0.7258.138" rel="bp156.2.158.1"/>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
</package>
<package pkgid="cee74b5571f32dbda4c240291b569b4baa5f85e45aaf28beb2ba8beeb9df2654" name="chromium" arch="src">
  <version epoch="0" ver="139.0.7258.138" rel="bp156.2.158.1"/>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
</package>
<package pkgid="7869be5003c025ffd4fbf2596c1b2c802fabaa337578f16c0c43bbcd7f64893f" name="chromium" arch="x86_64">
  <version epoch="0" ver="139.0.7258.138" rel="bp156.2.158.1"/>
  <changelog author="ro@suse.de" date="1748520000">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
</package>
<package pkgid="f3133be30281a7ee37749026ed93fdafd402548ab90c19803b2d84862998b5d1" name="chromium" arch="aarch64">
  <version epoch="0" ver="139.0.7258.154" rel="bp156.2.161.1"/>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
</package>
<package pkgid="f03ad1743247d6b27d2d92bec7316146649bfd3c6d0581ccea92339d00b604df" name="chromium" arch="ppc64le">
  <version epoch="0" ver="139.0.7258.154" rel="bp156.2.161.1"/>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
</package>
<package pkgid="d6a20573795d5a5e47674a100c8a831b3d5de624a64027a112993305aa4122a9" name="chromium" arch="src">
  <version epoch="0" ver="139.0.7258.154" rel="bp156.2.161.1"/>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
</package>
<package pkgid="3a4b41e7af5048310438cc683c5ecc21cdda166cc3f937575b16e1ab94c23ce2" name="chromium" arch="x86_64">
  <version epoch="0" ver="139.0.7258.154" rel="bp156.2.161.1"/>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
</package>
<package pkgid="ab0b3893ba7afe5cf96e2bc4977000ad5765464ad112cb930caeb8a295dfd102" name="chromium" arch="aarch64">
  <version epoch="0" ver="139.0.7258.66" rel="bp156.2.152.1"/>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
</package>
<package pkgid="651208a1a08cf20a780703d7521e0e1f7bd887b67e4f2f29c96d3866d6b12c5a" name="chromium" arch="ppc64le">
  <version epoch="0" ver="139.0.7258.66" rel="bp156.2.152.1"/>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
</package>
<package pkgid="249a75fc59c37d199eb45a3ddbc96b09fbcbeffd6a52e7b778eb20287a50f718" name="chromium" arch="src">
  <version epoch="0" ver="139.0.7258.66" rel="bp156.2.152.1"/>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
</package>
<package pkgid="bffb6ec9c92e009c891ae3e1a4bc5a03b634edafebe10ca9a08fdd942dd127ca" name="chromium" arch="x86_64">
  <version epoch="0" ver="139.0.7258.66" rel="bp156.2.152.1"/>
  <changelog author="ro@suse.de" date="1747310400">- Chromium 136.0.7103.113
  (stable release 2025-05-14) (boo#1243205)
  * CVE-2025-4664: Insufficient policy enforcement in Loader
  * CVE-2025-4609: Incorrect handle provided in unspecified
    circumstances in Mojo</changelog>
  <changelog author="ro@suse.de" date="1748433600">- Chromium 137.0.7151.55
  (stable release 2025-05-27) (boo#1243741)
  * CVE-2025-5063: Use after free in Compositing
  * CVE-2025-5280: Out of bounds write in V8
  * CVE-2025-5064: Inappropriate implementation in Background Fetch API
  * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
  * CVE-2025-5066: Inappropriate implementation in Messages
  * CVE-2025-5281: Inappropriate implementation in BFCache
  * CVE-2025-5283: Use after free in libvpx
  * CVE-2025-5067: Inappropriate implementation in Tab Strip
- dropped patches:
  chromium-135-gperf-output.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  chromium-127-rust-clanglib.patch (context)
  ffmpeg-new-channel-layout.patch
  (drop one hunk where upstream dropped the code)
  system-libdrm.patch (context)
  ppc-fedora-fix-partition-alloc-compile.patch (context)
  ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch (context)
  ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch (context)
- added patches:
  chromium-137-pdfium_fix_pattribute.patch
  (fix typo in pAttribute attributes)
  chromium-137-heuristics_missing_includes.patch
  (upstream patch 4c736420952f355f18bdc4f4ea2d16e4514fa034)
  chromium-137-disruptive_notification_permissions_manager-missing_include.patch
  (missing include)
  - revert last skia patches for gather_unaligned until we have a port for ppc64le
    ppc-skia-revert-1.patch
    ppc-skia-revert-2.patch
    ppc-skia-revert-3.patch
- keeplibs:
  added third_party/compiler-rt</changelog>
  <changelog author="ro@suse.de" date="1748606400">- added patches:
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1748952000">- Chromium 137.0.7151.68
  (stable release 2025-06-03) (boo#1244019)
  * CVE-2025-5419: Out of bounds read and write in V8
  * CVE-2025-5068: Use after free in Blink
  - Google is aware that an exploit for CVE-2025-5419
    exists in the wild.</changelog>
  <changelog author="ro@suse.de" date="1749643200">- Chromium 137.0.7151.103
  (stable release 2025-06-10) (boo#1244452)
  * CVE-2025-5958: Use after free in Media
  * CVE-2025-5959: Type Confusion in V8</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1749729600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
</package>
<package pkgid="5ce24b4dbf9ca1a8a0cee3353ca1dc116d6abd036571d776eb4f54a48fe8dcb2" name="chromium" arch="aarch64">
  <version epoch="0" ver="140.0.7339.127" rel="bp156.2.167.1"/>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
</package>
<package pkgid="934fa64116d86e0218e2e638178dd544edeb371917f35e9058bc9c6182a367dc" name="chromium" arch="src">
  <version epoch="0" ver="140.0.7339.127" rel="bp156.2.167.1"/>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
</package>
<package pkgid="741084f07a30a72738c13157a7aef829279f42a89a40fdf4a887b1e23270a51d" name="chromium" arch="x86_64">
  <version epoch="0" ver="140.0.7339.127" rel="bp156.2.167.1"/>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
</package>
<package pkgid="4bd25b9c0c08ffd9b6d54c9480693f171120c57c678a861b07bf88dd9b42d029" name="chromium" arch="aarch64">
  <version epoch="0" ver="140.0.7339.185" rel="bp156.2.170.1"/>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
</package>
<package pkgid="d2b6be5563790f8a33a3fb10223ce4ed3ac016f5071b3bcd1b4ad455c909cad8" name="chromium" arch="src">
  <version epoch="0" ver="140.0.7339.185" rel="bp156.2.170.1"/>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
</package>
<package pkgid="7e37c4a7512d07c2b041f47aebf7b5704252bfbe4d20d614b4e27f56104d622e" name="chromium" arch="x86_64">
  <version epoch="0" ver="140.0.7339.185" rel="bp156.2.170.1"/>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
</package>
<package pkgid="7aa4cafe875cf45a7852947ff604679cbf1ee97619acc44c6d81c7db7e4a8d13" name="chromium" arch="aarch64">
  <version epoch="0" ver="140.0.7339.207" rel="bp156.2.173.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
</package>
<package pkgid="2a66b08b96fab18769e6d169df26ca6350bd254b1e382c6edf45a721f1fb25aa" name="chromium" arch="src">
  <version epoch="0" ver="140.0.7339.207" rel="bp156.2.173.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
</package>
<package pkgid="f7edb3362e59bcbc2e38ba0e7f2555add37d218c82fd39cf4e95ec2941b0cdd4" name="chromium" arch="x86_64">
  <version epoch="0" ver="140.0.7339.207" rel="bp156.2.173.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
</package>
<package pkgid="83b826a6d32fa893a1e2e16bca1c4677319e88d5cce959a45d17d2e23614c558" name="chromium" arch="aarch64">
  <version epoch="0" ver="140.0.7339.80" rel="bp156.2.164.1"/>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="cb30a0da7b30a5e6e7f6e43489ffe39019841558d0ec763d5e59345a3382b89b" name="chromium" arch="src">
  <version epoch="0" ver="140.0.7339.80" rel="bp156.2.164.1"/>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="a9603d1c67cc38ca92743ca38eb8d0eacaf46c15f6166af5444cb761e8dd1c54" name="chromium" arch="x86_64">
  <version epoch="0" ver="140.0.7339.80" rel="bp156.2.164.1"/>
  <changelog author="ro@suse.de" date="1750161600">- Chromium 137.0.7151.119
  (stable release 2025-06-17) (boo#1244711)
  * CVE-2025-6191: Integer overflow in V8
  * CVE-2025-6192: Use after free in Profiler</changelog>
  <changelog author="ro@suse.de" date="1750852800">- Chromium 138.0.7204.49
  (stable released 2025-06-24) (boo#1245332)
  * CVE-2025-6555: Use after free in Animation
  * CVE-2025-6556: Insufficient policy enforcement in Loader
  * CVE-2025-6557: Insufficient data validation in DevTools
- dropped patches:
  chromium-137-heuristics_missing_includes.patch (upstream)
  chromium-137-pdfium_fix_pattribute.patch (upstream)
- modified patches:
  chromium-125-compiler.patch (context)
  ffmpeg-new-channel-layout.patch (context)
  chromium-134-revert-rust-adler2.patch (context,reverse application)
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (context)
  ppc-fedora-memory-allocator-dcheck-assert-fix.patch (context)
  chromium-warning-suppression-mappings.patch (context)
- added patches:
  (conditional revert for old ffmpeg,
  upstream 129f48501a7c3fa4236234f2fa0aee490a845b59)
  chromium-138-revert_ffmpeg_FF_AV.patch
- keeplibs:
  removed third_party/distributed_point_functions
  removed third_party/tflite/src/third_party/eigen3
  removed third_party/webrtc/rtc_base/third_party/base64
  added third_party/dragonbox
  (needed by ../v8/src/numbers/conversions.cc )
- bump gn buildrequires to 0.20250520</changelog>
  <changelog author="ro@suse.de" date="1751371200">- Chromium 138.0.7204.96
  (stable released 2025-06-30) (boo#1245544)
  * CVE-2025-6554: Type Confusion in V8</changelog>
  <changelog author="ro@suse.de" date="1751371201">- update from debian:
  ppc-fedora-skia-vsx-instructions.patch
- dropped patches:
  ppc-skia-revert-1.patch
  ppc-skia-revert-2.patch
  ppc-skia-revert-3.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752062400">- Chromium 138.0.7204.100:
  * tweaks to the Google services settings page</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752580800">- Chromium 138.0.7204.157 (boo#1246558):
  * CVE-2025-7656: Integer overflow in V8
  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
    and GPU
  * CVE-2025-7657: Use after free in WebRTC</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="5c8f959d97af0970a0b0048939df3c10dfc04fb8786b8a66f9081ef629a4a6c8" name="chromium" arch="aarch64">
  <version epoch="0" ver="141.0.7390.107" rel="bp156.2.185.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
</package>
<package pkgid="b6f89cd688cb6d197aebc256cbcbdaf1a63d51fa58876c2982265b7eb7aa1ee0" name="chromium" arch="src">
  <version epoch="0" ver="141.0.7390.107" rel="bp156.2.185.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
</package>
<package pkgid="308b01d73353d5b8bffbd1c2c80a1b7f47434fb46e75ca29cd081f920fc8cde1" name="chromium" arch="ppc64le">
  <version epoch="0" ver="141.0.7390.107" rel="bp156.2.185.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
</package>
<package pkgid="593d5eb754fb5d54081deecdb598df173bea5ab369c956d827a01fd2cdad8893" name="chromium" arch="x86_64">
  <version epoch="0" ver="141.0.7390.107" rel="bp156.2.185.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
</package>
<package pkgid="b1f7e238bd06a9803b01de385432bd72c20c4afd7e0d05d46c2fd1250413d6db" name="chromium" arch="aarch64">
  <version epoch="0" ver="141.0.7390.122" rel="bp156.2.188.1"/>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
</package>
<package pkgid="7485218b9a2a3eab466c8126a8ca6e05cc8dd6a37aa57f0dfa75e985b29f09ff" name="chromium" arch="src">
  <version epoch="0" ver="141.0.7390.122" rel="bp156.2.188.1"/>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
</package>
<package pkgid="dafbc7c6c85a4545800b037c8b65239cc639b07bc79df381290f6ba688747aa4" name="chromium" arch="ppc64le">
  <version epoch="0" ver="141.0.7390.122" rel="bp156.2.188.1"/>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
</package>
<package pkgid="4fde9ad3eb990a5a13065e3281535cda93185e9dbe571b25443a2a4c0af070a3" name="chromium" arch="x86_64">
  <version epoch="0" ver="141.0.7390.122" rel="bp156.2.188.1"/>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
</package>
<package pkgid="761041eb34877ad416abffb65790c6a3e3ccd811305523737116842be33f3f5b" name="chromium" arch="aarch64">
  <version epoch="0" ver="141.0.7390.54" rel="bp156.2.176.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
</package>
<package pkgid="7081acc7c2fc57242f26560b7efb8aabda3df3fbfe43686b48e5b01ac726ba11" name="chromium" arch="ppc64le">
  <version epoch="0" ver="141.0.7390.54" rel="bp156.2.176.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
</package>
<package pkgid="a9229ffc0e98bda5d4099353cf11ec9efb4cf324b372cbd0c287878cd1b0f1dd" name="chromium" arch="src">
  <version epoch="0" ver="141.0.7390.54" rel="bp156.2.176.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
</package>
<package pkgid="528c4b6cdc103187e5895c004defad4ad12b6aa1492a628d946d8b8692aa9e46" name="chromium" arch="x86_64">
  <version epoch="0" ver="141.0.7390.54" rel="bp156.2.176.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753185600">- Chromium 138.0.7204.168 (boo#1246902):
  * CVE-2025-8010: Type Confusion in V8
  * CVE-2025-8011: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
</package>
<package pkgid="72b9bb133f5345bf44889a5afa59b3aa4f61998c3eb1c7a81fc67d79da3d3757" name="chromium" arch="aarch64">
  <version epoch="0" ver="141.0.7390.65" rel="bp156.2.179.1"/>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
</package>
<package pkgid="55595f2ac20ce09b1d2934a0f55d41c374841a176ff82fb720abc77363f08cfe" name="chromium" arch="ppc64le">
  <version epoch="0" ver="141.0.7390.65" rel="bp156.2.179.1"/>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
</package>
<package pkgid="603b20b2f3ea3cf75fa7605a38c76b0e1e2f6b2f641091df9f37396d81830ddb" name="chromium" arch="src">
  <version epoch="0" ver="141.0.7390.65" rel="bp156.2.179.1"/>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
</package>
<package pkgid="8b82f512b02de2a1f10760bf10db1c0b4500fd4cbe81034efd6522347a25ff8c" name="chromium" arch="x86_64">
  <version epoch="0" ver="141.0.7390.65" rel="bp156.2.179.1"/>
  <changelog author="ro@suse.de" date="1753358400">- modified patches:
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  (update context to apply)</changelog>
  <changelog author="ro@suse.de" date="1753790400">- set official_build to true (like other distributions)
  "official builds have less debugging and go faster..."
- added patches:
  chromium-139-deterministic.patch
  (undefine __DATE__,__TIME__ like without official-build set
  to keep the build reproducible)</changelog>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
</package>
<package pkgid="4f53c291ced31041b7ee7b28654c7ef6df3ce433e3fc5fe9667812a8592b499c" name="chromium" arch="aarch64">
  <version epoch="0" ver="141.0.7390.76" rel="bp156.2.182.1"/>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
</package>
<package pkgid="7ad2e0fd4dca92e73204a572184636304dfdf0866ec4ff388e9997cf8d0e8e68" name="chromium" arch="src">
  <version epoch="0" ver="141.0.7390.76" rel="bp156.2.182.1"/>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
</package>
<package pkgid="1a13c5a6e7cc656343a676d3789badb8a42f2e89faa25738956bc0d5a172ed2f" name="chromium" arch="ppc64le">
  <version epoch="0" ver="141.0.7390.76" rel="bp156.2.182.1"/>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
</package>
<package pkgid="d3f37258e2161ded54c8742e35e09d7f27c4e49cb9ffc12c98292947ae499988" name="chromium" arch="x86_64">
  <version epoch="0" ver="141.0.7390.76" rel="bp156.2.182.1"/>
  <changelog author="ro@suse.de" date="1753876800">- Chromium 138.0.7204.183 (boo#1247365):
  * CVE-2025-8292: Use after free in Media Stream
- try to switch to smaller linux tarball from
  https://github.com/chromium-linux-tarballs)
- disable chromium-91-java-only-allowed-in-android-builds.patch
  (not part of reduced tarball)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754395200">- Chromium 139.0.7258.66 (boo#1247664):
  * CVE-2025-8576: Use after free in Extensions
  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
  * CVE-2025-8578: Use after free in Cast
  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  * CVE-2025-8580: Inappropriate implementation in Filesystems
  * CVE-2025-8581: Inappropriate implementation in Extensions
  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
  gcc-enable-lto.patch
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-skia-vsx-instructions.patch
  ppc-fedora-fix-partition-alloc-compile.patch
  ppc-fedora-0001-add-xnn-ppc64el-support.patch
  - dropped patches:
  chromium-warning-suppression-mappings.patch (using cmdline switch)
  chromium-93-ffmpeg-4.4.patch
  - dropped the ffmpeg revert patches that were only applied for 15:
  chromium-125-ffmpeg-5.x-reordered_opaque.patch
  Cr122-ffmpeg-new-channel-layout.patch
  ffmpeg-new-channel-layout.patch
  chromium-106-ffmpeg-duration.patch
  chromium-93-ffmpeg-4.4-rest.patch
  chromium-138-revert_ffmpeg_FF_AV.patch
  - added patches:
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  - keeplibs:
  removed chrome/third_party/mozilla_security_manager
  removed third_party/mesa
  added third_party/ml_dtypes (needed in tflite/xla)
  added third_party/readability (needed in tools/grit/grit)
  added third_party/ffmpeg (gave up on reverting all recent
    commits in the code using ffmpeg, need at least ffmpeg-7)
- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
  to please factory-auto</changelog>
  <changelog author="ro@suse.de" date="1754481600">- re-add updated patch:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  from https://src.fedoraproject.org/rpms/chromium/blob/
    rawhide/f/0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="ro@suse.de" date="1754481601">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
</package>
<package pkgid="9d28e0bca2244ac4b3000286c87b496298f15f38046c5ced0ecabc16e46e554d" name="chromium" arch="aarch64">
  <version epoch="0" ver="142.0.7444.134" rel="bp156.2.197.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
</package>
<package pkgid="fe4a4e0b321329d9b8030d28e1e1931a8acc85d5dddb2cce983c202f8bc3e3e8" name="chromium" arch="src">
  <version epoch="0" ver="142.0.7444.134" rel="bp156.2.197.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
</package>
<package pkgid="2f4ed9f003d5b7f154e21db1f288dfb119b63e2b15b7f4e816dc3e744ec04f4a" name="chromium" arch="ppc64le">
  <version epoch="0" ver="142.0.7444.134" rel="bp156.2.197.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
</package>
<package pkgid="c24ae24be620cf8355b99c082141057fe0573273555b00b4afc47bac76df6526" name="chromium" arch="x86_64">
  <version epoch="0" ver="142.0.7444.134" rel="bp156.2.197.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
</package>
<package pkgid="a71f228f6183b06123469d274d237f0a000edb46c133dc55edddc62f1b01096b" name="chromium" arch="aarch64">
  <version epoch="0" ver="142.0.7444.162" rel="bp156.2.200.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="af8dc2daefd18e024f5feff3e942879dd06b70969b464a04c2b6ff93d33a5f50" name="chromium" arch="src">
  <version epoch="0" ver="142.0.7444.162" rel="bp156.2.200.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="9c8818436e8fe0d77d5c6325a58d44696fced24362e0a0f7038f09b8cca7dd82" name="chromium" arch="ppc64le">
  <version epoch="0" ver="142.0.7444.162" rel="bp156.2.200.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="01295aa530612d373cdcaf4fd385408d8b8d4c37c1db012c6e1cb85022d13124" name="chromium" arch="x86_64">
  <version epoch="0" ver="142.0.7444.162" rel="bp156.2.200.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="54a75901e6176aa36082d5fd2583bb967875f878ae820f370aa22715141d4898" name="chromium" arch="aarch64">
  <version epoch="0" ver="142.0.7444.175" rel="bp156.2.203.1"/>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
</package>
<package pkgid="de916875b25d6f30650e952c1f74bc1f3c87f7fe8c690ce59b311b0c6d48f703" name="chromium" arch="src">
  <version epoch="0" ver="142.0.7444.175" rel="bp156.2.203.1"/>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
</package>
<package pkgid="bbd8eec5089f01c518777d5eca7f3bbc64bd06ff9dada2226c742f1d5e863510" name="chromium" arch="ppc64le">
  <version epoch="0" ver="142.0.7444.175" rel="bp156.2.203.1"/>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
</package>
<package pkgid="7e5bf3cbce35420507a62910c14c7ec91329e9c28fa92e43e53b3acdc8af1a9b" name="chromium" arch="x86_64">
  <version epoch="0" ver="142.0.7444.175" rel="bp156.2.203.1"/>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
</package>
<package pkgid="114b97d5d4a05ee7b2346959e1671d007b881e5cfa9158525aac6181b65a9aba" name="chromium" arch="aarch64">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.191.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="b2211bce36edc09cafe78993a5e16e27b3cf65221e26600baa9bb0c21f7bbdeb" name="chromium" arch="src">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.191.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="5f85be14d3d6cc952c7f2458c6f0c5a0a6a514c183d0d34d9b5bc75424d41acf" name="chromium" arch="ppc64le">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.191.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="c856b7c1bf13ef83baff9de8ef91382c60f49fd50fbe154edfad358496e4f0c6" name="chromium" arch="x86_64">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.191.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="8c50623446957c1fff9736b9c0d269ced57105b6b008138ff19ebb448098e72d" name="chromium" arch="aarch64">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.194.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="5d1f3c34d33ec94ec296e6929bb50bf6d37196e59e0eafd67e8b1dd16a8ed235" name="chromium" arch="src">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.194.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="bfc4ba036f42d8ec939ad914175e65b9a7903f2fd93f51add2d0db40ade601b3" name="chromium" arch="ppc64le">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.194.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="bb3a99a7701e6ad3a6d4a0688e47fce66c22ba698d3cdc40f14c30da15718632" name="chromium" arch="x86_64">
  <version epoch="0" ver="142.0.7444.59" rel="bp156.2.194.1"/>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="612386b520886a2745166a57866c8668898117109543726fd57e698f6cf0486d" name="chromium" arch="aarch64">
  <version epoch="0" ver="143.0.7499.109" rel="bp156.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814400">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * third issue with an exploit is known to exist in the wild
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
</package>
<package pkgid="b57f60fb69573ef2ccd993149994034da78bebab5366a84039128199de022848" name="chromium" arch="src">
  <version epoch="0" ver="143.0.7499.109" rel="bp156.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814400">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * third issue with an exploit is known to exist in the wild
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
</package>
<package pkgid="f25edfa3b849b1f1bbc8ae8b2b508630ffa84f07946accb81cb502d04ae7b770" name="chromium" arch="ppc64le">
  <version epoch="0" ver="143.0.7499.109" rel="bp156.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814400">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * third issue with an exploit is known to exist in the wild
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
</package>
<package pkgid="d4a453e9a0d7cef7b2049e1f056ad5c3a9e8fadbfebe7709d02c0d4bbf0b0fe4" name="chromium" arch="x86_64">
  <version epoch="0" ver="143.0.7499.109" rel="bp156.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814400">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * third issue with an exploit is known to exist in the wild
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
</package>
<package pkgid="edb93bb41c063a75d23976f6748fd12eefd73a0e0479dc9aca154e8b78b97a7a" name="chromium" arch="aarch64">
  <version epoch="0" ver="143.0.7499.146" rel="bp156.2.209.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
</package>
<package pkgid="2d4d91c1eaa63acbfe04e1e5030e9ac6fa3ea0c4a80aca12ec5cfa91f9feb27a" name="chromium" arch="src">
  <version epoch="0" ver="143.0.7499.146" rel="bp156.2.209.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
</package>
<package pkgid="1c31e5c8ac2630ceba0ce277a6031daa503783aab1c317810b9f941b68f72106" name="chromium" arch="ppc64le">
  <version epoch="0" ver="143.0.7499.146" rel="bp156.2.209.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
</package>
<package pkgid="38be66898db2d7a3d66b5284ec8f9382c1365959192c26ed37934155c3050e9c" name="chromium" arch="x86_64">
  <version epoch="0" ver="143.0.7499.146" rel="bp156.2.209.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
</package>
<package pkgid="a269671b8220822dc8c28ef038d6264b7abef0b144ead7d79a18df9589c7d519" name="chromium" arch="aarch64">
  <version epoch="0" ver="143.0.7499.192" rel="bp156.2.212.1"/>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
</package>
<package pkgid="c91107fd3fba469a95437d64e8310812b0169506d205a411842002f17e1a64bc" name="chromium" arch="src">
  <version epoch="0" ver="143.0.7499.192" rel="bp156.2.212.1"/>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
</package>
<package pkgid="2c0b9fe33b45cc8c98e67be46197f0681447f1430fb5f0095c9f4d48d0fd2627" name="chromium" arch="ppc64le">
  <version epoch="0" ver="143.0.7499.192" rel="bp156.2.212.1"/>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
</package>
<package pkgid="8f44bd2e5b2a0dee32c4214a6a2525540a3486cd03ef4cfa34939818e8b501c1" name="chromium" arch="x86_64">
  <version epoch="0" ver="143.0.7499.192" rel="bp156.2.212.1"/>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
</package>
<package pkgid="27c1f579b8fe2bc3897045e6cc54b7d35c1af4bce8636085f26324fe127b7ea3" name="chromium" arch="aarch64">
  <version epoch="0" ver="143.0.7499.40" rel="bp156.2.206.1"/>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
</package>
<package pkgid="d485da2cd4a6b6536fc8de75a444905c8e8fc0bad5985a55aee327f4724447af" name="chromium" arch="src">
  <version epoch="0" ver="143.0.7499.40" rel="bp156.2.206.1"/>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
</package>
<package pkgid="93147a44b08c18d71e0eddf9b718bbe721465e3c65756659b72df79d76c73e0d" name="chromium" arch="ppc64le">
  <version epoch="0" ver="143.0.7499.40" rel="bp156.2.206.1"/>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
</package>
<package pkgid="5ec9600d2f0f1cb1de3baabbaa6aa8c486cf5698fb6f207b5cc0f11cf8b5d97b" name="chromium" arch="x86_64">
  <version epoch="0" ver="143.0.7499.40" rel="bp156.2.206.1"/>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814401">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
</package>
<package pkgid="104af0d4115a27e4f4efb7da81772ed62ddae10728eb1fb5b546d83d99d1fed0" name="chromium" arch="aarch64">
  <version epoch="0" ver="144.0.7559.109" rel="bp156.2.221.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
</package>
<package pkgid="fcb4976006f06284e5653355ba14215f464d9e290158fcdf84763a7131caa139" name="chromium" arch="src">
  <version epoch="0" ver="144.0.7559.109" rel="bp156.2.221.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
</package>
<package pkgid="60932dc9f9a937f230a54223a76e8ec3c5ff659e8dd1817232625148bff4fcb3" name="chromium" arch="ppc64le">
  <version epoch="0" ver="144.0.7559.109" rel="bp156.2.221.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
</package>
<package pkgid="2c72efda62e31265e7c4ab6ffc13afa1bb185977a9f70029c0eae22c9726a608" name="chromium" arch="x86_64">
  <version epoch="0" ver="144.0.7559.109" rel="bp156.2.221.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
</package>
<package pkgid="c82edb4b945d36628a65b9c7875049a892eb9646462604e4db7bfa3e21b376f8" name="chromium" arch="aarch64">
  <version epoch="0" ver="144.0.7559.132" rel="bp156.2.224.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011200">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
</package>
<package pkgid="f3d97bde281bebb8ac08362d49ad7db12d9d103608039596156eb005fed8b85b" name="chromium" arch="src">
  <version epoch="0" ver="144.0.7559.132" rel="bp156.2.224.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011200">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
</package>
<package pkgid="4211e562411e8a0c9e0af7113282db65edae8d070a4e7f7f48bb5cde31acc43b" name="chromium" arch="ppc64le">
  <version epoch="0" ver="144.0.7559.132" rel="bp156.2.224.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011200">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
</package>
<package pkgid="fededd16f633786c8194b9fd1bb3d5949363f64839445425ff0a63f0bbc817b6" name="chromium" arch="x86_64">
  <version epoch="0" ver="144.0.7559.132" rel="bp156.2.224.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011200">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
</package>
<package pkgid="31ef3be33b05b9c3c158b9883d18a9bd440095b6f538a991ff22fbdbc6c3705d" name="chromium" arch="aarch64">
  <version epoch="0" ver="144.0.7559.59" rel="bp156.2.215.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
</package>
<package pkgid="2aaec286e4e690c3146930d539beeb94a06e64d2f5d1af0de8433f1996b92385" name="chromium" arch="src">
  <version epoch="0" ver="144.0.7559.59" rel="bp156.2.215.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
</package>
<package pkgid="6d8ef546bf618b95aa0c77bf07013898a547524a37949c69352369c84a2e8bbb" name="chromium" arch="ppc64le">
  <version epoch="0" ver="144.0.7559.59" rel="bp156.2.215.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
</package>
<package pkgid="966b37300f87fa7aed03cb7c153cfd6ef296fb431ca2b043850969dad12ede02" name="chromium" arch="x86_64">
  <version epoch="0" ver="144.0.7559.59" rel="bp156.2.215.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
</package>
<package pkgid="99886a172a3712fa4d7cbd9b7f4e64106f8b20773e555c1ebfa211934f82e078" name="chromium" arch="aarch64">
  <version epoch="0" ver="144.0.7559.96" rel="bp156.2.218.1"/>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
</package>
<package pkgid="512b350338f19a745487f4e83af73163aeae245743a8c8872bb276b8f3ffce22" name="chromium" arch="src">
  <version epoch="0" ver="144.0.7559.96" rel="bp156.2.218.1"/>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
</package>
<package pkgid="7e62f3135bc6bc8a15cb405cbb62dc6811de16d4b2efd8133b89da09613e98ca" name="chromium" arch="ppc64le">
  <version epoch="0" ver="144.0.7559.96" rel="bp156.2.218.1"/>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
</package>
<package pkgid="37be7429fcc5b40ac234d27394aeb12ea3a799b010cd5f11176bcd2e7bb7fbc0" name="chromium" arch="x86_64">
  <version epoch="0" ver="144.0.7559.96" rel="bp156.2.218.1"/>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
</package>
<package pkgid="feec24be97a79c1e4598cbf249f6728c332ed7d32a51fab6aeb7f185b0dee0a2" name="chromium" arch="aarch64">
  <version epoch="0" ver="145.0.7632.75" rel="bp156.2.231.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
</package>
<package pkgid="a2e1cd649b8f6a93a0e734eb24efe129656f4207e9878adaa048d51b08b4bb7a" name="chromium" arch="src">
  <version epoch="0" ver="145.0.7632.75" rel="bp156.2.231.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
</package>
<package pkgid="e5c805a7754f369617626d2d11df336fc89cef20383d81ce9ba15fd32605821f" name="chromium" arch="x86_64">
  <version epoch="0" ver="145.0.7632.75" rel="bp156.2.231.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
</package>
<package pkgid="f90026ed6ed7ebf3e8d379fa30569c21b699543ee8398d43208ad65a8e783d35" name="chromium" arch="aarch64">
  <version epoch="0" ver="145.0.7632.75" rel="bp156.2.236.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
</package>
<package pkgid="94bd83cdac25130f6c934268dacc0cf47cd71929a3485f5f2be8bea45c576a2f" name="chromium" arch="src">
  <version epoch="0" ver="145.0.7632.75" rel="bp156.2.236.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
</package>
<package pkgid="8eee369f08081ba72b867918fb7b60396c06e88cb3175bc6b033a05d7579cac3" name="chromium" arch="ppc64le">
  <version epoch="0" ver="145.0.7632.75" rel="bp156.2.236.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
</package>
<package pkgid="82ceeb0603abd5413ee5338b002c0bf2515718e1041fa051e561fb637fa16def" name="chromium" arch="x86_64">
  <version epoch="0" ver="145.0.7632.75" rel="bp156.2.236.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
</package>
<package pkgid="f419d27de56b9541f963030dd2404b6775af9975455835cecb60e5ee242765db" name="clang-tools" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="e65e829ac090f418675cc0d59b31d543f9f9dbe6e92f4ed8455f1ca912f54c2b" name="clang-tools" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="cde89503b7a85f7c1adedaa196d6fe9fb8ed1215f5a5a75de0a7d1d35fc13409" name="clang-tools" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="968e6135f61a4f558bd608e29439df1d8ea901c23e9c82675fd23f521c93e4ef" name="clang-tools" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="c70ae59acbe77ea162991ecaba9dcc06318c775ee1177abfacc46d871c5d5870" name="clang-tools" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="85c88282fc4595dec37bddf251368eaaffec12279216324e14fa57c65f7a142f" name="clang-tools" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="bd707922b363cab9c465d5977d49ed943ef096ba30774cf231cc7751c95111c0" name="clang-tools" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="44d8b910e8f0ebf24c5ba02be8eebb8add28d26dbe78522cdf33e36919602664" name="clang-tools" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="9580616c26fb11833c87c34080f2ecc31bb155065c1f686b9e88cf4b3a91c788" name="clang-tools" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="5e525a015ccd0e228bcf071c83d2db89b599c9ed7df888ee191542e68e72b13d" name="clang-tools" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="1c7479669d3a8fbf5a10ce7cbf2bc1d09b37bca09ae7358a6599d38076a4b563" name="clang19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="f2668cf8f16af24e1737073510019aaae67da0e42ca20148c55b74f8fb85b6eb" name="clang19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="0d53a61a1280bf8b1b4a8ec03824a73ddb0183d1fd7ab2097540197b9805bb98" name="clang19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="1e7b7d397d52e353a42ab44fe022da825d04f150cda1cbdcab7b07ed34e4eb74" name="clang19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="3f6a7d7894958b140b61d47c7a48ba55c030ac1db594bb69562b72d397eb59c7" name="clang19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="ac4369a38f621a6e2fde9ec4dff741156f2ec72f90fdfb1ba600d5b2f63ea2a1" name="clang19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="7b5363f247d8e90e4243b97f9beeec45c56f95a40356a45371d09786a8904d31" name="clang19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="f4db7cb5bad55a94307d602a7eb38f5a7b476496b0ddef91cd338841dc65760e" name="clang19" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="86f7acd31fc7585d0ebc2d173d58935cb8f28c228399bc14026f6d5c396a48cb" name="clang19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="3b8db2072bac5a5f5b5b33a1685305b9db6c49fcc5bd5b1ef2331a53e54b5088" name="clang19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="db5248762a476ddd0d3212f01e5fbd2a4136faf2e8758f6367bb57ed427775df" name="clang19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="4ad8a879cf6512787045118dad3f4684e676fb98fbadbf5280c7c73fb4c07883" name="clang19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="eb5c468b24a9a3cbac17e1725aadedc2497626fd01c928367b5c7b98faaeb5b8" name="clang19" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="d0c22220187245efb6588ac81f570e91e6c7675e89684b5fa967cb1d23535c9d" name="clang19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="78f698eb43d1c244834882c19da2fb02f61a1f695b41e1e07a8264623a0c005f" name="clang19-devel" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="adfbfa23b3537405fe44633fa80d3b31eafda503e11b2a917e65cdd3c3529758" name="clang19-devel" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="075c24f1ddcf2a518523256031f42dfa3f071943c27e9054146595a5bdf82f35" name="clang19-devel" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="56eee6c6d4783ee46db08d870c95a9ce21ca1016ea96b0461e3570d6e53003fe" name="clang19-devel" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="f57c1425df99504d6c0a0ec921e85c0cf9d3b51cc89010c3de6a1a9a0662544d" name="clang19-devel" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="291be8742891a2d071d4deaa251551c7e3b46b981c0ccf997f51a162af009224" name="clang19-devel" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="66535667015a184e362140c040dbde51f81f35565037f9b2639aacb912d898c9" name="clang19-devel" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="d381895107ccd4acc99100ee98fc29c2b1a49bbf3ae0e60d960600bda0209008" name="clang19-devel" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="fc8ad5ec992cf2e665410e3d711f4f7d9eaab78218c16e4a26f113574505eb84" name="clang19-devel" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="16d378e72947219276b58c74981b8bd7938c29a8b411f723be6fd2148873e9f9" name="clang19-devel" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="5ae330815c1a553d25cccb57012bb00c14d22af681e26f39dcc7b4d882de0e19" name="clang19-devel" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="e2e46878150655d6e68b5624a9f98e28b253778260121d51e1501e1db2bb8655" name="clang19-devel" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="dc4404535406ed600bbf71a9098fc639b5233b1377a0ff7939a7f8b5af19f75d" name="clang19-devel" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="580c92b44d686b9dda19e9acc2806e1335f92b71776f1a2ed82dfa1129faabc6" name="clang19-devel" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="f45f27c96d2bd0a0ae2aa59d865944aae67f75edf894193e7597b71027f0c6e7" name="clang19-doc" arch="noarch">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="2cf63e02fbf01546b88275b81bc91871ead9da666fcf8ba92c0d6bdb553a1443" name="clang19-doc" arch="noarch">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="1f64fa9d0bdf3d39f73853192ac0146052c1f521d27fb786298484a5822352da" name="clang19-doc" arch="noarch">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="cf36ef806da8239f6d4b4315984893f4600650c8507d59eedfb46d4ec5fc70b8" name="cobbler" arch="noarch">
  <version epoch="0" ver="3.3.6" rel="bp156.2.3.1"/>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1605268800">- Remove redundant '.json' suffix
- Added:
  * remove-redundant-json-suffix.diff</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1610971200">- Fix string replacement for @@xyz@@
- Better performing string replacements
- Added:
  * better-string-replacement-performance.diff
  * fix-string-replacement.diff</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057600">- Update tarball from upstream to remove the .pc quilt folder.</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057601">- Update spec file to satisfy current rpmbuild (&gt;=4.16) and make
  the build on Tumbleweed work again.</changelog>
  <changelog author="trenn@suse.de" date="1613736000">- Update to version 3.2.0+git20210218.8af5f420:
  * revert_strip_none prior adding an object on replicate
  * Remove unused function filter_upgrade_duplicates() in file.py
  * Add filename to exception
  * Add return types in file.py
  * Handle files with double .json ending
  * sync_post_wingen: Include pefile in the import check
  * Tests: Add tests for module_loader and type the module
  * Add adjustments for the source installation
  * close file after open
  * make esx_modules available to template
  * fix bootcfg template path
  Delete patches which were upstreamed and are included in the tarball:
  D    better-string-replacement-performance.diff
  D    cgi_parse_qs_is_deprecated.diff
  D    fix-for-old-str.join-usage.diff
  D    fix-string-replacement.diff
  D    load_module_apache_suse_fix.diff
  D    refactored_auth_module.diff
  D    remove-redundant-json-suffix.diff</changelog>
  <changelog author="trenn@suse.de" date="1613908800">- Update to version 3.2.0+git20210221.644f267c:
  * Address review concerns by @nodeg
  * Add schema checking code and test it
  * Convert integer bools to real bools
  * Docs: Rearrange to alphabetical order &amp; add missing settings
  * Add python-schema to our requirements
  * post_report: Use with syntax to close file in case of an error.
  * Fix linter errors in check.py
  * Remove import cgi
  * Adjust prospector Config to fix doubled issues
  * Fix Codacy linter errors</changelog>
  <changelog author="trenn@suse.de" date="1615896000">- Update to version 3.2.1+git20210315.f7482f6b:
  * API: Add HTTP 200 Return in case we have an OPTIONS request
  * Install everything in scripts/ to get migrate-data-v2-to-v3.py
  * Update issue templates
  * Webinterface: Removal of the Django Version
  * Remove get-loader code
  * Remove internal tftp python server and remove tornado dependencies
  * Increase version of Cobbler to 3.2.1
  * Move legacy field setting
  * Add tests for distro.py and item.py
  * Templates: Move macros back to the template_api and fix snippets
  * Templates: Remove old subject parameter; rename Template to CobblerTemplate
  * Templates: Improve Cheetah template child class (linter &amp; comments)
  * Templates: Improve docs and fix linter errors with sedsec
  * CLI: Add class docstring for the main class
  * Actions - Replicate: Add class docstring
  * Serializer - Mongo: Revert explicit type because of soft req on MongoDB
  * Grub: Add tests and catch some errors
  * Fix several issues in module file.py
  * remove esxi70u1 from signatures and template from spec
  * remove esxi70u1 config and templates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Fixed SPEC file:
  * Re-added missing license header
  * Added missing Source tag for rpmlintrc</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1621339200">- Prevent some race conditions when writting tftpboot files and
  the destination directory is not existing (bsc#1186124)
- Added:
  * prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="trenn@suse.de" date="1630584000">- Update to version v3.2.1.295+git.af118f52:
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * docs: Update and cleanup
  * Adjustments to cobbler-settings validate
  * fix/windows
  * Applied suggestions from @agraul and @vzhestkov
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync
- Set disabled service to localonly
- Remove unused patch
  D    prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1630670400">- Do not export spec file from git, due to bad licence format
- Add rpmlintrc to sources</changelog>
  <changelog author="trenn@suse.de" date="1632052800">- Update to version 3.2.1.336+git.5639a3af:
  * Autoinstall Manager: Fix utils.die calls and removed unused variable
  * Docs: Add the mkgrub command to the CLI
  * Add docstring to new API method
  * Added new keys to the migration module for 3.3.0
  * spec file needs an open source license header to be build in open build service
  * Expose GrubImage Action in api.py and cli.py
  * Add GrubImage action
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * Adjustments to cobbler-settings validate
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync</changelog>
  <changelog author="trenn@suse.de" date="1634212800">- Update to version 3.3.0.50+git.c1d81950:
  * Add support for Windows 11
  * Do not warn users about missing files during removal
  * Collections: Simplify the duplication checks
  * mkloaders: Add checks for required components
  * mkgrub: Rename file and class to mkloaders
  * mkgrub: Use grub subdirectory for storing binary executables
  * Downgrade info to debug message when loading systems
  * Show startup time in seconds if python3-psutil is installed
  * Use newly introduce per item serializer on parent/profile addings
  * Remove check_for_duplicate_netinfo parameter checking, this is done in interface setter now
  * Introduce new serialize_one_item function
  * Exclude ourselves from duplicate checks for ip/mac/dns duplicates
  * mkgrub: Improve bootloader building process
  * mkgrub: Apply opinionated formatting
  * Fix defaults and path to the ipxe files
  * Version bump to V3.3.1
  * Remove not existent check for disabled spacewalk registration
  * Security: Flag gate for modify_setting in XMLRPC
  * Safeguard XMLRPC against rce
  * Ease up condition checking and do not add interfaces to dhcp6 without ipv6 address
  * MAC address should already be properly formatted
  * Write message that initrd has successfully been loaded
  * Set default menu if netboot is enabled
  * Use the grub formatted tftp URL in for loading kernel/initrd remotely</changelog>
  <changelog author="alexander.graul@suse.com" date="1645185600">- This update contains fixes for CVE-2021-45082 and 2021-45083
- Update to version 3.3.1.0+git.f5b0599a:
  * Fix spec error introduced with CVE fix
  * Security: Fix incomplete template sanitization
  * Security: Restrict config file accessibility
  * Docker: CentOS to Rocky Linux move for Compose
  * Remove old Cobbler Web leftovers
  * Utils: Check if service is running before stopping it
  * CI: Remove test report parsing and publishing
  * System-Tests: Remove broken Test report parser
  * Use distro_build_configs.sh for fixing bind path</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1647000000">- This update fixes CVE-2022-0860 (bsc#1197027)
- Version 3.3.0 fixed jsc#SUMA-112
- Update to version 3.3.2
  * New:
  * cobbler sync doesn't have to be executed no more after enable_ipxe was flipped
  * Auth: Support for Global Secure Catalog via LDAP provider
  * Changes:
  * Reposync now deletes old metadata to prevent metadata merge conflicts
  * The automigration of the settings is now not enabled per default.
  * We removed ppc from RedHat EL 7 as it is not supported
  * Bugfixes:
  * Network interface is not subscriptable errors were fixed
  * The stacktraces related to the package and file pre &amp; post triggers should no longer appear
  * You should be able to add multiple initrds if needed again
  * Debian: Fix regex for SHIM_FILE which now provides a working reasonable default</changelog>
  <changelog author="Stefan Bluhm &lt;stefan.bluhm@clacee.eu&gt;" date="1648728000">- Added workaround to build Cobbler 3.3.2 on AlmaLinux.</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1654257600">- Update to version 3.3.3
  * New:
  * Uyuni Proxies can now be set with the schema validation.
  * Cobbler should now build on AlmaLinux.
  * The initrd is not required anymore as it is an optional file.
  * XML-RPC: Added dump_vars endpoint. This is intended to replace get_blended_data as of 3.4.0.
  * XML-RPC: Added get_item_resolved_value &amp; set_item_resolved_value endpoints.
  * Breaking Changes:
  * The field virt_file_size is now a float and the related settings as well.
  * Changes:
  * The error messages for duplicated objects now contains the name of the duplicated object.
  * Bugfixes:
  * Dictionaries had the wrong value set for &lt;&lt;inherit&gt;&gt;.
  * There were some cases in which the autoinstallation manager was handed the wrong object and then crashed.
  * The inheritance of the owners field was fixed.
  * Serial Console options should not contain bogous -1 value anymore.
  * HTTP API should not throw permission errors anymore.
  * During build the log was not visible due to a custom logger without output.
  * cobbler mkloaders now also copies dependencies of menu.c32.
  * We now generate the grub configuration for the architectures correct again.
  * virt_file_size now is a float at all times.
  * Cobbler should restart successfully now if you have attached an image to a system.
  * If you have a system named default the bootloader was not removed properly before.
  * cobbler buildiso: The isolinux.cfg was not properly formatted.
  * There were unharmful templating errors in the log related to redhat_management_type. The parts depending on this were removed.
  * The DNS managers were non-functional before because of a not existing function call.
  * cobbler buildiso failed with --tmpdirs that don't end in buildiso.
  * cobbler buildiso had outdated docs and help messages for some parameters.
  * cobbler import: It was impossible to import Rocky Linux 8.5 successfully.
  * Cobbler created duplicated settings files before.
  * cobbler sync was broken by refactoring to shell=False before.
- Removed:
  * cobbler332alma.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1658404800">- Fix issue that a custom kernel with the extension ".kernel" is not
  accepted by "cobbler distro add"
- Fix issue with "get_item_resolved_value" that prevented it from
  returning in cases where a complex object would have been returned
- Fix issue where the logs would have been spammed with "grab_tree"
  messages that are meant for debugging
- Added:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1684324800">- Fix package building with Sphinx &gt;= 7.0.0
- Switch packaging from patch based to Git tree based development
- All patches that are being removed in this revision are contained in
  the new Git tree.
- Do generate boot menus even if no profiles or systems - only local boot
- Avoid crashing running buildiso in certain conditions.
- Fix settings migration schema to work while upgrading on existing running
  Uyuni and SUSE Manager servers running with old Cobbler settings (bsc#1203478)
- Consider case of "next_server" being a hostname during migration
  of Cobbler collections.
- Fix problem with "proxy_url_ext" setting being None type.
- Update v2 to v3 migration script to allow migration of collections
  that contains settings from Cobbler 2. (bsc#1203478)
- Fix problem for the migration of "autoinstall" collection attribute.
- Fix failing Cobbler tests after upgrading to 3.3.3.
- Fix regression: allow empty string as interface_type value (bsc#1203478)
- Avoid possible override of existing values during migration
  of collections to 3.0.0 (bsc#1206160)
- Add new "cobbler-tests-containers" subpackage which contains setup and
  configuration files to run Cobbler tests in containers.
- Add missing code for previous patch file around boot_loaders migration.
- Improve Cobbler performance with item cache and threadpool (bsc#1205489)
- Skip collections that are inconsistent instead of crashing (bsc#1205749)
- Items: Fix creation of "default" NetworkInterface (bsc#1206520)
- S390X systems require their kernel options to have a linebreak at
  79 characters (bsc#1207595)
- settings-migration-v1-to-v2.sh will now handle paths with whitespace
  correct
- Fix renaming Cobbler items (bsc#1204900, bsc#1209149)
- Fix cobbler buildiso so that the artifact can be booted by EFI firmware.
  (bsc#1206060)
- Add input_string_*, input_boolean, input_int functiont to public API
- Removed:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1721131200">- Update to 3.3.6
  * Upstream all openSUSE specific patches that were maintained in Git
  * Fix rename of items that had uppercase letters
  * Skip inconsistent collections instead of crashing the daemon
- Update to 3.3.5
  * Added collection indicies for UUID's, MAC's, IP addresses and hostnames
    bsc#1219933
  * Re-added to_dict() caching
  * Added lazy loading for the daemon (off by default)
- Update to 3.3.4
  * Added cobbler-tests-containers subpackage
  * Updated the distro_signatures.json database
  * The default name for grub2-efi changed to grubx64.efi to match
    the DHCP template</changelog>
</package>
<package pkgid="549f0c84a00aa9fd8c5708c2ce7282f386816f017f23c637727de7d964ef0c91" name="cobbler" arch="src">
  <version epoch="0" ver="3.3.6" rel="bp156.2.3.1"/>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1605268800">- Remove redundant '.json' suffix
- Added:
  * remove-redundant-json-suffix.diff</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1610971200">- Fix string replacement for @@xyz@@
- Better performing string replacements
- Added:
  * better-string-replacement-performance.diff
  * fix-string-replacement.diff</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057600">- Update tarball from upstream to remove the .pc quilt folder.</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057601">- Update spec file to satisfy current rpmbuild (&gt;=4.16) and make
  the build on Tumbleweed work again.</changelog>
  <changelog author="trenn@suse.de" date="1613736000">- Update to version 3.2.0+git20210218.8af5f420:
  * revert_strip_none prior adding an object on replicate
  * Remove unused function filter_upgrade_duplicates() in file.py
  * Add filename to exception
  * Add return types in file.py
  * Handle files with double .json ending
  * sync_post_wingen: Include pefile in the import check
  * Tests: Add tests for module_loader and type the module
  * Add adjustments for the source installation
  * close file after open
  * make esx_modules available to template
  * fix bootcfg template path
  Delete patches which were upstreamed and are included in the tarball:
  D    better-string-replacement-performance.diff
  D    cgi_parse_qs_is_deprecated.diff
  D    fix-for-old-str.join-usage.diff
  D    fix-string-replacement.diff
  D    load_module_apache_suse_fix.diff
  D    refactored_auth_module.diff
  D    remove-redundant-json-suffix.diff</changelog>
  <changelog author="trenn@suse.de" date="1613908800">- Update to version 3.2.0+git20210221.644f267c:
  * Address review concerns by @nodeg
  * Add schema checking code and test it
  * Convert integer bools to real bools
  * Docs: Rearrange to alphabetical order &amp; add missing settings
  * Add python-schema to our requirements
  * post_report: Use with syntax to close file in case of an error.
  * Fix linter errors in check.py
  * Remove import cgi
  * Adjust prospector Config to fix doubled issues
  * Fix Codacy linter errors</changelog>
  <changelog author="trenn@suse.de" date="1615896000">- Update to version 3.2.1+git20210315.f7482f6b:
  * API: Add HTTP 200 Return in case we have an OPTIONS request
  * Install everything in scripts/ to get migrate-data-v2-to-v3.py
  * Update issue templates
  * Webinterface: Removal of the Django Version
  * Remove get-loader code
  * Remove internal tftp python server and remove tornado dependencies
  * Increase version of Cobbler to 3.2.1
  * Move legacy field setting
  * Add tests for distro.py and item.py
  * Templates: Move macros back to the template_api and fix snippets
  * Templates: Remove old subject parameter; rename Template to CobblerTemplate
  * Templates: Improve Cheetah template child class (linter &amp; comments)
  * Templates: Improve docs and fix linter errors with sedsec
  * CLI: Add class docstring for the main class
  * Actions - Replicate: Add class docstring
  * Serializer - Mongo: Revert explicit type because of soft req on MongoDB
  * Grub: Add tests and catch some errors
  * Fix several issues in module file.py
  * remove esxi70u1 from signatures and template from spec
  * remove esxi70u1 config and templates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Fixed SPEC file:
  * Re-added missing license header
  * Added missing Source tag for rpmlintrc</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1621339200">- Prevent some race conditions when writting tftpboot files and
  the destination directory is not existing (bsc#1186124)
- Added:
  * prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="trenn@suse.de" date="1630584000">- Update to version v3.2.1.295+git.af118f52:
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * docs: Update and cleanup
  * Adjustments to cobbler-settings validate
  * fix/windows
  * Applied suggestions from @agraul and @vzhestkov
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync
- Set disabled service to localonly
- Remove unused patch
  D    prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1630670400">- Do not export spec file from git, due to bad licence format
- Add rpmlintrc to sources</changelog>
  <changelog author="trenn@suse.de" date="1632052800">- Update to version 3.2.1.336+git.5639a3af:
  * Autoinstall Manager: Fix utils.die calls and removed unused variable
  * Docs: Add the mkgrub command to the CLI
  * Add docstring to new API method
  * Added new keys to the migration module for 3.3.0
  * spec file needs an open source license header to be build in open build service
  * Expose GrubImage Action in api.py and cli.py
  * Add GrubImage action
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * Adjustments to cobbler-settings validate
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync</changelog>
  <changelog author="trenn@suse.de" date="1634212800">- Update to version 3.3.0.50+git.c1d81950:
  * Add support for Windows 11
  * Do not warn users about missing files during removal
  * Collections: Simplify the duplication checks
  * mkloaders: Add checks for required components
  * mkgrub: Rename file and class to mkloaders
  * mkgrub: Use grub subdirectory for storing binary executables
  * Downgrade info to debug message when loading systems
  * Show startup time in seconds if python3-psutil is installed
  * Use newly introduce per item serializer on parent/profile addings
  * Remove check_for_duplicate_netinfo parameter checking, this is done in interface setter now
  * Introduce new serialize_one_item function
  * Exclude ourselves from duplicate checks for ip/mac/dns duplicates
  * mkgrub: Improve bootloader building process
  * mkgrub: Apply opinionated formatting
  * Fix defaults and path to the ipxe files
  * Version bump to V3.3.1
  * Remove not existent check for disabled spacewalk registration
  * Security: Flag gate for modify_setting in XMLRPC
  * Safeguard XMLRPC against rce
  * Ease up condition checking and do not add interfaces to dhcp6 without ipv6 address
  * MAC address should already be properly formatted
  * Write message that initrd has successfully been loaded
  * Set default menu if netboot is enabled
  * Use the grub formatted tftp URL in for loading kernel/initrd remotely</changelog>
  <changelog author="alexander.graul@suse.com" date="1645185600">- This update contains fixes for CVE-2021-45082 and 2021-45083
- Update to version 3.3.1.0+git.f5b0599a:
  * Fix spec error introduced with CVE fix
  * Security: Fix incomplete template sanitization
  * Security: Restrict config file accessibility
  * Docker: CentOS to Rocky Linux move for Compose
  * Remove old Cobbler Web leftovers
  * Utils: Check if service is running before stopping it
  * CI: Remove test report parsing and publishing
  * System-Tests: Remove broken Test report parser
  * Use distro_build_configs.sh for fixing bind path</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1647000000">- This update fixes CVE-2022-0860 (bsc#1197027)
- Version 3.3.0 fixed jsc#SUMA-112
- Update to version 3.3.2
  * New:
  * cobbler sync doesn't have to be executed no more after enable_ipxe was flipped
  * Auth: Support for Global Secure Catalog via LDAP provider
  * Changes:
  * Reposync now deletes old metadata to prevent metadata merge conflicts
  * The automigration of the settings is now not enabled per default.
  * We removed ppc from RedHat EL 7 as it is not supported
  * Bugfixes:
  * Network interface is not subscriptable errors were fixed
  * The stacktraces related to the package and file pre &amp; post triggers should no longer appear
  * You should be able to add multiple initrds if needed again
  * Debian: Fix regex for SHIM_FILE which now provides a working reasonable default</changelog>
  <changelog author="Stefan Bluhm &lt;stefan.bluhm@clacee.eu&gt;" date="1648728000">- Added workaround to build Cobbler 3.3.2 on AlmaLinux.</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1654257600">- Update to version 3.3.3
  * New:
  * Uyuni Proxies can now be set with the schema validation.
  * Cobbler should now build on AlmaLinux.
  * The initrd is not required anymore as it is an optional file.
  * XML-RPC: Added dump_vars endpoint. This is intended to replace get_blended_data as of 3.4.0.
  * XML-RPC: Added get_item_resolved_value &amp; set_item_resolved_value endpoints.
  * Breaking Changes:
  * The field virt_file_size is now a float and the related settings as well.
  * Changes:
  * The error messages for duplicated objects now contains the name of the duplicated object.
  * Bugfixes:
  * Dictionaries had the wrong value set for &lt;&lt;inherit&gt;&gt;.
  * There were some cases in which the autoinstallation manager was handed the wrong object and then crashed.
  * The inheritance of the owners field was fixed.
  * Serial Console options should not contain bogous -1 value anymore.
  * HTTP API should not throw permission errors anymore.
  * During build the log was not visible due to a custom logger without output.
  * cobbler mkloaders now also copies dependencies of menu.c32.
  * We now generate the grub configuration for the architectures correct again.
  * virt_file_size now is a float at all times.
  * Cobbler should restart successfully now if you have attached an image to a system.
  * If you have a system named default the bootloader was not removed properly before.
  * cobbler buildiso: The isolinux.cfg was not properly formatted.
  * There were unharmful templating errors in the log related to redhat_management_type. The parts depending on this were removed.
  * The DNS managers were non-functional before because of a not existing function call.
  * cobbler buildiso failed with --tmpdirs that don't end in buildiso.
  * cobbler buildiso had outdated docs and help messages for some parameters.
  * cobbler import: It was impossible to import Rocky Linux 8.5 successfully.
  * Cobbler created duplicated settings files before.
  * cobbler sync was broken by refactoring to shell=False before.
- Removed:
  * cobbler332alma.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1658404800">- Fix issue that a custom kernel with the extension ".kernel" is not
  accepted by "cobbler distro add"
- Fix issue with "get_item_resolved_value" that prevented it from
  returning in cases where a complex object would have been returned
- Fix issue where the logs would have been spammed with "grab_tree"
  messages that are meant for debugging
- Added:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1684324800">- Fix package building with Sphinx &gt;= 7.0.0
- Switch packaging from patch based to Git tree based development
- All patches that are being removed in this revision are contained in
  the new Git tree.
- Do generate boot menus even if no profiles or systems - only local boot
- Avoid crashing running buildiso in certain conditions.
- Fix settings migration schema to work while upgrading on existing running
  Uyuni and SUSE Manager servers running with old Cobbler settings (bsc#1203478)
- Consider case of "next_server" being a hostname during migration
  of Cobbler collections.
- Fix problem with "proxy_url_ext" setting being None type.
- Update v2 to v3 migration script to allow migration of collections
  that contains settings from Cobbler 2. (bsc#1203478)
- Fix problem for the migration of "autoinstall" collection attribute.
- Fix failing Cobbler tests after upgrading to 3.3.3.
- Fix regression: allow empty string as interface_type value (bsc#1203478)
- Avoid possible override of existing values during migration
  of collections to 3.0.0 (bsc#1206160)
- Add new "cobbler-tests-containers" subpackage which contains setup and
  configuration files to run Cobbler tests in containers.
- Add missing code for previous patch file around boot_loaders migration.
- Improve Cobbler performance with item cache and threadpool (bsc#1205489)
- Skip collections that are inconsistent instead of crashing (bsc#1205749)
- Items: Fix creation of "default" NetworkInterface (bsc#1206520)
- S390X systems require their kernel options to have a linebreak at
  79 characters (bsc#1207595)
- settings-migration-v1-to-v2.sh will now handle paths with whitespace
  correct
- Fix renaming Cobbler items (bsc#1204900, bsc#1209149)
- Fix cobbler buildiso so that the artifact can be booted by EFI firmware.
  (bsc#1206060)
- Add input_string_*, input_boolean, input_int functiont to public API
- Removed:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1721131200">- Update to 3.3.6
  * Upstream all openSUSE specific patches that were maintained in Git
  * Fix rename of items that had uppercase letters
  * Skip inconsistent collections instead of crashing the daemon
- Update to 3.3.5
  * Added collection indicies for UUID's, MAC's, IP addresses and hostnames
    bsc#1219933
  * Re-added to_dict() caching
  * Added lazy loading for the daemon (off by default)
- Update to 3.3.4
  * Added cobbler-tests-containers subpackage
  * Updated the distro_signatures.json database
  * The default name for grub2-efi changed to grubx64.efi to match
    the DHCP template</changelog>
</package>
<package pkgid="387bc5413fee75de705bddccd751e6b4a15069365db37c17a2989448ed37a79e" name="cobbler" arch="noarch">
  <version epoch="0" ver="3.3.7" rel="bp156.2.6.1"/>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1610971200">- Fix string replacement for @@xyz@@
- Better performing string replacements
- Added:
  * better-string-replacement-performance.diff
  * fix-string-replacement.diff</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057600">- Update tarball from upstream to remove the .pc quilt folder.</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057601">- Update spec file to satisfy current rpmbuild (&gt;=4.16) and make
  the build on Tumbleweed work again.</changelog>
  <changelog author="trenn@suse.de" date="1613736000">- Update to version 3.2.0+git20210218.8af5f420:
  * revert_strip_none prior adding an object on replicate
  * Remove unused function filter_upgrade_duplicates() in file.py
  * Add filename to exception
  * Add return types in file.py
  * Handle files with double .json ending
  * sync_post_wingen: Include pefile in the import check
  * Tests: Add tests for module_loader and type the module
  * Add adjustments for the source installation
  * close file after open
  * make esx_modules available to template
  * fix bootcfg template path
  Delete patches which were upstreamed and are included in the tarball:
  D    better-string-replacement-performance.diff
  D    cgi_parse_qs_is_deprecated.diff
  D    fix-for-old-str.join-usage.diff
  D    fix-string-replacement.diff
  D    load_module_apache_suse_fix.diff
  D    refactored_auth_module.diff
  D    remove-redundant-json-suffix.diff</changelog>
  <changelog author="trenn@suse.de" date="1613908800">- Update to version 3.2.0+git20210221.644f267c:
  * Address review concerns by @nodeg
  * Add schema checking code and test it
  * Convert integer bools to real bools
  * Docs: Rearrange to alphabetical order &amp; add missing settings
  * Add python-schema to our requirements
  * post_report: Use with syntax to close file in case of an error.
  * Fix linter errors in check.py
  * Remove import cgi
  * Adjust prospector Config to fix doubled issues
  * Fix Codacy linter errors</changelog>
  <changelog author="trenn@suse.de" date="1615896000">- Update to version 3.2.1+git20210315.f7482f6b:
  * API: Add HTTP 200 Return in case we have an OPTIONS request
  * Install everything in scripts/ to get migrate-data-v2-to-v3.py
  * Update issue templates
  * Webinterface: Removal of the Django Version
  * Remove get-loader code
  * Remove internal tftp python server and remove tornado dependencies
  * Increase version of Cobbler to 3.2.1
  * Move legacy field setting
  * Add tests for distro.py and item.py
  * Templates: Move macros back to the template_api and fix snippets
  * Templates: Remove old subject parameter; rename Template to CobblerTemplate
  * Templates: Improve Cheetah template child class (linter &amp; comments)
  * Templates: Improve docs and fix linter errors with sedsec
  * CLI: Add class docstring for the main class
  * Actions - Replicate: Add class docstring
  * Serializer - Mongo: Revert explicit type because of soft req on MongoDB
  * Grub: Add tests and catch some errors
  * Fix several issues in module file.py
  * remove esxi70u1 from signatures and template from spec
  * remove esxi70u1 config and templates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Fixed SPEC file:
  * Re-added missing license header
  * Added missing Source tag for rpmlintrc</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1621339200">- Prevent some race conditions when writting tftpboot files and
  the destination directory is not existing (bsc#1186124)
- Added:
  * prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="trenn@suse.de" date="1630584000">- Update to version v3.2.1.295+git.af118f52:
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * docs: Update and cleanup
  * Adjustments to cobbler-settings validate
  * fix/windows
  * Applied suggestions from @agraul and @vzhestkov
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync
- Set disabled service to localonly
- Remove unused patch
  D    prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1630670400">- Do not export spec file from git, due to bad licence format
- Add rpmlintrc to sources</changelog>
  <changelog author="trenn@suse.de" date="1632052800">- Update to version 3.2.1.336+git.5639a3af:
  * Autoinstall Manager: Fix utils.die calls and removed unused variable
  * Docs: Add the mkgrub command to the CLI
  * Add docstring to new API method
  * Added new keys to the migration module for 3.3.0
  * spec file needs an open source license header to be build in open build service
  * Expose GrubImage Action in api.py and cli.py
  * Add GrubImage action
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * Adjustments to cobbler-settings validate
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync</changelog>
  <changelog author="trenn@suse.de" date="1634212800">- Update to version 3.3.0.50+git.c1d81950:
  * Add support for Windows 11
  * Do not warn users about missing files during removal
  * Collections: Simplify the duplication checks
  * mkloaders: Add checks for required components
  * mkgrub: Rename file and class to mkloaders
  * mkgrub: Use grub subdirectory for storing binary executables
  * Downgrade info to debug message when loading systems
  * Show startup time in seconds if python3-psutil is installed
  * Use newly introduce per item serializer on parent/profile addings
  * Remove check_for_duplicate_netinfo parameter checking, this is done in interface setter now
  * Introduce new serialize_one_item function
  * Exclude ourselves from duplicate checks for ip/mac/dns duplicates
  * mkgrub: Improve bootloader building process
  * mkgrub: Apply opinionated formatting
  * Fix defaults and path to the ipxe files
  * Version bump to V3.3.1
  * Remove not existent check for disabled spacewalk registration
  * Security: Flag gate for modify_setting in XMLRPC
  * Safeguard XMLRPC against rce
  * Ease up condition checking and do not add interfaces to dhcp6 without ipv6 address
  * MAC address should already be properly formatted
  * Write message that initrd has successfully been loaded
  * Set default menu if netboot is enabled
  * Use the grub formatted tftp URL in for loading kernel/initrd remotely</changelog>
  <changelog author="alexander.graul@suse.com" date="1645185600">- This update contains fixes for CVE-2021-45082 and 2021-45083
- Update to version 3.3.1.0+git.f5b0599a:
  * Fix spec error introduced with CVE fix
  * Security: Fix incomplete template sanitization
  * Security: Restrict config file accessibility
  * Docker: CentOS to Rocky Linux move for Compose
  * Remove old Cobbler Web leftovers
  * Utils: Check if service is running before stopping it
  * CI: Remove test report parsing and publishing
  * System-Tests: Remove broken Test report parser
  * Use distro_build_configs.sh for fixing bind path</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1647000000">- This update fixes CVE-2022-0860 (bsc#1197027)
- Version 3.3.0 fixed jsc#SUMA-112
- Update to version 3.3.2
  * New:
  * cobbler sync doesn't have to be executed no more after enable_ipxe was flipped
  * Auth: Support for Global Secure Catalog via LDAP provider
  * Changes:
  * Reposync now deletes old metadata to prevent metadata merge conflicts
  * The automigration of the settings is now not enabled per default.
  * We removed ppc from RedHat EL 7 as it is not supported
  * Bugfixes:
  * Network interface is not subscriptable errors were fixed
  * The stacktraces related to the package and file pre &amp; post triggers should no longer appear
  * You should be able to add multiple initrds if needed again
  * Debian: Fix regex for SHIM_FILE which now provides a working reasonable default</changelog>
  <changelog author="Stefan Bluhm &lt;stefan.bluhm@clacee.eu&gt;" date="1648728000">- Added workaround to build Cobbler 3.3.2 on AlmaLinux.</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1654257600">- Update to version 3.3.3
  * New:
  * Uyuni Proxies can now be set with the schema validation.
  * Cobbler should now build on AlmaLinux.
  * The initrd is not required anymore as it is an optional file.
  * XML-RPC: Added dump_vars endpoint. This is intended to replace get_blended_data as of 3.4.0.
  * XML-RPC: Added get_item_resolved_value &amp; set_item_resolved_value endpoints.
  * Breaking Changes:
  * The field virt_file_size is now a float and the related settings as well.
  * Changes:
  * The error messages for duplicated objects now contains the name of the duplicated object.
  * Bugfixes:
  * Dictionaries had the wrong value set for &lt;&lt;inherit&gt;&gt;.
  * There were some cases in which the autoinstallation manager was handed the wrong object and then crashed.
  * The inheritance of the owners field was fixed.
  * Serial Console options should not contain bogous -1 value anymore.
  * HTTP API should not throw permission errors anymore.
  * During build the log was not visible due to a custom logger without output.
  * cobbler mkloaders now also copies dependencies of menu.c32.
  * We now generate the grub configuration for the architectures correct again.
  * virt_file_size now is a float at all times.
  * Cobbler should restart successfully now if you have attached an image to a system.
  * If you have a system named default the bootloader was not removed properly before.
  * cobbler buildiso: The isolinux.cfg was not properly formatted.
  * There were unharmful templating errors in the log related to redhat_management_type. The parts depending on this were removed.
  * The DNS managers were non-functional before because of a not existing function call.
  * cobbler buildiso failed with --tmpdirs that don't end in buildiso.
  * cobbler buildiso had outdated docs and help messages for some parameters.
  * cobbler import: It was impossible to import Rocky Linux 8.5 successfully.
  * Cobbler created duplicated settings files before.
  * cobbler sync was broken by refactoring to shell=False before.
- Removed:
  * cobbler332alma.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1658404800">- Fix issue that a custom kernel with the extension ".kernel" is not
  accepted by "cobbler distro add"
- Fix issue with "get_item_resolved_value" that prevented it from
  returning in cases where a complex object would have been returned
- Fix issue where the logs would have been spammed with "grab_tree"
  messages that are meant for debugging
- Added:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1684324800">- Fix package building with Sphinx &gt;= 7.0.0
- Switch packaging from patch based to Git tree based development
- All patches that are being removed in this revision are contained in
  the new Git tree.
- Do generate boot menus even if no profiles or systems - only local boot
- Avoid crashing running buildiso in certain conditions.
- Fix settings migration schema to work while upgrading on existing running
  Uyuni and SUSE Manager servers running with old Cobbler settings (bsc#1203478)
- Consider case of "next_server" being a hostname during migration
  of Cobbler collections.
- Fix problem with "proxy_url_ext" setting being None type.
- Update v2 to v3 migration script to allow migration of collections
  that contains settings from Cobbler 2. (bsc#1203478)
- Fix problem for the migration of "autoinstall" collection attribute.
- Fix failing Cobbler tests after upgrading to 3.3.3.
- Fix regression: allow empty string as interface_type value (bsc#1203478)
- Avoid possible override of existing values during migration
  of collections to 3.0.0 (bsc#1206160)
- Add new "cobbler-tests-containers" subpackage which contains setup and
  configuration files to run Cobbler tests in containers.
- Add missing code for previous patch file around boot_loaders migration.
- Improve Cobbler performance with item cache and threadpool (bsc#1205489)
- Skip collections that are inconsistent instead of crashing (bsc#1205749)
- Items: Fix creation of "default" NetworkInterface (bsc#1206520)
- S390X systems require their kernel options to have a linebreak at
  79 characters (bsc#1207595)
- settings-migration-v1-to-v2.sh will now handle paths with whitespace
  correct
- Fix renaming Cobbler items (bsc#1204900, bsc#1209149)
- Fix cobbler buildiso so that the artifact can be booted by EFI firmware.
  (bsc#1206060)
- Add input_string_*, input_boolean, input_int functiont to public API
- Removed:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1721131200">- Update to 3.3.6
  * Upstream all openSUSE specific patches that were maintained in Git
  * Fix rename of items that had uppercase letters
  * Skip inconsistent collections instead of crashing the daemon
- Update to 3.3.5
  * Added collection indicies for UUID's, MAC's, IP addresses and hostnames
    bsc#1219933
  * Re-added to_dict() caching
  * Added lazy loading for the daemon (off by default)
- Update to 3.3.4
  * Added cobbler-tests-containers subpackage
  * Updated the distro_signatures.json database
  * The default name for grub2-efi changed to grubx64.efi to match
    the DHCP template</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1732104000">- Update to 3.3.7
  * Security: Fix issue that allowed anyone to connect to the API
    as admin (CVE-2024-47533, bsc#1231332)
  * bind - Fix bug that prevents cname entries from being
    generated successfully
  * Fix build on RHEL9 based distributions (fence-agents-all split)
  * Fix for Windows systems
  * Docs: Add missing dependencies for source installation
  * Fix issue that prevented systems from being synced when the
    profile was edited</changelog>
</package>
<package pkgid="8fe9fba7d198c4ab6951d7ebea8e80ceca8ec01ce2ff687fc03321fbffe5a727" name="cobbler" arch="src">
  <version epoch="0" ver="3.3.7" rel="bp156.2.6.1"/>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1610971200">- Fix string replacement for @@xyz@@
- Better performing string replacements
- Added:
  * better-string-replacement-performance.diff
  * fix-string-replacement.diff</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057600">- Update tarball from upstream to remove the .pc quilt folder.</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057601">- Update spec file to satisfy current rpmbuild (&gt;=4.16) and make
  the build on Tumbleweed work again.</changelog>
  <changelog author="trenn@suse.de" date="1613736000">- Update to version 3.2.0+git20210218.8af5f420:
  * revert_strip_none prior adding an object on replicate
  * Remove unused function filter_upgrade_duplicates() in file.py
  * Add filename to exception
  * Add return types in file.py
  * Handle files with double .json ending
  * sync_post_wingen: Include pefile in the import check
  * Tests: Add tests for module_loader and type the module
  * Add adjustments for the source installation
  * close file after open
  * make esx_modules available to template
  * fix bootcfg template path
  Delete patches which were upstreamed and are included in the tarball:
  D    better-string-replacement-performance.diff
  D    cgi_parse_qs_is_deprecated.diff
  D    fix-for-old-str.join-usage.diff
  D    fix-string-replacement.diff
  D    load_module_apache_suse_fix.diff
  D    refactored_auth_module.diff
  D    remove-redundant-json-suffix.diff</changelog>
  <changelog author="trenn@suse.de" date="1613908800">- Update to version 3.2.0+git20210221.644f267c:
  * Address review concerns by @nodeg
  * Add schema checking code and test it
  * Convert integer bools to real bools
  * Docs: Rearrange to alphabetical order &amp; add missing settings
  * Add python-schema to our requirements
  * post_report: Use with syntax to close file in case of an error.
  * Fix linter errors in check.py
  * Remove import cgi
  * Adjust prospector Config to fix doubled issues
  * Fix Codacy linter errors</changelog>
  <changelog author="trenn@suse.de" date="1615896000">- Update to version 3.2.1+git20210315.f7482f6b:
  * API: Add HTTP 200 Return in case we have an OPTIONS request
  * Install everything in scripts/ to get migrate-data-v2-to-v3.py
  * Update issue templates
  * Webinterface: Removal of the Django Version
  * Remove get-loader code
  * Remove internal tftp python server and remove tornado dependencies
  * Increase version of Cobbler to 3.2.1
  * Move legacy field setting
  * Add tests for distro.py and item.py
  * Templates: Move macros back to the template_api and fix snippets
  * Templates: Remove old subject parameter; rename Template to CobblerTemplate
  * Templates: Improve Cheetah template child class (linter &amp; comments)
  * Templates: Improve docs and fix linter errors with sedsec
  * CLI: Add class docstring for the main class
  * Actions - Replicate: Add class docstring
  * Serializer - Mongo: Revert explicit type because of soft req on MongoDB
  * Grub: Add tests and catch some errors
  * Fix several issues in module file.py
  * remove esxi70u1 from signatures and template from spec
  * remove esxi70u1 config and templates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Fixed SPEC file:
  * Re-added missing license header
  * Added missing Source tag for rpmlintrc</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1621339200">- Prevent some race conditions when writting tftpboot files and
  the destination directory is not existing (bsc#1186124)
- Added:
  * prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="trenn@suse.de" date="1630584000">- Update to version v3.2.1.295+git.af118f52:
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * docs: Update and cleanup
  * Adjustments to cobbler-settings validate
  * fix/windows
  * Applied suggestions from @agraul and @vzhestkov
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync
- Set disabled service to localonly
- Remove unused patch
  D    prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1630670400">- Do not export spec file from git, due to bad licence format
- Add rpmlintrc to sources</changelog>
  <changelog author="trenn@suse.de" date="1632052800">- Update to version 3.2.1.336+git.5639a3af:
  * Autoinstall Manager: Fix utils.die calls and removed unused variable
  * Docs: Add the mkgrub command to the CLI
  * Add docstring to new API method
  * Added new keys to the migration module for 3.3.0
  * spec file needs an open source license header to be build in open build service
  * Expose GrubImage Action in api.py and cli.py
  * Add GrubImage action
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * Adjustments to cobbler-settings validate
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync</changelog>
  <changelog author="trenn@suse.de" date="1634212800">- Update to version 3.3.0.50+git.c1d81950:
  * Add support for Windows 11
  * Do not warn users about missing files during removal
  * Collections: Simplify the duplication checks
  * mkloaders: Add checks for required components
  * mkgrub: Rename file and class to mkloaders
  * mkgrub: Use grub subdirectory for storing binary executables
  * Downgrade info to debug message when loading systems
  * Show startup time in seconds if python3-psutil is installed
  * Use newly introduce per item serializer on parent/profile addings
  * Remove check_for_duplicate_netinfo parameter checking, this is done in interface setter now
  * Introduce new serialize_one_item function
  * Exclude ourselves from duplicate checks for ip/mac/dns duplicates
  * mkgrub: Improve bootloader building process
  * mkgrub: Apply opinionated formatting
  * Fix defaults and path to the ipxe files
  * Version bump to V3.3.1
  * Remove not existent check for disabled spacewalk registration
  * Security: Flag gate for modify_setting in XMLRPC
  * Safeguard XMLRPC against rce
  * Ease up condition checking and do not add interfaces to dhcp6 without ipv6 address
  * MAC address should already be properly formatted
  * Write message that initrd has successfully been loaded
  * Set default menu if netboot is enabled
  * Use the grub formatted tftp URL in for loading kernel/initrd remotely</changelog>
  <changelog author="alexander.graul@suse.com" date="1645185600">- This update contains fixes for CVE-2021-45082 and 2021-45083
- Update to version 3.3.1.0+git.f5b0599a:
  * Fix spec error introduced with CVE fix
  * Security: Fix incomplete template sanitization
  * Security: Restrict config file accessibility
  * Docker: CentOS to Rocky Linux move for Compose
  * Remove old Cobbler Web leftovers
  * Utils: Check if service is running before stopping it
  * CI: Remove test report parsing and publishing
  * System-Tests: Remove broken Test report parser
  * Use distro_build_configs.sh for fixing bind path</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1647000000">- This update fixes CVE-2022-0860 (bsc#1197027)
- Version 3.3.0 fixed jsc#SUMA-112
- Update to version 3.3.2
  * New:
  * cobbler sync doesn't have to be executed no more after enable_ipxe was flipped
  * Auth: Support for Global Secure Catalog via LDAP provider
  * Changes:
  * Reposync now deletes old metadata to prevent metadata merge conflicts
  * The automigration of the settings is now not enabled per default.
  * We removed ppc from RedHat EL 7 as it is not supported
  * Bugfixes:
  * Network interface is not subscriptable errors were fixed
  * The stacktraces related to the package and file pre &amp; post triggers should no longer appear
  * You should be able to add multiple initrds if needed again
  * Debian: Fix regex for SHIM_FILE which now provides a working reasonable default</changelog>
  <changelog author="Stefan Bluhm &lt;stefan.bluhm@clacee.eu&gt;" date="1648728000">- Added workaround to build Cobbler 3.3.2 on AlmaLinux.</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1654257600">- Update to version 3.3.3
  * New:
  * Uyuni Proxies can now be set with the schema validation.
  * Cobbler should now build on AlmaLinux.
  * The initrd is not required anymore as it is an optional file.
  * XML-RPC: Added dump_vars endpoint. This is intended to replace get_blended_data as of 3.4.0.
  * XML-RPC: Added get_item_resolved_value &amp; set_item_resolved_value endpoints.
  * Breaking Changes:
  * The field virt_file_size is now a float and the related settings as well.
  * Changes:
  * The error messages for duplicated objects now contains the name of the duplicated object.
  * Bugfixes:
  * Dictionaries had the wrong value set for &lt;&lt;inherit&gt;&gt;.
  * There were some cases in which the autoinstallation manager was handed the wrong object and then crashed.
  * The inheritance of the owners field was fixed.
  * Serial Console options should not contain bogous -1 value anymore.
  * HTTP API should not throw permission errors anymore.
  * During build the log was not visible due to a custom logger without output.
  * cobbler mkloaders now also copies dependencies of menu.c32.
  * We now generate the grub configuration for the architectures correct again.
  * virt_file_size now is a float at all times.
  * Cobbler should restart successfully now if you have attached an image to a system.
  * If you have a system named default the bootloader was not removed properly before.
  * cobbler buildiso: The isolinux.cfg was not properly formatted.
  * There were unharmful templating errors in the log related to redhat_management_type. The parts depending on this were removed.
  * The DNS managers were non-functional before because of a not existing function call.
  * cobbler buildiso failed with --tmpdirs that don't end in buildiso.
  * cobbler buildiso had outdated docs and help messages for some parameters.
  * cobbler import: It was impossible to import Rocky Linux 8.5 successfully.
  * Cobbler created duplicated settings files before.
  * cobbler sync was broken by refactoring to shell=False before.
- Removed:
  * cobbler332alma.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1658404800">- Fix issue that a custom kernel with the extension ".kernel" is not
  accepted by "cobbler distro add"
- Fix issue with "get_item_resolved_value" that prevented it from
  returning in cases where a complex object would have been returned
- Fix issue where the logs would have been spammed with "grab_tree"
  messages that are meant for debugging
- Added:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1684324800">- Fix package building with Sphinx &gt;= 7.0.0
- Switch packaging from patch based to Git tree based development
- All patches that are being removed in this revision are contained in
  the new Git tree.
- Do generate boot menus even if no profiles or systems - only local boot
- Avoid crashing running buildiso in certain conditions.
- Fix settings migration schema to work while upgrading on existing running
  Uyuni and SUSE Manager servers running with old Cobbler settings (bsc#1203478)
- Consider case of "next_server" being a hostname during migration
  of Cobbler collections.
- Fix problem with "proxy_url_ext" setting being None type.
- Update v2 to v3 migration script to allow migration of collections
  that contains settings from Cobbler 2. (bsc#1203478)
- Fix problem for the migration of "autoinstall" collection attribute.
- Fix failing Cobbler tests after upgrading to 3.3.3.
- Fix regression: allow empty string as interface_type value (bsc#1203478)
- Avoid possible override of existing values during migration
  of collections to 3.0.0 (bsc#1206160)
- Add new "cobbler-tests-containers" subpackage which contains setup and
  configuration files to run Cobbler tests in containers.
- Add missing code for previous patch file around boot_loaders migration.
- Improve Cobbler performance with item cache and threadpool (bsc#1205489)
- Skip collections that are inconsistent instead of crashing (bsc#1205749)
- Items: Fix creation of "default" NetworkInterface (bsc#1206520)
- S390X systems require their kernel options to have a linebreak at
  79 characters (bsc#1207595)
- settings-migration-v1-to-v2.sh will now handle paths with whitespace
  correct
- Fix renaming Cobbler items (bsc#1204900, bsc#1209149)
- Fix cobbler buildiso so that the artifact can be booted by EFI firmware.
  (bsc#1206060)
- Add input_string_*, input_boolean, input_int functiont to public API
- Removed:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1721131200">- Update to 3.3.6
  * Upstream all openSUSE specific patches that were maintained in Git
  * Fix rename of items that had uppercase letters
  * Skip inconsistent collections instead of crashing the daemon
- Update to 3.3.5
  * Added collection indicies for UUID's, MAC's, IP addresses and hostnames
    bsc#1219933
  * Re-added to_dict() caching
  * Added lazy loading for the daemon (off by default)
- Update to 3.3.4
  * Added cobbler-tests-containers subpackage
  * Updated the distro_signatures.json database
  * The default name for grub2-efi changed to grubx64.efi to match
    the DHCP template</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1732104000">- Update to 3.3.7
  * Security: Fix issue that allowed anyone to connect to the API
    as admin (CVE-2024-47533, bsc#1231332)
  * bind - Fix bug that prevents cname entries from being
    generated successfully
  * Fix build on RHEL9 based distributions (fence-agents-all split)
  * Fix for Windows systems
  * Docs: Add missing dependencies for source installation
  * Fix issue that prevented systems from being synced when the
    profile was edited</changelog>
</package>
<package pkgid="7344d75f6057a539cdceefe55ca751513a65fe3361df130e3c620a7ea76c52be" name="cobbler-tests" arch="noarch">
  <version epoch="0" ver="3.3.6" rel="bp156.2.3.1"/>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1605268800">- Remove redundant '.json' suffix
- Added:
  * remove-redundant-json-suffix.diff</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1610971200">- Fix string replacement for @@xyz@@
- Better performing string replacements
- Added:
  * better-string-replacement-performance.diff
  * fix-string-replacement.diff</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057600">- Update tarball from upstream to remove the .pc quilt folder.</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057601">- Update spec file to satisfy current rpmbuild (&gt;=4.16) and make
  the build on Tumbleweed work again.</changelog>
  <changelog author="trenn@suse.de" date="1613736000">- Update to version 3.2.0+git20210218.8af5f420:
  * revert_strip_none prior adding an object on replicate
  * Remove unused function filter_upgrade_duplicates() in file.py
  * Add filename to exception
  * Add return types in file.py
  * Handle files with double .json ending
  * sync_post_wingen: Include pefile in the import check
  * Tests: Add tests for module_loader and type the module
  * Add adjustments for the source installation
  * close file after open
  * make esx_modules available to template
  * fix bootcfg template path
  Delete patches which were upstreamed and are included in the tarball:
  D    better-string-replacement-performance.diff
  D    cgi_parse_qs_is_deprecated.diff
  D    fix-for-old-str.join-usage.diff
  D    fix-string-replacement.diff
  D    load_module_apache_suse_fix.diff
  D    refactored_auth_module.diff
  D    remove-redundant-json-suffix.diff</changelog>
  <changelog author="trenn@suse.de" date="1613908800">- Update to version 3.2.0+git20210221.644f267c:
  * Address review concerns by @nodeg
  * Add schema checking code and test it
  * Convert integer bools to real bools
  * Docs: Rearrange to alphabetical order &amp; add missing settings
  * Add python-schema to our requirements
  * post_report: Use with syntax to close file in case of an error.
  * Fix linter errors in check.py
  * Remove import cgi
  * Adjust prospector Config to fix doubled issues
  * Fix Codacy linter errors</changelog>
  <changelog author="trenn@suse.de" date="1615896000">- Update to version 3.2.1+git20210315.f7482f6b:
  * API: Add HTTP 200 Return in case we have an OPTIONS request
  * Install everything in scripts/ to get migrate-data-v2-to-v3.py
  * Update issue templates
  * Webinterface: Removal of the Django Version
  * Remove get-loader code
  * Remove internal tftp python server and remove tornado dependencies
  * Increase version of Cobbler to 3.2.1
  * Move legacy field setting
  * Add tests for distro.py and item.py
  * Templates: Move macros back to the template_api and fix snippets
  * Templates: Remove old subject parameter; rename Template to CobblerTemplate
  * Templates: Improve Cheetah template child class (linter &amp; comments)
  * Templates: Improve docs and fix linter errors with sedsec
  * CLI: Add class docstring for the main class
  * Actions - Replicate: Add class docstring
  * Serializer - Mongo: Revert explicit type because of soft req on MongoDB
  * Grub: Add tests and catch some errors
  * Fix several issues in module file.py
  * remove esxi70u1 from signatures and template from spec
  * remove esxi70u1 config and templates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Fixed SPEC file:
  * Re-added missing license header
  * Added missing Source tag for rpmlintrc</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1621339200">- Prevent some race conditions when writting tftpboot files and
  the destination directory is not existing (bsc#1186124)
- Added:
  * prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="trenn@suse.de" date="1630584000">- Update to version v3.2.1.295+git.af118f52:
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * docs: Update and cleanup
  * Adjustments to cobbler-settings validate
  * fix/windows
  * Applied suggestions from @agraul and @vzhestkov
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync
- Set disabled service to localonly
- Remove unused patch
  D    prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1630670400">- Do not export spec file from git, due to bad licence format
- Add rpmlintrc to sources</changelog>
  <changelog author="trenn@suse.de" date="1632052800">- Update to version 3.2.1.336+git.5639a3af:
  * Autoinstall Manager: Fix utils.die calls and removed unused variable
  * Docs: Add the mkgrub command to the CLI
  * Add docstring to new API method
  * Added new keys to the migration module for 3.3.0
  * spec file needs an open source license header to be build in open build service
  * Expose GrubImage Action in api.py and cli.py
  * Add GrubImage action
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * Adjustments to cobbler-settings validate
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync</changelog>
  <changelog author="trenn@suse.de" date="1634212800">- Update to version 3.3.0.50+git.c1d81950:
  * Add support for Windows 11
  * Do not warn users about missing files during removal
  * Collections: Simplify the duplication checks
  * mkloaders: Add checks for required components
  * mkgrub: Rename file and class to mkloaders
  * mkgrub: Use grub subdirectory for storing binary executables
  * Downgrade info to debug message when loading systems
  * Show startup time in seconds if python3-psutil is installed
  * Use newly introduce per item serializer on parent/profile addings
  * Remove check_for_duplicate_netinfo parameter checking, this is done in interface setter now
  * Introduce new serialize_one_item function
  * Exclude ourselves from duplicate checks for ip/mac/dns duplicates
  * mkgrub: Improve bootloader building process
  * mkgrub: Apply opinionated formatting
  * Fix defaults and path to the ipxe files
  * Version bump to V3.3.1
  * Remove not existent check for disabled spacewalk registration
  * Security: Flag gate for modify_setting in XMLRPC
  * Safeguard XMLRPC against rce
  * Ease up condition checking and do not add interfaces to dhcp6 without ipv6 address
  * MAC address should already be properly formatted
  * Write message that initrd has successfully been loaded
  * Set default menu if netboot is enabled
  * Use the grub formatted tftp URL in for loading kernel/initrd remotely</changelog>
  <changelog author="alexander.graul@suse.com" date="1645185600">- This update contains fixes for CVE-2021-45082 and 2021-45083
- Update to version 3.3.1.0+git.f5b0599a:
  * Fix spec error introduced with CVE fix
  * Security: Fix incomplete template sanitization
  * Security: Restrict config file accessibility
  * Docker: CentOS to Rocky Linux move for Compose
  * Remove old Cobbler Web leftovers
  * Utils: Check if service is running before stopping it
  * CI: Remove test report parsing and publishing
  * System-Tests: Remove broken Test report parser
  * Use distro_build_configs.sh for fixing bind path</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1647000000">- This update fixes CVE-2022-0860 (bsc#1197027)
- Version 3.3.0 fixed jsc#SUMA-112
- Update to version 3.3.2
  * New:
  * cobbler sync doesn't have to be executed no more after enable_ipxe was flipped
  * Auth: Support for Global Secure Catalog via LDAP provider
  * Changes:
  * Reposync now deletes old metadata to prevent metadata merge conflicts
  * The automigration of the settings is now not enabled per default.
  * We removed ppc from RedHat EL 7 as it is not supported
  * Bugfixes:
  * Network interface is not subscriptable errors were fixed
  * The stacktraces related to the package and file pre &amp; post triggers should no longer appear
  * You should be able to add multiple initrds if needed again
  * Debian: Fix regex for SHIM_FILE which now provides a working reasonable default</changelog>
  <changelog author="Stefan Bluhm &lt;stefan.bluhm@clacee.eu&gt;" date="1648728000">- Added workaround to build Cobbler 3.3.2 on AlmaLinux.</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1654257600">- Update to version 3.3.3
  * New:
  * Uyuni Proxies can now be set with the schema validation.
  * Cobbler should now build on AlmaLinux.
  * The initrd is not required anymore as it is an optional file.
  * XML-RPC: Added dump_vars endpoint. This is intended to replace get_blended_data as of 3.4.0.
  * XML-RPC: Added get_item_resolved_value &amp; set_item_resolved_value endpoints.
  * Breaking Changes:
  * The field virt_file_size is now a float and the related settings as well.
  * Changes:
  * The error messages for duplicated objects now contains the name of the duplicated object.
  * Bugfixes:
  * Dictionaries had the wrong value set for &lt;&lt;inherit&gt;&gt;.
  * There were some cases in which the autoinstallation manager was handed the wrong object and then crashed.
  * The inheritance of the owners field was fixed.
  * Serial Console options should not contain bogous -1 value anymore.
  * HTTP API should not throw permission errors anymore.
  * During build the log was not visible due to a custom logger without output.
  * cobbler mkloaders now also copies dependencies of menu.c32.
  * We now generate the grub configuration for the architectures correct again.
  * virt_file_size now is a float at all times.
  * Cobbler should restart successfully now if you have attached an image to a system.
  * If you have a system named default the bootloader was not removed properly before.
  * cobbler buildiso: The isolinux.cfg was not properly formatted.
  * There were unharmful templating errors in the log related to redhat_management_type. The parts depending on this were removed.
  * The DNS managers were non-functional before because of a not existing function call.
  * cobbler buildiso failed with --tmpdirs that don't end in buildiso.
  * cobbler buildiso had outdated docs and help messages for some parameters.
  * cobbler import: It was impossible to import Rocky Linux 8.5 successfully.
  * Cobbler created duplicated settings files before.
  * cobbler sync was broken by refactoring to shell=False before.
- Removed:
  * cobbler332alma.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1658404800">- Fix issue that a custom kernel with the extension ".kernel" is not
  accepted by "cobbler distro add"
- Fix issue with "get_item_resolved_value" that prevented it from
  returning in cases where a complex object would have been returned
- Fix issue where the logs would have been spammed with "grab_tree"
  messages that are meant for debugging
- Added:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1684324800">- Fix package building with Sphinx &gt;= 7.0.0
- Switch packaging from patch based to Git tree based development
- All patches that are being removed in this revision are contained in
  the new Git tree.
- Do generate boot menus even if no profiles or systems - only local boot
- Avoid crashing running buildiso in certain conditions.
- Fix settings migration schema to work while upgrading on existing running
  Uyuni and SUSE Manager servers running with old Cobbler settings (bsc#1203478)
- Consider case of "next_server" being a hostname during migration
  of Cobbler collections.
- Fix problem with "proxy_url_ext" setting being None type.
- Update v2 to v3 migration script to allow migration of collections
  that contains settings from Cobbler 2. (bsc#1203478)
- Fix problem for the migration of "autoinstall" collection attribute.
- Fix failing Cobbler tests after upgrading to 3.3.3.
- Fix regression: allow empty string as interface_type value (bsc#1203478)
- Avoid possible override of existing values during migration
  of collections to 3.0.0 (bsc#1206160)
- Add new "cobbler-tests-containers" subpackage which contains setup and
  configuration files to run Cobbler tests in containers.
- Add missing code for previous patch file around boot_loaders migration.
- Improve Cobbler performance with item cache and threadpool (bsc#1205489)
- Skip collections that are inconsistent instead of crashing (bsc#1205749)
- Items: Fix creation of "default" NetworkInterface (bsc#1206520)
- S390X systems require their kernel options to have a linebreak at
  79 characters (bsc#1207595)
- settings-migration-v1-to-v2.sh will now handle paths with whitespace
  correct
- Fix renaming Cobbler items (bsc#1204900, bsc#1209149)
- Fix cobbler buildiso so that the artifact can be booted by EFI firmware.
  (bsc#1206060)
- Add input_string_*, input_boolean, input_int functiont to public API
- Removed:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1721131200">- Update to 3.3.6
  * Upstream all openSUSE specific patches that were maintained in Git
  * Fix rename of items that had uppercase letters
  * Skip inconsistent collections instead of crashing the daemon
- Update to 3.3.5
  * Added collection indicies for UUID's, MAC's, IP addresses and hostnames
    bsc#1219933
  * Re-added to_dict() caching
  * Added lazy loading for the daemon (off by default)
- Update to 3.3.4
  * Added cobbler-tests-containers subpackage
  * Updated the distro_signatures.json database
  * The default name for grub2-efi changed to grubx64.efi to match
    the DHCP template</changelog>
</package>
<package pkgid="62c6959f512ddef328a417dcec24e0e07bc6e072310dc4bdbedd49d659039f06" name="cobbler-tests" arch="noarch">
  <version epoch="0" ver="3.3.7" rel="bp156.2.6.1"/>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1610971200">- Fix string replacement for @@xyz@@
- Better performing string replacements
- Added:
  * better-string-replacement-performance.diff
  * fix-string-replacement.diff</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057600">- Update tarball from upstream to remove the .pc quilt folder.</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057601">- Update spec file to satisfy current rpmbuild (&gt;=4.16) and make
  the build on Tumbleweed work again.</changelog>
  <changelog author="trenn@suse.de" date="1613736000">- Update to version 3.2.0+git20210218.8af5f420:
  * revert_strip_none prior adding an object on replicate
  * Remove unused function filter_upgrade_duplicates() in file.py
  * Add filename to exception
  * Add return types in file.py
  * Handle files with double .json ending
  * sync_post_wingen: Include pefile in the import check
  * Tests: Add tests for module_loader and type the module
  * Add adjustments for the source installation
  * close file after open
  * make esx_modules available to template
  * fix bootcfg template path
  Delete patches which were upstreamed and are included in the tarball:
  D    better-string-replacement-performance.diff
  D    cgi_parse_qs_is_deprecated.diff
  D    fix-for-old-str.join-usage.diff
  D    fix-string-replacement.diff
  D    load_module_apache_suse_fix.diff
  D    refactored_auth_module.diff
  D    remove-redundant-json-suffix.diff</changelog>
  <changelog author="trenn@suse.de" date="1613908800">- Update to version 3.2.0+git20210221.644f267c:
  * Address review concerns by @nodeg
  * Add schema checking code and test it
  * Convert integer bools to real bools
  * Docs: Rearrange to alphabetical order &amp; add missing settings
  * Add python-schema to our requirements
  * post_report: Use with syntax to close file in case of an error.
  * Fix linter errors in check.py
  * Remove import cgi
  * Adjust prospector Config to fix doubled issues
  * Fix Codacy linter errors</changelog>
  <changelog author="trenn@suse.de" date="1615896000">- Update to version 3.2.1+git20210315.f7482f6b:
  * API: Add HTTP 200 Return in case we have an OPTIONS request
  * Install everything in scripts/ to get migrate-data-v2-to-v3.py
  * Update issue templates
  * Webinterface: Removal of the Django Version
  * Remove get-loader code
  * Remove internal tftp python server and remove tornado dependencies
  * Increase version of Cobbler to 3.2.1
  * Move legacy field setting
  * Add tests for distro.py and item.py
  * Templates: Move macros back to the template_api and fix snippets
  * Templates: Remove old subject parameter; rename Template to CobblerTemplate
  * Templates: Improve Cheetah template child class (linter &amp; comments)
  * Templates: Improve docs and fix linter errors with sedsec
  * CLI: Add class docstring for the main class
  * Actions - Replicate: Add class docstring
  * Serializer - Mongo: Revert explicit type because of soft req on MongoDB
  * Grub: Add tests and catch some errors
  * Fix several issues in module file.py
  * remove esxi70u1 from signatures and template from spec
  * remove esxi70u1 config and templates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Fixed SPEC file:
  * Re-added missing license header
  * Added missing Source tag for rpmlintrc</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1621339200">- Prevent some race conditions when writting tftpboot files and
  the destination directory is not existing (bsc#1186124)
- Added:
  * prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="trenn@suse.de" date="1630584000">- Update to version v3.2.1.295+git.af118f52:
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * docs: Update and cleanup
  * Adjustments to cobbler-settings validate
  * fix/windows
  * Applied suggestions from @agraul and @vzhestkov
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync
- Set disabled service to localonly
- Remove unused patch
  D    prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1630670400">- Do not export spec file from git, due to bad licence format
- Add rpmlintrc to sources</changelog>
  <changelog author="trenn@suse.de" date="1632052800">- Update to version 3.2.1.336+git.5639a3af:
  * Autoinstall Manager: Fix utils.die calls and removed unused variable
  * Docs: Add the mkgrub command to the CLI
  * Add docstring to new API method
  * Added new keys to the migration module for 3.3.0
  * spec file needs an open source license header to be build in open build service
  * Expose GrubImage Action in api.py and cli.py
  * Add GrubImage action
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * Adjustments to cobbler-settings validate
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync</changelog>
  <changelog author="trenn@suse.de" date="1634212800">- Update to version 3.3.0.50+git.c1d81950:
  * Add support for Windows 11
  * Do not warn users about missing files during removal
  * Collections: Simplify the duplication checks
  * mkloaders: Add checks for required components
  * mkgrub: Rename file and class to mkloaders
  * mkgrub: Use grub subdirectory for storing binary executables
  * Downgrade info to debug message when loading systems
  * Show startup time in seconds if python3-psutil is installed
  * Use newly introduce per item serializer on parent/profile addings
  * Remove check_for_duplicate_netinfo parameter checking, this is done in interface setter now
  * Introduce new serialize_one_item function
  * Exclude ourselves from duplicate checks for ip/mac/dns duplicates
  * mkgrub: Improve bootloader building process
  * mkgrub: Apply opinionated formatting
  * Fix defaults and path to the ipxe files
  * Version bump to V3.3.1
  * Remove not existent check for disabled spacewalk registration
  * Security: Flag gate for modify_setting in XMLRPC
  * Safeguard XMLRPC against rce
  * Ease up condition checking and do not add interfaces to dhcp6 without ipv6 address
  * MAC address should already be properly formatted
  * Write message that initrd has successfully been loaded
  * Set default menu if netboot is enabled
  * Use the grub formatted tftp URL in for loading kernel/initrd remotely</changelog>
  <changelog author="alexander.graul@suse.com" date="1645185600">- This update contains fixes for CVE-2021-45082 and 2021-45083
- Update to version 3.3.1.0+git.f5b0599a:
  * Fix spec error introduced with CVE fix
  * Security: Fix incomplete template sanitization
  * Security: Restrict config file accessibility
  * Docker: CentOS to Rocky Linux move for Compose
  * Remove old Cobbler Web leftovers
  * Utils: Check if service is running before stopping it
  * CI: Remove test report parsing and publishing
  * System-Tests: Remove broken Test report parser
  * Use distro_build_configs.sh for fixing bind path</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1647000000">- This update fixes CVE-2022-0860 (bsc#1197027)
- Version 3.3.0 fixed jsc#SUMA-112
- Update to version 3.3.2
  * New:
  * cobbler sync doesn't have to be executed no more after enable_ipxe was flipped
  * Auth: Support for Global Secure Catalog via LDAP provider
  * Changes:
  * Reposync now deletes old metadata to prevent metadata merge conflicts
  * The automigration of the settings is now not enabled per default.
  * We removed ppc from RedHat EL 7 as it is not supported
  * Bugfixes:
  * Network interface is not subscriptable errors were fixed
  * The stacktraces related to the package and file pre &amp; post triggers should no longer appear
  * You should be able to add multiple initrds if needed again
  * Debian: Fix regex for SHIM_FILE which now provides a working reasonable default</changelog>
  <changelog author="Stefan Bluhm &lt;stefan.bluhm@clacee.eu&gt;" date="1648728000">- Added workaround to build Cobbler 3.3.2 on AlmaLinux.</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1654257600">- Update to version 3.3.3
  * New:
  * Uyuni Proxies can now be set with the schema validation.
  * Cobbler should now build on AlmaLinux.
  * The initrd is not required anymore as it is an optional file.
  * XML-RPC: Added dump_vars endpoint. This is intended to replace get_blended_data as of 3.4.0.
  * XML-RPC: Added get_item_resolved_value &amp; set_item_resolved_value endpoints.
  * Breaking Changes:
  * The field virt_file_size is now a float and the related settings as well.
  * Changes:
  * The error messages for duplicated objects now contains the name of the duplicated object.
  * Bugfixes:
  * Dictionaries had the wrong value set for &lt;&lt;inherit&gt;&gt;.
  * There were some cases in which the autoinstallation manager was handed the wrong object and then crashed.
  * The inheritance of the owners field was fixed.
  * Serial Console options should not contain bogous -1 value anymore.
  * HTTP API should not throw permission errors anymore.
  * During build the log was not visible due to a custom logger without output.
  * cobbler mkloaders now also copies dependencies of menu.c32.
  * We now generate the grub configuration for the architectures correct again.
  * virt_file_size now is a float at all times.
  * Cobbler should restart successfully now if you have attached an image to a system.
  * If you have a system named default the bootloader was not removed properly before.
  * cobbler buildiso: The isolinux.cfg was not properly formatted.
  * There were unharmful templating errors in the log related to redhat_management_type. The parts depending on this were removed.
  * The DNS managers were non-functional before because of a not existing function call.
  * cobbler buildiso failed with --tmpdirs that don't end in buildiso.
  * cobbler buildiso had outdated docs and help messages for some parameters.
  * cobbler import: It was impossible to import Rocky Linux 8.5 successfully.
  * Cobbler created duplicated settings files before.
  * cobbler sync was broken by refactoring to shell=False before.
- Removed:
  * cobbler332alma.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1658404800">- Fix issue that a custom kernel with the extension ".kernel" is not
  accepted by "cobbler distro add"
- Fix issue with "get_item_resolved_value" that prevented it from
  returning in cases where a complex object would have been returned
- Fix issue where the logs would have been spammed with "grab_tree"
  messages that are meant for debugging
- Added:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1684324800">- Fix package building with Sphinx &gt;= 7.0.0
- Switch packaging from patch based to Git tree based development
- All patches that are being removed in this revision are contained in
  the new Git tree.
- Do generate boot menus even if no profiles or systems - only local boot
- Avoid crashing running buildiso in certain conditions.
- Fix settings migration schema to work while upgrading on existing running
  Uyuni and SUSE Manager servers running with old Cobbler settings (bsc#1203478)
- Consider case of "next_server" being a hostname during migration
  of Cobbler collections.
- Fix problem with "proxy_url_ext" setting being None type.
- Update v2 to v3 migration script to allow migration of collections
  that contains settings from Cobbler 2. (bsc#1203478)
- Fix problem for the migration of "autoinstall" collection attribute.
- Fix failing Cobbler tests after upgrading to 3.3.3.
- Fix regression: allow empty string as interface_type value (bsc#1203478)
- Avoid possible override of existing values during migration
  of collections to 3.0.0 (bsc#1206160)
- Add new "cobbler-tests-containers" subpackage which contains setup and
  configuration files to run Cobbler tests in containers.
- Add missing code for previous patch file around boot_loaders migration.
- Improve Cobbler performance with item cache and threadpool (bsc#1205489)
- Skip collections that are inconsistent instead of crashing (bsc#1205749)
- Items: Fix creation of "default" NetworkInterface (bsc#1206520)
- S390X systems require their kernel options to have a linebreak at
  79 characters (bsc#1207595)
- settings-migration-v1-to-v2.sh will now handle paths with whitespace
  correct
- Fix renaming Cobbler items (bsc#1204900, bsc#1209149)
- Fix cobbler buildiso so that the artifact can be booted by EFI firmware.
  (bsc#1206060)
- Add input_string_*, input_boolean, input_int functiont to public API
- Removed:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1721131200">- Update to 3.3.6
  * Upstream all openSUSE specific patches that were maintained in Git
  * Fix rename of items that had uppercase letters
  * Skip inconsistent collections instead of crashing the daemon
- Update to 3.3.5
  * Added collection indicies for UUID's, MAC's, IP addresses and hostnames
    bsc#1219933
  * Re-added to_dict() caching
  * Added lazy loading for the daemon (off by default)
- Update to 3.3.4
  * Added cobbler-tests-containers subpackage
  * Updated the distro_signatures.json database
  * The default name for grub2-efi changed to grubx64.efi to match
    the DHCP template</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1732104000">- Update to 3.3.7
  * Security: Fix issue that allowed anyone to connect to the API
    as admin (CVE-2024-47533, bsc#1231332)
  * bind - Fix bug that prevents cname entries from being
    generated successfully
  * Fix build on RHEL9 based distributions (fence-agents-all split)
  * Fix for Windows systems
  * Docs: Add missing dependencies for source installation
  * Fix issue that prevented systems from being synced when the
    profile was edited</changelog>
</package>
<package pkgid="3047ccd90c9fae36d969f676e5590d7f316af49ef67b5d11a9de9c77619f360f" name="cobbler-tests-containers" arch="noarch">
  <version epoch="0" ver="3.3.6" rel="bp156.2.3.1"/>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1605268800">- Remove redundant '.json' suffix
- Added:
  * remove-redundant-json-suffix.diff</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1610971200">- Fix string replacement for @@xyz@@
- Better performing string replacements
- Added:
  * better-string-replacement-performance.diff
  * fix-string-replacement.diff</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057600">- Update tarball from upstream to remove the .pc quilt folder.</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057601">- Update spec file to satisfy current rpmbuild (&gt;=4.16) and make
  the build on Tumbleweed work again.</changelog>
  <changelog author="trenn@suse.de" date="1613736000">- Update to version 3.2.0+git20210218.8af5f420:
  * revert_strip_none prior adding an object on replicate
  * Remove unused function filter_upgrade_duplicates() in file.py
  * Add filename to exception
  * Add return types in file.py
  * Handle files with double .json ending
  * sync_post_wingen: Include pefile in the import check
  * Tests: Add tests for module_loader and type the module
  * Add adjustments for the source installation
  * close file after open
  * make esx_modules available to template
  * fix bootcfg template path
  Delete patches which were upstreamed and are included in the tarball:
  D    better-string-replacement-performance.diff
  D    cgi_parse_qs_is_deprecated.diff
  D    fix-for-old-str.join-usage.diff
  D    fix-string-replacement.diff
  D    load_module_apache_suse_fix.diff
  D    refactored_auth_module.diff
  D    remove-redundant-json-suffix.diff</changelog>
  <changelog author="trenn@suse.de" date="1613908800">- Update to version 3.2.0+git20210221.644f267c:
  * Address review concerns by @nodeg
  * Add schema checking code and test it
  * Convert integer bools to real bools
  * Docs: Rearrange to alphabetical order &amp; add missing settings
  * Add python-schema to our requirements
  * post_report: Use with syntax to close file in case of an error.
  * Fix linter errors in check.py
  * Remove import cgi
  * Adjust prospector Config to fix doubled issues
  * Fix Codacy linter errors</changelog>
  <changelog author="trenn@suse.de" date="1615896000">- Update to version 3.2.1+git20210315.f7482f6b:
  * API: Add HTTP 200 Return in case we have an OPTIONS request
  * Install everything in scripts/ to get migrate-data-v2-to-v3.py
  * Update issue templates
  * Webinterface: Removal of the Django Version
  * Remove get-loader code
  * Remove internal tftp python server and remove tornado dependencies
  * Increase version of Cobbler to 3.2.1
  * Move legacy field setting
  * Add tests for distro.py and item.py
  * Templates: Move macros back to the template_api and fix snippets
  * Templates: Remove old subject parameter; rename Template to CobblerTemplate
  * Templates: Improve Cheetah template child class (linter &amp; comments)
  * Templates: Improve docs and fix linter errors with sedsec
  * CLI: Add class docstring for the main class
  * Actions - Replicate: Add class docstring
  * Serializer - Mongo: Revert explicit type because of soft req on MongoDB
  * Grub: Add tests and catch some errors
  * Fix several issues in module file.py
  * remove esxi70u1 from signatures and template from spec
  * remove esxi70u1 config and templates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Fixed SPEC file:
  * Re-added missing license header
  * Added missing Source tag for rpmlintrc</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1621339200">- Prevent some race conditions when writting tftpboot files and
  the destination directory is not existing (bsc#1186124)
- Added:
  * prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="trenn@suse.de" date="1630584000">- Update to version v3.2.1.295+git.af118f52:
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * docs: Update and cleanup
  * Adjustments to cobbler-settings validate
  * fix/windows
  * Applied suggestions from @agraul and @vzhestkov
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync
- Set disabled service to localonly
- Remove unused patch
  D    prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1630670400">- Do not export spec file from git, due to bad licence format
- Add rpmlintrc to sources</changelog>
  <changelog author="trenn@suse.de" date="1632052800">- Update to version 3.2.1.336+git.5639a3af:
  * Autoinstall Manager: Fix utils.die calls and removed unused variable
  * Docs: Add the mkgrub command to the CLI
  * Add docstring to new API method
  * Added new keys to the migration module for 3.3.0
  * spec file needs an open source license header to be build in open build service
  * Expose GrubImage Action in api.py and cli.py
  * Add GrubImage action
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * Adjustments to cobbler-settings validate
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync</changelog>
  <changelog author="trenn@suse.de" date="1634212800">- Update to version 3.3.0.50+git.c1d81950:
  * Add support for Windows 11
  * Do not warn users about missing files during removal
  * Collections: Simplify the duplication checks
  * mkloaders: Add checks for required components
  * mkgrub: Rename file and class to mkloaders
  * mkgrub: Use grub subdirectory for storing binary executables
  * Downgrade info to debug message when loading systems
  * Show startup time in seconds if python3-psutil is installed
  * Use newly introduce per item serializer on parent/profile addings
  * Remove check_for_duplicate_netinfo parameter checking, this is done in interface setter now
  * Introduce new serialize_one_item function
  * Exclude ourselves from duplicate checks for ip/mac/dns duplicates
  * mkgrub: Improve bootloader building process
  * mkgrub: Apply opinionated formatting
  * Fix defaults and path to the ipxe files
  * Version bump to V3.3.1
  * Remove not existent check for disabled spacewalk registration
  * Security: Flag gate for modify_setting in XMLRPC
  * Safeguard XMLRPC against rce
  * Ease up condition checking and do not add interfaces to dhcp6 without ipv6 address
  * MAC address should already be properly formatted
  * Write message that initrd has successfully been loaded
  * Set default menu if netboot is enabled
  * Use the grub formatted tftp URL in for loading kernel/initrd remotely</changelog>
  <changelog author="alexander.graul@suse.com" date="1645185600">- This update contains fixes for CVE-2021-45082 and 2021-45083
- Update to version 3.3.1.0+git.f5b0599a:
  * Fix spec error introduced with CVE fix
  * Security: Fix incomplete template sanitization
  * Security: Restrict config file accessibility
  * Docker: CentOS to Rocky Linux move for Compose
  * Remove old Cobbler Web leftovers
  * Utils: Check if service is running before stopping it
  * CI: Remove test report parsing and publishing
  * System-Tests: Remove broken Test report parser
  * Use distro_build_configs.sh for fixing bind path</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1647000000">- This update fixes CVE-2022-0860 (bsc#1197027)
- Version 3.3.0 fixed jsc#SUMA-112
- Update to version 3.3.2
  * New:
  * cobbler sync doesn't have to be executed no more after enable_ipxe was flipped
  * Auth: Support for Global Secure Catalog via LDAP provider
  * Changes:
  * Reposync now deletes old metadata to prevent metadata merge conflicts
  * The automigration of the settings is now not enabled per default.
  * We removed ppc from RedHat EL 7 as it is not supported
  * Bugfixes:
  * Network interface is not subscriptable errors were fixed
  * The stacktraces related to the package and file pre &amp; post triggers should no longer appear
  * You should be able to add multiple initrds if needed again
  * Debian: Fix regex for SHIM_FILE which now provides a working reasonable default</changelog>
  <changelog author="Stefan Bluhm &lt;stefan.bluhm@clacee.eu&gt;" date="1648728000">- Added workaround to build Cobbler 3.3.2 on AlmaLinux.</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1654257600">- Update to version 3.3.3
  * New:
  * Uyuni Proxies can now be set with the schema validation.
  * Cobbler should now build on AlmaLinux.
  * The initrd is not required anymore as it is an optional file.
  * XML-RPC: Added dump_vars endpoint. This is intended to replace get_blended_data as of 3.4.0.
  * XML-RPC: Added get_item_resolved_value &amp; set_item_resolved_value endpoints.
  * Breaking Changes:
  * The field virt_file_size is now a float and the related settings as well.
  * Changes:
  * The error messages for duplicated objects now contains the name of the duplicated object.
  * Bugfixes:
  * Dictionaries had the wrong value set for &lt;&lt;inherit&gt;&gt;.
  * There were some cases in which the autoinstallation manager was handed the wrong object and then crashed.
  * The inheritance of the owners field was fixed.
  * Serial Console options should not contain bogous -1 value anymore.
  * HTTP API should not throw permission errors anymore.
  * During build the log was not visible due to a custom logger without output.
  * cobbler mkloaders now also copies dependencies of menu.c32.
  * We now generate the grub configuration for the architectures correct again.
  * virt_file_size now is a float at all times.
  * Cobbler should restart successfully now if you have attached an image to a system.
  * If you have a system named default the bootloader was not removed properly before.
  * cobbler buildiso: The isolinux.cfg was not properly formatted.
  * There were unharmful templating errors in the log related to redhat_management_type. The parts depending on this were removed.
  * The DNS managers were non-functional before because of a not existing function call.
  * cobbler buildiso failed with --tmpdirs that don't end in buildiso.
  * cobbler buildiso had outdated docs and help messages for some parameters.
  * cobbler import: It was impossible to import Rocky Linux 8.5 successfully.
  * Cobbler created duplicated settings files before.
  * cobbler sync was broken by refactoring to shell=False before.
- Removed:
  * cobbler332alma.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1658404800">- Fix issue that a custom kernel with the extension ".kernel" is not
  accepted by "cobbler distro add"
- Fix issue with "get_item_resolved_value" that prevented it from
  returning in cases where a complex object would have been returned
- Fix issue where the logs would have been spammed with "grab_tree"
  messages that are meant for debugging
- Added:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1684324800">- Fix package building with Sphinx &gt;= 7.0.0
- Switch packaging from patch based to Git tree based development
- All patches that are being removed in this revision are contained in
  the new Git tree.
- Do generate boot menus even if no profiles or systems - only local boot
- Avoid crashing running buildiso in certain conditions.
- Fix settings migration schema to work while upgrading on existing running
  Uyuni and SUSE Manager servers running with old Cobbler settings (bsc#1203478)
- Consider case of "next_server" being a hostname during migration
  of Cobbler collections.
- Fix problem with "proxy_url_ext" setting being None type.
- Update v2 to v3 migration script to allow migration of collections
  that contains settings from Cobbler 2. (bsc#1203478)
- Fix problem for the migration of "autoinstall" collection attribute.
- Fix failing Cobbler tests after upgrading to 3.3.3.
- Fix regression: allow empty string as interface_type value (bsc#1203478)
- Avoid possible override of existing values during migration
  of collections to 3.0.0 (bsc#1206160)
- Add new "cobbler-tests-containers" subpackage which contains setup and
  configuration files to run Cobbler tests in containers.
- Add missing code for previous patch file around boot_loaders migration.
- Improve Cobbler performance with item cache and threadpool (bsc#1205489)
- Skip collections that are inconsistent instead of crashing (bsc#1205749)
- Items: Fix creation of "default" NetworkInterface (bsc#1206520)
- S390X systems require their kernel options to have a linebreak at
  79 characters (bsc#1207595)
- settings-migration-v1-to-v2.sh will now handle paths with whitespace
  correct
- Fix renaming Cobbler items (bsc#1204900, bsc#1209149)
- Fix cobbler buildiso so that the artifact can be booted by EFI firmware.
  (bsc#1206060)
- Add input_string_*, input_boolean, input_int functiont to public API
- Removed:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1721131200">- Update to 3.3.6
  * Upstream all openSUSE specific patches that were maintained in Git
  * Fix rename of items that had uppercase letters
  * Skip inconsistent collections instead of crashing the daemon
- Update to 3.3.5
  * Added collection indicies for UUID's, MAC's, IP addresses and hostnames
    bsc#1219933
  * Re-added to_dict() caching
  * Added lazy loading for the daemon (off by default)
- Update to 3.3.4
  * Added cobbler-tests-containers subpackage
  * Updated the distro_signatures.json database
  * The default name for grub2-efi changed to grubx64.efi to match
    the DHCP template</changelog>
</package>
<package pkgid="e199e741db7c5cdfa5636178edb6ef1843ac5ec483ddf44a02648651ca50eebc" name="cobbler-tests-containers" arch="noarch">
  <version epoch="0" ver="3.3.7" rel="bp156.2.6.1"/>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1610971200">- Fix string replacement for @@xyz@@
- Better performing string replacements
- Added:
  * better-string-replacement-performance.diff
  * fix-string-replacement.diff</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057600">- Update tarball from upstream to remove the .pc quilt folder.</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1611057601">- Update spec file to satisfy current rpmbuild (&gt;=4.16) and make
  the build on Tumbleweed work again.</changelog>
  <changelog author="trenn@suse.de" date="1613736000">- Update to version 3.2.0+git20210218.8af5f420:
  * revert_strip_none prior adding an object on replicate
  * Remove unused function filter_upgrade_duplicates() in file.py
  * Add filename to exception
  * Add return types in file.py
  * Handle files with double .json ending
  * sync_post_wingen: Include pefile in the import check
  * Tests: Add tests for module_loader and type the module
  * Add adjustments for the source installation
  * close file after open
  * make esx_modules available to template
  * fix bootcfg template path
  Delete patches which were upstreamed and are included in the tarball:
  D    better-string-replacement-performance.diff
  D    cgi_parse_qs_is_deprecated.diff
  D    fix-for-old-str.join-usage.diff
  D    fix-string-replacement.diff
  D    load_module_apache_suse_fix.diff
  D    refactored_auth_module.diff
  D    remove-redundant-json-suffix.diff</changelog>
  <changelog author="trenn@suse.de" date="1613908800">- Update to version 3.2.0+git20210221.644f267c:
  * Address review concerns by @nodeg
  * Add schema checking code and test it
  * Convert integer bools to real bools
  * Docs: Rearrange to alphabetical order &amp; add missing settings
  * Add python-schema to our requirements
  * post_report: Use with syntax to close file in case of an error.
  * Fix linter errors in check.py
  * Remove import cgi
  * Adjust prospector Config to fix doubled issues
  * Fix Codacy linter errors</changelog>
  <changelog author="trenn@suse.de" date="1615896000">- Update to version 3.2.1+git20210315.f7482f6b:
  * API: Add HTTP 200 Return in case we have an OPTIONS request
  * Install everything in scripts/ to get migrate-data-v2-to-v3.py
  * Update issue templates
  * Webinterface: Removal of the Django Version
  * Remove get-loader code
  * Remove internal tftp python server and remove tornado dependencies
  * Increase version of Cobbler to 3.2.1
  * Move legacy field setting
  * Add tests for distro.py and item.py
  * Templates: Move macros back to the template_api and fix snippets
  * Templates: Remove old subject parameter; rename Template to CobblerTemplate
  * Templates: Improve Cheetah template child class (linter &amp; comments)
  * Templates: Improve docs and fix linter errors with sedsec
  * CLI: Add class docstring for the main class
  * Actions - Replicate: Add class docstring
  * Serializer - Mongo: Revert explicit type because of soft req on MongoDB
  * Grub: Add tests and catch some errors
  * Fix several issues in module file.py
  * remove esxi70u1 from signatures and template from spec
  * remove esxi70u1 config and templates</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Fixed SPEC file:
  * Re-added missing license header
  * Added missing Source tag for rpmlintrc</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1621339200">- Prevent some race conditions when writting tftpboot files and
  the destination directory is not existing (bsc#1186124)
- Added:
  * prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="trenn@suse.de" date="1630584000">- Update to version v3.2.1.295+git.af118f52:
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * docs: Update and cleanup
  * Adjustments to cobbler-settings validate
  * fix/windows
  * Applied suggestions from @agraul and @vzhestkov
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync
- Set disabled service to localonly
- Remove unused patch
  D    prevent-race-condition-writting-tftpboot-files-bsc1186124.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1630670400">- Do not export spec file from git, due to bad licence format
- Add rpmlintrc to sources</changelog>
  <changelog author="trenn@suse.de" date="1632052800">- Update to version 3.2.1.336+git.5639a3af:
  * Autoinstall Manager: Fix utils.die calls and removed unused variable
  * Docs: Add the mkgrub command to the CLI
  * Add docstring to new API method
  * Added new keys to the migration module for 3.3.0
  * spec file needs an open source license header to be build in open build service
  * Expose GrubImage Action in api.py and cli.py
  * Add GrubImage action
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * Adjustments to cobbler-settings validate
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync</changelog>
  <changelog author="trenn@suse.de" date="1634212800">- Update to version 3.3.0.50+git.c1d81950:
  * Add support for Windows 11
  * Do not warn users about missing files during removal
  * Collections: Simplify the duplication checks
  * mkloaders: Add checks for required components
  * mkgrub: Rename file and class to mkloaders
  * mkgrub: Use grub subdirectory for storing binary executables
  * Downgrade info to debug message when loading systems
  * Show startup time in seconds if python3-psutil is installed
  * Use newly introduce per item serializer on parent/profile addings
  * Remove check_for_duplicate_netinfo parameter checking, this is done in interface setter now
  * Introduce new serialize_one_item function
  * Exclude ourselves from duplicate checks for ip/mac/dns duplicates
  * mkgrub: Improve bootloader building process
  * mkgrub: Apply opinionated formatting
  * Fix defaults and path to the ipxe files
  * Version bump to V3.3.1
  * Remove not existent check for disabled spacewalk registration
  * Security: Flag gate for modify_setting in XMLRPC
  * Safeguard XMLRPC against rce
  * Ease up condition checking and do not add interfaces to dhcp6 without ipv6 address
  * MAC address should already be properly formatted
  * Write message that initrd has successfully been loaded
  * Set default menu if netboot is enabled
  * Use the grub formatted tftp URL in for loading kernel/initrd remotely</changelog>
  <changelog author="alexander.graul@suse.com" date="1645185600">- This update contains fixes for CVE-2021-45082 and 2021-45083
- Update to version 3.3.1.0+git.f5b0599a:
  * Fix spec error introduced with CVE fix
  * Security: Fix incomplete template sanitization
  * Security: Restrict config file accessibility
  * Docker: CentOS to Rocky Linux move for Compose
  * Remove old Cobbler Web leftovers
  * Utils: Check if service is running before stopping it
  * CI: Remove test report parsing and publishing
  * System-Tests: Remove broken Test report parser
  * Use distro_build_configs.sh for fixing bind path</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1647000000">- This update fixes CVE-2022-0860 (bsc#1197027)
- Version 3.3.0 fixed jsc#SUMA-112
- Update to version 3.3.2
  * New:
  * cobbler sync doesn't have to be executed no more after enable_ipxe was flipped
  * Auth: Support for Global Secure Catalog via LDAP provider
  * Changes:
  * Reposync now deletes old metadata to prevent metadata merge conflicts
  * The automigration of the settings is now not enabled per default.
  * We removed ppc from RedHat EL 7 as it is not supported
  * Bugfixes:
  * Network interface is not subscriptable errors were fixed
  * The stacktraces related to the package and file pre &amp; post triggers should no longer appear
  * You should be able to add multiple initrds if needed again
  * Debian: Fix regex for SHIM_FILE which now provides a working reasonable default</changelog>
  <changelog author="Stefan Bluhm &lt;stefan.bluhm@clacee.eu&gt;" date="1648728000">- Added workaround to build Cobbler 3.3.2 on AlmaLinux.</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1654257600">- Update to version 3.3.3
  * New:
  * Uyuni Proxies can now be set with the schema validation.
  * Cobbler should now build on AlmaLinux.
  * The initrd is not required anymore as it is an optional file.
  * XML-RPC: Added dump_vars endpoint. This is intended to replace get_blended_data as of 3.4.0.
  * XML-RPC: Added get_item_resolved_value &amp; set_item_resolved_value endpoints.
  * Breaking Changes:
  * The field virt_file_size is now a float and the related settings as well.
  * Changes:
  * The error messages for duplicated objects now contains the name of the duplicated object.
  * Bugfixes:
  * Dictionaries had the wrong value set for &lt;&lt;inherit&gt;&gt;.
  * There were some cases in which the autoinstallation manager was handed the wrong object and then crashed.
  * The inheritance of the owners field was fixed.
  * Serial Console options should not contain bogous -1 value anymore.
  * HTTP API should not throw permission errors anymore.
  * During build the log was not visible due to a custom logger without output.
  * cobbler mkloaders now also copies dependencies of menu.c32.
  * We now generate the grub configuration for the architectures correct again.
  * virt_file_size now is a float at all times.
  * Cobbler should restart successfully now if you have attached an image to a system.
  * If you have a system named default the bootloader was not removed properly before.
  * cobbler buildiso: The isolinux.cfg was not properly formatted.
  * There were unharmful templating errors in the log related to redhat_management_type. The parts depending on this were removed.
  * The DNS managers were non-functional before because of a not existing function call.
  * cobbler buildiso failed with --tmpdirs that don't end in buildiso.
  * cobbler buildiso had outdated docs and help messages for some parameters.
  * cobbler import: It was impossible to import Rocky Linux 8.5 successfully.
  * Cobbler created duplicated settings files before.
  * cobbler sync was broken by refactoring to shell=False before.
- Removed:
  * cobbler332alma.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1658404800">- Fix issue that a custom kernel with the extension ".kernel" is not
  accepted by "cobbler distro add"
- Fix issue with "get_item_resolved_value" that prevented it from
  returning in cases where a complex object would have been returned
- Fix issue where the logs would have been spammed with "grab_tree"
  messages that are meant for debugging
- Added:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1684324800">- Fix package building with Sphinx &gt;= 7.0.0
- Switch packaging from patch based to Git tree based development
- All patches that are being removed in this revision are contained in
  the new Git tree.
- Do generate boot menus even if no profiles or systems - only local boot
- Avoid crashing running buildiso in certain conditions.
- Fix settings migration schema to work while upgrading on existing running
  Uyuni and SUSE Manager servers running with old Cobbler settings (bsc#1203478)
- Consider case of "next_server" being a hostname during migration
  of Cobbler collections.
- Fix problem with "proxy_url_ext" setting being None type.
- Update v2 to v3 migration script to allow migration of collections
  that contains settings from Cobbler 2. (bsc#1203478)
- Fix problem for the migration of "autoinstall" collection attribute.
- Fix failing Cobbler tests after upgrading to 3.3.3.
- Fix regression: allow empty string as interface_type value (bsc#1203478)
- Avoid possible override of existing values during migration
  of collections to 3.0.0 (bsc#1206160)
- Add new "cobbler-tests-containers" subpackage which contains setup and
  configuration files to run Cobbler tests in containers.
- Add missing code for previous patch file around boot_loaders migration.
- Improve Cobbler performance with item cache and threadpool (bsc#1205489)
- Skip collections that are inconsistent instead of crashing (bsc#1205749)
- Items: Fix creation of "default" NetworkInterface (bsc#1206520)
- S390X systems require their kernel options to have a linebreak at
  79 characters (bsc#1207595)
- settings-migration-v1-to-v2.sh will now handle paths with whitespace
  correct
- Fix renaming Cobbler items (bsc#1204900, bsc#1209149)
- Fix cobbler buildiso so that the artifact can be booted by EFI firmware.
  (bsc#1206060)
- Add input_string_*, input_boolean, input_int functiont to public API
- Removed:
  * backport_complex_xmlrpc_objects_and_logger_spam.patch
  * backport_kernel_regex_error_message.patch</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1721131200">- Update to 3.3.6
  * Upstream all openSUSE specific patches that were maintained in Git
  * Fix rename of items that had uppercase letters
  * Skip inconsistent collections instead of crashing the daemon
- Update to 3.3.5
  * Added collection indicies for UUID's, MAC's, IP addresses and hostnames
    bsc#1219933
  * Re-added to_dict() caching
  * Added lazy loading for the daemon (off by default)
- Update to 3.3.4
  * Added cobbler-tests-containers subpackage
  * Updated the distro_signatures.json database
  * The default name for grub2-efi changed to grubx64.efi to match
    the DHCP template</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1732104000">- Update to 3.3.7
  * Security: Fix issue that allowed anyone to connect to the API
    as admin (CVE-2024-47533, bsc#1231332)
  * bind - Fix bug that prevents cname entries from being
    generated successfully
  * Fix build on RHEL9 based distributions (fence-agents-all split)
  * Fix for Windows systems
  * Docs: Add missing dependencies for source installation
  * Fix issue that prevented systems from being synced when the
    profile was edited</changelog>
</package>
<package pkgid="7c5952e81d918c3904e6466746d4a3092e52630318289a2a9d639efc7e21f3da" name="cockpit" arch="aarch64">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="851e9a8ffdbd6878cd8d5480dd6536f6de007eda150590b0c31b03f2ea1e3200" name="cockpit" arch="ppc64le">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="df248cc85b84ab6a50f20b7572661b51cecfca35e89ad3eb864f6e1ddcf085da" name="cockpit" arch="s390x">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="c45c9916e476e8708852c2bff1aaf358460416b7b88d88f3cdf4494505cb427e" name="cockpit" arch="src">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="c5bca30186ca6ba8c4433f895cdc124d9f5fc2b5879d13693c056c9581f9e274" name="cockpit" arch="x86_64">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="ea13a86dd76ddf4fdf5a0d181cca3bff6e02a4f2478fca3a5c4203723e0080a4" name="cockpit" arch="aarch64">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="2623ec2622c70a8d2369c05f9426f4d94a7e7d3f566f71b45797ec49e14d533c" name="cockpit" arch="ppc64le">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="b519c095c508d722e4fec94d415a516a4329648d68713e0f62bcb83d04070b2e" name="cockpit" arch="s390x">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="371b24dc89ef4a7392ba26435064ff31167da8f78a14e9677ef8fecd27fb03b5" name="cockpit" arch="src">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="f56aa07c5d75c91e149d508c95f9eb57653d724f5a3c775c05be5d10666952bc" name="cockpit" arch="x86_64">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="9ac0eecfdb3fe015a9030195d8d389a75aa7e8745ce55a4672659f88e062dafc" name="cockpit" arch="aarch64">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="db29354d8586e26d2f588b1de55b5f278dd0675eeaa5921d2307a531d18b88da" name="cockpit" arch="ppc64le">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="90189468d1a8b7cc7829dd851c5bde920086d8c66b720442ffb2a93b9a007c49" name="cockpit" arch="s390x">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="99e6c8100ae729d56dd20e7e817b3f39660fbc00dbf45b2083ba661d2d1f2613" name="cockpit" arch="src">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="acf81f1cbef72497324e6864f140ebdd1869b9850ada9277efbbf8432aab4e56" name="cockpit" arch="x86_64">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="704bf73f0b5045429cd44305b006572564ee907e3778f2a216a73631e4033111" name="cockpit-bridge" arch="aarch64">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="428592254bd307ada4c8cef1f35e468a909aa67c6dfca2915b0a7f0f3681a5dc" name="cockpit-bridge" arch="ppc64le">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="28fbd55f63373c8b1a7f0ccc76f850b28b308f094f8f8e79d31df3912f375aca" name="cockpit-bridge" arch="s390x">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="1600e5c30e359e70ecea3d1ffb4133ff51f089007acb1b37b3003abe41fa5e04" name="cockpit-bridge" arch="x86_64">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="79885a03d5e094608f850990f55d444ba611dab3173cd5fde78ada256cad9e91" name="cockpit-bridge" arch="aarch64">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="93e77c37f561ee56321ba6fc5546e1f1eba1e0ff1ea52e96f8b826abda275b96" name="cockpit-bridge" arch="ppc64le">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="a65220caa08bfbb4050a5deeba98beca32ae45191aa449724f5e145be4a3b3a8" name="cockpit-bridge" arch="s390x">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="7e132640fb54e56ac719ccd9d7101233d8ad03d21c20175d9321e89cadb27cb8" name="cockpit-bridge" arch="x86_64">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="fd95478626614e4c6c4a2f26fe82f8b7294a4527d438b39b100229f34c95b509" name="cockpit-bridge" arch="aarch64">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="df253793acf525f359b3c3afedb203fbfee9a55f803aa2ef4db550b8497202ae" name="cockpit-bridge" arch="ppc64le">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="3ed53e76fd97e91b1d8e083a42776c547474dc41da050cae1c0d19a1f2bd7f00" name="cockpit-bridge" arch="s390x">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="f68ba89620e54885c08b62681101d63bc1f9f9e5963ff9a7e4291d31b6566325" name="cockpit-bridge" arch="x86_64">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="b6f0a48dcadebc61285bd70c6f297b447894d07121e9adfab90af31720dc6e84" name="cockpit-devel" arch="aarch64">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="6c0ae9b300d42289ada2bb9c55e58336da4358027c57dea6d33f5102e36789fc" name="cockpit-devel" arch="ppc64le">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="ac19bb747453cf2c578e94a97a60bad6477094a1ea2879f9e9d6d8bf7f97b593" name="cockpit-devel" arch="s390x">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="ab52a2894c778b1af1898db0490ac95ed6d886f83798ffe6cf238a952ea561df" name="cockpit-devel" arch="x86_64">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="457e6d2bd5c9b380e0603ad136d29272245eb14f9612842f33bcd08efa8ccede" name="cockpit-devel" arch="aarch64">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="104f31f4f835f3d71c35042f1d3651bd540121e12df9b6e0ac62f44c851525df" name="cockpit-devel" arch="ppc64le">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="42cd2f93f553ff04b462754983c3792105cbf089ec82570c9db02954b2087046" name="cockpit-devel" arch="s390x">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="07fa5d9a0beab110c7c313018a84a154db546fe26d02deb40a8503bf3f6016ff" name="cockpit-devel" arch="x86_64">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="b3fa24c65c2781af9f9d57ed8561f7e06addbb2ae8efb29350c127647b59c243" name="cockpit-devel" arch="aarch64">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="5f525e137d6065ca2405cae5fa36840ed5be680f91fb1097b41e6ffef9f9b9f7" name="cockpit-devel" arch="ppc64le">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="577fbc3e3b579fc8bdf0c5342aae689c65f20d88c3fcbec1273d74bb43e74aca" name="cockpit-devel" arch="s390x">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="ce5f24f892d19718188c217d2ae2f7ed3493d165f0317bf24f86b75c5a13bddc" name="cockpit-devel" arch="x86_64">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="0744f890291285514814b4c90051cba0d12b0727abcbbe6640d10f176a226e16" name="cockpit-doc" arch="noarch">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="215e589eb22d5013ddf956d46174ffb288a916b761a1ce203ef234f0db344e42" name="cockpit-doc" arch="noarch">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="3c236dddf494301fce4783afcdee2b2d073f2c3b658b2e20043ffeeea22a6530" name="cockpit-doc" arch="noarch">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="54b011d576ca88e53651c98af31d460f662851e2fd5cfa4a9c9d2c6e3d84c047" name="cockpit-kdump" arch="noarch">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="0fcefd244d819e9aa63164e11d1d406cdbbea68879d84fc0a8f05b84ee3f41e3" name="cockpit-kdump" arch="noarch">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="40cc31cda71ae25e811e9ac1f144e399463346d3fe59603d5c0dcb333788512b" name="cockpit-kdump" arch="noarch">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="f094f505d90cbeaf5891983a373c22064d6992977dbef7c0cb1591daa6ef0828" name="cockpit-machines" arch="noarch">
  <version epoch="0" ver="316" rel="bp156.2.2"/>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1643630400">- Remove translate-toolkit which is not available in SLE</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1646913600">- Require virt-install and qemu display drivers needed to start
  new VMs (bsc#1196971)</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1647259200">- Hide links pointing to RHEL docs, hide-docs.patch (bsc#1197003)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1647518400">- Update to 264:
  https://github.com/cockpit-project/cockpit-machines/releases/tag/264</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1652961600">- Add suse-vv-install.patch to display SUSE hint for virt-viewer
  installation (bsc#1199673)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1654862400">- Update to 271.1:
  https://github.com/cockpit-project/cockpit-machines/releases/tag/270.1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1655121600">- Update to 271.2:
  * Fix test/reference setup in release tarball for tests</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1655467200">- load-css-overrides.patch: css overrides for better theming support</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1660132800">- Require qemu USB drivers needed by virt-install (bsc#1202166)</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1663934400">- Require qemu-block-curl for installing over https (bsc#1199672)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1686916800">- Update to 293
  * Add manifest condition for the Python bridge
  * Vsock device support
  * Apply watchdog changes on next boot if hotplug fails
  * Option to use RAW volume during VM creation
  * Redesign VM’s CPU configuration
  * Indicate need for shutdown
  * Delete storage file upon disk detachment
  * Show an alert when virtualization is disabled in BIOS/EFI
  * Create VM based on cloud image and start it later
  * Option to forcefully revert a snapshot
  * Support dark theme
  * Translation updates
  * Stability and performance updates
- 1088.patch: WIP for PF5 changes in cockpit
- hide-docs.patch, load-css-overrides.patch: refreshed
- suse-vv-install.patch: upstreamed, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1691064000">- Update to 295
  * Performance and stability improvements
  * Bug fixes and translation updates
- 1088.patch: upstreamed and removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692619200">- Update to 296:
  * Update to PatternFly 5
- deps.patch: fix esbuild dependency</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 298" date="1694174400">- Update to 298:
  * bug and stability improvements
  * Don't use localhost as default source for PXE installation
- deps.patch: upstreamed, removed</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1702641600">- Depend from a new meta-subpackage (qemu-spice) that the qemu
  package now makes available for everyone that needs all the qemu
  modules necessary for using SPICE (such as, us)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 304" date="1703851200">- Update to 304:
  * Performance and stability improvements
  * Change "Add disk" default behavior
  * Add SSH keys to VM creation dialog
  * Performance and stability improvements</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- Update to 305:
  * Avoid creating duplicate MACs
  * Fix page crash on invalid domain startup times
  * Other small fixes</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1708257600">- Update to 307:
  * Mass SPICE replacement
  * Pre-formatted Block Device storage pool support
- Changes from 306:
  * Machines: Action to Replace SPICE devices
  * Machines: Create external snapshots when supported</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1721044800">- Update to 316:
  * Bug fixes and performance improvements
- Changes from 315:
  * Translation updates and bug fixes
- Changes from 314:
  * Fix translation extraction
  * Translation updates
- Changes from 313:
  * Updates to translations
- Changes from 312:
  * Bug fixes and performance improvements
- Changes from 311:
  * Allow pasting multiple SSH keys at once in Create VM dialog
  * Fix detaching host device for running VMs
- Changes from 310:
  * Bug fixes and performance improvements
- Changes from 309:
  * bug fixes and performance improvements
- Changes from 308:
  * Add TPM when switching to EFI
  * Translation updates
  * Only use external snapshots for disks of type "file"
  * Skip empty media drives for external snapshots
  * Refresh VM after creating/reverting/deleting snapshots
  * Don't list disks in snapshot XML
  * Fix detaching host devices for running VMs</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- update_version.sh: add script for auto-updates
- switch to upstream package-lock.json
- do not run scripts during npm install
- switch to source package instead of precombined upstream release</changelog>
</package>
<package pkgid="6c9ac898ba59ba74d392b4599302b73ec2574fb91ff086f4167a22c962ae838d" name="cockpit-machines" arch="src">
  <version epoch="0" ver="316" rel="bp156.2.2"/>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1643630400">- Remove translate-toolkit which is not available in SLE</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1646913600">- Require virt-install and qemu display drivers needed to start
  new VMs (bsc#1196971)</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1647259200">- Hide links pointing to RHEL docs, hide-docs.patch (bsc#1197003)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1647518400">- Update to 264:
  https://github.com/cockpit-project/cockpit-machines/releases/tag/264</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1652961600">- Add suse-vv-install.patch to display SUSE hint for virt-viewer
  installation (bsc#1199673)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1654862400">- Update to 271.1:
  https://github.com/cockpit-project/cockpit-machines/releases/tag/270.1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1655121600">- Update to 271.2:
  * Fix test/reference setup in release tarball for tests</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1655467200">- load-css-overrides.patch: css overrides for better theming support</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1660132800">- Require qemu USB drivers needed by virt-install (bsc#1202166)</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1663934400">- Require qemu-block-curl for installing over https (bsc#1199672)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1686916800">- Update to 293
  * Add manifest condition for the Python bridge
  * Vsock device support
  * Apply watchdog changes on next boot if hotplug fails
  * Option to use RAW volume during VM creation
  * Redesign VM’s CPU configuration
  * Indicate need for shutdown
  * Delete storage file upon disk detachment
  * Show an alert when virtualization is disabled in BIOS/EFI
  * Create VM based on cloud image and start it later
  * Option to forcefully revert a snapshot
  * Support dark theme
  * Translation updates
  * Stability and performance updates
- 1088.patch: WIP for PF5 changes in cockpit
- hide-docs.patch, load-css-overrides.patch: refreshed
- suse-vv-install.patch: upstreamed, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1691064000">- Update to 295
  * Performance and stability improvements
  * Bug fixes and translation updates
- 1088.patch: upstreamed and removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692619200">- Update to 296:
  * Update to PatternFly 5
- deps.patch: fix esbuild dependency</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 298" date="1694174400">- Update to 298:
  * bug and stability improvements
  * Don't use localhost as default source for PXE installation
- deps.patch: upstreamed, removed</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1702641600">- Depend from a new meta-subpackage (qemu-spice) that the qemu
  package now makes available for everyone that needs all the qemu
  modules necessary for using SPICE (such as, us)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 304" date="1703851200">- Update to 304:
  * Performance and stability improvements
  * Change "Add disk" default behavior
  * Add SSH keys to VM creation dialog
  * Performance and stability improvements</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- Update to 305:
  * Avoid creating duplicate MACs
  * Fix page crash on invalid domain startup times
  * Other small fixes</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1708257600">- Update to 307:
  * Mass SPICE replacement
  * Pre-formatted Block Device storage pool support
- Changes from 306:
  * Machines: Action to Replace SPICE devices
  * Machines: Create external snapshots when supported</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1721044800">- Update to 316:
  * Bug fixes and performance improvements
- Changes from 315:
  * Translation updates and bug fixes
- Changes from 314:
  * Fix translation extraction
  * Translation updates
- Changes from 313:
  * Updates to translations
- Changes from 312:
  * Bug fixes and performance improvements
- Changes from 311:
  * Allow pasting multiple SSH keys at once in Create VM dialog
  * Fix detaching host device for running VMs
- Changes from 310:
  * Bug fixes and performance improvements
- Changes from 309:
  * bug fixes and performance improvements
- Changes from 308:
  * Add TPM when switching to EFI
  * Translation updates
  * Only use external snapshots for disks of type "file"
  * Skip empty media drives for external snapshots
  * Refresh VM after creating/reverting/deleting snapshots
  * Don't list disks in snapshot XML
  * Fix detaching host devices for running VMs</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- update_version.sh: add script for auto-updates
- switch to upstream package-lock.json
- do not run scripts during npm install
- switch to source package instead of precombined upstream release</changelog>
</package>
<package pkgid="d368050f0f44ac4c56dd7638749e860635ae69e629d9d1f083fe1c4821e2f5f1" name="cockpit-networkmanager" arch="noarch">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="91a505ee938915f9741f1c23d8ef80d50aa4275a79a8677cf0b1c875317b971e" name="cockpit-networkmanager" arch="noarch">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="86e2c19a535d1d4ba61412a058662517685838d9755420640eb22c6780df1820" name="cockpit-networkmanager" arch="noarch">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="bf3d1bddb41f43aef1100a662694127710f6aeb85371c0d543d4ff2dafedea53" name="cockpit-packagekit" arch="noarch">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="5bca56186c44ef3c9d8533ed2373358765218b313c5906c27b5c38dd13748040" name="cockpit-packagekit" arch="noarch">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="98e9f853674d8d348f3d33258c320fe71fb8ffbe3ee5089d5f1495a02fd0769b" name="cockpit-packagekit" arch="noarch">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="0e60f83952668f042983fe7157344d9839146caafac9b7c5f5d6d7a7423df064" name="cockpit-pcp" arch="aarch64">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="dade84dbab4c141fce36d5350452772120630cd1202ba364607ea80fd87aed28" name="cockpit-pcp" arch="ppc64le">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="ce4240e6e48de77e8b92f8d4525cdcaf64e766bcc00051b7476541ab0a640498" name="cockpit-pcp" arch="s390x">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="9b8028c6364f3018a0ea1622d9b1201000f991da39d7c238d09be2355f216daf" name="cockpit-pcp" arch="x86_64">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="b8d336a1fde52cbc43309a072ca056ee0c4772f23c6fe1cb9bc699be58daebc4" name="cockpit-pcp" arch="aarch64">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="41dd6c2177c5a6e65e5ba4aa98e5887ca6284e715a30346a576312d5163f04b4" name="cockpit-pcp" arch="ppc64le">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="e0ca3519989a3ca659c57c0b619374c3a293df086989eabdf17ccd1d4112a38e" name="cockpit-pcp" arch="s390x">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="899ec5eb229da978bc6b25e3460ae649933cbfdb08e611b2dd97a826b80ddc34" name="cockpit-pcp" arch="x86_64">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="45ce19b3fb066e690de696fee172401ed4b03670c61c86cd6a10156cc0744b93" name="cockpit-pcp" arch="aarch64">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="3d0215de5ba9c9be005f74a5d957cfec2d2d23379fc256bc4ee43824246d0439" name="cockpit-pcp" arch="ppc64le">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="83eb4491a104b85421e4bcbcf34c141934959c6fa1be6f5c1acd365fbfa1afda" name="cockpit-pcp" arch="s390x">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="7395db1f1f50c1fba83db61b31f12ef6a24803bf488bee90b96718a2f8c8d32d" name="cockpit-pcp" arch="x86_64">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="b67cf773382352481def13a8d6b8bb9981102f9adc7373a702b8a1fcb7e54857" name="cockpit-selinux" arch="noarch">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="ab989a2c3949d95cceabe9c028bc4e8ea3b3982d5edd90f669079ddcc7246ebe" name="cockpit-selinux" arch="noarch">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="d9d885d8ed493f6141bba1d7ace3e2541e6970a10723f42dbce232499dc11eab" name="cockpit-selinux" arch="noarch">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="53aabe96d519b27ec0da8bc13af6b5394b6598f681dd2410ca0bcee300c5a237" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="c49abb84f3e96eadb51b5167e16b110e3758b5b9849bf8b49062b2f9c05d52e3" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="867fa19f0489ac79ce6770db7af1c6f2414693801c743e85f5258ae6b2de58fa" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="d2916db61e6a3fa408c7bacb90e45500a201bb2573587d32465e28353a55d54f" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="64e502934eae32e41191d1343530a2ce80a1b3ea8ef36da8585ea6dc8d7d2401" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="3e47d8473043861d50abfeb6fb40d2df4f8ca037e4c84b1066cb6fde931cd762" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="615c965e5b9f5cb0e55c909b51c0a75eb431810d49d8099c5eb48e196ec922e1" name="cockpit-ws" arch="aarch64">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="fad2e928e59ff8b76ca657fc05224b1d6d5df03d48945233cff33cb01af04048" name="cockpit-ws" arch="ppc64le">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="d81b653c1d9225afa7fcba2f591adcc3832bb986d3018148628d6cfed9b221b1" name="cockpit-ws" arch="s390x">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="b3a5cae4ec1db31e022bff40e4f4bbc4b6b78fd9dc40181ad231a7e27518b19f" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="316" rel="bp156.2.3.1"/>
  <changelog author="Zdenek Kubala &lt;zkubala@suse.cz&gt;" date="1692100800">- set setroubleshoot-server dependency and do not apply
  0002-selinux-temporary-remove-setroubleshoot-section-patch for
  cockpit-selinux when build for SLE Micro 5.5</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1692360000">- new version 298:
  https://cockpit-project.org/blog/cockpit-298.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
</package>
<package pkgid="c1c933a31b825654a12c240a4b58b805f20780412b7c0dca0c825cecf0fe9f47" name="cockpit-ws" arch="aarch64">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="e3070d8150e6351b51bcf5992caecd0724e76e766e6a06ba7cbf05b5b6ef8a1d" name="cockpit-ws" arch="ppc64le">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="5c9ddc7d632cecaed66a1ad2edfaf4e153fa784ca5d65a7f659bc64a644b2d3d" name="cockpit-ws" arch="s390x">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="b877bcddcb73ea09aab15c991c251bc7fc34a4b88eaf0acb86ef34aadd2ab79c" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="320" rel="bp156.2.6.3"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1693483200">- Fix building for SLE15.5 and SLE15.4</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1694174400">- Re-add pwscore dependency for SLE</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 300.1" date="1694174401">- new version 300.1
  https://cockpit-project.org/blog/cockpit-300.html
  https://cockpit-project.org/blog/cockpit-299.html</changelog>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
</package>
<package pkgid="02832d3966f6f5eb566e57975f7a7cbd6f7346dfcdf675da538529ad2704b0e1" name="cockpit-ws" arch="aarch64">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="0a38398bb4903453db9c9a569bf4b2e8a14fa0c3ea7c145f25cedab163e51e10" name="cockpit-ws" arch="ppc64le">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="8e12837fdfb0f2f1ab35d5df66bd795b7dfb8a87520de4c0974fd9a83c3111fa" name="cockpit-ws" arch="s390x">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="12511e0ce38aaccda2c6314a9521546fca59a174578b4be509e151ce824cd4b6" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="321" rel="bp156.2.9.1"/>
  <changelog author="Miika Alikirri &lt;miika.alikirri@suse.com&gt;" date="1695211200">- Port SLE selinux bug fix from SLE Micro 5.5
  * Copied selinux_libdir.patch from SLEM package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 307" date="1703160000">- new version 307:
  https://cockpit-project.org/blog/cockpit-307.html
  https://cockpit-project.org/blog/cockpit-306.html
  https://cockpit-project.org/blog/cockpit-305.html
  https://cockpit-project.org/blog/cockpit-304.html
  https://cockpit-project.org/blog/cockpit-303.html
  https://cockpit-project.org/blog/cockpit-302.html
  https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1705060800">- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
  of original tarball because obs service wants to bundle node_modules
  there too....</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706097600">- hide-docs.patch: hide RHEL docs in shell/manifest.json</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706184000">- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
  generated by cockpit-ws %pre script.</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1706184001">- suse_docs.patch: replace with suse docs and move docs with out eqiv
  to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1706702400">- new version 309:
  * storage redesign
  * initial btrfs support
  https://cockpit-project.org/blog/cockpit-309.html</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1707998400">- suse-microos-branding.patch: fix branding for SLE Micro
  (bsc#1219929)
- don't clobber existing links with empty files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Cathy Hu &lt;cathy.hu@suse.com&gt;" date="1709208000">- Remove SELinux file context for /usr/bin/cockpit-bridge, this
  is already defined in the main selinux-policy package (bsc#1220385).
  Modified selinux_libdir.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1709553600">- cockpit.pam: respect /etc/cockpit/disallowed-users
  This means by default root cannot login with password to cockpit
  (bsc#1216080)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713268800">- Do not require setroubleshoot in cockpit-selinux on Leap.
  It's not there</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1713355200">- new version 315:
  * Networking: Show additional ports for each firewall zone
  * Networking: List Firewall active zones when unprivileged
  * Inline documentation
  * Support for transient virtual machines
  * UEFI for virtual machines
  * Unattended virtual machines installation
  * Localize times
  * Better support for various TLS certificate formats
  * Overview: Add CPU utilization to usage card
  * Dashboard: Support SSH identity unlocking when adding new machines
  * SElinux: Introduce an Ansible automation script
  * Machines: Support “bridge” type network interfaces
  * Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1715860800">- new version 316:
  * cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1718280000">- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)</changelog>
  <changelog author="Alice Brooks &lt;alice.brooks@suse.com&gt;" date="1720008000">- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299</changelog>
  <changelog author="Luna D Dragon &lt;luna.dragon@suse.com&gt;" date="1720008001">- new version 320:
  * pam-ssh-add: Fix insecure killing of session ssh-agent
    (bsc#1226040, CVE-2024-6126)
- changes in older versions:
  * Storage: Btrfs snapshots
  * Podman: Add image pull action
  * Files: Bookmark support
  * webserver: System user changes
  * Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
  0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
  removed, upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1722427200">- new version 321:
  * Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
  updates. updated README.packaging</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1723032000">- Recommend cockpit-packagekit if zypper is installed</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1723032001">- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)</changelog>
</package>
<package pkgid="cdcbbfa966464cada2d92a0eac09b6cc53478585514f22156db171514b94448d" name="coredns" arch="aarch64">
  <version epoch="0" ver="1.11.3" rel="bp156.4.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544529600">- Trim bias and rhetorics from descriptions.
- Use a single %setup statement.</changelog>
  <changelog author="Daniel Orf &lt;dorf@suse.com&gt;" date="1553601600">- Update spec file BuildRequires golang(API) &gt;= 1.11</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559736000">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  make the build dep chain cheaper by using systemd-mini.</changelog>
  <changelog author="Daniel Orf &lt;dorf@suse.com&gt;" date="1562068800">- Update to version 1.3.1:
  * log now allows multiple names to be specified
  * import was added to give it a README.md to make it’s documentation more discoverable
  * kubernetes TTL is also applied to negative responses (NXDOMAIN, etc)
- Changed included from version 1.3.0:
  * EDNS0 handling in the server and make it compliant with https://dnsflagday.net/
  * k8s_external a new plugin that allows external zones to point to Kubernetes in-cluster services.
  * rewrite fixes a bug where a rule would eat the first character of a name
  * log now supported the metadata labels. It also fixes a bug in the formatting of a plugin logging a info/failure/warning
  * forward removes the dynamic read timeout and uses a fixed value now.
  * kubernetes now checks if a zone transfer is allowed. Also allow a TTL of 0 to avoid caching in the cache plugin.</changelog>
  <changelog author="kukuk@suse.de" date="1563796800">- Remove systemd support, not needed on openSUSE Kubic
- Build with pie (security policy)</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1563969600">- Add coredns-extras package to allow use of coredns in a non-containerized
  environment</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1567425600">- Update to version 1.6.3:
  * Spelling corrections and other minor improvements and polish.
  * Two new plugins: clouddns and sign.
- Changed included from version 1.6.1:
  * Fix a panic in the hosts plugin.
  * The reload now detects changes in files imported from the main Corefile.
  * route53 increases the paging size when talking to the AWS API, this
    decreases the chances of getting throttled.
- Changed included from version 1.6.0:
  * The -cpu flag is removed from this version.
  * This release sports changes in the file plugin.
    A speed up in the log plugin and fixes in the cache and hosts plugins.
  * Upcoming deprecation: the kubernetes federation plugin will be moved to
    github.com/coredns/federation. This is likely to happen in CoreDNS 1.7.0.
- Changed included from version 1.5.2:
  * Small bugfixes and a change to Caddy’s import path
    (mholt/caddy -&gt; caddyserver/caddy).
  * Doing a release helps plugins deal with the change better.
- Changed included from version 1.5.1:
  * Various bugfixes, better documentation and cleanups.
  * The -cpu flag is somewhat redundant (cgroups/systemd/GOMAXPROCS are better
    ways to deal with this) and we want to remove it; if you depend on it in
    some way please voice that in this PR otherwise we’ll remove it in the next
    release.
- Changed included from version 1.5.0:
  * Two new plugins in this release: grpc, and ready. And some polish and
    simplifications in the core server code.
  * The use of TIMEOUT and no_reload in file and auto have been fully deprecated.
    As is the proxy plugin.
  * And a update on two important and active bugs:
  - 2593 seems to hone in on Docker and/or the container environment being a
    contributing factor.
  - 2624 is because of TLS session negotiating in the forward plugin.
- Changed included from version 1.4.0:
  * Our first release after we became a graduated project in CNCF.
  * Deprecation notice for the next release:
  - auto will deprecate TIMEOUT and recommends the use of RELOAD (2516).
  - auto and file will deprecate NO_RELOAD and recommends the use of RELOAD
    set to 0 (2536).
  - health will revert back to report process level health without plugin status.
    A new ready plugin will make sure plugins have at least completed their
    startup sequence.
  - The proxy will be moved to an external repository and as such be
    deprecated from the default set of plugin; use the forward as a replacement.
  - The previous announced deprecations have been enacted.
  - The (unused) gRPC watch functionally was removed from the server.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Fix summary of coredns-extras.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)
- fixes CVE-2023-30464
- fixes CVE-2023-28452</changelog>
</package>
<package pkgid="24fff2cda06912347103e0652ffcb03e0c5ba112107a4b2a97431e079190aa1f" name="coredns" arch="i586">
  <version epoch="0" ver="1.11.3" rel="bp156.4.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544529600">- Trim bias and rhetorics from descriptions.
- Use a single %setup statement.</changelog>
  <changelog author="Daniel Orf &lt;dorf@suse.com&gt;" date="1553601600">- Update spec file BuildRequires golang(API) &gt;= 1.11</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559736000">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  make the build dep chain cheaper by using systemd-mini.</changelog>
  <changelog author="Daniel Orf &lt;dorf@suse.com&gt;" date="1562068800">- Update to version 1.3.1:
  * log now allows multiple names to be specified
  * import was added to give it a README.md to make it’s documentation more discoverable
  * kubernetes TTL is also applied to negative responses (NXDOMAIN, etc)
- Changed included from version 1.3.0:
  * EDNS0 handling in the server and make it compliant with https://dnsflagday.net/
  * k8s_external a new plugin that allows external zones to point to Kubernetes in-cluster services.
  * rewrite fixes a bug where a rule would eat the first character of a name
  * log now supported the metadata labels. It also fixes a bug in the formatting of a plugin logging a info/failure/warning
  * forward removes the dynamic read timeout and uses a fixed value now.
  * kubernetes now checks if a zone transfer is allowed. Also allow a TTL of 0 to avoid caching in the cache plugin.</changelog>
  <changelog author="kukuk@suse.de" date="1563796800">- Remove systemd support, not needed on openSUSE Kubic
- Build with pie (security policy)</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1563969600">- Add coredns-extras package to allow use of coredns in a non-containerized
  environment</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1567425600">- Update to version 1.6.3:
  * Spelling corrections and other minor improvements and polish.
  * Two new plugins: clouddns and sign.
- Changed included from version 1.6.1:
  * Fix a panic in the hosts plugin.
  * The reload now detects changes in files imported from the main Corefile.
  * route53 increases the paging size when talking to the AWS API, this
    decreases the chances of getting throttled.
- Changed included from version 1.6.0:
  * The -cpu flag is removed from this version.
  * This release sports changes in the file plugin.
    A speed up in the log plugin and fixes in the cache and hosts plugins.
  * Upcoming deprecation: the kubernetes federation plugin will be moved to
    github.com/coredns/federation. This is likely to happen in CoreDNS 1.7.0.
- Changed included from version 1.5.2:
  * Small bugfixes and a change to Caddy’s import path
    (mholt/caddy -&gt; caddyserver/caddy).
  * Doing a release helps plugins deal with the change better.
- Changed included from version 1.5.1:
  * Various bugfixes, better documentation and cleanups.
  * The -cpu flag is somewhat redundant (cgroups/systemd/GOMAXPROCS are better
    ways to deal with this) and we want to remove it; if you depend on it in
    some way please voice that in this PR otherwise we’ll remove it in the next
    release.
- Changed included from version 1.5.0:
  * Two new plugins in this release: grpc, and ready. And some polish and
    simplifications in the core server code.
  * The use of TIMEOUT and no_reload in file and auto have been fully deprecated.
    As is the proxy plugin.
  * And a update on two important and active bugs:
  - 2593 seems to hone in on Docker and/or the container environment being a
    contributing factor.
  - 2624 is because of TLS session negotiating in the forward plugin.
- Changed included from version 1.4.0:
  * Our first release after we became a graduated project in CNCF.
  * Deprecation notice for the next release:
  - auto will deprecate TIMEOUT and recommends the use of RELOAD (2516).
  - auto and file will deprecate NO_RELOAD and recommends the use of RELOAD
    set to 0 (2536).
  - health will revert back to report process level health without plugin status.
    A new ready plugin will make sure plugins have at least completed their
    startup sequence.
  - The proxy will be moved to an external repository and as such be
    deprecated from the default set of plugin; use the forward as a replacement.
  - The previous announced deprecations have been enacted.
  - The (unused) gRPC watch functionally was removed from the server.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Fix summary of coredns-extras.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)
- fixes CVE-2023-30464
- fixes CVE-2023-28452</changelog>
</package>
<package pkgid="a634f334a1f77f0c20ec15ff150b0a472302542b579781589ab77c5fedeeb2bc" name="coredns" arch="src">
  <version epoch="0" ver="1.11.3" rel="bp156.4.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544529600">- Trim bias and rhetorics from descriptions.
- Use a single %setup statement.</changelog>
  <changelog author="Daniel Orf &lt;dorf@suse.com&gt;" date="1553601600">- Update spec file BuildRequires golang(API) &gt;= 1.11</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559736000">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  make the build dep chain cheaper by using systemd-mini.</changelog>
  <changelog author="Daniel Orf &lt;dorf@suse.com&gt;" date="1562068800">- Update to version 1.3.1:
  * log now allows multiple names to be specified
  * import was added to give it a README.md to make it’s documentation more discoverable
  * kubernetes TTL is also applied to negative responses (NXDOMAIN, etc)
- Changed included from version 1.3.0:
  * EDNS0 handling in the server and make it compliant with https://dnsflagday.net/
  * k8s_external a new plugin that allows external zones to point to Kubernetes in-cluster services.
  * rewrite fixes a bug where a rule would eat the first character of a name
  * log now supported the metadata labels. It also fixes a bug in the formatting of a plugin logging a info/failure/warning
  * forward removes the dynamic read timeout and uses a fixed value now.
  * kubernetes now checks if a zone transfer is allowed. Also allow a TTL of 0 to avoid caching in the cache plugin.</changelog>
  <changelog author="kukuk@suse.de" date="1563796800">- Remove systemd support, not needed on openSUSE Kubic
- Build with pie (security policy)</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1563969600">- Add coredns-extras package to allow use of coredns in a non-containerized
  environment</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1567425600">- Update to version 1.6.3:
  * Spelling corrections and other minor improvements and polish.
  * Two new plugins: clouddns and sign.
- Changed included from version 1.6.1:
  * Fix a panic in the hosts plugin.
  * The reload now detects changes in files imported from the main Corefile.
  * route53 increases the paging size when talking to the AWS API, this
    decreases the chances of getting throttled.
- Changed included from version 1.6.0:
  * The -cpu flag is removed from this version.
  * This release sports changes in the file plugin.
    A speed up in the log plugin and fixes in the cache and hosts plugins.
  * Upcoming deprecation: the kubernetes federation plugin will be moved to
    github.com/coredns/federation. This is likely to happen in CoreDNS 1.7.0.
- Changed included from version 1.5.2:
  * Small bugfixes and a change to Caddy’s import path
    (mholt/caddy -&gt; caddyserver/caddy).
  * Doing a release helps plugins deal with the change better.
- Changed included from version 1.5.1:
  * Various bugfixes, better documentation and cleanups.
  * The -cpu flag is somewhat redundant (cgroups/systemd/GOMAXPROCS are better
    ways to deal with this) and we want to remove it; if you depend on it in
    some way please voice that in this PR otherwise we’ll remove it in the next
    release.
- Changed included from version 1.5.0:
  * Two new plugins in this release: grpc, and ready. And some polish and
    simplifications in the core server code.
  * The use of TIMEOUT and no_reload in file and auto have been fully deprecated.
    As is the proxy plugin.
  * And a update on two important and active bugs:
  - 2593 seems to hone in on Docker and/or the container environment being a
    contributing factor.
  - 2624 is because of TLS session negotiating in the forward plugin.
- Changed included from version 1.4.0:
  * Our first release after we became a graduated project in CNCF.
  * Deprecation notice for the next release:
  - auto will deprecate TIMEOUT and recommends the use of RELOAD (2516).
  - auto and file will deprecate NO_RELOAD and recommends the use of RELOAD
    set to 0 (2536).
  - health will revert back to report process level health without plugin status.
    A new ready plugin will make sure plugins have at least completed their
    startup sequence.
  - The proxy will be moved to an external repository and as such be
    deprecated from the default set of plugin; use the forward as a replacement.
  - The previous announced deprecations have been enacted.
  - The (unused) gRPC watch functionally was removed from the server.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Fix summary of coredns-extras.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)
- fixes CVE-2023-30464
- fixes CVE-2023-28452</changelog>
</package>
<package pkgid="6a18cf0f93b9e6703813976b201732ee253eb2dc0a7410386045e7d0cca72cfc" name="coredns" arch="x86_64">
  <version epoch="0" ver="1.11.3" rel="bp156.4.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544529600">- Trim bias and rhetorics from descriptions.
- Use a single %setup statement.</changelog>
  <changelog author="Daniel Orf &lt;dorf@suse.com&gt;" date="1553601600">- Update spec file BuildRequires golang(API) &gt;= 1.11</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559736000">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  make the build dep chain cheaper by using systemd-mini.</changelog>
  <changelog author="Daniel Orf &lt;dorf@suse.com&gt;" date="1562068800">- Update to version 1.3.1:
  * log now allows multiple names to be specified
  * import was added to give it a README.md to make it’s documentation more discoverable
  * kubernetes TTL is also applied to negative responses (NXDOMAIN, etc)
- Changed included from version 1.3.0:
  * EDNS0 handling in the server and make it compliant with https://dnsflagday.net/
  * k8s_external a new plugin that allows external zones to point to Kubernetes in-cluster services.
  * rewrite fixes a bug where a rule would eat the first character of a name
  * log now supported the metadata labels. It also fixes a bug in the formatting of a plugin logging a info/failure/warning
  * forward removes the dynamic read timeout and uses a fixed value now.
  * kubernetes now checks if a zone transfer is allowed. Also allow a TTL of 0 to avoid caching in the cache plugin.</changelog>
  <changelog author="kukuk@suse.de" date="1563796800">- Remove systemd support, not needed on openSUSE Kubic
- Build with pie (security policy)</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1563969600">- Add coredns-extras package to allow use of coredns in a non-containerized
  environment</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1567425600">- Update to version 1.6.3:
  * Spelling corrections and other minor improvements and polish.
  * Two new plugins: clouddns and sign.
- Changed included from version 1.6.1:
  * Fix a panic in the hosts plugin.
  * The reload now detects changes in files imported from the main Corefile.
  * route53 increases the paging size when talking to the AWS API, this
    decreases the chances of getting throttled.
- Changed included from version 1.6.0:
  * The -cpu flag is removed from this version.
  * This release sports changes in the file plugin.
    A speed up in the log plugin and fixes in the cache and hosts plugins.
  * Upcoming deprecation: the kubernetes federation plugin will be moved to
    github.com/coredns/federation. This is likely to happen in CoreDNS 1.7.0.
- Changed included from version 1.5.2:
  * Small bugfixes and a change to Caddy’s import path
    (mholt/caddy -&gt; caddyserver/caddy).
  * Doing a release helps plugins deal with the change better.
- Changed included from version 1.5.1:
  * Various bugfixes, better documentation and cleanups.
  * The -cpu flag is somewhat redundant (cgroups/systemd/GOMAXPROCS are better
    ways to deal with this) and we want to remove it; if you depend on it in
    some way please voice that in this PR otherwise we’ll remove it in the next
    release.
- Changed included from version 1.5.0:
  * Two new plugins in this release: grpc, and ready. And some polish and
    simplifications in the core server code.
  * The use of TIMEOUT and no_reload in file and auto have been fully deprecated.
    As is the proxy plugin.
  * And a update on two important and active bugs:
  - 2593 seems to hone in on Docker and/or the container environment being a
    contributing factor.
  - 2624 is because of TLS session negotiating in the forward plugin.
- Changed included from version 1.4.0:
  * Our first release after we became a graduated project in CNCF.
  * Deprecation notice for the next release:
  - auto will deprecate TIMEOUT and recommends the use of RELOAD (2516).
  - auto and file will deprecate NO_RELOAD and recommends the use of RELOAD
    set to 0 (2536).
  - health will revert back to report process level health without plugin status.
    A new ready plugin will make sure plugins have at least completed their
    startup sequence.
  - The proxy will be moved to an external repository and as such be
    deprecated from the default set of plugin; use the forward as a replacement.
  - The previous announced deprecations have been enacted.
  - The (unused) gRPC watch functionally was removed from the server.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Fix summary of coredns-extras.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)
- fixes CVE-2023-30464
- fixes CVE-2023-28452</changelog>
</package>
<package pkgid="6410951431c532d6902fabc799c8c12cb1dfd958824757b2a68b3fe4c71e8e33" name="coredns" arch="i586">
  <version epoch="0" ver="1.12.1" rel="bp156.4.6.5"/>
  <changelog author="kukuk@suse.de" date="1563796800">- Remove systemd support, not needed on openSUSE Kubic
- Build with pie (security policy)</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1563969600">- Add coredns-extras package to allow use of coredns in a non-containerized
  environment</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1567425600">- Update to version 1.6.3:
  * Spelling corrections and other minor improvements and polish.
  * Two new plugins: clouddns and sign.
- Changed included from version 1.6.1:
  * Fix a panic in the hosts plugin.
  * The reload now detects changes in files imported from the main Corefile.
  * route53 increases the paging size when talking to the AWS API, this
    decreases the chances of getting throttled.
- Changed included from version 1.6.0:
  * The -cpu flag is removed from this version.
  * This release sports changes in the file plugin.
    A speed up in the log plugin and fixes in the cache and hosts plugins.
  * Upcoming deprecation: the kubernetes federation plugin will be moved to
    github.com/coredns/federation. This is likely to happen in CoreDNS 1.7.0.
- Changed included from version 1.5.2:
  * Small bugfixes and a change to Caddy’s import path
    (mholt/caddy -&gt; caddyserver/caddy).
  * Doing a release helps plugins deal with the change better.
- Changed included from version 1.5.1:
  * Various bugfixes, better documentation and cleanups.
  * The -cpu flag is somewhat redundant (cgroups/systemd/GOMAXPROCS are better
    ways to deal with this) and we want to remove it; if you depend on it in
    some way please voice that in this PR otherwise we’ll remove it in the next
    release.
- Changed included from version 1.5.0:
  * Two new plugins in this release: grpc, and ready. And some polish and
    simplifications in the core server code.
  * The use of TIMEOUT and no_reload in file and auto have been fully deprecated.
    As is the proxy plugin.
  * And a update on two important and active bugs:
  - 2593 seems to hone in on Docker and/or the container environment being a
    contributing factor.
  - 2624 is because of TLS session negotiating in the forward plugin.
- Changed included from version 1.4.0:
  * Our first release after we became a graduated project in CNCF.
  * Deprecation notice for the next release:
  - auto will deprecate TIMEOUT and recommends the use of RELOAD (2516).
  - auto and file will deprecate NO_RELOAD and recommends the use of RELOAD
    set to 0 (2536).
  - health will revert back to report process level health without plugin status.
    A new ready plugin will make sure plugins have at least completed their
    startup sequence.
  - The proxy will be moved to an external repository and as such be
    deprecated from the default set of plugin; use the forward as a replacement.
  - The previous announced deprecations have been enacted.
  - The (unused) gRPC watch functionally was removed from the server.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Fix summary of coredns-extras.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
</package>
<package pkgid="78a3de9323815979aa4140639a4bfa3ba9e6cdd6b85c6bcb6b15be086d4f6b58" name="coredns" arch="src">
  <version epoch="0" ver="1.12.1" rel="bp156.4.6.5"/>
  <changelog author="kukuk@suse.de" date="1563796800">- Remove systemd support, not needed on openSUSE Kubic
- Build with pie (security policy)</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1563969600">- Add coredns-extras package to allow use of coredns in a non-containerized
  environment</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1567425600">- Update to version 1.6.3:
  * Spelling corrections and other minor improvements and polish.
  * Two new plugins: clouddns and sign.
- Changed included from version 1.6.1:
  * Fix a panic in the hosts plugin.
  * The reload now detects changes in files imported from the main Corefile.
  * route53 increases the paging size when talking to the AWS API, this
    decreases the chances of getting throttled.
- Changed included from version 1.6.0:
  * The -cpu flag is removed from this version.
  * This release sports changes in the file plugin.
    A speed up in the log plugin and fixes in the cache and hosts plugins.
  * Upcoming deprecation: the kubernetes federation plugin will be moved to
    github.com/coredns/federation. This is likely to happen in CoreDNS 1.7.0.
- Changed included from version 1.5.2:
  * Small bugfixes and a change to Caddy’s import path
    (mholt/caddy -&gt; caddyserver/caddy).
  * Doing a release helps plugins deal with the change better.
- Changed included from version 1.5.1:
  * Various bugfixes, better documentation and cleanups.
  * The -cpu flag is somewhat redundant (cgroups/systemd/GOMAXPROCS are better
    ways to deal with this) and we want to remove it; if you depend on it in
    some way please voice that in this PR otherwise we’ll remove it in the next
    release.
- Changed included from version 1.5.0:
  * Two new plugins in this release: grpc, and ready. And some polish and
    simplifications in the core server code.
  * The use of TIMEOUT and no_reload in file and auto have been fully deprecated.
    As is the proxy plugin.
  * And a update on two important and active bugs:
  - 2593 seems to hone in on Docker and/or the container environment being a
    contributing factor.
  - 2624 is because of TLS session negotiating in the forward plugin.
- Changed included from version 1.4.0:
  * Our first release after we became a graduated project in CNCF.
  * Deprecation notice for the next release:
  - auto will deprecate TIMEOUT and recommends the use of RELOAD (2516).
  - auto and file will deprecate NO_RELOAD and recommends the use of RELOAD
    set to 0 (2536).
  - health will revert back to report process level health without plugin status.
    A new ready plugin will make sure plugins have at least completed their
    startup sequence.
  - The proxy will be moved to an external repository and as such be
    deprecated from the default set of plugin; use the forward as a replacement.
  - The previous announced deprecations have been enacted.
  - The (unused) gRPC watch functionally was removed from the server.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Fix summary of coredns-extras.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
</package>
<package pkgid="fc9704ec27464cd5ee21aea513df84cac6458e9a198cae5da31bee86fab500b2" name="coredns" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="bp156.4.6.5"/>
  <changelog author="kukuk@suse.de" date="1563796800">- Remove systemd support, not needed on openSUSE Kubic
- Build with pie (security policy)</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1563969600">- Add coredns-extras package to allow use of coredns in a non-containerized
  environment</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1567425600">- Update to version 1.6.3:
  * Spelling corrections and other minor improvements and polish.
  * Two new plugins: clouddns and sign.
- Changed included from version 1.6.1:
  * Fix a panic in the hosts plugin.
  * The reload now detects changes in files imported from the main Corefile.
  * route53 increases the paging size when talking to the AWS API, this
    decreases the chances of getting throttled.
- Changed included from version 1.6.0:
  * The -cpu flag is removed from this version.
  * This release sports changes in the file plugin.
    A speed up in the log plugin and fixes in the cache and hosts plugins.
  * Upcoming deprecation: the kubernetes federation plugin will be moved to
    github.com/coredns/federation. This is likely to happen in CoreDNS 1.7.0.
- Changed included from version 1.5.2:
  * Small bugfixes and a change to Caddy’s import path
    (mholt/caddy -&gt; caddyserver/caddy).
  * Doing a release helps plugins deal with the change better.
- Changed included from version 1.5.1:
  * Various bugfixes, better documentation and cleanups.
  * The -cpu flag is somewhat redundant (cgroups/systemd/GOMAXPROCS are better
    ways to deal with this) and we want to remove it; if you depend on it in
    some way please voice that in this PR otherwise we’ll remove it in the next
    release.
- Changed included from version 1.5.0:
  * Two new plugins in this release: grpc, and ready. And some polish and
    simplifications in the core server code.
  * The use of TIMEOUT and no_reload in file and auto have been fully deprecated.
    As is the proxy plugin.
  * And a update on two important and active bugs:
  - 2593 seems to hone in on Docker and/or the container environment being a
    contributing factor.
  - 2624 is because of TLS session negotiating in the forward plugin.
- Changed included from version 1.4.0:
  * Our first release after we became a graduated project in CNCF.
  * Deprecation notice for the next release:
  - auto will deprecate TIMEOUT and recommends the use of RELOAD (2516).
  - auto and file will deprecate NO_RELOAD and recommends the use of RELOAD
    set to 0 (2536).
  - health will revert back to report process level health without plugin status.
    A new ready plugin will make sure plugins have at least completed their
    startup sequence.
  - The proxy will be moved to an external repository and as such be
    deprecated from the default set of plugin; use the forward as a replacement.
  - The previous announced deprecations have been enacted.
  - The (unused) gRPC watch functionally was removed from the server.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Fix summary of coredns-extras.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
</package>
<package pkgid="850b27934e923aa987a1039d00f877b46ddf709f13cbcf425e4d6e300ea909a3" name="coredns" arch="aarch64">
  <version epoch="0" ver="1.12.4" rel="bp156.4.9.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
</package>
<package pkgid="3df7a137b613e6527350720019663b394994b39873c87a5bda031dcbac240ea6" name="coredns" arch="ppc64le">
  <version epoch="0" ver="1.12.4" rel="bp156.4.9.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
</package>
<package pkgid="7adabd0b6473d399c1c594416d4c9de42acb57f9e6b3e68de3053fb9bca1d96c" name="coredns" arch="s390x">
  <version epoch="0" ver="1.12.4" rel="bp156.4.9.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
</package>
<package pkgid="497ae14481010ba68a9887b5c868168c91d037aabf36bd4108c25965d9c2c837" name="coredns" arch="src">
  <version epoch="0" ver="1.12.4" rel="bp156.4.9.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
</package>
<package pkgid="5e770ea64da77b4c2b6a963cc62d913e22cd5996de065c264c3099f1e37845ae" name="coredns" arch="x86_64">
  <version epoch="0" ver="1.12.4" rel="bp156.4.9.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
</package>
<package pkgid="2596f4a3ff7c9ff4f97c6eed08688972d54a2fd625ad508a0e432fe9118b8097" name="coredns" arch="aarch64">
  <version epoch="0" ver="1.14.0" rel="bp156.4.13.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 bsc#1255345
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
</package>
<package pkgid="f74d58141c69bae6e02577aa22743e4b5d03e06d6a3e446cb33677973ede8c65" name="coredns" arch="ppc64le">
  <version epoch="0" ver="1.14.0" rel="bp156.4.13.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 bsc#1255345
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
</package>
<package pkgid="7890675d990208e48bdece5280279e6a46e8321686a998bbcf1fc158e50f0235" name="coredns" arch="s390x">
  <version epoch="0" ver="1.14.0" rel="bp156.4.13.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 bsc#1255345
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
</package>
<package pkgid="bd017536bff42ea960c28ff1503a3dceb085dbd2b2f2ca001914749c8e4ddc34" name="coredns" arch="src">
  <version epoch="0" ver="1.14.0" rel="bp156.4.13.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 bsc#1255345
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
</package>
<package pkgid="d747b6964130ff18d6c05c4f6d1e98b32bab342bb37cec8514e5d34705128ece" name="coredns" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="bp156.4.13.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 bsc#1255345
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
</package>
<package pkgid="d4bd763b1c3fb8ca5aa54c80c8ea643019435d2e2682d9cdf5bf0c52739f6933" name="coredns-extras" arch="noarch">
  <version epoch="0" ver="1.11.3" rel="bp156.4.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544529600">- Trim bias and rhetorics from descriptions.
- Use a single %setup statement.</changelog>
  <changelog author="Daniel Orf &lt;dorf@suse.com&gt;" date="1553601600">- Update spec file BuildRequires golang(API) &gt;= 1.11</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559736000">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  make the build dep chain cheaper by using systemd-mini.</changelog>
  <changelog author="Daniel Orf &lt;dorf@suse.com&gt;" date="1562068800">- Update to version 1.3.1:
  * log now allows multiple names to be specified
  * import was added to give it a README.md to make it’s documentation more discoverable
  * kubernetes TTL is also applied to negative responses (NXDOMAIN, etc)
- Changed included from version 1.3.0:
  * EDNS0 handling in the server and make it compliant with https://dnsflagday.net/
  * k8s_external a new plugin that allows external zones to point to Kubernetes in-cluster services.
  * rewrite fixes a bug where a rule would eat the first character of a name
  * log now supported the metadata labels. It also fixes a bug in the formatting of a plugin logging a info/failure/warning
  * forward removes the dynamic read timeout and uses a fixed value now.
  * kubernetes now checks if a zone transfer is allowed. Also allow a TTL of 0 to avoid caching in the cache plugin.</changelog>
  <changelog author="kukuk@suse.de" date="1563796800">- Remove systemd support, not needed on openSUSE Kubic
- Build with pie (security policy)</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1563969600">- Add coredns-extras package to allow use of coredns in a non-containerized
  environment</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1567425600">- Update to version 1.6.3:
  * Spelling corrections and other minor improvements and polish.
  * Two new plugins: clouddns and sign.
- Changed included from version 1.6.1:
  * Fix a panic in the hosts plugin.
  * The reload now detects changes in files imported from the main Corefile.
  * route53 increases the paging size when talking to the AWS API, this
    decreases the chances of getting throttled.
- Changed included from version 1.6.0:
  * The -cpu flag is removed from this version.
  * This release sports changes in the file plugin.
    A speed up in the log plugin and fixes in the cache and hosts plugins.
  * Upcoming deprecation: the kubernetes federation plugin will be moved to
    github.com/coredns/federation. This is likely to happen in CoreDNS 1.7.0.
- Changed included from version 1.5.2:
  * Small bugfixes and a change to Caddy’s import path
    (mholt/caddy -&gt; caddyserver/caddy).
  * Doing a release helps plugins deal with the change better.
- Changed included from version 1.5.1:
  * Various bugfixes, better documentation and cleanups.
  * The -cpu flag is somewhat redundant (cgroups/systemd/GOMAXPROCS are better
    ways to deal with this) and we want to remove it; if you depend on it in
    some way please voice that in this PR otherwise we’ll remove it in the next
    release.
- Changed included from version 1.5.0:
  * Two new plugins in this release: grpc, and ready. And some polish and
    simplifications in the core server code.
  * The use of TIMEOUT and no_reload in file and auto have been fully deprecated.
    As is the proxy plugin.
  * And a update on two important and active bugs:
  - 2593 seems to hone in on Docker and/or the container environment being a
    contributing factor.
  - 2624 is because of TLS session negotiating in the forward plugin.
- Changed included from version 1.4.0:
  * Our first release after we became a graduated project in CNCF.
  * Deprecation notice for the next release:
  - auto will deprecate TIMEOUT and recommends the use of RELOAD (2516).
  - auto and file will deprecate NO_RELOAD and recommends the use of RELOAD
    set to 0 (2536).
  - health will revert back to report process level health without plugin status.
    A new ready plugin will make sure plugins have at least completed their
    startup sequence.
  - The proxy will be moved to an external repository and as such be
    deprecated from the default set of plugin; use the forward as a replacement.
  - The previous announced deprecations have been enacted.
  - The (unused) gRPC watch functionally was removed from the server.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Fix summary of coredns-extras.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)
- fixes CVE-2023-30464
- fixes CVE-2023-28452</changelog>
</package>
<package pkgid="23c39aa16e2f982d8ba79632fb36f7ae2933fb937970e557885006a8c157f9fa" name="coredns-extras" arch="noarch">
  <version epoch="0" ver="1.12.1" rel="bp156.4.6.5"/>
  <changelog author="kukuk@suse.de" date="1563796800">- Remove systemd support, not needed on openSUSE Kubic
- Build with pie (security policy)</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1563969600">- Add coredns-extras package to allow use of coredns in a non-containerized
  environment</changelog>
  <changelog author="Marco Vedovati &lt;mvedovati@suse.com&gt;" date="1567425600">- Update to version 1.6.3:
  * Spelling corrections and other minor improvements and polish.
  * Two new plugins: clouddns and sign.
- Changed included from version 1.6.1:
  * Fix a panic in the hosts plugin.
  * The reload now detects changes in files imported from the main Corefile.
  * route53 increases the paging size when talking to the AWS API, this
    decreases the chances of getting throttled.
- Changed included from version 1.6.0:
  * The -cpu flag is removed from this version.
  * This release sports changes in the file plugin.
    A speed up in the log plugin and fixes in the cache and hosts plugins.
  * Upcoming deprecation: the kubernetes federation plugin will be moved to
    github.com/coredns/federation. This is likely to happen in CoreDNS 1.7.0.
- Changed included from version 1.5.2:
  * Small bugfixes and a change to Caddy’s import path
    (mholt/caddy -&gt; caddyserver/caddy).
  * Doing a release helps plugins deal with the change better.
- Changed included from version 1.5.1:
  * Various bugfixes, better documentation and cleanups.
  * The -cpu flag is somewhat redundant (cgroups/systemd/GOMAXPROCS are better
    ways to deal with this) and we want to remove it; if you depend on it in
    some way please voice that in this PR otherwise we’ll remove it in the next
    release.
- Changed included from version 1.5.0:
  * Two new plugins in this release: grpc, and ready. And some polish and
    simplifications in the core server code.
  * The use of TIMEOUT and no_reload in file and auto have been fully deprecated.
    As is the proxy plugin.
  * And a update on two important and active bugs:
  - 2593 seems to hone in on Docker and/or the container environment being a
    contributing factor.
  - 2624 is because of TLS session negotiating in the forward plugin.
- Changed included from version 1.4.0:
  * Our first release after we became a graduated project in CNCF.
  * Deprecation notice for the next release:
  - auto will deprecate TIMEOUT and recommends the use of RELOAD (2516).
  - auto and file will deprecate NO_RELOAD and recommends the use of RELOAD
    set to 0 (2536).
  - health will revert back to report process level health without plugin status.
    A new ready plugin will make sure plugins have at least completed their
    startup sequence.
  - The proxy will be moved to an external repository and as such be
    deprecated from the default set of plugin; use the forward as a replacement.
  - The previous announced deprecations have been enacted.
  - The (unused) gRPC watch functionally was removed from the server.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Fix summary of coredns-extras.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
</package>
<package pkgid="e5937abdcc40c3aa989b3701cd4c409097e104bf2963a9ff331d24a9649bbb22" name="coredns-extras" arch="noarch">
  <version epoch="0" ver="1.12.4" rel="bp156.4.9.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update to version 1.6.2:
  * Required by Kubernetes 1.16
  * Three new plugins: azure, route53 and forward</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
</package>
<package pkgid="f3126790c9fc0b9d6701eb9ea70aefbdb0547a40476f0f7be342454d17b7d736" name="coredns-extras" arch="noarch">
  <version epoch="0" ver="1.14.0" rel="bp156.4.13.1"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1576497600">- Update to version 1.6.5:
  * Required by Kubernetes 1.17
  * Three new plugins: kubernetes, foreward, file</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 bsc#1255345
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
</package>
<package pkgid="6720a09a9d84302e8ee598fa02e8cf88f21d9e10ebeee5f1bffe4dcfbe7ea85a" name="cpp-httplib" arch="src">
  <version epoch="0" ver="0.12.5" rel="bp156.2.3.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
</package>
<package pkgid="7c07b67ac5fd3860458e9c99d02955a5ac2dd10a5bdc5bb4d0bb0317ffbd2150" name="cpp-httplib" arch="src">
  <version epoch="0" ver="0.12.5" rel="bp156.2.6.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- security update
- added patches
  CVE-2025-46728 [bsc#1242777], Unbounded Memory Allocation in Chunked/No-Length Requests
  + cpp-httplib-CVE-2025-46728.patch</changelog>
</package>
<package pkgid="a058bd54a40884a3763d40726dfb8d039e8174436dd2ffeb8949f538de8cf489" name="cpp-httplib" arch="src">
  <version epoch="0" ver="0.20.1" rel="bp156.2.9.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1706875200">- Update to version 0.15.1:
  * Malicious requests for many overlapping byte ranges of large files risk OOM #1766
  * Add missing #include for strcasecmp #1744
  * ThreadPool: optional limit for jobs queue (#1741)
  * Fix #1628 (OpenSSL 1.1.1 End of Life on September 11, 2023)
  * Fix Windows std::max macro problem #1750
  * Fix select() return code for fd &gt;= 1024 (#1757)
  * Add a getter for a bearer token from a request (#1755)
  * Support move semantics for Response::set_content() (#1764)
  * Treat paths with embedded NUL bytes as invalid (#1765)
  * Fix usage of rand() is not seeded and depends on seeding by parent program #1747
  * Fix check request range and fix response Content-Range. #1694
  * Fix: Query parameter including query delimiter ('?') not being parsed properly (#1713)
  * Fix #1736
  * Fix #1665
  * Change some of status messages based on RFC 9110 (#1740)
  * Add StatusCode enum (#1739)
  * Fix #1738
  * Fix #1685
  * Fix #1724
  * Add optional user defined header writer #1683
  * Fix CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR (#1634)
  * Avoid a -Warray-bounds false positive in GCC 13. (#1639)
  * Fix #1638
  * Removed unnecessary CRLF at the end of multipart ranges data
  * Fix #1559
  * Use memory mapped file for static file server (#1632)
  * Fix #1519
  * Fix #1590 (#1630)
  * Fix #1619
  * Fix #1624
  * Compiler freezes on Debian 10 (buster) with GCC 8.3.0 #1613
  * Don't overwrite the last redirected location (#1589) # This is a breaking change.
  * Fix #1607
  * Add named path parameters parsing (Implements #1587) (#1608)
  * Result: allow default constructor (#1609)
  * Add support for zOS (#1581)
  * Provide a CMake option to disable C++ exceptions (#1580)
  * Load in-memory CA certificates (#1579)
- Requires OpenSSL version to 3.0 or later</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1727006400">- update to 0.18.0:
  * httplib.h: support LibreSSL
  * Nice way to call "handle_file_request" from user code
  * How to diagnose the infamous read error 4
  * Made default server and client read/write timeout settings separately
  * Slow performance caused by get_remote_ip_and_port and get_local_ip_and_port
  * Provides a way to ignore host verify
  * add API support for verify certificate manually
- update to 0.17.3:
  * Accessing Directory
  * ‘constexpr’ error
  * Only match path params that span full path segment
  * Fix KeepAliveTest.SSLClientReconnectionPost problem
- update to 0.17.2:
  * Fix incorrect handling of Expect: 100-continue
  * Peformance improvement by removing tolower function call
- update to 0.17.1:
  * Header parser incorrectly accepts NUL and CR within header values
  * Fix problem with Abstract Namespace Unix Domain
  * Fix SIGINT problem in Docker image
- update to 0.17.0:
  * Changed CPPHTTPLIB_KEEPALIVE_MAX_COUNT to 100
  * Add Dockerfile for static file server
  * Breaking Change!: get_header_ methods on Request and Response now take…
  * Add sleep in handle_EINTR
  * Added set_ipv6_v6only method
  * impossible to shut down the server safely
  * Performance: reserve body to avoid frequent reallocations and copies
- update to 0.16.3:
  * Fixed set_connection_timeout() unexpected results
  * Fix KeepAliveTest.SSLClientReconnectionPost
- update to 0.16.2:
  * threadsafe CLOEXEC on platforms that support it
  * BoringSSL compatibility fixes
- update to 0.16.1:
  * detail::is_socket_alive() is not work for https connection
  * avoid memory leaks if linked with static openssl libs
  * Allow hex for ipv6 literal addr in redirect
  * Fix build on Windows with no WINAPI_PARTITION_APP support
  * test: fix GetRangeWithMaxLongLength on 32 bit machines
  * Require a minimum of TLS 1.2
- update to 0.16.0:
  * Use final keyword for devirtualization
  * FindBrotli cleanup &amp; fixes
  * client can't open the encrypted private key
  * build(meson): generate new test PEMs
  * Fix range parser when parsing too many ranges
  * fix: increase default receive buffer to 16kb
  * Removed excess usage of std::move
  * Merge branch 'HerrCai0907-fix'
  * Highlight notes using markdown features
  * Added progress to POST, PUT, PATCH and DELETE requests
  * Tweak CI &amp; fix macOS prefix
  * New function SSLServer::update_certs. Allows to update certificates while server is running
  * Change library name to cpp-httplib
- update to 0.15.3:
  * Breaking change in handling requests with Range in v0.15.1 and v0.15.2
- update to 0.15.2:
  * Severe directory traversal vulnerability (dotdotslash)
- switch to cmake build system</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1727438400">- Small specfile refactoring</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730289600">- Update to 0.18.1:
  * SSLClientServerTest.* tests fail with OpenSSL 3.2.1 (#1798)
  * Feat: add CPack support (#1950)
  * Keep alive is slowing down shutdown (#1959)
  * Allow empty header values (#1965)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1737374400">- Update to 0.18.3:
  * Bug fixes:
  - Regression: Client keep-alive subsequent requests very slow #1997
  - 304 Not Modified response stalls until timeout #1998
- Update to 0.18.2:
  * Bug fixes:
  - Fix the problem that CreateFile2 in mmap::open fails to... #1973
  - Default Accept-Encoding header for the client #1975
  - SSLClientReconnection fails on Windows #1980
  - delay in keep_alive due to sleep #1969
  - missing query pararm in httplib::Client::send #1985</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- version update to 0.18.6
  * Resolve #2033
  * Port/Address re-use #2011
  * Invalid Content-Length values should be rejected #2014
  * Feature request: ability to check if the connection is still alive #2017
  * Changed to use non-blocking socket in is_ssl_peer_could_be_closed (258992a)
  * Treat out-of-range last_pos as the end of the content #2009
  * fix:set_file_content with range request return 416. #2010
  * Fix HTTP Response Splitting Vulnerability (9c36aae)
- added patches
  fix https://github.com/yhirose/cpp-httplib/issues/2042
  + cpp-httplib-test-issue2004-online.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- version update to 0.20.1
  0.20.1 (CVE-2025-46728 [bsc#1242777])
  * Add AF_UNIX support on windows #2115
  * Support zstd also via pkg-config #2121
  * Fix #2113
  * Fix "Unbounded Memory Allocation in Chunked/No-Length Requests"
  0.20.0
  * server_certificate_verifier extended to reuse built-in verifier #2064
  * Assertion failed when destroying httplib::Client
  * #2068
  * Spaces incorrectly allowed in header field names #2096
  * build(meson): copy MountTest.MultibytesPathName files #2098
  * Remove SSLInit #2102
  * Add zstd support #2088
  * Question the behavior of method read_content_without_length #2109
  * Crash when calling std::exit while server running or client requests in flight #2097
  0.19.0
  * Global timeout feature (same as "--max-time" curl option) #2034
  * Fix check for URI length to prevent incorrect HTTP 414 errors
  0.18.7
  * Potential memory corruption in stream_line_reader #2028
- deleted patches
  - cpp-httplib-test-issue2004-online.patch (upstreamed)</changelog>
  <changelog author="Marius Grossu &lt;marius.grossu@suse.com&gt;" date="1762344000">- Fix CVE-2025-53629, header can allocate memory arbitrarily in the server, potentially leading to its exhaustion
  (CVE-2025-53628, bsc#1246471)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-53628, HTTP header smuggling due to insecure trailers merge
  (CVE-2025-53628, bsc#1246468)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-52887, number of HTTP header fields not limited, which can lead to potential exhaustion of system memory
  (CVE-2025-52887, bsc#1245414)
  * CVE-2025-52887.patch</changelog>
</package>
<package pkgid="e878a27f80514ebbfa0382bf87c528de882e026a860be2b873b319555b15991a" name="cpp-httplib-devel" arch="aarch64">
  <version epoch="0" ver="0.12.5" rel="bp156.2.3.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
</package>
<package pkgid="f2d79ec2d7deab3e4059d5cc9dfe4e42d4f9c4b7a15d02c8f5965f35634cd97d" name="cpp-httplib-devel" arch="i586">
  <version epoch="0" ver="0.12.5" rel="bp156.2.3.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
</package>
<package pkgid="52842d6a29efcc1d0469972f1860a5548650caf9dcf2f6ffe9b104b0fca70eb7" name="cpp-httplib-devel" arch="ppc64le">
  <version epoch="0" ver="0.12.5" rel="bp156.2.3.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
</package>
<package pkgid="e14817aa6b58d225797b2e4cbff5ba627bc8119c2e2f601e95347243fd6653e7" name="cpp-httplib-devel" arch="s390x">
  <version epoch="0" ver="0.12.5" rel="bp156.2.3.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
</package>
<package pkgid="c9a84005c923714b77013774745be0cfc06ac6790611734571f5193d799410aa" name="cpp-httplib-devel" arch="x86_64">
  <version epoch="0" ver="0.12.5" rel="bp156.2.3.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
</package>
<package pkgid="af95e3fa4aeaf0fd56e6c4805504a65487169e9a99504cb4cb1ede47bf33de0b" name="cpp-httplib-devel" arch="aarch64">
  <version epoch="0" ver="0.12.5" rel="bp156.2.6.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- security update
- added patches
  CVE-2025-46728 [bsc#1242777], Unbounded Memory Allocation in Chunked/No-Length Requests
  + cpp-httplib-CVE-2025-46728.patch</changelog>
</package>
<package pkgid="baa5eb884611f111ce448cece3306778d6be2348bc565bc88d5e29a36d05cb8c" name="cpp-httplib-devel" arch="i586">
  <version epoch="0" ver="0.12.5" rel="bp156.2.6.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- security update
- added patches
  CVE-2025-46728 [bsc#1242777], Unbounded Memory Allocation in Chunked/No-Length Requests
  + cpp-httplib-CVE-2025-46728.patch</changelog>
</package>
<package pkgid="b2e5a6a5c0def79b97f09a2412c6aa95d6b3384e4b8db77cee5503716305c40c" name="cpp-httplib-devel" arch="ppc64le">
  <version epoch="0" ver="0.12.5" rel="bp156.2.6.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- security update
- added patches
  CVE-2025-46728 [bsc#1242777], Unbounded Memory Allocation in Chunked/No-Length Requests
  + cpp-httplib-CVE-2025-46728.patch</changelog>
</package>
<package pkgid="bc3bdcc8caef174888aaa116d5745d47ff542a42ebb9e103a72459ba7248f273" name="cpp-httplib-devel" arch="s390x">
  <version epoch="0" ver="0.12.5" rel="bp156.2.6.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- security update
- added patches
  CVE-2025-46728 [bsc#1242777], Unbounded Memory Allocation in Chunked/No-Length Requests
  + cpp-httplib-CVE-2025-46728.patch</changelog>
</package>
<package pkgid="b674f29e887cd9a89f0ab19d9bf18ae7c42b9f76c7e4be39a616b2e4202875d6" name="cpp-httplib-devel" arch="x86_64">
  <version epoch="0" ver="0.12.5" rel="bp156.2.6.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- security update
- added patches
  CVE-2025-46728 [bsc#1242777], Unbounded Memory Allocation in Chunked/No-Length Requests
  + cpp-httplib-CVE-2025-46728.patch</changelog>
</package>
<package pkgid="076c37d80b42b79ca0db2556bc97ad346faf04e9465dbf5d7e802130dc17d6ab" name="cpp-httplib-devel" arch="aarch64">
  <version epoch="0" ver="0.20.1" rel="bp156.2.9.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1706875200">- Update to version 0.15.1:
  * Malicious requests for many overlapping byte ranges of large files risk OOM #1766
  * Add missing #include for strcasecmp #1744
  * ThreadPool: optional limit for jobs queue (#1741)
  * Fix #1628 (OpenSSL 1.1.1 End of Life on September 11, 2023)
  * Fix Windows std::max macro problem #1750
  * Fix select() return code for fd &gt;= 1024 (#1757)
  * Add a getter for a bearer token from a request (#1755)
  * Support move semantics for Response::set_content() (#1764)
  * Treat paths with embedded NUL bytes as invalid (#1765)
  * Fix usage of rand() is not seeded and depends on seeding by parent program #1747
  * Fix check request range and fix response Content-Range. #1694
  * Fix: Query parameter including query delimiter ('?') not being parsed properly (#1713)
  * Fix #1736
  * Fix #1665
  * Change some of status messages based on RFC 9110 (#1740)
  * Add StatusCode enum (#1739)
  * Fix #1738
  * Fix #1685
  * Fix #1724
  * Add optional user defined header writer #1683
  * Fix CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR (#1634)
  * Avoid a -Warray-bounds false positive in GCC 13. (#1639)
  * Fix #1638
  * Removed unnecessary CRLF at the end of multipart ranges data
  * Fix #1559
  * Use memory mapped file for static file server (#1632)
  * Fix #1519
  * Fix #1590 (#1630)
  * Fix #1619
  * Fix #1624
  * Compiler freezes on Debian 10 (buster) with GCC 8.3.0 #1613
  * Don't overwrite the last redirected location (#1589) # This is a breaking change.
  * Fix #1607
  * Add named path parameters parsing (Implements #1587) (#1608)
  * Result: allow default constructor (#1609)
  * Add support for zOS (#1581)
  * Provide a CMake option to disable C++ exceptions (#1580)
  * Load in-memory CA certificates (#1579)
- Requires OpenSSL version to 3.0 or later</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1727006400">- update to 0.18.0:
  * httplib.h: support LibreSSL
  * Nice way to call "handle_file_request" from user code
  * How to diagnose the infamous read error 4
  * Made default server and client read/write timeout settings separately
  * Slow performance caused by get_remote_ip_and_port and get_local_ip_and_port
  * Provides a way to ignore host verify
  * add API support for verify certificate manually
- update to 0.17.3:
  * Accessing Directory
  * ‘constexpr’ error
  * Only match path params that span full path segment
  * Fix KeepAliveTest.SSLClientReconnectionPost problem
- update to 0.17.2:
  * Fix incorrect handling of Expect: 100-continue
  * Peformance improvement by removing tolower function call
- update to 0.17.1:
  * Header parser incorrectly accepts NUL and CR within header values
  * Fix problem with Abstract Namespace Unix Domain
  * Fix SIGINT problem in Docker image
- update to 0.17.0:
  * Changed CPPHTTPLIB_KEEPALIVE_MAX_COUNT to 100
  * Add Dockerfile for static file server
  * Breaking Change!: get_header_ methods on Request and Response now take…
  * Add sleep in handle_EINTR
  * Added set_ipv6_v6only method
  * impossible to shut down the server safely
  * Performance: reserve body to avoid frequent reallocations and copies
- update to 0.16.3:
  * Fixed set_connection_timeout() unexpected results
  * Fix KeepAliveTest.SSLClientReconnectionPost
- update to 0.16.2:
  * threadsafe CLOEXEC on platforms that support it
  * BoringSSL compatibility fixes
- update to 0.16.1:
  * detail::is_socket_alive() is not work for https connection
  * avoid memory leaks if linked with static openssl libs
  * Allow hex for ipv6 literal addr in redirect
  * Fix build on Windows with no WINAPI_PARTITION_APP support
  * test: fix GetRangeWithMaxLongLength on 32 bit machines
  * Require a minimum of TLS 1.2
- update to 0.16.0:
  * Use final keyword for devirtualization
  * FindBrotli cleanup &amp; fixes
  * client can't open the encrypted private key
  * build(meson): generate new test PEMs
  * Fix range parser when parsing too many ranges
  * fix: increase default receive buffer to 16kb
  * Removed excess usage of std::move
  * Merge branch 'HerrCai0907-fix'
  * Highlight notes using markdown features
  * Added progress to POST, PUT, PATCH and DELETE requests
  * Tweak CI &amp; fix macOS prefix
  * New function SSLServer::update_certs. Allows to update certificates while server is running
  * Change library name to cpp-httplib
- update to 0.15.3:
  * Breaking change in handling requests with Range in v0.15.1 and v0.15.2
- update to 0.15.2:
  * Severe directory traversal vulnerability (dotdotslash)
- switch to cmake build system</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1727438400">- Small specfile refactoring</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730289600">- Update to 0.18.1:
  * SSLClientServerTest.* tests fail with OpenSSL 3.2.1 (#1798)
  * Feat: add CPack support (#1950)
  * Keep alive is slowing down shutdown (#1959)
  * Allow empty header values (#1965)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1737374400">- Update to 0.18.3:
  * Bug fixes:
  - Regression: Client keep-alive subsequent requests very slow #1997
  - 304 Not Modified response stalls until timeout #1998
- Update to 0.18.2:
  * Bug fixes:
  - Fix the problem that CreateFile2 in mmap::open fails to... #1973
  - Default Accept-Encoding header for the client #1975
  - SSLClientReconnection fails on Windows #1980
  - delay in keep_alive due to sleep #1969
  - missing query pararm in httplib::Client::send #1985</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- version update to 0.18.6
  * Resolve #2033
  * Port/Address re-use #2011
  * Invalid Content-Length values should be rejected #2014
  * Feature request: ability to check if the connection is still alive #2017
  * Changed to use non-blocking socket in is_ssl_peer_could_be_closed (258992a)
  * Treat out-of-range last_pos as the end of the content #2009
  * fix:set_file_content with range request return 416. #2010
  * Fix HTTP Response Splitting Vulnerability (9c36aae)
- added patches
  fix https://github.com/yhirose/cpp-httplib/issues/2042
  + cpp-httplib-test-issue2004-online.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- version update to 0.20.1
  0.20.1 (CVE-2025-46728 [bsc#1242777])
  * Add AF_UNIX support on windows #2115
  * Support zstd also via pkg-config #2121
  * Fix #2113
  * Fix "Unbounded Memory Allocation in Chunked/No-Length Requests"
  0.20.0
  * server_certificate_verifier extended to reuse built-in verifier #2064
  * Assertion failed when destroying httplib::Client
  * #2068
  * Spaces incorrectly allowed in header field names #2096
  * build(meson): copy MountTest.MultibytesPathName files #2098
  * Remove SSLInit #2102
  * Add zstd support #2088
  * Question the behavior of method read_content_without_length #2109
  * Crash when calling std::exit while server running or client requests in flight #2097
  0.19.0
  * Global timeout feature (same as "--max-time" curl option) #2034
  * Fix check for URI length to prevent incorrect HTTP 414 errors
  0.18.7
  * Potential memory corruption in stream_line_reader #2028
- deleted patches
  - cpp-httplib-test-issue2004-online.patch (upstreamed)</changelog>
  <changelog author="Marius Grossu &lt;marius.grossu@suse.com&gt;" date="1762344000">- Fix CVE-2025-53629, header can allocate memory arbitrarily in the server, potentially leading to its exhaustion
  (CVE-2025-53628, bsc#1246471)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-53628, HTTP header smuggling due to insecure trailers merge
  (CVE-2025-53628, bsc#1246468)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-52887, number of HTTP header fields not limited, which can lead to potential exhaustion of system memory
  (CVE-2025-52887, bsc#1245414)
  * CVE-2025-52887.patch</changelog>
</package>
<package pkgid="af143a295161e43d89668f6634e4535c46a9234e7d90aae31c92594e4a20b8e1" name="cpp-httplib-devel" arch="i586">
  <version epoch="0" ver="0.20.1" rel="bp156.2.9.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1706875200">- Update to version 0.15.1:
  * Malicious requests for many overlapping byte ranges of large files risk OOM #1766
  * Add missing #include for strcasecmp #1744
  * ThreadPool: optional limit for jobs queue (#1741)
  * Fix #1628 (OpenSSL 1.1.1 End of Life on September 11, 2023)
  * Fix Windows std::max macro problem #1750
  * Fix select() return code for fd &gt;= 1024 (#1757)
  * Add a getter for a bearer token from a request (#1755)
  * Support move semantics for Response::set_content() (#1764)
  * Treat paths with embedded NUL bytes as invalid (#1765)
  * Fix usage of rand() is not seeded and depends on seeding by parent program #1747
  * Fix check request range and fix response Content-Range. #1694
  * Fix: Query parameter including query delimiter ('?') not being parsed properly (#1713)
  * Fix #1736
  * Fix #1665
  * Change some of status messages based on RFC 9110 (#1740)
  * Add StatusCode enum (#1739)
  * Fix #1738
  * Fix #1685
  * Fix #1724
  * Add optional user defined header writer #1683
  * Fix CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR (#1634)
  * Avoid a -Warray-bounds false positive in GCC 13. (#1639)
  * Fix #1638
  * Removed unnecessary CRLF at the end of multipart ranges data
  * Fix #1559
  * Use memory mapped file for static file server (#1632)
  * Fix #1519
  * Fix #1590 (#1630)
  * Fix #1619
  * Fix #1624
  * Compiler freezes on Debian 10 (buster) with GCC 8.3.0 #1613
  * Don't overwrite the last redirected location (#1589) # This is a breaking change.
  * Fix #1607
  * Add named path parameters parsing (Implements #1587) (#1608)
  * Result: allow default constructor (#1609)
  * Add support for zOS (#1581)
  * Provide a CMake option to disable C++ exceptions (#1580)
  * Load in-memory CA certificates (#1579)
- Requires OpenSSL version to 3.0 or later</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1727006400">- update to 0.18.0:
  * httplib.h: support LibreSSL
  * Nice way to call "handle_file_request" from user code
  * How to diagnose the infamous read error 4
  * Made default server and client read/write timeout settings separately
  * Slow performance caused by get_remote_ip_and_port and get_local_ip_and_port
  * Provides a way to ignore host verify
  * add API support for verify certificate manually
- update to 0.17.3:
  * Accessing Directory
  * ‘constexpr’ error
  * Only match path params that span full path segment
  * Fix KeepAliveTest.SSLClientReconnectionPost problem
- update to 0.17.2:
  * Fix incorrect handling of Expect: 100-continue
  * Peformance improvement by removing tolower function call
- update to 0.17.1:
  * Header parser incorrectly accepts NUL and CR within header values
  * Fix problem with Abstract Namespace Unix Domain
  * Fix SIGINT problem in Docker image
- update to 0.17.0:
  * Changed CPPHTTPLIB_KEEPALIVE_MAX_COUNT to 100
  * Add Dockerfile for static file server
  * Breaking Change!: get_header_ methods on Request and Response now take…
  * Add sleep in handle_EINTR
  * Added set_ipv6_v6only method
  * impossible to shut down the server safely
  * Performance: reserve body to avoid frequent reallocations and copies
- update to 0.16.3:
  * Fixed set_connection_timeout() unexpected results
  * Fix KeepAliveTest.SSLClientReconnectionPost
- update to 0.16.2:
  * threadsafe CLOEXEC on platforms that support it
  * BoringSSL compatibility fixes
- update to 0.16.1:
  * detail::is_socket_alive() is not work for https connection
  * avoid memory leaks if linked with static openssl libs
  * Allow hex for ipv6 literal addr in redirect
  * Fix build on Windows with no WINAPI_PARTITION_APP support
  * test: fix GetRangeWithMaxLongLength on 32 bit machines
  * Require a minimum of TLS 1.2
- update to 0.16.0:
  * Use final keyword for devirtualization
  * FindBrotli cleanup &amp; fixes
  * client can't open the encrypted private key
  * build(meson): generate new test PEMs
  * Fix range parser when parsing too many ranges
  * fix: increase default receive buffer to 16kb
  * Removed excess usage of std::move
  * Merge branch 'HerrCai0907-fix'
  * Highlight notes using markdown features
  * Added progress to POST, PUT, PATCH and DELETE requests
  * Tweak CI &amp; fix macOS prefix
  * New function SSLServer::update_certs. Allows to update certificates while server is running
  * Change library name to cpp-httplib
- update to 0.15.3:
  * Breaking change in handling requests with Range in v0.15.1 and v0.15.2
- update to 0.15.2:
  * Severe directory traversal vulnerability (dotdotslash)
- switch to cmake build system</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1727438400">- Small specfile refactoring</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730289600">- Update to 0.18.1:
  * SSLClientServerTest.* tests fail with OpenSSL 3.2.1 (#1798)
  * Feat: add CPack support (#1950)
  * Keep alive is slowing down shutdown (#1959)
  * Allow empty header values (#1965)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1737374400">- Update to 0.18.3:
  * Bug fixes:
  - Regression: Client keep-alive subsequent requests very slow #1997
  - 304 Not Modified response stalls until timeout #1998
- Update to 0.18.2:
  * Bug fixes:
  - Fix the problem that CreateFile2 in mmap::open fails to... #1973
  - Default Accept-Encoding header for the client #1975
  - SSLClientReconnection fails on Windows #1980
  - delay in keep_alive due to sleep #1969
  - missing query pararm in httplib::Client::send #1985</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- version update to 0.18.6
  * Resolve #2033
  * Port/Address re-use #2011
  * Invalid Content-Length values should be rejected #2014
  * Feature request: ability to check if the connection is still alive #2017
  * Changed to use non-blocking socket in is_ssl_peer_could_be_closed (258992a)
  * Treat out-of-range last_pos as the end of the content #2009
  * fix:set_file_content with range request return 416. #2010
  * Fix HTTP Response Splitting Vulnerability (9c36aae)
- added patches
  fix https://github.com/yhirose/cpp-httplib/issues/2042
  + cpp-httplib-test-issue2004-online.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- version update to 0.20.1
  0.20.1 (CVE-2025-46728 [bsc#1242777])
  * Add AF_UNIX support on windows #2115
  * Support zstd also via pkg-config #2121
  * Fix #2113
  * Fix "Unbounded Memory Allocation in Chunked/No-Length Requests"
  0.20.0
  * server_certificate_verifier extended to reuse built-in verifier #2064
  * Assertion failed when destroying httplib::Client
  * #2068
  * Spaces incorrectly allowed in header field names #2096
  * build(meson): copy MountTest.MultibytesPathName files #2098
  * Remove SSLInit #2102
  * Add zstd support #2088
  * Question the behavior of method read_content_without_length #2109
  * Crash when calling std::exit while server running or client requests in flight #2097
  0.19.0
  * Global timeout feature (same as "--max-time" curl option) #2034
  * Fix check for URI length to prevent incorrect HTTP 414 errors
  0.18.7
  * Potential memory corruption in stream_line_reader #2028
- deleted patches
  - cpp-httplib-test-issue2004-online.patch (upstreamed)</changelog>
  <changelog author="Marius Grossu &lt;marius.grossu@suse.com&gt;" date="1762344000">- Fix CVE-2025-53629, header can allocate memory arbitrarily in the server, potentially leading to its exhaustion
  (CVE-2025-53628, bsc#1246471)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-53628, HTTP header smuggling due to insecure trailers merge
  (CVE-2025-53628, bsc#1246468)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-52887, number of HTTP header fields not limited, which can lead to potential exhaustion of system memory
  (CVE-2025-52887, bsc#1245414)
  * CVE-2025-52887.patch</changelog>
</package>
<package pkgid="2745dea704d9fe0142be86826b3cbbc4d0e9a7e2cc06f4b2185096f9d4a97b19" name="cpp-httplib-devel" arch="ppc64le">
  <version epoch="0" ver="0.20.1" rel="bp156.2.9.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1706875200">- Update to version 0.15.1:
  * Malicious requests for many overlapping byte ranges of large files risk OOM #1766
  * Add missing #include for strcasecmp #1744
  * ThreadPool: optional limit for jobs queue (#1741)
  * Fix #1628 (OpenSSL 1.1.1 End of Life on September 11, 2023)
  * Fix Windows std::max macro problem #1750
  * Fix select() return code for fd &gt;= 1024 (#1757)
  * Add a getter for a bearer token from a request (#1755)
  * Support move semantics for Response::set_content() (#1764)
  * Treat paths with embedded NUL bytes as invalid (#1765)
  * Fix usage of rand() is not seeded and depends on seeding by parent program #1747
  * Fix check request range and fix response Content-Range. #1694
  * Fix: Query parameter including query delimiter ('?') not being parsed properly (#1713)
  * Fix #1736
  * Fix #1665
  * Change some of status messages based on RFC 9110 (#1740)
  * Add StatusCode enum (#1739)
  * Fix #1738
  * Fix #1685
  * Fix #1724
  * Add optional user defined header writer #1683
  * Fix CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR (#1634)
  * Avoid a -Warray-bounds false positive in GCC 13. (#1639)
  * Fix #1638
  * Removed unnecessary CRLF at the end of multipart ranges data
  * Fix #1559
  * Use memory mapped file for static file server (#1632)
  * Fix #1519
  * Fix #1590 (#1630)
  * Fix #1619
  * Fix #1624
  * Compiler freezes on Debian 10 (buster) with GCC 8.3.0 #1613
  * Don't overwrite the last redirected location (#1589) # This is a breaking change.
  * Fix #1607
  * Add named path parameters parsing (Implements #1587) (#1608)
  * Result: allow default constructor (#1609)
  * Add support for zOS (#1581)
  * Provide a CMake option to disable C++ exceptions (#1580)
  * Load in-memory CA certificates (#1579)
- Requires OpenSSL version to 3.0 or later</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1727006400">- update to 0.18.0:
  * httplib.h: support LibreSSL
  * Nice way to call "handle_file_request" from user code
  * How to diagnose the infamous read error 4
  * Made default server and client read/write timeout settings separately
  * Slow performance caused by get_remote_ip_and_port and get_local_ip_and_port
  * Provides a way to ignore host verify
  * add API support for verify certificate manually
- update to 0.17.3:
  * Accessing Directory
  * ‘constexpr’ error
  * Only match path params that span full path segment
  * Fix KeepAliveTest.SSLClientReconnectionPost problem
- update to 0.17.2:
  * Fix incorrect handling of Expect: 100-continue
  * Peformance improvement by removing tolower function call
- update to 0.17.1:
  * Header parser incorrectly accepts NUL and CR within header values
  * Fix problem with Abstract Namespace Unix Domain
  * Fix SIGINT problem in Docker image
- update to 0.17.0:
  * Changed CPPHTTPLIB_KEEPALIVE_MAX_COUNT to 100
  * Add Dockerfile for static file server
  * Breaking Change!: get_header_ methods on Request and Response now take…
  * Add sleep in handle_EINTR
  * Added set_ipv6_v6only method
  * impossible to shut down the server safely
  * Performance: reserve body to avoid frequent reallocations and copies
- update to 0.16.3:
  * Fixed set_connection_timeout() unexpected results
  * Fix KeepAliveTest.SSLClientReconnectionPost
- update to 0.16.2:
  * threadsafe CLOEXEC on platforms that support it
  * BoringSSL compatibility fixes
- update to 0.16.1:
  * detail::is_socket_alive() is not work for https connection
  * avoid memory leaks if linked with static openssl libs
  * Allow hex for ipv6 literal addr in redirect
  * Fix build on Windows with no WINAPI_PARTITION_APP support
  * test: fix GetRangeWithMaxLongLength on 32 bit machines
  * Require a minimum of TLS 1.2
- update to 0.16.0:
  * Use final keyword for devirtualization
  * FindBrotli cleanup &amp; fixes
  * client can't open the encrypted private key
  * build(meson): generate new test PEMs
  * Fix range parser when parsing too many ranges
  * fix: increase default receive buffer to 16kb
  * Removed excess usage of std::move
  * Merge branch 'HerrCai0907-fix'
  * Highlight notes using markdown features
  * Added progress to POST, PUT, PATCH and DELETE requests
  * Tweak CI &amp; fix macOS prefix
  * New function SSLServer::update_certs. Allows to update certificates while server is running
  * Change library name to cpp-httplib
- update to 0.15.3:
  * Breaking change in handling requests with Range in v0.15.1 and v0.15.2
- update to 0.15.2:
  * Severe directory traversal vulnerability (dotdotslash)
- switch to cmake build system</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1727438400">- Small specfile refactoring</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730289600">- Update to 0.18.1:
  * SSLClientServerTest.* tests fail with OpenSSL 3.2.1 (#1798)
  * Feat: add CPack support (#1950)
  * Keep alive is slowing down shutdown (#1959)
  * Allow empty header values (#1965)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1737374400">- Update to 0.18.3:
  * Bug fixes:
  - Regression: Client keep-alive subsequent requests very slow #1997
  - 304 Not Modified response stalls until timeout #1998
- Update to 0.18.2:
  * Bug fixes:
  - Fix the problem that CreateFile2 in mmap::open fails to... #1973
  - Default Accept-Encoding header for the client #1975
  - SSLClientReconnection fails on Windows #1980
  - delay in keep_alive due to sleep #1969
  - missing query pararm in httplib::Client::send #1985</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- version update to 0.18.6
  * Resolve #2033
  * Port/Address re-use #2011
  * Invalid Content-Length values should be rejected #2014
  * Feature request: ability to check if the connection is still alive #2017
  * Changed to use non-blocking socket in is_ssl_peer_could_be_closed (258992a)
  * Treat out-of-range last_pos as the end of the content #2009
  * fix:set_file_content with range request return 416. #2010
  * Fix HTTP Response Splitting Vulnerability (9c36aae)
- added patches
  fix https://github.com/yhirose/cpp-httplib/issues/2042
  + cpp-httplib-test-issue2004-online.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- version update to 0.20.1
  0.20.1 (CVE-2025-46728 [bsc#1242777])
  * Add AF_UNIX support on windows #2115
  * Support zstd also via pkg-config #2121
  * Fix #2113
  * Fix "Unbounded Memory Allocation in Chunked/No-Length Requests"
  0.20.0
  * server_certificate_verifier extended to reuse built-in verifier #2064
  * Assertion failed when destroying httplib::Client
  * #2068
  * Spaces incorrectly allowed in header field names #2096
  * build(meson): copy MountTest.MultibytesPathName files #2098
  * Remove SSLInit #2102
  * Add zstd support #2088
  * Question the behavior of method read_content_without_length #2109
  * Crash when calling std::exit while server running or client requests in flight #2097
  0.19.0
  * Global timeout feature (same as "--max-time" curl option) #2034
  * Fix check for URI length to prevent incorrect HTTP 414 errors
  0.18.7
  * Potential memory corruption in stream_line_reader #2028
- deleted patches
  - cpp-httplib-test-issue2004-online.patch (upstreamed)</changelog>
  <changelog author="Marius Grossu &lt;marius.grossu@suse.com&gt;" date="1762344000">- Fix CVE-2025-53629, header can allocate memory arbitrarily in the server, potentially leading to its exhaustion
  (CVE-2025-53628, bsc#1246471)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-53628, HTTP header smuggling due to insecure trailers merge
  (CVE-2025-53628, bsc#1246468)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-52887, number of HTTP header fields not limited, which can lead to potential exhaustion of system memory
  (CVE-2025-52887, bsc#1245414)
  * CVE-2025-52887.patch</changelog>
</package>
<package pkgid="6c04269e5930807069107975965d860df4e38987c7af95b775025d71dafced9e" name="cpp-httplib-devel" arch="x86_64">
  <version epoch="0" ver="0.20.1" rel="bp156.2.9.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1706875200">- Update to version 0.15.1:
  * Malicious requests for many overlapping byte ranges of large files risk OOM #1766
  * Add missing #include for strcasecmp #1744
  * ThreadPool: optional limit for jobs queue (#1741)
  * Fix #1628 (OpenSSL 1.1.1 End of Life on September 11, 2023)
  * Fix Windows std::max macro problem #1750
  * Fix select() return code for fd &gt;= 1024 (#1757)
  * Add a getter for a bearer token from a request (#1755)
  * Support move semantics for Response::set_content() (#1764)
  * Treat paths with embedded NUL bytes as invalid (#1765)
  * Fix usage of rand() is not seeded and depends on seeding by parent program #1747
  * Fix check request range and fix response Content-Range. #1694
  * Fix: Query parameter including query delimiter ('?') not being parsed properly (#1713)
  * Fix #1736
  * Fix #1665
  * Change some of status messages based on RFC 9110 (#1740)
  * Add StatusCode enum (#1739)
  * Fix #1738
  * Fix #1685
  * Fix #1724
  * Add optional user defined header writer #1683
  * Fix CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR (#1634)
  * Avoid a -Warray-bounds false positive in GCC 13. (#1639)
  * Fix #1638
  * Removed unnecessary CRLF at the end of multipart ranges data
  * Fix #1559
  * Use memory mapped file for static file server (#1632)
  * Fix #1519
  * Fix #1590 (#1630)
  * Fix #1619
  * Fix #1624
  * Compiler freezes on Debian 10 (buster) with GCC 8.3.0 #1613
  * Don't overwrite the last redirected location (#1589) # This is a breaking change.
  * Fix #1607
  * Add named path parameters parsing (Implements #1587) (#1608)
  * Result: allow default constructor (#1609)
  * Add support for zOS (#1581)
  * Provide a CMake option to disable C++ exceptions (#1580)
  * Load in-memory CA certificates (#1579)
- Requires OpenSSL version to 3.0 or later</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1727006400">- update to 0.18.0:
  * httplib.h: support LibreSSL
  * Nice way to call "handle_file_request" from user code
  * How to diagnose the infamous read error 4
  * Made default server and client read/write timeout settings separately
  * Slow performance caused by get_remote_ip_and_port and get_local_ip_and_port
  * Provides a way to ignore host verify
  * add API support for verify certificate manually
- update to 0.17.3:
  * Accessing Directory
  * ‘constexpr’ error
  * Only match path params that span full path segment
  * Fix KeepAliveTest.SSLClientReconnectionPost problem
- update to 0.17.2:
  * Fix incorrect handling of Expect: 100-continue
  * Peformance improvement by removing tolower function call
- update to 0.17.1:
  * Header parser incorrectly accepts NUL and CR within header values
  * Fix problem with Abstract Namespace Unix Domain
  * Fix SIGINT problem in Docker image
- update to 0.17.0:
  * Changed CPPHTTPLIB_KEEPALIVE_MAX_COUNT to 100
  * Add Dockerfile for static file server
  * Breaking Change!: get_header_ methods on Request and Response now take…
  * Add sleep in handle_EINTR
  * Added set_ipv6_v6only method
  * impossible to shut down the server safely
  * Performance: reserve body to avoid frequent reallocations and copies
- update to 0.16.3:
  * Fixed set_connection_timeout() unexpected results
  * Fix KeepAliveTest.SSLClientReconnectionPost
- update to 0.16.2:
  * threadsafe CLOEXEC on platforms that support it
  * BoringSSL compatibility fixes
- update to 0.16.1:
  * detail::is_socket_alive() is not work for https connection
  * avoid memory leaks if linked with static openssl libs
  * Allow hex for ipv6 literal addr in redirect
  * Fix build on Windows with no WINAPI_PARTITION_APP support
  * test: fix GetRangeWithMaxLongLength on 32 bit machines
  * Require a minimum of TLS 1.2
- update to 0.16.0:
  * Use final keyword for devirtualization
  * FindBrotli cleanup &amp; fixes
  * client can't open the encrypted private key
  * build(meson): generate new test PEMs
  * Fix range parser when parsing too many ranges
  * fix: increase default receive buffer to 16kb
  * Removed excess usage of std::move
  * Merge branch 'HerrCai0907-fix'
  * Highlight notes using markdown features
  * Added progress to POST, PUT, PATCH and DELETE requests
  * Tweak CI &amp; fix macOS prefix
  * New function SSLServer::update_certs. Allows to update certificates while server is running
  * Change library name to cpp-httplib
- update to 0.15.3:
  * Breaking change in handling requests with Range in v0.15.1 and v0.15.2
- update to 0.15.2:
  * Severe directory traversal vulnerability (dotdotslash)
- switch to cmake build system</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1727438400">- Small specfile refactoring</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730289600">- Update to 0.18.1:
  * SSLClientServerTest.* tests fail with OpenSSL 3.2.1 (#1798)
  * Feat: add CPack support (#1950)
  * Keep alive is slowing down shutdown (#1959)
  * Allow empty header values (#1965)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1737374400">- Update to 0.18.3:
  * Bug fixes:
  - Regression: Client keep-alive subsequent requests very slow #1997
  - 304 Not Modified response stalls until timeout #1998
- Update to 0.18.2:
  * Bug fixes:
  - Fix the problem that CreateFile2 in mmap::open fails to... #1973
  - Default Accept-Encoding header for the client #1975
  - SSLClientReconnection fails on Windows #1980
  - delay in keep_alive due to sleep #1969
  - missing query pararm in httplib::Client::send #1985</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- version update to 0.18.6
  * Resolve #2033
  * Port/Address re-use #2011
  * Invalid Content-Length values should be rejected #2014
  * Feature request: ability to check if the connection is still alive #2017
  * Changed to use non-blocking socket in is_ssl_peer_could_be_closed (258992a)
  * Treat out-of-range last_pos as the end of the content #2009
  * fix:set_file_content with range request return 416. #2010
  * Fix HTTP Response Splitting Vulnerability (9c36aae)
- added patches
  fix https://github.com/yhirose/cpp-httplib/issues/2042
  + cpp-httplib-test-issue2004-online.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- version update to 0.20.1
  0.20.1 (CVE-2025-46728 [bsc#1242777])
  * Add AF_UNIX support on windows #2115
  * Support zstd also via pkg-config #2121
  * Fix #2113
  * Fix "Unbounded Memory Allocation in Chunked/No-Length Requests"
  0.20.0
  * server_certificate_verifier extended to reuse built-in verifier #2064
  * Assertion failed when destroying httplib::Client
  * #2068
  * Spaces incorrectly allowed in header field names #2096
  * build(meson): copy MountTest.MultibytesPathName files #2098
  * Remove SSLInit #2102
  * Add zstd support #2088
  * Question the behavior of method read_content_without_length #2109
  * Crash when calling std::exit while server running or client requests in flight #2097
  0.19.0
  * Global timeout feature (same as "--max-time" curl option) #2034
  * Fix check for URI length to prevent incorrect HTTP 414 errors
  0.18.7
  * Potential memory corruption in stream_line_reader #2028
- deleted patches
  - cpp-httplib-test-issue2004-online.patch (upstreamed)</changelog>
  <changelog author="Marius Grossu &lt;marius.grossu@suse.com&gt;" date="1762344000">- Fix CVE-2025-53629, header can allocate memory arbitrarily in the server, potentially leading to its exhaustion
  (CVE-2025-53628, bsc#1246471)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-53628, HTTP header smuggling due to insecure trailers merge
  (CVE-2025-53628, bsc#1246468)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-52887, number of HTTP header fields not limited, which can lead to potential exhaustion of system memory
  (CVE-2025-52887, bsc#1245414)
  * CVE-2025-52887.patch</changelog>
</package>
<package pkgid="2497bf21498c81f28914a493a8d5f2f20f7d934f02995a03ed03bd2e0acdbd28" name="crane" arch="aarch64">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="9ced6127b12a87aacfe0d2ac233e7bf28c3e42e251460a03098f7dc5c58c72aa" name="crane" arch="i586">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="f9729c8578b06854fefe16148902de79bfa2a56c0b9d54b74e9a022a1f219ef7" name="crane" arch="ppc64le">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="77fa9ee6d9a3b239840bb3fd1fadb1162f356f356ea53f366d26a98907df2642" name="crane" arch="s390x">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="189f88ba6648958001821a10183a64e293185b9cf1f759e694bfd39341a3172b" name="crane" arch="x86_64">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="86e78d9109b738391e0bfd42a52863aaf89996269ff1ee9b0160451325085183" name="crane-bash-completion" arch="noarch">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="63fd5059bee75d5439173db6def6aa13d31544158354b97adbf1459692777c45" name="crane-fish-completion" arch="noarch">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="227a967c7d332944712066441368c878329b3ecdbf1e01c105c8cd433a354b3c" name="crane-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="a629d2bb4b9540c2907bd16e62a3de2c5d5b1f3f6d81233df9e38c9e586c37c7" name="crun" arch="aarch64">
  <version epoch="0" ver="1.20" rel="bp156.2.3.1"/>
  <changelog author="Niels Abspoel &lt;aboe76@gmail.com&gt;" date="1677585600">- Update to 1.8.1
  * linux: idmapped mounts expect the same configuration as
    the user namespace mappings. Before they were expecting the inverted
    mapping. It is a breaking change, but the behavior was aligned
    to what runc will do as well.
  * krun: always allow /dev/kvm in the cgroup configuration.
  * handlers: disable exec for handlers that do not support it.
  * selinux: allow setting fscontext using a custom annotation.
  * cgroup: reset systemd unit if start fails.
  * cgroup: rmdir the entire systemd scope. It fixes a leak on cgroupv1.
  * cgroup: always delete the cgroup on errors.
    On some errors it could have been leaked before.
- changes from 1.8
  * linux: precreate devices on the host.
  * cgroup: support cpuset mounted with noprefix.
  * linux: mount the source cgroup if cgroupns=host.
  * libcrun: don't clone self from read-only mount.
  * build: fix build without dlfcn.h.
  * linux: set PR_SET_DUMPABLE.
  * utils: fix applying AppArmor profile.
  * linux: write setgroups=deny when mapping a single uid/gid.
  * cgroup: fix enter cgroupv1 mount on RHEL 7.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680004800">- update to 1.8.3:
  * update: initialize the rt limits only on cgroup v1.
  * lua bindings for libcrun.
  * wasmedge: add current directory to preopen paths.
  * linux: inherit parent mount flags when making a path masked.
  * libcrun: custom annotation to set the scheduler for the
    container process.
  * cgroup: fallback to blkio.bfq files if blkio is not available
    on cgroup v1.
  * cgroup: initialize rt limits when using systemd.
  * tty: chown the tty to the exec user instead of the user
    specified to create the container.
  * cgroup: fallback to create cgroupfs as sibling of the current
    cgroup if there is none specified and it cannot be created in
    the root cgroup.
- add keyring for GPG validation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1686744000">- Update to 1.8.5:
  * scheduler: use definition from the OCI configuration file
    instead of the custom label that is now dropped and not
    supported anymore.
  * cgroup: fix creating cgroup under "domain threaded".
  * cgroup, systemd: set the memory limit on the system scope.
  * restore tty settings from the correct file descriptor.  It was
    previously restoring the settings from the wrong file
    descriptor causing the tty settings  to be changed on the
    calling terminal.
  * criu: check if the criu_join_ns_add function exists.
    Fix a segfault with new versions of CRIU.
  * linux: do not precreate devs with euid &gt; 0.  Fix creating
    devices when running the OCI runtime as non root user.
  * linux: improve PID detection on systems that lack pidfd.
    While there is still a window of time that the PID could be
    recycled, now it is now reduced to a minimum.
  * criu: fix memory leak.
  * logging: improve error message when dlopen fails.
- Changes from 1.8.4:
  * drop custom annotation to set the time namespace and use
    the OCI specs instead.
  * cgroup: workaround cpu quota/period issue with v1.  Sometimes
    setting CPU quota period fails when a new period is lower,
    and a parent cgroup has CPU quota limit set.
  * cgroup: fix set quota to -1 on cgroup v1.
  * criu: drop loading unused functions.</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1692014400">- Update to 1.8.6:
  * crun: new command "crun features".
  * linux: fix handling of idmapped mounts when the container joins an
    existing PID namespace.
  * linux: support io_priority from the OCI specs.
  * linux: handle correctly the case where the status file is not written
    yet for a container.
  * crun: fix segfault for "ps" when the container is not using cgroups.
  * cgroup: allow setting swap to 0.</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1693915200">- Enable WasmEdge support to run Wasm compat containers.</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1694606400">- Update to 1.9:
  * linux: support arbitrary idmapped mounts.
  * linux: add support for "ridmap" mount option to support recursive
    idmapped mounts.
  * crun delete: call systemd's reset-failed.
  * linux: fix check for oom_score_adj.
  * features: Support mountExtensions.
  * linux: correctly handle unknown signal string when it doesn't start with
    a digit.
  * linux: do not attempt to join again already joined namespace.
  * wasmer: use latest wasix API.</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1697025600">- Add crun-wasm symlink for platform 'wasi/wasm'</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1697112000">- New upstream release 1.9.2:
  * cgroup: reset the inherited cpu affinity after moving to cgroup. Old kernels
    do that automatically, but new kernels remember the affinity that was set
    before the cgroup move, so we need to reset it in order to honor the cpuset
    configuration.
- New upstream release 1.9.1:
  * utils: ignore ENOTSUP when chmod a symlink. It fixes a problem on Linux 6.6
    that always refuses chmod on a symlink.
  * build: fix build on CentOS 7
  * linux: add new fallback when mount fails with EBUSY, so that there is not an
    additional tmpfs mount if not needed.
  * utils: improve error message when a directory cannot be created as a
    component of the path is already existing as a non directory.
- Only build with wasmedge on x86_64 &amp; aarch64</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699272000">- update to 1.11.1:
  * force a remount operation with bind mounts from the host to
    correctly set all the mount flags.
  * cgroup: honor cpu burst.
  * systemd: set CPUQuota and CPUPeriod on the scope cgroup.
  * linux: append tmpfs mode if missing for mounts.  This is the
    same behavior of runc.
  * cgroup: always use the user session for rootless.
  * support for Intel Resource Director Technology (RDT).
  * new mount option "copy-symlink".  When provided for a mount,
    if the source is a symlink, then it is copied in the container
    instead of attempting a mount.
  * linux: open mounts before setgroups if in a userns.  This
    solves a problem where a directory that was previously
    accessible to the user, become inaccessible after setgroups
    causing the bind mount to fail.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1701432000">- New upstream release 1.12:
  * add new WebAssembly handler: spin.
  * systemd: fallback to system bus if session bus is not available.
  * configure the cpu rt and cpuset controllers before joining them to
    avoid running temporarily the workload on the wrong cpus.
  * preconfigure the cpuset with required resources instead of using the
    parent's set.  This prevents needless churn in the kernel as it
    tracks which CPUs have load balancing disabled.
  * try attr/&lt;lsm&gt;/* before the attr/* files.  Writes to the attr/*
    files may fail if apparmor is not the first "major" LSM in the list
    of loaded LSMs (e.g. lsm=apparmor,bpf vs lsm=bpf,apparmor).
- New upstream release 1.11.2:
  * fix a regression caused by 1.11.1 where the process crashes if there
    are no CPU limits configured on cgroup v1. (bsc#1217590)
  * fix error code check for the ptsname_r function.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706356800">- update to 1.14:
  * build: drop dependency on libgcrypt. Use blake3 to compute the cache key.
  * cpuset: don't clobber parent cgroup value when writing the cpuset value.
  * linux: force umask(0). It ensures that the mknodat syscall is not affected by the umask of the calling process,
    allowing file permissions to be set as specified in the OCI configuration.
  * ebpf: do not require MEMLOCK for eBPF programs. This requirement was relaxed in Linux 5.11.
- update to 1.13:
  * src: use O_CLOEXEC for all open/openat calls
  * cgroup v1: use "max" when pids limit &lt; 0.
  * improve error message when idmap mount fails because the underlying file system has no support for it.
  * libcrun: fix compilation when building without libseccomp and libcap.
  * fix relative idmapped mount when using the custom annotation.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1709726400">- New upstream release 1.14.4
  * crun-1.14.4
- linux: fix mount of file with recursive flags.  Do not assume it is
  a directory, but check the source type.
  * crun-1.14.3
- follow up for 1.14.2.  Drop the version check for each command.
  * crun-1.14.2
- crun: drop check for OCI version.  A recent bump in the OCI runtime
  specs caused crun to fail with every config file.  Just drop the
  check since it doesn't add any value.
  * crun-1.14.1
- there was recently a security vulnerability (CVE-2024-21626) in runc
  that allowed a malicious user to chdir(2) to a /proc/*/fd entry that is
  outside the container rootfs.  While crun is not affected directly,
  harden chdir by validating that we are still inside the container
  rootfs.
- container: attempt to close all the files before execv(2).
  if we leak any fd, it prevents execv to gain access to files outside
  the container rootfs through /proc/self/fd/$fd.
- fix a regression caused by 1.14 when installing the ebpf filter on a
  kernel older than 5.11.
- cgroup, systemd: fix segfault if the resources block is not specified.</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1717070400">- New upstream release 1.15
  * fix a mount point leak under /run/crun, add a retry mechanism to unmount the directory if the removal failed with EBUSY.
  * linux: cgroups: fix potential mount leak when /sys/fs/cgroup is already mounted, causing the posthooks to not run.
  * release: build s390x binaries using musl libc.
  * features: add support for potentiallyUnsafeConfigAnnotations.
  * handlers: add option to load wasi-nn plugin for wasmedge.
  * linux: fix "harden chdir()" security measure. The previous check was not correct.
  * crun: add option --keep to the run command. When specified the container is not automatically deleted when it exits.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1725537600">- new upstream release 1.16.1
  1.16.1:
- fix a regression introduced by 1.16 where using 'rshared' rootfs mount propagation and the rootfs itself is a mountpoint.
- inherit user from original process on exec, if not overridden.
  1.16:
- build: fix build for s390x.
- linux: fix mount of special files with rro.  Open the mount target with O_PATH to prevent open(2) failures with special files like FIFOs or UNIX sockets.
- Fix sd-bus error handling for cpu quota and period props update.
- container: use relative path for rootfs if possible.  If the rootfs cannot be resolved and it is below the current working directory, only use its relative path.
- wasmedge: access container environment variables for the WasmEdge configuration.
- cgroup, systemd: use MemoryMax instead of MemoryLimit.  Fixes a warning for using an old configuration name.
- cgroup, systemd: improve checks for sd_bus_message_append errors</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726056000">- update to 1.17:
  * Add --log-level option. It accepts error, warning and error.
  * Add debug logs for container creation.
  * Fix double-free in crun exec code that could lead to a crash.
  * Allow passing an ID to the journald log driver.
  * Report "executable not found" errors after tty has been setup.
  * Do not treat EPIPE from hooks as an error.
  * Make sure DefaultDependencies is correctly set in the systemd scope.
  * Improve the error message when the container process is not found.
  * Improve error handling for the mnt namespace restoration.
  * Fix error handling for getpwuid_r, recvfrom and libcrun_kill_linux.
  * Fix handling of device paths with trailing slashes.
- add url for keyring
- enable leap by disabling wasmedge (not packaged for leap)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to crun v1.18. Upstream changelog is available from
  &lt;https://github.com/containers/crun/releases/tag/1.18&gt;
- Remove URL from crun.keyring source declaration. If the Ubuntu keyservers
  update their server software or some other minor change causes the output of
  the key to change (such as the maintainer updating their key expiry), we will
  end up with build failures despite the key still being a totally valid key to
  do verifications with. This also matches how keyring files are managed for
  most packages.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1730808000">- Update to crun v1.18.2 Upstream changelog is available from
  &lt;https://github.com/containers/crun/releases/tag/1.18.2&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733832000">- Update crun.keyring to point to primary key. The original packaging of
  crun.keyring used the subkey 0xAF60FCA3CDAA6DEAD157EA3A67E38F7A8BA21772 as
  the key to verify against, rather than the primary key
  0xAC404C1C0BF735C63FF4D562263D6DF2E163E1EA. If/when upstream rotates their
  signing keys, the old key verification would start to fail.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1736251200">- Update to 1.19.1
  * linux: fix a hang if there are no reads from the tty. Use non blocking sockets to read and write from the tty so that the "crun exec" process doesn't hang when the terminal is not consuming any data.
  * linux: remove the workaround needed to mount a cgroup on top of another cgroup mount. The workaround had the disadvantage to temporarily leak a mount on the host. The alternative that is currently used is to mount a temporary tmpfs between the twoo cgroup mounts.
- Update to 1.19
  * wasm: add new handler wamr.
  * criu: allow passing network lock method to libcriu.
  * linux: honor exec cpu affinity mask.
  * build: fix build with musl libc.
  * crun: use mount API to self-clone.
  * cgroup, systemd: do not override devices on update. If the "update" request has no device block configured, do not reset the previously configuration.
  * cgroup: handle case where cgroup v1 freezer is disabled. On systems without the freezer controller, containers were mistakenly reported as paused.
  * cgroup: do not stop process on exec. The cpu mask is configured on the systemd scope, the previous workaround to stop the container until the cgroup is fully configured is no longer needed.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1739275200">- Update to 1.20
  * krun: fix CVE-2025-24965. The .krun_config.json file could be created outside of the container rootfs.
  * cgroup: reverted the removal of tun/tap from the default allow list, this was done in crun-1.5. The tun/tap device is now added by default again.
  * CRIU: do not set network_lock unless explicitly specified.
  * status: disallow container names containing slashes in their name.
  * linux: Improved error message when failing to set the net.ipv4.ping_group_range sysctl.
  * scheduler: Ignore ENOSYS errors when resetting the CPU affinity mask.
  * linux: return a better error message when pidfd_open fails with EINVAL.
  * cgroup: display the absolute path to cgroup.controllers when a controller is unavailable.
  * exec: always call setsid. Now processes created through exec get the correct process group id.</changelog>
</package>
<package pkgid="504330cec8e14abfa1eb5f9a445eea865537b3ebb0af4034febdf8d0c18af10d" name="crun" arch="i586">
  <version epoch="0" ver="1.20" rel="bp156.2.3.1"/>
  <changelog author="Niels Abspoel &lt;aboe76@gmail.com&gt;" date="1677585600">- Update to 1.8.1
  * linux: idmapped mounts expect the same configuration as
    the user namespace mappings. Before they were expecting the inverted
    mapping. It is a breaking change, but the behavior was aligned
    to what runc will do as well.
  * krun: always allow /dev/kvm in the cgroup configuration.
  * handlers: disable exec for handlers that do not support it.
  * selinux: allow setting fscontext using a custom annotation.
  * cgroup: reset systemd unit if start fails.
  * cgroup: rmdir the entire systemd scope. It fixes a leak on cgroupv1.
  * cgroup: always delete the cgroup on errors.
    On some errors it could have been leaked before.
- changes from 1.8
  * linux: precreate devices on the host.
  * cgroup: support cpuset mounted with noprefix.
  * linux: mount the source cgroup if cgroupns=host.
  * libcrun: don't clone self from read-only mount.
  * build: fix build without dlfcn.h.
  * linux: set PR_SET_DUMPABLE.
  * utils: fix applying AppArmor profile.
  * linux: write setgroups=deny when mapping a single uid/gid.
  * cgroup: fix enter cgroupv1 mount on RHEL 7.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680004800">- update to 1.8.3:
  * update: initialize the rt limits only on cgroup v1.
  * lua bindings for libcrun.
  * wasmedge: add current directory to preopen paths.
  * linux: inherit parent mount flags when making a path masked.
  * libcrun: custom annotation to set the scheduler for the
    container process.
  * cgroup: fallback to blkio.bfq files if blkio is not available
    on cgroup v1.
  * cgroup: initialize rt limits when using systemd.
  * tty: chown the tty to the exec user instead of the user
    specified to create the container.
  * cgroup: fallback to create cgroupfs as sibling of the current
    cgroup if there is none specified and it cannot be created in
    the root cgroup.
- add keyring for GPG validation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1686744000">- Update to 1.8.5:
  * scheduler: use definition from the OCI configuration file
    instead of the custom label that is now dropped and not
    supported anymore.
  * cgroup: fix creating cgroup under "domain threaded".
  * cgroup, systemd: set the memory limit on the system scope.
  * restore tty settings from the correct file descriptor.  It was
    previously restoring the settings from the wrong file
    descriptor causing the tty settings  to be changed on the
    calling terminal.
  * criu: check if the criu_join_ns_add function exists.
    Fix a segfault with new versions of CRIU.
  * linux: do not precreate devs with euid &gt; 0.  Fix creating
    devices when running the OCI runtime as non root user.
  * linux: improve PID detection on systems that lack pidfd.
    While there is still a window of time that the PID could be
    recycled, now it is now reduced to a minimum.
  * criu: fix memory leak.
  * logging: improve error message when dlopen fails.
- Changes from 1.8.4:
  * drop custom annotation to set the time namespace and use
    the OCI specs instead.
  * cgroup: workaround cpu quota/period issue with v1.  Sometimes
    setting CPU quota period fails when a new period is lower,
    and a parent cgroup has CPU quota limit set.
  * cgroup: fix set quota to -1 on cgroup v1.
  * criu: drop loading unused functions.</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1692014400">- Update to 1.8.6:
  * crun: new command "crun features".
  * linux: fix handling of idmapped mounts when the container joins an
    existing PID namespace.
  * linux: support io_priority from the OCI specs.
  * linux: handle correctly the case where the status file is not written
    yet for a container.
  * crun: fix segfault for "ps" when the container is not using cgroups.
  * cgroup: allow setting swap to 0.</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1693915200">- Enable WasmEdge support to run Wasm compat containers.</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1694606400">- Update to 1.9:
  * linux: support arbitrary idmapped mounts.
  * linux: add support for "ridmap" mount option to support recursive
    idmapped mounts.
  * crun delete: call systemd's reset-failed.
  * linux: fix check for oom_score_adj.
  * features: Support mountExtensions.
  * linux: correctly handle unknown signal string when it doesn't start with
    a digit.
  * linux: do not attempt to join again already joined namespace.
  * wasmer: use latest wasix API.</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1697025600">- Add crun-wasm symlink for platform 'wasi/wasm'</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1697112000">- New upstream release 1.9.2:
  * cgroup: reset the inherited cpu affinity after moving to cgroup. Old kernels
    do that automatically, but new kernels remember the affinity that was set
    before the cgroup move, so we need to reset it in order to honor the cpuset
    configuration.
- New upstream release 1.9.1:
  * utils: ignore ENOTSUP when chmod a symlink. It fixes a problem on Linux 6.6
    that always refuses chmod on a symlink.
  * build: fix build on CentOS 7
  * linux: add new fallback when mount fails with EBUSY, so that there is not an
    additional tmpfs mount if not needed.
  * utils: improve error message when a directory cannot be created as a
    component of the path is already existing as a non directory.
- Only build with wasmedge on x86_64 &amp; aarch64</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699272000">- update to 1.11.1:
  * force a remount operation with bind mounts from the host to
    correctly set all the mount flags.
  * cgroup: honor cpu burst.
  * systemd: set CPUQuota and CPUPeriod on the scope cgroup.
  * linux: append tmpfs mode if missing for mounts.  This is the
    same behavior of runc.
  * cgroup: always use the user session for rootless.
  * support for Intel Resource Director Technology (RDT).
  * new mount option "copy-symlink".  When provided for a mount,
    if the source is a symlink, then it is copied in the container
    instead of attempting a mount.
  * linux: open mounts before setgroups if in a userns.  This
    solves a problem where a directory that was previously
    accessible to the user, become inaccessible after setgroups
    causing the bind mount to fail.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1701432000">- New upstream release 1.12:
  * add new WebAssembly handler: spin.
  * systemd: fallback to system bus if session bus is not available.
  * configure the cpu rt and cpuset controllers before joining them to
    avoid running temporarily the workload on the wrong cpus.
  * preconfigure the cpuset with required resources instead of using the
    parent's set.  This prevents needless churn in the kernel as it
    tracks which CPUs have load balancing disabled.
  * try attr/&lt;lsm&gt;/* before the attr/* files.  Writes to the attr/*
    files may fail if apparmor is not the first "major" LSM in the list
    of loaded LSMs (e.g. lsm=apparmor,bpf vs lsm=bpf,apparmor).
- New upstream release 1.11.2:
  * fix a regression caused by 1.11.1 where the process crashes if there
    are no CPU limits configured on cgroup v1. (bsc#1217590)
  * fix error code check for the ptsname_r function.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706356800">- update to 1.14:
  * build: drop dependency on libgcrypt. Use blake3 to compute the cache key.
  * cpuset: don't clobber parent cgroup value when writing the cpuset value.
  * linux: force umask(0). It ensures that the mknodat syscall is not affected by the umask of the calling process,
    allowing file permissions to be set as specified in the OCI configuration.
  * ebpf: do not require MEMLOCK for eBPF programs. This requirement was relaxed in Linux 5.11.
- update to 1.13:
  * src: use O_CLOEXEC for all open/openat calls
  * cgroup v1: use "max" when pids limit &lt; 0.
  * improve error message when idmap mount fails because the underlying file system has no support for it.
  * libcrun: fix compilation when building without libseccomp and libcap.
  * fix relative idmapped mount when using the custom annotation.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1709726400">- New upstream release 1.14.4
  * crun-1.14.4
- linux: fix mount of file with recursive flags.  Do not assume it is
  a directory, but check the source type.
  * crun-1.14.3
- follow up for 1.14.2.  Drop the version check for each command.
  * crun-1.14.2
- crun: drop check for OCI version.  A recent bump in the OCI runtime
  specs caused crun to fail with every config file.  Just drop the
  check since it doesn't add any value.
  * crun-1.14.1
- there was recently a security vulnerability (CVE-2024-21626) in runc
  that allowed a malicious user to chdir(2) to a /proc/*/fd entry that is
  outside the container rootfs.  While crun is not affected directly,
  harden chdir by validating that we are still inside the container
  rootfs.
- container: attempt to close all the files before execv(2).
  if we leak any fd, it prevents execv to gain access to files outside
  the container rootfs through /proc/self/fd/$fd.
- fix a regression caused by 1.14 when installing the ebpf filter on a
  kernel older than 5.11.
- cgroup, systemd: fix segfault if the resources block is not specified.</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1717070400">- New upstream release 1.15
  * fix a mount point leak under /run/crun, add a retry mechanism to unmount the directory if the removal failed with EBUSY.
  * linux: cgroups: fix potential mount leak when /sys/fs/cgroup is already mounted, causing the posthooks to not run.
  * release: build s390x binaries using musl libc.
  * features: add support for potentiallyUnsafeConfigAnnotations.
  * handlers: add option to load wasi-nn plugin for wasmedge.
  * linux: fix "harden chdir()" security measure. The previous check was not correct.
  * crun: add option --keep to the run command. When specified the container is not automatically deleted when it exits.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1725537600">- new upstream release 1.16.1
  1.16.1:
- fix a regression introduced by 1.16 where using 'rshared' rootfs mount propagation and the rootfs itself is a mountpoint.
- inherit user from original process on exec, if not overridden.
  1.16:
- build: fix build for s390x.
- linux: fix mount of special files with rro.  Open the mount target with O_PATH to prevent open(2) failures with special files like FIFOs or UNIX sockets.
- Fix sd-bus error handling for cpu quota and period props update.
- container: use relative path for rootfs if possible.  If the rootfs cannot be resolved and it is below the current working directory, only use its relative path.
- wasmedge: access container environment variables for the WasmEdge configuration.
- cgroup, systemd: use MemoryMax instead of MemoryLimit.  Fixes a warning for using an old configuration name.
- cgroup, systemd: improve checks for sd_bus_message_append errors</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726056000">- update to 1.17:
  * Add --log-level option. It accepts error, warning and error.
  * Add debug logs for container creation.
  * Fix double-free in crun exec code that could lead to a crash.
  * Allow passing an ID to the journald log driver.
  * Report "executable not found" errors after tty has been setup.
  * Do not treat EPIPE from hooks as an error.
  * Make sure DefaultDependencies is correctly set in the systemd scope.
  * Improve the error message when the container process is not found.
  * Improve error handling for the mnt namespace restoration.
  * Fix error handling for getpwuid_r, recvfrom and libcrun_kill_linux.
  * Fix handling of device paths with trailing slashes.
- add url for keyring
- enable leap by disabling wasmedge (not packaged for leap)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to crun v1.18. Upstream changelog is available from
  &lt;https://github.com/containers/crun/releases/tag/1.18&gt;
- Remove URL from crun.keyring source declaration. If the Ubuntu keyservers
  update their server software or some other minor change causes the output of
  the key to change (such as the maintainer updating their key expiry), we will
  end up with build failures despite the key still being a totally valid key to
  do verifications with. This also matches how keyring files are managed for
  most packages.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1730808000">- Update to crun v1.18.2 Upstream changelog is available from
  &lt;https://github.com/containers/crun/releases/tag/1.18.2&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733832000">- Update crun.keyring to point to primary key. The original packaging of
  crun.keyring used the subkey 0xAF60FCA3CDAA6DEAD157EA3A67E38F7A8BA21772 as
  the key to verify against, rather than the primary key
  0xAC404C1C0BF735C63FF4D562263D6DF2E163E1EA. If/when upstream rotates their
  signing keys, the old key verification would start to fail.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1736251200">- Update to 1.19.1
  * linux: fix a hang if there are no reads from the tty. Use non blocking sockets to read and write from the tty so that the "crun exec" process doesn't hang when the terminal is not consuming any data.
  * linux: remove the workaround needed to mount a cgroup on top of another cgroup mount. The workaround had the disadvantage to temporarily leak a mount on the host. The alternative that is currently used is to mount a temporary tmpfs between the twoo cgroup mounts.
- Update to 1.19
  * wasm: add new handler wamr.
  * criu: allow passing network lock method to libcriu.
  * linux: honor exec cpu affinity mask.
  * build: fix build with musl libc.
  * crun: use mount API to self-clone.
  * cgroup, systemd: do not override devices on update. If the "update" request has no device block configured, do not reset the previously configuration.
  * cgroup: handle case where cgroup v1 freezer is disabled. On systems without the freezer controller, containers were mistakenly reported as paused.
  * cgroup: do not stop process on exec. The cpu mask is configured on the systemd scope, the previous workaround to stop the container until the cgroup is fully configured is no longer needed.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1739275200">- Update to 1.20
  * krun: fix CVE-2025-24965. The .krun_config.json file could be created outside of the container rootfs.
  * cgroup: reverted the removal of tun/tap from the default allow list, this was done in crun-1.5. The tun/tap device is now added by default again.
  * CRIU: do not set network_lock unless explicitly specified.
  * status: disallow container names containing slashes in their name.
  * linux: Improved error message when failing to set the net.ipv4.ping_group_range sysctl.
  * scheduler: Ignore ENOSYS errors when resetting the CPU affinity mask.
  * linux: return a better error message when pidfd_open fails with EINVAL.
  * cgroup: display the absolute path to cgroup.controllers when a controller is unavailable.
  * exec: always call setsid. Now processes created through exec get the correct process group id.</changelog>
</package>
<package pkgid="fa44aa225ccfdda811e05c79977bf6020db88cbec1dfdc68b23f1cf1cb8f2eb2" name="crun" arch="ppc64le">
  <version epoch="0" ver="1.20" rel="bp156.2.3.1"/>
  <changelog author="Niels Abspoel &lt;aboe76@gmail.com&gt;" date="1677585600">- Update to 1.8.1
  * linux: idmapped mounts expect the same configuration as
    the user namespace mappings. Before they were expecting the inverted
    mapping. It is a breaking change, but the behavior was aligned
    to what runc will do as well.
  * krun: always allow /dev/kvm in the cgroup configuration.
  * handlers: disable exec for handlers that do not support it.
  * selinux: allow setting fscontext using a custom annotation.
  * cgroup: reset systemd unit if start fails.
  * cgroup: rmdir the entire systemd scope. It fixes a leak on cgroupv1.
  * cgroup: always delete the cgroup on errors.
    On some errors it could have been leaked before.
- changes from 1.8
  * linux: precreate devices on the host.
  * cgroup: support cpuset mounted with noprefix.
  * linux: mount the source cgroup if cgroupns=host.
  * libcrun: don't clone self from read-only mount.
  * build: fix build without dlfcn.h.
  * linux: set PR_SET_DUMPABLE.
  * utils: fix applying AppArmor profile.
  * linux: write setgroups=deny when mapping a single uid/gid.
  * cgroup: fix enter cgroupv1 mount on RHEL 7.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680004800">- update to 1.8.3:
  * update: initialize the rt limits only on cgroup v1.
  * lua bindings for libcrun.
  * wasmedge: add current directory to preopen paths.
  * linux: inherit parent mount flags when making a path masked.
  * libcrun: custom annotation to set the scheduler for the
    container process.
  * cgroup: fallback to blkio.bfq files if blkio is not available
    on cgroup v1.
  * cgroup: initialize rt limits when using systemd.
  * tty: chown the tty to the exec user instead of the user
    specified to create the container.
  * cgroup: fallback to create cgroupfs as sibling of the current
    cgroup if there is none specified and it cannot be created in
    the root cgroup.
- add keyring for GPG validation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1686744000">- Update to 1.8.5:
  * scheduler: use definition from the OCI configuration file
    instead of the custom label that is now dropped and not
    supported anymore.
  * cgroup: fix creating cgroup under "domain threaded".
  * cgroup, systemd: set the memory limit on the system scope.
  * restore tty settings from the correct file descriptor.  It was
    previously restoring the settings from the wrong file
    descriptor causing the tty settings  to be changed on the
    calling terminal.
  * criu: check if the criu_join_ns_add function exists.
    Fix a segfault with new versions of CRIU.
  * linux: do not precreate devs with euid &gt; 0.  Fix creating
    devices when running the OCI runtime as non root user.
  * linux: improve PID detection on systems that lack pidfd.
    While there is still a window of time that the PID could be
    recycled, now it is now reduced to a minimum.
  * criu: fix memory leak.
  * logging: improve error message when dlopen fails.
- Changes from 1.8.4:
  * drop custom annotation to set the time namespace and use
    the OCI specs instead.
  * cgroup: workaround cpu quota/period issue with v1.  Sometimes
    setting CPU quota period fails when a new period is lower,
    and a parent cgroup has CPU quota limit set.
  * cgroup: fix set quota to -1 on cgroup v1.
  * criu: drop loading unused functions.</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1692014400">- Update to 1.8.6:
  * crun: new command "crun features".
  * linux: fix handling of idmapped mounts when the container joins an
    existing PID namespace.
  * linux: support io_priority from the OCI specs.
  * linux: handle correctly the case where the status file is not written
    yet for a container.
  * crun: fix segfault for "ps" when the container is not using cgroups.
  * cgroup: allow setting swap to 0.</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1693915200">- Enable WasmEdge support to run Wasm compat containers.</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1694606400">- Update to 1.9:
  * linux: support arbitrary idmapped mounts.
  * linux: add support for "ridmap" mount option to support recursive
    idmapped mounts.
  * crun delete: call systemd's reset-failed.
  * linux: fix check for oom_score_adj.
  * features: Support mountExtensions.
  * linux: correctly handle unknown signal string when it doesn't start with
    a digit.
  * linux: do not attempt to join again already joined namespace.
  * wasmer: use latest wasix API.</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1697025600">- Add crun-wasm symlink for platform 'wasi/wasm'</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1697112000">- New upstream release 1.9.2:
  * cgroup: reset the inherited cpu affinity after moving to cgroup. Old kernels
    do that automatically, but new kernels remember the affinity that was set
    before the cgroup move, so we need to reset it in order to honor the cpuset
    configuration.
- New upstream release 1.9.1:
  * utils: ignore ENOTSUP when chmod a symlink. It fixes a problem on Linux 6.6
    that always refuses chmod on a symlink.
  * build: fix build on CentOS 7
  * linux: add new fallback when mount fails with EBUSY, so that there is not an
    additional tmpfs mount if not needed.
  * utils: improve error message when a directory cannot be created as a
    component of the path is already existing as a non directory.
- Only build with wasmedge on x86_64 &amp; aarch64</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699272000">- update to 1.11.1:
  * force a remount operation with bind mounts from the host to
    correctly set all the mount flags.
  * cgroup: honor cpu burst.
  * systemd: set CPUQuota and CPUPeriod on the scope cgroup.
  * linux: append tmpfs mode if missing for mounts.  This is the
    same behavior of runc.
  * cgroup: always use the user session for rootless.
  * support for Intel Resource Director Technology (RDT).
  * new mount option "copy-symlink".  When provided for a mount,
    if the source is a symlink, then it is copied in the container
    instead of attempting a mount.
  * linux: open mounts before setgroups if in a userns.  This
    solves a problem where a directory that was previously
    accessible to the user, become inaccessible after setgroups
    causing the bind mount to fail.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1701432000">- New upstream release 1.12:
  * add new WebAssembly handler: spin.
  * systemd: fallback to system bus if session bus is not available.
  * configure the cpu rt and cpuset controllers before joining them to
    avoid running temporarily the workload on the wrong cpus.
  * preconfigure the cpuset with required resources instead of using the
    parent's set.  This prevents needless churn in the kernel as it
    tracks which CPUs have load balancing disabled.
  * try attr/&lt;lsm&gt;/* before the attr/* files.  Writes to the attr/*
    files may fail if apparmor is not the first "major" LSM in the list
    of loaded LSMs (e.g. lsm=apparmor,bpf vs lsm=bpf,apparmor).
- New upstream release 1.11.2:
  * fix a regression caused by 1.11.1 where the process crashes if there
    are no CPU limits configured on cgroup v1. (bsc#1217590)
  * fix error code check for the ptsname_r function.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706356800">- update to 1.14:
  * build: drop dependency on libgcrypt. Use blake3 to compute the cache key.
  * cpuset: don't clobber parent cgroup value when writing the cpuset value.
  * linux: force umask(0). It ensures that the mknodat syscall is not affected by the umask of the calling process,
    allowing file permissions to be set as specified in the OCI configuration.
  * ebpf: do not require MEMLOCK for eBPF programs. This requirement was relaxed in Linux 5.11.
- update to 1.13:
  * src: use O_CLOEXEC for all open/openat calls
  * cgroup v1: use "max" when pids limit &lt; 0.
  * improve error message when idmap mount fails because the underlying file system has no support for it.
  * libcrun: fix compilation when building without libseccomp and libcap.
  * fix relative idmapped mount when using the custom annotation.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1709726400">- New upstream release 1.14.4
  * crun-1.14.4
- linux: fix mount of file with recursive flags.  Do not assume it is
  a directory, but check the source type.
  * crun-1.14.3
- follow up for 1.14.2.  Drop the version check for each command.
  * crun-1.14.2
- crun: drop check for OCI version.  A recent bump in the OCI runtime
  specs caused crun to fail with every config file.  Just drop the
  check since it doesn't add any value.
  * crun-1.14.1
- there was recently a security vulnerability (CVE-2024-21626) in runc
  that allowed a malicious user to chdir(2) to a /proc/*/fd entry that is
  outside the container rootfs.  While crun is not affected directly,
  harden chdir by validating that we are still inside the container
  rootfs.
- container: attempt to close all the files before execv(2).
  if we leak any fd, it prevents execv to gain access to files outside
  the container rootfs through /proc/self/fd/$fd.
- fix a regression caused by 1.14 when installing the ebpf filter on a
  kernel older than 5.11.
- cgroup, systemd: fix segfault if the resources block is not specified.</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1717070400">- New upstream release 1.15
  * fix a mount point leak under /run/crun, add a retry mechanism to unmount the directory if the removal failed with EBUSY.
  * linux: cgroups: fix potential mount leak when /sys/fs/cgroup is already mounted, causing the posthooks to not run.
  * release: build s390x binaries using musl libc.
  * features: add support for potentiallyUnsafeConfigAnnotations.
  * handlers: add option to load wasi-nn plugin for wasmedge.
  * linux: fix "harden chdir()" security measure. The previous check was not correct.
  * crun: add option --keep to the run command. When specified the container is not automatically deleted when it exits.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1725537600">- new upstream release 1.16.1
  1.16.1:
- fix a regression introduced by 1.16 where using 'rshared' rootfs mount propagation and the rootfs itself is a mountpoint.
- inherit user from original process on exec, if not overridden.
  1.16:
- build: fix build for s390x.
- linux: fix mount of special files with rro.  Open the mount target with O_PATH to prevent open(2) failures with special files like FIFOs or UNIX sockets.
- Fix sd-bus error handling for cpu quota and period props update.
- container: use relative path for rootfs if possible.  If the rootfs cannot be resolved and it is below the current working directory, only use its relative path.
- wasmedge: access container environment variables for the WasmEdge configuration.
- cgroup, systemd: use MemoryMax instead of MemoryLimit.  Fixes a warning for using an old configuration name.
- cgroup, systemd: improve checks for sd_bus_message_append errors</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726056000">- update to 1.17:
  * Add --log-level option. It accepts error, warning and error.
  * Add debug logs for container creation.
  * Fix double-free in crun exec code that could lead to a crash.
  * Allow passing an ID to the journald log driver.
  * Report "executable not found" errors after tty has been setup.
  * Do not treat EPIPE from hooks as an error.
  * Make sure DefaultDependencies is correctly set in the systemd scope.
  * Improve the error message when the container process is not found.
  * Improve error handling for the mnt namespace restoration.
  * Fix error handling for getpwuid_r, recvfrom and libcrun_kill_linux.
  * Fix handling of device paths with trailing slashes.
- add url for keyring
- enable leap by disabling wasmedge (not packaged for leap)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to crun v1.18. Upstream changelog is available from
  &lt;https://github.com/containers/crun/releases/tag/1.18&gt;
- Remove URL from crun.keyring source declaration. If the Ubuntu keyservers
  update their server software or some other minor change causes the output of
  the key to change (such as the maintainer updating their key expiry), we will
  end up with build failures despite the key still being a totally valid key to
  do verifications with. This also matches how keyring files are managed for
  most packages.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1730808000">- Update to crun v1.18.2 Upstream changelog is available from
  &lt;https://github.com/containers/crun/releases/tag/1.18.2&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733832000">- Update crun.keyring to point to primary key. The original packaging of
  crun.keyring used the subkey 0xAF60FCA3CDAA6DEAD157EA3A67E38F7A8BA21772 as
  the key to verify against, rather than the primary key
  0xAC404C1C0BF735C63FF4D562263D6DF2E163E1EA. If/when upstream rotates their
  signing keys, the old key verification would start to fail.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1736251200">- Update to 1.19.1
  * linux: fix a hang if there are no reads from the tty. Use non blocking sockets to read and write from the tty so that the "crun exec" process doesn't hang when the terminal is not consuming any data.
  * linux: remove the workaround needed to mount a cgroup on top of another cgroup mount. The workaround had the disadvantage to temporarily leak a mount on the host. The alternative that is currently used is to mount a temporary tmpfs between the twoo cgroup mounts.
- Update to 1.19
  * wasm: add new handler wamr.
  * criu: allow passing network lock method to libcriu.
  * linux: honor exec cpu affinity mask.
  * build: fix build with musl libc.
  * crun: use mount API to self-clone.
  * cgroup, systemd: do not override devices on update. If the "update" request has no device block configured, do not reset the previously configuration.
  * cgroup: handle case where cgroup v1 freezer is disabled. On systems without the freezer controller, containers were mistakenly reported as paused.
  * cgroup: do not stop process on exec. The cpu mask is configured on the systemd scope, the previous workaround to stop the container until the cgroup is fully configured is no longer needed.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1739275200">- Update to 1.20
  * krun: fix CVE-2025-24965. The .krun_config.json file could be created outside of the container rootfs.
  * cgroup: reverted the removal of tun/tap from the default allow list, this was done in crun-1.5. The tun/tap device is now added by default again.
  * CRIU: do not set network_lock unless explicitly specified.
  * status: disallow container names containing slashes in their name.
  * linux: Improved error message when failing to set the net.ipv4.ping_group_range sysctl.
  * scheduler: Ignore ENOSYS errors when resetting the CPU affinity mask.
  * linux: return a better error message when pidfd_open fails with EINVAL.
  * cgroup: display the absolute path to cgroup.controllers when a controller is unavailable.
  * exec: always call setsid. Now processes created through exec get the correct process group id.</changelog>
</package>
<package pkgid="e11be197735db8fa634c431da29af19a7ab024ed760f033e39279449cb85a211" name="crun" arch="s390x">
  <version epoch="0" ver="1.20" rel="bp156.2.3.1"/>
  <changelog author="Niels Abspoel &lt;aboe76@gmail.com&gt;" date="1677585600">- Update to 1.8.1
  * linux: idmapped mounts expect the same configuration as
    the user namespace mappings. Before they were expecting the inverted
    mapping. It is a breaking change, but the behavior was aligned
    to what runc will do as well.
  * krun: always allow /dev/kvm in the cgroup configuration.
  * handlers: disable exec for handlers that do not support it.
  * selinux: allow setting fscontext using a custom annotation.
  * cgroup: reset systemd unit if start fails.
  * cgroup: rmdir the entire systemd scope. It fixes a leak on cgroupv1.
  * cgroup: always delete the cgroup on errors.
    On some errors it could have been leaked before.
- changes from 1.8
  * linux: precreate devices on the host.
  * cgroup: support cpuset mounted with noprefix.
  * linux: mount the source cgroup if cgroupns=host.
  * libcrun: don't clone self from read-only mount.
  * build: fix build without dlfcn.h.
  * linux: set PR_SET_DUMPABLE.
  * utils: fix applying AppArmor profile.
  * linux: write setgroups=deny when mapping a single uid/gid.
  * cgroup: fix enter cgroupv1 mount on RHEL 7.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680004800">- update to 1.8.3:
  * update: initialize the rt limits only on cgroup v1.
  * lua bindings for libcrun.
  * wasmedge: add current directory to preopen paths.
  * linux: inherit parent mount flags when making a path masked.
  * libcrun: custom annotation to set the scheduler for the
    container process.
  * cgroup: fallback to blkio.bfq files if blkio is not available
    on cgroup v1.
  * cgroup: initialize rt limits when using systemd.
  * tty: chown the tty to the exec user instead of the user
    specified to create the container.
  * cgroup: fallback to create cgroupfs as sibling of the current
    cgroup if there is none specified and it cannot be created in
    the root cgroup.
- add keyring for GPG validation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1686744000">- Update to 1.8.5:
  * scheduler: use definition from the OCI configuration file
    instead of the custom label that is now dropped and not
    supported anymore.
  * cgroup: fix creating cgroup under "domain threaded".
  * cgroup, systemd: set the memory limit on the system scope.
  * restore tty settings from the correct file descriptor.  It was
    previously restoring the settings from the wrong file
    descriptor causing the tty settings  to be changed on the
    calling terminal.
  * criu: check if the criu_join_ns_add function exists.
    Fix a segfault with new versions of CRIU.
  * linux: do not precreate devs with euid &gt; 0.  Fix creating
    devices when running the OCI runtime as non root user.
  * linux: improve PID detection on systems that lack pidfd.
    While there is still a window of time that the PID could be
    recycled, now it is now reduced to a minimum.
  * criu: fix memory leak.
  * logging: improve error message when dlopen fails.
- Changes from 1.8.4:
  * drop custom annotation to set the time namespace and use
    the OCI specs instead.
  * cgroup: workaround cpu quota/period issue with v1.  Sometimes
    setting CPU quota period fails when a new period is lower,
    and a parent cgroup has CPU quota limit set.
  * cgroup: fix set quota to -1 on cgroup v1.
  * criu: drop loading unused functions.</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1692014400">- Update to 1.8.6:
  * crun: new command "crun features".
  * linux: fix handling of idmapped mounts when the container joins an
    existing PID namespace.
  * linux: support io_priority from the OCI specs.
  * linux: handle correctly the case where the status file is not written
    yet for a container.
  * crun: fix segfault for "ps" when the container is not using cgroups.
  * cgroup: allow setting swap to 0.</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1693915200">- Enable WasmEdge support to run Wasm compat containers.</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1694606400">- Update to 1.9:
  * linux: support arbitrary idmapped mounts.
  * linux: add support for "ridmap" mount option to support recursive
    idmapped mounts.
  * crun delete: call systemd's reset-failed.
  * linux: fix check for oom_score_adj.
  * features: Support mountExtensions.
  * linux: correctly handle unknown signal string when it doesn't start with
    a digit.
  * linux: do not attempt to join again already joined namespace.
  * wasmer: use latest wasix API.</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1697025600">- Add crun-wasm symlink for platform 'wasi/wasm'</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1697112000">- New upstream release 1.9.2:
  * cgroup: reset the inherited cpu affinity after moving to cgroup. Old kernels
    do that automatically, but new kernels remember the affinity that was set
    before the cgroup move, so we need to reset it in order to honor the cpuset
    configuration.
- New upstream release 1.9.1:
  * utils: ignore ENOTSUP when chmod a symlink. It fixes a problem on Linux 6.6
    that always refuses chmod on a symlink.
  * build: fix build on CentOS 7
  * linux: add new fallback when mount fails with EBUSY, so that there is not an
    additional tmpfs mount if not needed.
  * utils: improve error message when a directory cannot be created as a
    component of the path is already existing as a non directory.
- Only build with wasmedge on x86_64 &amp; aarch64</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699272000">- update to 1.11.1:
  * force a remount operation with bind mounts from the host to
    correctly set all the mount flags.
  * cgroup: honor cpu burst.
  * systemd: set CPUQuota and CPUPeriod on the scope cgroup.
  * linux: append tmpfs mode if missing for mounts.  This is the
    same behavior of runc.
  * cgroup: always use the user session for rootless.
  * support for Intel Resource Director Technology (RDT).
  * new mount option "copy-symlink".  When provided for a mount,
    if the source is a symlink, then it is copied in the container
    instead of attempting a mount.
  * linux: open mounts before setgroups if in a userns.  This
    solves a problem where a directory that was previously
    accessible to the user, become inaccessible after setgroups
    causing the bind mount to fail.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1701432000">- New upstream release 1.12:
  * add new WebAssembly handler: spin.
  * systemd: fallback to system bus if session bus is not available.
  * configure the cpu rt and cpuset controllers before joining them to
    avoid running temporarily the workload on the wrong cpus.
  * preconfigure the cpuset with required resources instead of using the
    parent's set.  This prevents needless churn in the kernel as it
    tracks which CPUs have load balancing disabled.
  * try attr/&lt;lsm&gt;/* before the attr/* files.  Writes to the attr/*
    files may fail if apparmor is not the first "major" LSM in the list
    of loaded LSMs (e.g. lsm=apparmor,bpf vs lsm=bpf,apparmor).
- New upstream release 1.11.2:
  * fix a regression caused by 1.11.1 where the process crashes if there
    are no CPU limits configured on cgroup v1. (bsc#1217590)
  * fix error code check for the ptsname_r function.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706356800">- update to 1.14:
  * build: drop dependency on libgcrypt. Use blake3 to compute the cache key.
  * cpuset: don't clobber parent cgroup value when writing the cpuset value.
  * linux: force umask(0). It ensures that the mknodat syscall is not affected by the umask of the calling process,
    allowing file permissions to be set as specified in the OCI configuration.
  * ebpf: do not require MEMLOCK for eBPF programs. This requirement was relaxed in Linux 5.11.
- update to 1.13:
  * src: use O_CLOEXEC for all open/openat calls
  * cgroup v1: use "max" when pids limit &lt; 0.
  * improve error message when idmap mount fails because the underlying file system has no support for it.
  * libcrun: fix compilation when building without libseccomp and libcap.
  * fix relative idmapped mount when using the custom annotation.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1709726400">- New upstream release 1.14.4
  * crun-1.14.4
- linux: fix mount of file with recursive flags.  Do not assume it is
  a directory, but check the source type.
  * crun-1.14.3
- follow up for 1.14.2.  Drop the version check for each command.
  * crun-1.14.2
- crun: drop check for OCI version.  A recent bump in the OCI runtime
  specs caused crun to fail with every config file.  Just drop the
  check since it doesn't add any value.
  * crun-1.14.1
- there was recently a security vulnerability (CVE-2024-21626) in runc
  that allowed a malicious user to chdir(2) to a /proc/*/fd entry that is
  outside the container rootfs.  While crun is not affected directly,
  harden chdir by validating that we are still inside the container
  rootfs.
- container: attempt to close all the files before execv(2).
  if we leak any fd, it prevents execv to gain access to files outside
  the container rootfs through /proc/self/fd/$fd.
- fix a regression caused by 1.14 when installing the ebpf filter on a
  kernel older than 5.11.
- cgroup, systemd: fix segfault if the resources block is not specified.</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1717070400">- New upstream release 1.15
  * fix a mount point leak under /run/crun, add a retry mechanism to unmount the directory if the removal failed with EBUSY.
  * linux: cgroups: fix potential mount leak when /sys/fs/cgroup is already mounted, causing the posthooks to not run.
  * release: build s390x binaries using musl libc.
  * features: add support for potentiallyUnsafeConfigAnnotations.
  * handlers: add option to load wasi-nn plugin for wasmedge.
  * linux: fix "harden chdir()" security measure. The previous check was not correct.
  * crun: add option --keep to the run command. When specified the container is not automatically deleted when it exits.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1725537600">- new upstream release 1.16.1
  1.16.1:
- fix a regression introduced by 1.16 where using 'rshared' rootfs mount propagation and the rootfs itself is a mountpoint.
- inherit user from original process on exec, if not overridden.
  1.16:
- build: fix build for s390x.
- linux: fix mount of special files with rro.  Open the mount target with O_PATH to prevent open(2) failures with special files like FIFOs or UNIX sockets.
- Fix sd-bus error handling for cpu quota and period props update.
- container: use relative path for rootfs if possible.  If the rootfs cannot be resolved and it is below the current working directory, only use its relative path.
- wasmedge: access container environment variables for the WasmEdge configuration.
- cgroup, systemd: use MemoryMax instead of MemoryLimit.  Fixes a warning for using an old configuration name.
- cgroup, systemd: improve checks for sd_bus_message_append errors</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726056000">- update to 1.17:
  * Add --log-level option. It accepts error, warning and error.
  * Add debug logs for container creation.
  * Fix double-free in crun exec code that could lead to a crash.
  * Allow passing an ID to the journald log driver.
  * Report "executable not found" errors after tty has been setup.
  * Do not treat EPIPE from hooks as an error.
  * Make sure DefaultDependencies is correctly set in the systemd scope.
  * Improve the error message when the container process is not found.
  * Improve error handling for the mnt namespace restoration.
  * Fix error handling for getpwuid_r, recvfrom and libcrun_kill_linux.
  * Fix handling of device paths with trailing slashes.
- add url for keyring
- enable leap by disabling wasmedge (not packaged for leap)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to crun v1.18. Upstream changelog is available from
  &lt;https://github.com/containers/crun/releases/tag/1.18&gt;
- Remove URL from crun.keyring source declaration. If the Ubuntu keyservers
  update their server software or some other minor change causes the output of
  the key to change (such as the maintainer updating their key expiry), we will
  end up with build failures despite the key still being a totally valid key to
  do verifications with. This also matches how keyring files are managed for
  most packages.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1730808000">- Update to crun v1.18.2 Upstream changelog is available from
  &lt;https://github.com/containers/crun/releases/tag/1.18.2&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733832000">- Update crun.keyring to point to primary key. The original packaging of
  crun.keyring used the subkey 0xAF60FCA3CDAA6DEAD157EA3A67E38F7A8BA21772 as
  the key to verify against, rather than the primary key
  0xAC404C1C0BF735C63FF4D562263D6DF2E163E1EA. If/when upstream rotates their
  signing keys, the old key verification would start to fail.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1736251200">- Update to 1.19.1
  * linux: fix a hang if there are no reads from the tty. Use non blocking sockets to read and write from the tty so that the "crun exec" process doesn't hang when the terminal is not consuming any data.
  * linux: remove the workaround needed to mount a cgroup on top of another cgroup mount. The workaround had the disadvantage to temporarily leak a mount on the host. The alternative that is currently used is to mount a temporary tmpfs between the twoo cgroup mounts.
- Update to 1.19
  * wasm: add new handler wamr.
  * criu: allow passing network lock method to libcriu.
  * linux: honor exec cpu affinity mask.
  * build: fix build with musl libc.
  * crun: use mount API to self-clone.
  * cgroup, systemd: do not override devices on update. If the "update" request has no device block configured, do not reset the previously configuration.
  * cgroup: handle case where cgroup v1 freezer is disabled. On systems without the freezer controller, containers were mistakenly reported as paused.
  * cgroup: do not stop process on exec. The cpu mask is configured on the systemd scope, the previous workaround to stop the container until the cgroup is fully configured is no longer needed.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1739275200">- Update to 1.20
  * krun: fix CVE-2025-24965. The .krun_config.json file could be created outside of the container rootfs.
  * cgroup: reverted the removal of tun/tap from the default allow list, this was done in crun-1.5. The tun/tap device is now added by default again.
  * CRIU: do not set network_lock unless explicitly specified.
  * status: disallow container names containing slashes in their name.
  * linux: Improved error message when failing to set the net.ipv4.ping_group_range sysctl.
  * scheduler: Ignore ENOSYS errors when resetting the CPU affinity mask.
  * linux: return a better error message when pidfd_open fails with EINVAL.
  * cgroup: display the absolute path to cgroup.controllers when a controller is unavailable.
  * exec: always call setsid. Now processes created through exec get the correct process group id.</changelog>
</package>
<package pkgid="58d773f96476d9b9ac2b06baf7688ecc3ffa07306e4e5a5f49d37a757366656b" name="crun" arch="src">
  <version epoch="0" ver="1.20" rel="bp156.2.3.1"/>
  <changelog author="Niels Abspoel &lt;aboe76@gmail.com&gt;" date="1677585600">- Update to 1.8.1
  * linux: idmapped mounts expect the same configuration as
    the user namespace mappings. Before they were expecting the inverted
    mapping. It is a breaking change, but the behavior was aligned
    to what runc will do as well.
  * krun: always allow /dev/kvm in the cgroup configuration.
  * handlers: disable exec for handlers that do not support it.
  * selinux: allow setting fscontext using a custom annotation.
  * cgroup: reset systemd unit if start fails.
  * cgroup: rmdir the entire systemd scope. It fixes a leak on cgroupv1.
  * cgroup: always delete the cgroup on errors.
    On some errors it could have been leaked before.
- changes from 1.8
  * linux: precreate devices on the host.
  * cgroup: support cpuset mounted with noprefix.
  * linux: mount the source cgroup if cgroupns=host.
  * libcrun: don't clone self from read-only mount.
  * build: fix build without dlfcn.h.
  * linux: set PR_SET_DUMPABLE.
  * utils: fix applying AppArmor profile.
  * linux: write setgroups=deny when mapping a single uid/gid.
  * cgroup: fix enter cgroupv1 mount on RHEL 7.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680004800">- update to 1.8.3:
  * update: initialize the rt limits only on cgroup v1.
  * lua bindings for libcrun.
  * wasmedge: add current directory to preopen paths.
  * linux: inherit parent mount flags when making a path masked.
  * libcrun: custom annotation to set the scheduler for the
    container process.
  * cgroup: fallback to blkio.bfq files if blkio is not available
    on cgroup v1.
  * cgroup: initialize rt limits when using systemd.
  * tty: chown the tty to the exec user instead of the user
    specified to create the container.
  * cgroup: fallback to create cgroupfs as sibling of the current
    cgroup if there is none specified and it cannot be created in
    the root cgroup.
- add keyring for GPG validation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1686744000">- Update to 1.8.5:
  * scheduler: use definition from the OCI configuration file
    instead of the custom label that is now dropped and not
    supported anymore.
  * cgroup: fix creating cgroup under "domain threaded".
  * cgroup, systemd: set the memory limit on the system scope.
  * restore tty settings from the correct file descriptor.  It was
    previously restoring the settings from the wrong file
    descriptor causing the tty settings  to be changed on the
    calling terminal.
  * criu: check if the criu_join_ns_add function exists.
    Fix a segfault with new versions of CRIU.
  * linux: do not precreate devs with euid &gt; 0.  Fix creating
    devices when running the OCI runtime as non root user.
  * linux: improve PID detection on systems that lack pidfd.
    While there is still a window of time that the PID could be
    recycled, now it is now reduced to a minimum.
  * criu: fix memory leak.
  * logging: improve error message when dlopen fails.
- Changes from 1.8.4:
  * drop custom annotation to set the time namespace and use
    the OCI specs instead.
  * cgroup: workaround cpu quota/period issue with v1.  Sometimes
    setting CPU quota period fails when a new period is lower,
    and a parent cgroup has CPU quota limit set.
  * cgroup: fix set quota to -1 on cgroup v1.
  * criu: drop loading unused functions.</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1692014400">- Update to 1.8.6:
  * crun: new command "crun features".
  * linux: fix handling of idmapped mounts when the container joins an
    existing PID namespace.
  * linux: support io_priority from the OCI specs.
  * linux: handle correctly the case where the status file is not written
    yet for a container.
  * crun: fix segfault for "ps" when the container is not using cgroups.
  * cgroup: allow setting swap to 0.</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1693915200">- Enable WasmEdge support to run Wasm compat containers.</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1694606400">- Update to 1.9:
  * linux: support arbitrary idmapped mounts.
  * linux: add support for "ridmap" mount option to support recursive
    idmapped mounts.
  * crun delete: call systemd's reset-failed.
  * linux: fix check for oom_score_adj.
  * features: Support mountExtensions.
  * linux: correctly handle unknown signal string when it doesn't start with
    a digit.
  * linux: do not attempt to join again already joined namespace.
  * wasmer: use latest wasix API.</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1697025600">- Add crun-wasm symlink for platform 'wasi/wasm'</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1697112000">- New upstream release 1.9.2:
  * cgroup: reset the inherited cpu affinity after moving to cgroup. Old kernels
    do that automatically, but new kernels remember the affinity that was set
    before the cgroup move, so we need to reset it in order to honor the cpuset
    configuration.
- New upstream release 1.9.1:
  * utils: ignore ENOTSUP when chmod a symlink. It fixes a problem on Linux 6.6
    that always refuses chmod on a symlink.
  * build: fix build on CentOS 7
  * linux: add new fallback when mount fails with EBUSY, so that there is not an
    additional tmpfs mount if not needed.
  * utils: improve error message when a directory cannot be created as a
    component of the path is already existing as a non directory.
- Only build with wasmedge on x86_64 &amp; aarch64</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699272000">- update to 1.11.1:
  * force a remount operation with bind mounts from the host to
    correctly set all the mount flags.
  * cgroup: honor cpu burst.
  * systemd: set CPUQuota and CPUPeriod on the scope cgroup.
  * linux: append tmpfs mode if missing for mounts.  This is the
    same behavior of runc.
  * cgroup: always use the user session for rootless.
  * support for Intel Resource Director Technology (RDT).
  * new mount option "copy-symlink".  When provided for a mount,
    if the source is a symlink, then it is copied in the container
    instead of attempting a mount.
  * linux: open mounts before setgroups if in a userns.  This
    solves a problem where a directory that was previously
    accessible to the user, become inaccessible after setgroups
    causing the bind mount to fail.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1701432000">- New upstream release 1.12:
  * add new WebAssembly handler: spin.
  * systemd: fallback to system bus if session bus is not available.
  * configure the cpu rt and cpuset controllers before joining them to
    avoid running temporarily the workload on the wrong cpus.
  * preconfigure the cpuset with required resources instead of using the
    parent's set.  This prevents needless churn in the kernel as it
    tracks which CPUs have load balancing disabled.
  * try attr/&lt;lsm&gt;/* before the attr/* files.  Writes to the attr/*
    files may fail if apparmor is not the first "major" LSM in the list
    of loaded LSMs (e.g. lsm=apparmor,bpf vs lsm=bpf,apparmor).
- New upstream release 1.11.2:
  * fix a regression caused by 1.11.1 where the process crashes if there
    are no CPU limits configured on cgroup v1. (bsc#1217590)
  * fix error code check for the ptsname_r function.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706356800">- update to 1.14:
  * build: drop dependency on libgcrypt. Use blake3 to compute the cache key.
  * cpuset: don't clobber parent cgroup value when writing the cpuset value.
  * linux: force umask(0). It ensures that the mknodat syscall is not affected by the umask of the calling process,
    allowing file permissions to be set as specified in the OCI configuration.
  * ebpf: do not require MEMLOCK for eBPF programs. This requirement was relaxed in Linux 5.11.
- update to 1.13:
  * src: use O_CLOEXEC for all open/openat calls
  * cgroup v1: use "max" when pids limit &lt; 0.
  * improve error message when idmap mount fails because the underlying file system has no support for it.
  * libcrun: fix compilation when building without libseccomp and libcap.
  * fix relative idmapped mount when using the custom annotation.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1709726400">- New upstream release 1.14.4
  * crun-1.14.4
- linux: fix mount of file with recursive flags.  Do not assume it is
  a directory, but check the source type.
  * crun-1.14.3
- follow up for 1.14.2.  Drop the version check for each command.
  * crun-1.14.2
- crun: drop check for OCI version.  A recent bump in the OCI runtime
  specs caused crun to fail with every config file.  Just drop the
  check since it doesn't add any value.
  * crun-1.14.1
- there was recently a security vulnerability (CVE-2024-21626) in runc
  that allowed a malicious user to chdir(2) to a /proc/*/fd entry that is
  outside the container rootfs.  While crun is not affected directly,
  harden chdir by validating that we are still inside the container
  rootfs.
- container: attempt to close all the files before execv(2).
  if we leak any fd, it prevents execv to gain access to files outside
  the container rootfs through /proc/self/fd/$fd.
- fix a regression caused by 1.14 when installing the ebpf filter on a
  kernel older than 5.11.
- cgroup, systemd: fix segfault if the resources block is not specified.</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1717070400">- New upstream release 1.15
  * fix a mount point leak under /run/crun, add a retry mechanism to unmount the directory if the removal failed with EBUSY.
  * linux: cgroups: fix potential mount leak when /sys/fs/cgroup is already mounted, causing the posthooks to not run.
  * release: build s390x binaries using musl libc.
  * features: add support for potentiallyUnsafeConfigAnnotations.
  * handlers: add option to load wasi-nn plugin for wasmedge.
  * linux: fix "harden chdir()" security measure. The previous check was not correct.
  * crun: add option --keep to the run command. When specified the container is not automatically deleted when it exits.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1725537600">- new upstream release 1.16.1
  1.16.1:
- fix a regression introduced by 1.16 where using 'rshared' rootfs mount propagation and the rootfs itself is a mountpoint.
- inherit user from original process on exec, if not overridden.
  1.16:
- build: fix build for s390x.
- linux: fix mount of special files with rro.  Open the mount target with O_PATH to prevent open(2) failures with special files like FIFOs or UNIX sockets.
- Fix sd-bus error handling for cpu quota and period props update.
- container: use relative path for rootfs if possible.  If the rootfs cannot be resolved and it is below the current working directory, only use its relative path.
- wasmedge: access container environment variables for the WasmEdge configuration.
- cgroup, systemd: use MemoryMax instead of MemoryLimit.  Fixes a warning for using an old configuration name.
- cgroup, systemd: improve checks for sd_bus_message_append errors</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726056000">- update to 1.17:
  * Add --log-level option. It accepts error, warning and error.
  * Add debug logs for container creation.
  * Fix double-free in crun exec code that could lead to a crash.
  * Allow passing an ID to the journald log driver.
  * Report "executable not found" errors after tty has been setup.
  * Do not treat EPIPE from hooks as an error.
  * Make sure DefaultDependencies is correctly set in the systemd scope.
  * Improve the error message when the container process is not found.
  * Improve error handling for the mnt namespace restoration.
  * Fix error handling for getpwuid_r, recvfrom and libcrun_kill_linux.
  * Fix handling of device paths with trailing slashes.
- add url for keyring
- enable leap by disabling wasmedge (not packaged for leap)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to crun v1.18. Upstream changelog is available from
  &lt;https://github.com/containers/crun/releases/tag/1.18&gt;
- Remove URL from crun.keyring source declaration. If the Ubuntu keyservers
  update their server software or some other minor change causes the output of
  the key to change (such as the maintainer updating their key expiry), we will
  end up with build failures despite the key still being a totally valid key to
  do verifications with. This also matches how keyring files are managed for
  most packages.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1730808000">- Update to crun v1.18.2 Upstream changelog is available from
  &lt;https://github.com/containers/crun/releases/tag/1.18.2&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733832000">- Update crun.keyring to point to primary key. The original packaging of
  crun.keyring used the subkey 0xAF60FCA3CDAA6DEAD157EA3A67E38F7A8BA21772 as
  the key to verify against, rather than the primary key
  0xAC404C1C0BF735C63FF4D562263D6DF2E163E1EA. If/when upstream rotates their
  signing keys, the old key verification would start to fail.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1736251200">- Update to 1.19.1
  * linux: fix a hang if there are no reads from the tty. Use non blocking sockets to read and write from the tty so that the "crun exec" process doesn't hang when the terminal is not consuming any data.
  * linux: remove the workaround needed to mount a cgroup on top of another cgroup mount. The workaround had the disadvantage to temporarily leak a mount on the host. The alternative that is currently used is to mount a temporary tmpfs between the twoo cgroup mounts.
- Update to 1.19
  * wasm: add new handler wamr.
  * criu: allow passing network lock method to libcriu.
  * linux: honor exec cpu affinity mask.
  * build: fix build with musl libc.
  * crun: use mount API to self-clone.
  * cgroup, systemd: do not override devices on update. If the "update" request has no device block configured, do not reset the previously configuration.
  * cgroup: handle case where cgroup v1 freezer is disabled. On systems without the freezer controller, containers were mistakenly reported as paused.
  * cgroup: do not stop process on exec. The cpu mask is configured on the systemd scope, the previous workaround to stop the container until the cgroup is fully configured is no longer needed.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1739275200">- Update to 1.20
  * krun: fix CVE-2025-24965. The .krun_config.json file could be created outside of the container rootfs.
  * cgroup: reverted the removal of tun/tap from the default allow list, this was done in crun-1.5. The tun/tap device is now added by default again.
  * CRIU: do not set network_lock unless explicitly specified.
  * status: disallow container names containing slashes in their name.
  * linux: Improved error message when failing to set the net.ipv4.ping_group_range sysctl.
  * scheduler: Ignore ENOSYS errors when resetting the CPU affinity mask.
  * linux: return a better error message when pidfd_open fails with EINVAL.
  * cgroup: display the absolute path to cgroup.controllers when a controller is unavailable.
  * exec: always call setsid. Now processes created through exec get the correct process group id.</changelog>
</package>
<package pkgid="79cfd0a214747df36ce5c78e501b2a850a7174de18bf7dffbd5c2d83e0a5afa0" name="crun" arch="x86_64">
  <version epoch="0" ver="1.20" rel="bp156.2.3.1"/>
  <changelog author="Niels Abspoel &lt;aboe76@gmail.com&gt;" date="1677585600">- Update to 1.8.1
  * linux: idmapped mounts expect the same configuration as
    the user namespace mappings. Before they were expecting the inverted
    mapping. It is a breaking change, but the behavior was aligned
    to what runc will do as well.
  * krun: always allow /dev/kvm in the cgroup configuration.
  * handlers: disable exec for handlers that do not support it.
  * selinux: allow setting fscontext using a custom annotation.
  * cgroup: reset systemd unit if start fails.
  * cgroup: rmdir the entire systemd scope. It fixes a leak on cgroupv1.
  * cgroup: always delete the cgroup on errors.
    On some errors it could have been leaked before.
- changes from 1.8
  * linux: precreate devices on the host.
  * cgroup: support cpuset mounted with noprefix.
  * linux: mount the source cgroup if cgroupns=host.
  * libcrun: don't clone self from read-only mount.
  * build: fix build without dlfcn.h.
  * linux: set PR_SET_DUMPABLE.
  * utils: fix applying AppArmor profile.
  * linux: write setgroups=deny when mapping a single uid/gid.
  * cgroup: fix enter cgroupv1 mount on RHEL 7.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680004800">- update to 1.8.3:
  * update: initialize the rt limits only on cgroup v1.
  * lua bindings for libcrun.
  * wasmedge: add current directory to preopen paths.
  * linux: inherit parent mount flags when making a path masked.
  * libcrun: custom annotation to set the scheduler for the
    container process.
  * cgroup: fallback to blkio.bfq files if blkio is not available
    on cgroup v1.
  * cgroup: initialize rt limits when using systemd.
  * tty: chown the tty to the exec user instead of the user
    specified to create the container.
  * cgroup: fallback to create cgroupfs as sibling of the current
    cgroup if there is none specified and it cannot be created in
    the root cgroup.
- add keyring for GPG validation</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1686744000">- Update to 1.8.5:
  * scheduler: use definition from the OCI configuration file
    instead of the custom label that is now dropped and not
    supported anymore.
  * cgroup: fix creating cgroup under "domain threaded".
  * cgroup, systemd: set the memory limit on the system scope.
  * restore tty settings from the correct file descriptor.  It was
    previously restoring the settings from the wrong file
    descriptor causing the tty settings  to be changed on the
    calling terminal.
  * criu: check if the criu_join_ns_add function exists.
    Fix a segfault with new versions of CRIU.
  * linux: do not precreate devs with euid &gt; 0.  Fix creating
    devices when running the OCI runtime as non root user.
  * linux: improve PID detection on systems that lack pidfd.
    While there is still a window of time that the PID could be
    recycled, now it is now reduced to a minimum.
  * criu: fix memory leak.
  * logging: improve error message when dlopen fails.
- Changes from 1.8.4:
  * drop custom annotation to set the time namespace and use
    the OCI specs instead.
  * cgroup: workaround cpu quota/period issue with v1.  Sometimes
    setting CPU quota period fails when a new period is lower,
    and a parent cgroup has CPU quota limit set.
  * cgroup: fix set quota to -1 on cgroup v1.
  * criu: drop loading unused functions.</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1692014400">- Update to 1.8.6:
  * crun: new command "crun features".
  * linux: fix handling of idmapped mounts when the container joins an
    existing PID namespace.
  * linux: support io_priority from the OCI specs.
  * linux: handle correctly the case where the status file is not written
    yet for a container.
  * crun: fix segfault for "ps" when the container is not using cgroups.
  * cgroup: allow setting swap to 0.</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1693915200">- Enable WasmEdge support to run Wasm compat containers.</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1694606400">- Update to 1.9:
  * linux: support arbitrary idmapped mounts.
  * linux: add support for "ridmap" mount option to support recursive
    idmapped mounts.
  * crun delete: call systemd's reset-failed.
  * linux: fix check for oom_score_adj.
  * features: Support mountExtensions.
  * linux: correctly handle unknown signal string when it doesn't start with
    a digit.
  * linux: do not attempt to join again already joined namespace.
  * wasmer: use latest wasix API.</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1697025600">- Add crun-wasm symlink for platform 'wasi/wasm'</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1697112000">- New upstream release 1.9.2:
  * cgroup: reset the inherited cpu affinity after moving to cgroup. Old kernels
    do that automatically, but new kernels remember the affinity that was set
    before the cgroup move, so we need to reset it in order to honor the cpuset
    configuration.
- New upstream release 1.9.1:
  * utils: ignore ENOTSUP when chmod a symlink. It fixes a problem on Linux 6.6
    that always refuses chmod on a symlink.
  * build: fix build on CentOS 7
  * linux: add new fallback when mount fails with EBUSY, so that there is not an
    additional tmpfs mount if not needed.
  * utils: improve error message when a directory cannot be created as a
    component of the path is already existing as a non directory.
- Only build with wasmedge on x86_64 &amp; aarch64</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699272000">- update to 1.11.1:
  * force a remount operation with bind mounts from the host to
    correctly set all the mount flags.
  * cgroup: honor cpu burst.
  * systemd: set CPUQuota and CPUPeriod on the scope cgroup.
  * linux: append tmpfs mode if missing for mounts.  This is the
    same behavior of runc.
  * cgroup: always use the user session for rootless.
  * support for Intel Resource Director Technology (RDT).
  * new mount option "copy-symlink".  When provided for a mount,
    if the source is a symlink, then it is copied in the container
    instead of attempting a mount.
  * linux: open mounts before setgroups if in a userns.  This
    solves a problem where a directory that was previously
    accessible to the user, become inaccessible after setgroups
    causing the bind mount to fail.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1701432000">- New upstream release 1.12:
  * add new WebAssembly handler: spin.
  * systemd: fallback to system bus if session bus is not available.
  * configure the cpu rt and cpuset controllers before joining them to
    avoid running temporarily the workload on the wrong cpus.
  * preconfigure the cpuset with required resources instead of using the
    parent's set.  This prevents needless churn in the kernel as it
    tracks which CPUs have load balancing disabled.
  * try attr/&lt;lsm&gt;/* before the attr/* files.  Writes to the attr/*
    files may fail if apparmor is not the first "major" LSM in the list
    of loaded LSMs (e.g. lsm=apparmor,bpf vs lsm=bpf,apparmor).
- New upstream release 1.11.2:
  * fix a regression caused by 1.11.1 where the process crashes if there
    are no CPU limits configured on cgroup v1. (bsc#1217590)
  * fix error code check for the ptsname_r function.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706356800">- update to 1.14:
  * build: drop dependency on libgcrypt. Use blake3 to compute the cache key.
  * cpuset: don't clobber parent cgroup value when writing the cpuset value.
  * linux: force umask(0). It ensures that the mknodat syscall is not affected by the umask of the calling process,
    allowing file permissions to be set as specified in the OCI configuration.
  * ebpf: do not require MEMLOCK for eBPF programs. This requirement was relaxed in Linux 5.11.
- update to 1.13:
  * src: use O_CLOEXEC for all open/openat calls
  * cgroup v1: use "max" when pids limit &lt; 0.
  * improve error message when idmap mount fails because the underlying file system has no support for it.
  * libcrun: fix compilation when building without libseccomp and libcap.
  * fix relative idmapped mount when using the custom annotation.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1709726400">- New upstream release 1.14.4
  * crun-1.14.4
- linux: fix mount of file with recursive flags.  Do not assume it is
  a directory, but check the source type.
  * crun-1.14.3
- follow up for 1.14.2.  Drop the version check for each command.
  * crun-1.14.2
- crun: drop check for OCI version.  A recent bump in the OCI runtime
  specs caused crun to fail with every config file.  Just drop the
  check since it doesn't add any value.
  * crun-1.14.1
- there was recently a security vulnerability (CVE-2024-21626) in runc
  that allowed a malicious user to chdir(2) to a /proc/*/fd entry that is
  outside the container rootfs.  While crun is not affected directly,
  harden chdir by validating that we are still inside the container
  rootfs.
- container: attempt to close all the files before execv(2).
  if we leak any fd, it prevents execv to gain access to files outside
  the container rootfs through /proc/self/fd/$fd.
- fix a regression caused by 1.14 when installing the ebpf filter on a
  kernel older than 5.11.
- cgroup, systemd: fix segfault if the resources block is not specified.</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1717070400">- New upstream release 1.15
  * fix a mount point leak under /run/crun, add a retry mechanism to unmount the directory if the removal failed with EBUSY.
  * linux: cgroups: fix potential mount leak when /sys/fs/cgroup is already mounted, causing the posthooks to not run.
  * release: build s390x binaries using musl libc.
  * features: add support for potentiallyUnsafeConfigAnnotations.
  * handlers: add option to load wasi-nn plugin for wasmedge.
  * linux: fix "harden chdir()" security measure. The previous check was not correct.
  * crun: add option --keep to the run command. When specified the container is not automatically deleted when it exits.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1725537600">- new upstream release 1.16.1
  1.16.1:
- fix a regression introduced by 1.16 where using 'rshared' rootfs mount propagation and the rootfs itself is a mountpoint.
- inherit user from original process on exec, if not overridden.
  1.16:
- build: fix build for s390x.
- linux: fix mount of special files with rro.  Open the mount target with O_PATH to prevent open(2) failures with special files like FIFOs or UNIX sockets.
- Fix sd-bus error handling for cpu quota and period props update.
- container: use relative path for rootfs if possible.  If the rootfs cannot be resolved and it is below the current working directory, only use its relative path.
- wasmedge: access container environment variables for the WasmEdge configuration.
- cgroup, systemd: use MemoryMax instead of MemoryLimit.  Fixes a warning for using an old configuration name.
- cgroup, systemd: improve checks for sd_bus_message_append errors</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726056000">- update to 1.17:
  * Add --log-level option. It accepts error, warning and error.
  * Add debug logs for container creation.
  * Fix double-free in crun exec code that could lead to a crash.
  * Allow passing an ID to the journald log driver.
  * Report "executable not found" errors after tty has been setup.
  * Do not treat EPIPE from hooks as an error.
  * Make sure DefaultDependencies is correctly set in the systemd scope.
  * Improve the error message when the container process is not found.
  * Improve error handling for the mnt namespace restoration.
  * Fix error handling for getpwuid_r, recvfrom and libcrun_kill_linux.
  * Fix handling of device paths with trailing slashes.
- add url for keyring
- enable leap by disabling wasmedge (not packaged for leap)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1730116800">- Update to crun v1.18. Upstream changelog is available from
  &lt;https://github.com/containers/crun/releases/tag/1.18&gt;
- Remove URL from crun.keyring source declaration. If the Ubuntu keyservers
  update their server software or some other minor change causes the output of
  the key to change (such as the maintainer updating their key expiry), we will
  end up with build failures despite the key still being a totally valid key to
  do verifications with. This also matches how keyring files are managed for
  most packages.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1730808000">- Update to crun v1.18.2 Upstream changelog is available from
  &lt;https://github.com/containers/crun/releases/tag/1.18.2&gt;</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1733832000">- Update crun.keyring to point to primary key. The original packaging of
  crun.keyring used the subkey 0xAF60FCA3CDAA6DEAD157EA3A67E38F7A8BA21772 as
  the key to verify against, rather than the primary key
  0xAC404C1C0BF735C63FF4D562263D6DF2E163E1EA. If/when upstream rotates their
  signing keys, the old key verification would start to fail.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1736251200">- Update to 1.19.1
  * linux: fix a hang if there are no reads from the tty. Use non blocking sockets to read and write from the tty so that the "crun exec" process doesn't hang when the terminal is not consuming any data.
  * linux: remove the workaround needed to mount a cgroup on top of another cgroup mount. The workaround had the disadvantage to temporarily leak a mount on the host. The alternative that is currently used is to mount a temporary tmpfs between the twoo cgroup mounts.
- Update to 1.19
  * wasm: add new handler wamr.
  * criu: allow passing network lock method to libcriu.
  * linux: honor exec cpu affinity mask.
  * build: fix build with musl libc.
  * crun: use mount API to self-clone.
  * cgroup, systemd: do not override devices on update. If the "update" request has no device block configured, do not reset the previously configuration.
  * cgroup: handle case where cgroup v1 freezer is disabled. On systems without the freezer controller, containers were mistakenly reported as paused.
  * cgroup: do not stop process on exec. The cpu mask is configured on the systemd scope, the previous workaround to stop the container until the cgroup is fully configured is no longer needed.</changelog>
  <changelog author="Madhankumar Chellamuthu &lt;madhankumar.chellamuthu@suse.com&gt;" date="1739275200">- Update to 1.20
  * krun: fix CVE-2025-24965. The .krun_config.json file could be created outside of the container rootfs.
  * cgroup: reverted the removal of tun/tap from the default allow list, this was done in crun-1.5. The tun/tap device is now added by default again.
  * CRIU: do not set network_lock unless explicitly specified.
  * status: disallow container names containing slashes in their name.
  * linux: Improved error message when failing to set the net.ipv4.ping_group_range sysctl.
  * scheduler: Ignore ENOSYS errors when resetting the CPU affinity mask.
  * linux: return a better error message when pidfd_open fails with EINVAL.
  * cgroup: display the absolute path to cgroup.controllers when a controller is unavailable.
  * exec: always call setsid. Now processes created through exec get the correct process group id.</changelog>
</package>
<package pkgid="86d7bd2bfbd44d0591a67be4649b1ce74723fefaaa101379d30f06c4279f583e" name="dante" arch="aarch64">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="3252d82771d766aaf953afe239572c3df62222fa0c9a061d263a3999561e5363" name="dante" arch="ppc64le">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="4c3c8ca248482b699129f9ecf586ab47e7ce10308c3c72daa9dd19e26402abda" name="dante" arch="s390x">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="abfa4b4635ad1f892dbdf8012ac904c519234314275ffb53b38a0df4ece17d5b" name="dante" arch="src">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1308052800">- verbose build
- fix most rpmlint warnings
- update to 1.3.0:
  * resource requirements have been significantly reduced
  * performance has also been improved
  * several new features and bug fixes were made</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1318248000">- Implement shlib policy (libsocks0)
- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="tabraham@novell.com" date="1326369600">- fixed 64bit-portability-issue
- fixed some man page format problems
- update to 1.3.2
  * Part of possible resource optimization indicated in section 4.4
    of the Dante 1.3.1 performance evaluation report
    (http://www.inet.no/dante/doc/1.3.x/dante_performance_1.3.1.pdf)
    has been implemented: scheduling new clients to the Dante process
    with fewest free slots available.
  * If the proxy server (socks, http, or upnp) is configured via
    environment variables, don't attempt to also parse any socks.conf
    files
  * The "HTTP_PROXY" environment variable has been renamed to
    "HTTP_CONNECT_PROXY" to avoid conflict with HTTP proxies that do
    not support the HTTP CONNECT request
  * Fixed an unintended change to ACL semantics regarding bind requests
    in Dante 1.2.3 noted by Ralf Wenk
    &lt;Ralf.Wenk@hs-karlsruhe.de.example.com&gt; many thanks
  * Fixed a bug regarding handling of cases where the ulimit for max
    number of files is unlimited. Reported and analyzed by Ralf Wenk
    &lt;Ralf.Wenk@hs-karlsruhe.de.example.com&gt;
- changes in 1.3.1
  * Fixed a bug regarding handling of socks clients that do not fillow
    the spec and start sending traffic data before request has been
    granted.
  * Fixed an error related to ACL on UDP-packets. If a given SOCKS
    client was allowed to send some UDP packets, in some cases
    packets from the same SOCKS client that should have been blocked
    were allowed.</changelog>
  <changelog author="idonmez@suse.com" date="1356955200">- Add dante-glibc-2.17.patch to use getauxval() function instead
  of private __libc_enable_secure.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382875200">- Replace sysvinit with systemd
  Package build only for Factory; no need to keep sysvinit support
  alive
- Replace hard paths with RPM macros</changelog>
  <changelog author="tabraham@suse.com" date="1387195200">- update to dante-1.4.0
  o Older syntax for setting the socket buffer sizes via
  socket.recvbuf.udp, socket.sendbuf.udp, socket.recvbuf.tcp and
  socket.sendbuf.tcp options have been deprecated and replaced with
  the more general API for setting socket options.
  "socket.recvbuf.udp" can now be set by "&lt;interface-side&gt;.udp.so_rcvbuf"
  "socket.sendbuf.udp" can now be set by "&lt;interface-side&gt;.udp.so_sndbuf"
  "socket.recvbuf.tcp" can now be set by "&lt;interface-side&gt;.tcp.so_rcvbuf"
  "socket.sendbuf.tcp" can now be set by "&lt;interface-side&gt;.tcp.so_sndbuf"
  &lt;interface-side&gt; refers to either "internal", for Dante's internal
  interface(s), or "external", for Dante's external interface(s).
  o socks-rules now require a "socks" prefix (like client-rules require a
  "client" prefix), and the socks "method" keyword has been renamed to
  "socksmethod".
  o The "socksmethod" keyword can now be set in client-rules too.  It
  is used to override the default preference for what socksmethod to
  select for which clients addresses, making it possible to by
  default e.g., have the preference "gssapi username none", but for
  some client-ranges have a different preference, e.g., "none
  username gssapi".
  Normally there is no need to use set this keyword in a client-rule.
  o Fallback to direct (non-proxy) routes now defaults to off in the client,
  as well as in the server.
  To keep previous behaviour in the client, with direct route fallback
  for destinations with no matching route, set SOCKS_DIRECTROUTE_FALLBACK
  to "yes" in the environment, or ./configure with --enable-drt-fallback.
  Direct fallback is enabled if there are no routes configured (as is
  usually the case in a server configuration), and disabled otherwise.
  o IPv6 is now supported in the server.
  Standard IPv6 address syntax is used for addresses, with the addition
  of the special address "0/0" used for matching both all IPv4 and
  all IPv6 addresses.
  o New "monitor" object added.  Syntax is similar to rules and routes,
  but instead of applying to individual sessions, it applies to all
  sessions currently matching the addresses to monitor.
  This can be used for monitoring network anomalies related to too
  little data being transferred or too many disconnects occurring,
  triggering alarms if detected.
  o Possibility to configure system errors and DNS-errors for
  special logging in certain cases (when connecting and performing
  hostname resolving).
  o More aggressive regarding how many processes to fork when starting
  and how many processes to reserve for future clients.
  o Added new log keyword: "tcpinfo".  Used to report more extensive
  statistics about sessions, including TCP_INFO on supported platforms.
  o SIGINFO/SIGUSR1 output is now logged at level "info" instead of level
  "debug".
  o SIGHUP code rewritten.  Should function considerably better in
  environments were SIGHUP is, for whatever reason, sent an excessive
  amount of times every second.
  o Default for the maximum number of clients an i/o process can handle has
  been increased from 8 to 32.
  o Improved UDP compatibility by sending appropriate ICMP unreachable
  errors to clients and targets, if running with the appropriate
  privileges (typically, root is required for this).
  Makes it possible for a client or target to be notified that a UDP
  packet it wanted the Dante server to forward was not forwarded.
  o Reduction in memory consumption at the expense of allocating extra
  memory dynamically in the very rare, perhaps non-existing, cases
  where the extra memory is needed.
  o The default timeout for TCP i/o (timeout.io.tcp) has been changed from
  84000 to 0.  0 means use the kernels default, which in most cases will
  mean no timeout.  See UPGRADE for more information.
  o The session module has been merged with the mainstream Dante code,
  and has also been extended to support the following new features:
  - connection throttling (number of new sessions accepted per second).
  - state-keys.
    Two state keys are currently supported:
  - per-IP address.
  - per-hostid (hostid is supported on certain platforms, with
    certain kernel patches, with certain clients).
  The syntax has also changed (see UPGRADE).
  See the manual for more information about the new features.
  o Code used for finding the correct outgoing address to bind when
  external.rotation is set to "route" replaced with much simpler,
  but hopefully equally (or better) functioning code.
  Idea taken from Quagga.
  o Use getpassphrase() rather then getpass() to obtain password for
  username authentication when available. Avoids 9 character limit
  on Solaris.  Suggested by Albert Fluegel &lt;af@muc.de.example.com&gt;
  o Use sqrt() rather than sqrtl() in stddev calculation, as sqrtl() is not
  available on some platforms (such as FreeBSD 7.2).  Problem reported
  by Rudolf Polzer &lt;rpolzer@one-it.de.example.org&gt;.
  o If the authentication method used was RFC931 (ident), the username
  was not always logged when it should be.
  Reported by Gregory Charot (EVENIUM) &lt;gcharot@evenium.com.example.com&gt;.
  o Syntax checking has been improved to better detect invalid or
  likely incorrect server configurations.
  This can result in some configurations that have previously been
  accepted or accepted with warnings by Dante, to now cause an error
  on startup, preventing the Dante server from starting up until the
  configuration error has been fixed.
  o Fixed compilation on OpenBSD with compilers not supporting -Wbounded.
  Problem report and testing by
  Mikael More &lt;mikael.more@gmail.com.example.com&gt;.
  o GSSAPI "clear" is no longer enabled by default, as it is not part
  of the SOCKS GSSAPI standard per se.
  o external.rotation was not handling non-IPv4 target addresses correctly.
  Reported and diagnosed by Rudolf Polzer &lt;rpolzer@one-it.de.example.com&gt;.
  o The "--disable-libwrap" option has been renamed "--without-libwrap".
  o Fixed bug that would cause the following warning to sometimes be
  erroneously reported:
  "warning: accept(2) failed: Resource temporarily unavailable"
  o SIGINFO log information extended to include information about i/o
  buffer status and as well as UDP packet latency.
  o Real-time scheduling priority settings and CPU affinity settings made
  available in sockd.conf.
  See https://www.inet.no/dante/files/dante_realtime_preview.pdf for
  a performance analysis done in relation to these new features.
  o General API for setting socket options on sockets used by Dante
  made available in sockd.conf.
  o Support for cross compilation of client library for Android
  (system name 'arm-linux-androideabi').
  Testing and analysis by Yoav Weiss &lt;weiss.yoav@gmail.com.example.com&gt;.
  o Problem with sockd.init generation in dante.spec fixed.
  Reported by Luiz Gustavo Nascimento &lt;luizgn@gmail.com.example.com&gt;.
- refreshed patches:
    dante-1.4.0-64bit_portability.patch
    dante-1.4.0-glibc-2.17.patch
    dante-1.4.0-sockd_conf_man_format.patch
    dante-1.4.0-socksify_man_format.patch
- %{optflags} contains -grecord-gcc-switches, which causes problems for
  configure. removed optflags from CFLAGS and modified it to contain the
  rest of the options.</changelog>
  <changelog author="tabraham@suse.com" date="1387454400">- dante.spec: instead of statically defining CFLAGS, parse out
  - grecord-gcc-switches from %{optflags}, since it causes problems
  for the configure script</changelog>
  <changelog author="dvaleev@suse.com" date="1390564800">- Fix HAVE_SENDBUF_IOCTL macro
- added patches:
  * dante-1.4.0-sendbuf_macro.patch</changelog>
  <changelog author="jsegitz@novell.com" date="1400587200">- Added %pre section to call %service_add_pre</changelog>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="23429390f828b739f48a70560845a05f67042947efd4711cf3c16e28018f005a" name="dante" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="d0e9655a064da66ced32e18a2d9d4861535f933d8ae1876ef2eb28d12fd805a0" name="dante-devel" arch="aarch64">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="244ecc6a107d992ce5a03901acdf3bdc3f8d9a2a0a916f46635636386de22061" name="dante-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="1b8716ce10c7be6371505c2ad30560cb10d04b59a8134171ff5ef0ce75b191ed" name="dante-devel" arch="s390x">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="9bdd234dd911b02b89c2903a5a372edc87896487f4e0214ae3e288ee800ac803" name="dante-devel" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="e160408c08c79faea8b27e2634cdb3da8e636b6a0c17004189a8e322ca0f0f6c" name="dante-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="399d4e5c8063e1246cd88626194f7c2a47e132ff1f188fff51d9d42c8958c1c1" name="dante-server" arch="aarch64">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="00e3f1b8a78ec86e6a0fc288351cc47687df497aab72e12e6d4d12bf24199a82" name="dante-server" arch="ppc64le">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="2719d2c528c9a635962eda8fe50ff81c6a8071839a10c2fcc3a6648df1bdf04a" name="dante-server" arch="s390x">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="a6453b65c5a6d4fabf5c8d5863924f34aa00500d112562338780a02e63a9ff52" name="dante-server" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="bp156.4.3.1"/>
  <changelog author="diego.ercolani@gmail.com" date="1422619200">- reviewed the systemd init script
- added patch:
  * dante-1.4.0-sockd_conf.patch to accomplish new syntax</changelog>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1734523200">- Update to version 1.4.4
  * Fixed incorrect access control for some sockd.conf configurations
    involving socksmethod (boo#1234688, CVE-2024-54662).
- Update gcc5 fix:
  * Remove: dante-1.4.1-gcc5-fixes.patch
  * Add: dante-1.4.4-gcc5-fixes.patch</changelog>
</package>
<package pkgid="ee49dc695aed3d192a0ac0a9f9986b844cf2b290f74fe64ed43482e047538399" name="dcmtk" arch="aarch64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="e0b519d64f5031cbf4aa71e1e868a114bf2c2c678e1c330b16e888a7a355a63d" name="dcmtk" arch="i586">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="f97dbeebc0cdae41838335f06c494763165f5e51b291fd4a027db7095960ce57" name="dcmtk" arch="ppc64le">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="0704736bd0c9eb15ca5146cd269364c6d90c23902e36db535211fdbe03c9689f" name="dcmtk" arch="s390x">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="c254337c5726c332d7fbe137c89f410e834062fcd93a85ca0f3cc5fb3b9d24f7" name="dcmtk" arch="src">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="a144770df1ae53bcd7d413348f5eee4143d6fad13844adbd358ed53d2e8da287" name="dcmtk" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="40290b60bd2e623533581629b891fdcb83edbc7ee2859e1f4a19319b290e831e" name="dcmtk" arch="aarch64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="525805ebf568c445520f37298cf11f4c98b5ddff165a55cf10f95d5c78f48664" name="dcmtk" arch="i586">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="f30465f8a64334e7da82045d0b936ce4ce2a9806bc9fe82d039e8639576502ae" name="dcmtk" arch="ppc64le">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="0b461397d98831eb26604089c72c67cfb36409803891e0675203799ba5e99073" name="dcmtk" arch="s390x">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="5c1ce7adf6728259b4e853e56596eb96faebb825ae9a0ba57be133fbbad2b38d" name="dcmtk" arch="src">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="74176aa0f8798d8a29e037f97d968287d0972317e60c821374ee9079b73bbddf" name="dcmtk" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="7d43afe3b78088f350c4902264b2ef99fd61191658412b0cf0324a21bbb122a7" name="dcmtk" arch="aarch64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="d7e19307928791ca9216f5148439fd19a3cdd6999ea60ca0122cc4f1db925c8d" name="dcmtk" arch="i586">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="4b71936f8adabcdec82225776ee0c40604dd6cf42751b6d52fe750ec0e4ff8ff" name="dcmtk" arch="ppc64le">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="b127e43e5839b168ba1ef3a7516d0f52708fb6ca4a3c738db2b88600a94095ae" name="dcmtk" arch="s390x">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="b633903dd68d5c5d554de6adbc63fbf87c4dabcdaf12243ccd5f9def25f78984" name="dcmtk" arch="src">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="7a67472f5b8e480204e13d59f6a5423cb73c2f6dc4a7997efa15279c6484e4dd" name="dcmtk" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="e84b319dcb71ebcbfad0e2baf033fe955298507ab316be15bb0b66285025ab5a" name="dcmtk" arch="aarch64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="c204ae7f0570ed4a4b1b0ff2bf5ef8a47f3f98dff98f4ee79f7a2d499cace519" name="dcmtk" arch="i586">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="a179580ca74068df88c2a53537e6187a722bdd39dc58d9e69b3df2276c1dd607" name="dcmtk" arch="ppc64le">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="1535df03056fcf68cd691f3e079e40443c25c7de0e37814c0cf8577d888de6c5" name="dcmtk" arch="s390x">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="23747c9932ce3164e8c0bb5da65743941fddb0c094bd65fdbf157b4f68459459" name="dcmtk" arch="src">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="96992c98d47cbbc88e04d6dd0abde51417d30575a8f6584eb64573f7bc335cd7" name="dcmtk" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="1c39cb20ab4cbd4b3abe56d971aab50efd31d00ed214ca7027a4f9bc535450c5" name="dcmtk" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="6b8c668af3b0ac674d37edc55ceb771b8695951056227432e373321ca7ef640a" name="dcmtk" arch="i586">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="30fe50ef336b0af17ed1e41ce0df1fff2c027b26f017315ea928b4ddd4c8369c" name="dcmtk" arch="ppc64le">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="adef8e92b4650dfe766b0c7617cdf6d5b8e86918654e4c370baa639fdf099ee2" name="dcmtk" arch="s390x">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="6d127838be0efb629306e0b6b6adb159bebbb4775e157fe44480ca22efebab25" name="dcmtk" arch="src">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="e3c6056b4582ee9e4f1252a1dfcd31307b111e520eba3351a1d315cf88aab8de" name="dcmtk" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="a354bc9e5528a7774d8bbc5955f96bd52245a48147d21cac11afa3dd261ed670" name="dcmtk-devel" arch="aarch64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="cb3bc97d642a5e14e15c38087223ec065ce3ab5e947c799abf4f2aca1c04d559" name="dcmtk-devel" arch="i586">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="8558b1d07982912d2e04c48390a354ace8d3f428cd2356e6f924821f159a343e" name="dcmtk-devel" arch="ppc64le">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="e40cea092fd897f663617101cdf68327de9b01c666628a9743a9e1950b68f810" name="dcmtk-devel" arch="s390x">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="2b745144d6582de6bbd19995495a265f945aa94129651c909f3563327a6ccf2f" name="dcmtk-devel" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="0e2e8494b45e7ad602b3642ca777a038b4998a84f8aeb6e2eacfaa0364af7720" name="dcmtk-devel" arch="aarch64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="b6cdf25794609aad9cb8e9e455ca34cd3fc446a02764fdc84c3801a6329be03c" name="dcmtk-devel" arch="i586">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="67468e131504b23ef93ec85a555b2a7ddff1432ddee7de257af2767ff8cb389a" name="dcmtk-devel" arch="ppc64le">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="31b13abfaac1e0c0897fcbd1ba8474fdee334bdf8ff3ed95c86dc1c99111bd09" name="dcmtk-devel" arch="s390x">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="ee51166ca8f17d6ee709e9eee587eec690b7b30811fe07c39397bdc69eba8c33" name="dcmtk-devel" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="9d6b4d40f23d1e3e8bce48be70a2f30fe716509f67abcf54a0b3e7b0bc8754c7" name="dcmtk-devel" arch="aarch64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="592efa9184251450fa64f1a5ddcfa425507f6f1ef266ec541a413879cf1bd817" name="dcmtk-devel" arch="i586">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="44b4fbc6e6b8d6453329b0ed6bf50cad1316d3503c43ee40b50960f54232c6d2" name="dcmtk-devel" arch="ppc64le">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="f8075f08ea7f65e70f107b611686a76e53cd016b552be306a330872065750fc2" name="dcmtk-devel" arch="s390x">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="661f4a668ceadf567f07bf650604c2f85cfe60f13f0a9ea16a3c602fa8ff1cb1" name="dcmtk-devel" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="3d4e4fbdfed1d8eeaf3528e9e321b744a870177af103146498d0014fcba36928" name="dcmtk-devel" arch="aarch64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="f03edf1720ced38a67a9e850245f1ddabcc10814cb1df0eca6862d75d6e6041b" name="dcmtk-devel" arch="i586">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="07aee3053a1b5fef427bd0dd7d5726b6462d3b7e406d30bdc14e1bc76b8dd9ae" name="dcmtk-devel" arch="ppc64le">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="8dcaebf12dd75959165748b16638ff1223cda19d0efbe86045232cbd96b44fa6" name="dcmtk-devel" arch="s390x">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="bf72628a562e0aa42d24a9bb0a9b250746a1c736dac42665a4578d6b455bb586" name="dcmtk-devel" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="94fdf2fcc047e474b96dd37780a93460023b892d6272b36e58a7675e7b7b3cb0" name="dcmtk-devel" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="64ab78cd121a5a754cb3e82b5fd2f7080d24612de14e778f0106a2628cf008e9" name="dcmtk-devel" arch="i586">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="814e9b6ba99c987a565abc304920fcc20e1610335e29df7012144beca0c977bb" name="dcmtk-devel" arch="ppc64le">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="64780fa093997c7823d7affbb870d4ae40fccbe3d631f38805ed2703079a9310" name="dcmtk-devel" arch="s390x">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="0a1d27147def16cbc4fafee0a3576d51610f33a8c0d2766bbc9ffb29b3d54330" name="dcmtk-devel" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="f41326943b8c649b2e8fa5069a06427fab5673963ce9d72df4f9a577d5b27b2d" name="debhelper" arch="noarch">
  <version epoch="0" ver="13.11.5" rel="bp156.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 9.20150101
- Adapt debhelper-no-localized-manpages.patch to upstream changes
  * debhelper-9.20150101-no-localized-manpages.patch
- Remove upstreamed debhelper-findutils.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1469361600">- Update to version 9.20160709</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1615896000">- Update to version 13.3.4
- Adapt patches to new upstream version:
  * remove debhelper-9.20150101-no-localized-manpages.patch
  * add debhelper-no-localized-manpages.patch</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1634558400">- Update to version 13.4.1
  * autoscripts/*: Replace `which` with `command -v`.
  * dh_installsystemd: Only merge /lib/systemd/system into /usr
    for now.  (Closes: #992554)
  * dh_systemd_enable: Ditto.
  * autoscripts/postinst-init-nostart: Call invoke-rc.d when
    a non-empty DPKG_ROOT is used.  (Closes: #992556)
  * Replace "use v5.28" with "use v5.24" in Dh_Lib.pm.
    The change to "use v5.28" in 13.4 broke the test to distinguish 0755
    from "0755" in the reset_perm_and_owner function, breaking builds.
    Thanks Adrian Bunk and Ansgar for help isolating the problem.
  * debian/changelog: Correct bug number in the 13.4 entry.
  * dh_dwz: run in parallel across packages.  (Closes: !47)
  * Dh_Buildsystems.pm: Add bmake and mkcmake as third-party
    build systems.  (Closes: !46)
  * Dh_Buildsystems.pm: Add golang as a third-party build
    system.  (Closes: #981106)
  * autoscripts/*: Add support for DPKG_ROOT in systemd, tmpusers,
    sysusers and init related snippets.  Based on an initial patch
    from Helmut Grohne.  (Closes: #983566)
  * autoscripts/*: Reorder conditions in some scripts to avoid
    doing a redundant stat call when a script parameter can decide
    to skip it.
  * dh_gconf: Remove the command as it does nothing.
    (Closes: #908845)
  * doc/TODO: Remove reference to dh_gconf.
  * root_sequence.pm: Remove dh_gconf from root sequence and declare
    it as obsolete (causing errors from compat 14 if still referenced
    in hook targets).
  * man/po4a/po4a.cfg: Remove dh_gconf from translations.
  * AddonAPI.pm: The declare_command_obsolete command now accepts an
    "$error_compat" parameter to enable addons to choose which compat
    level that will trigger an error (though it must be minimum 13).
  * doc/PROGRAMMING: Update docs to reflect API change.
  * debhelper.pod: Document that referencing dh_gconf in hook targets
    will cause an error in compat 14.
  * dh_fixperms: Correct permissions of files beneath usr/libexec to
    be executable.  (Closes: #979401)
  * dh_installtmpfiles: Only register tmpfiles ending with ".conf" as
    tmpfiles in /usr/lib/tmpfiles.d and /etc/tmpfiles.d.  This ensures
    that dh_installtmpfiles gracefully copes with e.g. README files
    provided by systemd upstream.  (Closes: #986329)
  * dh_installsystemd: Ditto (but only relevant in compat 12 or
    earlier)
  * cmake.pm: Pass -DCMAKE_FIND_USE_PACKAGE_REGISTRY=OFF to cmake in
    addition to -DCMAKE_FIND_PACKAGE_NO_PACKAGE_REGISTRY=ON as the
    former is intended to replace the latter.  Thanks to Raul Tambre
    for reporting the issue.  (Closes: #988973)
  * Dh_Lib.pm: Bump version requirement to v5.28 to reflect the actual
    requirements (the code was using v5.28 features).  Thanks to
    Sérgio Basto for reporting the issue.
  * dh_missing: Ditto.
  * autoscripts/postinst-init,autoscripts/postinst-systemd-start: Use
    "restart" instead of "start" when starting the services.  This
    ensures a smooth transition from --restart-after-upgrade to
  - -no-restart-after-upgrade in dh_installinit and dh_installsystemd.
    Thanks to Ryan Tandy for reporting the issue.
    (Closes: #989155)
  * dh_installsystemd: Remove usage of autoscripts/postinst-systemd-restart
  * dh_installinit: Remove usage of autoscripts/postinst-init-restart
  * autoscripts/autoscripts/postinst-systemd-restart: Removed.
  * autoscripts/postinst-init-restart: Removed
  * dh_installsystemd: Prefer /usr/lib/systemd/ to /lib/systemd.
    (Closes: #987989)
  * dh_systemd_enable: Ditto.
  * dh_systemd_start: Ditto.
  * dh_installinit: Ditto.
  * dh_installsystemd: Merge /lib/systemd into /usr/lib/systemd if both
    are present in the package staging directory (prefering the latter
    in case of conflicts).  (Closes: #987989)
  * dh_systemd_enable: Ditto.
  * perl_build.pm,perl_makemaker.pm: Make debhelper use the same perl
    as it runs under (via Perl's $^X variable) when invoking the
    upstream build system.  (Closes: !40, #966396)
  * Always generate unique doc-base file names based on package name and
    document ID. (Closes: #980903)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1634558401">- Update to version 13.5.2
  * dh_installsystemd: Revert change to deploy systemd files into
    usr/lib/systemd.  (Closes: #993316, #993759)
  * dh_installinit: Ditto.
  * dh_systemd_enable: Ditto.
  * dh_systemd_start: Ditto.
  * SequencerUtil.pm: Remove duplicate "-a" option to some commands.
    Thanks to Christoph Berg for reporting the issue.
    (Closes: #971761)
  * dh_installdeb: Revert the change to rewrite `rm_conffiles` into
    `remove-on-upgrade` due to it causing bugs in non-trivial cases.
    (Closes: #994919)
  * dh_installtmpfiles: Add missing option name in POD documentation.
  * cmake.pm: make it possible to override dh provided ctest arguments
  * cmake.pm: Add missing import which broke cmake related builds.
    Thanks to Boyuan Yang for reporting the issue.
    (Closes: #993345)
  * dh_installdeb: Install debian/conffiles in compat 12+ again
    (undoing the compat 12 change saying dh_installdeb would ignore
    this file).  The file can now be using for the activating the
    `remove-on-upgrade` feature from dpkg 1.20.
  * dh_installdeb: Automatically rewrite `rm_conffiles` into the
    new `remove-on-upgrade` feature from dpkg when possible.
  * cmake.pm: Pass `ARGS+=--verbose` to make when running tests
    in the cmake+make variant except when "terse" is in
    DEB_BUILD_OPTIONS.  Thanks to Paul Wise for the suggestion.
    (Closes: #992623)
  * python_support.pm: Remove obsolete dh addon.  It did nothing
    but warn and nothing used it anymore.
  * dh: Document debhelper provided dh addon sequences.
  * single_binary.pm: New dh addon ("single-binary") that explicitly
    activates the "single binary" work flow, where dh_auto_install
    uses debian/&lt;pkg&gt; as default --destdir when there is only a
    single binary package.  It will error out if used in a
    source package building multiple binary packages.
  * dh: Activate "single-binary" addon by default in compat levels
    up to and including compat 14 when the source package only lists
    one binary package in debian/control.  In compat 14, emit a warning
    when this happens implicitly requesting users to explicitly enable
    or disable the addon for single binary source packages to avoid
    surprises in compat 15.
  * dh_auto_install: In compat 15, remove special-case default for
  - -destdir for single binary source packages.  If the previous
    default is desired, please use the "single-binary" dh addon or
    explicitly pass --destdir to dh_auto_install.
    (Closes: #971432)
  * debian/control: Provide dh-sequence-single-binary.
  * debhelper.pod: Document the dh_auto_install will change behaviour
    in compat 15 for single binary packages and dh will warning about
    that in compat 14.
  * dh_assistant: New tool for assisting third-party tools.  At the
    moment, it primarily supports introspection related features but
    will hopefully be extended to support more use cases.
    (Closes: #984900)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1641211200">- Update to version 13.6
  * dh_assistant: Avoid creating `debian/.debhelper` when the
    which-build-system sub command is invoked.  Thanks to
    Jelmer Vernooĳ for spotting that bug.
  * dh_assistant: Add new active-compat-level command, which
    outputs information about which compat level is declared
    and active.  It also tells how the compat level was
    declared.
  * Dh_Lib.pm: Add new function, get_non_binnmu_date_epoch,
    only needed for dh_strip_nondeterminism.
  * dh_installcron: Add support for `cron.yearly` packaging
    file.  Thanks to Martin-Éric Racine for the suggestion.
    (Closes: #1000363)
  * Dh_Lib.pm: Remove support for compat 5 and 6.
  * debhelper.pod,debhelper-obsolete-compat.pod: Update to
    reflect the new status for compat 5 and 6.
  * dh: Add missing _ in execute_after example in POD.
  * dh_compress: Exclude .woff and .woff2 by default.
  * Update Portuguese translation (Américo Monteiro)
    (Closes: #1000719)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1651492800">- Update to version 13.7
  * dh_installalternatives: Improve validation of alternative files to
    catch some "obvious" copy-waste mistakes.
  * dh: Invoke dh_installalternatives after dh_link in compat 14 or
    later. Thanks to Colin Watson for the suggestion.
    (Closes: #1002800)
  * cmake.pm: Drop -DCMAKE_SKIP_RPATH=on in compat v14.  Thanks to
    Vagrant Cascadian for the suggestion and the investigative work on
    this topic.  (Closes: #1004939)
  * debhelper-compat-upgrade-checklist.pod: New file.
  * debhelper.pod: Move list of supported compat levels and the related
    upgrade checklist into debhelper-compat-upgrade-checklist.pod.
    This means you now need `man 7 debhelper-compat-upgrade-checklist`
    to see the upgrade checklist.
  * dh_installdebconf: Support -D/--define command line parameters
    (mirroring those from dh_installdeb).
  * Dh_Lib.pm: Cope with "?=" as assignment operator in substvars files
    to be future proof with (possible) planned addition of "optional
    substvars.  At the moment, debhelper will still always use "=" when
    adding a substvar but it will now preserve "?=" operator if an
    existing substvar is modified.
  * autoconf.pm: Add support for autotest test suites by passing the
    TESTSUITEFLAGS environment variable to `make test`.
  * Rewrite handling of stop services to use the `preinst` when using
  - -no-restart-after-upgrade.  This fixes a regression caused by
    the fix for #989155.  (Closes: #994204)
  * dh_installmenu: Respect DPKG_ROOT when checking for update-menus.
    Note this implementation assumes update-menus is present both
    inside and outside the chroot to activate.  If it is absent on
    either side, the update-menus call is skipped.
  * dh_installsysusers: Invoke systemd-sysusers even when DPKG_ROOT
    is set (relying on `--root`).
  * dh_installpam: In compat 14, install pam snippets into
    `/usr/lib/pam.d` instead of `/etc/pam.d`.  Remember to remove
    (now) obsolete conffiles when you bump to compat 14.
  * debhelper.pod: Correct spelling of DEB_BUILD_MAINT_OPTIONS.</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1651492801">- Update to version 13.7.1
  * debhelper.pod: Fix several typos.  Thanks to Guillem Jover
    for pointing them out and proposing corrections.
  * dh_installalternatives: Correct a file check that caused
    false-positive rejections of valid alternatives files.  Thanks to
    Hiroyuki YAMAMORI for reporting the bug and providing an initial
    patch.  (Closes: #1009844)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1659614400">- Update to version 13.8
  * dh_perl: Fix incorrect binary versioning caused by a regression
    in 13.3.  Thanks to Niko Tyni for reporting the issue.
    (Closes: #997961)
  * d/control: Bump Standards-Version to 4.6.1 - no changes required.
  * root_sequence.pm: Run `dh_installsysusers` before
    `dh_installtmpfiles` (only affects compat 14 or later).  Thanks
    to Nicholas Brown for the suggestion.  (Closes: #1011099)
  * autoscripts/postinst-init-tmpfiles: Remove runtime check on the
    system having systemd as init system.
  * dh_installtmpfiles: Replace runtime check on the system running
    under systemd in generated `postinst` script with a dependency
    on `systemd | systemd-tmpfiles` added to `${misc:Depends}`.
    Thanks to Guilhem Moulin for the suggestion.  (Closes: #1013969)
  * dh_installsystemd: Ditto.
  * dh_installinit: Ditto.
  * debhelper-compat-upgrade-checklist.pod: Correct description for
    the addition of dh_installsysusers in compat 14.
  * meson.pm: Use `meson install` instead of `ninja install` for
    dh_auto_install in compat 14.  Thanks to Andrea Pappacoda for
    the suggestion.  (Closes: #1006805)
  * Dh_Lib.pm: Remove double semi-colon.  (Closes: #1010591)
  * Dh_Lib.pm: _strip_spaces now explicitly returns undef on undef
    argument.
    (Closes: #1010594)
  * cmake.pm: Set FETCHCONTENT_FULLY_DISCONNECTED to true.  This
    ensures that the `FetchContent` module does not attempt to
    use internet connection.
  * debhelper-compat-upgrade-checklist.pod: Update documentation
    for compat 14 change.  (Closes: #1011404)
  * debhelper.pod: Correct link to the new upgrade checklist.
    (Closes: #1012777)
  * dh_installman: Avoid false positive language detection on
    shared libs.
  * Update Portuguese translation (Américo Monteiro)
    (Closes: #1011256)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1660564800">- Update to version 13.9
  * d/control: Provide dh-sequence-installsysusers.
  * debhelper.pod: Add missing word "variables".
  * Dh_Lib.pm: Fix in addsubstvar where a value was added when
    it should not have been.  (Closes: #1015263)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1670846400">- Update to version 13.11.1
  * dh_installchangelogs: Ensure that at least four old entries are preserved
    (Closes: #1021467)
  * meson.pm: Use `meson setup` in the configure step rather than just `meson`.
  * Put newest compat level first in documentation
  * Rename debhelper config files to include package name
  * dh_installdebconf: Fix typo in manual page
  * Dh_Lib.pm: `qx_cmd` support env/chdir changes like `doit` (Closes: #1016354)
  * Remove obsolete compat checks in the code
  * dh_dwz: Ensure dwz multifile is owned by root:root when root should be used
  * dh_builddeb: Always pass `--root-owner-group` to `dpkg-deb` for dbgsym packages.
  * Dh_Lib.pm: Provide `mkdirs` to create (non-package) directories.
  * Dh_Lib.pm: Make `install_dir` chown created directories when root should be
    used for debhelper's own commands.  This fixes #1024261 for packages that only
    use debhelper itself. However, third-party debhelper tools may still cause
    packages with incorrect ownership for now if they are run after `dh_fixperms`
    (or `dh_fixperms` is omitted).
  * Dh_Lib.pm: Ensure `install_{file,prog,lib}` uses chown when root should be used.
    Previously, they would skip the `chown` call and rely on `dh_fixperms`
    or `dpkg-deb` to fix the ownership.  However, that could cause issues
    when the helper was run after `dh_fixperms` and install files that
    `dpkg-deb` would not reset ownership of.
  * Install `installsysusers` sequence (to match the provide).
  * dh_installchangelogs: Trim old Debian changelog entries
    automatically.  Distributions can disable this by using
    `DEB_BUILD_OPTIONS=notrimdch`.
  * dh_installchangelogs.t: Force locale to be `C.UTF-8` to
    avoid generating invalid changelog entries under
    non-default locales.
  * meson.pm: Stop providing `MESON_TESTTHREADS` environment
    variable for the install target.  Said variable only
    applies for testing.
  * cmake.pm: Use `cmake --install` in compat 14.
    (Closes: #1020732)
  * docs/PROGRAMMING{,.md}: Rewrite PROGRAMMING into markdown.
  * dh_installsystemduser: Stop masking user units on package
    removal.  They should never have been masked in the first
    place.  See #1021027.
  * dh_installinit: Remove executable bit of init scripts on
    package removal (via preinst).  Related to #1021027.
  * dh_installsystemd: Stop masking system units on package
    removal.  This is no longer necessary with the init scripts
    getting their exec bit cleared on package removal.
    (Closes: #1021027)
  * Dh_Lib.pm: Add `package_type` as a function (extracted
    from `is_udeb`).
  * Dh_Getopt.pm: Fix duplicated `warning` in output for a
    particular warning.
  * dh_assistant: Provide a new `detect-hook-targets` command.
  * dh: Recommend using `dh_assistant detect-hook-targets` for
    checking whether hook targets are correct.
  * dh: Hoist `nodoc` and `nocheck` from `DEB_BUILD_PROFILES`
    into `DEB_BUILD_OPTIONS` when they are present in the former
    and absent in the latter.  Emit a warning when doing so to
    aid the user, so they know why this does not work when they
    are later building a package that does not use dh.
    (Closes: #979401)
  * dh: Provide a warning when cross building an `nocheck` is
    absent from `DEB_BUILD_OPTIONS` to cross builders, who are
    not experienced with Debian's requirements for
    cross-building.  The warning also recommends activating the
    `cross` build profile and provides a way to disable the
    warning without using `nocheck` (for the special case, where
    people have a system that can run host binaries).
  * Dh_Lib.pm: Fix bug where `addsubstvars` would not respect
    the `--no-act` parameter.
  * dh_perl: For scripts that are detected as perl scripts
    that would trigger a dependency, normalize the shebang line to
    use the same perl as debhelper is run under (/usr/bin/perl
    in Debian, YMMV in derivatives).  (Closes: #904409)
  * dh_assistant: Provide new `log-installed-files` command to
    help users and third-party tools record which files they have
    installed.  Third-party tools should use the
    `--on-behalf-of-cmd` to have their tool name recorded.
    (Closes: #972724)
  * dh_installexamples: Explicitly recommend `examples/*` over
    `examples` as content for the `debian/&lt;pkg&gt;.examples` file
    to avoid the triggering `.../examples/examples` case.
    (Closes: #1000384)
  * debhelper.pod: Clarify the documentation around `-v` +
    `--verbose` vs. `DH_VERBOSE` vs. `DH_QUIET` and `terse`
    from `DEB_BUILD_OPTIONS`.  Notably, clarify that `-v`
    and `DH_VERBOSE` provides the same functionality and
    that they do not cause *all* commands to be shown.
    (Closes: #1002464)
  * Update Portuguese translation (Américo Monteiro)
    (Closes: #1019231)
  * autoscripts/postinst-init-tmpfiles: Re-instate runtime check
    before running `systemd-tmpfiles`. However, explicitly check
    for `systemd-tmpfiles` rather than asserting the system was
    booted by systemd. This resolves #1013969 without requiring
    a strict dependency as originally suggested by Guilhem Moulin
    in #1013969.
  * dh_installtmpfiles: Remove the `systemd | systemd-tmpfiles`
    dependency as it is no longer required.  (Closes: #1017441)
  * dh_installsystemd: Ditto.
  * dh_installinit: Ditto.
  * autoscripts/postinst-init-tmpfiles: Only pass `--root` to systemd
    when `DPKG_ROOT` is present (as `--root=/` is different from
    omitting `--root` entirely).
  * autoscripts/postinst-sysusers: Ditto</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672920000">- update to 13.11.4:
  * meson.pm: Pass --destdir to `meson install`.  (Closes: #1027014)
  * Dh_Lib.pm: Have addsubstvars check the value for newlines (Closes: #1026014)
  * Stop using (fake)root for mkdirs again.
    Should have been removed as a part of the clean up in the previous
    upload but was overlooked causing breakage in packages still having
    `Rules-Requires-Root: binary-targets`. (Closes: #1026125)
  * PROGRAMMING.md: Fix typos
  * Dh_Lib.pm: Remove unused third parameter from install_dh_config_file
  * makefile.pm: Provide hook for subclasses to reuse cross-build support
  * Dh_Lib.pm: Revert change where `install_{file,prog,lib}` would use chown.
    The problem that prompted this change was not caused by debhelper but
    by fakeroot (#1024544) and the change in debhelper would not even
    function as a work around in this case.  Accordingly, the extra
    complexity is not worth it and has been reverted.
  * Dh_Lib.pm: Fix typo in warning message about dherroron</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1693828800">- update to 13.11.5:
  * Update Portuguese translation (Américo Monteiro)
    (Closes: #1028159)
  * Update on German translation of pages (Closes: #1028564)
  * Fix minor typo in DEB_BUILD_OPTIONS warning ("and but not" -&gt; "but not")
  * AddonAPI.pm: Correct method name in error message.
    Thanks to wferi@Github
  * dh_missing: Update link to PROGRAMMING.md.gz
  * cmake.pm: set -DBUILD_TESTING=OFF for nocheck builds
  * autoscripts/postinst-init-tmpfiles: do not output to /dev/null to not hide error messages
  * cmake.pm, meson.pm: Set DEB_PYTHON_INSTALL_LAYOUT=deb if not already set
    (Closes: #1043136)
  * buildsystems: Give XDG_RUNTIME_DIR spec-compliant u=rwx,og-rwx permissions
  * meson.pm: Disable Python byte-compilation if the Meson version is new enough
    (Closes: #1042398)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1694174400">- fix initialization of state variables problem (bsc#1215078)
  added debhelper-fix-perl-version-requirement.patch</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1723118400">- fix perl compatibility for Leap (bsc#1228955)</changelog>
</package>
<package pkgid="88e4ec9b03a7efc44ff967c72e70eb48f886ea5864a9991ea8177ee8dc41d865" name="debhelper" arch="src">
  <version epoch="0" ver="13.11.5" rel="bp156.2.3.1"/>
  <changelog author="frank.lichtenheld@sophos.com" date="1340712000">- package debhelper separately</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1340712001">- refresh debhelper-pod2man-no-utf8.patch to allow build
  on SLE 11 SP2</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1341576000">- fix Provides for package split, there is no /usr/bin/debhelper
- fix wrong perl require on Fedora</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1348747200">- update to debhelper-9.20120830
  * dh_installcatalogs: Turn /etc/sgml/$package.cat into conffiles
  and introduce dependency on trigger-based sgml-base. Closes: #477751
  * dh: When there's an -indep override target without -arch, or vice versa,
  avoid acting on packages covered by the override target when running
  the command for packages not covered by it. Closes: #676462</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1380888000">- import upstream patch debhelper-findutils.patch from Git
  * Avoid find -perm +mode breakage caused by findutils 4.5.11,
  by instead using -perm /mode (deb#700200)</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 9.20150101
- Adapt debhelper-no-localized-manpages.patch to upstream changes
  * debhelper-9.20150101-no-localized-manpages.patch
- Remove upstreamed debhelper-findutils.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1469361600">- Update to version 9.20160709</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1615896000">- Update to version 13.3.4
- Adapt patches to new upstream version:
  * remove debhelper-9.20150101-no-localized-manpages.patch
  * add debhelper-no-localized-manpages.patch</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1634558400">- Update to version 13.4.1
  * autoscripts/*: Replace `which` with `command -v`.
  * dh_installsystemd: Only merge /lib/systemd/system into /usr
    for now.  (Closes: #992554)
  * dh_systemd_enable: Ditto.
  * autoscripts/postinst-init-nostart: Call invoke-rc.d when
    a non-empty DPKG_ROOT is used.  (Closes: #992556)
  * Replace "use v5.28" with "use v5.24" in Dh_Lib.pm.
    The change to "use v5.28" in 13.4 broke the test to distinguish 0755
    from "0755" in the reset_perm_and_owner function, breaking builds.
    Thanks Adrian Bunk and Ansgar for help isolating the problem.
  * debian/changelog: Correct bug number in the 13.4 entry.
  * dh_dwz: run in parallel across packages.  (Closes: !47)
  * Dh_Buildsystems.pm: Add bmake and mkcmake as third-party
    build systems.  (Closes: !46)
  * Dh_Buildsystems.pm: Add golang as a third-party build
    system.  (Closes: #981106)
  * autoscripts/*: Add support for DPKG_ROOT in systemd, tmpusers,
    sysusers and init related snippets.  Based on an initial patch
    from Helmut Grohne.  (Closes: #983566)
  * autoscripts/*: Reorder conditions in some scripts to avoid
    doing a redundant stat call when a script parameter can decide
    to skip it.
  * dh_gconf: Remove the command as it does nothing.
    (Closes: #908845)
  * doc/TODO: Remove reference to dh_gconf.
  * root_sequence.pm: Remove dh_gconf from root sequence and declare
    it as obsolete (causing errors from compat 14 if still referenced
    in hook targets).
  * man/po4a/po4a.cfg: Remove dh_gconf from translations.
  * AddonAPI.pm: The declare_command_obsolete command now accepts an
    "$error_compat" parameter to enable addons to choose which compat
    level that will trigger an error (though it must be minimum 13).
  * doc/PROGRAMMING: Update docs to reflect API change.
  * debhelper.pod: Document that referencing dh_gconf in hook targets
    will cause an error in compat 14.
  * dh_fixperms: Correct permissions of files beneath usr/libexec to
    be executable.  (Closes: #979401)
  * dh_installtmpfiles: Only register tmpfiles ending with ".conf" as
    tmpfiles in /usr/lib/tmpfiles.d and /etc/tmpfiles.d.  This ensures
    that dh_installtmpfiles gracefully copes with e.g. README files
    provided by systemd upstream.  (Closes: #986329)
  * dh_installsystemd: Ditto (but only relevant in compat 12 or
    earlier)
  * cmake.pm: Pass -DCMAKE_FIND_USE_PACKAGE_REGISTRY=OFF to cmake in
    addition to -DCMAKE_FIND_PACKAGE_NO_PACKAGE_REGISTRY=ON as the
    former is intended to replace the latter.  Thanks to Raul Tambre
    for reporting the issue.  (Closes: #988973)
  * Dh_Lib.pm: Bump version requirement to v5.28 to reflect the actual
    requirements (the code was using v5.28 features).  Thanks to
    Sérgio Basto for reporting the issue.
  * dh_missing: Ditto.
  * autoscripts/postinst-init,autoscripts/postinst-systemd-start: Use
    "restart" instead of "start" when starting the services.  This
    ensures a smooth transition from --restart-after-upgrade to
  - -no-restart-after-upgrade in dh_installinit and dh_installsystemd.
    Thanks to Ryan Tandy for reporting the issue.
    (Closes: #989155)
  * dh_installsystemd: Remove usage of autoscripts/postinst-systemd-restart
  * dh_installinit: Remove usage of autoscripts/postinst-init-restart
  * autoscripts/autoscripts/postinst-systemd-restart: Removed.
  * autoscripts/postinst-init-restart: Removed
  * dh_installsystemd: Prefer /usr/lib/systemd/ to /lib/systemd.
    (Closes: #987989)
  * dh_systemd_enable: Ditto.
  * dh_systemd_start: Ditto.
  * dh_installinit: Ditto.
  * dh_installsystemd: Merge /lib/systemd into /usr/lib/systemd if both
    are present in the package staging directory (prefering the latter
    in case of conflicts).  (Closes: #987989)
  * dh_systemd_enable: Ditto.
  * perl_build.pm,perl_makemaker.pm: Make debhelper use the same perl
    as it runs under (via Perl's $^X variable) when invoking the
    upstream build system.  (Closes: !40, #966396)
  * Always generate unique doc-base file names based on package name and
    document ID. (Closes: #980903)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1634558401">- Update to version 13.5.2
  * dh_installsystemd: Revert change to deploy systemd files into
    usr/lib/systemd.  (Closes: #993316, #993759)
  * dh_installinit: Ditto.
  * dh_systemd_enable: Ditto.
  * dh_systemd_start: Ditto.
  * SequencerUtil.pm: Remove duplicate "-a" option to some commands.
    Thanks to Christoph Berg for reporting the issue.
    (Closes: #971761)
  * dh_installdeb: Revert the change to rewrite `rm_conffiles` into
    `remove-on-upgrade` due to it causing bugs in non-trivial cases.
    (Closes: #994919)
  * dh_installtmpfiles: Add missing option name in POD documentation.
  * cmake.pm: make it possible to override dh provided ctest arguments
  * cmake.pm: Add missing import which broke cmake related builds.
    Thanks to Boyuan Yang for reporting the issue.
    (Closes: #993345)
  * dh_installdeb: Install debian/conffiles in compat 12+ again
    (undoing the compat 12 change saying dh_installdeb would ignore
    this file).  The file can now be using for the activating the
    `remove-on-upgrade` feature from dpkg 1.20.
  * dh_installdeb: Automatically rewrite `rm_conffiles` into the
    new `remove-on-upgrade` feature from dpkg when possible.
  * cmake.pm: Pass `ARGS+=--verbose` to make when running tests
    in the cmake+make variant except when "terse" is in
    DEB_BUILD_OPTIONS.  Thanks to Paul Wise for the suggestion.
    (Closes: #992623)
  * python_support.pm: Remove obsolete dh addon.  It did nothing
    but warn and nothing used it anymore.
  * dh: Document debhelper provided dh addon sequences.
  * single_binary.pm: New dh addon ("single-binary") that explicitly
    activates the "single binary" work flow, where dh_auto_install
    uses debian/&lt;pkg&gt; as default --destdir when there is only a
    single binary package.  It will error out if used in a
    source package building multiple binary packages.
  * dh: Activate "single-binary" addon by default in compat levels
    up to and including compat 14 when the source package only lists
    one binary package in debian/control.  In compat 14, emit a warning
    when this happens implicitly requesting users to explicitly enable
    or disable the addon for single binary source packages to avoid
    surprises in compat 15.
  * dh_auto_install: In compat 15, remove special-case default for
  - -destdir for single binary source packages.  If the previous
    default is desired, please use the "single-binary" dh addon or
    explicitly pass --destdir to dh_auto_install.
    (Closes: #971432)
  * debian/control: Provide dh-sequence-single-binary.
  * debhelper.pod: Document the dh_auto_install will change behaviour
    in compat 15 for single binary packages and dh will warning about
    that in compat 14.
  * dh_assistant: New tool for assisting third-party tools.  At the
    moment, it primarily supports introspection related features but
    will hopefully be extended to support more use cases.
    (Closes: #984900)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1641211200">- Update to version 13.6
  * dh_assistant: Avoid creating `debian/.debhelper` when the
    which-build-system sub command is invoked.  Thanks to
    Jelmer Vernooĳ for spotting that bug.
  * dh_assistant: Add new active-compat-level command, which
    outputs information about which compat level is declared
    and active.  It also tells how the compat level was
    declared.
  * Dh_Lib.pm: Add new function, get_non_binnmu_date_epoch,
    only needed for dh_strip_nondeterminism.
  * dh_installcron: Add support for `cron.yearly` packaging
    file.  Thanks to Martin-Éric Racine for the suggestion.
    (Closes: #1000363)
  * Dh_Lib.pm: Remove support for compat 5 and 6.
  * debhelper.pod,debhelper-obsolete-compat.pod: Update to
    reflect the new status for compat 5 and 6.
  * dh: Add missing _ in execute_after example in POD.
  * dh_compress: Exclude .woff and .woff2 by default.
  * Update Portuguese translation (Américo Monteiro)
    (Closes: #1000719)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1651492800">- Update to version 13.7
  * dh_installalternatives: Improve validation of alternative files to
    catch some "obvious" copy-waste mistakes.
  * dh: Invoke dh_installalternatives after dh_link in compat 14 or
    later. Thanks to Colin Watson for the suggestion.
    (Closes: #1002800)
  * cmake.pm: Drop -DCMAKE_SKIP_RPATH=on in compat v14.  Thanks to
    Vagrant Cascadian for the suggestion and the investigative work on
    this topic.  (Closes: #1004939)
  * debhelper-compat-upgrade-checklist.pod: New file.
  * debhelper.pod: Move list of supported compat levels and the related
    upgrade checklist into debhelper-compat-upgrade-checklist.pod.
    This means you now need `man 7 debhelper-compat-upgrade-checklist`
    to see the upgrade checklist.
  * dh_installdebconf: Support -D/--define command line parameters
    (mirroring those from dh_installdeb).
  * Dh_Lib.pm: Cope with "?=" as assignment operator in substvars files
    to be future proof with (possible) planned addition of "optional
    substvars.  At the moment, debhelper will still always use "=" when
    adding a substvar but it will now preserve "?=" operator if an
    existing substvar is modified.
  * autoconf.pm: Add support for autotest test suites by passing the
    TESTSUITEFLAGS environment variable to `make test`.
  * Rewrite handling of stop services to use the `preinst` when using
  - -no-restart-after-upgrade.  This fixes a regression caused by
    the fix for #989155.  (Closes: #994204)
  * dh_installmenu: Respect DPKG_ROOT when checking for update-menus.
    Note this implementation assumes update-menus is present both
    inside and outside the chroot to activate.  If it is absent on
    either side, the update-menus call is skipped.
  * dh_installsysusers: Invoke systemd-sysusers even when DPKG_ROOT
    is set (relying on `--root`).
  * dh_installpam: In compat 14, install pam snippets into
    `/usr/lib/pam.d` instead of `/etc/pam.d`.  Remember to remove
    (now) obsolete conffiles when you bump to compat 14.
  * debhelper.pod: Correct spelling of DEB_BUILD_MAINT_OPTIONS.</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1651492801">- Update to version 13.7.1
  * debhelper.pod: Fix several typos.  Thanks to Guillem Jover
    for pointing them out and proposing corrections.
  * dh_installalternatives: Correct a file check that caused
    false-positive rejections of valid alternatives files.  Thanks to
    Hiroyuki YAMAMORI for reporting the bug and providing an initial
    patch.  (Closes: #1009844)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1659614400">- Update to version 13.8
  * dh_perl: Fix incorrect binary versioning caused by a regression
    in 13.3.  Thanks to Niko Tyni for reporting the issue.
    (Closes: #997961)
  * d/control: Bump Standards-Version to 4.6.1 - no changes required.
  * root_sequence.pm: Run `dh_installsysusers` before
    `dh_installtmpfiles` (only affects compat 14 or later).  Thanks
    to Nicholas Brown for the suggestion.  (Closes: #1011099)
  * autoscripts/postinst-init-tmpfiles: Remove runtime check on the
    system having systemd as init system.
  * dh_installtmpfiles: Replace runtime check on the system running
    under systemd in generated `postinst` script with a dependency
    on `systemd | systemd-tmpfiles` added to `${misc:Depends}`.
    Thanks to Guilhem Moulin for the suggestion.  (Closes: #1013969)
  * dh_installsystemd: Ditto.
  * dh_installinit: Ditto.
  * debhelper-compat-upgrade-checklist.pod: Correct description for
    the addition of dh_installsysusers in compat 14.
  * meson.pm: Use `meson install` instead of `ninja install` for
    dh_auto_install in compat 14.  Thanks to Andrea Pappacoda for
    the suggestion.  (Closes: #1006805)
  * Dh_Lib.pm: Remove double semi-colon.  (Closes: #1010591)
  * Dh_Lib.pm: _strip_spaces now explicitly returns undef on undef
    argument.
    (Closes: #1010594)
  * cmake.pm: Set FETCHCONTENT_FULLY_DISCONNECTED to true.  This
    ensures that the `FetchContent` module does not attempt to
    use internet connection.
  * debhelper-compat-upgrade-checklist.pod: Update documentation
    for compat 14 change.  (Closes: #1011404)
  * debhelper.pod: Correct link to the new upgrade checklist.
    (Closes: #1012777)
  * dh_installman: Avoid false positive language detection on
    shared libs.
  * Update Portuguese translation (Américo Monteiro)
    (Closes: #1011256)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1660564800">- Update to version 13.9
  * d/control: Provide dh-sequence-installsysusers.
  * debhelper.pod: Add missing word "variables".
  * Dh_Lib.pm: Fix in addsubstvar where a value was added when
    it should not have been.  (Closes: #1015263)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1670846400">- Update to version 13.11.1
  * dh_installchangelogs: Ensure that at least four old entries are preserved
    (Closes: #1021467)
  * meson.pm: Use `meson setup` in the configure step rather than just `meson`.
  * Put newest compat level first in documentation
  * Rename debhelper config files to include package name
  * dh_installdebconf: Fix typo in manual page
  * Dh_Lib.pm: `qx_cmd` support env/chdir changes like `doit` (Closes: #1016354)
  * Remove obsolete compat checks in the code
  * dh_dwz: Ensure dwz multifile is owned by root:root when root should be used
  * dh_builddeb: Always pass `--root-owner-group` to `dpkg-deb` for dbgsym packages.
  * Dh_Lib.pm: Provide `mkdirs` to create (non-package) directories.
  * Dh_Lib.pm: Make `install_dir` chown created directories when root should be
    used for debhelper's own commands.  This fixes #1024261 for packages that only
    use debhelper itself. However, third-party debhelper tools may still cause
    packages with incorrect ownership for now if they are run after `dh_fixperms`
    (or `dh_fixperms` is omitted).
  * Dh_Lib.pm: Ensure `install_{file,prog,lib}` uses chown when root should be used.
    Previously, they would skip the `chown` call and rely on `dh_fixperms`
    or `dpkg-deb` to fix the ownership.  However, that could cause issues
    when the helper was run after `dh_fixperms` and install files that
    `dpkg-deb` would not reset ownership of.
  * Install `installsysusers` sequence (to match the provide).
  * dh_installchangelogs: Trim old Debian changelog entries
    automatically.  Distributions can disable this by using
    `DEB_BUILD_OPTIONS=notrimdch`.
  * dh_installchangelogs.t: Force locale to be `C.UTF-8` to
    avoid generating invalid changelog entries under
    non-default locales.
  * meson.pm: Stop providing `MESON_TESTTHREADS` environment
    variable for the install target.  Said variable only
    applies for testing.
  * cmake.pm: Use `cmake --install` in compat 14.
    (Closes: #1020732)
  * docs/PROGRAMMING{,.md}: Rewrite PROGRAMMING into markdown.
  * dh_installsystemduser: Stop masking user units on package
    removal.  They should never have been masked in the first
    place.  See #1021027.
  * dh_installinit: Remove executable bit of init scripts on
    package removal (via preinst).  Related to #1021027.
  * dh_installsystemd: Stop masking system units on package
    removal.  This is no longer necessary with the init scripts
    getting their exec bit cleared on package removal.
    (Closes: #1021027)
  * Dh_Lib.pm: Add `package_type` as a function (extracted
    from `is_udeb`).
  * Dh_Getopt.pm: Fix duplicated `warning` in output for a
    particular warning.
  * dh_assistant: Provide a new `detect-hook-targets` command.
  * dh: Recommend using `dh_assistant detect-hook-targets` for
    checking whether hook targets are correct.
  * dh: Hoist `nodoc` and `nocheck` from `DEB_BUILD_PROFILES`
    into `DEB_BUILD_OPTIONS` when they are present in the former
    and absent in the latter.  Emit a warning when doing so to
    aid the user, so they know why this does not work when they
    are later building a package that does not use dh.
    (Closes: #979401)
  * dh: Provide a warning when cross building an `nocheck` is
    absent from `DEB_BUILD_OPTIONS` to cross builders, who are
    not experienced with Debian's requirements for
    cross-building.  The warning also recommends activating the
    `cross` build profile and provides a way to disable the
    warning without using `nocheck` (for the special case, where
    people have a system that can run host binaries).
  * Dh_Lib.pm: Fix bug where `addsubstvars` would not respect
    the `--no-act` parameter.
  * dh_perl: For scripts that are detected as perl scripts
    that would trigger a dependency, normalize the shebang line to
    use the same perl as debhelper is run under (/usr/bin/perl
    in Debian, YMMV in derivatives).  (Closes: #904409)
  * dh_assistant: Provide new `log-installed-files` command to
    help users and third-party tools record which files they have
    installed.  Third-party tools should use the
    `--on-behalf-of-cmd` to have their tool name recorded.
    (Closes: #972724)
  * dh_installexamples: Explicitly recommend `examples/*` over
    `examples` as content for the `debian/&lt;pkg&gt;.examples` file
    to avoid the triggering `.../examples/examples` case.
    (Closes: #1000384)
  * debhelper.pod: Clarify the documentation around `-v` +
    `--verbose` vs. `DH_VERBOSE` vs. `DH_QUIET` and `terse`
    from `DEB_BUILD_OPTIONS`.  Notably, clarify that `-v`
    and `DH_VERBOSE` provides the same functionality and
    that they do not cause *all* commands to be shown.
    (Closes: #1002464)
  * Update Portuguese translation (Américo Monteiro)
    (Closes: #1019231)
  * autoscripts/postinst-init-tmpfiles: Re-instate runtime check
    before running `systemd-tmpfiles`. However, explicitly check
    for `systemd-tmpfiles` rather than asserting the system was
    booted by systemd. This resolves #1013969 without requiring
    a strict dependency as originally suggested by Guilhem Moulin
    in #1013969.
  * dh_installtmpfiles: Remove the `systemd | systemd-tmpfiles`
    dependency as it is no longer required.  (Closes: #1017441)
  * dh_installsystemd: Ditto.
  * dh_installinit: Ditto.
  * autoscripts/postinst-init-tmpfiles: Only pass `--root` to systemd
    when `DPKG_ROOT` is present (as `--root=/` is different from
    omitting `--root` entirely).
  * autoscripts/postinst-sysusers: Ditto</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672920000">- update to 13.11.4:
  * meson.pm: Pass --destdir to `meson install`.  (Closes: #1027014)
  * Dh_Lib.pm: Have addsubstvars check the value for newlines (Closes: #1026014)
  * Stop using (fake)root for mkdirs again.
    Should have been removed as a part of the clean up in the previous
    upload but was overlooked causing breakage in packages still having
    `Rules-Requires-Root: binary-targets`. (Closes: #1026125)
  * PROGRAMMING.md: Fix typos
  * Dh_Lib.pm: Remove unused third parameter from install_dh_config_file
  * makefile.pm: Provide hook for subclasses to reuse cross-build support
  * Dh_Lib.pm: Revert change where `install_{file,prog,lib}` would use chown.
    The problem that prompted this change was not caused by debhelper but
    by fakeroot (#1024544) and the change in debhelper would not even
    function as a work around in this case.  Accordingly, the extra
    complexity is not worth it and has been reverted.
  * Dh_Lib.pm: Fix typo in warning message about dherroron</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1693828800">- update to 13.11.5:
  * Update Portuguese translation (Américo Monteiro)
    (Closes: #1028159)
  * Update on German translation of pages (Closes: #1028564)
  * Fix minor typo in DEB_BUILD_OPTIONS warning ("and but not" -&gt; "but not")
  * AddonAPI.pm: Correct method name in error message.
    Thanks to wferi@Github
  * dh_missing: Update link to PROGRAMMING.md.gz
  * cmake.pm: set -DBUILD_TESTING=OFF for nocheck builds
  * autoscripts/postinst-init-tmpfiles: do not output to /dev/null to not hide error messages
  * cmake.pm, meson.pm: Set DEB_PYTHON_INSTALL_LAYOUT=deb if not already set
    (Closes: #1043136)
  * buildsystems: Give XDG_RUNTIME_DIR spec-compliant u=rwx,og-rwx permissions
  * meson.pm: Disable Python byte-compilation if the Meson version is new enough
    (Closes: #1042398)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1694174400">- fix initialization of state variables problem (bsc#1215078)
  added debhelper-fix-perl-version-requirement.patch</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1723118400">- fix perl compatibility for Leap (bsc#1228955)</changelog>
</package>
<package pkgid="e9f903822cec99948f0720fe48cf63a835c8d248fc1f555c3976224d5c489a35" name="deepin-branding-openSUSE" arch="src">
  <version epoch="0" ver="15.4" rel="bp156.5.3.1"/>
  <changelog author="hillwood@opensuse.org" date="1512388800">- Initial package. Let us bring a Geeko style for Deepin Desktop on
  openSUSE.</changelog>
  <changelog author="hillwood@opensuse.org" date="1512648000">- Update fonts configure.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1555588800">- Update gschema from deepin-desktop-schemas 3.13.0</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1555675200">- Fix deepin-desktop-schemas-branding-openSUSE install</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563451200">- Change dde-dock delay-plugins-time to 0 from upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614340800">- Update gschema from deepin-desktop-schemas 5.8.44
- Update icons install path</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620388800">- Change defaut theme as deepin-dark</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1627560000">- Update dock setting: Regularly scan wifi on dock</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645617600">- Package base on Leap 15.4
  * Update com.deepin.dde.dock.gschema.xml
  * Update com.deepin.xsettings.gschema.xml</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1650369600">- Update com.deepin.dde.dock.gschema.xml</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1661601600">- Update com.deepin.dde.dock.gschema.xml and com.deepin.xsettings.gschema.xml</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1721304000">- Update default wallpaper (boo#1228113)</changelog>
</package>
<package pkgid="67799d2c02b297fe2343d8a530a3a77c62ec4e9c645c0232f0a8dd249d73778e" name="deepin-desktop-schemas-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="15.4" rel="bp156.5.3.1"/>
  <changelog author="hillwood@opensuse.org" date="1512388800">- Initial package. Let us bring a Geeko style for Deepin Desktop on
  openSUSE.</changelog>
  <changelog author="hillwood@opensuse.org" date="1512648000">- Update fonts configure.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1555588800">- Update gschema from deepin-desktop-schemas 3.13.0</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1555675200">- Fix deepin-desktop-schemas-branding-openSUSE install</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563451200">- Change dde-dock delay-plugins-time to 0 from upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614340800">- Update gschema from deepin-desktop-schemas 5.8.44
- Update icons install path</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620388800">- Change defaut theme as deepin-dark</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1627560000">- Update dock setting: Regularly scan wifi on dock</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645617600">- Package base on Leap 15.4
  * Update com.deepin.dde.dock.gschema.xml
  * Update com.deepin.xsettings.gschema.xml</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1650369600">- Update com.deepin.dde.dock.gschema.xml</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1661601600">- Update com.deepin.dde.dock.gschema.xml and com.deepin.xsettings.gschema.xml</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1721304000">- Update default wallpaper (boo#1228113)</changelog>
</package>
<package pkgid="f4cf79979e7569b65666a643d669daf7b88fb82def8e23a9363803c0551a7488" name="deepin-feature-enable" arch="aarch64">
  <version epoch="0" ver="1.1" rel="bp156.4.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1619524800">- Initial package for version 1.0</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1630152000">- Update version to 1.1
  * Fix a security issue, change temp dir to /root/.cache.
  * Drop deepin-api profiles installation. fix boo#1070943</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1747224000">- clear package contents (since it cannot be deleted from the already
  published codestream) due to a packaging policy violation: See
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/AXUHM4Q4SMFZHEHZL6MEV4VOMO23QIZQ/
  for more information.</changelog>
</package>
<package pkgid="1a1260569129fc35fcb7987c6434a20f5386c73f5472fc2324c187bd58e1ca23" name="deepin-feature-enable" arch="i586">
  <version epoch="0" ver="1.1" rel="bp156.4.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1619524800">- Initial package for version 1.0</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1630152000">- Update version to 1.1
  * Fix a security issue, change temp dir to /root/.cache.
  * Drop deepin-api profiles installation. fix boo#1070943</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1747224000">- clear package contents (since it cannot be deleted from the already
  published codestream) due to a packaging policy violation: See
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/AXUHM4Q4SMFZHEHZL6MEV4VOMO23QIZQ/
  for more information.</changelog>
</package>
<package pkgid="288eb40d6da1063ff0baa8356ceda9d18ad98fc5bf4fb31a6bb9b4342bce2569" name="deepin-feature-enable" arch="ppc64le">
  <version epoch="0" ver="1.1" rel="bp156.4.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1619524800">- Initial package for version 1.0</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1630152000">- Update version to 1.1
  * Fix a security issue, change temp dir to /root/.cache.
  * Drop deepin-api profiles installation. fix boo#1070943</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1747224000">- clear package contents (since it cannot be deleted from the already
  published codestream) due to a packaging policy violation: See
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/AXUHM4Q4SMFZHEHZL6MEV4VOMO23QIZQ/
  for more information.</changelog>
</package>
<package pkgid="7ab0a6430d7f0cf87227712c6395c9a678183a833b67c3441b0e2cc0bb1b1cf8" name="deepin-feature-enable" arch="s390x">
  <version epoch="0" ver="1.1" rel="bp156.4.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1619524800">- Initial package for version 1.0</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1630152000">- Update version to 1.1
  * Fix a security issue, change temp dir to /root/.cache.
  * Drop deepin-api profiles installation. fix boo#1070943</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1747224000">- clear package contents (since it cannot be deleted from the already
  published codestream) due to a packaging policy violation: See
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/AXUHM4Q4SMFZHEHZL6MEV4VOMO23QIZQ/
  for more information.</changelog>
</package>
<package pkgid="6dd0bbdbbd2c3989165d92a22bba181378727588b3a004c238a9af423343d86c" name="deepin-feature-enable" arch="src">
  <version epoch="0" ver="1.1" rel="bp156.4.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1619524800">- Initial package for version 1.0</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1630152000">- Update version to 1.1
  * Fix a security issue, change temp dir to /root/.cache.
  * Drop deepin-api profiles installation. fix boo#1070943</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1747224000">- clear package contents (since it cannot be deleted from the already
  published codestream) due to a packaging policy violation: See
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/AXUHM4Q4SMFZHEHZL6MEV4VOMO23QIZQ/
  for more information.</changelog>
</package>
<package pkgid="a37f6fdf8a9364a248ac6033434c3a5232ec0d13978bbaa3a4296569eb59e09b" name="deepin-feature-enable" arch="x86_64">
  <version epoch="0" ver="1.1" rel="bp156.4.3.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1619524800">- Initial package for version 1.0</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1630152000">- Update version to 1.1
  * Fix a security issue, change temp dir to /root/.cache.
  * Drop deepin-api profiles installation. fix boo#1070943</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1747224000">- clear package contents (since it cannot be deleted from the already
  published codestream) due to a packaging policy violation: See
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/AXUHM4Q4SMFZHEHZL6MEV4VOMO23QIZQ/
  for more information.</changelog>
</package>
<package pkgid="928971a96b6cd8e730975d534787fc7d1198f2f3cd3afd2577ffbec16df26d9f" name="deepin-launcher-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="15.4" rel="bp156.5.3.1"/>
  <changelog author="hillwood@opensuse.org" date="1512388800">- Initial package. Let us bring a Geeko style for Deepin Desktop on
  openSUSE.</changelog>
  <changelog author="hillwood@opensuse.org" date="1512648000">- Update fonts configure.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1555588800">- Update gschema from deepin-desktop-schemas 3.13.0</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1555675200">- Fix deepin-desktop-schemas-branding-openSUSE install</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1563451200">- Change dde-dock delay-plugins-time to 0 from upstream</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1614340800">- Update gschema from deepin-desktop-schemas 5.8.44
- Update icons install path</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1620388800">- Change defaut theme as deepin-dark</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1627560000">- Update dock setting: Regularly scan wifi on dock</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1645617600">- Package base on Leap 15.4
  * Update com.deepin.dde.dock.gschema.xml
  * Update com.deepin.xsettings.gschema.xml</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1650369600">- Update com.deepin.dde.dock.gschema.xml</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1661601600">- Update com.deepin.dde.dock.gschema.xml and com.deepin.xsettings.gschema.xml</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1721304000">- Update default wallpaper (boo#1228113)</changelog>
</package>
<package pkgid="6c07aec18bbc538c19e59eeebe4cc6ab1deeb499241e7f3d4a5ab26e0009ec2f" name="dkimproxy" arch="noarch">
  <version epoch="0" ver="1.4.1" rel="bp156.6.3.1"/>
  <changelog author="varkoly@suse.com" date="1543320000">- bsc#1116007 - Please convert SysV init scripts by dkimproxy into
  native systemd services</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1577102400">- Add the "installation" section.
- Changed "PreExecStart" to "ExecStartPre".
- Added/changed the type to forking</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1592568000">- Remove sysvinit remains from this package.</changelog>
  <changelog author="Mihaly Meszaros &lt;mmeszaros@npsh.hu&gt;" date="1623326400">- fix PID filename typos in systemd unit files</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1699272000">- Fix boo#1216919
  * create /run/dkimproxy using tmpfiles
  * use the correct env var for the hostname</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1699444800">- Follow-up fix for boo#1216919
  * make sure dkimproxy-in works even when the dynamically-created
    config file under /run does not exist</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1704196800">- Remove the dependency on perl(IO::Socket::INET6) as it has been
  deprecated by upstream, is no longer suitable for use and its not
  being maintained. A compatible replacement for this package is
  perl(IO::Socket::IP) which is shipped by the perl-base package.
  * Rebase dkimproxy-1.4.1-avoid-perl-provides.diff
  * Add dkimproxy-port-perl-IO-Socket-INET6-to-IP.patch
  * Reported upstream: https://sourceforge.net/p/dkimproxy/bugs/39</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1718280000">- Fix ExecStartPre path. This changes depending on %_libexecdir macro.
  Problem was mentioned in (bsc#1217173)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1724846400">- Fix VUL-1: dkimproxy: possible symlink attack in /run/dkimproxy/sysconfig
  (bsc#1217173)
  Remove environment variables DKIMPROXY_USER DKIMPROXY_GROUP.
  These are hardcoded anyway in dkimproxy-tmpfiles. Changing these
  would only lead to trouble. Now User and Group in dkimproxy-in.service
  are set to dkim to avoid the mentioned security issue.
  ExecStart got a '+' to execute it by root rights.</changelog>
</package>
<package pkgid="a04c0d8c7d875f3f0ec76c7ab3c95230f10d63601607dd40ca4d6b3dac2a3887" name="dkimproxy" arch="src">
  <version epoch="0" ver="1.4.1" rel="bp156.6.3.1"/>
  <changelog author="varkoly@suse.de" date="1217073600">- Initial Version of dkimporxy</changelog>
  <changelog author="crrodriguez@suse.de" date="1218715200">- fix init scripts
- fix installation  of init scripts</changelog>
  <changelog author="varkoly@suse.de" date="1220616000">- remove fillup_and_insserv from spec file</changelog>
  <changelog author="chris@computersalat.de" date="1297771200">- remove author</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1335009600">- Updated to upstream version 1.4.1
  - There is a new option for setting the i= tag on generated
  signatures.
  - The $sender macro, as it is called, is not the only new macro.
  See the NEWS file for details.</changelog>
  <changelog author="coolo@suse.com" date="1339416000">- avoid providing perl modules that are not in the source, rather
  hard require the needed module</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd and groupadd invocation: -o is useless without -u and
  newer versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="varkoly@suse.com" date="1543320000">- bsc#1116007 - Please convert SysV init scripts by dkimproxy into
  native systemd services</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1577102400">- Add the "installation" section.
- Changed "PreExecStart" to "ExecStartPre".
- Added/changed the type to forking</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1592568000">- Remove sysvinit remains from this package.</changelog>
  <changelog author="Mihaly Meszaros &lt;mmeszaros@npsh.hu&gt;" date="1623326400">- fix PID filename typos in systemd unit files</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1699272000">- Fix boo#1216919
  * create /run/dkimproxy using tmpfiles
  * use the correct env var for the hostname</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1699444800">- Follow-up fix for boo#1216919
  * make sure dkimproxy-in works even when the dynamically-created
    config file under /run does not exist</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1704196800">- Remove the dependency on perl(IO::Socket::INET6) as it has been
  deprecated by upstream, is no longer suitable for use and its not
  being maintained. A compatible replacement for this package is
  perl(IO::Socket::IP) which is shipped by the perl-base package.
  * Rebase dkimproxy-1.4.1-avoid-perl-provides.diff
  * Add dkimproxy-port-perl-IO-Socket-INET6-to-IP.patch
  * Reported upstream: https://sourceforge.net/p/dkimproxy/bugs/39</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1718280000">- Fix ExecStartPre path. This changes depending on %_libexecdir macro.
  Problem was mentioned in (bsc#1217173)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1724846400">- Fix VUL-1: dkimproxy: possible symlink attack in /run/dkimproxy/sysconfig
  (bsc#1217173)
  Remove environment variables DKIMPROXY_USER DKIMPROXY_GROUP.
  These are hardcoded anyway in dkimproxy-tmpfiles. Changing these
  would only lead to trouble. Now User and Group in dkimproxy-in.service
  are set to dkim to avoid the mentioned security issue.
  ExecStart got a '+' to execute it by root rights.</changelog>
</package>
<package pkgid="f07e6cad09ca6a7a845408837214f5bb128bd6b6ba0e848d5ae1fbab2d37430a" name="dnscrypt-proxy" arch="aarch64">
  <version epoch="0" ver="2.1.7" rel="bp156.2.3.1"/>
  <changelog author="cunix@mail.de - 2.0.42" date="1590235200">- Upgrade to 2.0.42 (boo#1165343)
- Spec files from home:darix:apps/dnscrypt-proxy and
  home:cunix:go/dnscrypt-proxy2 merged into existing spec.
- v1 of dnscrypt-proxy is not supported anymore and v2 is
  a new project. This will require v1 users to migrate their
  configuration.
- dnscrypt-proxy-default-config.patch deleted because patched
  file 'dnscrypt-proxy.conf' is not used anymore.</changelog>
  <changelog author="cunix@mail.de - 2.0.43" date="1591704000">- Minimum golang version now at 1.14
- Update to version 2.0.43
  * When stored into a file, service logs now only contain data
    from the most recent launch. This can be changed with the
    new 'log_file_latest' option.
  * Support for DNS64 translation implemented.
  * Connections to DoH servers can be authenticated
    using TLS client certificates.
  * Multiple stamps are now allowed for a single server
    in resolvers and relays lists.
  * Updates and additions for the example domain block lists.
  * Cached configuration files can now be temporarily used if
    they are out of date, but bootstraping is impossible.
  * 'generate-domains-blacklists' now tries to deduplicate
    entries clobbered by wildcard rules.
  * 'generate-domains-blacklists' can now directly
    write lists to a file with the `-o` command-line option.
  * Cache files are now downloaded as the user the daemon will
    be running as. This fixes permission issues at startup time.
  * Forwarded queries are now subject to global timeouts,
    and can be forced to use TCP.
  * The 'ct' parameter has been removed from DoH queries,
    as Google doesn't require it any more.</changelog>
  <changelog author="cunix@mail.de - 2.0.44" date="1591963200">- Update to version 2.0.44
  * Netprobes and listening sockets are now ignored when the
    '-list', '-list-all', '-show-certs' or '-check'
    command-line switches are used.
  * 'tls_client_auth' was renamed to 'doh_client_x509_auth'.
    A section with the previous name is temporarily ignored if empty,
    but will error out if not.
  * Updates to the set of block lists.
- Breaking change from 2.0.43 Update:
  The 'tls_client_auth' section was renamed to 'doh_client_x509_auth'.
  If you had a tls_client_auth section in the configuration file,
  it needs to be updated/renamed/deleted.</changelog>
  <changelog author="cunix@mail.de" date="1593518400">- Made PID available in /run/dnscrypt-proxy/dnscrypt-proxy.pid
  through systemd service unit.
- README.openSUSE updated.
- dnscrypt-proxy.socket.conf added as example for a systemd
  drop-in file to override the socket unit.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1595419200">- Sort file lists to make package build reproducible</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1609761600">- Update to version 2.0.45
  * Configuration changes (to be required in versions 2.1.x):
  - [blacklist] has been renamed to [blocked_names]
  - [ip_blacklist] has been renamed to [blocked_ips]
  - [whitelist] has been renamed to [allowed_names]
  - generate-domains-blacklist.py has been renamed to
    generate-domains-blocklist.py, and the configuration files
    have been renamed as well.
  * dnscrypt-proxy -resolve has been completely revamped, and now
    requires the configuration file to be accessible. It will send
    a query to an IP address of the dnscrypt-proxy server by default.
    Sending queries to arbitrary servers is also supported with the
    new -resolve name,address syntax.
  * Relay lists can be set to * for automatic relay selection.
    When a wildcard is used, either for the list of servers or relays,
    the proxy ensures that relays and servers are on distinct networks.
  * Lying resolvers are detected and reported.
  * New return code: NOT_READY for queries received before the proxy
    has been initialized.
  * Server lists can't be older than a week any more, even if directory
    permissions are incorrect and cache files cannot be written.
  * New feature: allowed_ips, to configure a set of IP addresses to never
    block no matter what DNS name resolves to them.
  * Hard-coded IP addresses can be immediately returned for test queries
    sent by operating systems in order to check for connectivity and captive portals.
    Such responses can be sent even before an interface is considered as enabled by the
    operating system. This can be configured in a new section called [captive_portals].
  * On Linux, OpenBSD and FreeBSD, listen_addresses can now include IP addresses
    that haven't been assigned to an interface yet.
  * generate-domains-blocklist.py: regular expressions are now ignored in time-based entries.
  * Minor bug fixes and logging improvements.
  * Cloaking plugin: if an entry has multiple IP addresses for a type, all the IP
    addresses are now returned instead of a random one.
  * Static entries can now include DNSCrypt relays.
  * Name blocking: aliases relying on SVCB and HTTPS records can now be blocked in
    addition to aliases via regular CNAME records.
  * EDNS-Client-Subnet information can be added to outgoing queries. Instead of sending
    the actual client IP, ECS information is user configurable, and IP addresses will be
    randomly chosen for every query.
  * Initial DoH queries are now checked using random names in order to properly measure
    CDNs such as Tencent that ignore the padding.
  * DoH: the max-stale cache control directive is now present in queries.
  * Logs can now be sent to /dev/stdout instead of actual files.
  * New download mirror (https://download.dnscrypt.net) for resolvers, relays and parental-control.</changelog>
  <changelog author="cunix@mail.de" date="1609761601">- Minimum golang version now at 1.15
- Include 'notice' and 'patents' files of vendored packages.
- Paths and hints in configuration file adjusted and added.</changelog>
  <changelog author="cunix@mail.de" date="1610020800">- Added optional resolvconf support via systemd unit.</changelog>
  <changelog author="cunix@mail.de" date="1612008000">- Use less predictable temporary files during build (bsc#1181502).</changelog>
  <changelog author="cunix@mail.de - 2.1.0" date="1629028800">- Update to version 2.1.0
  * "fallback_resolvers" was renamed to "bootstrap_resolvers"
    Please update your configuration file accordingly.
  * Support for Oblivious DoH.
  * If the proxy is overloaded, cached and synthetic queries now
    keep being served, while non-cached queries are delayed.
  * Source URLs are now randomized.
  * Default "reject_ttl" reduced from 600 to 10
- Minimum golang version now at 1.16
- Find more "legal" files to include.</changelog>
  <changelog author="cunix@mail.de - 2.1.1" date="1633089600">- Update to version 2.1.1
  * Serve cached DoH responses when experiencing connectivity issues.
  * Time attributes in allow/block lists were ignored.
  * TTL served to clients is now rounded and starts decreasing
    before the first query is received.
  * Time-based rules are properly handled again in generate-domains-blocklist.
  * DoH/ODoH: entries with an IP address and using a non-standard port
    should not require help from a bootstrap resolver any more.</changelog>
  <changelog author="cunix@mail.de" date="1647950400">- switched to vendored_licenses_packager as build dependency</changelog>
  <changelog author="cunix@mail.de - 2.1.2" date="1659441600">- Update to version 2.1.2
  * Support for DoH over HTTP/3 (DoH3, HTTP over QUIC)
    Compatible servers will automatically use it.
    Note that QUIC uses UDP
    (usually over port 443, like DNSCrypt) instead of TCP.
  * fixed memory usage kept growing due to channels not
    being properly closed
  * DNS64: "CNAME" records are now translated like other responses
  * A relay whose name has been configured, but doesn't exist in the
    list of available relays is now a hard error
  * "dnscrypt-proxy -resolve" now reports if ECS (EDNS-clientsubnet) is
    supported by the server
  * "dnscrypt-proxy -list" now includes ODoH (Oblivious DoH) servers
  * Local DoH: queries made using the "GET" method are now handled
  * "PTR" queries are now supported for cloaked domains
- Minimum golang version now at 1.18</changelog>
  <changelog author="cunix@mail.de - 2.1.3" date="1675598400">- Update to version 2.1.3
  * DNS-over-HTTP/3 (QUIC) should be more reliable. In particular,
    version 2.1.2 required another (non-QUIC) resolver to be present for
    bootstrapping, or the resolver's IP address to be present in the
    stamp. This is not the case any more.
  * dnscrypt-proxy is now compatible with Go 1.20+
  * Commands (-check, -show-certs, -list, -list-all) now ignore log
    files and directly output the result to the standard output.
  * The "cert_ignore_timestamp" configuration switch is now documented.
    It allows ignoring timestamps for DNSCrypt certificate verification,
    until a first server is available. This should only be used on devices
    that don't have any ways to set the clock before DNS service is up.
    However, a safer alternative remains to use an NTP server with a fixed
    IP address (such as time.google.com), configured in the captive portals
    file.
  * Cloaking: when a name is cloaked, unsupported record types now
    return a blocked response rather than the actual records.
  * systemd: report Ready earlier as dnscrypt-proxy can itself manage
    retries for updates/refreshes.
  * vendored dependencies updated</changelog>
  <changelog author="cunix@mail.de - 2.1.4" date="1676116800">- Update to version 2.1.4
  * Fixes a regression from version 2.1.3: when cloaking was enabled,
    blocked responses were returned for records that were not A/AAAA/PTR
    even for names that were not in the cloaked list.</changelog>
  <changelog author="cunix@mail.de - 2.1.5" date="1691928000">- Update to version 2.1.5
  * Responses to blocked queries now include extended error codes
  * Reliability of connections using HTTP/3 has been improved
  * New configuration directive: "tls_key_log_file"
    to dump TLS secret keys</changelog>
  <changelog author="cunix@mail.de" date="1707134400">- use systemd sysusers</changelog>
  <changelog author="cunix@mail.de" date="1713700800">- added patch quic-go.patch (boo#1222473)</changelog>
  <changelog author="Gerald Chen &lt;gerald_chen@foxmail.com&gt;" date="1736596800">- Update to version 2.1.6
  * Forwarding: in the list of servers for a zone, the `$BOOTSTRAP`
    keyword can be included as a shortcut to forward to the bootstrap
    servers. And the `$DHCP` keyword can be included to forward to the
    DNS resolvers provided by the local DHCP server. Based on work by YX
    Hao, thanks! DHCP forwarding should be considered experimental and my
    not work on all operating systems. A rule for a zone can mix and
    match multiple forwarder types, such as `10.0.0.1,10.0.0.254,$DHCP,
    192.168.1.1,$BOOTSTRAP`. Note that this is not implemented for
    captive portals yet.
  * Lying resolvers are now skipped, instead of just printing an error.
    This doesn't apply to captive portal and forwarding entries, which
    are the only reasonable use case for lying resolvers.
  * Support for XSalsa20 in DNSCrypt has been removed. This was not
    documented, and was supserseded by XChaCha20 in 2016.
  * Source files are now fetched with compression.
  * DNS64: compatibility has been improved.
  * Forwarding: the root domain (`.`) can now be forwarded.
  * The ARC caching algorithm has been replaced by the SIEVE algorithm.
  * Properties of multiple servers are now updated simultaneously. The
    concurrency level can be adjusted with the new
    `cert_refresh_concurrency` setting. Contributed by YX Hao.
  * MSI packages for DNSCrypt can now easily be built.
  * New command-line flag: `-include-relays` to include relays in `-list`
    and `-list-all`.
  * Support for DNS extended error codes has been added.
  * Documentation updates, bug fixes, dependency updates.
- Drop quic-go.patch, for dnscrypt-proxy already pulls fixed quic-go v0.48.2</changelog>
  <changelog author="cunix@mail.de" date="1736596801">- Update to version 2.1.7
  * Reintroduces support for XSalsa20 enryption in DNSCrypt,
    which was removed in 2.1.6. Unfortunately, a bunch of servers still
    only support that encryption system.
  * Added check for lying resolvers was added for DNSCrypt, similar to
    the one that was already present for DoH and ODoH.
- Minimum golang version now at 1.23
- With vendored quic-go at 0.48.2 since update to 2.1.6
  boo#1222473 and boo#1235156 should be fixed.
- Trimmed long lines in last changelog entry</changelog>
</package>
<package pkgid="d724de9937f793bd059a3ed4dd0bc183d1b4285077024af2c7bfdddf7e0e0985" name="dnscrypt-proxy" arch="i586">
  <version epoch="0" ver="2.1.7" rel="bp156.2.3.1"/>
  <changelog author="cunix@mail.de - 2.0.42" date="1590235200">- Upgrade to 2.0.42 (boo#1165343)
- Spec files from home:darix:apps/dnscrypt-proxy and
  home:cunix:go/dnscrypt-proxy2 merged into existing spec.
- v1 of dnscrypt-proxy is not supported anymore and v2 is
  a new project. This will require v1 users to migrate their
  configuration.
- dnscrypt-proxy-default-config.patch deleted because patched
  file 'dnscrypt-proxy.conf' is not used anymore.</changelog>
  <changelog author="cunix@mail.de - 2.0.43" date="1591704000">- Minimum golang version now at 1.14
- Update to version 2.0.43
  * When stored into a file, service logs now only contain data
    from the most recent launch. This can be changed with the
    new 'log_file_latest' option.
  * Support for DNS64 translation implemented.
  * Connections to DoH servers can be authenticated
    using TLS client certificates.
  * Multiple stamps are now allowed for a single server
    in resolvers and relays lists.
  * Updates and additions for the example domain block lists.
  * Cached configuration files can now be temporarily used if
    they are out of date, but bootstraping is impossible.
  * 'generate-domains-blacklists' now tries to deduplicate
    entries clobbered by wildcard rules.
  * 'generate-domains-blacklists' can now directly
    write lists to a file with the `-o` command-line option.
  * Cache files are now downloaded as the user the daemon will
    be running as. This fixes permission issues at startup time.
  * Forwarded queries are now subject to global timeouts,
    and can be forced to use TCP.
  * The 'ct' parameter has been removed from DoH queries,
    as Google doesn't require it any more.</changelog>
  <changelog author="cunix@mail.de - 2.0.44" date="1591963200">- Update to version 2.0.44
  * Netprobes and listening sockets are now ignored when the
    '-list', '-list-all', '-show-certs' or '-check'
    command-line switches are used.
  * 'tls_client_auth' was renamed to 'doh_client_x509_auth'.
    A section with the previous name is temporarily ignored if empty,
    but will error out if not.
  * Updates to the set of block lists.
- Breaking change from 2.0.43 Update:
  The 'tls_client_auth' section was renamed to 'doh_client_x509_auth'.
  If you had a tls_client_auth section in the configuration file,
  it needs to be updated/renamed/deleted.</changelog>
  <changelog author="cunix@mail.de" date="1593518400">- Made PID available in /run/dnscrypt-proxy/dnscrypt-proxy.pid
  through systemd service unit.
- README.openSUSE updated.
- dnscrypt-proxy.socket.conf added as example for a systemd
  drop-in file to override the socket unit.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1595419200">- Sort file lists to make package build reproducible</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1609761600">- Update to version 2.0.45
  * Configuration changes (to be required in versions 2.1.x):
  - [blacklist] has been renamed to [blocked_names]
  - [ip_blacklist] has been renamed to [blocked_ips]
  - [whitelist] has been renamed to [allowed_names]
  - generate-domains-blacklist.py has been renamed to
    generate-domains-blocklist.py, and the configuration files
    have been renamed as well.
  * dnscrypt-proxy -resolve has been completely revamped, and now
    requires the configuration file to be accessible. It will send
    a query to an IP address of the dnscrypt-proxy server by default.
    Sending queries to arbitrary servers is also supported with the
    new -resolve name,address syntax.
  * Relay lists can be set to * for automatic relay selection.
    When a wildcard is used, either for the list of servers or relays,
    the proxy ensures that relays and servers are on distinct networks.
  * Lying resolvers are detected and reported.
  * New return code: NOT_READY for queries received before the proxy
    has been initialized.
  * Server lists can't be older than a week any more, even if directory
    permissions are incorrect and cache files cannot be written.
  * New feature: allowed_ips, to configure a set of IP addresses to never
    block no matter what DNS name resolves to them.
  * Hard-coded IP addresses can be immediately returned for test queries
    sent by operating systems in order to check for connectivity and captive portals.
    Such responses can be sent even before an interface is considered as enabled by the
    operating system. This can be configured in a new section called [captive_portals].
  * On Linux, OpenBSD and FreeBSD, listen_addresses can now include IP addresses
    that haven't been assigned to an interface yet.
  * generate-domains-blocklist.py: regular expressions are now ignored in time-based entries.
  * Minor bug fixes and logging improvements.
  * Cloaking plugin: if an entry has multiple IP addresses for a type, all the IP
    addresses are now returned instead of a random one.
  * Static entries can now include DNSCrypt relays.
  * Name blocking: aliases relying on SVCB and HTTPS records can now be blocked in
    addition to aliases via regular CNAME records.
  * EDNS-Client-Subnet information can be added to outgoing queries. Instead of sending
    the actual client IP, ECS information is user configurable, and IP addresses will be
    randomly chosen for every query.
  * Initial DoH queries are now checked using random names in order to properly measure
    CDNs such as Tencent that ignore the padding.
  * DoH: the max-stale cache control directive is now present in queries.
  * Logs can now be sent to /dev/stdout instead of actual files.
  * New download mirror (https://download.dnscrypt.net) for resolvers, relays and parental-control.</changelog>
  <changelog author="cunix@mail.de" date="1609761601">- Minimum golang version now at 1.15
- Include 'notice' and 'patents' files of vendored packages.
- Paths and hints in configuration file adjusted and added.</changelog>
  <changelog author="cunix@mail.de" date="1610020800">- Added optional resolvconf support via systemd unit.</changelog>
  <changelog author="cunix@mail.de" date="1612008000">- Use less predictable temporary files during build (bsc#1181502).</changelog>
  <changelog author="cunix@mail.de - 2.1.0" date="1629028800">- Update to version 2.1.0
  * "fallback_resolvers" was renamed to "bootstrap_resolvers"
    Please update your configuration file accordingly.
  * Support for Oblivious DoH.
  * If the proxy is overloaded, cached and synthetic queries now
    keep being served, while non-cached queries are delayed.
  * Source URLs are now randomized.
  * Default "reject_ttl" reduced from 600 to 10
- Minimum golang version now at 1.16
- Find more "legal" files to include.</changelog>
  <changelog author="cunix@mail.de - 2.1.1" date="1633089600">- Update to version 2.1.1
  * Serve cached DoH responses when experiencing connectivity issues.
  * Time attributes in allow/block lists were ignored.
  * TTL served to clients is now rounded and starts decreasing
    before the first query is received.
  * Time-based rules are properly handled again in generate-domains-blocklist.
  * DoH/ODoH: entries with an IP address and using a non-standard port
    should not require help from a bootstrap resolver any more.</changelog>
  <changelog author="cunix@mail.de" date="1647950400">- switched to vendored_licenses_packager as build dependency</changelog>
  <changelog author="cunix@mail.de - 2.1.2" date="1659441600">- Update to version 2.1.2
  * Support for DoH over HTTP/3 (DoH3, HTTP over QUIC)
    Compatible servers will automatically use it.
    Note that QUIC uses UDP
    (usually over port 443, like DNSCrypt) instead of TCP.
  * fixed memory usage kept growing due to channels not
    being properly closed
  * DNS64: "CNAME" records are now translated like other responses
  * A relay whose name has been configured, but doesn't exist in the
    list of available relays is now a hard error
  * "dnscrypt-proxy -resolve" now reports if ECS (EDNS-clientsubnet) is
    supported by the server
  * "dnscrypt-proxy -list" now includes ODoH (Oblivious DoH) servers
  * Local DoH: queries made using the "GET" method are now handled
  * "PTR" queries are now supported for cloaked domains
- Minimum golang version now at 1.18</changelog>
  <changelog author="cunix@mail.de - 2.1.3" date="1675598400">- Update to version 2.1.3
  * DNS-over-HTTP/3 (QUIC) should be more reliable. In particular,
    version 2.1.2 required another (non-QUIC) resolver to be present for
    bootstrapping, or the resolver's IP address to be present in the
    stamp. This is not the case any more.
  * dnscrypt-proxy is now compatible with Go 1.20+
  * Commands (-check, -show-certs, -list, -list-all) now ignore log
    files and directly output the result to the standard output.
  * The "cert_ignore_timestamp" configuration switch is now documented.
    It allows ignoring timestamps for DNSCrypt certificate verification,
    until a first server is available. This should only be used on devices
    that don't have any ways to set the clock before DNS service is up.
    However, a safer alternative remains to use an NTP server with a fixed
    IP address (such as time.google.com), configured in the captive portals
    file.
  * Cloaking: when a name is cloaked, unsupported record types now
    return a blocked response rather than the actual records.
  * systemd: report Ready earlier as dnscrypt-proxy can itself manage
    retries for updates/refreshes.
  * vendored dependencies updated</changelog>
  <changelog author="cunix@mail.de - 2.1.4" date="1676116800">- Update to version 2.1.4
  * Fixes a regression from version 2.1.3: when cloaking was enabled,
    blocked responses were returned for records that were not A/AAAA/PTR
    even for names that were not in the cloaked list.</changelog>
  <changelog author="cunix@mail.de - 2.1.5" date="1691928000">- Update to version 2.1.5
  * Responses to blocked queries now include extended error codes
  * Reliability of connections using HTTP/3 has been improved
  * New configuration directive: "tls_key_log_file"
    to dump TLS secret keys</changelog>
  <changelog author="cunix@mail.de" date="1707134400">- use systemd sysusers</changelog>
  <changelog author="cunix@mail.de" date="1713700800">- added patch quic-go.patch (boo#1222473)</changelog>
  <changelog author="Gerald Chen &lt;gerald_chen@foxmail.com&gt;" date="1736596800">- Update to version 2.1.6
  * Forwarding: in the list of servers for a zone, the `$BOOTSTRAP`
    keyword can be included as a shortcut to forward to the bootstrap
    servers. And the `$DHCP` keyword can be included to forward to the
    DNS resolvers provided by the local DHCP server. Based on work by YX
    Hao, thanks! DHCP forwarding should be considered experimental and my
    not work on all operating systems. A rule for a zone can mix and
    match multiple forwarder types, such as `10.0.0.1,10.0.0.254,$DHCP,
    192.168.1.1,$BOOTSTRAP`. Note that this is not implemented for
    captive portals yet.
  * Lying resolvers are now skipped, instead of just printing an error.
    This doesn't apply to captive portal and forwarding entries, which
    are the only reasonable use case for lying resolvers.
  * Support for XSalsa20 in DNSCrypt has been removed. This was not
    documented, and was supserseded by XChaCha20 in 2016.
  * Source files are now fetched with compression.
  * DNS64: compatibility has been improved.
  * Forwarding: the root domain (`.`) can now be forwarded.
  * The ARC caching algorithm has been replaced by the SIEVE algorithm.
  * Properties of multiple servers are now updated simultaneously. The
    concurrency level can be adjusted with the new
    `cert_refresh_concurrency` setting. Contributed by YX Hao.
  * MSI packages for DNSCrypt can now easily be built.
  * New command-line flag: `-include-relays` to include relays in `-list`
    and `-list-all`.
  * Support for DNS extended error codes has been added.
  * Documentation updates, bug fixes, dependency updates.
- Drop quic-go.patch, for dnscrypt-proxy already pulls fixed quic-go v0.48.2</changelog>
  <changelog author="cunix@mail.de" date="1736596801">- Update to version 2.1.7
  * Reintroduces support for XSalsa20 enryption in DNSCrypt,
    which was removed in 2.1.6. Unfortunately, a bunch of servers still
    only support that encryption system.
  * Added check for lying resolvers was added for DNSCrypt, similar to
    the one that was already present for DoH and ODoH.
- Minimum golang version now at 1.23
- With vendored quic-go at 0.48.2 since update to 2.1.6
  boo#1222473 and boo#1235156 should be fixed.
- Trimmed long lines in last changelog entry</changelog>
</package>
<package pkgid="0ab8e481ab0b45e79fcb5d6c092f3b0cd6ac175131a28aefbffd0b165b7a51d3" name="dnscrypt-proxy" arch="ppc64le">
  <version epoch="0" ver="2.1.7" rel="bp156.2.3.1"/>
  <changelog author="cunix@mail.de - 2.0.42" date="1590235200">- Upgrade to 2.0.42 (boo#1165343)
- Spec files from home:darix:apps/dnscrypt-proxy and
  home:cunix:go/dnscrypt-proxy2 merged into existing spec.
- v1 of dnscrypt-proxy is not supported anymore and v2 is
  a new project. This will require v1 users to migrate their
  configuration.
- dnscrypt-proxy-default-config.patch deleted because patched
  file 'dnscrypt-proxy.conf' is not used anymore.</changelog>
  <changelog author="cunix@mail.de - 2.0.43" date="1591704000">- Minimum golang version now at 1.14
- Update to version 2.0.43
  * When stored into a file, service logs now only contain data
    from the most recent launch. This can be changed with the
    new 'log_file_latest' option.
  * Support for DNS64 translation implemented.
  * Connections to DoH servers can be authenticated
    using TLS client certificates.
  * Multiple stamps are now allowed for a single server
    in resolvers and relays lists.
  * Updates and additions for the example domain block lists.
  * Cached configuration files can now be temporarily used if
    they are out of date, but bootstraping is impossible.
  * 'generate-domains-blacklists' now tries to deduplicate
    entries clobbered by wildcard rules.
  * 'generate-domains-blacklists' can now directly
    write lists to a file with the `-o` command-line option.
  * Cache files are now downloaded as the user the daemon will
    be running as. This fixes permission issues at startup time.
  * Forwarded queries are now subject to global timeouts,
    and can be forced to use TCP.
  * The 'ct' parameter has been removed from DoH queries,
    as Google doesn't require it any more.</changelog>
  <changelog author="cunix@mail.de - 2.0.44" date="1591963200">- Update to version 2.0.44
  * Netprobes and listening sockets are now ignored when the
    '-list', '-list-all', '-show-certs' or '-check'
    command-line switches are used.
  * 'tls_client_auth' was renamed to 'doh_client_x509_auth'.
    A section with the previous name is temporarily ignored if empty,
    but will error out if not.
  * Updates to the set of block lists.
- Breaking change from 2.0.43 Update:
  The 'tls_client_auth' section was renamed to 'doh_client_x509_auth'.
  If you had a tls_client_auth section in the configuration file,
  it needs to be updated/renamed/deleted.</changelog>
  <changelog author="cunix@mail.de" date="1593518400">- Made PID available in /run/dnscrypt-proxy/dnscrypt-proxy.pid
  through systemd service unit.
- README.openSUSE updated.
- dnscrypt-proxy.socket.conf added as example for a systemd
  drop-in file to override the socket unit.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1595419200">- Sort file lists to make package build reproducible</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1609761600">- Update to version 2.0.45
  * Configuration changes (to be required in versions 2.1.x):
  - [blacklist] has been renamed to [blocked_names]
  - [ip_blacklist] has been renamed to [blocked_ips]
  - [whitelist] has been renamed to [allowed_names]
  - generate-domains-blacklist.py has been renamed to
    generate-domains-blocklist.py, and the configuration files
    have been renamed as well.
  * dnscrypt-proxy -resolve has been completely revamped, and now
    requires the configuration file to be accessible. It will send
    a query to an IP address of the dnscrypt-proxy server by default.
    Sending queries to arbitrary servers is also supported with the
    new -resolve name,address syntax.
  * Relay lists can be set to * for automatic relay selection.
    When a wildcard is used, either for the list of servers or relays,
    the proxy ensures that relays and servers are on distinct networks.
  * Lying resolvers are detected and reported.
  * New return code: NOT_READY for queries received before the proxy
    has been initialized.
  * Server lists can't be older than a week any more, even if directory
    permissions are incorrect and cache files cannot be written.
  * New feature: allowed_ips, to configure a set of IP addresses to never
    block no matter what DNS name resolves to them.
  * Hard-coded IP addresses can be immediately returned for test queries
    sent by operating systems in order to check for connectivity and captive portals.
    Such responses can be sent even before an interface is considered as enabled by the
    operating system. This can be configured in a new section called [captive_portals].
  * On Linux, OpenBSD and FreeBSD, listen_addresses can now include IP addresses
    that haven't been assigned to an interface yet.
  * generate-domains-blocklist.py: regular expressions are now ignored in time-based entries.
  * Minor bug fixes and logging improvements.
  * Cloaking plugin: if an entry has multiple IP addresses for a type, all the IP
    addresses are now returned instead of a random one.
  * Static entries can now include DNSCrypt relays.
  * Name blocking: aliases relying on SVCB and HTTPS records can now be blocked in
    addition to aliases via regular CNAME records.
  * EDNS-Client-Subnet information can be added to outgoing queries. Instead of sending
    the actual client IP, ECS information is user configurable, and IP addresses will be
    randomly chosen for every query.
  * Initial DoH queries are now checked using random names in order to properly measure
    CDNs such as Tencent that ignore the padding.
  * DoH: the max-stale cache control directive is now present in queries.
  * Logs can now be sent to /dev/stdout instead of actual files.
  * New download mirror (https://download.dnscrypt.net) for resolvers, relays and parental-control.</changelog>
  <changelog author="cunix@mail.de" date="1609761601">- Minimum golang version now at 1.15
- Include 'notice' and 'patents' files of vendored packages.
- Paths and hints in configuration file adjusted and added.</changelog>
  <changelog author="cunix@mail.de" date="1610020800">- Added optional resolvconf support via systemd unit.</changelog>
  <changelog author="cunix@mail.de" date="1612008000">- Use less predictable temporary files during build (bsc#1181502).</changelog>
  <changelog author="cunix@mail.de - 2.1.0" date="1629028800">- Update to version 2.1.0
  * "fallback_resolvers" was renamed to "bootstrap_resolvers"
    Please update your configuration file accordingly.
  * Support for Oblivious DoH.
  * If the proxy is overloaded, cached and synthetic queries now
    keep being served, while non-cached queries are delayed.
  * Source URLs are now randomized.
  * Default "reject_ttl" reduced from 600 to 10
- Minimum golang version now at 1.16
- Find more "legal" files to include.</changelog>
  <changelog author="cunix@mail.de - 2.1.1" date="1633089600">- Update to version 2.1.1
  * Serve cached DoH responses when experiencing connectivity issues.
  * Time attributes in allow/block lists were ignored.
  * TTL served to clients is now rounded and starts decreasing
    before the first query is received.
  * Time-based rules are properly handled again in generate-domains-blocklist.
  * DoH/ODoH: entries with an IP address and using a non-standard port
    should not require help from a bootstrap resolver any more.</changelog>
  <changelog author="cunix@mail.de" date="1647950400">- switched to vendored_licenses_packager as build dependency</changelog>
  <changelog author="cunix@mail.de - 2.1.2" date="1659441600">- Update to version 2.1.2
  * Support for DoH over HTTP/3 (DoH3, HTTP over QUIC)
    Compatible servers will automatically use it.
    Note that QUIC uses UDP
    (usually over port 443, like DNSCrypt) instead of TCP.
  * fixed memory usage kept growing due to channels not
    being properly closed
  * DNS64: "CNAME" records are now translated like other responses
  * A relay whose name has been configured, but doesn't exist in the
    list of available relays is now a hard error
  * "dnscrypt-proxy -resolve" now reports if ECS (EDNS-clientsubnet) is
    supported by the server
  * "dnscrypt-proxy -list" now includes ODoH (Oblivious DoH) servers
  * Local DoH: queries made using the "GET" method are now handled
  * "PTR" queries are now supported for cloaked domains
- Minimum golang version now at 1.18</changelog>
  <changelog author="cunix@mail.de - 2.1.3" date="1675598400">- Update to version 2.1.3
  * DNS-over-HTTP/3 (QUIC) should be more reliable. In particular,
    version 2.1.2 required another (non-QUIC) resolver to be present for
    bootstrapping, or the resolver's IP address to be present in the
    stamp. This is not the case any more.
  * dnscrypt-proxy is now compatible with Go 1.20+
  * Commands (-check, -show-certs, -list, -list-all) now ignore log
    files and directly output the result to the standard output.
  * The "cert_ignore_timestamp" configuration switch is now documented.
    It allows ignoring timestamps for DNSCrypt certificate verification,
    until a first server is available. This should only be used on devices
    that don't have any ways to set the clock before DNS service is up.
    However, a safer alternative remains to use an NTP server with a fixed
    IP address (such as time.google.com), configured in the captive portals
    file.
  * Cloaking: when a name is cloaked, unsupported record types now
    return a blocked response rather than the actual records.
  * systemd: report Ready earlier as dnscrypt-proxy can itself manage
    retries for updates/refreshes.
  * vendored dependencies updated</changelog>
  <changelog author="cunix@mail.de - 2.1.4" date="1676116800">- Update to version 2.1.4
  * Fixes a regression from version 2.1.3: when cloaking was enabled,
    blocked responses were returned for records that were not A/AAAA/PTR
    even for names that were not in the cloaked list.</changelog>
  <changelog author="cunix@mail.de - 2.1.5" date="1691928000">- Update to version 2.1.5
  * Responses to blocked queries now include extended error codes
  * Reliability of connections using HTTP/3 has been improved
  * New configuration directive: "tls_key_log_file"
    to dump TLS secret keys</changelog>
  <changelog author="cunix@mail.de" date="1707134400">- use systemd sysusers</changelog>
  <changelog author="cunix@mail.de" date="1713700800">- added patch quic-go.patch (boo#1222473)</changelog>
  <changelog author="Gerald Chen &lt;gerald_chen@foxmail.com&gt;" date="1736596800">- Update to version 2.1.6
  * Forwarding: in the list of servers for a zone, the `$BOOTSTRAP`
    keyword can be included as a shortcut to forward to the bootstrap
    servers. And the `$DHCP` keyword can be included to forward to the
    DNS resolvers provided by the local DHCP server. Based on work by YX
    Hao, thanks! DHCP forwarding should be considered experimental and my
    not work on all operating systems. A rule for a zone can mix and
    match multiple forwarder types, such as `10.0.0.1,10.0.0.254,$DHCP,
    192.168.1.1,$BOOTSTRAP`. Note that this is not implemented for
    captive portals yet.
  * Lying resolvers are now skipped, instead of just printing an error.
    This doesn't apply to captive portal and forwarding entries, which
    are the only reasonable use case for lying resolvers.
  * Support for XSalsa20 in DNSCrypt has been removed. This was not
    documented, and was supserseded by XChaCha20 in 2016.
  * Source files are now fetched with compression.
  * DNS64: compatibility has been improved.
  * Forwarding: the root domain (`.`) can now be forwarded.
  * The ARC caching algorithm has been replaced by the SIEVE algorithm.
  * Properties of multiple servers are now updated simultaneously. The
    concurrency level can be adjusted with the new
    `cert_refresh_concurrency` setting. Contributed by YX Hao.
  * MSI packages for DNSCrypt can now easily be built.
  * New command-line flag: `-include-relays` to include relays in `-list`
    and `-list-all`.
  * Support for DNS extended error codes has been added.
  * Documentation updates, bug fixes, dependency updates.
- Drop quic-go.patch, for dnscrypt-proxy already pulls fixed quic-go v0.48.2</changelog>
  <changelog author="cunix@mail.de" date="1736596801">- Update to version 2.1.7
  * Reintroduces support for XSalsa20 enryption in DNSCrypt,
    which was removed in 2.1.6. Unfortunately, a bunch of servers still
    only support that encryption system.
  * Added check for lying resolvers was added for DNSCrypt, similar to
    the one that was already present for DoH and ODoH.
- Minimum golang version now at 1.23
- With vendored quic-go at 0.48.2 since update to 2.1.6
  boo#1222473 and boo#1235156 should be fixed.
- Trimmed long lines in last changelog entry</changelog>
</package>
<package pkgid="bfa05b3916896897ccbb8e0dc06bb59f3365828839b8e315d3651ecb5f4b6c99" name="dnscrypt-proxy" arch="s390x">
  <version epoch="0" ver="2.1.7" rel="bp156.2.3.1"/>
  <changelog author="cunix@mail.de - 2.0.42" date="1590235200">- Upgrade to 2.0.42 (boo#1165343)
- Spec files from home:darix:apps/dnscrypt-proxy and
  home:cunix:go/dnscrypt-proxy2 merged into existing spec.
- v1 of dnscrypt-proxy is not supported anymore and v2 is
  a new project. This will require v1 users to migrate their
  configuration.
- dnscrypt-proxy-default-config.patch deleted because patched
  file 'dnscrypt-proxy.conf' is not used anymore.</changelog>
  <changelog author="cunix@mail.de - 2.0.43" date="1591704000">- Minimum golang version now at 1.14
- Update to version 2.0.43
  * When stored into a file, service logs now only contain data
    from the most recent launch. This can be changed with the
    new 'log_file_latest' option.
  * Support for DNS64 translation implemented.
  * Connections to DoH servers can be authenticated
    using TLS client certificates.
  * Multiple stamps are now allowed for a single server
    in resolvers and relays lists.
  * Updates and additions for the example domain block lists.
  * Cached configuration files can now be temporarily used if
    they are out of date, but bootstraping is impossible.
  * 'generate-domains-blacklists' now tries to deduplicate
    entries clobbered by wildcard rules.
  * 'generate-domains-blacklists' can now directly
    write lists to a file with the `-o` command-line option.
  * Cache files are now downloaded as the user the daemon will
    be running as. This fixes permission issues at startup time.
  * Forwarded queries are now subject to global timeouts,
    and can be forced to use TCP.
  * The 'ct' parameter has been removed from DoH queries,
    as Google doesn't require it any more.</changelog>
  <changelog author="cunix@mail.de - 2.0.44" date="1591963200">- Update to version 2.0.44
  * Netprobes and listening sockets are now ignored when the
    '-list', '-list-all', '-show-certs' or '-check'
    command-line switches are used.
  * 'tls_client_auth' was renamed to 'doh_client_x509_auth'.
    A section with the previous name is temporarily ignored if empty,
    but will error out if not.
  * Updates to the set of block lists.
- Breaking change from 2.0.43 Update:
  The 'tls_client_auth' section was renamed to 'doh_client_x509_auth'.
  If you had a tls_client_auth section in the configuration file,
  it needs to be updated/renamed/deleted.</changelog>
  <changelog author="cunix@mail.de" date="1593518400">- Made PID available in /run/dnscrypt-proxy/dnscrypt-proxy.pid
  through systemd service unit.
- README.openSUSE updated.
- dnscrypt-proxy.socket.conf added as example for a systemd
  drop-in file to override the socket unit.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1595419200">- Sort file lists to make package build reproducible</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1609761600">- Update to version 2.0.45
  * Configuration changes (to be required in versions 2.1.x):
  - [blacklist] has been renamed to [blocked_names]
  - [ip_blacklist] has been renamed to [blocked_ips]
  - [whitelist] has been renamed to [allowed_names]
  - generate-domains-blacklist.py has been renamed to
    generate-domains-blocklist.py, and the configuration files
    have been renamed as well.
  * dnscrypt-proxy -resolve has been completely revamped, and now
    requires the configuration file to be accessible. It will send
    a query to an IP address of the dnscrypt-proxy server by default.
    Sending queries to arbitrary servers is also supported with the
    new -resolve name,address syntax.
  * Relay lists can be set to * for automatic relay selection.
    When a wildcard is used, either for the list of servers or relays,
    the proxy ensures that relays and servers are on distinct networks.
  * Lying resolvers are detected and reported.
  * New return code: NOT_READY for queries received before the proxy
    has been initialized.
  * Server lists can't be older than a week any more, even if directory
    permissions are incorrect and cache files cannot be written.
  * New feature: allowed_ips, to configure a set of IP addresses to never
    block no matter what DNS name resolves to them.
  * Hard-coded IP addresses can be immediately returned for test queries
    sent by operating systems in order to check for connectivity and captive portals.
    Such responses can be sent even before an interface is considered as enabled by the
    operating system. This can be configured in a new section called [captive_portals].
  * On Linux, OpenBSD and FreeBSD, listen_addresses can now include IP addresses
    that haven't been assigned to an interface yet.
  * generate-domains-blocklist.py: regular expressions are now ignored in time-based entries.
  * Minor bug fixes and logging improvements.
  * Cloaking plugin: if an entry has multiple IP addresses for a type, all the IP
    addresses are now returned instead of a random one.
  * Static entries can now include DNSCrypt relays.
  * Name blocking: aliases relying on SVCB and HTTPS records can now be blocked in
    addition to aliases via regular CNAME records.
  * EDNS-Client-Subnet information can be added to outgoing queries. Instead of sending
    the actual client IP, ECS information is user configurable, and IP addresses will be
    randomly chosen for every query.
  * Initial DoH queries are now checked using random names in order to properly measure
    CDNs such as Tencent that ignore the padding.
  * DoH: the max-stale cache control directive is now present in queries.
  * Logs can now be sent to /dev/stdout instead of actual files.
  * New download mirror (https://download.dnscrypt.net) for resolvers, relays and parental-control.</changelog>
  <changelog author="cunix@mail.de" date="1609761601">- Minimum golang version now at 1.15
- Include 'notice' and 'patents' files of vendored packages.
- Paths and hints in configuration file adjusted and added.</changelog>
  <changelog author="cunix@mail.de" date="1610020800">- Added optional resolvconf support via systemd unit.</changelog>
  <changelog author="cunix@mail.de" date="1612008000">- Use less predictable temporary files during build (bsc#1181502).</changelog>
  <changelog author="cunix@mail.de - 2.1.0" date="1629028800">- Update to version 2.1.0
  * "fallback_resolvers" was renamed to "bootstrap_resolvers"
    Please update your configuration file accordingly.
  * Support for Oblivious DoH.
  * If the proxy is overloaded, cached and synthetic queries now
    keep being served, while non-cached queries are delayed.
  * Source URLs are now randomized.
  * Default "reject_ttl" reduced from 600 to 10
- Minimum golang version now at 1.16
- Find more "legal" files to include.</changelog>
  <changelog author="cunix@mail.de - 2.1.1" date="1633089600">- Update to version 2.1.1
  * Serve cached DoH responses when experiencing connectivity issues.
  * Time attributes in allow/block lists were ignored.
  * TTL served to clients is now rounded and starts decreasing
    before the first query is received.
  * Time-based rules are properly handled again in generate-domains-blocklist.
  * DoH/ODoH: entries with an IP address and using a non-standard port
    should not require help from a bootstrap resolver any more.</changelog>
  <changelog author="cunix@mail.de" date="1647950400">- switched to vendored_licenses_packager as build dependency</changelog>
  <changelog author="cunix@mail.de - 2.1.2" date="1659441600">- Update to version 2.1.2
  * Support for DoH over HTTP/3 (DoH3, HTTP over QUIC)
    Compatible servers will automatically use it.
    Note that QUIC uses UDP
    (usually over port 443, like DNSCrypt) instead of TCP.
  * fixed memory usage kept growing due to channels not
    being properly closed
  * DNS64: "CNAME" records are now translated like other responses
  * A relay whose name has been configured, but doesn't exist in the
    list of available relays is now a hard error
  * "dnscrypt-proxy -resolve" now reports if ECS (EDNS-clientsubnet) is
    supported by the server
  * "dnscrypt-proxy -list" now includes ODoH (Oblivious DoH) servers
  * Local DoH: queries made using the "GET" method are now handled
  * "PTR" queries are now supported for cloaked domains
- Minimum golang version now at 1.18</changelog>
  <changelog author="cunix@mail.de - 2.1.3" date="1675598400">- Update to version 2.1.3
  * DNS-over-HTTP/3 (QUIC) should be more reliable. In particular,
    version 2.1.2 required another (non-QUIC) resolver to be present for
    bootstrapping, or the resolver's IP address to be present in the
    stamp. This is not the case any more.
  * dnscrypt-proxy is now compatible with Go 1.20+
  * Commands (-check, -show-certs, -list, -list-all) now ignore log
    files and directly output the result to the standard output.
  * The "cert_ignore_timestamp" configuration switch is now documented.
    It allows ignoring timestamps for DNSCrypt certificate verification,
    until a first server is available. This should only be used on devices
    that don't have any ways to set the clock before DNS service is up.
    However, a safer alternative remains to use an NTP server with a fixed
    IP address (such as time.google.com), configured in the captive portals
    file.
  * Cloaking: when a name is cloaked, unsupported record types now
    return a blocked response rather than the actual records.
  * systemd: report Ready earlier as dnscrypt-proxy can itself manage
    retries for updates/refreshes.
  * vendored dependencies updated</changelog>
  <changelog author="cunix@mail.de - 2.1.4" date="1676116800">- Update to version 2.1.4
  * Fixes a regression from version 2.1.3: when cloaking was enabled,
    blocked responses were returned for records that were not A/AAAA/PTR
    even for names that were not in the cloaked list.</changelog>
  <changelog author="cunix@mail.de - 2.1.5" date="1691928000">- Update to version 2.1.5
  * Responses to blocked queries now include extended error codes
  * Reliability of connections using HTTP/3 has been improved
  * New configuration directive: "tls_key_log_file"
    to dump TLS secret keys</changelog>
  <changelog author="cunix@mail.de" date="1707134400">- use systemd sysusers</changelog>
  <changelog author="cunix@mail.de" date="1713700800">- added patch quic-go.patch (boo#1222473)</changelog>
  <changelog author="Gerald Chen &lt;gerald_chen@foxmail.com&gt;" date="1736596800">- Update to version 2.1.6
  * Forwarding: in the list of servers for a zone, the `$BOOTSTRAP`
    keyword can be included as a shortcut to forward to the bootstrap
    servers. And the `$DHCP` keyword can be included to forward to the
    DNS resolvers provided by the local DHCP server. Based on work by YX
    Hao, thanks! DHCP forwarding should be considered experimental and my
    not work on all operating systems. A rule for a zone can mix and
    match multiple forwarder types, such as `10.0.0.1,10.0.0.254,$DHCP,
    192.168.1.1,$BOOTSTRAP`. Note that this is not implemented for
    captive portals yet.
  * Lying resolvers are now skipped, instead of just printing an error.
    This doesn't apply to captive portal and forwarding entries, which
    are the only reasonable use case for lying resolvers.
  * Support for XSalsa20 in DNSCrypt has been removed. This was not
    documented, and was supserseded by XChaCha20 in 2016.
  * Source files are now fetched with compression.
  * DNS64: compatibility has been improved.
  * Forwarding: the root domain (`.`) can now be forwarded.
  * The ARC caching algorithm has been replaced by the SIEVE algorithm.
  * Properties of multiple servers are now updated simultaneously. The
    concurrency level can be adjusted with the new
    `cert_refresh_concurrency` setting. Contributed by YX Hao.
  * MSI packages for DNSCrypt can now easily be built.
  * New command-line flag: `-include-relays` to include relays in `-list`
    and `-list-all`.
  * Support for DNS extended error codes has been added.
  * Documentation updates, bug fixes, dependency updates.
- Drop quic-go.patch, for dnscrypt-proxy already pulls fixed quic-go v0.48.2</changelog>
  <changelog author="cunix@mail.de" date="1736596801">- Update to version 2.1.7
  * Reintroduces support for XSalsa20 enryption in DNSCrypt,
    which was removed in 2.1.6. Unfortunately, a bunch of servers still
    only support that encryption system.
  * Added check for lying resolvers was added for DNSCrypt, similar to
    the one that was already present for DoH and ODoH.
- Minimum golang version now at 1.23
- With vendored quic-go at 0.48.2 since update to 2.1.6
  boo#1222473 and boo#1235156 should be fixed.
- Trimmed long lines in last changelog entry</changelog>
</package>
<package pkgid="53a78d2dd683e91aa87eff159a71d0570b3016e1565e567b6236063565780b9e" name="dnscrypt-proxy" arch="src">
  <version epoch="0" ver="2.1.7" rel="bp156.2.3.1"/>
  <changelog author="cunix@mail.de - 2.0.42" date="1590235200">- Upgrade to 2.0.42 (boo#1165343)
- Spec files from home:darix:apps/dnscrypt-proxy and
  home:cunix:go/dnscrypt-proxy2 merged into existing spec.
- v1 of dnscrypt-proxy is not supported anymore and v2 is
  a new project. This will require v1 users to migrate their
  configuration.
- dnscrypt-proxy-default-config.patch deleted because patched
  file 'dnscrypt-proxy.conf' is not used anymore.</changelog>
  <changelog author="cunix@mail.de - 2.0.43" date="1591704000">- Minimum golang version now at 1.14
- Update to version 2.0.43
  * When stored into a file, service logs now only contain data
    from the most recent launch. This can be changed with the
    new 'log_file_latest' option.
  * Support for DNS64 translation implemented.
  * Connections to DoH servers can be authenticated
    using TLS client certificates.
  * Multiple stamps are now allowed for a single server
    in resolvers and relays lists.
  * Updates and additions for the example domain block lists.
  * Cached configuration files can now be temporarily used if
    they are out of date, but bootstraping is impossible.
  * 'generate-domains-blacklists' now tries to deduplicate
    entries clobbered by wildcard rules.
  * 'generate-domains-blacklists' can now directly
    write lists to a file with the `-o` command-line option.
  * Cache files are now downloaded as the user the daemon will
    be running as. This fixes permission issues at startup time.
  * Forwarded queries are now subject to global timeouts,
    and can be forced to use TCP.
  * The 'ct' parameter has been removed from DoH queries,
    as Google doesn't require it any more.</changelog>
  <changelog author="cunix@mail.de - 2.0.44" date="1591963200">- Update to version 2.0.44
  * Netprobes and listening sockets are now ignored when the
    '-list', '-list-all', '-show-certs' or '-check'
    command-line switches are used.
  * 'tls_client_auth' was renamed to 'doh_client_x509_auth'.
    A section with the previous name is temporarily ignored if empty,
    but will error out if not.
  * Updates to the set of block lists.
- Breaking change from 2.0.43 Update:
  The 'tls_client_auth' section was renamed to 'doh_client_x509_auth'.
  If you had a tls_client_auth section in the configuration file,
  it needs to be updated/renamed/deleted.</changelog>
  <changelog author="cunix@mail.de" date="1593518400">- Made PID available in /run/dnscrypt-proxy/dnscrypt-proxy.pid
  through systemd service unit.
- README.openSUSE updated.
- dnscrypt-proxy.socket.conf added as example for a systemd
  drop-in file to override the socket unit.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1595419200">- Sort file lists to make package build reproducible</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1609761600">- Update to version 2.0.45
  * Configuration changes (to be required in versions 2.1.x):
  - [blacklist] has been renamed to [blocked_names]
  - [ip_blacklist] has been renamed to [blocked_ips]
  - [whitelist] has been renamed to [allowed_names]
  - generate-domains-blacklist.py has been renamed to
    generate-domains-blocklist.py, and the configuration files
    have been renamed as well.
  * dnscrypt-proxy -resolve has been completely revamped, and now
    requires the configuration file to be accessible. It will send
    a query to an IP address of the dnscrypt-proxy server by default.
    Sending queries to arbitrary servers is also supported with the
    new -resolve name,address syntax.
  * Relay lists can be set to * for automatic relay selection.
    When a wildcard is used, either for the list of servers or relays,
    the proxy ensures that relays and servers are on distinct networks.
  * Lying resolvers are detected and reported.
  * New return code: NOT_READY for queries received before the proxy
    has been initialized.
  * Server lists can't be older than a week any more, even if directory
    permissions are incorrect and cache files cannot be written.
  * New feature: allowed_ips, to configure a set of IP addresses to never
    block no matter what DNS name resolves to them.
  * Hard-coded IP addresses can be immediately returned for test queries
    sent by operating systems in order to check for connectivity and captive portals.
    Such responses can be sent even before an interface is considered as enabled by the
    operating system. This can be configured in a new section called [captive_portals].
  * On Linux, OpenBSD and FreeBSD, listen_addresses can now include IP addresses
    that haven't been assigned to an interface yet.
  * generate-domains-blocklist.py: regular expressions are now ignored in time-based entries.
  * Minor bug fixes and logging improvements.
  * Cloaking plugin: if an entry has multiple IP addresses for a type, all the IP
    addresses are now returned instead of a random one.
  * Static entries can now include DNSCrypt relays.
  * Name blocking: aliases relying on SVCB and HTTPS records can now be blocked in
    addition to aliases via regular CNAME records.
  * EDNS-Client-Subnet information can be added to outgoing queries. Instead of sending
    the actual client IP, ECS information is user configurable, and IP addresses will be
    randomly chosen for every query.
  * Initial DoH queries are now checked using random names in order to properly measure
    CDNs such as Tencent that ignore the padding.
  * DoH: the max-stale cache control directive is now present in queries.
  * Logs can now be sent to /dev/stdout instead of actual files.
  * New download mirror (https://download.dnscrypt.net) for resolvers, relays and parental-control.</changelog>
  <changelog author="cunix@mail.de" date="1609761601">- Minimum golang version now at 1.15
- Include 'notice' and 'patents' files of vendored packages.
- Paths and hints in configuration file adjusted and added.</changelog>
  <changelog author="cunix@mail.de" date="1610020800">- Added optional resolvconf support via systemd unit.</changelog>
  <changelog author="cunix@mail.de" date="1612008000">- Use less predictable temporary files during build (bsc#1181502).</changelog>
  <changelog author="cunix@mail.de - 2.1.0" date="1629028800">- Update to version 2.1.0
  * "fallback_resolvers" was renamed to "bootstrap_resolvers"
    Please update your configuration file accordingly.
  * Support for Oblivious DoH.
  * If the proxy is overloaded, cached and synthetic queries now
    keep being served, while non-cached queries are delayed.
  * Source URLs are now randomized.
  * Default "reject_ttl" reduced from 600 to 10
- Minimum golang version now at 1.16
- Find more "legal" files to include.</changelog>
  <changelog author="cunix@mail.de - 2.1.1" date="1633089600">- Update to version 2.1.1
  * Serve cached DoH responses when experiencing connectivity issues.
  * Time attributes in allow/block lists were ignored.
  * TTL served to clients is now rounded and starts decreasing
    before the first query is received.
  * Time-based rules are properly handled again in generate-domains-blocklist.
  * DoH/ODoH: entries with an IP address and using a non-standard port
    should not require help from a bootstrap resolver any more.</changelog>
  <changelog author="cunix@mail.de" date="1647950400">- switched to vendored_licenses_packager as build dependency</changelog>
  <changelog author="cunix@mail.de - 2.1.2" date="1659441600">- Update to version 2.1.2
  * Support for DoH over HTTP/3 (DoH3, HTTP over QUIC)
    Compatible servers will automatically use it.
    Note that QUIC uses UDP
    (usually over port 443, like DNSCrypt) instead of TCP.
  * fixed memory usage kept growing due to channels not
    being properly closed
  * DNS64: "CNAME" records are now translated like other responses
  * A relay whose name has been configured, but doesn't exist in the
    list of available relays is now a hard error
  * "dnscrypt-proxy -resolve" now reports if ECS (EDNS-clientsubnet) is
    supported by the server
  * "dnscrypt-proxy -list" now includes ODoH (Oblivious DoH) servers
  * Local DoH: queries made using the "GET" method are now handled
  * "PTR" queries are now supported for cloaked domains
- Minimum golang version now at 1.18</changelog>
  <changelog author="cunix@mail.de - 2.1.3" date="1675598400">- Update to version 2.1.3
  * DNS-over-HTTP/3 (QUIC) should be more reliable. In particular,
    version 2.1.2 required another (non-QUIC) resolver to be present for
    bootstrapping, or the resolver's IP address to be present in the
    stamp. This is not the case any more.
  * dnscrypt-proxy is now compatible with Go 1.20+
  * Commands (-check, -show-certs, -list, -list-all) now ignore log
    files and directly output the result to the standard output.
  * The "cert_ignore_timestamp" configuration switch is now documented.
    It allows ignoring timestamps for DNSCrypt certificate verification,
    until a first server is available. This should only be used on devices
    that don't have any ways to set the clock before DNS service is up.
    However, a safer alternative remains to use an NTP server with a fixed
    IP address (such as time.google.com), configured in the captive portals
    file.
  * Cloaking: when a name is cloaked, unsupported record types now
    return a blocked response rather than the actual records.
  * systemd: report Ready earlier as dnscrypt-proxy can itself manage
    retries for updates/refreshes.
  * vendored dependencies updated</changelog>
  <changelog author="cunix@mail.de - 2.1.4" date="1676116800">- Update to version 2.1.4
  * Fixes a regression from version 2.1.3: when cloaking was enabled,
    blocked responses were returned for records that were not A/AAAA/PTR
    even for names that were not in the cloaked list.</changelog>
  <changelog author="cunix@mail.de - 2.1.5" date="1691928000">- Update to version 2.1.5
  * Responses to blocked queries now include extended error codes
  * Reliability of connections using HTTP/3 has been improved
  * New configuration directive: "tls_key_log_file"
    to dump TLS secret keys</changelog>
  <changelog author="cunix@mail.de" date="1707134400">- use systemd sysusers</changelog>
  <changelog author="cunix@mail.de" date="1713700800">- added patch quic-go.patch (boo#1222473)</changelog>
  <changelog author="Gerald Chen &lt;gerald_chen@foxmail.com&gt;" date="1736596800">- Update to version 2.1.6
  * Forwarding: in the list of servers for a zone, the `$BOOTSTRAP`
    keyword can be included as a shortcut to forward to the bootstrap
    servers. And the `$DHCP` keyword can be included to forward to the
    DNS resolvers provided by the local DHCP server. Based on work by YX
    Hao, thanks! DHCP forwarding should be considered experimental and my
    not work on all operating systems. A rule for a zone can mix and
    match multiple forwarder types, such as `10.0.0.1,10.0.0.254,$DHCP,
    192.168.1.1,$BOOTSTRAP`. Note that this is not implemented for
    captive portals yet.
  * Lying resolvers are now skipped, instead of just printing an error.
    This doesn't apply to captive portal and forwarding entries, which
    are the only reasonable use case for lying resolvers.
  * Support for XSalsa20 in DNSCrypt has been removed. This was not
    documented, and was supserseded by XChaCha20 in 2016.
  * Source files are now fetched with compression.
  * DNS64: compatibility has been improved.
  * Forwarding: the root domain (`.`) can now be forwarded.
  * The ARC caching algorithm has been replaced by the SIEVE algorithm.
  * Properties of multiple servers are now updated simultaneously. The
    concurrency level can be adjusted with the new
    `cert_refresh_concurrency` setting. Contributed by YX Hao.
  * MSI packages for DNSCrypt can now easily be built.
  * New command-line flag: `-include-relays` to include relays in `-list`
    and `-list-all`.
  * Support for DNS extended error codes has been added.
  * Documentation updates, bug fixes, dependency updates.
- Drop quic-go.patch, for dnscrypt-proxy already pulls fixed quic-go v0.48.2</changelog>
  <changelog author="cunix@mail.de" date="1736596801">- Update to version 2.1.7
  * Reintroduces support for XSalsa20 enryption in DNSCrypt,
    which was removed in 2.1.6. Unfortunately, a bunch of servers still
    only support that encryption system.
  * Added check for lying resolvers was added for DNSCrypt, similar to
    the one that was already present for DoH and ODoH.
- Minimum golang version now at 1.23
- With vendored quic-go at 0.48.2 since update to 2.1.6
  boo#1222473 and boo#1235156 should be fixed.
- Trimmed long lines in last changelog entry</changelog>
</package>
<package pkgid="0614415d818d54664063e5f216f8c866c1a4ec2c70ed1b94a81aeb864d7ee3d1" name="dnscrypt-proxy" arch="x86_64">
  <version epoch="0" ver="2.1.7" rel="bp156.2.3.1"/>
  <changelog author="cunix@mail.de - 2.0.42" date="1590235200">- Upgrade to 2.0.42 (boo#1165343)
- Spec files from home:darix:apps/dnscrypt-proxy and
  home:cunix:go/dnscrypt-proxy2 merged into existing spec.
- v1 of dnscrypt-proxy is not supported anymore and v2 is
  a new project. This will require v1 users to migrate their
  configuration.
- dnscrypt-proxy-default-config.patch deleted because patched
  file 'dnscrypt-proxy.conf' is not used anymore.</changelog>
  <changelog author="cunix@mail.de - 2.0.43" date="1591704000">- Minimum golang version now at 1.14
- Update to version 2.0.43
  * When stored into a file, service logs now only contain data
    from the most recent launch. This can be changed with the
    new 'log_file_latest' option.
  * Support for DNS64 translation implemented.
  * Connections to DoH servers can be authenticated
    using TLS client certificates.
  * Multiple stamps are now allowed for a single server
    in resolvers and relays lists.
  * Updates and additions for the example domain block lists.
  * Cached configuration files can now be temporarily used if
    they are out of date, but bootstraping is impossible.
  * 'generate-domains-blacklists' now tries to deduplicate
    entries clobbered by wildcard rules.
  * 'generate-domains-blacklists' can now directly
    write lists to a file with the `-o` command-line option.
  * Cache files are now downloaded as the user the daemon will
    be running as. This fixes permission issues at startup time.
  * Forwarded queries are now subject to global timeouts,
    and can be forced to use TCP.
  * The 'ct' parameter has been removed from DoH queries,
    as Google doesn't require it any more.</changelog>
  <changelog author="cunix@mail.de - 2.0.44" date="1591963200">- Update to version 2.0.44
  * Netprobes and listening sockets are now ignored when the
    '-list', '-list-all', '-show-certs' or '-check'
    command-line switches are used.
  * 'tls_client_auth' was renamed to 'doh_client_x509_auth'.
    A section with the previous name is temporarily ignored if empty,
    but will error out if not.
  * Updates to the set of block lists.
- Breaking change from 2.0.43 Update:
  The 'tls_client_auth' section was renamed to 'doh_client_x509_auth'.
  If you had a tls_client_auth section in the configuration file,
  it needs to be updated/renamed/deleted.</changelog>
  <changelog author="cunix@mail.de" date="1593518400">- Made PID available in /run/dnscrypt-proxy/dnscrypt-proxy.pid
  through systemd service unit.
- README.openSUSE updated.
- dnscrypt-proxy.socket.conf added as example for a systemd
  drop-in file to override the socket unit.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1595419200">- Sort file lists to make package build reproducible</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1609761600">- Update to version 2.0.45
  * Configuration changes (to be required in versions 2.1.x):
  - [blacklist] has been renamed to [blocked_names]
  - [ip_blacklist] has been renamed to [blocked_ips]
  - [whitelist] has been renamed to [allowed_names]
  - generate-domains-blacklist.py has been renamed to
    generate-domains-blocklist.py, and the configuration files
    have been renamed as well.
  * dnscrypt-proxy -resolve has been completely revamped, and now
    requires the configuration file to be accessible. It will send
    a query to an IP address of the dnscrypt-proxy server by default.
    Sending queries to arbitrary servers is also supported with the
    new -resolve name,address syntax.
  * Relay lists can be set to * for automatic relay selection.
    When a wildcard is used, either for the list of servers or relays,
    the proxy ensures that relays and servers are on distinct networks.
  * Lying resolvers are detected and reported.
  * New return code: NOT_READY for queries received before the proxy
    has been initialized.
  * Server lists can't be older than a week any more, even if directory
    permissions are incorrect and cache files cannot be written.
  * New feature: allowed_ips, to configure a set of IP addresses to never
    block no matter what DNS name resolves to them.
  * Hard-coded IP addresses can be immediately returned for test queries
    sent by operating systems in order to check for connectivity and captive portals.
    Such responses can be sent even before an interface is considered as enabled by the
    operating system. This can be configured in a new section called [captive_portals].
  * On Linux, OpenBSD and FreeBSD, listen_addresses can now include IP addresses
    that haven't been assigned to an interface yet.
  * generate-domains-blocklist.py: regular expressions are now ignored in time-based entries.
  * Minor bug fixes and logging improvements.
  * Cloaking plugin: if an entry has multiple IP addresses for a type, all the IP
    addresses are now returned instead of a random one.
  * Static entries can now include DNSCrypt relays.
  * Name blocking: aliases relying on SVCB and HTTPS records can now be blocked in
    addition to aliases via regular CNAME records.
  * EDNS-Client-Subnet information can be added to outgoing queries. Instead of sending
    the actual client IP, ECS information is user configurable, and IP addresses will be
    randomly chosen for every query.
  * Initial DoH queries are now checked using random names in order to properly measure
    CDNs such as Tencent that ignore the padding.
  * DoH: the max-stale cache control directive is now present in queries.
  * Logs can now be sent to /dev/stdout instead of actual files.
  * New download mirror (https://download.dnscrypt.net) for resolvers, relays and parental-control.</changelog>
  <changelog author="cunix@mail.de" date="1609761601">- Minimum golang version now at 1.15
- Include 'notice' and 'patents' files of vendored packages.
- Paths and hints in configuration file adjusted and added.</changelog>
  <changelog author="cunix@mail.de" date="1610020800">- Added optional resolvconf support via systemd unit.</changelog>
  <changelog author="cunix@mail.de" date="1612008000">- Use less predictable temporary files during build (bsc#1181502).</changelog>
  <changelog author="cunix@mail.de - 2.1.0" date="1629028800">- Update to version 2.1.0
  * "fallback_resolvers" was renamed to "bootstrap_resolvers"
    Please update your configuration file accordingly.
  * Support for Oblivious DoH.
  * If the proxy is overloaded, cached and synthetic queries now
    keep being served, while non-cached queries are delayed.
  * Source URLs are now randomized.
  * Default "reject_ttl" reduced from 600 to 10
- Minimum golang version now at 1.16
- Find more "legal" files to include.</changelog>
  <changelog author="cunix@mail.de - 2.1.1" date="1633089600">- Update to version 2.1.1
  * Serve cached DoH responses when experiencing connectivity issues.
  * Time attributes in allow/block lists were ignored.
  * TTL served to clients is now rounded and starts decreasing
    before the first query is received.
  * Time-based rules are properly handled again in generate-domains-blocklist.
  * DoH/ODoH: entries with an IP address and using a non-standard port
    should not require help from a bootstrap resolver any more.</changelog>
  <changelog author="cunix@mail.de" date="1647950400">- switched to vendored_licenses_packager as build dependency</changelog>
  <changelog author="cunix@mail.de - 2.1.2" date="1659441600">- Update to version 2.1.2
  * Support for DoH over HTTP/3 (DoH3, HTTP over QUIC)
    Compatible servers will automatically use it.
    Note that QUIC uses UDP
    (usually over port 443, like DNSCrypt) instead of TCP.
  * fixed memory usage kept growing due to channels not
    being properly closed
  * DNS64: "CNAME" records are now translated like other responses
  * A relay whose name has been configured, but doesn't exist in the
    list of available relays is now a hard error
  * "dnscrypt-proxy -resolve" now reports if ECS (EDNS-clientsubnet) is
    supported by the server
  * "dnscrypt-proxy -list" now includes ODoH (Oblivious DoH) servers
  * Local DoH: queries made using the "GET" method are now handled
  * "PTR" queries are now supported for cloaked domains
- Minimum golang version now at 1.18</changelog>
  <changelog author="cunix@mail.de - 2.1.3" date="1675598400">- Update to version 2.1.3
  * DNS-over-HTTP/3 (QUIC) should be more reliable. In particular,
    version 2.1.2 required another (non-QUIC) resolver to be present for
    bootstrapping, or the resolver's IP address to be present in the
    stamp. This is not the case any more.
  * dnscrypt-proxy is now compatible with Go 1.20+
  * Commands (-check, -show-certs, -list, -list-all) now ignore log
    files and directly output the result to the standard output.
  * The "cert_ignore_timestamp" configuration switch is now documented.
    It allows ignoring timestamps for DNSCrypt certificate verification,
    until a first server is available. This should only be used on devices
    that don't have any ways to set the clock before DNS service is up.
    However, a safer alternative remains to use an NTP server with a fixed
    IP address (such as time.google.com), configured in the captive portals
    file.
  * Cloaking: when a name is cloaked, unsupported record types now
    return a blocked response rather than the actual records.
  * systemd: report Ready earlier as dnscrypt-proxy can itself manage
    retries for updates/refreshes.
  * vendored dependencies updated</changelog>
  <changelog author="cunix@mail.de - 2.1.4" date="1676116800">- Update to version 2.1.4
  * Fixes a regression from version 2.1.3: when cloaking was enabled,
    blocked responses were returned for records that were not A/AAAA/PTR
    even for names that were not in the cloaked list.</changelog>
  <changelog author="cunix@mail.de - 2.1.5" date="1691928000">- Update to version 2.1.5
  * Responses to blocked queries now include extended error codes
  * Reliability of connections using HTTP/3 has been improved
  * New configuration directive: "tls_key_log_file"
    to dump TLS secret keys</changelog>
  <changelog author="cunix@mail.de" date="1707134400">- use systemd sysusers</changelog>
  <changelog author="cunix@mail.de" date="1713700800">- added patch quic-go.patch (boo#1222473)</changelog>
  <changelog author="Gerald Chen &lt;gerald_chen@foxmail.com&gt;" date="1736596800">- Update to version 2.1.6
  * Forwarding: in the list of servers for a zone, the `$BOOTSTRAP`
    keyword can be included as a shortcut to forward to the bootstrap
    servers. And the `$DHCP` keyword can be included to forward to the
    DNS resolvers provided by the local DHCP server. Based on work by YX
    Hao, thanks! DHCP forwarding should be considered experimental and my
    not work on all operating systems. A rule for a zone can mix and
    match multiple forwarder types, such as `10.0.0.1,10.0.0.254,$DHCP,
    192.168.1.1,$BOOTSTRAP`. Note that this is not implemented for
    captive portals yet.
  * Lying resolvers are now skipped, instead of just printing an error.
    This doesn't apply to captive portal and forwarding entries, which
    are the only reasonable use case for lying resolvers.
  * Support for XSalsa20 in DNSCrypt has been removed. This was not
    documented, and was supserseded by XChaCha20 in 2016.
  * Source files are now fetched with compression.
  * DNS64: compatibility has been improved.
  * Forwarding: the root domain (`.`) can now be forwarded.
  * The ARC caching algorithm has been replaced by the SIEVE algorithm.
  * Properties of multiple servers are now updated simultaneously. The
    concurrency level can be adjusted with the new
    `cert_refresh_concurrency` setting. Contributed by YX Hao.
  * MSI packages for DNSCrypt can now easily be built.
  * New command-line flag: `-include-relays` to include relays in `-list`
    and `-list-all`.
  * Support for DNS extended error codes has been added.
  * Documentation updates, bug fixes, dependency updates.
- Drop quic-go.patch, for dnscrypt-proxy already pulls fixed quic-go v0.48.2</changelog>
  <changelog author="cunix@mail.de" date="1736596801">- Update to version 2.1.7
  * Reintroduces support for XSalsa20 enryption in DNSCrypt,
    which was removed in 2.1.6. Unfortunately, a bunch of servers still
    only support that encryption system.
  * Added check for lying resolvers was added for DNSCrypt, similar to
    the one that was already present for DoH and ODoH.
- Minimum golang version now at 1.23
- With vendored quic-go at 0.48.2 since update to 2.1.6
  boo#1222473 and boo#1235156 should be fixed.
- Trimmed long lines in last changelog entry</changelog>
</package>
<package pkgid="91c64652fba5d11e747d1e604a162932bf7fd0eb9655ed878d84ae191d9d7bf8" name="docker-machine-driver-kvm2" arch="aarch64">
  <version epoch="0" ver="1.34.0" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641297600">- update to 1.24.0:
  * Add --no-kubernetes flag to start minikube without kubernetes #12848
  * minikube addons list shows addons if cluster does not exist #12837
  * virtualbox: change default host-only-cidr #12811
  * fix zsh completion #12841
  * Fix starting on Windows with VMware driver on non C: drive #12819</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1643371200">- update to 1.25.1:
  * New flag "--binary-mirror" to override mirror URL downloading (kubectl, kubelet, &amp; kubeadm)
  * Add format flag to the image ls command
  * Add all mount flags to start command
  * Auto set config to support btrfs storage driver
  * Support CRI-O runtime with Rootless Docker driver (--driver=docker --container-runtime=cri-o)
  * Allow custom cert for ingress to be overwritten
  * Allow ppc64le &amp; armv7 with Docker driver
  * Support DOCKER_HOST not being numeric IP
  * Support mounting with the --no-kubernetes flag
  * Support changing apiserver-ips when restarting minikube
  * Fix ingress for k8s v1.19
  * Fix mounting with VMware
  * Fix Bad file descriptor on mount
  * Fix docker-env with new PowerShell versions
  * Upgrade Docker, from v20.10.8 to v20.10.11
  * Upgrade containerd, from v1.4.9 to v1.4.12
  * Upgrade cri-o from v1.22.0 to v1.22.1
  * Update gcp-auth-webhook image to v0.0.8
  * mount: Remove --mode flag</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648296000">- update to 1.25.2:
  * add arch to binary and image cache paths #13539
  * Adds 'minikube service --all' feature to allow forwarding all services in a namespace #13367
  * Make the default container runtime dynamic #13251
  * Add --disable-optimizations flag #13340
  * Fix losing cluster on restart #13506
  * Using Get-CmiInstance to detect Hyper-V availability #13596
  * Fixes validation on image repository URL when it contains port but no scheme #13053
  * Fixed SIGSEGV in kubectl when k8s not running #13631
  * Fix hard coded docker driver in minikube service command #13514
  * Fix hard coded docker driver in minikube tunnel command #13444
  * Fix IstioOperator CustomResourceDefinition for istio-provisioner addon #13024
  * fix ingress (also for multinode clusters) #13439
  * Add exit message for too new Kubernetes version #13354
  * drivers/kvm: Use ARP for retrieving interface ip addresses #13482
  * kubeadm: allow skipping kube-proxy addon on restart #13538
  * configure container runtimes for clusters without Kubernetes too #13442</changelog>
  <changelog author="Matthew Wilks &lt;water261@outlook.com.au&gt;" date="1657195200">- update to 1.26.0:
  * Note: Using a minikube cluster created before 1.26.0, using the docker
    container-runtime (default), and plan to upgrade the Kubernetes version to
    v1.24+? After upgrading, you may need to delete &amp; recreate it. none driver
    users, cri-docker is now required to be installed, install instructions.
    See issue #14410 for more info.
  * Add headlamp addon #14315
  * Add InAccel FPGA Operator addon #12995
  * Only set highmem=off for darwin if qemu version is below 7.0 or memory is below 3GB #14291
  * Define qemu as a qemu2 driver alias #14284
  * Allow users to supply custom QEMU firmware path #14283
  * Add eBPF related kernel options #14316
  * Add bind address flag for minikube tunnel #14245
  * Add active column for minikube profile list #14079
  * Add documentation URL to the addon list table #14123
  * minikube config defaults kubernetes-version lists all currently supported Kubernetes versions #13775
  * Fix terminated commands not writing to audit log #13307
  * Fix Podman port mapping publish on macOS #14290
  * Fix minikube delete deleting networks from other profiles #14279
  * Bump Kubernetes version default: v1.24.1 and latest: v1.24.1 #14197
  * ISO: Upgrade Docker from 20.10.14 to 20.10.16 #14153
  * ISO: Upgrade kernel from 4.19.235 to 5.10.57 #12707
  * Upgrade Dashboard addon from v2.5.1 to v2.6.0 &amp; MetricsScraper from v1.0.7 to v1.0.8 #14269
  * Upgrade gcp-auth-webhook from v0.0.8 to v0.0.9 #14372
  * Upgrade nginx image from v1.2.0 to v1.2.1 #14317
  * Important Changes in Pre-Release Versions
  * Add configure option to registry-aliases addon #13912
  * Add support for building aarch64 ISO #13762
  * Support rootless Podman driver (Usage: minikube config set rootless true) #13829
  * QEMU:
  * Add support for the QEMU driver #13639
  * Fix qemu firmware path locations #14182
  * Re-establish apiserver tunnel on restart #14183</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- build against go1.18 to fix arm64 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663070400">- update to 1.26.1:
  * Check for cri-dockerd &amp; dockerd runtimes when using none-driver on Kubernetes 1.24+ #14555
  * Add solution message for when cri-docker is missing #14483
  * Limit number of audit entries #14695
  * Optimize audit logging #14596
  * Show the container runtime when running without kubernetes #13432 #14200
  * Add warning when enabling thrid-party addons #14499
  * Fix url index out of range error in service #14658
  * Fix incorrect user and profile in audit logging #14562
  * Fix overwriting err for OCI "minikube start" #14506
  * Fix panic when environment variables are empty #14415
  * Bump Kubernetes version default: v1.24.3 and latest: v1.24.3 #14606
  * ISO: Update Docker from 20.10.16 to 20.10.17 #14534
  * ISO/Kicbase: Update cri-o from v1.22.3 to v1.24.1 #14420
  * ISO: Update conmon from v2.0.24 to v2.1.2 #14545
  * Update gcp-auth-webhook from v0.0.9 to v0.0.10 #14670
  * ISO/Kicbase: Update base images #14481</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663329600">- update to 1.27.0:
  * Bump default Kubernetes version to v1.25.0 and resolve /etc/resolv.conf regression #14848
  * Skip metallb PodSecurityPolicy object for kubernetes 1.25+ #14903
  * The DefaultKubernetesRepo changed for 1.25.0 #14768
  * Fix QEMU delete errors #14950
  * Fix containerd configuration issue with insecure registries #14482
  * Fix registry when custom images provided #14690
  * ISO: Update Docker from 20.10.17 to 20.10.18 #14935
  * Update kicbase base image to Ubuntu:focal-20220826 #14904
  * Update registry addon image from 2.7.1 to 2.8.1 #14886
  * Update gcp-auth-webhook addon from v0.0.10 to v0.0.11 #14847
  * Update Headlamp addon image from v0.9.0 to v0.11.1 #14802</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665403200">- update to 1.27.1:
  * QEMU Driver: Add support for dedicated network on macOS (socket_vmnet) #14989
  * QEMU Driver: Add support minikube service and tunnel on macOS #14989
  * Check if context is invalid during update-context command #15032
  * Use SSH tunnel if user specifies bindAddress #14951
  * Warn QEMU users if DNS issue detected #15073
  * Fix status command taking a long time on docker driver while paused #15077
  * Fix not allowing passing only an exposed port to --ports #15085
  * Fix minikube dashboard failing on macOS #15037
  * Fix incorrect command in powershell command tip #15012</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1665489600">- BuildRequires python3 rather than python.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to v1.28.0:
  * SECURITY WARNING: Log4j CVEs were detected in an image the efk addon uses,
  * if you don't use the efk addon no action is required. If you use the addon
  * we recommend running minikube addons disable efk to terminate the
  * vulnerable pods.  See #15280 for more details.
  * Prevent enabling efk addon due to containing Log4j CVE #15281
  * Auto select network on QEMU #15266
  * Implement mounting on QEMU with socket_vmnet #15108
  * Added cloud-spanner emulator addon #15160
  * Add minikube license command #15158
  * Allow port forwarding on Linux with Docker Desktop #15126
  * Add back service to mount VirtualBox host directory into the guest. #14784
  * ISO: Add FANOTIFY_ACCESS_PERMISSIONS to kernel configs #15232
  * When enabling addon warn if addon has no associated Github username #15081
  * Fix detecting preload cache of size 0 as valid #15256
  * Fix always writing to daemon by trimming docker.io from image name #14956
  * Fix minikube tunnel repeated printout of status #14933
  * Upgrade Portainer addon to 2.15.1 &amp; HTTPS access enabled #15172
  * Upgrade Headlamp addon to 0.13.0 #15186
  * ISO: Upgrade Docker from 20.10.18 to 20.10.20 #15159
  * KIC: Upgrade base image from ubuntu:focal-20220826 to ubuntu:focal-20220922 #15075
  * KCI: Upgrade base image from ubuntu:focal-20220922 to ubuntu:focal-20221019 #15219</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1675080000">- update to 1.29.0:
  * Bump QEMU driver priority from experimental to default
  * Ability to set static-ip for Docker driver
  * GCP-Auth Addon: automatically attach credentials to newly created
    namespaces
  * Allow forcing 1 CPU on Linux with docker and none driver
  * Major Improvements:
  * Large improvements to cgroup detection and CNI and CRI configurations
  * Prevent redownloading kicbase when already downloaded
  * Warn when using an old ISO/Kicbase image
  * Check brew install paths for socket_vmnet
  * Include gcp-auth logs in 'minikube logs' output
  * Use absolute path when calling crictl version
  * Add additional memory overhead for VirtualBox when `--memory=max`
  * Update Windows installer to create system-wide shortcut
  * Add `--subnet` validation
  * Add groups check to SSH driver
  * Update references to deprecated beta.kubernetes.io
  * Fix possible race condition when enabling multiple addons #15706
  * Fix cpus config field not supporting max value #15479
  * Fix subnet checking failing if IPv6 network found #15394
  * Fix Docker tunnel failing if too many SSH keys #15560
  * Fix kubelet localStorageCapacityIsolation option #15336
  * Fix setting snapshotter to unimplemented fuse-overlayfs #15272
  * Remove progress bar for kic download with JSON output #15482
  * Version Upgrades:
  * Bump default Kubernetes version from 1.25.3 to 1.26.1 #15683
  * Addons: Update auto-pause from 0.0.2 to 0.0.3 #15331
  * Addons: Update cloud-spanner from 1.4.6 to 1.5.0 #15440 #15667 #15707
  * Addons: Update headlamp from 0.13.0 to 0.14.1 #15401 #15515
  * Addons: Update ingress from 1.2.1 to 1.5.1 #15339
  * Addons: Update metrics-server from 0.6.1 to 0.6.2 #15411
  * Addons: Update kubevirt from 1.17 to 1.24.7 #15310
  * CNI: Update cilium from 1.9.9 to 1.12.3 #15242
  * Kicbase: Update buildkit from 0.10.3 to v0.11.0 #15630
  * Kicbase/ISO: Update containerd from 1.6.9 to 1.6.15 #15541
  * Kicbase/ISO: Update cri-dockerd from 0.2.2 to 0.3.0 #15541
  * Kicbase/ISO: Update docker from 20.10.20 to 20.10.23 #15341 #15541
  * Update KVM-docker-machine amd64 base image from Ubuntu 16.04 to 20.04
  * For a more detailed changelog see CHANGELOG.md.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680609600">- update to 1.30.0:
  * Ensure only one minikube tunnel instance runs at a time
  * Infer HyperKit HostIP as Gateway rather than hardcode to 192.168.64.1
  * multi-node: Add support for volumes using CSI addon
  * QEMU: Rename user network to builtin and update documentation
  * none driver: Look for cri-dockerd instead of hardcoding
  * Replace instances of k8s.gcr.io with registry.k8s.io
  * Handle CRI config of NetworkPlugin and PauseImage
  * Remove deprecated container-runtime flag from Kubernetes v1.24+
  * none driver: Require crictl to be installed for Kubernetes v1.24+
  * Add cri-dockerd logs to minikube logs output
  * Add ingress logs to minikube logs output
  * Add default cni logs to minikbue logs output
  * Add JSON output option to miniikube service list
  * Add kicbase download process to JSON output
  * Implement --docs for minikube addons list -o json
  * Implement --skip-audit flag and skip adding profile commands to audit log
  * Implement --last-start-only flag to minikube logs to only show last start log
  * see https://github.com/kubernetes/minikube/releases/tag/v1.30.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680696000">- update to 1.30.1:
  * Docker driver: Fix incorrectly stating `Image was not built
    for the current minikube` #16226
  * Mark VMware driver as unsupported  #16233</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689681600">- update to 1.31.0:
  * Add back VMware driver support #16796
  * `docker-env` supports the containerd runtime (experimental)
    [#15452] #16761
  * Automatically renew expired kubeadm certs #16249
  * New addon inspektor-gadget #15869
  * Major Improvements:
  * VM drivers: Fix all images getting removed on stop/start (40%
    start speedup) #16655
  * Addon registry: Add support for all architectures #16577
  * QEMU: Fix failing to interact with cluster after upgrading
    QEMU version #16853
  * macOS/QEMU: Auto unblock bootpd from firewall if blocking
    socket_vmnet network #16714 #16789
  * `minikube cp` supports providing directory as a target #15519</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1697544000">- update to 1.31.2:
  * docker-env Regression:
  * Create `~/.ssh` directory if missing #16934
  * Fix adding guest to `~/.ssh/known_hosts` when not needed
    [#17030]
  * Verify containerd storage separately from docker #16972
  * cni: Fix regression in auto selection #16912</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 1.32.0:
  * rootless: support `--container-runtime=docker` #17520
  * Install NVIDIA container toolkit during image build (offline
    support)
  * Fix no-limit option for config validation #17530
  * NVIDIA GPU support with new `--gpus=nvidia` flag for docker
    driver #15927 #17314 #17488
  * New `kubeflow` addon #17114
  * New `local-path-provisioner` addon #15062
  * Kicbase: Add `no-limit` option to `--cpus` &amp; `--memory` flags
    [#17491]
  * Hyper-V: Add memory validation for odd numbers #17325
  * QEMU: Improve cpu type and IP detection #17217
  * Mask http(s)_proxy password from startup output #17116
  * `--delete-on-faliure` also recreates cluster for kubeadm
    failures #16890
  * Addon auto-pause: Configure intervals using `--auto-pause-
    interval` #17070
  * `--kubernetes-version` checks GitHub for version validation
    and improved error output for invalid versions #16865
  * Bugs:
  * QEMU: Fix addons failing to enable #17402
  * Fix downloading the wrong kubeadm images for k8s versions
    after minikube release #17373
  * Fix enabling &amp; disabling addons with non-existing cluster
    [#17324]
  * Fix delete if container-runtime doesn't exist #17347
  * Fix network not found not being detected on new Docker
    versions #17323
  * Fix addon registry doesn't follow Minikube DNS domain name
    configuration (--dns-domain) #15585
  * Version Upgrades:
  * Bump Kubernetes version default: v1.28.3 and latest: v1.28.3
  * Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.9 to 1.5.11 #17225 #17259
  * Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.19.0 to v0.20.1 #17135 #17365
  * Addon ingress: Update ingress-nginx/controller image from
    v1.8.1 to v1.9.3 #17223 #17297 #17348 #17421
  * Addon inspektor-gadget: Update inspektor-gadget image from
    v0.19.0 to v0.21.0 #17176 #17340
  * Addon istio-provisioner: Update istio/operator image from
    1.12.2 to 1.19.3 #17383 #17436
  * Addon kong: Update kong image from 3.2 to 3.4.2 #17485
  * Addon registry: Update registry image from 2.8.1 to 2.8.3
    [#17382] #17467
  * CNI: Update calico from v3.26.1 to v3.26.3 #17363 #17375
  * CNI: Update flannel from v0.22.1 to v0.22.3 #17102 #17263
  * CNI: Update kindnetd from v20230511-dc714da8 to
    v20230809-80a64d96 #17233
  * Kicbase/ISO: Update buildkit from v0.11.6 to v0.12.2 #17194
  * Kicbase/ISO: Update containerd from v1.7.3 to v1.7.7 #17243
    [#17466]
  * Kicbase/ISO: Update crictl from v1.21.0 to v1.28.0 #17240
  * Kicbase/ISO: Update docker from 24.0.4 to 24.0.6 #17120
    [#17207]
  * Kicbase/ISO: Update nerdctl from 1.0.0 to 1.6.2 #17145 #17339
    [#17434]
  * Kicbase/ISO: Update runc from v1.1.7 to v1.1.9 #17250
  * Kicbase: Bump ubuntu:jammy from 20230624 to 20231004 #17086
    [#17174] #17345 #17423</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1715860800">- update to 1.33.0:
  * Features:
  - Support multi-control plane - HA clusters --ha #17909
    Tutorial
  - Add support for Kubernetes v1.30 #18669
  - Support exposing clusterIP services via minikube service
    [#17877]
  - Addon gvisor: Add arm64 support #18063 #18453
  - New Addon: YAKD - Kubernetes Dashboard addon #17775
  * Minor Improvements:
  - Add active kubecontext to minikube profile list output #17735
  - CNI calico: support kubeadm.pod-network-cidr #18233
  - CNI bridge: Ensure pod communications are allowed #16143
  - Addon auto-pause: Remove memory leak &amp; add configurable
    interval #17936
  - image build: Add docker.io/library to image short names
    [#16214]
  - cp: Create directory if not present #17715
  - Move errors getting logs into log output itself #18007
  - Add default sysctls to allow privileged ports with no
    capabilities #18421
  - Include extended attributes in preload tarballs #17829
  - Apply kubeadm.applyNodeLabels label to all nodes #16416
  - Limit driver status check to 20s #17553
  - Include journalctl logs if systemd service fails to start
    [#17659]
  - Fix "Failed to enable container runtime: sudo systemctl
    restart cri-docker" #17907
  - Fix containerd redownloading existing images on start #17671
  - Fix kvm2 not detecting containerd preload #17658
  - Fix modifying Docker binfmt config #17830
  - Fix auto-pause addon #17866
  - Fix not using preload with overlayfs storage driver #18333
  - Fix image repositories not allowing subdomains with numbers
    [#17496]
  - Fix stopping cluster when using kvm2 with containerd #17967
  - Fix starting more than one cluster on kvm2 arm64 #18241
  - Fix starting kvm2 clusters using Linux on arm64 Mac #18239
  - Fix displaying error when deleting non-existing cluster
    [#17713]
  - Fix no-limit not being respected on restart #17598
  - Fix not applying kubeadm.applyNodeLabels label to nodes added
    after inital start #16416
  - Fix logs delimiter output #17734
  * Bugs:
  - Fix unescaped local host regex #18617
  - Fix regex on validateNetwork to support special characters
    [#18158]
  * Version Upgrades:
  - Bump Kubernetes version default: v1.30.0 and latest: v1.30.0
    [#18669]
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.23.0 to 0.23.1 #18517
  - Addon inspektor-gadget: Update inspektor-gadget image from
    v0.26.0 to v0.27.0 #18588
  - Addon istio-provisioner: Update istio/operator image from
    1.21.0 to 1.21.1 #18644
  - Addon metrics-server: Update metrics-server/metrics-server
    image from v0.7.0 to v0.7.1 #18551
  - CNI: Update calico from v3.27.0 to v3.27.3 #18206
  - CNI: Update flannel from v0.24.4 to v0.25.1 #18641
  - Kicbase/ISO: Update buildkit from v0.13.0 to v0.13.1 #18566
  - Kicbase/ISO: Update containerd from v1.7.14 to v1.7.15 #18621
  - Kicbase/ISO: Update cri-dockerd from v0.3.3 to v0.3.12 #18585
  - Kicbase/ISO: Update crun from 1.14 to 1.14.4 #18610
  - Kicbase/ISO: Update docker from 25.0.4 to 26.0.1 #18485
    [#18649]
  - Kicbase/ISO: Update nerdctl from 1.7.4 to 1.7.5 #18634
  - Kicbase: Update nerdctld from 0.5.1 to 0.6.0 #18647</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1715860801">- update to 1.33.1:
  * Bugs:
  - Fix DNSSEC validation failed errors #18830
  - Fix too many open files errors #18832
  - CNI cilium: Fix cilium pods failing to start-up #18846
  - Addon ingress: Fix enable failing on arm64 machines using VM
    driver #18779
  - Addon kubeflow: Fix some components missing arm64 images
    [#18765]
  * Version Upgrades:
  - Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.15 to 1.5.17 #18773 #18811
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.23.1 to v0.23.2 #18793
  - Addon ingress: Update ingress-nginx/controller image from
    v1.10.0 to v1.10.1 #18756
  - Addon istio-provisioner: Update istio/operator image from
    1.21.1 to 1.21.2 #18757
  - Addon kubevirt: Update bitnami/kubectl image from 1.29.3 to
    1.30.0 #18711 #18771
  - Addon nvidia-device-plugin: Update nvidia/k8s-device-plugin
    image from v0.14.5 to v0.15.0 #18703
  - CNI cilium: Update from v1.15.1 to v1.15.3 #18846
  - High Availability: Update kube-vip from 0.7.1 to v0.8.0
    [#18774]
  - Kicbase/ISO: Update docker from 26.0.1 to 26.0.2 #18706
  - Kicbase: Bump ubuntu:jammy from 20240227 to 20240427 #18702
    [#18769] #18804</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721390400">- add socat recommends (bsc#1120850)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1725969600">- update to 1.34.0 (boo#1227017 boo#1227049 boo#1227005):
  For a more detailed changelog, including changes occurring in
  pre-release versions, see CHANGELOG.md.
  https://github.com/kubernetes/minikube/blob/master/CHANGELOG.md
  * Breaking Changes:
  - Bump minimum podman version to 4.9.0 #19457
  - Disallow using Docker Desktop 4.34.0 #19576
  * Features:
  - Bump default Kubernetes version to v1.31.0 #19435
  - Add new driver for macOS: vfkit #19423
  - Add Parallels driver support for darwin/arm64 #19373
  - Add new volcano addon #18602
  - Addons ingress-dns: Added support for all architectures
    [#19198]
  - Support privileged ports on WSL #19370
  - VM drivers with docker container-runtime now use
    docker-buildx for image building #19339
  - Support running x86 QEMU on arm64 #19228
  - Add -o json option for addon images command #19364
  * Improvements:
  - add -d shorthand for --driver #19356
  - add -c shorthand for --container-runtime #19217
  - kvm2: Don't delete the "default" libvirt network #18920
  - Update MINIKUBE_HOME usage #18648
  - CNI: Updated permissions to support network policies on
    kindnet #19360
  - GPU: Set NVIDIA_DRIVER_CAPABILITIES to all when GPU is
    enabled #19345
  - Improved error message when trying to use mount on system
    missing 9P #18995
  - Improved error message when enabling KVM addons on non-KVM
    cluster #19195
  - Added warning when loading image with wrong arch #19229
  - profile list --output json handle empty config folder #16900
  - Check connectivity outside minikube when connectivity issuse
    [#18859]
  * Bugs:
  - Fix not creating API server tunnel for QEMU w/ builtin
    network #19191
  - Fix waiting for user input on firewall unblock when
  - -interactive=false #19531
  - Fix network retry check when subnet already in use for podman
    [#17779]
  - Fix empty tarball when generating image save #19312
  - Fix missing permission for kong-serviceaccount #19002
  * Version Upgrades:
  - Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.17 to 1.5.23 #19341 #19501
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.23.2 to v0.25.0 #18992 #19152 #19349
  - Addon kong: Update kong image from 3.6.1 to 3.7.1 #19046
    [#19124]
  - Addon kubevirt: Update bitnami/kubectl image from 1.30.0 to
    1.31.0 #18929 #19087 #19313 #19479
  - Addon ingress: Update ingress-nginx/controller image from
    v1.10.1 to v1.11.2 #19302 #19461
  - Addon inspektor-gadget: Update inspektor-gadget image from
    v0.27.0 to v0.32.0 #18872 #18931 #19011 #19166 #19411 #19554
  - Addon istio-provisioner: Update istio/operator image from
    1.21.2 to 1.23.0 #18932 #19052 #19167 #19283 #19450
  - Addon nvidia-device-plugin: Update nvidia/k8s-device-plugin
    image from v0.15.0 to v0.16.2 #19162 #19266 #19336 #19409
  - Addon metrics-server: Update metrics-server/metrics-server
    image from v0.7.1 to v0.7.2 #19529
  - Addon YAKD: bump marcnuri/yakd image from 0.0.4 to 0.0.5
    [#19145]
  - CNI: Update calico from v3.27.3 to v3.28.1 #18870 #19377
  - CNI: Update cilium from v1.15.3 to v1.16.1 #18925 #19084
    [#19247] #19337 #19476
  - CNI: Update kindnetd from v20240202-8f1494ea to
    v20240813-c6f155d6 #18933 #19252 #19265 #19307 #19378 #19446
  - CNI: Update flannel from v0.25.1 to v0.25.6 #18966 #19008
    [#19085] #19297 #19522
  - Kicbase: Update nerdctld from 0.6.0 to 0.6.1 #19282
  - Kicbase: Bump ubuntu:jammy from 20240427 to 20240808 #19068
    [#19184] #19478
  - Kicbase/ISO: Update buildkit from v0.13.1 to v0.15.2 #19024
    [#19116] #19264 #19355 #19452
  - Kicbase/ISO: Update cni-plugins from v1.4.1 to v1.5.1 #19044
    [#19128]
  - Kicbase/ISO: Update containerd from v1.7.15 to v1.7.21 #18934
    [#19106] #19186 #19298 #19521
  - Kicbase/ISO: Update cri-dockerd from v0.3.12 to v0.3.15
    [#19199] #19249
  - Kicbase/ISO: Update crun from 1.14.4 to 1.16.1 #19112 #19389
    [#19443]
  - Kicbase/ISO: Update docker from 26.0.2 to 27.2.0 #18993
    [#19038] #19142 #19153 #19175 #19319 #19326 #19429 #19530
  - Kicbase/ISO: Update nerdctl from 1.7.5 to 1.7.6 #18869
  - Kicbase/ISO: Update runc from v1.1.12 to v1.1.13 #19104</changelog>
</package>
<package pkgid="cce14057307d0fbf6c4c1063909cdc30e0182771e17fc8c498f44eb6372c3746" name="docker-machine-driver-kvm2" arch="x86_64">
  <version epoch="0" ver="1.34.0" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641297600">- update to 1.24.0:
  * Add --no-kubernetes flag to start minikube without kubernetes #12848
  * minikube addons list shows addons if cluster does not exist #12837
  * virtualbox: change default host-only-cidr #12811
  * fix zsh completion #12841
  * Fix starting on Windows with VMware driver on non C: drive #12819</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1643371200">- update to 1.25.1:
  * New flag "--binary-mirror" to override mirror URL downloading (kubectl, kubelet, &amp; kubeadm)
  * Add format flag to the image ls command
  * Add all mount flags to start command
  * Auto set config to support btrfs storage driver
  * Support CRI-O runtime with Rootless Docker driver (--driver=docker --container-runtime=cri-o)
  * Allow custom cert for ingress to be overwritten
  * Allow ppc64le &amp; armv7 with Docker driver
  * Support DOCKER_HOST not being numeric IP
  * Support mounting with the --no-kubernetes flag
  * Support changing apiserver-ips when restarting minikube
  * Fix ingress for k8s v1.19
  * Fix mounting with VMware
  * Fix Bad file descriptor on mount
  * Fix docker-env with new PowerShell versions
  * Upgrade Docker, from v20.10.8 to v20.10.11
  * Upgrade containerd, from v1.4.9 to v1.4.12
  * Upgrade cri-o from v1.22.0 to v1.22.1
  * Update gcp-auth-webhook image to v0.0.8
  * mount: Remove --mode flag</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648296000">- update to 1.25.2:
  * add arch to binary and image cache paths #13539
  * Adds 'minikube service --all' feature to allow forwarding all services in a namespace #13367
  * Make the default container runtime dynamic #13251
  * Add --disable-optimizations flag #13340
  * Fix losing cluster on restart #13506
  * Using Get-CmiInstance to detect Hyper-V availability #13596
  * Fixes validation on image repository URL when it contains port but no scheme #13053
  * Fixed SIGSEGV in kubectl when k8s not running #13631
  * Fix hard coded docker driver in minikube service command #13514
  * Fix hard coded docker driver in minikube tunnel command #13444
  * Fix IstioOperator CustomResourceDefinition for istio-provisioner addon #13024
  * fix ingress (also for multinode clusters) #13439
  * Add exit message for too new Kubernetes version #13354
  * drivers/kvm: Use ARP for retrieving interface ip addresses #13482
  * kubeadm: allow skipping kube-proxy addon on restart #13538
  * configure container runtimes for clusters without Kubernetes too #13442</changelog>
  <changelog author="Matthew Wilks &lt;water261@outlook.com.au&gt;" date="1657195200">- update to 1.26.0:
  * Note: Using a minikube cluster created before 1.26.0, using the docker
    container-runtime (default), and plan to upgrade the Kubernetes version to
    v1.24+? After upgrading, you may need to delete &amp; recreate it. none driver
    users, cri-docker is now required to be installed, install instructions.
    See issue #14410 for more info.
  * Add headlamp addon #14315
  * Add InAccel FPGA Operator addon #12995
  * Only set highmem=off for darwin if qemu version is below 7.0 or memory is below 3GB #14291
  * Define qemu as a qemu2 driver alias #14284
  * Allow users to supply custom QEMU firmware path #14283
  * Add eBPF related kernel options #14316
  * Add bind address flag for minikube tunnel #14245
  * Add active column for minikube profile list #14079
  * Add documentation URL to the addon list table #14123
  * minikube config defaults kubernetes-version lists all currently supported Kubernetes versions #13775
  * Fix terminated commands not writing to audit log #13307
  * Fix Podman port mapping publish on macOS #14290
  * Fix minikube delete deleting networks from other profiles #14279
  * Bump Kubernetes version default: v1.24.1 and latest: v1.24.1 #14197
  * ISO: Upgrade Docker from 20.10.14 to 20.10.16 #14153
  * ISO: Upgrade kernel from 4.19.235 to 5.10.57 #12707
  * Upgrade Dashboard addon from v2.5.1 to v2.6.0 &amp; MetricsScraper from v1.0.7 to v1.0.8 #14269
  * Upgrade gcp-auth-webhook from v0.0.8 to v0.0.9 #14372
  * Upgrade nginx image from v1.2.0 to v1.2.1 #14317
  * Important Changes in Pre-Release Versions
  * Add configure option to registry-aliases addon #13912
  * Add support for building aarch64 ISO #13762
  * Support rootless Podman driver (Usage: minikube config set rootless true) #13829
  * QEMU:
  * Add support for the QEMU driver #13639
  * Fix qemu firmware path locations #14182
  * Re-establish apiserver tunnel on restart #14183</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- build against go1.18 to fix arm64 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663070400">- update to 1.26.1:
  * Check for cri-dockerd &amp; dockerd runtimes when using none-driver on Kubernetes 1.24+ #14555
  * Add solution message for when cri-docker is missing #14483
  * Limit number of audit entries #14695
  * Optimize audit logging #14596
  * Show the container runtime when running without kubernetes #13432 #14200
  * Add warning when enabling thrid-party addons #14499
  * Fix url index out of range error in service #14658
  * Fix incorrect user and profile in audit logging #14562
  * Fix overwriting err for OCI "minikube start" #14506
  * Fix panic when environment variables are empty #14415
  * Bump Kubernetes version default: v1.24.3 and latest: v1.24.3 #14606
  * ISO: Update Docker from 20.10.16 to 20.10.17 #14534
  * ISO/Kicbase: Update cri-o from v1.22.3 to v1.24.1 #14420
  * ISO: Update conmon from v2.0.24 to v2.1.2 #14545
  * Update gcp-auth-webhook from v0.0.9 to v0.0.10 #14670
  * ISO/Kicbase: Update base images #14481</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663329600">- update to 1.27.0:
  * Bump default Kubernetes version to v1.25.0 and resolve /etc/resolv.conf regression #14848
  * Skip metallb PodSecurityPolicy object for kubernetes 1.25+ #14903
  * The DefaultKubernetesRepo changed for 1.25.0 #14768
  * Fix QEMU delete errors #14950
  * Fix containerd configuration issue with insecure registries #14482
  * Fix registry when custom images provided #14690
  * ISO: Update Docker from 20.10.17 to 20.10.18 #14935
  * Update kicbase base image to Ubuntu:focal-20220826 #14904
  * Update registry addon image from 2.7.1 to 2.8.1 #14886
  * Update gcp-auth-webhook addon from v0.0.10 to v0.0.11 #14847
  * Update Headlamp addon image from v0.9.0 to v0.11.1 #14802</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665403200">- update to 1.27.1:
  * QEMU Driver: Add support for dedicated network on macOS (socket_vmnet) #14989
  * QEMU Driver: Add support minikube service and tunnel on macOS #14989
  * Check if context is invalid during update-context command #15032
  * Use SSH tunnel if user specifies bindAddress #14951
  * Warn QEMU users if DNS issue detected #15073
  * Fix status command taking a long time on docker driver while paused #15077
  * Fix not allowing passing only an exposed port to --ports #15085
  * Fix minikube dashboard failing on macOS #15037
  * Fix incorrect command in powershell command tip #15012</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1665489600">- BuildRequires python3 rather than python.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to v1.28.0:
  * SECURITY WARNING: Log4j CVEs were detected in an image the efk addon uses,
  * if you don't use the efk addon no action is required. If you use the addon
  * we recommend running minikube addons disable efk to terminate the
  * vulnerable pods.  See #15280 for more details.
  * Prevent enabling efk addon due to containing Log4j CVE #15281
  * Auto select network on QEMU #15266
  * Implement mounting on QEMU with socket_vmnet #15108
  * Added cloud-spanner emulator addon #15160
  * Add minikube license command #15158
  * Allow port forwarding on Linux with Docker Desktop #15126
  * Add back service to mount VirtualBox host directory into the guest. #14784
  * ISO: Add FANOTIFY_ACCESS_PERMISSIONS to kernel configs #15232
  * When enabling addon warn if addon has no associated Github username #15081
  * Fix detecting preload cache of size 0 as valid #15256
  * Fix always writing to daemon by trimming docker.io from image name #14956
  * Fix minikube tunnel repeated printout of status #14933
  * Upgrade Portainer addon to 2.15.1 &amp; HTTPS access enabled #15172
  * Upgrade Headlamp addon to 0.13.0 #15186
  * ISO: Upgrade Docker from 20.10.18 to 20.10.20 #15159
  * KIC: Upgrade base image from ubuntu:focal-20220826 to ubuntu:focal-20220922 #15075
  * KCI: Upgrade base image from ubuntu:focal-20220922 to ubuntu:focal-20221019 #15219</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1675080000">- update to 1.29.0:
  * Bump QEMU driver priority from experimental to default
  * Ability to set static-ip for Docker driver
  * GCP-Auth Addon: automatically attach credentials to newly created
    namespaces
  * Allow forcing 1 CPU on Linux with docker and none driver
  * Major Improvements:
  * Large improvements to cgroup detection and CNI and CRI configurations
  * Prevent redownloading kicbase when already downloaded
  * Warn when using an old ISO/Kicbase image
  * Check brew install paths for socket_vmnet
  * Include gcp-auth logs in 'minikube logs' output
  * Use absolute path when calling crictl version
  * Add additional memory overhead for VirtualBox when `--memory=max`
  * Update Windows installer to create system-wide shortcut
  * Add `--subnet` validation
  * Add groups check to SSH driver
  * Update references to deprecated beta.kubernetes.io
  * Fix possible race condition when enabling multiple addons #15706
  * Fix cpus config field not supporting max value #15479
  * Fix subnet checking failing if IPv6 network found #15394
  * Fix Docker tunnel failing if too many SSH keys #15560
  * Fix kubelet localStorageCapacityIsolation option #15336
  * Fix setting snapshotter to unimplemented fuse-overlayfs #15272
  * Remove progress bar for kic download with JSON output #15482
  * Version Upgrades:
  * Bump default Kubernetes version from 1.25.3 to 1.26.1 #15683
  * Addons: Update auto-pause from 0.0.2 to 0.0.3 #15331
  * Addons: Update cloud-spanner from 1.4.6 to 1.5.0 #15440 #15667 #15707
  * Addons: Update headlamp from 0.13.0 to 0.14.1 #15401 #15515
  * Addons: Update ingress from 1.2.1 to 1.5.1 #15339
  * Addons: Update metrics-server from 0.6.1 to 0.6.2 #15411
  * Addons: Update kubevirt from 1.17 to 1.24.7 #15310
  * CNI: Update cilium from 1.9.9 to 1.12.3 #15242
  * Kicbase: Update buildkit from 0.10.3 to v0.11.0 #15630
  * Kicbase/ISO: Update containerd from 1.6.9 to 1.6.15 #15541
  * Kicbase/ISO: Update cri-dockerd from 0.2.2 to 0.3.0 #15541
  * Kicbase/ISO: Update docker from 20.10.20 to 20.10.23 #15341 #15541
  * Update KVM-docker-machine amd64 base image from Ubuntu 16.04 to 20.04
  * For a more detailed changelog see CHANGELOG.md.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680609600">- update to 1.30.0:
  * Ensure only one minikube tunnel instance runs at a time
  * Infer HyperKit HostIP as Gateway rather than hardcode to 192.168.64.1
  * multi-node: Add support for volumes using CSI addon
  * QEMU: Rename user network to builtin and update documentation
  * none driver: Look for cri-dockerd instead of hardcoding
  * Replace instances of k8s.gcr.io with registry.k8s.io
  * Handle CRI config of NetworkPlugin and PauseImage
  * Remove deprecated container-runtime flag from Kubernetes v1.24+
  * none driver: Require crictl to be installed for Kubernetes v1.24+
  * Add cri-dockerd logs to minikube logs output
  * Add ingress logs to minikube logs output
  * Add default cni logs to minikbue logs output
  * Add JSON output option to miniikube service list
  * Add kicbase download process to JSON output
  * Implement --docs for minikube addons list -o json
  * Implement --skip-audit flag and skip adding profile commands to audit log
  * Implement --last-start-only flag to minikube logs to only show last start log
  * see https://github.com/kubernetes/minikube/releases/tag/v1.30.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680696000">- update to 1.30.1:
  * Docker driver: Fix incorrectly stating `Image was not built
    for the current minikube` #16226
  * Mark VMware driver as unsupported  #16233</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689681600">- update to 1.31.0:
  * Add back VMware driver support #16796
  * `docker-env` supports the containerd runtime (experimental)
    [#15452] #16761
  * Automatically renew expired kubeadm certs #16249
  * New addon inspektor-gadget #15869
  * Major Improvements:
  * VM drivers: Fix all images getting removed on stop/start (40%
    start speedup) #16655
  * Addon registry: Add support for all architectures #16577
  * QEMU: Fix failing to interact with cluster after upgrading
    QEMU version #16853
  * macOS/QEMU: Auto unblock bootpd from firewall if blocking
    socket_vmnet network #16714 #16789
  * `minikube cp` supports providing directory as a target #15519</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1697544000">- update to 1.31.2:
  * docker-env Regression:
  * Create `~/.ssh` directory if missing #16934
  * Fix adding guest to `~/.ssh/known_hosts` when not needed
    [#17030]
  * Verify containerd storage separately from docker #16972
  * cni: Fix regression in auto selection #16912</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 1.32.0:
  * rootless: support `--container-runtime=docker` #17520
  * Install NVIDIA container toolkit during image build (offline
    support)
  * Fix no-limit option for config validation #17530
  * NVIDIA GPU support with new `--gpus=nvidia` flag for docker
    driver #15927 #17314 #17488
  * New `kubeflow` addon #17114
  * New `local-path-provisioner` addon #15062
  * Kicbase: Add `no-limit` option to `--cpus` &amp; `--memory` flags
    [#17491]
  * Hyper-V: Add memory validation for odd numbers #17325
  * QEMU: Improve cpu type and IP detection #17217
  * Mask http(s)_proxy password from startup output #17116
  * `--delete-on-faliure` also recreates cluster for kubeadm
    failures #16890
  * Addon auto-pause: Configure intervals using `--auto-pause-
    interval` #17070
  * `--kubernetes-version` checks GitHub for version validation
    and improved error output for invalid versions #16865
  * Bugs:
  * QEMU: Fix addons failing to enable #17402
  * Fix downloading the wrong kubeadm images for k8s versions
    after minikube release #17373
  * Fix enabling &amp; disabling addons with non-existing cluster
    [#17324]
  * Fix delete if container-runtime doesn't exist #17347
  * Fix network not found not being detected on new Docker
    versions #17323
  * Fix addon registry doesn't follow Minikube DNS domain name
    configuration (--dns-domain) #15585
  * Version Upgrades:
  * Bump Kubernetes version default: v1.28.3 and latest: v1.28.3
  * Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.9 to 1.5.11 #17225 #17259
  * Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.19.0 to v0.20.1 #17135 #17365
  * Addon ingress: Update ingress-nginx/controller image from
    v1.8.1 to v1.9.3 #17223 #17297 #17348 #17421
  * Addon inspektor-gadget: Update inspektor-gadget image from
    v0.19.0 to v0.21.0 #17176 #17340
  * Addon istio-provisioner: Update istio/operator image from
    1.12.2 to 1.19.3 #17383 #17436
  * Addon kong: Update kong image from 3.2 to 3.4.2 #17485
  * Addon registry: Update registry image from 2.8.1 to 2.8.3
    [#17382] #17467
  * CNI: Update calico from v3.26.1 to v3.26.3 #17363 #17375
  * CNI: Update flannel from v0.22.1 to v0.22.3 #17102 #17263
  * CNI: Update kindnetd from v20230511-dc714da8 to
    v20230809-80a64d96 #17233
  * Kicbase/ISO: Update buildkit from v0.11.6 to v0.12.2 #17194
  * Kicbase/ISO: Update containerd from v1.7.3 to v1.7.7 #17243
    [#17466]
  * Kicbase/ISO: Update crictl from v1.21.0 to v1.28.0 #17240
  * Kicbase/ISO: Update docker from 24.0.4 to 24.0.6 #17120
    [#17207]
  * Kicbase/ISO: Update nerdctl from 1.0.0 to 1.6.2 #17145 #17339
    [#17434]
  * Kicbase/ISO: Update runc from v1.1.7 to v1.1.9 #17250
  * Kicbase: Bump ubuntu:jammy from 20230624 to 20231004 #17086
    [#17174] #17345 #17423</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1715860800">- update to 1.33.0:
  * Features:
  - Support multi-control plane - HA clusters --ha #17909
    Tutorial
  - Add support for Kubernetes v1.30 #18669
  - Support exposing clusterIP services via minikube service
    [#17877]
  - Addon gvisor: Add arm64 support #18063 #18453
  - New Addon: YAKD - Kubernetes Dashboard addon #17775
  * Minor Improvements:
  - Add active kubecontext to minikube profile list output #17735
  - CNI calico: support kubeadm.pod-network-cidr #18233
  - CNI bridge: Ensure pod communications are allowed #16143
  - Addon auto-pause: Remove memory leak &amp; add configurable
    interval #17936
  - image build: Add docker.io/library to image short names
    [#16214]
  - cp: Create directory if not present #17715
  - Move errors getting logs into log output itself #18007
  - Add default sysctls to allow privileged ports with no
    capabilities #18421
  - Include extended attributes in preload tarballs #17829
  - Apply kubeadm.applyNodeLabels label to all nodes #16416
  - Limit driver status check to 20s #17553
  - Include journalctl logs if systemd service fails to start
    [#17659]
  - Fix "Failed to enable container runtime: sudo systemctl
    restart cri-docker" #17907
  - Fix containerd redownloading existing images on start #17671
  - Fix kvm2 not detecting containerd preload #17658
  - Fix modifying Docker binfmt config #17830
  - Fix auto-pause addon #17866
  - Fix not using preload with overlayfs storage driver #18333
  - Fix image repositories not allowing subdomains with numbers
    [#17496]
  - Fix stopping cluster when using kvm2 with containerd #17967
  - Fix starting more than one cluster on kvm2 arm64 #18241
  - Fix starting kvm2 clusters using Linux on arm64 Mac #18239
  - Fix displaying error when deleting non-existing cluster
    [#17713]
  - Fix no-limit not being respected on restart #17598
  - Fix not applying kubeadm.applyNodeLabels label to nodes added
    after inital start #16416
  - Fix logs delimiter output #17734
  * Bugs:
  - Fix unescaped local host regex #18617
  - Fix regex on validateNetwork to support special characters
    [#18158]
  * Version Upgrades:
  - Bump Kubernetes version default: v1.30.0 and latest: v1.30.0
    [#18669]
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.23.0 to 0.23.1 #18517
  - Addon inspektor-gadget: Update inspektor-gadget image from
    v0.26.0 to v0.27.0 #18588
  - Addon istio-provisioner: Update istio/operator image from
    1.21.0 to 1.21.1 #18644
  - Addon metrics-server: Update metrics-server/metrics-server
    image from v0.7.0 to v0.7.1 #18551
  - CNI: Update calico from v3.27.0 to v3.27.3 #18206
  - CNI: Update flannel from v0.24.4 to v0.25.1 #18641
  - Kicbase/ISO: Update buildkit from v0.13.0 to v0.13.1 #18566
  - Kicbase/ISO: Update containerd from v1.7.14 to v1.7.15 #18621
  - Kicbase/ISO: Update cri-dockerd from v0.3.3 to v0.3.12 #18585
  - Kicbase/ISO: Update crun from 1.14 to 1.14.4 #18610
  - Kicbase/ISO: Update docker from 25.0.4 to 26.0.1 #18485
    [#18649]
  - Kicbase/ISO: Update nerdctl from 1.7.4 to 1.7.5 #18634
  - Kicbase: Update nerdctld from 0.5.1 to 0.6.0 #18647</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1715860801">- update to 1.33.1:
  * Bugs:
  - Fix DNSSEC validation failed errors #18830
  - Fix too many open files errors #18832
  - CNI cilium: Fix cilium pods failing to start-up #18846
  - Addon ingress: Fix enable failing on arm64 machines using VM
    driver #18779
  - Addon kubeflow: Fix some components missing arm64 images
    [#18765]
  * Version Upgrades:
  - Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.15 to 1.5.17 #18773 #18811
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.23.1 to v0.23.2 #18793
  - Addon ingress: Update ingress-nginx/controller image from
    v1.10.0 to v1.10.1 #18756
  - Addon istio-provisioner: Update istio/operator image from
    1.21.1 to 1.21.2 #18757
  - Addon kubevirt: Update bitnami/kubectl image from 1.29.3 to
    1.30.0 #18711 #18771
  - Addon nvidia-device-plugin: Update nvidia/k8s-device-plugin
    image from v0.14.5 to v0.15.0 #18703
  - CNI cilium: Update from v1.15.1 to v1.15.3 #18846
  - High Availability: Update kube-vip from 0.7.1 to v0.8.0
    [#18774]
  - Kicbase/ISO: Update docker from 26.0.1 to 26.0.2 #18706
  - Kicbase: Bump ubuntu:jammy from 20240227 to 20240427 #18702
    [#18769] #18804</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721390400">- add socat recommends (bsc#1120850)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1725969600">- update to 1.34.0 (boo#1227017 boo#1227049 boo#1227005):
  For a more detailed changelog, including changes occurring in
  pre-release versions, see CHANGELOG.md.
  https://github.com/kubernetes/minikube/blob/master/CHANGELOG.md
  * Breaking Changes:
  - Bump minimum podman version to 4.9.0 #19457
  - Disallow using Docker Desktop 4.34.0 #19576
  * Features:
  - Bump default Kubernetes version to v1.31.0 #19435
  - Add new driver for macOS: vfkit #19423
  - Add Parallels driver support for darwin/arm64 #19373
  - Add new volcano addon #18602
  - Addons ingress-dns: Added support for all architectures
    [#19198]
  - Support privileged ports on WSL #19370
  - VM drivers with docker container-runtime now use
    docker-buildx for image building #19339
  - Support running x86 QEMU on arm64 #19228
  - Add -o json option for addon images command #19364
  * Improvements:
  - add -d shorthand for --driver #19356
  - add -c shorthand for --container-runtime #19217
  - kvm2: Don't delete the "default" libvirt network #18920
  - Update MINIKUBE_HOME usage #18648
  - CNI: Updated permissions to support network policies on
    kindnet #19360
  - GPU: Set NVIDIA_DRIVER_CAPABILITIES to all when GPU is
    enabled #19345
  - Improved error message when trying to use mount on system
    missing 9P #18995
  - Improved error message when enabling KVM addons on non-KVM
    cluster #19195
  - Added warning when loading image with wrong arch #19229
  - profile list --output json handle empty config folder #16900
  - Check connectivity outside minikube when connectivity issuse
    [#18859]
  * Bugs:
  - Fix not creating API server tunnel for QEMU w/ builtin
    network #19191
  - Fix waiting for user input on firewall unblock when
  - -interactive=false #19531
  - Fix network retry check when subnet already in use for podman
    [#17779]
  - Fix empty tarball when generating image save #19312
  - Fix missing permission for kong-serviceaccount #19002
  * Version Upgrades:
  - Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.17 to 1.5.23 #19341 #19501
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.23.2 to v0.25.0 #18992 #19152 #19349
  - Addon kong: Update kong image from 3.6.1 to 3.7.1 #19046
    [#19124]
  - Addon kubevirt: Update bitnami/kubectl image from 1.30.0 to
    1.31.0 #18929 #19087 #19313 #19479
  - Addon ingress: Update ingress-nginx/controller image from
    v1.10.1 to v1.11.2 #19302 #19461
  - Addon inspektor-gadget: Update inspektor-gadget image from
    v0.27.0 to v0.32.0 #18872 #18931 #19011 #19166 #19411 #19554
  - Addon istio-provisioner: Update istio/operator image from
    1.21.2 to 1.23.0 #18932 #19052 #19167 #19283 #19450
  - Addon nvidia-device-plugin: Update nvidia/k8s-device-plugin
    image from v0.15.0 to v0.16.2 #19162 #19266 #19336 #19409
  - Addon metrics-server: Update metrics-server/metrics-server
    image from v0.7.1 to v0.7.2 #19529
  - Addon YAKD: bump marcnuri/yakd image from 0.0.4 to 0.0.5
    [#19145]
  - CNI: Update calico from v3.27.3 to v3.28.1 #18870 #19377
  - CNI: Update cilium from v1.15.3 to v1.16.1 #18925 #19084
    [#19247] #19337 #19476
  - CNI: Update kindnetd from v20240202-8f1494ea to
    v20240813-c6f155d6 #18933 #19252 #19265 #19307 #19378 #19446
  - CNI: Update flannel from v0.25.1 to v0.25.6 #18966 #19008
    [#19085] #19297 #19522
  - Kicbase: Update nerdctld from 0.6.0 to 0.6.1 #19282
  - Kicbase: Bump ubuntu:jammy from 20240427 to 20240808 #19068
    [#19184] #19478
  - Kicbase/ISO: Update buildkit from v0.13.1 to v0.15.2 #19024
    [#19116] #19264 #19355 #19452
  - Kicbase/ISO: Update cni-plugins from v1.4.1 to v1.5.1 #19044
    [#19128]
  - Kicbase/ISO: Update containerd from v1.7.15 to v1.7.21 #18934
    [#19106] #19186 #19298 #19521
  - Kicbase/ISO: Update cri-dockerd from v0.3.12 to v0.3.15
    [#19199] #19249
  - Kicbase/ISO: Update crun from 1.14.4 to 1.16.1 #19112 #19389
    [#19443]
  - Kicbase/ISO: Update docker from 26.0.2 to 27.2.0 #18993
    [#19038] #19142 #19153 #19175 #19319 #19326 #19429 #19530
  - Kicbase/ISO: Update nerdctl from 1.7.5 to 1.7.6 #18869
  - Kicbase/ISO: Update runc from v1.1.12 to v1.1.13 #19104</changelog>
</package>
<package pkgid="6457d16601abcf178594050b5eb752fce973e641c9f3d48586d6edc89d56f303" name="docker-machine-driver-kvm2" arch="aarch64">
  <version epoch="0" ver="1.36.0" rel="bp156.2.6.1"/>
  <changelog author="Matthew Wilks &lt;water261@outlook.com.au&gt;" date="1657195200">- update to 1.26.0:
  * Note: Using a minikube cluster created before 1.26.0, using the docker
    container-runtime (default), and plan to upgrade the Kubernetes version to
    v1.24+? After upgrading, you may need to delete &amp; recreate it. none driver
    users, cri-docker is now required to be installed, install instructions.
    See issue #14410 for more info.
  * Add headlamp addon #14315
  * Add InAccel FPGA Operator addon #12995
  * Only set highmem=off for darwin if qemu version is below 7.0 or memory is below 3GB #14291
  * Define qemu as a qemu2 driver alias #14284
  * Allow users to supply custom QEMU firmware path #14283
  * Add eBPF related kernel options #14316
  * Add bind address flag for minikube tunnel #14245
  * Add active column for minikube profile list #14079
  * Add documentation URL to the addon list table #14123
  * minikube config defaults kubernetes-version lists all currently supported Kubernetes versions #13775
  * Fix terminated commands not writing to audit log #13307
  * Fix Podman port mapping publish on macOS #14290
  * Fix minikube delete deleting networks from other profiles #14279
  * Bump Kubernetes version default: v1.24.1 and latest: v1.24.1 #14197
  * ISO: Upgrade Docker from 20.10.14 to 20.10.16 #14153
  * ISO: Upgrade kernel from 4.19.235 to 5.10.57 #12707
  * Upgrade Dashboard addon from v2.5.1 to v2.6.0 &amp; MetricsScraper from v1.0.7 to v1.0.8 #14269
  * Upgrade gcp-auth-webhook from v0.0.8 to v0.0.9 #14372
  * Upgrade nginx image from v1.2.0 to v1.2.1 #14317
  * Important Changes in Pre-Release Versions
  * Add configure option to registry-aliases addon #13912
  * Add support for building aarch64 ISO #13762
  * Support rootless Podman driver (Usage: minikube config set rootless true) #13829
  * QEMU:
  * Add support for the QEMU driver #13639
  * Fix qemu firmware path locations #14182
  * Re-establish apiserver tunnel on restart #14183</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- build against go1.18 to fix arm64 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663070400">- update to 1.26.1:
  * Check for cri-dockerd &amp; dockerd runtimes when using none-driver on Kubernetes 1.24+ #14555
  * Add solution message for when cri-docker is missing #14483
  * Limit number of audit entries #14695
  * Optimize audit logging #14596
  * Show the container runtime when running without kubernetes #13432 #14200
  * Add warning when enabling thrid-party addons #14499
  * Fix url index out of range error in service #14658
  * Fix incorrect user and profile in audit logging #14562
  * Fix overwriting err for OCI "minikube start" #14506
  * Fix panic when environment variables are empty #14415
  * Bump Kubernetes version default: v1.24.3 and latest: v1.24.3 #14606
  * ISO: Update Docker from 20.10.16 to 20.10.17 #14534
  * ISO/Kicbase: Update cri-o from v1.22.3 to v1.24.1 #14420
  * ISO: Update conmon from v2.0.24 to v2.1.2 #14545
  * Update gcp-auth-webhook from v0.0.9 to v0.0.10 #14670
  * ISO/Kicbase: Update base images #14481</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663329600">- update to 1.27.0:
  * Bump default Kubernetes version to v1.25.0 and resolve /etc/resolv.conf regression #14848
  * Skip metallb PodSecurityPolicy object for kubernetes 1.25+ #14903
  * The DefaultKubernetesRepo changed for 1.25.0 #14768
  * Fix QEMU delete errors #14950
  * Fix containerd configuration issue with insecure registries #14482
  * Fix registry when custom images provided #14690
  * ISO: Update Docker from 20.10.17 to 20.10.18 #14935
  * Update kicbase base image to Ubuntu:focal-20220826 #14904
  * Update registry addon image from 2.7.1 to 2.8.1 #14886
  * Update gcp-auth-webhook addon from v0.0.10 to v0.0.11 #14847
  * Update Headlamp addon image from v0.9.0 to v0.11.1 #14802</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665403200">- update to 1.27.1:
  * QEMU Driver: Add support for dedicated network on macOS (socket_vmnet) #14989
  * QEMU Driver: Add support minikube service and tunnel on macOS #14989
  * Check if context is invalid during update-context command #15032
  * Use SSH tunnel if user specifies bindAddress #14951
  * Warn QEMU users if DNS issue detected #15073
  * Fix status command taking a long time on docker driver while paused #15077
  * Fix not allowing passing only an exposed port to --ports #15085
  * Fix minikube dashboard failing on macOS #15037
  * Fix incorrect command in powershell command tip #15012</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1665489600">- BuildRequires python3 rather than python.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to v1.28.0:
  * SECURITY WARNING: Log4j CVEs were detected in an image the efk addon uses,
  * if you don't use the efk addon no action is required. If you use the addon
  * we recommend running minikube addons disable efk to terminate the
  * vulnerable pods.  See #15280 for more details.
  * Prevent enabling efk addon due to containing Log4j CVE #15281
  * Auto select network on QEMU #15266
  * Implement mounting on QEMU with socket_vmnet #15108
  * Added cloud-spanner emulator addon #15160
  * Add minikube license command #15158
  * Allow port forwarding on Linux with Docker Desktop #15126
  * Add back service to mount VirtualBox host directory into the guest. #14784
  * ISO: Add FANOTIFY_ACCESS_PERMISSIONS to kernel configs #15232
  * When enabling addon warn if addon has no associated Github username #15081
  * Fix detecting preload cache of size 0 as valid #15256
  * Fix always writing to daemon by trimming docker.io from image name #14956
  * Fix minikube tunnel repeated printout of status #14933
  * Upgrade Portainer addon to 2.15.1 &amp; HTTPS access enabled #15172
  * Upgrade Headlamp addon to 0.13.0 #15186
  * ISO: Upgrade Docker from 20.10.18 to 20.10.20 #15159
  * KIC: Upgrade base image from ubuntu:focal-20220826 to ubuntu:focal-20220922 #15075
  * KCI: Upgrade base image from ubuntu:focal-20220922 to ubuntu:focal-20221019 #15219</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1675080000">- update to 1.29.0:
  * Bump QEMU driver priority from experimental to default
  * Ability to set static-ip for Docker driver
  * GCP-Auth Addon: automatically attach credentials to newly created
    namespaces
  * Allow forcing 1 CPU on Linux with docker and none driver
  * Major Improvements:
  * Large improvements to cgroup detection and CNI and CRI configurations
  * Prevent redownloading kicbase when already downloaded
  * Warn when using an old ISO/Kicbase image
  * Check brew install paths for socket_vmnet
  * Include gcp-auth logs in 'minikube logs' output
  * Use absolute path when calling crictl version
  * Add additional memory overhead for VirtualBox when `--memory=max`
  * Update Windows installer to create system-wide shortcut
  * Add `--subnet` validation
  * Add groups check to SSH driver
  * Update references to deprecated beta.kubernetes.io
  * Fix possible race condition when enabling multiple addons #15706
  * Fix cpus config field not supporting max value #15479
  * Fix subnet checking failing if IPv6 network found #15394
  * Fix Docker tunnel failing if too many SSH keys #15560
  * Fix kubelet localStorageCapacityIsolation option #15336
  * Fix setting snapshotter to unimplemented fuse-overlayfs #15272
  * Remove progress bar for kic download with JSON output #15482
  * Version Upgrades:
  * Bump default Kubernetes version from 1.25.3 to 1.26.1 #15683
  * Addons: Update auto-pause from 0.0.2 to 0.0.3 #15331
  * Addons: Update cloud-spanner from 1.4.6 to 1.5.0 #15440 #15667 #15707
  * Addons: Update headlamp from 0.13.0 to 0.14.1 #15401 #15515
  * Addons: Update ingress from 1.2.1 to 1.5.1 #15339
  * Addons: Update metrics-server from 0.6.1 to 0.6.2 #15411
  * Addons: Update kubevirt from 1.17 to 1.24.7 #15310
  * CNI: Update cilium from 1.9.9 to 1.12.3 #15242
  * Kicbase: Update buildkit from 0.10.3 to v0.11.0 #15630
  * Kicbase/ISO: Update containerd from 1.6.9 to 1.6.15 #15541
  * Kicbase/ISO: Update cri-dockerd from 0.2.2 to 0.3.0 #15541
  * Kicbase/ISO: Update docker from 20.10.20 to 20.10.23 #15341 #15541
  * Update KVM-docker-machine amd64 base image from Ubuntu 16.04 to 20.04
  * For a more detailed changelog see CHANGELOG.md.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680609600">- update to 1.30.0:
  * Ensure only one minikube tunnel instance runs at a time
  * Infer HyperKit HostIP as Gateway rather than hardcode to 192.168.64.1
  * multi-node: Add support for volumes using CSI addon
  * QEMU: Rename user network to builtin and update documentation
  * none driver: Look for cri-dockerd instead of hardcoding
  * Replace instances of k8s.gcr.io with registry.k8s.io
  * Handle CRI config of NetworkPlugin and PauseImage
  * Remove deprecated container-runtime flag from Kubernetes v1.24+
  * none driver: Require crictl to be installed for Kubernetes v1.24+
  * Add cri-dockerd logs to minikube logs output
  * Add ingress logs to minikube logs output
  * Add default cni logs to minikbue logs output
  * Add JSON output option to miniikube service list
  * Add kicbase download process to JSON output
  * Implement --docs for minikube addons list -o json
  * Implement --skip-audit flag and skip adding profile commands to audit log
  * Implement --last-start-only flag to minikube logs to only show last start log
  * see https://github.com/kubernetes/minikube/releases/tag/v1.30.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680696000">- update to 1.30.1:
  * Docker driver: Fix incorrectly stating `Image was not built
    for the current minikube` #16226
  * Mark VMware driver as unsupported  #16233</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689681600">- update to 1.31.0:
  * Add back VMware driver support #16796
  * `docker-env` supports the containerd runtime (experimental)
    [#15452] #16761
  * Automatically renew expired kubeadm certs #16249
  * New addon inspektor-gadget #15869
  * Major Improvements:
  * VM drivers: Fix all images getting removed on stop/start (40%
    start speedup) #16655
  * Addon registry: Add support for all architectures #16577
  * QEMU: Fix failing to interact with cluster after upgrading
    QEMU version #16853
  * macOS/QEMU: Auto unblock bootpd from firewall if blocking
    socket_vmnet network #16714 #16789
  * `minikube cp` supports providing directory as a target #15519</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1697544000">- update to 1.31.2:
  * docker-env Regression:
  * Create `~/.ssh` directory if missing #16934
  * Fix adding guest to `~/.ssh/known_hosts` when not needed
    [#17030]
  * Verify containerd storage separately from docker #16972
  * cni: Fix regression in auto selection #16912</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 1.32.0:
  * rootless: support `--container-runtime=docker` #17520
  * Install NVIDIA container toolkit during image build (offline
    support)
  * Fix no-limit option for config validation #17530
  * NVIDIA GPU support with new `--gpus=nvidia` flag for docker
    driver #15927 #17314 #17488
  * New `kubeflow` addon #17114
  * New `local-path-provisioner` addon #15062
  * Kicbase: Add `no-limit` option to `--cpus` &amp; `--memory` flags
    [#17491]
  * Hyper-V: Add memory validation for odd numbers #17325
  * QEMU: Improve cpu type and IP detection #17217
  * Mask http(s)_proxy password from startup output #17116
  * `--delete-on-faliure` also recreates cluster for kubeadm
    failures #16890
  * Addon auto-pause: Configure intervals using `--auto-pause-
    interval` #17070
  * `--kubernetes-version` checks GitHub for version validation
    and improved error output for invalid versions #16865
  * Bugs:
  * QEMU: Fix addons failing to enable #17402
  * Fix downloading the wrong kubeadm images for k8s versions
    after minikube release #17373
  * Fix enabling &amp; disabling addons with non-existing cluster
    [#17324]
  * Fix delete if container-runtime doesn't exist #17347
  * Fix network not found not being detected on new Docker
    versions #17323
  * Fix addon registry doesn't follow Minikube DNS domain name
    configuration (--dns-domain) #15585
  * Version Upgrades:
  * Bump Kubernetes version default: v1.28.3 and latest: v1.28.3
  * Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.9 to 1.5.11 #17225 #17259
  * Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.19.0 to v0.20.1 #17135 #17365
  * Addon ingress: Update ingress-nginx/controller image from
    v1.8.1 to v1.9.3 #17223 #17297 #17348 #17421
  * Addon inspektor-gadget: Update inspektor-gadget image from
    v0.19.0 to v0.21.0 #17176 #17340
  * Addon istio-provisioner: Update istio/operator image from
    1.12.2 to 1.19.3 #17383 #17436
  * Addon kong: Update kong image from 3.2 to 3.4.2 #17485
  * Addon registry: Update registry image from 2.8.1 to 2.8.3
    [#17382] #17467
  * CNI: Update calico from v3.26.1 to v3.26.3 #17363 #17375
  * CNI: Update flannel from v0.22.1 to v0.22.3 #17102 #17263
  * CNI: Update kindnetd from v20230511-dc714da8 to
    v20230809-80a64d96 #17233
  * Kicbase/ISO: Update buildkit from v0.11.6 to v0.12.2 #17194
  * Kicbase/ISO: Update containerd from v1.7.3 to v1.7.7 #17243
    [#17466]
  * Kicbase/ISO: Update crictl from v1.21.0 to v1.28.0 #17240
  * Kicbase/ISO: Update docker from 24.0.4 to 24.0.6 #17120
    [#17207]
  * Kicbase/ISO: Update nerdctl from 1.0.0 to 1.6.2 #17145 #17339
    [#17434]
  * Kicbase/ISO: Update runc from v1.1.7 to v1.1.9 #17250
  * Kicbase: Bump ubuntu:jammy from 20230624 to 20231004 #17086
    [#17174] #17345 #17423</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1715860800">- update to 1.33.0:
  * Features:
  - Support multi-control plane - HA clusters --ha #17909
    Tutorial
  - Add support for Kubernetes v1.30 #18669
  - Support exposing clusterIP services via minikube service
    [#17877]
  - Addon gvisor: Add arm64 support #18063 #18453
  - New Addon: YAKD - Kubernetes Dashboard addon #17775
  * Minor Improvements:
  - Add active kubecontext to minikube profile list output #17735
  - CNI calico: support kubeadm.pod-network-cidr #18233
  - CNI bridge: Ensure pod communications are allowed #16143
  - Addon auto-pause: Remove memory leak &amp; add configurable
    interval #17936
  - image build: Add docker.io/library to image short names
    [#16214]
  - cp: Create directory if not present #17715
  - Move errors getting logs into log output itself #18007
  - Add default sysctls to allow privileged ports with no
    capabilities #18421
  - Include extended attributes in preload tarballs #17829
  - Apply kubeadm.applyNodeLabels label to all nodes #16416
  - Limit driver status check to 20s #17553
  - Include journalctl logs if systemd service fails to start
    [#17659]
  - Fix "Failed to enable container runtime: sudo systemctl
    restart cri-docker" #17907
  - Fix containerd redownloading existing images on start #17671
  - Fix kvm2 not detecting containerd preload #17658
  - Fix modifying Docker binfmt config #17830
  - Fix auto-pause addon #17866
  - Fix not using preload with overlayfs storage driver #18333
  - Fix image repositories not allowing subdomains with numbers
    [#17496]
  - Fix stopping cluster when using kvm2 with containerd #17967
  - Fix starting more than one cluster on kvm2 arm64 #18241
  - Fix starting kvm2 clusters using Linux on arm64 Mac #18239
  - Fix displaying error when deleting non-existing cluster
    [#17713]
  - Fix no-limit not being respected on restart #17598
  - Fix not applying kubeadm.applyNodeLabels label to nodes added
    after inital start #16416
  - Fix logs delimiter output #17734
  * Bugs:
  - Fix unescaped local host regex #18617
  - Fix regex on validateNetwork to support special characters
    [#18158]
  * Version Upgrades:
  - Bump Kubernetes version default: v1.30.0 and latest: v1.30.0
    [#18669]
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.23.0 to 0.23.1 #18517
  - Addon inspektor-gadget: Update inspektor-gadget image from
    v0.26.0 to v0.27.0 #18588
  - Addon istio-provisioner: Update istio/operator image from
    1.21.0 to 1.21.1 #18644
  - Addon metrics-server: Update metrics-server/metrics-server
    image from v0.7.0 to v0.7.1 #18551
  - CNI: Update calico from v3.27.0 to v3.27.3 #18206
  - CNI: Update flannel from v0.24.4 to v0.25.1 #18641
  - Kicbase/ISO: Update buildkit from v0.13.0 to v0.13.1 #18566
  - Kicbase/ISO: Update containerd from v1.7.14 to v1.7.15 #18621
  - Kicbase/ISO: Update cri-dockerd from v0.3.3 to v0.3.12 #18585
  - Kicbase/ISO: Update crun from 1.14 to 1.14.4 #18610
  - Kicbase/ISO: Update docker from 25.0.4 to 26.0.1 #18485
    [#18649]
  - Kicbase/ISO: Update nerdctl from 1.7.4 to 1.7.5 #18634
  - Kicbase: Update nerdctld from 0.5.1 to 0.6.0 #18647</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1715860801">- update to 1.33.1:
  * Bugs:
  - Fix DNSSEC validation failed errors #18830
  - Fix too many open files errors #18832
  - CNI cilium: Fix cilium pods failing to start-up #18846
  - Addon ingress: Fix enable failing on arm64 machines using VM
    driver #18779
  - Addon kubeflow: Fix some components missing arm64 images
    [#18765]
  * Version Upgrades:
  - Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.15 to 1.5.17 #18773 #18811
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.23.1 to v0.23.2 #18793
  - Addon ingress: Update ingress-nginx/controller image from
    v1.10.0 to v1.10.1 #18756
  - Addon istio-provisioner: Update istio/operator image from
    1.21.1 to 1.21.2 #18757
  - Addon kubevirt: Update bitnami/kubectl image from 1.29.3 to
    1.30.0 #18711 #18771
  - Addon nvidia-device-plugin: Update nvidia/k8s-device-plugin
    image from v0.14.5 to v0.15.0 #18703
  - CNI cilium: Update from v1.15.1 to v1.15.3 #18846
  - High Availability: Update kube-vip from 0.7.1 to v0.8.0
    [#18774]
  - Kicbase/ISO: Update docker from 26.0.1 to 26.0.2 #18706
  - Kicbase: Bump ubuntu:jammy from 20240227 to 20240427 #18702
    [#18769] #18804</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721390400">- add socat recommends (bsc#1120850)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1725969600">- update to 1.34.0 (boo#1227017 boo#1227049 boo#1227005):
  For a more detailed changelog, including changes occurring in
  pre-release versions, see CHANGELOG.md.
  https://github.com/kubernetes/minikube/blob/master/CHANGELOG.md
  * Breaking Changes:
  - Bump minimum podman version to 4.9.0 #19457
  - Disallow using Docker Desktop 4.34.0 #19576
  * Features:
  - Bump default Kubernetes version to v1.31.0 #19435
  - Add new driver for macOS: vfkit #19423
  - Add Parallels driver support for darwin/arm64 #19373
  - Add new volcano addon #18602
  - Addons ingress-dns: Added support for all architectures
    [#19198]
  - Support privileged ports on WSL #19370
  - VM drivers with docker container-runtime now use
    docker-buildx for image building #19339
  - Support running x86 QEMU on arm64 #19228
  - Add -o json option for addon images command #19364
  * Improvements:
  - add -d shorthand for --driver #19356
  - add -c shorthand for --container-runtime #19217
  - kvm2: Don't delete the "default" libvirt network #18920
  - Update MINIKUBE_HOME usage #18648
  - CNI: Updated permissions to support network policies on
    kindnet #19360
  - GPU: Set NVIDIA_DRIVER_CAPABILITIES to all when GPU is
    enabled #19345
  - Improved error message when trying to use mount on system
    missing 9P #18995
  - Improved error message when enabling KVM addons on non-KVM
    cluster #19195
  - Added warning when loading image with wrong arch #19229
  - profile list --output json handle empty config folder #16900
  - Check connectivity outside minikube when connectivity issuse
    [#18859]
  * Bugs:
  - Fix not creating API server tunnel for QEMU w/ builtin
    network #19191
  - Fix waiting for user input on firewall unblock when
  - -interactive=false #19531
  - Fix network retry check when subnet already in use for podman
    [#17779]
  - Fix empty tarball when generating image save #19312
  - Fix missing permission for kong-serviceaccount #19002
  * Version Upgrades:
  - Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.17 to 1.5.23 #19341 #19501
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.23.2 to v0.25.0 #18992 #19152 #19349
  - Addon kong: Update kong image from 3.6.1 to 3.7.1 #19046
    [#19124]
  - Addon kubevirt: Update bitnami/kubectl image from 1.30.0 to
    1.31.0 #18929 #19087 #19313 #19479
  - Addon ingress: Update ingress-nginx/controller image from
    v1.10.1 to v1.11.2 #19302 #19461
  - Addon inspektor-gadget: Update inspektor-gadget image from
    v0.27.0 to v0.32.0 #18872 #18931 #19011 #19166 #19411 #19554
  - Addon istio-provisioner: Update istio/operator image from
    1.21.2 to 1.23.0 #18932 #19052 #19167 #19283 #19450
  - Addon nvidia-device-plugin: Update nvidia/k8s-device-plugin
    image from v0.15.0 to v0.16.2 #19162 #19266 #19336 #19409
  - Addon metrics-server: Update metrics-server/metrics-server
    image from v0.7.1 to v0.7.2 #19529
  - Addon YAKD: bump marcnuri/yakd image from 0.0.4 to 0.0.5
    [#19145]
  - CNI: Update calico from v3.27.3 to v3.28.1 #18870 #19377
  - CNI: Update cilium from v1.15.3 to v1.16.1 #18925 #19084
    [#19247] #19337 #19476
  - CNI: Update kindnetd from v20240202-8f1494ea to
    v20240813-c6f155d6 #18933 #19252 #19265 #19307 #19378 #19446
  - CNI: Update flannel from v0.25.1 to v0.25.6 #18966 #19008
    [#19085] #19297 #19522
  - Kicbase: Update nerdctld from 0.6.0 to 0.6.1 #19282
  - Kicbase: Bump ubuntu:jammy from 20240427 to 20240808 #19068
    [#19184] #19478
  - Kicbase/ISO: Update buildkit from v0.13.1 to v0.15.2 #19024
    [#19116] #19264 #19355 #19452
  - Kicbase/ISO: Update cni-plugins from v1.4.1 to v1.5.1 #19044
    [#19128]
  - Kicbase/ISO: Update containerd from v1.7.15 to v1.7.21 #18934
    [#19106] #19186 #19298 #19521
  - Kicbase/ISO: Update cri-dockerd from v0.3.12 to v0.3.15
    [#19199] #19249
  - Kicbase/ISO: Update crun from 1.14.4 to 1.16.1 #19112 #19389
    [#19443]
  - Kicbase/ISO: Update docker from 26.0.2 to 27.2.0 #18993
    [#19038] #19142 #19153 #19175 #19319 #19326 #19429 #19530
  - Kicbase/ISO: Update nerdctl from 1.7.5 to 1.7.6 #18869
  - Kicbase/ISO: Update runc from v1.1.12 to v1.1.13 #19104</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1737028800">- remove minikube-rpmlintrc to silence warnings regarding unused
  filters
- refactor spec file to build position-independent executables
- refactor spec to fix builds errors
- add completion subpackages for fish and zsh
- add %check section to check version output
- update to 1.35.0 (bsc#1234528, CVE-2024-45337):
  * Features:
  - Add support for AMD GPUs via --gpus=amd #19749
  - publish &amp; download kicbase image in github release assets
    [#19464]
  - Support latest Kubernetes v1.32.0 #20091
  - Adds support for kubeadm.k8s.io/v1beta4 available since k8s
    v1.31 #19790
  * Improvements:
  - Merge nvidia-gpu-device-plugin and nvidia-device-plugin.
    [#19545]
  - cilium: remove appArmorProfile for k8s&lt;v1.30.0 #19888
  - auto-pause: restart service after configuration #19900
  - Revert "Change MINIKUBE_HOME logic" #20045
  - HA (multi-control plane): Update kube-vip from v0.8.6 to
    v0.8.7 #20053
  - don't pollute minikube profile list with errors if exitcode
    is absent #19728
  - unified minikube cluster status query #18998
  - Vfkit driver: fix TestMachineType failing on macOS #19726
  - No more arch restriction on nerdctld #19730
  - remove helm-tiller addon #19636
  - More robust MAC address matching #19750
  - Add instructions to resolve docker context error #19197
  * Bug fixes:
  - fix --wait's failure to work on coredns pods #19748
  - Fix panic when no services in namespace with --all specified
    [#19957]
  - fix timeout when stopping KVM machine with CRI-O container
    runtime #19758
  - Fix long lines in lastStart.txt not outputting in log outputs
    [#19740]
  - Fix wrongly detecting kicbase arch as incorrect #19664
  * Breaking Changes:
  - skip building kvm2-arm64 till 19959 is resolved #20062
  - remove arm64 kvm #19985
  * Languages:
  - Add more Chinese translations #19490
  - Add more Chinese translations #19508
  - Fix chinnese translation on wrong line #19718
  - Add more chinnese translations #19962
  - Add more chinnese translations #19772
  - Fix french translation #19978
  - Improve french translation #19654
  * - Version Updates:
  - Please see the full changelog
  - https://github.com/kubernetes/minikube/releases/tag/v0.35.0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1737720000">- fix dependencies for fish and zsh completion subpackages</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1748001600">- Update to version 1.36.0:
  * Features
  - Support Kubernetes version v1.33.1 #20784
  - New flag "-f" to allow passing a config file for addon
    configure command. #20255
  - vfkit: bump to Preferred driver on macOs #20808
  - vfkit: new network option "--network vment-shared' for vfkit
    driver #20501
  * Bug Fixes:
  - fix bootpd check on macOS &gt;= 15 #20400
  - fix bug in parsing proxies with dashes #20648
  - fix waiting for all pods having specified labels to be Ready
    [#20315]
  - fix: incorrect finalImg affecting downloading kic form github
    assets #20316
  - fix: reference missing files in schema (Closes #20752) #20761
  - Improvements:
  - Additional checks for 9p support #20288
  - vfkit: Graceful shutdown on stop #20504
  - vfkit: More robust state management #20506
  - vfkit vmnet: support running without sudoers configuration
    [#20719]
  - Revert "fix --wait's failure to work on coredns pods" #20313
  * Languages:
  - Add Indonesian translation #20494
  - Add more french translation #20361
  - Add more Korean translations #20634
  - Add more Chinese translations #20543#20543
  - fixed minor typo in german translation #20546
  - Version Updates:
  - Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.28 to 1.5.34 #20451 #20539 #20602#20623 #20670
    [#20704] #20795
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.26.0 to v0.28.0 #20311
  - Addon ingress: Update ingress-nginx/controller image from
    v1.11.3 to v1.12.2 #20789
  - Addon inspektor-gadget: Update inspektor-gadget image from
    v0.36.0 to v0.40.0 #20325#20354#20512 #20736
  - Addon kong: Update kong image from 3.8.0 to 3.9.0
    [#20151] #20384 #20728
  - Addon kong: Update kong/kubernetes-ingress-controller image
    from 3.3.1 to 3.4.5 #20319#20446#20788
  - Addon kubevirt: Update bitnami/kubectl image from 1.31.3 to
    1.33.1 #20321#20349#20665#20731#20790
  - Addon nvidia-device-plugin: Update nvidia/k8s-device-plugin
    image from v0.17.0 to v0.17.2 #20786#20534
  - Addon registry: Update kube-registry-proxy image from 0.0.8
    to 0.0.9 #20717
  - Addon registry: Update registry image from 2.8.3 to 3.0.0
    [#20242] #20425
  - Addon Volcano: Update volcano images from v1.10.0 to v1.11.2
    [#20318] #20616 #20697
  - CNI: Update cilium from v1.17.0 to v3.30.0 #20419 #20390
    [#20584] #20734 #20317 #20383 #20535 #20637 #20787
  - CNI: Update flannel from v0.26.2 to v0.26.7 #20385#20617
    [#20639]
  - CNI: Update kindnetd from v20241108-5c6d2daf to
    v20250512-df8de77b #20327#20427 #20797
  - HA (multi-control plane): Update kube-vip from v0.8.10 to
    v0.9.1 #20638#20238#20598 #20699
  - Kicbase: Bump ubuntu:jammy from 20240911.1 to 20250126
    [#20387] #20718
  - Kicbase/ISO: Update buildroot from 2023.02.9 to 2025.2 #20720
  - Kicbase/ISO: Update cni-plugins from v1.6.2 to v1.7.1 #20771
  - Kicbase/ISO: Update cri-dockerd from v0.3.15 to v0.4.0 #20747
  - Kicbase/ISO: Update docker from 27.4.0 to 28.0.4 #20436
    [#20523] #20591
  - Kicbase/ISO: Update runc from v1.2.3 to v1.3.0#20433#20604
    [#20764]</changelog>
</package>
<package pkgid="38046e72a68ae985e54024e697459e7b63c07900ba3b45d17291335aa7c48bfa" name="docker-machine-driver-kvm2" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="bp156.2.6.1"/>
  <changelog author="Matthew Wilks &lt;water261@outlook.com.au&gt;" date="1657195200">- update to 1.26.0:
  * Note: Using a minikube cluster created before 1.26.0, using the docker
    container-runtime (default), and plan to upgrade the Kubernetes version to
    v1.24+? After upgrading, you may need to delete &amp; recreate it. none driver
    users, cri-docker is now required to be installed, install instructions.
    See issue #14410 for more info.
  * Add headlamp addon #14315
  * Add InAccel FPGA Operator addon #12995
  * Only set highmem=off for darwin if qemu version is below 7.0 or memory is below 3GB #14291
  * Define qemu as a qemu2 driver alias #14284
  * Allow users to supply custom QEMU firmware path #14283
  * Add eBPF related kernel options #14316
  * Add bind address flag for minikube tunnel #14245
  * Add active column for minikube profile list #14079
  * Add documentation URL to the addon list table #14123
  * minikube config defaults kubernetes-version lists all currently supported Kubernetes versions #13775
  * Fix terminated commands not writing to audit log #13307
  * Fix Podman port mapping publish on macOS #14290
  * Fix minikube delete deleting networks from other profiles #14279
  * Bump Kubernetes version default: v1.24.1 and latest: v1.24.1 #14197
  * ISO: Upgrade Docker from 20.10.14 to 20.10.16 #14153
  * ISO: Upgrade kernel from 4.19.235 to 5.10.57 #12707
  * Upgrade Dashboard addon from v2.5.1 to v2.6.0 &amp; MetricsScraper from v1.0.7 to v1.0.8 #14269
  * Upgrade gcp-auth-webhook from v0.0.8 to v0.0.9 #14372
  * Upgrade nginx image from v1.2.0 to v1.2.1 #14317
  * Important Changes in Pre-Release Versions
  * Add configure option to registry-aliases addon #13912
  * Add support for building aarch64 ISO #13762
  * Support rootless Podman driver (Usage: minikube config set rootless true) #13829
  * QEMU:
  * Add support for the QEMU driver #13639
  * Fix qemu firmware path locations #14182
  * Re-establish apiserver tunnel on restart #14183</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- build against go1.18 to fix arm64 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663070400">- update to 1.26.1:
  * Check for cri-dockerd &amp; dockerd runtimes when using none-driver on Kubernetes 1.24+ #14555
  * Add solution message for when cri-docker is missing #14483
  * Limit number of audit entries #14695
  * Optimize audit logging #14596
  * Show the container runtime when running without kubernetes #13432 #14200
  * Add warning when enabling thrid-party addons #14499
  * Fix url index out of range error in service #14658
  * Fix incorrect user and profile in audit logging #14562
  * Fix overwriting err for OCI "minikube start" #14506
  * Fix panic when environment variables are empty #14415
  * Bump Kubernetes version default: v1.24.3 and latest: v1.24.3 #14606
  * ISO: Update Docker from 20.10.16 to 20.10.17 #14534
  * ISO/Kicbase: Update cri-o from v1.22.3 to v1.24.1 #14420
  * ISO: Update conmon from v2.0.24 to v2.1.2 #14545
  * Update gcp-auth-webhook from v0.0.9 to v0.0.10 #14670
  * ISO/Kicbase: Update base images #14481</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663329600">- update to 1.27.0:
  * Bump default Kubernetes version to v1.25.0 and resolve /etc/resolv.conf regression #14848
  * Skip metallb PodSecurityPolicy object for kubernetes 1.25+ #14903
  * The DefaultKubernetesRepo changed for 1.25.0 #14768
  * Fix QEMU delete errors #14950
  * Fix containerd configuration issue with insecure registries #14482
  * Fix registry when custom images provided #14690
  * ISO: Update Docker from 20.10.17 to 20.10.18 #14935
  * Update kicbase base image to Ubuntu:focal-20220826 #14904
  * Update registry addon image from 2.7.1 to 2.8.1 #14886
  * Update gcp-auth-webhook addon from v0.0.10 to v0.0.11 #14847
  * Update Headlamp addon image from v0.9.0 to v0.11.1 #14802</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1665403200">- update to 1.27.1:
  * QEMU Driver: Add support for dedicated network on macOS (socket_vmnet) #14989
  * QEMU Driver: Add support minikube service and tunnel on macOS #14989
  * Check if context is invalid during update-context command #15032
  * Use SSH tunnel if user specifies bindAddress #14951
  * Warn QEMU users if DNS issue detected #15073
  * Fix status command taking a long time on docker driver while paused #15077
  * Fix not allowing passing only an exposed port to --ports #15085
  * Fix minikube dashboard failing on macOS #15037
  * Fix incorrect command in powershell command tip #15012</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1665489600">- BuildRequires python3 rather than python.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to v1.28.0:
  * SECURITY WARNING: Log4j CVEs were detected in an image the efk addon uses,
  * if you don't use the efk addon no action is required. If you use the addon
  * we recommend running minikube addons disable efk to terminate the
  * vulnerable pods.  See #15280 for more details.
  * Prevent enabling efk addon due to containing Log4j CVE #15281
  * Auto select network on QEMU #15266
  * Implement mounting on QEMU with socket_vmnet #15108
  * Added cloud-spanner emulator addon #15160
  * Add minikube license command #15158
  * Allow port forwarding on Linux with Docker Desktop #15126
  * Add back service to mount VirtualBox host directory into the guest. #14784
  * ISO: Add FANOTIFY_ACCESS_PERMISSIONS to kernel configs #15232
  * When enabling addon warn if addon has no associated Github username #15081
  * Fix detecting preload cache of size 0 as valid #15256
  * Fix always writing to daemon by trimming docker.io from image name #14956
  * Fix minikube tunnel repeated printout of status #14933
  * Upgrade Portainer addon to 2.15.1 &amp; HTTPS access enabled #15172
  * Upgrade Headlamp addon to 0.13.0 #15186
  * ISO: Upgrade Docker from 20.10.18 to 20.10.20 #15159
  * KIC: Upgrade base image from ubuntu:focal-20220826 to ubuntu:focal-20220922 #15075
  * KCI: Upgrade base image from ubuntu:focal-20220922 to ubuntu:focal-20221019 #15219</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1675080000">- update to 1.29.0:
  * Bump QEMU driver priority from experimental to default
  * Ability to set static-ip for Docker driver
  * GCP-Auth Addon: automatically attach credentials to newly created
    namespaces
  * Allow forcing 1 CPU on Linux with docker and none driver
  * Major Improvements:
  * Large improvements to cgroup detection and CNI and CRI configurations
  * Prevent redownloading kicbase when already downloaded
  * Warn when using an old ISO/Kicbase image
  * Check brew install paths for socket_vmnet
  * Include gcp-auth logs in 'minikube logs' output
  * Use absolute path when calling crictl version
  * Add additional memory overhead for VirtualBox when `--memory=max`
  * Update Windows installer to create system-wide shortcut
  * Add `--subnet` validation
  * Add groups check to SSH driver
  * Update references to deprecated beta.kubernetes.io
  * Fix possible race condition when enabling multiple addons #15706
  * Fix cpus config field not supporting max value #15479
  * Fix subnet checking failing if IPv6 network found #15394
  * Fix Docker tunnel failing if too many SSH keys #15560
  * Fix kubelet localStorageCapacityIsolation option #15336
  * Fix setting snapshotter to unimplemented fuse-overlayfs #15272
  * Remove progress bar for kic download with JSON output #15482
  * Version Upgrades:
  * Bump default Kubernetes version from 1.25.3 to 1.26.1 #15683
  * Addons: Update auto-pause from 0.0.2 to 0.0.3 #15331
  * Addons: Update cloud-spanner from 1.4.6 to 1.5.0 #15440 #15667 #15707
  * Addons: Update headlamp from 0.13.0 to 0.14.1 #15401 #15515
  * Addons: Update ingress from 1.2.1 to 1.5.1 #15339
  * Addons: Update metrics-server from 0.6.1 to 0.6.2 #15411
  * Addons: Update kubevirt from 1.17 to 1.24.7 #15310
  * CNI: Update cilium from 1.9.9 to 1.12.3 #15242
  * Kicbase: Update buildkit from 0.10.3 to v0.11.0 #15630
  * Kicbase/ISO: Update containerd from 1.6.9 to 1.6.15 #15541
  * Kicbase/ISO: Update cri-dockerd from 0.2.2 to 0.3.0 #15541
  * Kicbase/ISO: Update docker from 20.10.20 to 20.10.23 #15341 #15541
  * Update KVM-docker-machine amd64 base image from Ubuntu 16.04 to 20.04
  * For a more detailed changelog see CHANGELOG.md.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680609600">- update to 1.30.0:
  * Ensure only one minikube tunnel instance runs at a time
  * Infer HyperKit HostIP as Gateway rather than hardcode to 192.168.64.1
  * multi-node: Add support for volumes using CSI addon
  * QEMU: Rename user network to builtin and update documentation
  * none driver: Look for cri-dockerd instead of hardcoding
  * Replace instances of k8s.gcr.io with registry.k8s.io
  * Handle CRI config of NetworkPlugin and PauseImage
  * Remove deprecated container-runtime flag from Kubernetes v1.24+
  * none driver: Require crictl to be installed for Kubernetes v1.24+
  * Add cri-dockerd logs to minikube logs output
  * Add ingress logs to minikube logs output
  * Add default cni logs to minikbue logs output
  * Add JSON output option to miniikube service list
  * Add kicbase download process to JSON output
  * Implement --docs for minikube addons list -o json
  * Implement --skip-audit flag and skip adding profile commands to audit log
  * Implement --last-start-only flag to minikube logs to only show last start log
  * see https://github.com/kubernetes/minikube/releases/tag/v1.30.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680696000">- update to 1.30.1:
  * Docker driver: Fix incorrectly stating `Image was not built
    for the current minikube` #16226
  * Mark VMware driver as unsupported  #16233</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689681600">- update to 1.31.0:
  * Add back VMware driver support #16796
  * `docker-env` supports the containerd runtime (experimental)
    [#15452] #16761
  * Automatically renew expired kubeadm certs #16249
  * New addon inspektor-gadget #15869
  * Major Improvements:
  * VM drivers: Fix all images getting removed on stop/start (40%
    start speedup) #16655
  * Addon registry: Add support for all architectures #16577
  * QEMU: Fix failing to interact with cluster after upgrading
    QEMU version #16853
  * macOS/QEMU: Auto unblock bootpd from firewall if blocking
    socket_vmnet network #16714 #16789
  * `minikube cp` supports providing directory as a target #15519</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1697544000">- update to 1.31.2:
  * docker-env Regression:
  * Create `~/.ssh` directory if missing #16934
  * Fix adding guest to `~/.ssh/known_hosts` when not needed
    [#17030]
  * Verify containerd storage separately from docker #16972
  * cni: Fix regression in auto selection #16912</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 1.32.0:
  * rootless: support `--container-runtime=docker` #17520
  * Install NVIDIA container toolkit during image build (offline
    support)
  * Fix no-limit option for config validation #17530
  * NVIDIA GPU support with new `--gpus=nvidia` flag for docker
    driver #15927 #17314 #17488
  * New `kubeflow` addon #17114
  * New `local-path-provisioner` addon #15062
  * Kicbase: Add `no-limit` option to `--cpus` &amp; `--memory` flags
    [#17491]
  * Hyper-V: Add memory validation for odd numbers #17325
  * QEMU: Improve cpu type and IP detection #17217
  * Mask http(s)_proxy password from startup output #17116
  * `--delete-on-faliure` also recreates cluster for kubeadm
    failures #16890
  * Addon auto-pause: Configure intervals using `--auto-pause-
    interval` #17070
  * `--kubernetes-version` checks GitHub for version validation
    and improved error output for invalid versions #16865
  * Bugs:
  * QEMU: Fix addons failing to enable #17402
  * Fix downloading the wrong kubeadm images for k8s versions
    after minikube release #17373
  * Fix enabling &amp; disabling addons with non-existing cluster
    [#17324]
  * Fix delete if container-runtime doesn't exist #17347
  * Fix network not found not being detected on new Docker
    versions #17323
  * Fix addon registry doesn't follow Minikube DNS domain name
    configuration (--dns-domain) #15585
  * Version Upgrades:
  * Bump Kubernetes version default: v1.28.3 and latest: v1.28.3
  * Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.9 to 1.5.11 #17225 #17259
  * Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.19.0 to v0.20.1 #17135 #17365
  * Addon ingress: Update ingress-nginx/controller image from
    v1.8.1 to v1.9.3 #17223 #17297 #17348 #17421
  * Addon inspektor-gadget: Update inspektor-gadget image from
    v0.19.0 to v0.21.0 #17176 #17340
  * Addon istio-provisioner: Update istio/operator image from
    1.12.2 to 1.19.3 #17383 #17436
  * Addon kong: Update kong image from 3.2 to 3.4.2 #17485
  * Addon registry: Update registry image from 2.8.1 to 2.8.3
    [#17382] #17467
  * CNI: Update calico from v3.26.1 to v3.26.3 #17363 #17375
  * CNI: Update flannel from v0.22.1 to v0.22.3 #17102 #17263
  * CNI: Update kindnetd from v20230511-dc714da8 to
    v20230809-80a64d96 #17233
  * Kicbase/ISO: Update buildkit from v0.11.6 to v0.12.2 #17194
  * Kicbase/ISO: Update containerd from v1.7.3 to v1.7.7 #17243
    [#17466]
  * Kicbase/ISO: Update crictl from v1.21.0 to v1.28.0 #17240
  * Kicbase/ISO: Update docker from 24.0.4 to 24.0.6 #17120
    [#17207]
  * Kicbase/ISO: Update nerdctl from 1.0.0 to 1.6.2 #17145 #17339
    [#17434]
  * Kicbase/ISO: Update runc from v1.1.7 to v1.1.9 #17250
  * Kicbase: Bump ubuntu:jammy from 20230624 to 20231004 #17086
    [#17174] #17345 #17423</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1715860800">- update to 1.33.0:
  * Features:
  - Support multi-control plane - HA clusters --ha #17909
    Tutorial
  - Add support for Kubernetes v1.30 #18669
  - Support exposing clusterIP services via minikube service
    [#17877]
  - Addon gvisor: Add arm64 support #18063 #18453
  - New Addon: YAKD - Kubernetes Dashboard addon #17775
  * Minor Improvements:
  - Add active kubecontext to minikube profile list output #17735
  - CNI calico: support kubeadm.pod-network-cidr #18233
  - CNI bridge: Ensure pod communications are allowed #16143
  - Addon auto-pause: Remove memory leak &amp; add configurable
    interval #17936
  - image build: Add docker.io/library to image short names
    [#16214]
  - cp: Create directory if not present #17715
  - Move errors getting logs into log output itself #18007
  - Add default sysctls to allow privileged ports with no
    capabilities #18421
  - Include extended attributes in preload tarballs #17829
  - Apply kubeadm.applyNodeLabels label to all nodes #16416
  - Limit driver status check to 20s #17553
  - Include journalctl logs if systemd service fails to start
    [#17659]
  - Fix "Failed to enable container runtime: sudo systemctl
    restart cri-docker" #17907
  - Fix containerd redownloading existing images on start #17671
  - Fix kvm2 not detecting containerd preload #17658
  - Fix modifying Docker binfmt config #17830
  - Fix auto-pause addon #17866
  - Fix not using preload with overlayfs storage driver #18333
  - Fix image repositories not allowing subdomains with numbers
    [#17496]
  - Fix stopping cluster when using kvm2 with containerd #17967
  - Fix starting more than one cluster on kvm2 arm64 #18241
  - Fix starting kvm2 clusters using Linux on arm64 Mac #18239
  - Fix displaying error when deleting non-existing cluster
    [#17713]
  - Fix no-limit not being respected on restart #17598
  - Fix not applying kubeadm.applyNodeLabels label to nodes added
    after inital start #16416
  - Fix logs delimiter output #17734
  * Bugs:
  - Fix unescaped local host regex #18617
  - Fix regex on validateNetwork to support special characters
    [#18158]
  * Version Upgrades:
  - Bump Kubernetes version default: v1.30.0 and latest: v1.30.0
    [#18669]
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.23.0 to 0.23.1 #18517
  - Addon inspektor-gadget: Update inspektor-gadget image from
    v0.26.0 to v0.27.0 #18588
  - Addon istio-provisioner: Update istio/operator image from
    1.21.0 to 1.21.1 #18644
  - Addon metrics-server: Update metrics-server/metrics-server
    image from v0.7.0 to v0.7.1 #18551
  - CNI: Update calico from v3.27.0 to v3.27.3 #18206
  - CNI: Update flannel from v0.24.4 to v0.25.1 #18641
  - Kicbase/ISO: Update buildkit from v0.13.0 to v0.13.1 #18566
  - Kicbase/ISO: Update containerd from v1.7.14 to v1.7.15 #18621
  - Kicbase/ISO: Update cri-dockerd from v0.3.3 to v0.3.12 #18585
  - Kicbase/ISO: Update crun from 1.14 to 1.14.4 #18610
  - Kicbase/ISO: Update docker from 25.0.4 to 26.0.1 #18485
    [#18649]
  - Kicbase/ISO: Update nerdctl from 1.7.4 to 1.7.5 #18634
  - Kicbase: Update nerdctld from 0.5.1 to 0.6.0 #18647</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1715860801">- update to 1.33.1:
  * Bugs:
  - Fix DNSSEC validation failed errors #18830
  - Fix too many open files errors #18832
  - CNI cilium: Fix cilium pods failing to start-up #18846
  - Addon ingress: Fix enable failing on arm64 machines using VM
    driver #18779
  - Addon kubeflow: Fix some components missing arm64 images
    [#18765]
  * Version Upgrades:
  - Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.15 to 1.5.17 #18773 #18811
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.23.1 to v0.23.2 #18793
  - Addon ingress: Update ingress-nginx/controller image from
    v1.10.0 to v1.10.1 #18756
  - Addon istio-provisioner: Update istio/operator image from
    1.21.1 to 1.21.2 #18757
  - Addon kubevirt: Update bitnami/kubectl image from 1.29.3 to
    1.30.0 #18711 #18771
  - Addon nvidia-device-plugin: Update nvidia/k8s-device-plugin
    image from v0.14.5 to v0.15.0 #18703
  - CNI cilium: Update from v1.15.1 to v1.15.3 #18846
  - High Availability: Update kube-vip from 0.7.1 to v0.8.0
    [#18774]
  - Kicbase/ISO: Update docker from 26.0.1 to 26.0.2 #18706
  - Kicbase: Bump ubuntu:jammy from 20240227 to 20240427 #18702
    [#18769] #18804</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721390400">- add socat recommends (bsc#1120850)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1725969600">- update to 1.34.0 (boo#1227017 boo#1227049 boo#1227005):
  For a more detailed changelog, including changes occurring in
  pre-release versions, see CHANGELOG.md.
  https://github.com/kubernetes/minikube/blob/master/CHANGELOG.md
  * Breaking Changes:
  - Bump minimum podman version to 4.9.0 #19457
  - Disallow using Docker Desktop 4.34.0 #19576
  * Features:
  - Bump default Kubernetes version to v1.31.0 #19435
  - Add new driver for macOS: vfkit #19423
  - Add Parallels driver support for darwin/arm64 #19373
  - Add new volcano addon #18602
  - Addons ingress-dns: Added support for all architectures
    [#19198]
  - Support privileged ports on WSL #19370
  - VM drivers with docker container-runtime now use
    docker-buildx for image building #19339
  - Support running x86 QEMU on arm64 #19228
  - Add -o json option for addon images command #19364
  * Improvements:
  - add -d shorthand for --driver #19356
  - add -c shorthand for --container-runtime #19217
  - kvm2: Don't delete the "default" libvirt network #18920
  - Update MINIKUBE_HOME usage #18648
  - CNI: Updated permissions to support network policies on
    kindnet #19360
  - GPU: Set NVIDIA_DRIVER_CAPABILITIES to all when GPU is
    enabled #19345
  - Improved error message when trying to use mount on system
    missing 9P #18995
  - Improved error message when enabling KVM addons on non-KVM
    cluster #19195
  - Added warning when loading image with wrong arch #19229
  - profile list --output json handle empty config folder #16900
  - Check connectivity outside minikube when connectivity issuse
    [#18859]
  * Bugs:
  - Fix not creating API server tunnel for QEMU w/ builtin
    network #19191
  - Fix waiting for user input on firewall unblock when
  - -interactive=false #19531
  - Fix network retry check when subnet already in use for podman
    [#17779]
  - Fix empty tarball when generating image save #19312
  - Fix missing permission for kong-serviceaccount #19002
  * Version Upgrades:
  - Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.17 to 1.5.23 #19341 #19501
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.23.2 to v0.25.0 #18992 #19152 #19349
  - Addon kong: Update kong image from 3.6.1 to 3.7.1 #19046
    [#19124]
  - Addon kubevirt: Update bitnami/kubectl image from 1.30.0 to
    1.31.0 #18929 #19087 #19313 #19479
  - Addon ingress: Update ingress-nginx/controller image from
    v1.10.1 to v1.11.2 #19302 #19461
  - Addon inspektor-gadget: Update inspektor-gadget image from
    v0.27.0 to v0.32.0 #18872 #18931 #19011 #19166 #19411 #19554
  - Addon istio-provisioner: Update istio/operator image from
    1.21.2 to 1.23.0 #18932 #19052 #19167 #19283 #19450
  - Addon nvidia-device-plugin: Update nvidia/k8s-device-plugin
    image from v0.15.0 to v0.16.2 #19162 #19266 #19336 #19409
  - Addon metrics-server: Update metrics-server/metrics-server
    image from v0.7.1 to v0.7.2 #19529
  - Addon YAKD: bump marcnuri/yakd image from 0.0.4 to 0.0.5
    [#19145]
  - CNI: Update calico from v3.27.3 to v3.28.1 #18870 #19377
  - CNI: Update cilium from v1.15.3 to v1.16.1 #18925 #19084
    [#19247] #19337 #19476
  - CNI: Update kindnetd from v20240202-8f1494ea to
    v20240813-c6f155d6 #18933 #19252 #19265 #19307 #19378 #19446
  - CNI: Update flannel from v0.25.1 to v0.25.6 #18966 #19008
    [#19085] #19297 #19522
  - Kicbase: Update nerdctld from 0.6.0 to 0.6.1 #19282
  - Kicbase: Bump ubuntu:jammy from 20240427 to 20240808 #19068
    [#19184] #19478
  - Kicbase/ISO: Update buildkit from v0.13.1 to v0.15.2 #19024
    [#19116] #19264 #19355 #19452
  - Kicbase/ISO: Update cni-plugins from v1.4.1 to v1.5.1 #19044
    [#19128]
  - Kicbase/ISO: Update containerd from v1.7.15 to v1.7.21 #18934
    [#19106] #19186 #19298 #19521
  - Kicbase/ISO: Update cri-dockerd from v0.3.12 to v0.3.15
    [#19199] #19249
  - Kicbase/ISO: Update crun from 1.14.4 to 1.16.1 #19112 #19389
    [#19443]
  - Kicbase/ISO: Update docker from 26.0.2 to 27.2.0 #18993
    [#19038] #19142 #19153 #19175 #19319 #19326 #19429 #19530
  - Kicbase/ISO: Update nerdctl from 1.7.5 to 1.7.6 #18869
  - Kicbase/ISO: Update runc from v1.1.12 to v1.1.13 #19104</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1737028800">- remove minikube-rpmlintrc to silence warnings regarding unused
  filters
- refactor spec file to build position-independent executables
- refactor spec to fix builds errors
- add completion subpackages for fish and zsh
- add %check section to check version output
- update to 1.35.0 (bsc#1234528, CVE-2024-45337):
  * Features:
  - Add support for AMD GPUs via --gpus=amd #19749
  - publish &amp; download kicbase image in github release assets
    [#19464]
  - Support latest Kubernetes v1.32.0 #20091
  - Adds support for kubeadm.k8s.io/v1beta4 available since k8s
    v1.31 #19790
  * Improvements:
  - Merge nvidia-gpu-device-plugin and nvidia-device-plugin.
    [#19545]
  - cilium: remove appArmorProfile for k8s&lt;v1.30.0 #19888
  - auto-pause: restart service after configuration #19900
  - Revert "Change MINIKUBE_HOME logic" #20045
  - HA (multi-control plane): Update kube-vip from v0.8.6 to
    v0.8.7 #20053
  - don't pollute minikube profile list with errors if exitcode
    is absent #19728
  - unified minikube cluster status query #18998
  - Vfkit driver: fix TestMachineType failing on macOS #19726
  - No more arch restriction on nerdctld #19730
  - remove helm-tiller addon #19636
  - More robust MAC address matching #19750
  - Add instructions to resolve docker context error #19197
  * Bug fixes:
  - fix --wait's failure to work on coredns pods #19748
  - Fix panic when no services in namespace with --all specified
    [#19957]
  - fix timeout when stopping KVM machine with CRI-O container
    runtime #19758
  - Fix long lines in lastStart.txt not outputting in log outputs
    [#19740]
  - Fix wrongly detecting kicbase arch as incorrect #19664
  * Breaking Changes:
  - skip building kvm2-arm64 till 19959 is resolved #20062
  - remove arm64 kvm #19985
  * Languages:
  - Add more Chinese translations #19490
  - Add more Chinese translations #19508
  - Fix chinnese translation on wrong line #19718
  - Add more chinnese translations #19962
  - Add more chinnese translations #19772
  - Fix french translation #19978
  - Improve french translation #19654
  * - Version Updates:
  - Please see the full changelog
  - https://github.com/kubernetes/minikube/releases/tag/v0.35.0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1737720000">- fix dependencies for fish and zsh completion subpackages</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1748001600">- Update to version 1.36.0:
  * Features
  - Support Kubernetes version v1.33.1 #20784
  - New flag "-f" to allow passing a config file for addon
    configure command. #20255
  - vfkit: bump to Preferred driver on macOs #20808
  - vfkit: new network option "--network vment-shared' for vfkit
    driver #20501
  * Bug Fixes:
  - fix bootpd check on macOS &gt;= 15 #20400
  - fix bug in parsing proxies with dashes #20648
  - fix waiting for all pods having specified labels to be Ready
    [#20315]
  - fix: incorrect finalImg affecting downloading kic form github
    assets #20316
  - fix: reference missing files in schema (Closes #20752) #20761
  - Improvements:
  - Additional checks for 9p support #20288
  - vfkit: Graceful shutdown on stop #20504
  - vfkit: More robust state management #20506
  - vfkit vmnet: support running without sudoers configuration
    [#20719]
  - Revert "fix --wait's failure to work on coredns pods" #20313
  * Languages:
  - Add Indonesian translation #20494
  - Add more french translation #20361
  - Add more Korean translations #20634
  - Add more Chinese translations #20543#20543
  - fixed minor typo in german translation #20546
  - Version Updates:
  - Addon cloud-spanner: Update cloud-spanner-emulator/emulator
    image from 1.5.28 to 1.5.34 #20451 #20539 #20602#20623 #20670
    [#20704] #20795
  - Addon headlamp: Update headlamp-k8s/headlamp image from
    v0.26.0 to v0.28.0 #20311
  - Addon ingress: Update ingress-nginx/controller image from
    v1.11.3 to v1.12.2 #20789
  - Addon inspektor-gadget: Update inspektor-gadget image from
    v0.36.0 to v0.40.0 #20325#20354#20512 #20736
  - Addon kong: Update kong image from 3.8.0 to 3.9.0
    [#20151] #20384 #20728
  - Addon kong: Update kong/kubernetes-ingress-controller image
    from 3.3.1 to 3.4.5 #20319#20446#20788
  - Addon kubevirt: Update bitnami/kubectl image from 1.31.3 to
    1.33.1 #20321#20349#20665#20731#20790
  - Addon nvidia-device-plugin: Update nvidia/k8s-device-plugin
    image from v0.17.0 to v0.17.2 #20786#20534
  - Addon registry: Update kube-registry-proxy image from 0.0.8
    to 0.0.9 #20717
  - Addon registry: Update registry image from 2.8.3 to 3.0.0
    [#20242] #20425
  - Addon Volcano: Update volcano images from v1.10.0 to v1.11.2
    [#20318] #20616 #20697
  - CNI: Update cilium from v1.17.0 to v3.30.0 #20419 #20390
    [#20584] #20734 #20317 #20383 #20535 #20637 #20787
  - CNI: Update flannel from v0.26.2 to v0.26.7 #20385#20617
    [#20639]
  - CNI: Update kindnetd from v20241108-5c6d2daf to
    v20250512-df8de77b #20327#20427 #20797
  - HA (multi-control plane): Update kube-vip from v0.8.10 to
    v0.9.1 #20638#20238#20598 #20699
  - Kicbase: Bump ubuntu:jammy from 20240911.1 to 20250126
    [#20387] #20718
  - Kicbase/ISO: Update buildroot from 2023.02.9 to 2025.2 #20720
  - Kicbase/ISO: Update cni-plugins from v1.6.2 to v1.7.1 #20771
  - Kicbase/ISO: Update cri-dockerd from v0.3.15 to v0.4.0 #20747
  - Kicbase/ISO: Update docker from 27.4.0 to 28.0.4 #20436
    [#20523] #20591
  - Kicbase/ISO: Update runc from v1.2.3 to v1.3.0#20433#20604
    [#20764]</changelog>
</package>
<package pkgid="315eed5683cda98776f31dc0b903bed774fd8e0575c3048d7293f48148e639fe" name="doomsday" arch="ppc64le">
  <version epoch="0" ver="2.3.1" rel="bp156.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1427716800">- Add doomsday-no-abs-icon.patch: Do not use absolute path to
  icons. Applicatio containerisation requires the icons to be below
  /usr/share/icons or /usr/share/pixmaps.
- Copy the icons from the app directory to /usr/share/pixmaps.</changelog>
  <changelog author="jengelh@inai.de" date="1466078400">- Add -Wno-narrowing to let gcc6 build pass</changelog>
  <changelog author="jengelh@inai.de" date="1466251200">- Update to new upstream release 1.15.8
  * Custom episodes. Episode (DED) definitions specify the structure of
  game episodes (including hubs) enabling entirely new episodes and
  modifying the originals.
  * MAPINFO support. MAPINFO (Hexen) definitions are now supported in
  Doom and Heretic, as well as Hexen. Note that, presently, only the
  Hexen dialect of MAPINFO is supported (ZDoom uses its own MAPINFO
  dialect).
  * Adjustable pixel density. If your GPU is on the slower side, you
  can improve performance by reducing game view resolution. The rest
  of the UI remains sharp since the display mode is not changed. As a
  bonus, you can also get a nice nostalgic aesthetic similar to the
  original Doom on a CRT display.
- If you get a blank screen instead of the game title screen
  after selecting the IWAD to play, you may need to reset your
  settings (~/.doomsday)!
- Added doomsday-ncurses.diff (work around absence of ncurses.pc
  in not-too-new ncurses)</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update to new upstream release 2.0
  * The Home Screen replaces the front-end app. The Python-based
    Snowberry launcher application was created in 2005 and has been
    used for starting Doomsday ever since. In version 2.0, the
    launcher is no longer needed because Doomsday's Home Screen
    (previously called "ring zero") replaces its functionality.
  * Built-in support for packages. One of the launcher's key features
    was add-on management. This is now also part of Doomsday itself
    in the form of packages. Anything that Doomsday can load — WADs,
    resource packs, 3D models, etc. — is now handled via the same
    package management system. This enables Doomsday to track which
    files are in use in saved games and multiplayer games, and makes
    it possible to automatically ensure that the correct files are
    loaded at any given time.
  * New 3D model renderer. Doomsday's graphics code is undergoing a
    transition to a newer version of OpenGL, namely "OpenGL3/4 Core
    Profile"). Certain parts like the engine UI have already
    completed this transition, however the game renderer itself has
    not. In version 2.0, the new version of the 3D model renderer has
    reached a state where it is useful for actual gameplay. This new
    renderer supports FBX and MD5 models (among other formats),
    skeletal animation, GLSL shaders, and Doomsday Script.</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new bugfix release 2.0.3
  * Server had crashed during startup with error messages related
    to threading
  * Non-standard C++ code had led to crash when using gcc7
  * Removed duplicate IWAD spec for Heretic 1.3 /
    Shadow of the Serpent Riders
  * Hexen: fix crash after returning to a different map in a hub
- Add doomsday-libs.diff, doomsday-notime.diff</changelog>
  <changelog author="jengelh@inai.de" date="1515931200">- Add bundled() markers</changelog>
  <changelog author="jengelh@inai.de" date="1518091200">- Get rid of BuildRequires: xorg-x11-devel.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Update to new upstream release 2.1.1
  * Graphics optimizations: While games still use the classic
    renderer like in 2.0, all graphics are now drawn using OpenGL
    3.3. This enables optimizations for more efficient rendering
    of the player view, menus, text, and the Doomsday UI.
  * UI improvements: The Doomsday UI look and feel has been
    refreshed. The game library is now more flexible and powerful
    with further game customization settings and view options.
  * Multiplayer convenience: Clients will automatically download
    missing PWADs from the server before joining the game.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572696000">- Previous implicit dependency on xxf86vm is now added
  as an explicit BuildRequires.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579435200">- Update to release 2.2.1.1
  * The built-in scripting language has gained wider integration
    in the engine internals.
  * Scripted mobj actions
  * A number of modding related improvements have been done for
    Heretic. For example: customizable menu labels, enhanced
    intermission screen, Values for ammo per shot, support for
    Hexen-like wall-bouncing missiles, and a script binding for
    starting an enemy’s attack.
  * Separate FOV for rendering player weapons
  * Doomsday now detects Freedoom v0.12.1.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1583409600">- Add -lminizip to doomsday-libs.diff to cure a linker error.
- Update to release 2.2.2
  * Doomsday Script improvements, Heretic modding, weapon
    field of view.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1585483200">- Add -DCMAKE_SKIP_RPATH</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597924800">- Use openGL ES 3 for aarch64 and %arm</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600171200">- Drop recommendation for timidity, this backend is not selectable
  from the game.</changelog>
  <changelog author="Yevgeny Sliosarenko &lt;musicsuse@gmx.com&gt;" date="1615377600">- Updated to release 2.3.1
- What's new in 2.3.1:
  * This version improves support for vanilla DOOM render hacks and adds more script bindings to manipulate things in the map.
    DOOM render hacks. TNT: Evilution and The Plutonia Experiment use several render/map hacks to take advantage of quirks in the original DOOM renderer.
    Many of these effects are now supported (or fixed) in Doomsday.
    Examples: TNT MAP02 deep water, TNT MAP02 windows overlooking the deep water, TNT MAP09 transparent window, TNT MAP31 Arachnotrons inside pillars.
    Scripting. Several new Doomsday Script bindings were added, allowing access to game, player, and thing properties.
    In addition to spawning things, one can now list things by type, check their state and flags, and perform state changes on them.
    Things can also have an “On death” script that gets run when the thing dies. Bitwise operators are now available in scripts.
    Modding. Sprite renaming is supported via DeHackEd.
    In Heretic, ambient sound sequences can be redefined and new ones can be added via the Audio module.
    Changing the sequences is also possible during gameplay. The earthquake effect from Hexen is now also available in Heretic.
    It can be controlled via scripts.
    Renderer. Player HUD weapon models may specify a custom FOV value for rendering so that model authors have more control over the appearance, for instance to replicate a 2D sprite appearance more faithfully.
  * Patch release for 2.3 that fixes some incorrect behavior:
    Heretic: Sky textures are only partially visible.
    Hexen: Sky textures are sized incorrectly.
    Alignment of floor/ceiling textures whose size is not 64×64.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1624708800">- Drop unused launcher subpackage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1742644800">- Make build recipe POSIX sh compatible
- Use system assimp library [boo#1239917]</changelog>
</package>
<package pkgid="72224bdc4d48e4b12510ac280ef5e9be9957bc3366e97ffdb8c90214ce823477" name="doomsday" arch="s390x">
  <version epoch="0" ver="2.3.1" rel="bp156.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1427716800">- Add doomsday-no-abs-icon.patch: Do not use absolute path to
  icons. Applicatio containerisation requires the icons to be below
  /usr/share/icons or /usr/share/pixmaps.
- Copy the icons from the app directory to /usr/share/pixmaps.</changelog>
  <changelog author="jengelh@inai.de" date="1466078400">- Add -Wno-narrowing to let gcc6 build pass</changelog>
  <changelog author="jengelh@inai.de" date="1466251200">- Update to new upstream release 1.15.8
  * Custom episodes. Episode (DED) definitions specify the structure of
  game episodes (including hubs) enabling entirely new episodes and
  modifying the originals.
  * MAPINFO support. MAPINFO (Hexen) definitions are now supported in
  Doom and Heretic, as well as Hexen. Note that, presently, only the
  Hexen dialect of MAPINFO is supported (ZDoom uses its own MAPINFO
  dialect).
  * Adjustable pixel density. If your GPU is on the slower side, you
  can improve performance by reducing game view resolution. The rest
  of the UI remains sharp since the display mode is not changed. As a
  bonus, you can also get a nice nostalgic aesthetic similar to the
  original Doom on a CRT display.
- If you get a blank screen instead of the game title screen
  after selecting the IWAD to play, you may need to reset your
  settings (~/.doomsday)!
- Added doomsday-ncurses.diff (work around absence of ncurses.pc
  in not-too-new ncurses)</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update to new upstream release 2.0
  * The Home Screen replaces the front-end app. The Python-based
    Snowberry launcher application was created in 2005 and has been
    used for starting Doomsday ever since. In version 2.0, the
    launcher is no longer needed because Doomsday's Home Screen
    (previously called "ring zero") replaces its functionality.
  * Built-in support for packages. One of the launcher's key features
    was add-on management. This is now also part of Doomsday itself
    in the form of packages. Anything that Doomsday can load — WADs,
    resource packs, 3D models, etc. — is now handled via the same
    package management system. This enables Doomsday to track which
    files are in use in saved games and multiplayer games, and makes
    it possible to automatically ensure that the correct files are
    loaded at any given time.
  * New 3D model renderer. Doomsday's graphics code is undergoing a
    transition to a newer version of OpenGL, namely "OpenGL3/4 Core
    Profile"). Certain parts like the engine UI have already
    completed this transition, however the game renderer itself has
    not. In version 2.0, the new version of the 3D model renderer has
    reached a state where it is useful for actual gameplay. This new
    renderer supports FBX and MD5 models (among other formats),
    skeletal animation, GLSL shaders, and Doomsday Script.</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new bugfix release 2.0.3
  * Server had crashed during startup with error messages related
    to threading
  * Non-standard C++ code had led to crash when using gcc7
  * Removed duplicate IWAD spec for Heretic 1.3 /
    Shadow of the Serpent Riders
  * Hexen: fix crash after returning to a different map in a hub
- Add doomsday-libs.diff, doomsday-notime.diff</changelog>
  <changelog author="jengelh@inai.de" date="1515931200">- Add bundled() markers</changelog>
  <changelog author="jengelh@inai.de" date="1518091200">- Get rid of BuildRequires: xorg-x11-devel.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Update to new upstream release 2.1.1
  * Graphics optimizations: While games still use the classic
    renderer like in 2.0, all graphics are now drawn using OpenGL
    3.3. This enables optimizations for more efficient rendering
    of the player view, menus, text, and the Doomsday UI.
  * UI improvements: The Doomsday UI look and feel has been
    refreshed. The game library is now more flexible and powerful
    with further game customization settings and view options.
  * Multiplayer convenience: Clients will automatically download
    missing PWADs from the server before joining the game.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572696000">- Previous implicit dependency on xxf86vm is now added
  as an explicit BuildRequires.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579435200">- Update to release 2.2.1.1
  * The built-in scripting language has gained wider integration
    in the engine internals.
  * Scripted mobj actions
  * A number of modding related improvements have been done for
    Heretic. For example: customizable menu labels, enhanced
    intermission screen, Values for ammo per shot, support for
    Hexen-like wall-bouncing missiles, and a script binding for
    starting an enemy’s attack.
  * Separate FOV for rendering player weapons
  * Doomsday now detects Freedoom v0.12.1.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1583409600">- Add -lminizip to doomsday-libs.diff to cure a linker error.
- Update to release 2.2.2
  * Doomsday Script improvements, Heretic modding, weapon
    field of view.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1585483200">- Add -DCMAKE_SKIP_RPATH</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597924800">- Use openGL ES 3 for aarch64 and %arm</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600171200">- Drop recommendation for timidity, this backend is not selectable
  from the game.</changelog>
  <changelog author="Yevgeny Sliosarenko &lt;musicsuse@gmx.com&gt;" date="1615377600">- Updated to release 2.3.1
- What's new in 2.3.1:
  * This version improves support for vanilla DOOM render hacks and adds more script bindings to manipulate things in the map.
    DOOM render hacks. TNT: Evilution and The Plutonia Experiment use several render/map hacks to take advantage of quirks in the original DOOM renderer.
    Many of these effects are now supported (or fixed) in Doomsday.
    Examples: TNT MAP02 deep water, TNT MAP02 windows overlooking the deep water, TNT MAP09 transparent window, TNT MAP31 Arachnotrons inside pillars.
    Scripting. Several new Doomsday Script bindings were added, allowing access to game, player, and thing properties.
    In addition to spawning things, one can now list things by type, check their state and flags, and perform state changes on them.
    Things can also have an “On death” script that gets run when the thing dies. Bitwise operators are now available in scripts.
    Modding. Sprite renaming is supported via DeHackEd.
    In Heretic, ambient sound sequences can be redefined and new ones can be added via the Audio module.
    Changing the sequences is also possible during gameplay. The earthquake effect from Hexen is now also available in Heretic.
    It can be controlled via scripts.
    Renderer. Player HUD weapon models may specify a custom FOV value for rendering so that model authors have more control over the appearance, for instance to replicate a 2D sprite appearance more faithfully.
  * Patch release for 2.3 that fixes some incorrect behavior:
    Heretic: Sky textures are only partially visible.
    Hexen: Sky textures are sized incorrectly.
    Alignment of floor/ceiling textures whose size is not 64×64.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1624708800">- Drop unused launcher subpackage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1742644800">- Make build recipe POSIX sh compatible
- Use system assimp library [boo#1239917]</changelog>
</package>
<package pkgid="1dacd4d750922cdc864008bd4ff5b94c9aa1d2baa84daf688e19461e54432b6a" name="doomsday" arch="src">
  <version epoch="0" ver="2.3.1" rel="bp156.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1398945600">- Update to new upstream release 1.14.1, which fixes:
  * particles were shut off shortly after level start
  * flickering light decoration on moving platform
  * letterboxed/pillarboxed drawing of the game was broken
  * Heretic ghost mummies' floating spirits were not disappearing
  after death
  * Shift key state was not recognized by bindings when typing in
  console
  * Multiplayer weapons were not remaining in play
  * Gracefully abort if OpenGL version is not sufficient</changelog>
  <changelog author="jengelh@inai.de" date="1400587200">- Update to new upstream release 1.14.3, which fixes:
  * Hexen: Hub maps reset after saving, causing invalid game world
  state
  * Doom 2: Crash playing sci2.wad MAP13
  * Better compatibility with vanilla Doom renderer: dynamic
  map hacks dependent on non-neighbor planes
  * Hexen: Saving error — "already exists"</changelog>
  <changelog author="jengelh@inai.de" date="1413115200">- Update to new upstream release 1.14.5, which fixes:
  * Hexen: Loading autosaved progress on a previously visited map
  loads an out of date save state
  * Hexen: Number of inventory items increases when going through
  a portal
  * Hexen: Puzzle progress in main hub not showing up</changelog>
  <changelog author="dimstar@opensuse.org" date="1427716800">- Add doomsday-no-abs-icon.patch: Do not use absolute path to
  icons. Applicatio containerisation requires the icons to be below
  /usr/share/icons or /usr/share/pixmaps.
- Copy the icons from the app directory to /usr/share/pixmaps.</changelog>
  <changelog author="jengelh@inai.de" date="1466078400">- Add -Wno-narrowing to let gcc6 build pass</changelog>
  <changelog author="jengelh@inai.de" date="1466251200">- Update to new upstream release 1.15.8
  * Custom episodes. Episode (DED) definitions specify the structure of
  game episodes (including hubs) enabling entirely new episodes and
  modifying the originals.
  * MAPINFO support. MAPINFO (Hexen) definitions are now supported in
  Doom and Heretic, as well as Hexen. Note that, presently, only the
  Hexen dialect of MAPINFO is supported (ZDoom uses its own MAPINFO
  dialect).
  * Adjustable pixel density. If your GPU is on the slower side, you
  can improve performance by reducing game view resolution. The rest
  of the UI remains sharp since the display mode is not changed. As a
  bonus, you can also get a nice nostalgic aesthetic similar to the
  original Doom on a CRT display.
- If you get a blank screen instead of the game title screen
  after selecting the IWAD to play, you may need to reset your
  settings (~/.doomsday)!
- Added doomsday-ncurses.diff (work around absence of ncurses.pc
  in not-too-new ncurses)</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update to new upstream release 2.0
  * The Home Screen replaces the front-end app. The Python-based
    Snowberry launcher application was created in 2005 and has been
    used for starting Doomsday ever since. In version 2.0, the
    launcher is no longer needed because Doomsday's Home Screen
    (previously called "ring zero") replaces its functionality.
  * Built-in support for packages. One of the launcher's key features
    was add-on management. This is now also part of Doomsday itself
    in the form of packages. Anything that Doomsday can load — WADs,
    resource packs, 3D models, etc. — is now handled via the same
    package management system. This enables Doomsday to track which
    files are in use in saved games and multiplayer games, and makes
    it possible to automatically ensure that the correct files are
    loaded at any given time.
  * New 3D model renderer. Doomsday's graphics code is undergoing a
    transition to a newer version of OpenGL, namely "OpenGL3/4 Core
    Profile"). Certain parts like the engine UI have already
    completed this transition, however the game renderer itself has
    not. In version 2.0, the new version of the 3D model renderer has
    reached a state where it is useful for actual gameplay. This new
    renderer supports FBX and MD5 models (among other formats),
    skeletal animation, GLSL shaders, and Doomsday Script.</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new bugfix release 2.0.3
  * Server had crashed during startup with error messages related
    to threading
  * Non-standard C++ code had led to crash when using gcc7
  * Removed duplicate IWAD spec for Heretic 1.3 /
    Shadow of the Serpent Riders
  * Hexen: fix crash after returning to a different map in a hub
- Add doomsday-libs.diff, doomsday-notime.diff</changelog>
  <changelog author="jengelh@inai.de" date="1515931200">- Add bundled() markers</changelog>
  <changelog author="jengelh@inai.de" date="1518091200">- Get rid of BuildRequires: xorg-x11-devel.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Update to new upstream release 2.1.1
  * Graphics optimizations: While games still use the classic
    renderer like in 2.0, all graphics are now drawn using OpenGL
    3.3. This enables optimizations for more efficient rendering
    of the player view, menus, text, and the Doomsday UI.
  * UI improvements: The Doomsday UI look and feel has been
    refreshed. The game library is now more flexible and powerful
    with further game customization settings and view options.
  * Multiplayer convenience: Clients will automatically download
    missing PWADs from the server before joining the game.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572696000">- Previous implicit dependency on xxf86vm is now added
  as an explicit BuildRequires.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579435200">- Update to release 2.2.1.1
  * The built-in scripting language has gained wider integration
    in the engine internals.
  * Scripted mobj actions
  * A number of modding related improvements have been done for
    Heretic. For example: customizable menu labels, enhanced
    intermission screen, Values for ammo per shot, support for
    Hexen-like wall-bouncing missiles, and a script binding for
    starting an enemy’s attack.
  * Separate FOV for rendering player weapons
  * Doomsday now detects Freedoom v0.12.1.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1583409600">- Add -lminizip to doomsday-libs.diff to cure a linker error.
- Update to release 2.2.2
  * Doomsday Script improvements, Heretic modding, weapon
    field of view.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1585483200">- Add -DCMAKE_SKIP_RPATH</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597924800">- Use openGL ES 3 for aarch64 and %arm</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600171200">- Drop recommendation for timidity, this backend is not selectable
  from the game.</changelog>
  <changelog author="Yevgeny Sliosarenko &lt;musicsuse@gmx.com&gt;" date="1615377600">- Updated to release 2.3.1
- What's new in 2.3.1:
  * This version improves support for vanilla DOOM render hacks and adds more script bindings to manipulate things in the map.
    DOOM render hacks. TNT: Evilution and The Plutonia Experiment use several render/map hacks to take advantage of quirks in the original DOOM renderer.
    Many of these effects are now supported (or fixed) in Doomsday.
    Examples: TNT MAP02 deep water, TNT MAP02 windows overlooking the deep water, TNT MAP09 transparent window, TNT MAP31 Arachnotrons inside pillars.
    Scripting. Several new Doomsday Script bindings were added, allowing access to game, player, and thing properties.
    In addition to spawning things, one can now list things by type, check their state and flags, and perform state changes on them.
    Things can also have an “On death” script that gets run when the thing dies. Bitwise operators are now available in scripts.
    Modding. Sprite renaming is supported via DeHackEd.
    In Heretic, ambient sound sequences can be redefined and new ones can be added via the Audio module.
    Changing the sequences is also possible during gameplay. The earthquake effect from Hexen is now also available in Heretic.
    It can be controlled via scripts.
    Renderer. Player HUD weapon models may specify a custom FOV value for rendering so that model authors have more control over the appearance, for instance to replicate a 2D sprite appearance more faithfully.
  * Patch release for 2.3 that fixes some incorrect behavior:
    Heretic: Sky textures are only partially visible.
    Hexen: Sky textures are sized incorrectly.
    Alignment of floor/ceiling textures whose size is not 64×64.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1624708800">- Drop unused launcher subpackage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1742644800">- Make build recipe POSIX sh compatible
- Use system assimp library [boo#1239917]</changelog>
</package>
<package pkgid="1b8ac5dedfb7eae660858d3a617d81795ecdb0604199b4b31d069b5526586fc9" name="doomsday" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="bp156.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1427716800">- Add doomsday-no-abs-icon.patch: Do not use absolute path to
  icons. Applicatio containerisation requires the icons to be below
  /usr/share/icons or /usr/share/pixmaps.
- Copy the icons from the app directory to /usr/share/pixmaps.</changelog>
  <changelog author="jengelh@inai.de" date="1466078400">- Add -Wno-narrowing to let gcc6 build pass</changelog>
  <changelog author="jengelh@inai.de" date="1466251200">- Update to new upstream release 1.15.8
  * Custom episodes. Episode (DED) definitions specify the structure of
  game episodes (including hubs) enabling entirely new episodes and
  modifying the originals.
  * MAPINFO support. MAPINFO (Hexen) definitions are now supported in
  Doom and Heretic, as well as Hexen. Note that, presently, only the
  Hexen dialect of MAPINFO is supported (ZDoom uses its own MAPINFO
  dialect).
  * Adjustable pixel density. If your GPU is on the slower side, you
  can improve performance by reducing game view resolution. The rest
  of the UI remains sharp since the display mode is not changed. As a
  bonus, you can also get a nice nostalgic aesthetic similar to the
  original Doom on a CRT display.
- If you get a blank screen instead of the game title screen
  after selecting the IWAD to play, you may need to reset your
  settings (~/.doomsday)!
- Added doomsday-ncurses.diff (work around absence of ncurses.pc
  in not-too-new ncurses)</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update to new upstream release 2.0
  * The Home Screen replaces the front-end app. The Python-based
    Snowberry launcher application was created in 2005 and has been
    used for starting Doomsday ever since. In version 2.0, the
    launcher is no longer needed because Doomsday's Home Screen
    (previously called "ring zero") replaces its functionality.
  * Built-in support for packages. One of the launcher's key features
    was add-on management. This is now also part of Doomsday itself
    in the form of packages. Anything that Doomsday can load — WADs,
    resource packs, 3D models, etc. — is now handled via the same
    package management system. This enables Doomsday to track which
    files are in use in saved games and multiplayer games, and makes
    it possible to automatically ensure that the correct files are
    loaded at any given time.
  * New 3D model renderer. Doomsday's graphics code is undergoing a
    transition to a newer version of OpenGL, namely "OpenGL3/4 Core
    Profile"). Certain parts like the engine UI have already
    completed this transition, however the game renderer itself has
    not. In version 2.0, the new version of the 3D model renderer has
    reached a state where it is useful for actual gameplay. This new
    renderer supports FBX and MD5 models (among other formats),
    skeletal animation, GLSL shaders, and Doomsday Script.</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new bugfix release 2.0.3
  * Server had crashed during startup with error messages related
    to threading
  * Non-standard C++ code had led to crash when using gcc7
  * Removed duplicate IWAD spec for Heretic 1.3 /
    Shadow of the Serpent Riders
  * Hexen: fix crash after returning to a different map in a hub
- Add doomsday-libs.diff, doomsday-notime.diff</changelog>
  <changelog author="jengelh@inai.de" date="1515931200">- Add bundled() markers</changelog>
  <changelog author="jengelh@inai.de" date="1518091200">- Get rid of BuildRequires: xorg-x11-devel.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Update to new upstream release 2.1.1
  * Graphics optimizations: While games still use the classic
    renderer like in 2.0, all graphics are now drawn using OpenGL
    3.3. This enables optimizations for more efficient rendering
    of the player view, menus, text, and the Doomsday UI.
  * UI improvements: The Doomsday UI look and feel has been
    refreshed. The game library is now more flexible and powerful
    with further game customization settings and view options.
  * Multiplayer convenience: Clients will automatically download
    missing PWADs from the server before joining the game.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1572696000">- Previous implicit dependency on xxf86vm is now added
  as an explicit BuildRequires.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579435200">- Update to release 2.2.1.1
  * The built-in scripting language has gained wider integration
    in the engine internals.
  * Scripted mobj actions
  * A number of modding related improvements have been done for
    Heretic. For example: customizable menu labels, enhanced
    intermission screen, Values for ammo per shot, support for
    Hexen-like wall-bouncing missiles, and a script binding for
    starting an enemy’s attack.
  * Separate FOV for rendering player weapons
  * Doomsday now detects Freedoom v0.12.1.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1583409600">- Add -lminizip to doomsday-libs.diff to cure a linker error.
- Update to release 2.2.2
  * Doomsday Script improvements, Heretic modding, weapon
    field of view.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1585483200">- Add -DCMAKE_SKIP_RPATH</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597924800">- Use openGL ES 3 for aarch64 and %arm</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600171200">- Drop recommendation for timidity, this backend is not selectable
  from the game.</changelog>
  <changelog author="Yevgeny Sliosarenko &lt;musicsuse@gmx.com&gt;" date="1615377600">- Updated to release 2.3.1
- What's new in 2.3.1:
  * This version improves support for vanilla DOOM render hacks and adds more script bindings to manipulate things in the map.
    DOOM render hacks. TNT: Evilution and The Plutonia Experiment use several render/map hacks to take advantage of quirks in the original DOOM renderer.
    Many of these effects are now supported (or fixed) in Doomsday.
    Examples: TNT MAP02 deep water, TNT MAP02 windows overlooking the deep water, TNT MAP09 transparent window, TNT MAP31 Arachnotrons inside pillars.
    Scripting. Several new Doomsday Script bindings were added, allowing access to game, player, and thing properties.
    In addition to spawning things, one can now list things by type, check their state and flags, and perform state changes on them.
    Things can also have an “On death” script that gets run when the thing dies. Bitwise operators are now available in scripts.
    Modding. Sprite renaming is supported via DeHackEd.
    In Heretic, ambient sound sequences can be redefined and new ones can be added via the Audio module.
    Changing the sequences is also possible during gameplay. The earthquake effect from Hexen is now also available in Heretic.
    It can be controlled via scripts.
    Renderer. Player HUD weapon models may specify a custom FOV value for rendering so that model authors have more control over the appearance, for instance to replicate a 2D sprite appearance more faithfully.
  * Patch release for 2.3 that fixes some incorrect behavior:
    Heretic: Sky textures are only partially visible.
    Hexen: Sky textures are sized incorrectly.
    Alignment of floor/ceiling textures whose size is not 64×64.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1624708800">- Drop unused launcher subpackage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1742644800">- Make build recipe POSIX sh compatible
- Use system assimp library [boo#1239917]</changelog>
</package>
<package pkgid="9a863b40c93207880cc66d89ffc14be7a2b15717916dbcca43ee3dfae7dcdd16" name="duc" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="bp156.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1519646400">- Inital package for openSUSE in version 1.4.3</changelog>
  <changelog author="mvetter@suse.com" date="1519646401">- Change license to LGPL-3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1538568000">- Update to 1.4.4:
  * new: added --directory/-D option to 'duc ls' to allow listing of only directory itself (#196[1])
  * new: 'duc ls' now handles multiple path arguments
  * new: added 'o' key to duc-ui to pass current file to xdg-open
  * new: added DPI handing for graph font size (#201[2])
  * new: added '-a/--apparent' option to 'duc xml' (#171[3])
  * fix: improved cairo and SVG graph rendering (#202[4])
  * cha: changed license from GPL to LGPL (#190[5])</changelog>
  <changelog author="Beno&#xEE;t Monin &lt;benoit.monin@gmx.fr&gt;" date="1565611200">- fix build: add missing dependency to gobject library</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1658750400">- Update to 1.4.5:
  * new: added '-u' option to duc index to index by username
  * new: added json subcommand
  * new: added support for NO_COLOR env var
  * cha: duc db location is now XDG compliant
  * fix: various bug fixes, check the git log for details</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1765368000">- Update to 1.4.6:
  * new: added LICENCE to 'make release' target
  * fix: fixed logic error in buffer_get() (boo#1254566, CVE-2025-13654)
  * cha: updated tests
- Fix build requirements</changelog>
</package>
<package pkgid="d2cb8310de9f617fcc5ab9c42dbbe304c678698a04caee5a490affb74ee3b9e9" name="duc" arch="i586">
  <version epoch="0" ver="1.4.6" rel="bp156.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1519646400">- Inital package for openSUSE in version 1.4.3</changelog>
  <changelog author="mvetter@suse.com" date="1519646401">- Change license to LGPL-3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1538568000">- Update to 1.4.4:
  * new: added --directory/-D option to 'duc ls' to allow listing of only directory itself (#196[1])
  * new: 'duc ls' now handles multiple path arguments
  * new: added 'o' key to duc-ui to pass current file to xdg-open
  * new: added DPI handing for graph font size (#201[2])
  * new: added '-a/--apparent' option to 'duc xml' (#171[3])
  * fix: improved cairo and SVG graph rendering (#202[4])
  * cha: changed license from GPL to LGPL (#190[5])</changelog>
  <changelog author="Beno&#xEE;t Monin &lt;benoit.monin@gmx.fr&gt;" date="1565611200">- fix build: add missing dependency to gobject library</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1658750400">- Update to 1.4.5:
  * new: added '-u' option to duc index to index by username
  * new: added json subcommand
  * new: added support for NO_COLOR env var
  * cha: duc db location is now XDG compliant
  * fix: various bug fixes, check the git log for details</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1765368000">- Update to 1.4.6:
  * new: added LICENCE to 'make release' target
  * fix: fixed logic error in buffer_get() (boo#1254566, CVE-2025-13654)
  * cha: updated tests
- Fix build requirements</changelog>
</package>
<package pkgid="243a23641603afe099d38ed02af82e53061686ec8bd974cbc50e3801d202feb7" name="duc" arch="ppc64le">
  <version epoch="0" ver="1.4.6" rel="bp156.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1519646400">- Inital package for openSUSE in version 1.4.3</changelog>
  <changelog author="mvetter@suse.com" date="1519646401">- Change license to LGPL-3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1538568000">- Update to 1.4.4:
  * new: added --directory/-D option to 'duc ls' to allow listing of only directory itself (#196[1])
  * new: 'duc ls' now handles multiple path arguments
  * new: added 'o' key to duc-ui to pass current file to xdg-open
  * new: added DPI handing for graph font size (#201[2])
  * new: added '-a/--apparent' option to 'duc xml' (#171[3])
  * fix: improved cairo and SVG graph rendering (#202[4])
  * cha: changed license from GPL to LGPL (#190[5])</changelog>
  <changelog author="Beno&#xEE;t Monin &lt;benoit.monin@gmx.fr&gt;" date="1565611200">- fix build: add missing dependency to gobject library</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1658750400">- Update to 1.4.5:
  * new: added '-u' option to duc index to index by username
  * new: added json subcommand
  * new: added support for NO_COLOR env var
  * cha: duc db location is now XDG compliant
  * fix: various bug fixes, check the git log for details</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1765368000">- Update to 1.4.6:
  * new: added LICENCE to 'make release' target
  * fix: fixed logic error in buffer_get() (boo#1254566, CVE-2025-13654)
  * cha: updated tests
- Fix build requirements</changelog>
</package>
<package pkgid="2d21c6c8c97301b2577b74ee99e6c87b65b055502a56d2b4ef1a6b14f1fb07ff" name="duc" arch="s390x">
  <version epoch="0" ver="1.4.6" rel="bp156.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1519646400">- Inital package for openSUSE in version 1.4.3</changelog>
  <changelog author="mvetter@suse.com" date="1519646401">- Change license to LGPL-3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1538568000">- Update to 1.4.4:
  * new: added --directory/-D option to 'duc ls' to allow listing of only directory itself (#196[1])
  * new: 'duc ls' now handles multiple path arguments
  * new: added 'o' key to duc-ui to pass current file to xdg-open
  * new: added DPI handing for graph font size (#201[2])
  * new: added '-a/--apparent' option to 'duc xml' (#171[3])
  * fix: improved cairo and SVG graph rendering (#202[4])
  * cha: changed license from GPL to LGPL (#190[5])</changelog>
  <changelog author="Beno&#xEE;t Monin &lt;benoit.monin@gmx.fr&gt;" date="1565611200">- fix build: add missing dependency to gobject library</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1658750400">- Update to 1.4.5:
  * new: added '-u' option to duc index to index by username
  * new: added json subcommand
  * new: added support for NO_COLOR env var
  * cha: duc db location is now XDG compliant
  * fix: various bug fixes, check the git log for details</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1765368000">- Update to 1.4.6:
  * new: added LICENCE to 'make release' target
  * fix: fixed logic error in buffer_get() (boo#1254566, CVE-2025-13654)
  * cha: updated tests
- Fix build requirements</changelog>
</package>
<package pkgid="ea12b9d579c44470a25bf7fd3bd7d7e7503804de0656071026864da81920679f" name="duc" arch="src">
  <version epoch="0" ver="1.4.6" rel="bp156.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1519646400">- Inital package for openSUSE in version 1.4.3</changelog>
  <changelog author="mvetter@suse.com" date="1519646401">- Change license to LGPL-3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1538568000">- Update to 1.4.4:
  * new: added --directory/-D option to 'duc ls' to allow listing of only directory itself (#196[1])
  * new: 'duc ls' now handles multiple path arguments
  * new: added 'o' key to duc-ui to pass current file to xdg-open
  * new: added DPI handing for graph font size (#201[2])
  * new: added '-a/--apparent' option to 'duc xml' (#171[3])
  * fix: improved cairo and SVG graph rendering (#202[4])
  * cha: changed license from GPL to LGPL (#190[5])</changelog>
  <changelog author="Beno&#xEE;t Monin &lt;benoit.monin@gmx.fr&gt;" date="1565611200">- fix build: add missing dependency to gobject library</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1658750400">- Update to 1.4.5:
  * new: added '-u' option to duc index to index by username
  * new: added json subcommand
  * new: added support for NO_COLOR env var
  * cha: duc db location is now XDG compliant
  * fix: various bug fixes, check the git log for details</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1765368000">- Update to 1.4.6:
  * new: added LICENCE to 'make release' target
  * fix: fixed logic error in buffer_get() (boo#1254566, CVE-2025-13654)
  * cha: updated tests
- Fix build requirements</changelog>
</package>
<package pkgid="0a5af641f232025869ae3ec000854d866388d8fd8285bbaf2934d014f88e4013" name="duc" arch="x86_64">
  <version epoch="0" ver="1.4.6" rel="bp156.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1519646400">- Inital package for openSUSE in version 1.4.3</changelog>
  <changelog author="mvetter@suse.com" date="1519646401">- Change license to LGPL-3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1538568000">- Update to 1.4.4:
  * new: added --directory/-D option to 'duc ls' to allow listing of only directory itself (#196[1])
  * new: 'duc ls' now handles multiple path arguments
  * new: added 'o' key to duc-ui to pass current file to xdg-open
  * new: added DPI handing for graph font size (#201[2])
  * new: added '-a/--apparent' option to 'duc xml' (#171[3])
  * fix: improved cairo and SVG graph rendering (#202[4])
  * cha: changed license from GPL to LGPL (#190[5])</changelog>
  <changelog author="Beno&#xEE;t Monin &lt;benoit.monin@gmx.fr&gt;" date="1565611200">- fix build: add missing dependency to gobject library</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1658750400">- Update to 1.4.5:
  * new: added '-u' option to duc index to index by username
  * new: added json subcommand
  * new: added support for NO_COLOR env var
  * cha: duc db location is now XDG compliant
  * fix: various bug fixes, check the git log for details</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1765368000">- Update to 1.4.6:
  * new: added LICENCE to 'make release' target
  * fix: fixed logic error in buffer_get() (boo#1254566, CVE-2025-13654)
  * cha: updated tests
- Fix build requirements</changelog>
</package>
<package pkgid="7d186c6d4b580e594961ce78f671ebf0ced5fdb76eb7328d1513630f1a77522a" name="dunst" arch="aarch64">
  <version epoch="0" ver="1.9.2" rel="bp156.2.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 1.1.0
  * bugfixes ( memmory leak on Spotify )
  * icons
- spec-cleaned</changelog>
  <changelog author="mimi.vx@gmail.com" date="1485000000">- removed unneded deps
- fixed bad free and memory leak by dunst_bad_free.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1500724800">- update to 1.2.0
- dropped dunst_bad_free.patch
  * always_run_script option to run script even if a notification is suppressed
  * Support for more icon file types
  * Support for raw icons
  * hide_duplicate_count option to hide the number of duplicate notifications
  * Support for per-urgency frame colours
  * markup setting for more fine-grained control over how markup is handled
  * history_ignore rule action to exclude a notification from being
  added to the history
  * Support for setting the dpi value dunst will use for font rendering
  via the Xft.dpi X resource
  * Experimental support for per-monitor dpi calculation
  * max_icon_size option to scale down icons if they exceed a certain size
  * Middle click on notifications can be used to trigger actions
  * Systemd service file, installed by default
  * %n format flag for getting progress value without any extra characters
  * Text and icons are now centred vertically
  * Notifications aren’t considered duplicate if urgency or icons differ
  * The maximum length of a notification is limited to 5000 characters
  * The frame width and color settings were moved to the global section
  as frame_width and frame_color respectively
  * Dropped Xinerama in favour of RandR, Xinerama can be enabled with
  the -force_xinerama option if needed
  * allow_markup is deprecated with markup as its replacement
  * The urgency specific command line flags have been deprecated with
  no replacement, respond to issue #328 on the bug tracker
  if you depend on them
  * Infinite loop if there are 2 configuration file sections with the same name
  * URLs with dashes and underscores in them are now parsed properly
  * Many memory leaks
  * Category based rules were applied without actually matching
  * dmenu command not parsing quoted arguments correctly
  * Icon alignment with dynamic width
  * Issue when loading configuration files with very long lines
  * ‘\n’ is no longer expanded to a newline inside notification text
  * Notification window wasn’t redrawn if obscured on systems without a compositor
  * ignore_newline now works regardless of the markup setting
  * dmenu process being left as a zombie if no option was selected
  * Crash when opening urls parsed from &lt;a href=""&gt; tags</changelog>
  <changelog author="arun@gmx.de" date="1518004800">- specfile:
  * updated copyright year
  * changed dependency gdk-2.0 to gdk-pixbuf-2.0
- update to version 1.3.1
  * Race condition resulting in the service files being empty (#488)
- changes from version 1.3.0:
  * Added
    + ellipsize option to control how long lines should be ellipsized
    when word_wrap is set to false (#374)
    + A beginning tilde of a path is now expanded to the home of the
    current user (#351)
    + The image-path hint is now respected, as GApplications send
    their icon only via this link (#447)
    + The (legacy) image_data hint is now respected (#353)
    + If dunst can't acquire the DBus name, dunst prints the PID of
    the process holding the name (#458 #460)
    + Increased accuracy of timeouts by using microseconds internally
    (#379 #291)
    + Support for specifying timeout values in milliseconds, minutes,
    hours, or days. (#379)
    + Support for HTML img tags (via context menu) (#428)
  * Fixed
    + new_icon rule being ignored on notifications that had a raw icon
    (#423)
    + Format strings being replaced recursively in some cases (#322
    [#365])
    + DBus related memory leaks (#397)
    + Crash on X11 servers with RandR support less than 1.5. (#413
    [#364])
    + Silently reading the default config file, if -conf did not
    specify a valid file (#452)
    + Notification window flickering when a notification is replaced
    (#320 #415)
    + Inaccurate timeout in some cases (#291 #379)
  * Changed
    + Transient hints are now handled (#343 #310) An additional rule
    option (match_transient and set_transient) is added to
    optionally reset the transient setting
    + HTML links are now referred to by their text in the context menu
    rather than numbers (#428)
    + icon_folders setting renamed to icon_path (#170)
    + config.def.h and config.h got merged (#371)
    + The dependency on GTK3+ has been removed. Instead of GTK3+,
    dunst now requires gdk-pixbuf which had been a transient
    dependency before. (#334 #376)
    + The _GNU_SOURCE macros had been removed to make dunst portable
    to nonGNU systems (#403)
    + Internal refactorings of the notification queue handling. (#411)
    + Dunst does now install the systemd and dbus service files into
    their proper location given by pkg-config. Use
    SERVICEDIR_(DBUS|SYSTEMD) params to overwrite them. (#463)</changelog>
  <changelog author="jengelh@inai.de" date="1518350400">- Trim filler wording from description.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1519128000">- add makefile.patch to fix service installation</changelog>
  <changelog author="avindra@opensuse.org" date="1525608000">- update to version 1.3.2
  * Fix crash when loading invalid or corrupt icon file
- minor cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="Petr Cervinka &lt;petr@cervinka.net&gt;" date="1559044800">- Update to version 1.4.0
  * Added
  - Add support to override `frame_color` via rules (#498)
  - Support for round corners (#420)
  - Ability to reference `$HOME` in icon paths with `~/` (#520)
  - Support to customize the mouse bindings (#530)
  - Command to toggle pause status (#535)
  - Ability to automatically replace similar notifications (like volume changes)
    via `stack_tag` (#552)
  - Comparison of raw icons for duplicate notifications (#571)
  - Introduce new desktop-entry filter (#470)
  - `fullscreen` rule to hide notifications when a fullscreen window is active (#472)
  - Added `skip_display` rule option to skip initial notification display, and
    include the notification in the history. (#590)
  * Fixed
  - Notification age not counting the time while the computer was suspended (#492)
  - Dunst losing always-on-top status on a window manager restart (#160)
  - Xpm icons not being recognized
  - When new notifications arrive, but display is full, important notifications don't
    have to wait for a timeout in a displayed notification (#541)
  - Dunst hanging while the context menu is open (#456)
  - Having &amp; inside a notification breaking markup (#546)
  - `&lt;I&gt; more` notifications don't occupy space anymore, if there is only a single
    notification waiting to get displayed. The notification gets displayed directly (#467)
  - Segfault when comparing icon name with a notification with a raw icon (#536)
  - Icon size can no longer be larger than the notification when a fixed width is specified (#540)
  * Changed
  - Transient notifications no longer skip history by default (#508)
  - The notification summary no longer accepts markup (#497)
  * Removed
  - Dependency on libxdg-basedir (#550)
- Update makefile.patch to be compatible with latest version
- Build and install dunstify binary, command which is completely compatible to notify-send
  and can be used alongside it, but offers more features.</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1562155200">- Update to version 1.4.1
  * max_icon_size not working with dynamic width
  * Failure to parse color strings with trailing comments in the config
  * Negative width in geometry being ignored
  * Incorrect handling of the argument terminator -- in dunstify
  * Crash when changing DPI while no notifications are displayed
  * Fullscreen status change not being detected in some cases</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1596888000">- update to 1.5.0
- refresh makefile.patch
  * min_icon_size option to automatically scale up icons to a desired value
  * vertical_alignment option to control the text/icon alignment within the notification
  * Ability to configure multiple actions for each mouse event
  * dunstctl command line control client
  * RGBA support for all color strings
  * Ability to run multiple scripts for each notification
  * ignore_dbusclose setting
  * dunstify notification client is now installed by default
  * Keyboard follow mode falls back to the monitor with the mouse if no window has keyboard focus
  * Overflow when setting a &gt;=40 minute timeout
  * Unset configuration options not falling back to default values
  * Crash when $HOME environment variable is unset
  * Lack of antialiasing with round corners enabled</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1619697600">- update to 1.6.1
- refresh makefile.patch
  * Added
  - Wayland support. Dunst now runs natively on wayland. This fixes several bugs with dunst on wayland and allows idle detection. (#781)
  - A progress bar, useful for showing volume or brightness in notifications (#775)
  - A script in contrib for using the progress bar (#791)
  - dunstctl count for showing the number of notifications (#793)
  - Expose environment variables info about the notification to scripts (#802)
  - text_icon_padding for adding padding between the notification icon and text (#810)
  * Changed
  - Dunst now installs a system-wide config in /etc/dunst/dunstrc (#798)
  - Move part of the man page to dunst(5) (#799)
  * Fixed
  - Incorrect version in Makefile
  - history_ignore flag broken when using multiple rules (#747)
  - Divide by zero in radius calculation (#750)
  - Monitor setting overriding follow_mode (#755)
  - Incorrect monitor usage when using multiple X11 screens (#762)
  - Emit signal when paused property changes (#766)
  - dunstify can pass empty appname to libnotify (#768)
  - Incorrect handling of 'do_action, close' mouse action (#778)
  * Removed
  - DUNST_COMMAND_{PAUSE,RESUME,TOGGLE} (#830)-</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1625227200">- Do not hardcode web browser
  + dunst-xdg-open-can-open-URLs-don-t-rely-on-specific-hardco.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1638878400">- Update to 1.7.2
  * release notes:
    https://github.com/dunst-project/dunst/blob/master/CHANGELOG.md
- Drop unneeded patch:
  * makefile.patch
- Drop upstreamed patch:
  * dunst-xdg-open-can-open-URLs-don-t-rely-on-specific-hardco.patch</changelog>
  <changelog author="Timothy Brown &lt;stimut@gmail.com&gt;" date="1649937600">- Update to 1.8.1
  * release notes:
    https://github.com/dunst-project/dunst/blob/master/CHANGELOG.md</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673870400">- update to 1.9.0:
  * `override_dbus_timeout` setting to override the notification timeout set
    via dbus.
  * Support notification gaps via the `gap_size` setting. Note that since
    the notifications are not separate windows, you cannot click in between the
    notifications.
  * Make `min_icon_size` and `max_icon_size` a rule for even more
    flexibility
  * The window offset is now scaled according to `scale` as well. This way
    notification stay visually in the same place on higher DPI screens.
  * For the recursive icon lookup, revert to using `min_icon_size` and
    `max_icon_size` instead of `icon_size`. `min_icon_size` is used as the size to
    look for in icon themes.
  * Recursive icon lookup is no longer experimental.
  * Recursive icon lookup is enabled in the default dunstrc. This does not
    change your settings when you have a custom dunstrc.
  * Added back the `action_name` setting that was accidentally dropped.
  * Broken `dunstctl history`.
  * Merged a few wayland fixes from mako (https://github.com/emersion/mako)
  * `follow=keyboard`: Fix regression where we don't fall back to mouse
  * Raw icons not being scaled according to icon size
  * Notifications not disappearing. For some people notifications would
    sometimes stay on screen until a new notification appeared. This should
    not happen anymore</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680004800">- update to 1.9.1:
  * zsh completion for dunst and dunstctl (#1107 and #1108)
  * dunstctl `history-clear` command to delete all notifications
    from history (#1131)
  * dunstctl `history-rm command` to remove a single notification
    from history (#1128)
  * `progress_bar_corner_radius` option for adding rounded
    corners to the progress bar (off by default) (#1119)
  * `icon_corner_radius` option for adding rounded corners to
    notification icons (#1139)
  * Make libnotify and dunstify optional in build (#1129)
  * Man page typo's and readability (#1088 and #1121)
  * Length changes not being emitted over D-Bus (#1127)
  * Crash when locking screen with swaylock on Sway (#1148)
  * Dunst using 100% in some configurations with `idle_threshold`
    turned on (#1140)</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1697025600">- update to 1.9.2:
  * Fixed various documentation issues
  * Fixed high cpu when `show_age_treshold` = -1
  * High cpu usage in some situation, often correlated with being idle</changelog>
</package>
<package pkgid="07036814afabb199c0ce8431703541234c80b46ebf538b264fa1dbd306392261" name="dunst" arch="i586">
  <version epoch="0" ver="1.9.2" rel="bp156.2.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 1.1.0
  * bugfixes ( memmory leak on Spotify )
  * icons
- spec-cleaned</changelog>
  <changelog author="mimi.vx@gmail.com" date="1485000000">- removed unneded deps
- fixed bad free and memory leak by dunst_bad_free.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1500724800">- update to 1.2.0
- dropped dunst_bad_free.patch
  * always_run_script option to run script even if a notification is suppressed
  * Support for more icon file types
  * Support for raw icons
  * hide_duplicate_count option to hide the number of duplicate notifications
  * Support for per-urgency frame colours
  * markup setting for more fine-grained control over how markup is handled
  * history_ignore rule action to exclude a notification from being
  added to the history
  * Support for setting the dpi value dunst will use for font rendering
  via the Xft.dpi X resource
  * Experimental support for per-monitor dpi calculation
  * max_icon_size option to scale down icons if they exceed a certain size
  * Middle click on notifications can be used to trigger actions
  * Systemd service file, installed by default
  * %n format flag for getting progress value without any extra characters
  * Text and icons are now centred vertically
  * Notifications aren’t considered duplicate if urgency or icons differ
  * The maximum length of a notification is limited to 5000 characters
  * The frame width and color settings were moved to the global section
  as frame_width and frame_color respectively
  * Dropped Xinerama in favour of RandR, Xinerama can be enabled with
  the -force_xinerama option if needed
  * allow_markup is deprecated with markup as its replacement
  * The urgency specific command line flags have been deprecated with
  no replacement, respond to issue #328 on the bug tracker
  if you depend on them
  * Infinite loop if there are 2 configuration file sections with the same name
  * URLs with dashes and underscores in them are now parsed properly
  * Many memory leaks
  * Category based rules were applied without actually matching
  * dmenu command not parsing quoted arguments correctly
  * Icon alignment with dynamic width
  * Issue when loading configuration files with very long lines
  * ‘\n’ is no longer expanded to a newline inside notification text
  * Notification window wasn’t redrawn if obscured on systems without a compositor
  * ignore_newline now works regardless of the markup setting
  * dmenu process being left as a zombie if no option was selected
  * Crash when opening urls parsed from &lt;a href=""&gt; tags</changelog>
  <changelog author="arun@gmx.de" date="1518004800">- specfile:
  * updated copyright year
  * changed dependency gdk-2.0 to gdk-pixbuf-2.0
- update to version 1.3.1
  * Race condition resulting in the service files being empty (#488)
- changes from version 1.3.0:
  * Added
    + ellipsize option to control how long lines should be ellipsized
    when word_wrap is set to false (#374)
    + A beginning tilde of a path is now expanded to the home of the
    current user (#351)
    + The image-path hint is now respected, as GApplications send
    their icon only via this link (#447)
    + The (legacy) image_data hint is now respected (#353)
    + If dunst can't acquire the DBus name, dunst prints the PID of
    the process holding the name (#458 #460)
    + Increased accuracy of timeouts by using microseconds internally
    (#379 #291)
    + Support for specifying timeout values in milliseconds, minutes,
    hours, or days. (#379)
    + Support for HTML img tags (via context menu) (#428)
  * Fixed
    + new_icon rule being ignored on notifications that had a raw icon
    (#423)
    + Format strings being replaced recursively in some cases (#322
    [#365])
    + DBus related memory leaks (#397)
    + Crash on X11 servers with RandR support less than 1.5. (#413
    [#364])
    + Silently reading the default config file, if -conf did not
    specify a valid file (#452)
    + Notification window flickering when a notification is replaced
    (#320 #415)
    + Inaccurate timeout in some cases (#291 #379)
  * Changed
    + Transient hints are now handled (#343 #310) An additional rule
    option (match_transient and set_transient) is added to
    optionally reset the transient setting
    + HTML links are now referred to by their text in the context menu
    rather than numbers (#428)
    + icon_folders setting renamed to icon_path (#170)
    + config.def.h and config.h got merged (#371)
    + The dependency on GTK3+ has been removed. Instead of GTK3+,
    dunst now requires gdk-pixbuf which had been a transient
    dependency before. (#334 #376)
    + The _GNU_SOURCE macros had been removed to make dunst portable
    to nonGNU systems (#403)
    + Internal refactorings of the notification queue handling. (#411)
    + Dunst does now install the systemd and dbus service files into
    their proper location given by pkg-config. Use
    SERVICEDIR_(DBUS|SYSTEMD) params to overwrite them. (#463)</changelog>
  <changelog author="jengelh@inai.de" date="1518350400">- Trim filler wording from description.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1519128000">- add makefile.patch to fix service installation</changelog>
  <changelog author="avindra@opensuse.org" date="1525608000">- update to version 1.3.2
  * Fix crash when loading invalid or corrupt icon file
- minor cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="Petr Cervinka &lt;petr@cervinka.net&gt;" date="1559044800">- Update to version 1.4.0
  * Added
  - Add support to override `frame_color` via rules (#498)
  - Support for round corners (#420)
  - Ability to reference `$HOME` in icon paths with `~/` (#520)
  - Support to customize the mouse bindings (#530)
  - Command to toggle pause status (#535)
  - Ability to automatically replace similar notifications (like volume changes)
    via `stack_tag` (#552)
  - Comparison of raw icons for duplicate notifications (#571)
  - Introduce new desktop-entry filter (#470)
  - `fullscreen` rule to hide notifications when a fullscreen window is active (#472)
  - Added `skip_display` rule option to skip initial notification display, and
    include the notification in the history. (#590)
  * Fixed
  - Notification age not counting the time while the computer was suspended (#492)
  - Dunst losing always-on-top status on a window manager restart (#160)
  - Xpm icons not being recognized
  - When new notifications arrive, but display is full, important notifications don't
    have to wait for a timeout in a displayed notification (#541)
  - Dunst hanging while the context menu is open (#456)
  - Having &amp; inside a notification breaking markup (#546)
  - `&lt;I&gt; more` notifications don't occupy space anymore, if there is only a single
    notification waiting to get displayed. The notification gets displayed directly (#467)
  - Segfault when comparing icon name with a notification with a raw icon (#536)
  - Icon size can no longer be larger than the notification when a fixed width is specified (#540)
  * Changed
  - Transient notifications no longer skip history by default (#508)
  - The notification summary no longer accepts markup (#497)
  * Removed
  - Dependency on libxdg-basedir (#550)
- Update makefile.patch to be compatible with latest version
- Build and install dunstify binary, command which is completely compatible to notify-send
  and can be used alongside it, but offers more features.</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1562155200">- Update to version 1.4.1
  * max_icon_size not working with dynamic width
  * Failure to parse color strings with trailing comments in the config
  * Negative width in geometry being ignored
  * Incorrect handling of the argument terminator -- in dunstify
  * Crash when changing DPI while no notifications are displayed
  * Fullscreen status change not being detected in some cases</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1596888000">- update to 1.5.0
- refresh makefile.patch
  * min_icon_size option to automatically scale up icons to a desired value
  * vertical_alignment option to control the text/icon alignment within the notification
  * Ability to configure multiple actions for each mouse event
  * dunstctl command line control client
  * RGBA support for all color strings
  * Ability to run multiple scripts for each notification
  * ignore_dbusclose setting
  * dunstify notification client is now installed by default
  * Keyboard follow mode falls back to the monitor with the mouse if no window has keyboard focus
  * Overflow when setting a &gt;=40 minute timeout
  * Unset configuration options not falling back to default values
  * Crash when $HOME environment variable is unset
  * Lack of antialiasing with round corners enabled</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1619697600">- update to 1.6.1
- refresh makefile.patch
  * Added
  - Wayland support. Dunst now runs natively on wayland. This fixes several bugs with dunst on wayland and allows idle detection. (#781)
  - A progress bar, useful for showing volume or brightness in notifications (#775)
  - A script in contrib for using the progress bar (#791)
  - dunstctl count for showing the number of notifications (#793)
  - Expose environment variables info about the notification to scripts (#802)
  - text_icon_padding for adding padding between the notification icon and text (#810)
  * Changed
  - Dunst now installs a system-wide config in /etc/dunst/dunstrc (#798)
  - Move part of the man page to dunst(5) (#799)
  * Fixed
  - Incorrect version in Makefile
  - history_ignore flag broken when using multiple rules (#747)
  - Divide by zero in radius calculation (#750)
  - Monitor setting overriding follow_mode (#755)
  - Incorrect monitor usage when using multiple X11 screens (#762)
  - Emit signal when paused property changes (#766)
  - dunstify can pass empty appname to libnotify (#768)
  - Incorrect handling of 'do_action, close' mouse action (#778)
  * Removed
  - DUNST_COMMAND_{PAUSE,RESUME,TOGGLE} (#830)-</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1625227200">- Do not hardcode web browser
  + dunst-xdg-open-can-open-URLs-don-t-rely-on-specific-hardco.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1638878400">- Update to 1.7.2
  * release notes:
    https://github.com/dunst-project/dunst/blob/master/CHANGELOG.md
- Drop unneeded patch:
  * makefile.patch
- Drop upstreamed patch:
  * dunst-xdg-open-can-open-URLs-don-t-rely-on-specific-hardco.patch</changelog>
  <changelog author="Timothy Brown &lt;stimut@gmail.com&gt;" date="1649937600">- Update to 1.8.1
  * release notes:
    https://github.com/dunst-project/dunst/blob/master/CHANGELOG.md</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673870400">- update to 1.9.0:
  * `override_dbus_timeout` setting to override the notification timeout set
    via dbus.
  * Support notification gaps via the `gap_size` setting. Note that since
    the notifications are not separate windows, you cannot click in between the
    notifications.
  * Make `min_icon_size` and `max_icon_size` a rule for even more
    flexibility
  * The window offset is now scaled according to `scale` as well. This way
    notification stay visually in the same place on higher DPI screens.
  * For the recursive icon lookup, revert to using `min_icon_size` and
    `max_icon_size` instead of `icon_size`. `min_icon_size` is used as the size to
    look for in icon themes.
  * Recursive icon lookup is no longer experimental.
  * Recursive icon lookup is enabled in the default dunstrc. This does not
    change your settings when you have a custom dunstrc.
  * Added back the `action_name` setting that was accidentally dropped.
  * Broken `dunstctl history`.
  * Merged a few wayland fixes from mako (https://github.com/emersion/mako)
  * `follow=keyboard`: Fix regression where we don't fall back to mouse
  * Raw icons not being scaled according to icon size
  * Notifications not disappearing. For some people notifications would
    sometimes stay on screen until a new notification appeared. This should
    not happen anymore</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680004800">- update to 1.9.1:
  * zsh completion for dunst and dunstctl (#1107 and #1108)
  * dunstctl `history-clear` command to delete all notifications
    from history (#1131)
  * dunstctl `history-rm command` to remove a single notification
    from history (#1128)
  * `progress_bar_corner_radius` option for adding rounded
    corners to the progress bar (off by default) (#1119)
  * `icon_corner_radius` option for adding rounded corners to
    notification icons (#1139)
  * Make libnotify and dunstify optional in build (#1129)
  * Man page typo's and readability (#1088 and #1121)
  * Length changes not being emitted over D-Bus (#1127)
  * Crash when locking screen with swaylock on Sway (#1148)
  * Dunst using 100% in some configurations with `idle_threshold`
    turned on (#1140)</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1697025600">- update to 1.9.2:
  * Fixed various documentation issues
  * Fixed high cpu when `show_age_treshold` = -1
  * High cpu usage in some situation, often correlated with being idle</changelog>
</package>
<package pkgid="7f5f99dd31b401704530d8d3f1337fa1c85c900bb5cee21fd91b592dc0c68b9e" name="dunst" arch="ppc64le">
  <version epoch="0" ver="1.9.2" rel="bp156.2.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 1.1.0
  * bugfixes ( memmory leak on Spotify )
  * icons
- spec-cleaned</changelog>
  <changelog author="mimi.vx@gmail.com" date="1485000000">- removed unneded deps
- fixed bad free and memory leak by dunst_bad_free.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1500724800">- update to 1.2.0
- dropped dunst_bad_free.patch
  * always_run_script option to run script even if a notification is suppressed
  * Support for more icon file types
  * Support for raw icons
  * hide_duplicate_count option to hide the number of duplicate notifications
  * Support for per-urgency frame colours
  * markup setting for more fine-grained control over how markup is handled
  * history_ignore rule action to exclude a notification from being
  added to the history
  * Support for setting the dpi value dunst will use for font rendering
  via the Xft.dpi X resource
  * Experimental support for per-monitor dpi calculation
  * max_icon_size option to scale down icons if they exceed a certain size
  * Middle click on notifications can be used to trigger actions
  * Systemd service file, installed by default
  * %n format flag for getting progress value without any extra characters
  * Text and icons are now centred vertically
  * Notifications aren’t considered duplicate if urgency or icons differ
  * The maximum length of a notification is limited to 5000 characters
  * The frame width and color settings were moved to the global section
  as frame_width and frame_color respectively
  * Dropped Xinerama in favour of RandR, Xinerama can be enabled with
  the -force_xinerama option if needed
  * allow_markup is deprecated with markup as its replacement
  * The urgency specific command line flags have been deprecated with
  no replacement, respond to issue #328 on the bug tracker
  if you depend on them
  * Infinite loop if there are 2 configuration file sections with the same name
  * URLs with dashes and underscores in them are now parsed properly
  * Many memory leaks
  * Category based rules were applied without actually matching
  * dmenu command not parsing quoted arguments correctly
  * Icon alignment with dynamic width
  * Issue when loading configuration files with very long lines
  * ‘\n’ is no longer expanded to a newline inside notification text
  * Notification window wasn’t redrawn if obscured on systems without a compositor
  * ignore_newline now works regardless of the markup setting
  * dmenu process being left as a zombie if no option was selected
  * Crash when opening urls parsed from &lt;a href=""&gt; tags</changelog>
  <changelog author="arun@gmx.de" date="1518004800">- specfile:
  * updated copyright year
  * changed dependency gdk-2.0 to gdk-pixbuf-2.0
- update to version 1.3.1
  * Race condition resulting in the service files being empty (#488)
- changes from version 1.3.0:
  * Added
    + ellipsize option to control how long lines should be ellipsized
    when word_wrap is set to false (#374)
    + A beginning tilde of a path is now expanded to the home of the
    current user (#351)
    + The image-path hint is now respected, as GApplications send
    their icon only via this link (#447)
    + The (legacy) image_data hint is now respected (#353)
    + If dunst can't acquire the DBus name, dunst prints the PID of
    the process holding the name (#458 #460)
    + Increased accuracy of timeouts by using microseconds internally
    (#379 #291)
    + Support for specifying timeout values in milliseconds, minutes,
    hours, or days. (#379)
    + Support for HTML img tags (via context menu) (#428)
  * Fixed
    + new_icon rule being ignored on notifications that had a raw icon
    (#423)
    + Format strings being replaced recursively in some cases (#322
    [#365])
    + DBus related memory leaks (#397)
    + Crash on X11 servers with RandR support less than 1.5. (#413
    [#364])
    + Silently reading the default config file, if -conf did not
    specify a valid file (#452)
    + Notification window flickering when a notification is replaced
    (#320 #415)
    + Inaccurate timeout in some cases (#291 #379)
  * Changed
    + Transient hints are now handled (#343 #310) An additional rule
    option (match_transient and set_transient) is added to
    optionally reset the transient setting
    + HTML links are now referred to by their text in the context menu
    rather than numbers (#428)
    + icon_folders setting renamed to icon_path (#170)
    + config.def.h and config.h got merged (#371)
    + The dependency on GTK3+ has been removed. Instead of GTK3+,
    dunst now requires gdk-pixbuf which had been a transient
    dependency before. (#334 #376)
    + The _GNU_SOURCE macros had been removed to make dunst portable
    to nonGNU systems (#403)
    + Internal refactorings of the notification queue handling. (#411)
    + Dunst does now install the systemd and dbus service files into
    their proper location given by pkg-config. Use
    SERVICEDIR_(DBUS|SYSTEMD) params to overwrite them. (#463)</changelog>
  <changelog author="jengelh@inai.de" date="1518350400">- Trim filler wording from description.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1519128000">- add makefile.patch to fix service installation</changelog>
  <changelog author="avindra@opensuse.org" date="1525608000">- update to version 1.3.2
  * Fix crash when loading invalid or corrupt icon file
- minor cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="Petr Cervinka &lt;petr@cervinka.net&gt;" date="1559044800">- Update to version 1.4.0
  * Added
  - Add support to override `frame_color` via rules (#498)
  - Support for round corners (#420)
  - Ability to reference `$HOME` in icon paths with `~/` (#520)
  - Support to customize the mouse bindings (#530)
  - Command to toggle pause status (#535)
  - Ability to automatically replace similar notifications (like volume changes)
    via `stack_tag` (#552)
  - Comparison of raw icons for duplicate notifications (#571)
  - Introduce new desktop-entry filter (#470)
  - `fullscreen` rule to hide notifications when a fullscreen window is active (#472)
  - Added `skip_display` rule option to skip initial notification display, and
    include the notification in the history. (#590)
  * Fixed
  - Notification age not counting the time while the computer was suspended (#492)
  - Dunst losing always-on-top status on a window manager restart (#160)
  - Xpm icons not being recognized
  - When new notifications arrive, but display is full, important notifications don't
    have to wait for a timeout in a displayed notification (#541)
  - Dunst hanging while the context menu is open (#456)
  - Having &amp; inside a notification breaking markup (#546)
  - `&lt;I&gt; more` notifications don't occupy space anymore, if there is only a single
    notification waiting to get displayed. The notification gets displayed directly (#467)
  - Segfault when comparing icon name with a notification with a raw icon (#536)
  - Icon size can no longer be larger than the notification when a fixed width is specified (#540)
  * Changed
  - Transient notifications no longer skip history by default (#508)
  - The notification summary no longer accepts markup (#497)
  * Removed
  - Dependency on libxdg-basedir (#550)
- Update makefile.patch to be compatible with latest version
- Build and install dunstify binary, command which is completely compatible to notify-send
  and can be used alongside it, but offers more features.</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1562155200">- Update to version 1.4.1
  * max_icon_size not working with dynamic width
  * Failure to parse color strings with trailing comments in the config
  * Negative width in geometry being ignored
  * Incorrect handling of the argument terminator -- in dunstify
  * Crash when changing DPI while no notifications are displayed
  * Fullscreen status change not being detected in some cases</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1596888000">- update to 1.5.0
- refresh makefile.patch
  * min_icon_size option to automatically scale up icons to a desired value
  * vertical_alignment option to control the text/icon alignment within the notification
  * Ability to configure multiple actions for each mouse event
  * dunstctl command line control client
  * RGBA support for all color strings
  * Ability to run multiple scripts for each notification
  * ignore_dbusclose setting
  * dunstify notification client is now installed by default
  * Keyboard follow mode falls back to the monitor with the mouse if no window has keyboard focus
  * Overflow when setting a &gt;=40 minute timeout
  * Unset configuration options not falling back to default values
  * Crash when $HOME environment variable is unset
  * Lack of antialiasing with round corners enabled</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1619697600">- update to 1.6.1
- refresh makefile.patch
  * Added
  - Wayland support. Dunst now runs natively on wayland. This fixes several bugs with dunst on wayland and allows idle detection. (#781)
  - A progress bar, useful for showing volume or brightness in notifications (#775)
  - A script in contrib for using the progress bar (#791)
  - dunstctl count for showing the number of notifications (#793)
  - Expose environment variables info about the notification to scripts (#802)
  - text_icon_padding for adding padding between the notification icon and text (#810)
  * Changed
  - Dunst now installs a system-wide config in /etc/dunst/dunstrc (#798)
  - Move part of the man page to dunst(5) (#799)
  * Fixed
  - Incorrect version in Makefile
  - history_ignore flag broken when using multiple rules (#747)
  - Divide by zero in radius calculation (#750)
  - Monitor setting overriding follow_mode (#755)
  - Incorrect monitor usage when using multiple X11 screens (#762)
  - Emit signal when paused property changes (#766)
  - dunstify can pass empty appname to libnotify (#768)
  - Incorrect handling of 'do_action, close' mouse action (#778)
  * Removed
  - DUNST_COMMAND_{PAUSE,RESUME,TOGGLE} (#830)-</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1625227200">- Do not hardcode web browser
  + dunst-xdg-open-can-open-URLs-don-t-rely-on-specific-hardco.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1638878400">- Update to 1.7.2
  * release notes:
    https://github.com/dunst-project/dunst/blob/master/CHANGELOG.md
- Drop unneeded patch:
  * makefile.patch
- Drop upstreamed patch:
  * dunst-xdg-open-can-open-URLs-don-t-rely-on-specific-hardco.patch</changelog>
  <changelog author="Timothy Brown &lt;stimut@gmail.com&gt;" date="1649937600">- Update to 1.8.1
  * release notes:
    https://github.com/dunst-project/dunst/blob/master/CHANGELOG.md</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673870400">- update to 1.9.0:
  * `override_dbus_timeout` setting to override the notification timeout set
    via dbus.
  * Support notification gaps via the `gap_size` setting. Note that since
    the notifications are not separate windows, you cannot click in between the
    notifications.
  * Make `min_icon_size` and `max_icon_size` a rule for even more
    flexibility
  * The window offset is now scaled according to `scale` as well. This way
    notification stay visually in the same place on higher DPI screens.
  * For the recursive icon lookup, revert to using `min_icon_size` and
    `max_icon_size` instead of `icon_size`. `min_icon_size` is used as the size to
    look for in icon themes.
  * Recursive icon lookup is no longer experimental.
  * Recursive icon lookup is enabled in the default dunstrc. This does not
    change your settings when you have a custom dunstrc.
  * Added back the `action_name` setting that was accidentally dropped.
  * Broken `dunstctl history`.
  * Merged a few wayland fixes from mako (https://github.com/emersion/mako)
  * `follow=keyboard`: Fix regression where we don't fall back to mouse
  * Raw icons not being scaled according to icon size
  * Notifications not disappearing. For some people notifications would
    sometimes stay on screen until a new notification appeared. This should
    not happen anymore</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680004800">- update to 1.9.1:
  * zsh completion for dunst and dunstctl (#1107 and #1108)
  * dunstctl `history-clear` command to delete all notifications
    from history (#1131)
  * dunstctl `history-rm command` to remove a single notification
    from history (#1128)
  * `progress_bar_corner_radius` option for adding rounded
    corners to the progress bar (off by default) (#1119)
  * `icon_corner_radius` option for adding rounded corners to
    notification icons (#1139)
  * Make libnotify and dunstify optional in build (#1129)
  * Man page typo's and readability (#1088 and #1121)
  * Length changes not being emitted over D-Bus (#1127)
  * Crash when locking screen with swaylock on Sway (#1148)
  * Dunst using 100% in some configurations with `idle_threshold`
    turned on (#1140)</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1697025600">- update to 1.9.2:
  * Fixed various documentation issues
  * Fixed high cpu when `show_age_treshold` = -1
  * High cpu usage in some situation, often correlated with being idle</changelog>
</package>
<package pkgid="2fe3f8c6f83bae11c3c7db6d7c40d13c0e39c599171f93cc17893be3644df871" name="dunst" arch="s390x">
  <version epoch="0" ver="1.9.2" rel="bp156.2.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 1.1.0
  * bugfixes ( memmory leak on Spotify )
  * icons
- spec-cleaned</changelog>
  <changelog author="mimi.vx@gmail.com" date="1485000000">- removed unneded deps
- fixed bad free and memory leak by dunst_bad_free.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1500724800">- update to 1.2.0
- dropped dunst_bad_free.patch
  * always_run_script option to run script even if a notification is suppressed
  * Support for more icon file types
  * Support for raw icons
  * hide_duplicate_count option to hide the number of duplicate notifications
  * Support for per-urgency frame colours
  * markup setting for more fine-grained control over how markup is handled
  * history_ignore rule action to exclude a notification from being
  added to the history
  * Support for setting the dpi value dunst will use for font rendering
  via the Xft.dpi X resource
  * Experimental support for per-monitor dpi calculation
  * max_icon_size option to scale down icons if they exceed a certain size
  * Middle click on notifications can be used to trigger actions
  * Systemd service file, installed by default
  * %n format flag for getting progress value without any extra characters
  * Text and icons are now centred vertically
  * Notifications aren’t considered duplicate if urgency or icons differ
  * The maximum length of a notification is limited to 5000 characters
  * The frame width and color settings were moved to the global section
  as frame_width and frame_color respectively
  * Dropped Xinerama in favour of RandR, Xinerama can be enabled with
  the -force_xinerama option if needed
  * allow_markup is deprecated with markup as its replacement
  * The urgency specific command line flags have been deprecated with
  no replacement, respond to issue #328 on the bug tracker
  if you depend on them
  * Infinite loop if there are 2 configuration file sections with the same name
  * URLs with dashes and underscores in them are now parsed properly
  * Many memory leaks
  * Category based rules were applied without actually matching
  * dmenu command not parsing quoted arguments correctly
  * Icon alignment with dynamic width
  * Issue when loading configuration files with very long lines
  * ‘\n’ is no longer expanded to a newline inside notification text
  * Notification window wasn’t redrawn if obscured on systems without a compositor
  * ignore_newline now works regardless of the markup setting
  * dmenu process being left as a zombie if no option was selected
  * Crash when opening urls parsed from &lt;a href=""&gt; tags</changelog>
  <changelog author="arun@gmx.de" date="1518004800">- specfile:
  * updated copyright year
  * changed dependency gdk-2.0 to gdk-pixbuf-2.0
- update to version 1.3.1
  * Race condition resulting in the service files being empty (#488)
- changes from version 1.3.0:
  * Added
    + ellipsize option to control how long lines should be ellipsized
    when word_wrap is set to false (#374)
    + A beginning tilde of a path is now expanded to the home of the
    current user (#351)
    + The image-path hint is now respected, as GApplications send
    their icon only via this link (#447)
    + The (legacy) image_data hint is now respected (#353)
    + If dunst can't acquire the DBus name, dunst prints the PID of
    the process holding the name (#458 #460)
    + Increased accuracy of timeouts by using microseconds internally
    (#379 #291)
    + Support for specifying timeout values in milliseconds, minutes,
    hours, or days. (#379)
    + Support for HTML img tags (via context menu) (#428)
  * Fixed
    + new_icon rule being ignored on notifications that had a raw icon
    (#423)
    + Format strings being replaced recursively in some cases (#322
    [#365])
    + DBus related memory leaks (#397)
    + Crash on X11 servers with RandR support less than 1.5. (#413
    [#364])
    + Silently reading the default config file, if -conf did not
    specify a valid file (#452)
    + Notification window flickering when a notification is replaced
    (#320 #415)
    + Inaccurate timeout in some cases (#291 #379)
  * Changed
    + Transient hints are now handled (#343 #310) An additional rule
    option (match_transient and set_transient) is added to
    optionally reset the transient setting
    + HTML links are now referred to by their text in the context menu
    rather than numbers (#428)
    + icon_folders setting renamed to icon_path (#170)
    + config.def.h and config.h got merged (#371)
    + The dependency on GTK3+ has been removed. Instead of GTK3+,
    dunst now requires gdk-pixbuf which had been a transient
    dependency before. (#334 #376)
    + The _GNU_SOURCE macros had been removed to make dunst portable
    to nonGNU systems (#403)
    + Internal refactorings of the notification queue handling. (#411)
    + Dunst does now install the systemd and dbus service files into
    their proper location given by pkg-config. Use
    SERVICEDIR_(DBUS|SYSTEMD) params to overwrite them. (#463)</changelog>
  <changelog author="jengelh@inai.de" date="1518350400">- Trim filler wording from description.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1519128000">- add makefile.patch to fix service installation</changelog>
  <changelog author="avindra@opensuse.org" date="1525608000">- update to version 1.3.2
  * Fix crash when loading invalid or corrupt icon file
- minor cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="Petr Cervinka &lt;petr@cervinka.net&gt;" date="1559044800">- Update to version 1.4.0
  * Added
  - Add support to override `frame_color` via rules (#498)
  - Support for round corners (#420)
  - Ability to reference `$HOME` in icon paths with `~/` (#520)
  - Support to customize the mouse bindings (#530)
  - Command to toggle pause status (#535)
  - Ability to automatically replace similar notifications (like volume changes)
    via `stack_tag` (#552)
  - Comparison of raw icons for duplicate notifications (#571)
  - Introduce new desktop-entry filter (#470)
  - `fullscreen` rule to hide notifications when a fullscreen window is active (#472)
  - Added `skip_display` rule option to skip initial notification display, and
    include the notification in the history. (#590)
  * Fixed
  - Notification age not counting the time while the computer was suspended (#492)
  - Dunst losing always-on-top status on a window manager restart (#160)
  - Xpm icons not being recognized
  - When new notifications arrive, but display is full, important notifications don't
    have to wait for a timeout in a displayed notification (#541)
  - Dunst hanging while the context menu is open (#456)
  - Having &amp; inside a notification breaking markup (#546)
  - `&lt;I&gt; more` notifications don't occupy space anymore, if there is only a single
    notification waiting to get displayed. The notification gets displayed directly (#467)
  - Segfault when comparing icon name with a notification with a raw icon (#536)
  - Icon size can no longer be larger than the notification when a fixed width is specified (#540)
  * Changed
  - Transient notifications no longer skip history by default (#508)
  - The notification summary no longer accepts markup (#497)
  * Removed
  - Dependency on libxdg-basedir (#550)
- Update makefile.patch to be compatible with latest version
- Build and install dunstify binary, command which is completely compatible to notify-send
  and can be used alongside it, but offers more features.</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1562155200">- Update to version 1.4.1
  * max_icon_size not working with dynamic width
  * Failure to parse color strings with trailing comments in the config
  * Negative width in geometry being ignored
  * Incorrect handling of the argument terminator -- in dunstify
  * Crash when changing DPI while no notifications are displayed
  * Fullscreen status change not being detected in some cases</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1596888000">- update to 1.5.0
- refresh makefile.patch
  * min_icon_size option to automatically scale up icons to a desired value
  * vertical_alignment option to control the text/icon alignment within the notification
  * Ability to configure multiple actions for each mouse event
  * dunstctl command line control client
  * RGBA support for all color strings
  * Ability to run multiple scripts for each notification
  * ignore_dbusclose setting
  * dunstify notification client is now installed by default
  * Keyboard follow mode falls back to the monitor with the mouse if no window has keyboard focus
  * Overflow when setting a &gt;=40 minute timeout
  * Unset configuration options not falling back to default values
  * Crash when $HOME environment variable is unset
  * Lack of antialiasing with round corners enabled</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1619697600">- update to 1.6.1
- refresh makefile.patch
  * Added
  - Wayland support. Dunst now runs natively on wayland. This fixes several bugs with dunst on wayland and allows idle detection. (#781)
  - A progress bar, useful for showing volume or brightness in notifications (#775)
  - A script in contrib for using the progress bar (#791)
  - dunstctl count for showing the number of notifications (#793)
  - Expose environment variables info about the notification to scripts (#802)
  - text_icon_padding for adding padding between the notification icon and text (#810)
  * Changed
  - Dunst now installs a system-wide config in /etc/dunst/dunstrc (#798)
  - Move part of the man page to dunst(5) (#799)
  * Fixed
  - Incorrect version in Makefile
  - history_ignore flag broken when using multiple rules (#747)
  - Divide by zero in radius calculation (#750)
  - Monitor setting overriding follow_mode (#755)
  - Incorrect monitor usage when using multiple X11 screens (#762)
  - Emit signal when paused property changes (#766)
  - dunstify can pass empty appname to libnotify (#768)
  - Incorrect handling of 'do_action, close' mouse action (#778)
  * Removed
  - DUNST_COMMAND_{PAUSE,RESUME,TOGGLE} (#830)-</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1625227200">- Do not hardcode web browser
  + dunst-xdg-open-can-open-URLs-don-t-rely-on-specific-hardco.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1638878400">- Update to 1.7.2
  * release notes:
    https://github.com/dunst-project/dunst/blob/master/CHANGELOG.md
- Drop unneeded patch:
  * makefile.patch
- Drop upstreamed patch:
  * dunst-xdg-open-can-open-URLs-don-t-rely-on-specific-hardco.patch</changelog>
  <changelog author="Timothy Brown &lt;stimut@gmail.com&gt;" date="1649937600">- Update to 1.8.1
  * release notes:
    https://github.com/dunst-project/dunst/blob/master/CHANGELOG.md</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673870400">- update to 1.9.0:
  * `override_dbus_timeout` setting to override the notification timeout set
    via dbus.
  * Support notification gaps via the `gap_size` setting. Note that since
    the notifications are not separate windows, you cannot click in between the
    notifications.
  * Make `min_icon_size` and `max_icon_size` a rule for even more
    flexibility
  * The window offset is now scaled according to `scale` as well. This way
    notification stay visually in the same place on higher DPI screens.
  * For the recursive icon lookup, revert to using `min_icon_size` and
    `max_icon_size` instead of `icon_size`. `min_icon_size` is used as the size to
    look for in icon themes.
  * Recursive icon lookup is no longer experimental.
  * Recursive icon lookup is enabled in the default dunstrc. This does not
    change your settings when you have a custom dunstrc.
  * Added back the `action_name` setting that was accidentally dropped.
  * Broken `dunstctl history`.
  * Merged a few wayland fixes from mako (https://github.com/emersion/mako)
  * `follow=keyboard`: Fix regression where we don't fall back to mouse
  * Raw icons not being scaled according to icon size
  * Notifications not disappearing. For some people notifications would
    sometimes stay on screen until a new notification appeared. This should
    not happen anymore</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680004800">- update to 1.9.1:
  * zsh completion for dunst and dunstctl (#1107 and #1108)
  * dunstctl `history-clear` command to delete all notifications
    from history (#1131)
  * dunstctl `history-rm command` to remove a single notification
    from history (#1128)
  * `progress_bar_corner_radius` option for adding rounded
    corners to the progress bar (off by default) (#1119)
  * `icon_corner_radius` option for adding rounded corners to
    notification icons (#1139)
  * Make libnotify and dunstify optional in build (#1129)
  * Man page typo's and readability (#1088 and #1121)
  * Length changes not being emitted over D-Bus (#1127)
  * Crash when locking screen with swaylock on Sway (#1148)
  * Dunst using 100% in some configurations with `idle_threshold`
    turned on (#1140)</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1697025600">- update to 1.9.2:
  * Fixed various documentation issues
  * Fixed high cpu when `show_age_treshold` = -1
  * High cpu usage in some situation, often correlated with being idle</changelog>
</package>
<package pkgid="7bfe265ad04d5ebb8cd9fceaa5f1949d2e737380035ebdca8c9647973f550dd6" name="dunst" arch="src">
  <version epoch="0" ver="1.9.2" rel="bp156.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1369828800">- created initial package (1.0.0)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 1.1.0
  * bugfixes ( memmory leak on Spotify )
  * icons
- spec-cleaned</changelog>
  <changelog author="mimi.vx@gmail.com" date="1485000000">- removed unneded deps
- fixed bad free and memory leak by dunst_bad_free.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1500724800">- update to 1.2.0
- dropped dunst_bad_free.patch
  * always_run_script option to run script even if a notification is suppressed
  * Support for more icon file types
  * Support for raw icons
  * hide_duplicate_count option to hide the number of duplicate notifications
  * Support for per-urgency frame colours
  * markup setting for more fine-grained control over how markup is handled
  * history_ignore rule action to exclude a notification from being
  added to the history
  * Support for setting the dpi value dunst will use for font rendering
  via the Xft.dpi X resource
  * Experimental support for per-monitor dpi calculation
  * max_icon_size option to scale down icons if they exceed a certain size
  * Middle click on notifications can be used to trigger actions
  * Systemd service file, installed by default
  * %n format flag for getting progress value without any extra characters
  * Text and icons are now centred vertically
  * Notifications aren’t considered duplicate if urgency or icons differ
  * The maximum length of a notification is limited to 5000 characters
  * The frame width and color settings were moved to the global section
  as frame_width and frame_color respectively
  * Dropped Xinerama in favour of RandR, Xinerama can be enabled with
  the -force_xinerama option if needed
  * allow_markup is deprecated with markup as its replacement
  * The urgency specific command line flags have been deprecated with
  no replacement, respond to issue #328 on the bug tracker
  if you depend on them
  * Infinite loop if there are 2 configuration file sections with the same name
  * URLs with dashes and underscores in them are now parsed properly
  * Many memory leaks
  * Category based rules were applied without actually matching
  * dmenu command not parsing quoted arguments correctly
  * Icon alignment with dynamic width
  * Issue when loading configuration files with very long lines
  * ‘\n’ is no longer expanded to a newline inside notification text
  * Notification window wasn’t redrawn if obscured on systems without a compositor
  * ignore_newline now works regardless of the markup setting
  * dmenu process being left as a zombie if no option was selected
  * Crash when opening urls parsed from &lt;a href=""&gt; tags</changelog>
  <changelog author="arun@gmx.de" date="1518004800">- specfile:
  * updated copyright year
  * changed dependency gdk-2.0 to gdk-pixbuf-2.0
- update to version 1.3.1
  * Race condition resulting in the service files being empty (#488)
- changes from version 1.3.0:
  * Added
    + ellipsize option to control how long lines should be ellipsized
    when word_wrap is set to false (#374)
    + A beginning tilde of a path is now expanded to the home of the
    current user (#351)
    + The image-path hint is now respected, as GApplications send
    their icon only via this link (#447)
    + The (legacy) image_data hint is now respected (#353)
    + If dunst can't acquire the DBus name, dunst prints the PID of
    the process holding the name (#458 #460)
    + Increased accuracy of timeouts by using microseconds internally
    (#379 #291)
    + Support for specifying timeout values in milliseconds, minutes,
    hours, or days. (#379)
    + Support for HTML img tags (via context menu) (#428)
  * Fixed
    + new_icon rule being ignored on notifications that had a raw icon
    (#423)
    + Format strings being replaced recursively in some cases (#322
    [#365])
    + DBus related memory leaks (#397)
    + Crash on X11 servers with RandR support less than 1.5. (#413
    [#364])
    + Silently reading the default config file, if -conf did not
    specify a valid file (#452)
    + Notification window flickering when a notification is replaced
    (#320 #415)
    + Inaccurate timeout in some cases (#291 #379)
  * Changed
    + Transient hints are now handled (#343 #310) An additional rule
    option (match_transient and set_transient) is added to
    optionally reset the transient setting
    + HTML links are now referred to by their text in the context menu
    rather than numbers (#428)
    + icon_folders setting renamed to icon_path (#170)
    + config.def.h and config.h got merged (#371)
    + The dependency on GTK3+ has been removed. Instead of GTK3+,
    dunst now requires gdk-pixbuf which had been a transient
    dependency before. (#334 #376)
    + The _GNU_SOURCE macros had been removed to make dunst portable
    to nonGNU systems (#403)
    + Internal refactorings of the notification queue handling. (#411)
    + Dunst does now install the systemd and dbus service files into
    their proper location given by pkg-config. Use
    SERVICEDIR_(DBUS|SYSTEMD) params to overwrite them. (#463)</changelog>
  <changelog author="jengelh@inai.de" date="1518350400">- Trim filler wording from description.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1519128000">- add makefile.patch to fix service installation</changelog>
  <changelog author="avindra@opensuse.org" date="1525608000">- update to version 1.3.2
  * Fix crash when loading invalid or corrupt icon file
- minor cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="Petr Cervinka &lt;petr@cervinka.net&gt;" date="1559044800">- Update to version 1.4.0
  * Added
  - Add support to override `frame_color` via rules (#498)
  - Support for round corners (#420)
  - Ability to reference `$HOME` in icon paths with `~/` (#520)
  - Support to customize the mouse bindings (#530)
  - Command to toggle pause status (#535)
  - Ability to automatically replace similar notifications (like volume changes)
    via `stack_tag` (#552)
  - Comparison of raw icons for duplicate notifications (#571)
  - Introduce new desktop-entry filter (#470)
  - `fullscreen` rule to hide notifications when a fullscreen window is active (#472)
  - Added `skip_display` rule option to skip initial notification display, and
    include the notification in the history. (#590)
  * Fixed
  - Notification age not counting the time while the computer was suspended (#492)
  - Dunst losing always-on-top status on a window manager restart (#160)
  - Xpm icons not being recognized
  - When new notifications arrive, but display is full, important notifications don't
    have to wait for a timeout in a displayed notification (#541)
  - Dunst hanging while the context menu is open (#456)
  - Having &amp; inside a notification breaking markup (#546)
  - `&lt;I&gt; more` notifications don't occupy space anymore, if there is only a single
    notification waiting to get displayed. The notification gets displayed directly (#467)
  - Segfault when comparing icon name with a notification with a raw icon (#536)
  - Icon size can no longer be larger than the notification when a fixed width is specified (#540)
  * Changed
  - Transient notifications no longer skip history by default (#508)
  - The notification summary no longer accepts markup (#497)
  * Removed
  - Dependency on libxdg-basedir (#550)
- Update makefile.patch to be compatible with latest version
- Build and install dunstify binary, command which is completely compatible to notify-send
  and can be used alongside it, but offers more features.</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1562155200">- Update to version 1.4.1
  * max_icon_size not working with dynamic width
  * Failure to parse color strings with trailing comments in the config
  * Negative width in geometry being ignored
  * Incorrect handling of the argument terminator -- in dunstify
  * Crash when changing DPI while no notifications are displayed
  * Fullscreen status change not being detected in some cases</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1596888000">- update to 1.5.0
- refresh makefile.patch
  * min_icon_size option to automatically scale up icons to a desired value
  * vertical_alignment option to control the text/icon alignment within the notification
  * Ability to configure multiple actions for each mouse event
  * dunstctl command line control client
  * RGBA support for all color strings
  * Ability to run multiple scripts for each notification
  * ignore_dbusclose setting
  * dunstify notification client is now installed by default
  * Keyboard follow mode falls back to the monitor with the mouse if no window has keyboard focus
  * Overflow when setting a &gt;=40 minute timeout
  * Unset configuration options not falling back to default values
  * Crash when $HOME environment variable is unset
  * Lack of antialiasing with round corners enabled</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1619697600">- update to 1.6.1
- refresh makefile.patch
  * Added
  - Wayland support. Dunst now runs natively on wayland. This fixes several bugs with dunst on wayland and allows idle detection. (#781)
  - A progress bar, useful for showing volume or brightness in notifications (#775)
  - A script in contrib for using the progress bar (#791)
  - dunstctl count for showing the number of notifications (#793)
  - Expose environment variables info about the notification to scripts (#802)
  - text_icon_padding for adding padding between the notification icon and text (#810)
  * Changed
  - Dunst now installs a system-wide config in /etc/dunst/dunstrc (#798)
  - Move part of the man page to dunst(5) (#799)
  * Fixed
  - Incorrect version in Makefile
  - history_ignore flag broken when using multiple rules (#747)
  - Divide by zero in radius calculation (#750)
  - Monitor setting overriding follow_mode (#755)
  - Incorrect monitor usage when using multiple X11 screens (#762)
  - Emit signal when paused property changes (#766)
  - dunstify can pass empty appname to libnotify (#768)
  - Incorrect handling of 'do_action, close' mouse action (#778)
  * Removed
  - DUNST_COMMAND_{PAUSE,RESUME,TOGGLE} (#830)-</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1625227200">- Do not hardcode web browser
  + dunst-xdg-open-can-open-URLs-don-t-rely-on-specific-hardco.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1638878400">- Update to 1.7.2
  * release notes:
    https://github.com/dunst-project/dunst/blob/master/CHANGELOG.md
- Drop unneeded patch:
  * makefile.patch
- Drop upstreamed patch:
  * dunst-xdg-open-can-open-URLs-don-t-rely-on-specific-hardco.patch</changelog>
  <changelog author="Timothy Brown &lt;stimut@gmail.com&gt;" date="1649937600">- Update to 1.8.1
  * release notes:
    https://github.com/dunst-project/dunst/blob/master/CHANGELOG.md</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673870400">- update to 1.9.0:
  * `override_dbus_timeout` setting to override the notification timeout set
    via dbus.
  * Support notification gaps via the `gap_size` setting. Note that since
    the notifications are not separate windows, you cannot click in between the
    notifications.
  * Make `min_icon_size` and `max_icon_size` a rule for even more
    flexibility
  * The window offset is now scaled according to `scale` as well. This way
    notification stay visually in the same place on higher DPI screens.
  * For the recursive icon lookup, revert to using `min_icon_size` and
    `max_icon_size` instead of `icon_size`. `min_icon_size` is used as the size to
    look for in icon themes.
  * Recursive icon lookup is no longer experimental.
  * Recursive icon lookup is enabled in the default dunstrc. This does not
    change your settings when you have a custom dunstrc.
  * Added back the `action_name` setting that was accidentally dropped.
  * Broken `dunstctl history`.
  * Merged a few wayland fixes from mako (https://github.com/emersion/mako)
  * `follow=keyboard`: Fix regression where we don't fall back to mouse
  * Raw icons not being scaled according to icon size
  * Notifications not disappearing. For some people notifications would
    sometimes stay on screen until a new notification appeared. This should
    not happen anymore</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680004800">- update to 1.9.1:
  * zsh completion for dunst and dunstctl (#1107 and #1108)
  * dunstctl `history-clear` command to delete all notifications
    from history (#1131)
  * dunstctl `history-rm command` to remove a single notification
    from history (#1128)
  * `progress_bar_corner_radius` option for adding rounded
    corners to the progress bar (off by default) (#1119)
  * `icon_corner_radius` option for adding rounded corners to
    notification icons (#1139)
  * Make libnotify and dunstify optional in build (#1129)
  * Man page typo's and readability (#1088 and #1121)
  * Length changes not being emitted over D-Bus (#1127)
  * Crash when locking screen with swaylock on Sway (#1148)
  * Dunst using 100% in some configurations with `idle_threshold`
    turned on (#1140)</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1697025600">- update to 1.9.2:
  * Fixed various documentation issues
  * Fixed high cpu when `show_age_treshold` = -1
  * High cpu usage in some situation, often correlated with being idle</changelog>
</package>
<package pkgid="a73bf1e6ae8cde13120396ea960ab3d670be35d5d168c924992d876a18026069" name="dunst" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="bp156.2.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 1.1.0
  * bugfixes ( memmory leak on Spotify )
  * icons
- spec-cleaned</changelog>
  <changelog author="mimi.vx@gmail.com" date="1485000000">- removed unneded deps
- fixed bad free and memory leak by dunst_bad_free.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1500724800">- update to 1.2.0
- dropped dunst_bad_free.patch
  * always_run_script option to run script even if a notification is suppressed
  * Support for more icon file types
  * Support for raw icons
  * hide_duplicate_count option to hide the number of duplicate notifications
  * Support for per-urgency frame colours
  * markup setting for more fine-grained control over how markup is handled
  * history_ignore rule action to exclude a notification from being
  added to the history
  * Support for setting the dpi value dunst will use for font rendering
  via the Xft.dpi X resource
  * Experimental support for per-monitor dpi calculation
  * max_icon_size option to scale down icons if they exceed a certain size
  * Middle click on notifications can be used to trigger actions
  * Systemd service file, installed by default
  * %n format flag for getting progress value without any extra characters
  * Text and icons are now centred vertically
  * Notifications aren’t considered duplicate if urgency or icons differ
  * The maximum length of a notification is limited to 5000 characters
  * The frame width and color settings were moved to the global section
  as frame_width and frame_color respectively
  * Dropped Xinerama in favour of RandR, Xinerama can be enabled with
  the -force_xinerama option if needed
  * allow_markup is deprecated with markup as its replacement
  * The urgency specific command line flags have been deprecated with
  no replacement, respond to issue #328 on the bug tracker
  if you depend on them
  * Infinite loop if there are 2 configuration file sections with the same name
  * URLs with dashes and underscores in them are now parsed properly
  * Many memory leaks
  * Category based rules were applied without actually matching
  * dmenu command not parsing quoted arguments correctly
  * Icon alignment with dynamic width
  * Issue when loading configuration files with very long lines
  * ‘\n’ is no longer expanded to a newline inside notification text
  * Notification window wasn’t redrawn if obscured on systems without a compositor
  * ignore_newline now works regardless of the markup setting
  * dmenu process being left as a zombie if no option was selected
  * Crash when opening urls parsed from &lt;a href=""&gt; tags</changelog>
  <changelog author="arun@gmx.de" date="1518004800">- specfile:
  * updated copyright year
  * changed dependency gdk-2.0 to gdk-pixbuf-2.0
- update to version 1.3.1
  * Race condition resulting in the service files being empty (#488)
- changes from version 1.3.0:
  * Added
    + ellipsize option to control how long lines should be ellipsized
    when word_wrap is set to false (#374)
    + A beginning tilde of a path is now expanded to the home of the
    current user (#351)
    + The image-path hint is now respected, as GApplications send
    their icon only via this link (#447)
    + The (legacy) image_data hint is now respected (#353)
    + If dunst can't acquire the DBus name, dunst prints the PID of
    the process holding the name (#458 #460)
    + Increased accuracy of timeouts by using microseconds internally
    (#379 #291)
    + Support for specifying timeout values in milliseconds, minutes,
    hours, or days. (#379)
    + Support for HTML img tags (via context menu) (#428)
  * Fixed
    + new_icon rule being ignored on notifications that had a raw icon
    (#423)
    + Format strings being replaced recursively in some cases (#322
    [#365])
    + DBus related memory leaks (#397)
    + Crash on X11 servers with RandR support less than 1.5. (#413
    [#364])
    + Silently reading the default config file, if -conf did not
    specify a valid file (#452)
    + Notification window flickering when a notification is replaced
    (#320 #415)
    + Inaccurate timeout in some cases (#291 #379)
  * Changed
    + Transient hints are now handled (#343 #310) An additional rule
    option (match_transient and set_transient) is added to
    optionally reset the transient setting
    + HTML links are now referred to by their text in the context menu
    rather than numbers (#428)
    + icon_folders setting renamed to icon_path (#170)
    + config.def.h and config.h got merged (#371)
    + The dependency on GTK3+ has been removed. Instead of GTK3+,
    dunst now requires gdk-pixbuf which had been a transient
    dependency before. (#334 #376)
    + The _GNU_SOURCE macros had been removed to make dunst portable
    to nonGNU systems (#403)
    + Internal refactorings of the notification queue handling. (#411)
    + Dunst does now install the systemd and dbus service files into
    their proper location given by pkg-config. Use
    SERVICEDIR_(DBUS|SYSTEMD) params to overwrite them. (#463)</changelog>
  <changelog author="jengelh@inai.de" date="1518350400">- Trim filler wording from description.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1519128000">- add makefile.patch to fix service installation</changelog>
  <changelog author="avindra@opensuse.org" date="1525608000">- update to version 1.3.2
  * Fix crash when loading invalid or corrupt icon file
- minor cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="Petr Cervinka &lt;petr@cervinka.net&gt;" date="1559044800">- Update to version 1.4.0
  * Added
  - Add support to override `frame_color` via rules (#498)
  - Support for round corners (#420)
  - Ability to reference `$HOME` in icon paths with `~/` (#520)
  - Support to customize the mouse bindings (#530)
  - Command to toggle pause status (#535)
  - Ability to automatically replace similar notifications (like volume changes)
    via `stack_tag` (#552)
  - Comparison of raw icons for duplicate notifications (#571)
  - Introduce new desktop-entry filter (#470)
  - `fullscreen` rule to hide notifications when a fullscreen window is active (#472)
  - Added `skip_display` rule option to skip initial notification display, and
    include the notification in the history. (#590)
  * Fixed
  - Notification age not counting the time while the computer was suspended (#492)
  - Dunst losing always-on-top status on a window manager restart (#160)
  - Xpm icons not being recognized
  - When new notifications arrive, but display is full, important notifications don't
    have to wait for a timeout in a displayed notification (#541)
  - Dunst hanging while the context menu is open (#456)
  - Having &amp; inside a notification breaking markup (#546)
  - `&lt;I&gt; more` notifications don't occupy space anymore, if there is only a single
    notification waiting to get displayed. The notification gets displayed directly (#467)
  - Segfault when comparing icon name with a notification with a raw icon (#536)
  - Icon size can no longer be larger than the notification when a fixed width is specified (#540)
  * Changed
  - Transient notifications no longer skip history by default (#508)
  - The notification summary no longer accepts markup (#497)
  * Removed
  - Dependency on libxdg-basedir (#550)
- Update makefile.patch to be compatible with latest version
- Build and install dunstify binary, command which is completely compatible to notify-send
  and can be used alongside it, but offers more features.</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1562155200">- Update to version 1.4.1
  * max_icon_size not working with dynamic width
  * Failure to parse color strings with trailing comments in the config
  * Negative width in geometry being ignored
  * Incorrect handling of the argument terminator -- in dunstify
  * Crash when changing DPI while no notifications are displayed
  * Fullscreen status change not being detected in some cases</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1596888000">- update to 1.5.0
- refresh makefile.patch
  * min_icon_size option to automatically scale up icons to a desired value
  * vertical_alignment option to control the text/icon alignment within the notification
  * Ability to configure multiple actions for each mouse event
  * dunstctl command line control client
  * RGBA support for all color strings
  * Ability to run multiple scripts for each notification
  * ignore_dbusclose setting
  * dunstify notification client is now installed by default
  * Keyboard follow mode falls back to the monitor with the mouse if no window has keyboard focus
  * Overflow when setting a &gt;=40 minute timeout
  * Unset configuration options not falling back to default values
  * Crash when $HOME environment variable is unset
  * Lack of antialiasing with round corners enabled</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1619697600">- update to 1.6.1
- refresh makefile.patch
  * Added
  - Wayland support. Dunst now runs natively on wayland. This fixes several bugs with dunst on wayland and allows idle detection. (#781)
  - A progress bar, useful for showing volume or brightness in notifications (#775)
  - A script in contrib for using the progress bar (#791)
  - dunstctl count for showing the number of notifications (#793)
  - Expose environment variables info about the notification to scripts (#802)
  - text_icon_padding for adding padding between the notification icon and text (#810)
  * Changed
  - Dunst now installs a system-wide config in /etc/dunst/dunstrc (#798)
  - Move part of the man page to dunst(5) (#799)
  * Fixed
  - Incorrect version in Makefile
  - history_ignore flag broken when using multiple rules (#747)
  - Divide by zero in radius calculation (#750)
  - Monitor setting overriding follow_mode (#755)
  - Incorrect monitor usage when using multiple X11 screens (#762)
  - Emit signal when paused property changes (#766)
  - dunstify can pass empty appname to libnotify (#768)
  - Incorrect handling of 'do_action, close' mouse action (#778)
  * Removed
  - DUNST_COMMAND_{PAUSE,RESUME,TOGGLE} (#830)-</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1625227200">- Do not hardcode web browser
  + dunst-xdg-open-can-open-URLs-don-t-rely-on-specific-hardco.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1638878400">- Update to 1.7.2
  * release notes:
    https://github.com/dunst-project/dunst/blob/master/CHANGELOG.md
- Drop unneeded patch:
  * makefile.patch
- Drop upstreamed patch:
  * dunst-xdg-open-can-open-URLs-don-t-rely-on-specific-hardco.patch</changelog>
  <changelog author="Timothy Brown &lt;stimut@gmail.com&gt;" date="1649937600">- Update to 1.8.1
  * release notes:
    https://github.com/dunst-project/dunst/blob/master/CHANGELOG.md</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673870400">- update to 1.9.0:
  * `override_dbus_timeout` setting to override the notification timeout set
    via dbus.
  * Support notification gaps via the `gap_size` setting. Note that since
    the notifications are not separate windows, you cannot click in between the
    notifications.
  * Make `min_icon_size` and `max_icon_size` a rule for even more
    flexibility
  * The window offset is now scaled according to `scale` as well. This way
    notification stay visually in the same place on higher DPI screens.
  * For the recursive icon lookup, revert to using `min_icon_size` and
    `max_icon_size` instead of `icon_size`. `min_icon_size` is used as the size to
    look for in icon themes.
  * Recursive icon lookup is no longer experimental.
  * Recursive icon lookup is enabled in the default dunstrc. This does not
    change your settings when you have a custom dunstrc.
  * Added back the `action_name` setting that was accidentally dropped.
  * Broken `dunstctl history`.
  * Merged a few wayland fixes from mako (https://github.com/emersion/mako)
  * `follow=keyboard`: Fix regression where we don't fall back to mouse
  * Raw icons not being scaled according to icon size
  * Notifications not disappearing. For some people notifications would
    sometimes stay on screen until a new notification appeared. This should
    not happen anymore</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680004800">- update to 1.9.1:
  * zsh completion for dunst and dunstctl (#1107 and #1108)
  * dunstctl `history-clear` command to delete all notifications
    from history (#1131)
  * dunstctl `history-rm command` to remove a single notification
    from history (#1128)
  * `progress_bar_corner_radius` option for adding rounded
    corners to the progress bar (off by default) (#1119)
  * `icon_corner_radius` option for adding rounded corners to
    notification icons (#1139)
  * Make libnotify and dunstify optional in build (#1129)
  * Man page typo's and readability (#1088 and #1121)
  * Length changes not being emitted over D-Bus (#1127)
  * Crash when locking screen with swaylock on Sway (#1148)
  * Dunst using 100% in some configurations with `idle_threshold`
    turned on (#1140)</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1697025600">- update to 1.9.2:
  * Fixed various documentation issues
  * Fixed high cpu when `show_age_treshold` = -1
  * High cpu usage in some situation, often correlated with being idle</changelog>
</package>
<package pkgid="b05bca131c0e95364de08ab1756adad351e1e7c4d99b6df2f10f6cb0ae5ce8c4" name="easy-rsa" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="bp156.2.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1495886400">- Add special %if for SLE11 as patch tool can't rename files.
- Include upstream patches
  + f174800.patch
    Generate random serial number for all certificates
  + 29d4dee.patch
    Fixes #91 basename: invalid option -- 's'
  + b93d0a1.patch
    Spelling fixes and sentence structure improvements
  + fb4d8d8.patch
    Fix comment indicating the end of the function verify_file()
  + b75faa4.patch
    Convert README and COPYING into markdown files
- Rename openSUSE specific patch easyrsa.packaging.patch to
  easy-rsa-packaging.patch
- spec-cleaner -m (Add also SUSE copyrights)</changelog>
  <changelog author="seroton10@gmail.com" date="1496664000">- Undo removal of .md suffix on markdown documentation</changelog>
  <changelog author="seroton10@gmail.com" date="1500379200">- Include upstream patches:
  + 6436eaf.patch
    Add CN as SAN (if none requested) on server certs by default
  + e9e8e27.patch
    Moved @ValdikSS's serial randomization to sign_req</changelog>
  <changelog author="seroton10@gmail.com" date="1500897600">- Include upstream patches:
  + 534f673.patch
    Make $PWD/pki the default PKI location
- Adapted easy-rsa-packaging.patch to work with upstream patch
- Treat /etc/easy-rsa as public default config, no default vars</changelog>
  <changelog author="seroton10@gmail.com" date="1501243200">- Include upstream patches:
  + d20d2b3.patch
    Update docs and examples to fit changes in 534f673
- Adapted easy-rsa-packaging.patch to work with upstream patch</changelog>
  <changelog author="seroton10@gmail.com" date="1503489600">- Include upstream patches:
  + 4eac410.patch
    Fix string comprehension
  + a138c0d.patch
    Fix incorrect "openssl rand" usage
  + 83a1a21.patch
    Add --copy-ext option</changelog>
  <changelog author="seroton10@gmail.com" date="1508155200">- Update to version 3.0.3
- Rename easy-rsa-packaging.patch to suse-packaging.patch
- Remove obsolete upstream patches:
  * f174800.patch
  * 29d4dee.patch
  * b93d0a1.patch
  * fb4d8d8.patch
  * b75faa4.patch
  * 6436eaf.patch
  * e9e8e27.patch
  * 534f673.patch
  * d20d2b3.patch
  * 4eac410.patch
  * a138c0d.patch
  * 83a1a21.patch</changelog>
  <changelog author="astieger@suse.com" date="1508328000">- update release tarball instead of git snapshot
- add upstream signing keyring and verify source signature</changelog>
  <changelog author="seroton10@gmail.com" date="1517140800">- Upgrade to version 3.0.4
  * Remove use of egrep (#154)
  * Finally(?) fix the subjectAltName issues (really fixes #168)
- Improve RPM description</changelog>
  <changelog author="chris@computersalat.de" date="1543579200">- update to 3.0.5
  * Fix #17 &amp; #58: use AES256 for CA key
  * Also, don't use read -s, use stty -echo
  * Fix broken "nopass" option
  * Add -r to read to stop errors reported by shellcheck (and to behave)
  * remove overzealous quotes around $pkcs_opts (more SC errors)
- update and rebase suse-packaging.patch
  * fix: set_var EASYRSA in vars.example
- fix License</changelog>
  <changelog author="Tuukka Pasanen &lt;tuukka.pasanen@ilmi.fi&gt;" date="1549972800">- update to 3.0.6 (2019-02-01)
  * Certifcates that are revoked now move to a revoked subdirectory (#63)
  * EasyRSA no longer clobbers non-EASYRSA environment variables (#277)
  * More sane string checking, allowingn for commas in CN (#267)
  * Support for reasonCode in CRL (#280)
  * Better handling for capturing passphrases (#230, others)
  * Improved LibreSSL/MacOS support
  * Adds support to renew certificates up to 30 days before expiration (#286)
  - This changes previous behavior allowing for certificate creation using
    duplicate CNs.
- update and rebase suse-packaging.patch</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1606305600">- update to 3.0.8 (2020-09-09)
  * Provide --version option (#372)
  * Version information now within generated certificates like on *nix
  * Fixed issue where gen-dh overwrote existing files without warning (#373)
  * Fixed issue with ED/EC certificates were still signed by RSA (#374)
  * Added support for export-p8 (#339)
  * Clarified error message (#384)
  * 2-&gt;3 upgrade now errors and prints message when vars isn't found (#377)
  * Update OpenSSL Windows binaries to 1.1.1g
  * Reverted OpenSSL back to 1.1.0j</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1655294400">- Update to 3.0.9 (2022-05-04)
  * Upgrade OpenSSL from 1.1.0j to 1.1.1o (#405, #407)
  - We are buliding this ourselves now.
  * Fix --version so it uses EASYRSA_OPENSSL (#416)
  * Use openssl rand instead of non-POSIX mktemp (#478)
  * Fix paths with spaces (#443)
  * Correct OpenSSL version from Homebrew on macOs (#416)
  * Fix revoking a renewed certificate (Original PR #394)
  * Follow-up commit: ef22701
  * Introduce 'show-crl' (d199389)
  * Support Windows-Git 'version of bash' (#533)
  * Disallow use of single quote (') in vars file, Warning (#530)
  * Creating a CA uses x509-types/ca and COMMON (#526)
  * Prefer 'PKI/vars' over all other locations (#528)
  * Introduce 'init-pki soft' option (#197)
  * Warnings are no longer silenced by --batch (#523)
  * Improve packaging options (#510)</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1662379200">- Update to 3.1.0 (2022-05-18)
  * Introduce basic support for OpenSSL version 3 (#492)
  * Update regex in grep to be POSIX compliant (#556)
  * Introduce status reporting tools (#555 &amp; #557)
  * Display certificates using UTF8 (#551)
  * Allow certificates to be created with fixed date offset (#550)
  * Add 'verify' to verify certificate against CA (#549)
  * Add PKCS#12 alias 'friendlyName' (#544)
  * Disallow use of '--vars=FILE init-pki' (#566)
  * Support multiple IP-Addresses in SAN (#564)
  * Add option '--renew-days=NN', custom renew grace period (#557)
  * Add 'nopass' option to the 'export-pkcs' functions (#411)
  * Add support for 'busybox' (#543)
  * Add option '--tmp-dir=DIR' to declare Temp-dir (Commit f503a22)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to 3.1.1:
  * Remove command 'renewable' (#715)
  * Expand 'show-renew', include 'renewed/certs_by_serial' (#700)
  * Resolve long-standing issue with --subca-len=N (#691)
  * ++ NOTICE: Add EasyRSA-Renew-and-Revoke.md (#690)
  * Require 'openssl-easyrsa.cnf' is up to date (#695}
  * Introduce 'renew' (version 3). Only renew cert (#688)
  * Always ensure X509-types files exist (#581 #696)
  * Expand alias '--days' to all suitable options with a period (#674)
  * Introduce --keep-tmp, keep temp files for debugging (#667)
  * Introduce Option -q|--quiet, disable information output (#703)
  * Add serialNumber (OID 2.5.4.5) to DN 'org' mode (#606)
  * Support ampersand and dollar-sign in vars file (#590)
  * Introduce 'rewind-renew' (#579)
  * Expand status reports to include checking a single cert (#577)
  * Introduce 'revoke-renewed' (#547)
  * update OpenSSL for Windows to 3.0.5</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1670932800">- fix for 3.1.1:
  * add patch fix-747.patch from upstream</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1673956800">- Update to 3.1.2:
  * Command 'renew': Remove option 'nopass'
  * find_x509_types_dir(): Remove excess checks
  * Remove function find_x509_types_dir()
  * For 'init-pki hard' only, always try to create a new pki/vars file
  * Introduce global option '--notext|--no-text'
  * Minor style change
  * Introduce command 'set-pass'
  * Fix shellcheck warning for command set-pass case statement
  * cleanup(): Exit correctly for SIGINT
  * Update help: Standardise output; Improve code; Reprioritise options
  * vars.example: Add EASYRSA_NO_PASS and wrap long lines
  * Use 'unset -v', consistently
  * build-ca: Improve passphrase input mechanism
  * Remove global options '--verbose' and '--quiet' as not required
  * Remove all prerequisite code to build a safe SSL config file
  * Rename temp files to reflect the purpose
  * easyrsa_openssl(): Always set OPENSSL_CONF to EasyRSA safe SSL config
  * Replace SSL calls for serial number with function ssl_cert_serial()
  * Introduce OpenSSL only mode: No Safe SSL Config File
  * ff_date_to_cert_date(): Correct the input format for busybox date
  * Re-order easyrsa_openssl() temp-file assignment
  * Stop EASYRSA_DEBUG interfering with SSL output from subshells
  * Status reports: Recognise Expired certificates
  * New function safe_set_var(): Safe wrapper for set_var()
  * Windows, build-ca: Add input password to re-open private key
  * Renewal: General code improvements
  * cleanup(): General improvements - Create KNOWN error exit
  * build-ca: Change FATAL error to warning for old openssl-easyrsa.cnf
  * Allow --fix-offset to create post-dated certificates
  * Default settings: Make default Edwards curve ED25519
  * cleanup(): Exit with numeric error-code only
  * init-pki(): Introduce second warning before HARD removal
  * build-full: Always enable inline file creation
  * Global option '--passout' always take priority ONLY
  * Status Reports: Set 'LC_TIME=C.UTF-8', only used for reports
  * Option --fix-offset: Adjust off-by-one day
- Drop fix-747.patch</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1691323200">- Update to 3.1.5:
  * Build Update: script now supports signing and verifying
  * Automate support-file creation (Free packaging) (#964)
  * build-ca: New command option 'raw-ca', abbrevation: 'raw' (#963)
  This 'raw' method, is the most reliable way to build a CA,
    with a password, without writing the CA password to a temp-file.
    This option completely replaces both methods below:
    build-ca: New option --ca-via-stdin, use SSL -pass* argument 'stdin' (#959)
    Option '--ca-via-stdin' offers no more security than standard method.
    Easy-RSA version 3.1.4 ONLY.
    build-ca: Replace password temp-files with file-descriptors (#955)
    Using file-descriptors does not work in Windows.
    Easy-RSA version 3.1.3 ONLY.
- update and rebase suse-packaging.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697544000">- Update to 3.1.7:
  * Completely Remove Upgrade Functionality
  * Expand help to include undocumented commands
  * Forbid "default vars in the default PKI" for all commands
  * show-expire: Calculate certificate expire seconds from Database date
  * Expand help to include undocumented commands
  * New command: make-vars - Print vars.example (here-doc) to stdout
  * gen-crl: preserve existing crl.pem ownership+mode by @Tabiskabis in #1020
  * Improve vars auto load
  * Replace santize_path() and ignore Windows "security" warning
  * Improve select_vars() and source_vars()
  * sign-req: Allow the CSR DN-field order to be preserved
  * vars-file: Warn about EASYRSA_NO_VARS disabling vars-file use
  * Expand default status to include vars-file and CA status
  * verify_ssl_lib(): Minor style improvements
  * cleanup: Rename $easyrsa_error_exit to $easyrsa_exit_with_error</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1732968000">- update to 3.2.1:
  * inline: Add decimal value for cert. serial
  * Always exit with error for unknown command options
  * ntegrate Easy-RSA TLS-Key for use with 'init-pki soft'
  * easyrsa-tools.lib, show-expire: Add CA certificate to report
  * inline: OpenVPN TLS Keys inlining for TLS-AUTH, TLS-CRYPT-V1
  * easyrsa-tools.lib: OpenVPN TLS Key gen. TLS-AUTH, TLS-CRYPT-V1
  * easyrsa-tools.lib: expire_status_v2() (show-expire version 2)
  * sign-req: Require 128bit serial number
  * Move command 'verify-cert' to Tools-lib; drop 'verify' shortcut
  * Windows secure_session(): Ensure $secured_session dir is created
  * Switch to '-f' for file existence
  * inline: Move auto-inline from build_full() to sign_req()
  * gen-crl: Create additional CRL in DER format
  * self-sign: Allow Edwards Curve based keys
  * Re-enable command 'renew' (version 2): Requires EasyRSA Tools
  * bug-fix: revoke: Pass the correct certificate location
  * vars.example: Add flags for auto-SAN and X509 critical attribute
  * Global option --eku-crit: Mark X509 extendedKeyUsage as critical
  * sign-req: Add critical and pathlen details to confirmation
  * export-p12: Automatically generate inline file
  * Introduce global option --auto-san, use commonName as SAN
  * Introduce global option --san-crit, mark SAN critical
  * Introduce new global options: --ku-crit and --bc-crit
  * gen-req: Always check for existing request file
  * revoke/revoke-expired/-renewed: Keep duplicate certificate
  * revoke-expired/-renewed: Keep req/key files for resigning
  * revoke: Add abbreviations for optional 'reason'
  * build-ca: Allow use of --req-cn without batch mode
  * gen-req: Re-enable use of --req-cn
  * write: Change syntax, target as file, not directory
- update to 3.2.0:
  * Revert ca76697: Restore escape_hazard()
  * New X509 Type: 'selfsign' Internal only
  * New commands: self-sign-server and self-sign-client
  * build-ca: Command 'req', remove SSL option '-keyout'
  * Remove escape_hazard(), obsolete
  * Remove command and function display_cn(), unused
  * docs: Update EasyRSA-Renew-and-Revoke.md
  * Remove all 'renew' code; replaced by 'expire' code
  * Introduce commands: 'expire' and 'revoke-expired'
  * Keep request files [CSR] when revoking certificates
  * Restrict use of --req-cn to build-ca
  * Remove command 'display-san' (Code removed in 5a06f94)
  * Move Status Reports to 'easyrsa-tools.lib'
  * export-p12, OpenSSL v1.x: Upgrade PBE and MAC options
  * LibreSSL: Add fix for missing 'x509' option '-ext'
  * Variable heredoc expansion for SSL/Safe Config file
  * Always use here-doc version of openssl-easyrsa.cnf
  * export-p12: New command option 'legacy'. OpenSSL V3 Only
  * export-p12: Always set 'friendlyName' to file-name-base
  * As of Easy-RSA version 3.2.0-beta1, the configuration files
    vars.example, openssl-eayrsa.cnf and all files in x509-types directory
    are no longer required
  * Rename X509-type file code-signing to codeSigning
  * init-pki: Always write vars.example file to fresh PKI
  * New command 'write': Write 'legacy' files to stdout or files
  * Remove command 'make-safe-ssl': Replaced by command 'write safe-cnf'
  * New Command 'rand': Expose easyrsa_random() to the command line
  * Remove function 'set_pass_legacy()'
  * Remove command 'rewind-renew'
  * Remove command 'rebuild'
  * Remove command 'upgrade'
  * Remove EASYRSA_NO_VARS; Allow graceful use without a vars file
  * New diagnostic command 'display-cn'
  * Expand renewable certificate types to include code-signing
- attach a source to keyring</changelog>
</package>
<package pkgid="46f603bac7b515f49354005b9f900faf02418162bf7eaa988cd0d16fd7097f81" name="easy-rsa" arch="src">
  <version epoch="0" ver="3.2.1" rel="bp156.2.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1495886400">- Add special %if for SLE11 as patch tool can't rename files.
- Include upstream patches
  + f174800.patch
    Generate random serial number for all certificates
  + 29d4dee.patch
    Fixes #91 basename: invalid option -- 's'
  + b93d0a1.patch
    Spelling fixes and sentence structure improvements
  + fb4d8d8.patch
    Fix comment indicating the end of the function verify_file()
  + b75faa4.patch
    Convert README and COPYING into markdown files
- Rename openSUSE specific patch easyrsa.packaging.patch to
  easy-rsa-packaging.patch
- spec-cleaner -m (Add also SUSE copyrights)</changelog>
  <changelog author="seroton10@gmail.com" date="1496664000">- Undo removal of .md suffix on markdown documentation</changelog>
  <changelog author="seroton10@gmail.com" date="1500379200">- Include upstream patches:
  + 6436eaf.patch
    Add CN as SAN (if none requested) on server certs by default
  + e9e8e27.patch
    Moved @ValdikSS's serial randomization to sign_req</changelog>
  <changelog author="seroton10@gmail.com" date="1500897600">- Include upstream patches:
  + 534f673.patch
    Make $PWD/pki the default PKI location
- Adapted easy-rsa-packaging.patch to work with upstream patch
- Treat /etc/easy-rsa as public default config, no default vars</changelog>
  <changelog author="seroton10@gmail.com" date="1501243200">- Include upstream patches:
  + d20d2b3.patch
    Update docs and examples to fit changes in 534f673
- Adapted easy-rsa-packaging.patch to work with upstream patch</changelog>
  <changelog author="seroton10@gmail.com" date="1503489600">- Include upstream patches:
  + 4eac410.patch
    Fix string comprehension
  + a138c0d.patch
    Fix incorrect "openssl rand" usage
  + 83a1a21.patch
    Add --copy-ext option</changelog>
  <changelog author="seroton10@gmail.com" date="1508155200">- Update to version 3.0.3
- Rename easy-rsa-packaging.patch to suse-packaging.patch
- Remove obsolete upstream patches:
  * f174800.patch
  * 29d4dee.patch
  * b93d0a1.patch
  * fb4d8d8.patch
  * b75faa4.patch
  * 6436eaf.patch
  * e9e8e27.patch
  * 534f673.patch
  * d20d2b3.patch
  * 4eac410.patch
  * a138c0d.patch
  * 83a1a21.patch</changelog>
  <changelog author="astieger@suse.com" date="1508328000">- update release tarball instead of git snapshot
- add upstream signing keyring and verify source signature</changelog>
  <changelog author="seroton10@gmail.com" date="1517140800">- Upgrade to version 3.0.4
  * Remove use of egrep (#154)
  * Finally(?) fix the subjectAltName issues (really fixes #168)
- Improve RPM description</changelog>
  <changelog author="chris@computersalat.de" date="1543579200">- update to 3.0.5
  * Fix #17 &amp; #58: use AES256 for CA key
  * Also, don't use read -s, use stty -echo
  * Fix broken "nopass" option
  * Add -r to read to stop errors reported by shellcheck (and to behave)
  * remove overzealous quotes around $pkcs_opts (more SC errors)
- update and rebase suse-packaging.patch
  * fix: set_var EASYRSA in vars.example
- fix License</changelog>
  <changelog author="Tuukka Pasanen &lt;tuukka.pasanen@ilmi.fi&gt;" date="1549972800">- update to 3.0.6 (2019-02-01)
  * Certifcates that are revoked now move to a revoked subdirectory (#63)
  * EasyRSA no longer clobbers non-EASYRSA environment variables (#277)
  * More sane string checking, allowingn for commas in CN (#267)
  * Support for reasonCode in CRL (#280)
  * Better handling for capturing passphrases (#230, others)
  * Improved LibreSSL/MacOS support
  * Adds support to renew certificates up to 30 days before expiration (#286)
  - This changes previous behavior allowing for certificate creation using
    duplicate CNs.
- update and rebase suse-packaging.patch</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1606305600">- update to 3.0.8 (2020-09-09)
  * Provide --version option (#372)
  * Version information now within generated certificates like on *nix
  * Fixed issue where gen-dh overwrote existing files without warning (#373)
  * Fixed issue with ED/EC certificates were still signed by RSA (#374)
  * Added support for export-p8 (#339)
  * Clarified error message (#384)
  * 2-&gt;3 upgrade now errors and prints message when vars isn't found (#377)
  * Update OpenSSL Windows binaries to 1.1.1g
  * Reverted OpenSSL back to 1.1.0j</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1655294400">- Update to 3.0.9 (2022-05-04)
  * Upgrade OpenSSL from 1.1.0j to 1.1.1o (#405, #407)
  - We are buliding this ourselves now.
  * Fix --version so it uses EASYRSA_OPENSSL (#416)
  * Use openssl rand instead of non-POSIX mktemp (#478)
  * Fix paths with spaces (#443)
  * Correct OpenSSL version from Homebrew on macOs (#416)
  * Fix revoking a renewed certificate (Original PR #394)
  * Follow-up commit: ef22701
  * Introduce 'show-crl' (d199389)
  * Support Windows-Git 'version of bash' (#533)
  * Disallow use of single quote (') in vars file, Warning (#530)
  * Creating a CA uses x509-types/ca and COMMON (#526)
  * Prefer 'PKI/vars' over all other locations (#528)
  * Introduce 'init-pki soft' option (#197)
  * Warnings are no longer silenced by --batch (#523)
  * Improve packaging options (#510)</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1662379200">- Update to 3.1.0 (2022-05-18)
  * Introduce basic support for OpenSSL version 3 (#492)
  * Update regex in grep to be POSIX compliant (#556)
  * Introduce status reporting tools (#555 &amp; #557)
  * Display certificates using UTF8 (#551)
  * Allow certificates to be created with fixed date offset (#550)
  * Add 'verify' to verify certificate against CA (#549)
  * Add PKCS#12 alias 'friendlyName' (#544)
  * Disallow use of '--vars=FILE init-pki' (#566)
  * Support multiple IP-Addresses in SAN (#564)
  * Add option '--renew-days=NN', custom renew grace period (#557)
  * Add 'nopass' option to the 'export-pkcs' functions (#411)
  * Add support for 'busybox' (#543)
  * Add option '--tmp-dir=DIR' to declare Temp-dir (Commit f503a22)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to 3.1.1:
  * Remove command 'renewable' (#715)
  * Expand 'show-renew', include 'renewed/certs_by_serial' (#700)
  * Resolve long-standing issue with --subca-len=N (#691)
  * ++ NOTICE: Add EasyRSA-Renew-and-Revoke.md (#690)
  * Require 'openssl-easyrsa.cnf' is up to date (#695}
  * Introduce 'renew' (version 3). Only renew cert (#688)
  * Always ensure X509-types files exist (#581 #696)
  * Expand alias '--days' to all suitable options with a period (#674)
  * Introduce --keep-tmp, keep temp files for debugging (#667)
  * Introduce Option -q|--quiet, disable information output (#703)
  * Add serialNumber (OID 2.5.4.5) to DN 'org' mode (#606)
  * Support ampersand and dollar-sign in vars file (#590)
  * Introduce 'rewind-renew' (#579)
  * Expand status reports to include checking a single cert (#577)
  * Introduce 'revoke-renewed' (#547)
  * update OpenSSL for Windows to 3.0.5</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1670932800">- fix for 3.1.1:
  * add patch fix-747.patch from upstream</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1673956800">- Update to 3.1.2:
  * Command 'renew': Remove option 'nopass'
  * find_x509_types_dir(): Remove excess checks
  * Remove function find_x509_types_dir()
  * For 'init-pki hard' only, always try to create a new pki/vars file
  * Introduce global option '--notext|--no-text'
  * Minor style change
  * Introduce command 'set-pass'
  * Fix shellcheck warning for command set-pass case statement
  * cleanup(): Exit correctly for SIGINT
  * Update help: Standardise output; Improve code; Reprioritise options
  * vars.example: Add EASYRSA_NO_PASS and wrap long lines
  * Use 'unset -v', consistently
  * build-ca: Improve passphrase input mechanism
  * Remove global options '--verbose' and '--quiet' as not required
  * Remove all prerequisite code to build a safe SSL config file
  * Rename temp files to reflect the purpose
  * easyrsa_openssl(): Always set OPENSSL_CONF to EasyRSA safe SSL config
  * Replace SSL calls for serial number with function ssl_cert_serial()
  * Introduce OpenSSL only mode: No Safe SSL Config File
  * ff_date_to_cert_date(): Correct the input format for busybox date
  * Re-order easyrsa_openssl() temp-file assignment
  * Stop EASYRSA_DEBUG interfering with SSL output from subshells
  * Status reports: Recognise Expired certificates
  * New function safe_set_var(): Safe wrapper for set_var()
  * Windows, build-ca: Add input password to re-open private key
  * Renewal: General code improvements
  * cleanup(): General improvements - Create KNOWN error exit
  * build-ca: Change FATAL error to warning for old openssl-easyrsa.cnf
  * Allow --fix-offset to create post-dated certificates
  * Default settings: Make default Edwards curve ED25519
  * cleanup(): Exit with numeric error-code only
  * init-pki(): Introduce second warning before HARD removal
  * build-full: Always enable inline file creation
  * Global option '--passout' always take priority ONLY
  * Status Reports: Set 'LC_TIME=C.UTF-8', only used for reports
  * Option --fix-offset: Adjust off-by-one day
- Drop fix-747.patch</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1691323200">- Update to 3.1.5:
  * Build Update: script now supports signing and verifying
  * Automate support-file creation (Free packaging) (#964)
  * build-ca: New command option 'raw-ca', abbrevation: 'raw' (#963)
  This 'raw' method, is the most reliable way to build a CA,
    with a password, without writing the CA password to a temp-file.
    This option completely replaces both methods below:
    build-ca: New option --ca-via-stdin, use SSL -pass* argument 'stdin' (#959)
    Option '--ca-via-stdin' offers no more security than standard method.
    Easy-RSA version 3.1.4 ONLY.
    build-ca: Replace password temp-files with file-descriptors (#955)
    Using file-descriptors does not work in Windows.
    Easy-RSA version 3.1.3 ONLY.
- update and rebase suse-packaging.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697544000">- Update to 3.1.7:
  * Completely Remove Upgrade Functionality
  * Expand help to include undocumented commands
  * Forbid "default vars in the default PKI" for all commands
  * show-expire: Calculate certificate expire seconds from Database date
  * Expand help to include undocumented commands
  * New command: make-vars - Print vars.example (here-doc) to stdout
  * gen-crl: preserve existing crl.pem ownership+mode by @Tabiskabis in #1020
  * Improve vars auto load
  * Replace santize_path() and ignore Windows "security" warning
  * Improve select_vars() and source_vars()
  * sign-req: Allow the CSR DN-field order to be preserved
  * vars-file: Warn about EASYRSA_NO_VARS disabling vars-file use
  * Expand default status to include vars-file and CA status
  * verify_ssl_lib(): Minor style improvements
  * cleanup: Rename $easyrsa_error_exit to $easyrsa_exit_with_error</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1732968000">- update to 3.2.1:
  * inline: Add decimal value for cert. serial
  * Always exit with error for unknown command options
  * ntegrate Easy-RSA TLS-Key for use with 'init-pki soft'
  * easyrsa-tools.lib, show-expire: Add CA certificate to report
  * inline: OpenVPN TLS Keys inlining for TLS-AUTH, TLS-CRYPT-V1
  * easyrsa-tools.lib: OpenVPN TLS Key gen. TLS-AUTH, TLS-CRYPT-V1
  * easyrsa-tools.lib: expire_status_v2() (show-expire version 2)
  * sign-req: Require 128bit serial number
  * Move command 'verify-cert' to Tools-lib; drop 'verify' shortcut
  * Windows secure_session(): Ensure $secured_session dir is created
  * Switch to '-f' for file existence
  * inline: Move auto-inline from build_full() to sign_req()
  * gen-crl: Create additional CRL in DER format
  * self-sign: Allow Edwards Curve based keys
  * Re-enable command 'renew' (version 2): Requires EasyRSA Tools
  * bug-fix: revoke: Pass the correct certificate location
  * vars.example: Add flags for auto-SAN and X509 critical attribute
  * Global option --eku-crit: Mark X509 extendedKeyUsage as critical
  * sign-req: Add critical and pathlen details to confirmation
  * export-p12: Automatically generate inline file
  * Introduce global option --auto-san, use commonName as SAN
  * Introduce global option --san-crit, mark SAN critical
  * Introduce new global options: --ku-crit and --bc-crit
  * gen-req: Always check for existing request file
  * revoke/revoke-expired/-renewed: Keep duplicate certificate
  * revoke-expired/-renewed: Keep req/key files for resigning
  * revoke: Add abbreviations for optional 'reason'
  * build-ca: Allow use of --req-cn without batch mode
  * gen-req: Re-enable use of --req-cn
  * write: Change syntax, target as file, not directory
- update to 3.2.0:
  * Revert ca76697: Restore escape_hazard()
  * New X509 Type: 'selfsign' Internal only
  * New commands: self-sign-server and self-sign-client
  * build-ca: Command 'req', remove SSL option '-keyout'
  * Remove escape_hazard(), obsolete
  * Remove command and function display_cn(), unused
  * docs: Update EasyRSA-Renew-and-Revoke.md
  * Remove all 'renew' code; replaced by 'expire' code
  * Introduce commands: 'expire' and 'revoke-expired'
  * Keep request files [CSR] when revoking certificates
  * Restrict use of --req-cn to build-ca
  * Remove command 'display-san' (Code removed in 5a06f94)
  * Move Status Reports to 'easyrsa-tools.lib'
  * export-p12, OpenSSL v1.x: Upgrade PBE and MAC options
  * LibreSSL: Add fix for missing 'x509' option '-ext'
  * Variable heredoc expansion for SSL/Safe Config file
  * Always use here-doc version of openssl-easyrsa.cnf
  * export-p12: New command option 'legacy'. OpenSSL V3 Only
  * export-p12: Always set 'friendlyName' to file-name-base
  * As of Easy-RSA version 3.2.0-beta1, the configuration files
    vars.example, openssl-eayrsa.cnf and all files in x509-types directory
    are no longer required
  * Rename X509-type file code-signing to codeSigning
  * init-pki: Always write vars.example file to fresh PKI
  * New command 'write': Write 'legacy' files to stdout or files
  * Remove command 'make-safe-ssl': Replaced by command 'write safe-cnf'
  * New Command 'rand': Expose easyrsa_random() to the command line
  * Remove function 'set_pass_legacy()'
  * Remove command 'rewind-renew'
  * Remove command 'rebuild'
  * Remove command 'upgrade'
  * Remove EASYRSA_NO_VARS; Allow graceful use without a vars file
  * New diagnostic command 'display-cn'
  * Expand renewable certificate types to include code-signing
- attach a source to keyring</changelog>
</package>
<package pkgid="36c3e9f6c7f51883f8ba618c1991ebad34aea326851010b890b3388554978f20" name="easy-rsa" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="bp156.2.6.1"/>
  <changelog author="seroton10@gmail.com" date="1496664000">- Undo removal of .md suffix on markdown documentation</changelog>
  <changelog author="seroton10@gmail.com" date="1500379200">- Include upstream patches:
  + 6436eaf.patch
    Add CN as SAN (if none requested) on server certs by default
  + e9e8e27.patch
    Moved @ValdikSS's serial randomization to sign_req</changelog>
  <changelog author="seroton10@gmail.com" date="1500897600">- Include upstream patches:
  + 534f673.patch
    Make $PWD/pki the default PKI location
- Adapted easy-rsa-packaging.patch to work with upstream patch
- Treat /etc/easy-rsa as public default config, no default vars</changelog>
  <changelog author="seroton10@gmail.com" date="1501243200">- Include upstream patches:
  + d20d2b3.patch
    Update docs and examples to fit changes in 534f673
- Adapted easy-rsa-packaging.patch to work with upstream patch</changelog>
  <changelog author="seroton10@gmail.com" date="1503489600">- Include upstream patches:
  + 4eac410.patch
    Fix string comprehension
  + a138c0d.patch
    Fix incorrect "openssl rand" usage
  + 83a1a21.patch
    Add --copy-ext option</changelog>
  <changelog author="seroton10@gmail.com" date="1508155200">- Update to version 3.0.3
- Rename easy-rsa-packaging.patch to suse-packaging.patch
- Remove obsolete upstream patches:
  * f174800.patch
  * 29d4dee.patch
  * b93d0a1.patch
  * fb4d8d8.patch
  * b75faa4.patch
  * 6436eaf.patch
  * e9e8e27.patch
  * 534f673.patch
  * d20d2b3.patch
  * 4eac410.patch
  * a138c0d.patch
  * 83a1a21.patch</changelog>
  <changelog author="astieger@suse.com" date="1508328000">- update release tarball instead of git snapshot
- add upstream signing keyring and verify source signature</changelog>
  <changelog author="seroton10@gmail.com" date="1517140800">- Upgrade to version 3.0.4
  * Remove use of egrep (#154)
  * Finally(?) fix the subjectAltName issues (really fixes #168)
- Improve RPM description</changelog>
  <changelog author="chris@computersalat.de" date="1543579200">- update to 3.0.5
  * Fix #17 &amp; #58: use AES256 for CA key
  * Also, don't use read -s, use stty -echo
  * Fix broken "nopass" option
  * Add -r to read to stop errors reported by shellcheck (and to behave)
  * remove overzealous quotes around $pkcs_opts (more SC errors)
- update and rebase suse-packaging.patch
  * fix: set_var EASYRSA in vars.example
- fix License</changelog>
  <changelog author="Tuukka Pasanen &lt;tuukka.pasanen@ilmi.fi&gt;" date="1549972800">- update to 3.0.6 (2019-02-01)
  * Certifcates that are revoked now move to a revoked subdirectory (#63)
  * EasyRSA no longer clobbers non-EASYRSA environment variables (#277)
  * More sane string checking, allowingn for commas in CN (#267)
  * Support for reasonCode in CRL (#280)
  * Better handling for capturing passphrases (#230, others)
  * Improved LibreSSL/MacOS support
  * Adds support to renew certificates up to 30 days before expiration (#286)
  - This changes previous behavior allowing for certificate creation using
    duplicate CNs.
- update and rebase suse-packaging.patch</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1606305600">- update to 3.0.8 (2020-09-09)
  * Provide --version option (#372)
  * Version information now within generated certificates like on *nix
  * Fixed issue where gen-dh overwrote existing files without warning (#373)
  * Fixed issue with ED/EC certificates were still signed by RSA (#374)
  * Added support for export-p8 (#339)
  * Clarified error message (#384)
  * 2-&gt;3 upgrade now errors and prints message when vars isn't found (#377)
  * Update OpenSSL Windows binaries to 1.1.1g
  * Reverted OpenSSL back to 1.1.0j</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1655294400">- Update to 3.0.9 (2022-05-04)
  * Upgrade OpenSSL from 1.1.0j to 1.1.1o (#405, #407)
  - We are buliding this ourselves now.
  * Fix --version so it uses EASYRSA_OPENSSL (#416)
  * Use openssl rand instead of non-POSIX mktemp (#478)
  * Fix paths with spaces (#443)
  * Correct OpenSSL version from Homebrew on macOs (#416)
  * Fix revoking a renewed certificate (Original PR #394)
  * Follow-up commit: ef22701
  * Introduce 'show-crl' (d199389)
  * Support Windows-Git 'version of bash' (#533)
  * Disallow use of single quote (') in vars file, Warning (#530)
  * Creating a CA uses x509-types/ca and COMMON (#526)
  * Prefer 'PKI/vars' over all other locations (#528)
  * Introduce 'init-pki soft' option (#197)
  * Warnings are no longer silenced by --batch (#523)
  * Improve packaging options (#510)</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1662379200">- Update to 3.1.0 (2022-05-18)
  * Introduce basic support for OpenSSL version 3 (#492)
  * Update regex in grep to be POSIX compliant (#556)
  * Introduce status reporting tools (#555 &amp; #557)
  * Display certificates using UTF8 (#551)
  * Allow certificates to be created with fixed date offset (#550)
  * Add 'verify' to verify certificate against CA (#549)
  * Add PKCS#12 alias 'friendlyName' (#544)
  * Disallow use of '--vars=FILE init-pki' (#566)
  * Support multiple IP-Addresses in SAN (#564)
  * Add option '--renew-days=NN', custom renew grace period (#557)
  * Add 'nopass' option to the 'export-pkcs' functions (#411)
  * Add support for 'busybox' (#543)
  * Add option '--tmp-dir=DIR' to declare Temp-dir (Commit f503a22)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to 3.1.1:
  * Remove command 'renewable' (#715)
  * Expand 'show-renew', include 'renewed/certs_by_serial' (#700)
  * Resolve long-standing issue with --subca-len=N (#691)
  * ++ NOTICE: Add EasyRSA-Renew-and-Revoke.md (#690)
  * Require 'openssl-easyrsa.cnf' is up to date (#695}
  * Introduce 'renew' (version 3). Only renew cert (#688)
  * Always ensure X509-types files exist (#581 #696)
  * Expand alias '--days' to all suitable options with a period (#674)
  * Introduce --keep-tmp, keep temp files for debugging (#667)
  * Introduce Option -q|--quiet, disable information output (#703)
  * Add serialNumber (OID 2.5.4.5) to DN 'org' mode (#606)
  * Support ampersand and dollar-sign in vars file (#590)
  * Introduce 'rewind-renew' (#579)
  * Expand status reports to include checking a single cert (#577)
  * Introduce 'revoke-renewed' (#547)
  * update OpenSSL for Windows to 3.0.5</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1670932800">- fix for 3.1.1:
  * add patch fix-747.patch from upstream</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1673956800">- Update to 3.1.2:
  * Command 'renew': Remove option 'nopass'
  * find_x509_types_dir(): Remove excess checks
  * Remove function find_x509_types_dir()
  * For 'init-pki hard' only, always try to create a new pki/vars file
  * Introduce global option '--notext|--no-text'
  * Minor style change
  * Introduce command 'set-pass'
  * Fix shellcheck warning for command set-pass case statement
  * cleanup(): Exit correctly for SIGINT
  * Update help: Standardise output; Improve code; Reprioritise options
  * vars.example: Add EASYRSA_NO_PASS and wrap long lines
  * Use 'unset -v', consistently
  * build-ca: Improve passphrase input mechanism
  * Remove global options '--verbose' and '--quiet' as not required
  * Remove all prerequisite code to build a safe SSL config file
  * Rename temp files to reflect the purpose
  * easyrsa_openssl(): Always set OPENSSL_CONF to EasyRSA safe SSL config
  * Replace SSL calls for serial number with function ssl_cert_serial()
  * Introduce OpenSSL only mode: No Safe SSL Config File
  * ff_date_to_cert_date(): Correct the input format for busybox date
  * Re-order easyrsa_openssl() temp-file assignment
  * Stop EASYRSA_DEBUG interfering with SSL output from subshells
  * Status reports: Recognise Expired certificates
  * New function safe_set_var(): Safe wrapper for set_var()
  * Windows, build-ca: Add input password to re-open private key
  * Renewal: General code improvements
  * cleanup(): General improvements - Create KNOWN error exit
  * build-ca: Change FATAL error to warning for old openssl-easyrsa.cnf
  * Allow --fix-offset to create post-dated certificates
  * Default settings: Make default Edwards curve ED25519
  * cleanup(): Exit with numeric error-code only
  * init-pki(): Introduce second warning before HARD removal
  * build-full: Always enable inline file creation
  * Global option '--passout' always take priority ONLY
  * Status Reports: Set 'LC_TIME=C.UTF-8', only used for reports
  * Option --fix-offset: Adjust off-by-one day
- Drop fix-747.patch</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1691323200">- Update to 3.1.5:
  * Build Update: script now supports signing and verifying
  * Automate support-file creation (Free packaging) (#964)
  * build-ca: New command option 'raw-ca', abbrevation: 'raw' (#963)
  This 'raw' method, is the most reliable way to build a CA,
    with a password, without writing the CA password to a temp-file.
    This option completely replaces both methods below:
    build-ca: New option --ca-via-stdin, use SSL -pass* argument 'stdin' (#959)
    Option '--ca-via-stdin' offers no more security than standard method.
    Easy-RSA version 3.1.4 ONLY.
    build-ca: Replace password temp-files with file-descriptors (#955)
    Using file-descriptors does not work in Windows.
    Easy-RSA version 3.1.3 ONLY.
- update and rebase suse-packaging.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697544000">- Update to 3.1.7:
  * Completely Remove Upgrade Functionality
  * Expand help to include undocumented commands
  * Forbid "default vars in the default PKI" for all commands
  * show-expire: Calculate certificate expire seconds from Database date
  * Expand help to include undocumented commands
  * New command: make-vars - Print vars.example (here-doc) to stdout
  * gen-crl: preserve existing crl.pem ownership+mode by @Tabiskabis in #1020
  * Improve vars auto load
  * Replace santize_path() and ignore Windows "security" warning
  * Improve select_vars() and source_vars()
  * sign-req: Allow the CSR DN-field order to be preserved
  * vars-file: Warn about EASYRSA_NO_VARS disabling vars-file use
  * Expand default status to include vars-file and CA status
  * verify_ssl_lib(): Minor style improvements
  * cleanup: Rename $easyrsa_error_exit to $easyrsa_exit_with_error</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1732968000">- update to 3.2.1:
  * inline: Add decimal value for cert. serial
  * Always exit with error for unknown command options
  * ntegrate Easy-RSA TLS-Key for use with 'init-pki soft'
  * easyrsa-tools.lib, show-expire: Add CA certificate to report
  * inline: OpenVPN TLS Keys inlining for TLS-AUTH, TLS-CRYPT-V1
  * easyrsa-tools.lib: OpenVPN TLS Key gen. TLS-AUTH, TLS-CRYPT-V1
  * easyrsa-tools.lib: expire_status_v2() (show-expire version 2)
  * sign-req: Require 128bit serial number
  * Move command 'verify-cert' to Tools-lib; drop 'verify' shortcut
  * Windows secure_session(): Ensure $secured_session dir is created
  * Switch to '-f' for file existence
  * inline: Move auto-inline from build_full() to sign_req()
  * gen-crl: Create additional CRL in DER format
  * self-sign: Allow Edwards Curve based keys
  * Re-enable command 'renew' (version 2): Requires EasyRSA Tools
  * bug-fix: revoke: Pass the correct certificate location
  * vars.example: Add flags for auto-SAN and X509 critical attribute
  * Global option --eku-crit: Mark X509 extendedKeyUsage as critical
  * sign-req: Add critical and pathlen details to confirmation
  * export-p12: Automatically generate inline file
  * Introduce global option --auto-san, use commonName as SAN
  * Introduce global option --san-crit, mark SAN critical
  * Introduce new global options: --ku-crit and --bc-crit
  * gen-req: Always check for existing request file
  * revoke/revoke-expired/-renewed: Keep duplicate certificate
  * revoke-expired/-renewed: Keep req/key files for resigning
  * revoke: Add abbreviations for optional 'reason'
  * build-ca: Allow use of --req-cn without batch mode
  * gen-req: Re-enable use of --req-cn
  * write: Change syntax, target as file, not directory
- update to 3.2.0:
  * Revert ca76697: Restore escape_hazard()
  * New X509 Type: 'selfsign' Internal only
  * New commands: self-sign-server and self-sign-client
  * build-ca: Command 'req', remove SSL option '-keyout'
  * Remove escape_hazard(), obsolete
  * Remove command and function display_cn(), unused
  * docs: Update EasyRSA-Renew-and-Revoke.md
  * Remove all 'renew' code; replaced by 'expire' code
  * Introduce commands: 'expire' and 'revoke-expired'
  * Keep request files [CSR] when revoking certificates
  * Restrict use of --req-cn to build-ca
  * Remove command 'display-san' (Code removed in 5a06f94)
  * Move Status Reports to 'easyrsa-tools.lib'
  * export-p12, OpenSSL v1.x: Upgrade PBE and MAC options
  * LibreSSL: Add fix for missing 'x509' option '-ext'
  * Variable heredoc expansion for SSL/Safe Config file
  * Always use here-doc version of openssl-easyrsa.cnf
  * export-p12: New command option 'legacy'. OpenSSL V3 Only
  * export-p12: Always set 'friendlyName' to file-name-base
  * As of Easy-RSA version 3.2.0-beta1, the configuration files
    vars.example, openssl-eayrsa.cnf and all files in x509-types directory
    are no longer required
  * Rename X509-type file code-signing to codeSigning
  * init-pki: Always write vars.example file to fresh PKI
  * New command 'write': Write 'legacy' files to stdout or files
  * Remove command 'make-safe-ssl': Replaced by command 'write safe-cnf'
  * New Command 'rand': Expose easyrsa_random() to the command line
  * Remove function 'set_pass_legacy()'
  * Remove command 'rewind-renew'
  * Remove command 'rebuild'
  * Remove command 'upgrade'
  * Remove EASYRSA_NO_VARS; Allow graceful use without a vars file
  * New diagnostic command 'display-cn'
  * Expand renewable certificate types to include code-signing
- attach a source to keyring</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1738411200">- update to 3.2.2:
  * Remove redundant file: index.txt.attr
  * sign-req: Allow custom X509 Types
  * Add LibreSSL version 4 to supported SSL Libraries
  * Revoke remove private inline
  * Easyrsa disable inline
  * easyrsa-tools.lib: renew SAN, remove excess word 'Address'
  * easyrsa-tls.lib: renew, make sed regex for 'IP Address' greedy
  * Show expire allow zero days
  * easyrsa-tools.lib: New command 'renew ca'
  * Improve CRL expiration details
  * Tools move to easyrsa3
  * vars.example: Remove $EASYRSA_PKI
  * Introduce new command revoke-issued
  * Bugfix renew ca and renew
  * Always use locate_support_files() after secure_session()
  * revoke: Make check for conflicting files less intrusive
  * Forbid a self-signed certificate from being expired/renewed/revoked
  * V321 minor final
  * op-test.sh: Disable download ossl3 and shellcheck binaries
  * Revert: Do not remove index.txt.attr
  * Fold easyrsa-tools.lib into easyrsa</changelog>
</package>
<package pkgid="fd368fa0fcc05e213c57f7c7f6a4a8d450e3c659e87b5edf25bb167ddc49f9cf" name="easy-rsa" arch="src">
  <version epoch="0" ver="3.2.2" rel="bp156.2.6.1"/>
  <changelog author="seroton10@gmail.com" date="1496664000">- Undo removal of .md suffix on markdown documentation</changelog>
  <changelog author="seroton10@gmail.com" date="1500379200">- Include upstream patches:
  + 6436eaf.patch
    Add CN as SAN (if none requested) on server certs by default
  + e9e8e27.patch
    Moved @ValdikSS's serial randomization to sign_req</changelog>
  <changelog author="seroton10@gmail.com" date="1500897600">- Include upstream patches:
  + 534f673.patch
    Make $PWD/pki the default PKI location
- Adapted easy-rsa-packaging.patch to work with upstream patch
- Treat /etc/easy-rsa as public default config, no default vars</changelog>
  <changelog author="seroton10@gmail.com" date="1501243200">- Include upstream patches:
  + d20d2b3.patch
    Update docs and examples to fit changes in 534f673
- Adapted easy-rsa-packaging.patch to work with upstream patch</changelog>
  <changelog author="seroton10@gmail.com" date="1503489600">- Include upstream patches:
  + 4eac410.patch
    Fix string comprehension
  + a138c0d.patch
    Fix incorrect "openssl rand" usage
  + 83a1a21.patch
    Add --copy-ext option</changelog>
  <changelog author="seroton10@gmail.com" date="1508155200">- Update to version 3.0.3
- Rename easy-rsa-packaging.patch to suse-packaging.patch
- Remove obsolete upstream patches:
  * f174800.patch
  * 29d4dee.patch
  * b93d0a1.patch
  * fb4d8d8.patch
  * b75faa4.patch
  * 6436eaf.patch
  * e9e8e27.patch
  * 534f673.patch
  * d20d2b3.patch
  * 4eac410.patch
  * a138c0d.patch
  * 83a1a21.patch</changelog>
  <changelog author="astieger@suse.com" date="1508328000">- update release tarball instead of git snapshot
- add upstream signing keyring and verify source signature</changelog>
  <changelog author="seroton10@gmail.com" date="1517140800">- Upgrade to version 3.0.4
  * Remove use of egrep (#154)
  * Finally(?) fix the subjectAltName issues (really fixes #168)
- Improve RPM description</changelog>
  <changelog author="chris@computersalat.de" date="1543579200">- update to 3.0.5
  * Fix #17 &amp; #58: use AES256 for CA key
  * Also, don't use read -s, use stty -echo
  * Fix broken "nopass" option
  * Add -r to read to stop errors reported by shellcheck (and to behave)
  * remove overzealous quotes around $pkcs_opts (more SC errors)
- update and rebase suse-packaging.patch
  * fix: set_var EASYRSA in vars.example
- fix License</changelog>
  <changelog author="Tuukka Pasanen &lt;tuukka.pasanen@ilmi.fi&gt;" date="1549972800">- update to 3.0.6 (2019-02-01)
  * Certifcates that are revoked now move to a revoked subdirectory (#63)
  * EasyRSA no longer clobbers non-EASYRSA environment variables (#277)
  * More sane string checking, allowingn for commas in CN (#267)
  * Support for reasonCode in CRL (#280)
  * Better handling for capturing passphrases (#230, others)
  * Improved LibreSSL/MacOS support
  * Adds support to renew certificates up to 30 days before expiration (#286)
  - This changes previous behavior allowing for certificate creation using
    duplicate CNs.
- update and rebase suse-packaging.patch</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1606305600">- update to 3.0.8 (2020-09-09)
  * Provide --version option (#372)
  * Version information now within generated certificates like on *nix
  * Fixed issue where gen-dh overwrote existing files without warning (#373)
  * Fixed issue with ED/EC certificates were still signed by RSA (#374)
  * Added support for export-p8 (#339)
  * Clarified error message (#384)
  * 2-&gt;3 upgrade now errors and prints message when vars isn't found (#377)
  * Update OpenSSL Windows binaries to 1.1.1g
  * Reverted OpenSSL back to 1.1.0j</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1655294400">- Update to 3.0.9 (2022-05-04)
  * Upgrade OpenSSL from 1.1.0j to 1.1.1o (#405, #407)
  - We are buliding this ourselves now.
  * Fix --version so it uses EASYRSA_OPENSSL (#416)
  * Use openssl rand instead of non-POSIX mktemp (#478)
  * Fix paths with spaces (#443)
  * Correct OpenSSL version from Homebrew on macOs (#416)
  * Fix revoking a renewed certificate (Original PR #394)
  * Follow-up commit: ef22701
  * Introduce 'show-crl' (d199389)
  * Support Windows-Git 'version of bash' (#533)
  * Disallow use of single quote (') in vars file, Warning (#530)
  * Creating a CA uses x509-types/ca and COMMON (#526)
  * Prefer 'PKI/vars' over all other locations (#528)
  * Introduce 'init-pki soft' option (#197)
  * Warnings are no longer silenced by --batch (#523)
  * Improve packaging options (#510)</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1662379200">- Update to 3.1.0 (2022-05-18)
  * Introduce basic support for OpenSSL version 3 (#492)
  * Update regex in grep to be POSIX compliant (#556)
  * Introduce status reporting tools (#555 &amp; #557)
  * Display certificates using UTF8 (#551)
  * Allow certificates to be created with fixed date offset (#550)
  * Add 'verify' to verify certificate against CA (#549)
  * Add PKCS#12 alias 'friendlyName' (#544)
  * Disallow use of '--vars=FILE init-pki' (#566)
  * Support multiple IP-Addresses in SAN (#564)
  * Add option '--renew-days=NN', custom renew grace period (#557)
  * Add 'nopass' option to the 'export-pkcs' functions (#411)
  * Add support for 'busybox' (#543)
  * Add option '--tmp-dir=DIR' to declare Temp-dir (Commit f503a22)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to 3.1.1:
  * Remove command 'renewable' (#715)
  * Expand 'show-renew', include 'renewed/certs_by_serial' (#700)
  * Resolve long-standing issue with --subca-len=N (#691)
  * ++ NOTICE: Add EasyRSA-Renew-and-Revoke.md (#690)
  * Require 'openssl-easyrsa.cnf' is up to date (#695}
  * Introduce 'renew' (version 3). Only renew cert (#688)
  * Always ensure X509-types files exist (#581 #696)
  * Expand alias '--days' to all suitable options with a period (#674)
  * Introduce --keep-tmp, keep temp files for debugging (#667)
  * Introduce Option -q|--quiet, disable information output (#703)
  * Add serialNumber (OID 2.5.4.5) to DN 'org' mode (#606)
  * Support ampersand and dollar-sign in vars file (#590)
  * Introduce 'rewind-renew' (#579)
  * Expand status reports to include checking a single cert (#577)
  * Introduce 'revoke-renewed' (#547)
  * update OpenSSL for Windows to 3.0.5</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1670932800">- fix for 3.1.1:
  * add patch fix-747.patch from upstream</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1673956800">- Update to 3.1.2:
  * Command 'renew': Remove option 'nopass'
  * find_x509_types_dir(): Remove excess checks
  * Remove function find_x509_types_dir()
  * For 'init-pki hard' only, always try to create a new pki/vars file
  * Introduce global option '--notext|--no-text'
  * Minor style change
  * Introduce command 'set-pass'
  * Fix shellcheck warning for command set-pass case statement
  * cleanup(): Exit correctly for SIGINT
  * Update help: Standardise output; Improve code; Reprioritise options
  * vars.example: Add EASYRSA_NO_PASS and wrap long lines
  * Use 'unset -v', consistently
  * build-ca: Improve passphrase input mechanism
  * Remove global options '--verbose' and '--quiet' as not required
  * Remove all prerequisite code to build a safe SSL config file
  * Rename temp files to reflect the purpose
  * easyrsa_openssl(): Always set OPENSSL_CONF to EasyRSA safe SSL config
  * Replace SSL calls for serial number with function ssl_cert_serial()
  * Introduce OpenSSL only mode: No Safe SSL Config File
  * ff_date_to_cert_date(): Correct the input format for busybox date
  * Re-order easyrsa_openssl() temp-file assignment
  * Stop EASYRSA_DEBUG interfering with SSL output from subshells
  * Status reports: Recognise Expired certificates
  * New function safe_set_var(): Safe wrapper for set_var()
  * Windows, build-ca: Add input password to re-open private key
  * Renewal: General code improvements
  * cleanup(): General improvements - Create KNOWN error exit
  * build-ca: Change FATAL error to warning for old openssl-easyrsa.cnf
  * Allow --fix-offset to create post-dated certificates
  * Default settings: Make default Edwards curve ED25519
  * cleanup(): Exit with numeric error-code only
  * init-pki(): Introduce second warning before HARD removal
  * build-full: Always enable inline file creation
  * Global option '--passout' always take priority ONLY
  * Status Reports: Set 'LC_TIME=C.UTF-8', only used for reports
  * Option --fix-offset: Adjust off-by-one day
- Drop fix-747.patch</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1691323200">- Update to 3.1.5:
  * Build Update: script now supports signing and verifying
  * Automate support-file creation (Free packaging) (#964)
  * build-ca: New command option 'raw-ca', abbrevation: 'raw' (#963)
  This 'raw' method, is the most reliable way to build a CA,
    with a password, without writing the CA password to a temp-file.
    This option completely replaces both methods below:
    build-ca: New option --ca-via-stdin, use SSL -pass* argument 'stdin' (#959)
    Option '--ca-via-stdin' offers no more security than standard method.
    Easy-RSA version 3.1.4 ONLY.
    build-ca: Replace password temp-files with file-descriptors (#955)
    Using file-descriptors does not work in Windows.
    Easy-RSA version 3.1.3 ONLY.
- update and rebase suse-packaging.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697544000">- Update to 3.1.7:
  * Completely Remove Upgrade Functionality
  * Expand help to include undocumented commands
  * Forbid "default vars in the default PKI" for all commands
  * show-expire: Calculate certificate expire seconds from Database date
  * Expand help to include undocumented commands
  * New command: make-vars - Print vars.example (here-doc) to stdout
  * gen-crl: preserve existing crl.pem ownership+mode by @Tabiskabis in #1020
  * Improve vars auto load
  * Replace santize_path() and ignore Windows "security" warning
  * Improve select_vars() and source_vars()
  * sign-req: Allow the CSR DN-field order to be preserved
  * vars-file: Warn about EASYRSA_NO_VARS disabling vars-file use
  * Expand default status to include vars-file and CA status
  * verify_ssl_lib(): Minor style improvements
  * cleanup: Rename $easyrsa_error_exit to $easyrsa_exit_with_error</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1732968000">- update to 3.2.1:
  * inline: Add decimal value for cert. serial
  * Always exit with error for unknown command options
  * ntegrate Easy-RSA TLS-Key for use with 'init-pki soft'
  * easyrsa-tools.lib, show-expire: Add CA certificate to report
  * inline: OpenVPN TLS Keys inlining for TLS-AUTH, TLS-CRYPT-V1
  * easyrsa-tools.lib: OpenVPN TLS Key gen. TLS-AUTH, TLS-CRYPT-V1
  * easyrsa-tools.lib: expire_status_v2() (show-expire version 2)
  * sign-req: Require 128bit serial number
  * Move command 'verify-cert' to Tools-lib; drop 'verify' shortcut
  * Windows secure_session(): Ensure $secured_session dir is created
  * Switch to '-f' for file existence
  * inline: Move auto-inline from build_full() to sign_req()
  * gen-crl: Create additional CRL in DER format
  * self-sign: Allow Edwards Curve based keys
  * Re-enable command 'renew' (version 2): Requires EasyRSA Tools
  * bug-fix: revoke: Pass the correct certificate location
  * vars.example: Add flags for auto-SAN and X509 critical attribute
  * Global option --eku-crit: Mark X509 extendedKeyUsage as critical
  * sign-req: Add critical and pathlen details to confirmation
  * export-p12: Automatically generate inline file
  * Introduce global option --auto-san, use commonName as SAN
  * Introduce global option --san-crit, mark SAN critical
  * Introduce new global options: --ku-crit and --bc-crit
  * gen-req: Always check for existing request file
  * revoke/revoke-expired/-renewed: Keep duplicate certificate
  * revoke-expired/-renewed: Keep req/key files for resigning
  * revoke: Add abbreviations for optional 'reason'
  * build-ca: Allow use of --req-cn without batch mode
  * gen-req: Re-enable use of --req-cn
  * write: Change syntax, target as file, not directory
- update to 3.2.0:
  * Revert ca76697: Restore escape_hazard()
  * New X509 Type: 'selfsign' Internal only
  * New commands: self-sign-server and self-sign-client
  * build-ca: Command 'req', remove SSL option '-keyout'
  * Remove escape_hazard(), obsolete
  * Remove command and function display_cn(), unused
  * docs: Update EasyRSA-Renew-and-Revoke.md
  * Remove all 'renew' code; replaced by 'expire' code
  * Introduce commands: 'expire' and 'revoke-expired'
  * Keep request files [CSR] when revoking certificates
  * Restrict use of --req-cn to build-ca
  * Remove command 'display-san' (Code removed in 5a06f94)
  * Move Status Reports to 'easyrsa-tools.lib'
  * export-p12, OpenSSL v1.x: Upgrade PBE and MAC options
  * LibreSSL: Add fix for missing 'x509' option '-ext'
  * Variable heredoc expansion for SSL/Safe Config file
  * Always use here-doc version of openssl-easyrsa.cnf
  * export-p12: New command option 'legacy'. OpenSSL V3 Only
  * export-p12: Always set 'friendlyName' to file-name-base
  * As of Easy-RSA version 3.2.0-beta1, the configuration files
    vars.example, openssl-eayrsa.cnf and all files in x509-types directory
    are no longer required
  * Rename X509-type file code-signing to codeSigning
  * init-pki: Always write vars.example file to fresh PKI
  * New command 'write': Write 'legacy' files to stdout or files
  * Remove command 'make-safe-ssl': Replaced by command 'write safe-cnf'
  * New Command 'rand': Expose easyrsa_random() to the command line
  * Remove function 'set_pass_legacy()'
  * Remove command 'rewind-renew'
  * Remove command 'rebuild'
  * Remove command 'upgrade'
  * Remove EASYRSA_NO_VARS; Allow graceful use without a vars file
  * New diagnostic command 'display-cn'
  * Expand renewable certificate types to include code-signing
- attach a source to keyring</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1738411200">- update to 3.2.2:
  * Remove redundant file: index.txt.attr
  * sign-req: Allow custom X509 Types
  * Add LibreSSL version 4 to supported SSL Libraries
  * Revoke remove private inline
  * Easyrsa disable inline
  * easyrsa-tools.lib: renew SAN, remove excess word 'Address'
  * easyrsa-tls.lib: renew, make sed regex for 'IP Address' greedy
  * Show expire allow zero days
  * easyrsa-tools.lib: New command 'renew ca'
  * Improve CRL expiration details
  * Tools move to easyrsa3
  * vars.example: Remove $EASYRSA_PKI
  * Introduce new command revoke-issued
  * Bugfix renew ca and renew
  * Always use locate_support_files() after secure_session()
  * revoke: Make check for conflicting files less intrusive
  * Forbid a self-signed certificate from being expired/renewed/revoked
  * V321 minor final
  * op-test.sh: Disable download ossl3 and shellcheck binaries
  * Revert: Do not remove index.txt.attr
  * Fold easyrsa-tools.lib into easyrsa</changelog>
</package>
<package pkgid="c4e84142a93ac5cadf6026e9942a5419ff6be013673cc504e03015ca644ba0f1" name="elementary-xfce-icon-theme" arch="noarch">
  <version epoch="0" ver="0.21+git12.dff5c11f" rel="bp156.5.3.1"/>
  <changelog author="maurizio.galli@gmail.com" date="1562932800">- Update to version 0.13.1+git37.828aa1a8:
  * Make 24px home folder consistent with 16px
  * Make 16-24px Music folder blue for better contrast on dark background</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1571918400">- Update to version 0.14+git4.5c874a03:
  * fix nm-device-wired 16px light icon colors
  * make nm-device-wired dark icon 16px match 22px style
  * make nm-device-wired icon 16px match 22px style</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1571918401">- Update to version 0.14+git4.5c874a03:
  * fix nm-device-wired 16px light icon colors
  * make nm-device-wired dark icon 16px match 22px style
  * Make 24px home folder consistent with 16px
  * Make 16-24px Music folder blue for better contrast on dark background
  * make nm-device-wired icon 16px match 22px style
  * Added nm-applet wired symbolic icon
  * Improve sizing and alignment of thunderbird icon
  * thunderbird png -&gt; svg
  * New thunderbird icon</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1572955200">- Update to version 0.14+git5.36fd0049:
  * Drop Firefox icon</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1582286400">- Update to version 0.14+git19.684af360:
  * Several small symlink  fixes
  * Revamped all 16px panel icons and made several fixes
  * Revamped 16px dark panel icons and synced network icons from elementary upstream
  * Add symlinks for LICENSE
  * Fix dangling symlinks to AUTHORS, CONTRIBUTORS, and README.md
  * Cleanup unused styles fron thunderbird svgs, fixing inkscape warning attribute 'mask' given as CSS
  * Second run of vacuum-defs
  * Drop file reference (fixes #171)
  * Rename fake svgs to pngs
  * Vacuum all svgs
  * Drop Chrome and Chromium icons Both icons scale well at every size</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1582804800">- Update to version 0.14+git21.6b81725d:
  * Removed conflicting icons
- Fixes boo#1164862</changelog>
  <changelog author="tux93@opensuse.org" date="1583496000">- Update to version 0.14+git23.0db3af45:
  * Fixed close and eject icons for dark theme
  * Fix user-desktop icons</changelog>
  <changelog author="tux93@opensuse.org" date="1583841600">- Update to version 0.14+git26.b207ac07:
  * Fix icon for Gnome Software Center (Issue #181)
  * Fix Bluetooth Manager icon in application menu (Issue #129)</changelog>
  <changelog author="tux93@opensuse.org" date="1583928000">- Update to version 0.14+git28.4be98dc7:
  * Fix home icon in darker theme</changelog>
  <changelog author="tux93@opensuse.org" date="1584619200">- Update to version 0.14+git30.e40a2684:
  * Darker theme: relink bad icons and fix nm-applet (Issue #191)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1584964800">- Update to version 0.15+git0.6fc555d6:
  * Run vacuum-defs
  * Add 24px clipman icon
  * Fixed dangling symlinks</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1584964801">- Build using buildsystem to take advantage of the SVG to PNG
  conversion script. PNG load faster than SVG.</changelog>
  <changelog author="tux93@opensuse.org" date="1586088000">- Update to version 0.15+git4.5862aab7:
  * Fix text-editor and software-updater icons used in help dialogs
  * Fix xfce4-terminal and blueman icons used in help dialogs</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1586174400">- Update to version 0.15+git6.098bd333:
  * Fix nm-applet vpn symbolic and 16px panel icons</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1591790400">- Update to version 0.15+git8.ae895abc:
  * Fixed nm-applet icon in  notification bubble and vpn indicator
    lock (issue #212)
  * Fixed several contrast problems and added new colored
    software-update icons</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610366400">- Update to version 0.15.2+git0.2e2ca316:
  * Add missing 32px icons
  * Add symbolic links for xfce 4.16 icon names (#220)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1693224000">- BuildRequire bitstream-vera-fonts for SVG text rendering</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1759060800">- _service: Change "localonly" into "manual".
- Add elementary-xfce-gdb-pixbuf+glycin-loaders-workaround.patch
- Use autosetup instead of setup to get the new patch automatically
  applied.</changelog>
  <changelog author="maurizio.galli@suse.com" date="1759147200">- Update to version 0.21+git12.dff5c11f with the following highlights:
  * Major New Feature: HiDPI Support
  * Application Icons: Many application icons were added or redesigned from
    scratch
  * File Type Icons (Mimetypes): icons for different file types were added
    or updated
  * System &amp; Status Icons: A major effort was made to colorize and unify
    the panel and status indicator icons.
  * Theme Removal: The -darker and -darkest theme variants have been removed
  * File Deletion: A massive number of unused, duplicate, and broken symlinks
    were removed across all icon categories.
  * App Icon Removal: Icons for old or less common applications were removed
    to streamline the theme.
  * Better Standards Compliance: The theme was updated to improve compliance
    with the FreeDesktop.org Icon Specification.
  * License Update: The project's license was updated to GPLv3.
- Rebased elementary-xfce-gdb-pixbuf+glycin-loaders-workaround.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1759233600">- Rename elementary-xfce-gdb-pixbuf+glycin-loaders-workaround.patch
  into elementary-xfce-gdk-pixbuf+glycin-loaders-workaround.patch</changelog>
</package>
<package pkgid="53abe51e2a3977d0e0e1e08827300ad78138d0607f3d5f28fc58c14584031940" name="elementary-xfce-icon-theme" arch="src">
  <version epoch="0" ver="0.21+git12.dff5c11f" rel="bp156.5.3.1"/>
  <changelog author="maurizio.galli@gmail.com" date="1562932800">- Update to version 0.13.1+git37.828aa1a8:
  * Make 24px home folder consistent with 16px
  * Make 16-24px Music folder blue for better contrast on dark background</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1571918400">- Update to version 0.14+git4.5c874a03:
  * fix nm-device-wired 16px light icon colors
  * make nm-device-wired dark icon 16px match 22px style
  * make nm-device-wired icon 16px match 22px style</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1571918401">- Update to version 0.14+git4.5c874a03:
  * fix nm-device-wired 16px light icon colors
  * make nm-device-wired dark icon 16px match 22px style
  * Make 24px home folder consistent with 16px
  * Make 16-24px Music folder blue for better contrast on dark background
  * make nm-device-wired icon 16px match 22px style
  * Added nm-applet wired symbolic icon
  * Improve sizing and alignment of thunderbird icon
  * thunderbird png -&gt; svg
  * New thunderbird icon</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1572955200">- Update to version 0.14+git5.36fd0049:
  * Drop Firefox icon</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1582286400">- Update to version 0.14+git19.684af360:
  * Several small symlink  fixes
  * Revamped all 16px panel icons and made several fixes
  * Revamped 16px dark panel icons and synced network icons from elementary upstream
  * Add symlinks for LICENSE
  * Fix dangling symlinks to AUTHORS, CONTRIBUTORS, and README.md
  * Cleanup unused styles fron thunderbird svgs, fixing inkscape warning attribute 'mask' given as CSS
  * Second run of vacuum-defs
  * Drop file reference (fixes #171)
  * Rename fake svgs to pngs
  * Vacuum all svgs
  * Drop Chrome and Chromium icons Both icons scale well at every size</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1582804800">- Update to version 0.14+git21.6b81725d:
  * Removed conflicting icons
- Fixes boo#1164862</changelog>
  <changelog author="tux93@opensuse.org" date="1583496000">- Update to version 0.14+git23.0db3af45:
  * Fixed close and eject icons for dark theme
  * Fix user-desktop icons</changelog>
  <changelog author="tux93@opensuse.org" date="1583841600">- Update to version 0.14+git26.b207ac07:
  * Fix icon for Gnome Software Center (Issue #181)
  * Fix Bluetooth Manager icon in application menu (Issue #129)</changelog>
  <changelog author="tux93@opensuse.org" date="1583928000">- Update to version 0.14+git28.4be98dc7:
  * Fix home icon in darker theme</changelog>
  <changelog author="tux93@opensuse.org" date="1584619200">- Update to version 0.14+git30.e40a2684:
  * Darker theme: relink bad icons and fix nm-applet (Issue #191)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1584964800">- Update to version 0.15+git0.6fc555d6:
  * Run vacuum-defs
  * Add 24px clipman icon
  * Fixed dangling symlinks</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1584964801">- Build using buildsystem to take advantage of the SVG to PNG
  conversion script. PNG load faster than SVG.</changelog>
  <changelog author="tux93@opensuse.org" date="1586088000">- Update to version 0.15+git4.5862aab7:
  * Fix text-editor and software-updater icons used in help dialogs
  * Fix xfce4-terminal and blueman icons used in help dialogs</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1586174400">- Update to version 0.15+git6.098bd333:
  * Fix nm-applet vpn symbolic and 16px panel icons</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1591790400">- Update to version 0.15+git8.ae895abc:
  * Fixed nm-applet icon in  notification bubble and vpn indicator
    lock (issue #212)
  * Fixed several contrast problems and added new colored
    software-update icons</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610366400">- Update to version 0.15.2+git0.2e2ca316:
  * Add missing 32px icons
  * Add symbolic links for xfce 4.16 icon names (#220)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1693224000">- BuildRequire bitstream-vera-fonts for SVG text rendering</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1759060800">- _service: Change "localonly" into "manual".
- Add elementary-xfce-gdb-pixbuf+glycin-loaders-workaround.patch
- Use autosetup instead of setup to get the new patch automatically
  applied.</changelog>
  <changelog author="maurizio.galli@suse.com" date="1759147200">- Update to version 0.21+git12.dff5c11f with the following highlights:
  * Major New Feature: HiDPI Support
  * Application Icons: Many application icons were added or redesigned from
    scratch
  * File Type Icons (Mimetypes): icons for different file types were added
    or updated
  * System &amp; Status Icons: A major effort was made to colorize and unify
    the panel and status indicator icons.
  * Theme Removal: The -darker and -darkest theme variants have been removed
  * File Deletion: A massive number of unused, duplicate, and broken symlinks
    were removed across all icon categories.
  * App Icon Removal: Icons for old or less common applications were removed
    to streamline the theme.
  * Better Standards Compliance: The theme was updated to improve compliance
    with the FreeDesktop.org Icon Specification.
  * License Update: The project's license was updated to GPLv3.
- Rebased elementary-xfce-gdb-pixbuf+glycin-loaders-workaround.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1759233600">- Rename elementary-xfce-gdb-pixbuf+glycin-loaders-workaround.patch
  into elementary-xfce-gdk-pixbuf+glycin-loaders-workaround.patch</changelog>
</package>
<package pkgid="08bdf817579bc764d338290d8569124d5edb11866d0a108585b08cf558d08d8f" name="emptyepsilon" arch="aarch64">
  <version epoch="0" ver="2024.08.09" rel="bp156.3.3.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1597320000">- Initial checkin</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2021.06.23</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1663156800">- Version 2022.03.16
  * DeliverAmbassador
  * Update warpJammer.cpp
  * update setting translation scenario_50_gaps.lua (#1656)
  * Tweak warp vs jump stats a bit so they are more equal.
  * Correct description discrepancy - the enemies are Exuari, not Kraylor.
  * Add estimated duration of one hour to description
  * Add descriptions and simple scan parameters for life pod and warp jammer
  * Increase the number of attacking hornets gradually while waiting for transport retrieval
  * New function for adding shields on Playership in scenarios
  * made your point clear in the documentation</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1695729600">- Version 2023.06.17
  * added Settings : scavenger, shoreline, Patrolduty
  * Update scenario_47_scavenger.fr.po
  * update scenario_54_PatrolDuty.fr.po
  * Update scenario_57_shoreline.fr.po</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1708603201">- Use same doc dir for all versions</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.com&gt;" date="1726401600">- Version 2024.08.09
  * Add a quick&amp;dirty way to get callback errors
  * Clamp the warp and jump commands
  * fix voice path scenario 51
  * fix voice path scenario 48
  * Fix the wiggle console with just 1 text line</changelog>
</package>
<package pkgid="1c1850432097d6ffe43e474b134fb1e52fcfe38094fd060ef635b8f7fe0083d5" name="emptyepsilon" arch="s390x">
  <version epoch="0" ver="2024.08.09" rel="bp156.3.3.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1597320000">- Initial checkin</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2021.06.23</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1663156800">- Version 2022.03.16
  * DeliverAmbassador
  * Update warpJammer.cpp
  * update setting translation scenario_50_gaps.lua (#1656)
  * Tweak warp vs jump stats a bit so they are more equal.
  * Correct description discrepancy - the enemies are Exuari, not Kraylor.
  * Add estimated duration of one hour to description
  * Add descriptions and simple scan parameters for life pod and warp jammer
  * Increase the number of attacking hornets gradually while waiting for transport retrieval
  * New function for adding shields on Playership in scenarios
  * made your point clear in the documentation</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1695729600">- Version 2023.06.17
  * added Settings : scavenger, shoreline, Patrolduty
  * Update scenario_47_scavenger.fr.po
  * update scenario_54_PatrolDuty.fr.po
  * Update scenario_57_shoreline.fr.po</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1708603201">- Use same doc dir for all versions</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.com&gt;" date="1726401600">- Version 2024.08.09
  * Add a quick&amp;dirty way to get callback errors
  * Clamp the warp and jump commands
  * fix voice path scenario 51
  * fix voice path scenario 48
  * Fix the wiggle console with just 1 text line</changelog>
</package>
<package pkgid="d381a715398d498b9ebef61d56d79b0a09c23107dccae286daf77dca85855031" name="emptyepsilon" arch="src">
  <version epoch="0" ver="2024.08.09" rel="bp156.3.3.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1597320000">- Initial checkin</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2021.06.23</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1663156800">- Version 2022.03.16
  * DeliverAmbassador
  * Update warpJammer.cpp
  * update setting translation scenario_50_gaps.lua (#1656)
  * Tweak warp vs jump stats a bit so they are more equal.
  * Correct description discrepancy - the enemies are Exuari, not Kraylor.
  * Add estimated duration of one hour to description
  * Add descriptions and simple scan parameters for life pod and warp jammer
  * Increase the number of attacking hornets gradually while waiting for transport retrieval
  * New function for adding shields on Playership in scenarios
  * made your point clear in the documentation</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1695729600">- Version 2023.06.17
  * added Settings : scavenger, shoreline, Patrolduty
  * Update scenario_47_scavenger.fr.po
  * update scenario_54_PatrolDuty.fr.po
  * Update scenario_57_shoreline.fr.po</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1708603201">- Use same doc dir for all versions</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.com&gt;" date="1726401600">- Version 2024.08.09
  * Add a quick&amp;dirty way to get callback errors
  * Clamp the warp and jump commands
  * fix voice path scenario 51
  * fix voice path scenario 48
  * Fix the wiggle console with just 1 text line</changelog>
</package>
<package pkgid="f238004e00b01afdd64328b9a04efd5419174ae10b3d92c06b617c77b23d142a" name="emptyepsilon" arch="x86_64">
  <version epoch="0" ver="2024.08.09" rel="bp156.3.3.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1597320000">- Initial checkin</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2021.06.23</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1663156800">- Version 2022.03.16
  * DeliverAmbassador
  * Update warpJammer.cpp
  * update setting translation scenario_50_gaps.lua (#1656)
  * Tweak warp vs jump stats a bit so they are more equal.
  * Correct description discrepancy - the enemies are Exuari, not Kraylor.
  * Add estimated duration of one hour to description
  * Add descriptions and simple scan parameters for life pod and warp jammer
  * Increase the number of attacking hornets gradually while waiting for transport retrieval
  * New function for adding shields on Playership in scenarios
  * made your point clear in the documentation</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1695729600">- Version 2023.06.17
  * added Settings : scavenger, shoreline, Patrolduty
  * Update scenario_47_scavenger.fr.po
  * update scenario_54_PatrolDuty.fr.po
  * Update scenario_57_shoreline.fr.po</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1708603201">- Use same doc dir for all versions</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.com&gt;" date="1726401600">- Version 2024.08.09
  * Add a quick&amp;dirty way to get callback errors
  * Clamp the warp and jump commands
  * fix voice path scenario 51
  * fix voice path scenario 48
  * Fix the wiggle console with just 1 text line</changelog>
</package>
<package pkgid="67b64bb7fe346620163cc1740acdc36a0eb31316fffe36272d8f4bdd31dc90ac" name="emptyepsilon" arch="aarch64">
  <version epoch="0" ver="2024.12.08" rel="bp156.3.6.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1597320000">- Initial checkin</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2021.06.23</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1663156800">- Version 2022.03.16
  * DeliverAmbassador
  * Update warpJammer.cpp
  * update setting translation scenario_50_gaps.lua (#1656)
  * Tweak warp vs jump stats a bit so they are more equal.
  * Correct description discrepancy - the enemies are Exuari, not Kraylor.
  * Add estimated duration of one hour to description
  * Add descriptions and simple scan parameters for life pod and warp jammer
  * Increase the number of attacking hornets gradually while waiting for transport retrieval
  * New function for adding shields on Playership in scenarios
  * made your point clear in the documentation</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1695729600">- Version 2023.06.17
  * added Settings : scavenger, shoreline, Patrolduty
  * Update scenario_47_scavenger.fr.po
  * update scenario_54_PatrolDuty.fr.po
  * Update scenario_57_shoreline.fr.po</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1708603201">- Use same doc dir for all versions</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.com&gt;" date="1726401600">- Version 2024.08.09
  * Add a quick&amp;dirty way to get callback errors
  * Clamp the warp and jump commands
  * fix voice path scenario 51
  * fix voice path scenario 48
  * Fix the wiggle console with just 1 text line</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1736510400">- Version 2024.12.08
  * Remove 'f' suffix from numbers in lua (#2164)
  * Some minor de updates
  * fix minor typo
  * more minor de updates</changelog>
</package>
<package pkgid="410f46054e6ad1c073ef6a9c4653f47c9240a9a924e9c45d70f2a4a44c8579e5" name="emptyepsilon" arch="s390x">
  <version epoch="0" ver="2024.12.08" rel="bp156.3.6.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1597320000">- Initial checkin</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2021.06.23</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1663156800">- Version 2022.03.16
  * DeliverAmbassador
  * Update warpJammer.cpp
  * update setting translation scenario_50_gaps.lua (#1656)
  * Tweak warp vs jump stats a bit so they are more equal.
  * Correct description discrepancy - the enemies are Exuari, not Kraylor.
  * Add estimated duration of one hour to description
  * Add descriptions and simple scan parameters for life pod and warp jammer
  * Increase the number of attacking hornets gradually while waiting for transport retrieval
  * New function for adding shields on Playership in scenarios
  * made your point clear in the documentation</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1695729600">- Version 2023.06.17
  * added Settings : scavenger, shoreline, Patrolduty
  * Update scenario_47_scavenger.fr.po
  * update scenario_54_PatrolDuty.fr.po
  * Update scenario_57_shoreline.fr.po</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1708603201">- Use same doc dir for all versions</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.com&gt;" date="1726401600">- Version 2024.08.09
  * Add a quick&amp;dirty way to get callback errors
  * Clamp the warp and jump commands
  * fix voice path scenario 51
  * fix voice path scenario 48
  * Fix the wiggle console with just 1 text line</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1736510400">- Version 2024.12.08
  * Remove 'f' suffix from numbers in lua (#2164)
  * Some minor de updates
  * fix minor typo
  * more minor de updates</changelog>
</package>
<package pkgid="a4e0ffb0da919c687ef30db861ef48f8b04ee195b47b8ae0f12721ccfec688d7" name="emptyepsilon" arch="src">
  <version epoch="0" ver="2024.12.08" rel="bp156.3.6.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1597320000">- Initial checkin</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2021.06.23</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1663156800">- Version 2022.03.16
  * DeliverAmbassador
  * Update warpJammer.cpp
  * update setting translation scenario_50_gaps.lua (#1656)
  * Tweak warp vs jump stats a bit so they are more equal.
  * Correct description discrepancy - the enemies are Exuari, not Kraylor.
  * Add estimated duration of one hour to description
  * Add descriptions and simple scan parameters for life pod and warp jammer
  * Increase the number of attacking hornets gradually while waiting for transport retrieval
  * New function for adding shields on Playership in scenarios
  * made your point clear in the documentation</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1695729600">- Version 2023.06.17
  * added Settings : scavenger, shoreline, Patrolduty
  * Update scenario_47_scavenger.fr.po
  * update scenario_54_PatrolDuty.fr.po
  * Update scenario_57_shoreline.fr.po</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1708603201">- Use same doc dir for all versions</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.com&gt;" date="1726401600">- Version 2024.08.09
  * Add a quick&amp;dirty way to get callback errors
  * Clamp the warp and jump commands
  * fix voice path scenario 51
  * fix voice path scenario 48
  * Fix the wiggle console with just 1 text line</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1736510400">- Version 2024.12.08
  * Remove 'f' suffix from numbers in lua (#2164)
  * Some minor de updates
  * fix minor typo
  * more minor de updates</changelog>
</package>
<package pkgid="35a49e6b4024d14b241123bdf7a7daedb550e6dc5a9d6f247248e35b27dbd406" name="emptyepsilon" arch="x86_64">
  <version epoch="0" ver="2024.12.08" rel="bp156.3.6.1"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1597320000">- Initial checkin</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2021.06.23</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1663156800">- Version 2022.03.16
  * DeliverAmbassador
  * Update warpJammer.cpp
  * update setting translation scenario_50_gaps.lua (#1656)
  * Tweak warp vs jump stats a bit so they are more equal.
  * Correct description discrepancy - the enemies are Exuari, not Kraylor.
  * Add estimated duration of one hour to description
  * Add descriptions and simple scan parameters for life pod and warp jammer
  * Increase the number of attacking hornets gradually while waiting for transport retrieval
  * New function for adding shields on Playership in scenarios
  * made your point clear in the documentation</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1695729600">- Version 2023.06.17
  * added Settings : scavenger, shoreline, Patrolduty
  * Update scenario_47_scavenger.fr.po
  * update scenario_54_PatrolDuty.fr.po
  * Update scenario_57_shoreline.fr.po</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1708603201">- Use same doc dir for all versions</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.com&gt;" date="1726401600">- Version 2024.08.09
  * Add a quick&amp;dirty way to get callback errors
  * Clamp the warp and jump commands
  * fix voice path scenario 51
  * fix voice path scenario 48
  * Fix the wiggle console with just 1 text line</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1736510400">- Version 2024.12.08
  * Remove 'f' suffix from numbers in lua (#2164)
  * Some minor de updates
  * fix minor typo
  * more minor de updates</changelog>
</package>
<package pkgid="ff8d2231993c0dd747fd63cb96e115f1b946f94a657db959fa04835a3e7f2017" name="encfs" arch="aarch64">
  <version epoch="0" ver="1.9.5" rel="bp156.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix bashism in encfssh script
- add patches:
  * encfs-1.7.4-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.8
  * No short chanlog available; please read the ChangeLog file into
    /usr/share/doc/packages/encfs/ChangeLog
- Update Url to new project home
- Use download Url as source
- Copy DESIGN.md, PERFORMANCE.mde and TRANSLATORS into doc directory
- Remove obsolete patchs
  * encfs-1.7.4-fixReverseAbsoluteSymlinks.diff
  * encfs-1.7.4-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1457524800">- Update to version 1.8.1
  * No short chanlog available; please read
    /usr/share/doc/packages/encfs/ChangeLog</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1488628800">- update to 1.9.1
  * Fix empty log file creation
  * Link with libintl when available
  * add LIB_INSTALL_DIR override during build to aid in customized install
    locations
  * upgrade easylogging++
- update to 1.9
  * switch to CMake
  * OSX build improvements, RPATH setup
  * Drop Boost dependency. Uses tinyxml2 to read existing XML config archives.
  * Drop librlog dependency. Uses easylogging++ for logging.
  * add encfs_create operation
  * replace getdir with readdir
  * cleanup includes and reformat code
  * allow writes in reverse mode when no header is used
  * make use of C++11 (eg std unordered_map in place of GNU internal hashmap)
- split *.mo files to a separate package encfs-lang
- preperation to include checks
- removed cmake-libdir-name.patch and old-perm-checks.patch which are not
  needed any more
- install tinyxml2-3 if not available in the official repos
- configure-fix.patch: also not needed anymore</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1492948800">- patch 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch fixes
  some undefined references. See upstream issue
  https://github.com/vgough/encfs/issues/291
  With this patch, the %cmake macro can now be used for building if
  version of cmake is greater than 3.3
- improved detection of tinyxml: now builds on more architectures
  and SLE12 SP2</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1501070400">- update to 1.9.2
  * fix a use-after-free bug that was introduced in v1.9-rc1
  * cast booleans to int before writing the XML config
  * support reading the config file from pipes
  * add "-t" option to set syslog tag
  * allow read/write in standard reverse mode
  * reject empty passwords
  * support building with openssl 1.1
- removed now unneeded 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch</changelog>
  <changelog author="fvogt@suse.com" date="1516190400">- Fix combination of os_has_tinyxml and use_cmake_macro</changelog>
  <changelog author="Markus Ebner&lt;info@ebner-markus.de&gt;" date="1583496000">- update to 1.9.5
  * Correct a int/off_t buffer overflow in getSize()
  * Correct a possible write crash
  * Correct encfsctl cat and add encfsctl --reverse cat
  * Add -c &amp; -u cmdline options
  * Add --noattrcache &amp; --nodatacache cmdline options
  * Ignore .encfs6.xml file in reverse mode
  * Do not count usage on root path (to avoid resetting the --idle option)
  * Use stderr instead of stdout for error messages
  * Add the ability to disable data encryption (absolutely discouraged)
  * Add Cygwin support
- update to 1.9.4
  * Fix packaging error leading to wrong version output
  * Fix shared lib compilation (cmake -DBUILD_SHARED_LIBS=ON ..)
- update to 1.9.3
  * Fix compilation with "-std=c++11"
  * Fix a gid permission issue with allow_other
  * Fix operations on symlinks
  * Fix a race in idle unmount
  * Add --reversewrite cli option
  * Add PID to syslog logging
  * Deep code sanity check
  * Modernize coding style
  * Make codebase warnings &amp; clang-tidy clean
  * Bump FUSE_USE_VERSION to 29
  * Ensure compatibility with LibreSSL
  * Switch to vendored lib tinyxml2 &amp; easylogging
  * Reorganize man page and add missing options
  * Add gtest and micro benchmarks</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1585051200">- Disable RPATH for building</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1747051200">- add README.openSUSE for boo#1221085, boo#1243036</changelog>
</package>
<package pkgid="d16ac37819321b3860d0a6261562f9af48ee4ed9375044b7a87a26e7b1e11309" name="encfs" arch="ppc64le">
  <version epoch="0" ver="1.9.5" rel="bp156.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix bashism in encfssh script
- add patches:
  * encfs-1.7.4-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.8
  * No short chanlog available; please read the ChangeLog file into
    /usr/share/doc/packages/encfs/ChangeLog
- Update Url to new project home
- Use download Url as source
- Copy DESIGN.md, PERFORMANCE.mde and TRANSLATORS into doc directory
- Remove obsolete patchs
  * encfs-1.7.4-fixReverseAbsoluteSymlinks.diff
  * encfs-1.7.4-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1457524800">- Update to version 1.8.1
  * No short chanlog available; please read
    /usr/share/doc/packages/encfs/ChangeLog</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1488628800">- update to 1.9.1
  * Fix empty log file creation
  * Link with libintl when available
  * add LIB_INSTALL_DIR override during build to aid in customized install
    locations
  * upgrade easylogging++
- update to 1.9
  * switch to CMake
  * OSX build improvements, RPATH setup
  * Drop Boost dependency. Uses tinyxml2 to read existing XML config archives.
  * Drop librlog dependency. Uses easylogging++ for logging.
  * add encfs_create operation
  * replace getdir with readdir
  * cleanup includes and reformat code
  * allow writes in reverse mode when no header is used
  * make use of C++11 (eg std unordered_map in place of GNU internal hashmap)
- split *.mo files to a separate package encfs-lang
- preperation to include checks
- removed cmake-libdir-name.patch and old-perm-checks.patch which are not
  needed any more
- install tinyxml2-3 if not available in the official repos
- configure-fix.patch: also not needed anymore</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1492948800">- patch 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch fixes
  some undefined references. See upstream issue
  https://github.com/vgough/encfs/issues/291
  With this patch, the %cmake macro can now be used for building if
  version of cmake is greater than 3.3
- improved detection of tinyxml: now builds on more architectures
  and SLE12 SP2</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1501070400">- update to 1.9.2
  * fix a use-after-free bug that was introduced in v1.9-rc1
  * cast booleans to int before writing the XML config
  * support reading the config file from pipes
  * add "-t" option to set syslog tag
  * allow read/write in standard reverse mode
  * reject empty passwords
  * support building with openssl 1.1
- removed now unneeded 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch</changelog>
  <changelog author="fvogt@suse.com" date="1516190400">- Fix combination of os_has_tinyxml and use_cmake_macro</changelog>
  <changelog author="Markus Ebner&lt;info@ebner-markus.de&gt;" date="1583496000">- update to 1.9.5
  * Correct a int/off_t buffer overflow in getSize()
  * Correct a possible write crash
  * Correct encfsctl cat and add encfsctl --reverse cat
  * Add -c &amp; -u cmdline options
  * Add --noattrcache &amp; --nodatacache cmdline options
  * Ignore .encfs6.xml file in reverse mode
  * Do not count usage on root path (to avoid resetting the --idle option)
  * Use stderr instead of stdout for error messages
  * Add the ability to disable data encryption (absolutely discouraged)
  * Add Cygwin support
- update to 1.9.4
  * Fix packaging error leading to wrong version output
  * Fix shared lib compilation (cmake -DBUILD_SHARED_LIBS=ON ..)
- update to 1.9.3
  * Fix compilation with "-std=c++11"
  * Fix a gid permission issue with allow_other
  * Fix operations on symlinks
  * Fix a race in idle unmount
  * Add --reversewrite cli option
  * Add PID to syslog logging
  * Deep code sanity check
  * Modernize coding style
  * Make codebase warnings &amp; clang-tidy clean
  * Bump FUSE_USE_VERSION to 29
  * Ensure compatibility with LibreSSL
  * Switch to vendored lib tinyxml2 &amp; easylogging
  * Reorganize man page and add missing options
  * Add gtest and micro benchmarks</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1585051200">- Disable RPATH for building</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1747051200">- add README.openSUSE for boo#1221085, boo#1243036</changelog>
</package>
<package pkgid="c6554bdaecc13bf232e04db3b94ce7c92c3da1faf05c4dae451c8ffd59cb3d4c" name="encfs" arch="s390x">
  <version epoch="0" ver="1.9.5" rel="bp156.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix bashism in encfssh script
- add patches:
  * encfs-1.7.4-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.8
  * No short chanlog available; please read the ChangeLog file into
    /usr/share/doc/packages/encfs/ChangeLog
- Update Url to new project home
- Use download Url as source
- Copy DESIGN.md, PERFORMANCE.mde and TRANSLATORS into doc directory
- Remove obsolete patchs
  * encfs-1.7.4-fixReverseAbsoluteSymlinks.diff
  * encfs-1.7.4-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1457524800">- Update to version 1.8.1
  * No short chanlog available; please read
    /usr/share/doc/packages/encfs/ChangeLog</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1488628800">- update to 1.9.1
  * Fix empty log file creation
  * Link with libintl when available
  * add LIB_INSTALL_DIR override during build to aid in customized install
    locations
  * upgrade easylogging++
- update to 1.9
  * switch to CMake
  * OSX build improvements, RPATH setup
  * Drop Boost dependency. Uses tinyxml2 to read existing XML config archives.
  * Drop librlog dependency. Uses easylogging++ for logging.
  * add encfs_create operation
  * replace getdir with readdir
  * cleanup includes and reformat code
  * allow writes in reverse mode when no header is used
  * make use of C++11 (eg std unordered_map in place of GNU internal hashmap)
- split *.mo files to a separate package encfs-lang
- preperation to include checks
- removed cmake-libdir-name.patch and old-perm-checks.patch which are not
  needed any more
- install tinyxml2-3 if not available in the official repos
- configure-fix.patch: also not needed anymore</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1492948800">- patch 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch fixes
  some undefined references. See upstream issue
  https://github.com/vgough/encfs/issues/291
  With this patch, the %cmake macro can now be used for building if
  version of cmake is greater than 3.3
- improved detection of tinyxml: now builds on more architectures
  and SLE12 SP2</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1501070400">- update to 1.9.2
  * fix a use-after-free bug that was introduced in v1.9-rc1
  * cast booleans to int before writing the XML config
  * support reading the config file from pipes
  * add "-t" option to set syslog tag
  * allow read/write in standard reverse mode
  * reject empty passwords
  * support building with openssl 1.1
- removed now unneeded 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch</changelog>
  <changelog author="fvogt@suse.com" date="1516190400">- Fix combination of os_has_tinyxml and use_cmake_macro</changelog>
  <changelog author="Markus Ebner&lt;info@ebner-markus.de&gt;" date="1583496000">- update to 1.9.5
  * Correct a int/off_t buffer overflow in getSize()
  * Correct a possible write crash
  * Correct encfsctl cat and add encfsctl --reverse cat
  * Add -c &amp; -u cmdline options
  * Add --noattrcache &amp; --nodatacache cmdline options
  * Ignore .encfs6.xml file in reverse mode
  * Do not count usage on root path (to avoid resetting the --idle option)
  * Use stderr instead of stdout for error messages
  * Add the ability to disable data encryption (absolutely discouraged)
  * Add Cygwin support
- update to 1.9.4
  * Fix packaging error leading to wrong version output
  * Fix shared lib compilation (cmake -DBUILD_SHARED_LIBS=ON ..)
- update to 1.9.3
  * Fix compilation with "-std=c++11"
  * Fix a gid permission issue with allow_other
  * Fix operations on symlinks
  * Fix a race in idle unmount
  * Add --reversewrite cli option
  * Add PID to syslog logging
  * Deep code sanity check
  * Modernize coding style
  * Make codebase warnings &amp; clang-tidy clean
  * Bump FUSE_USE_VERSION to 29
  * Ensure compatibility with LibreSSL
  * Switch to vendored lib tinyxml2 &amp; easylogging
  * Reorganize man page and add missing options
  * Add gtest and micro benchmarks</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1585051200">- Disable RPATH for building</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1747051200">- add README.openSUSE for boo#1221085, boo#1243036</changelog>
</package>
<package pkgid="81117db712bbe947256075bed6de9a74d5f6fa0f46196c70532adb9e11ce1c83" name="encfs" arch="src">
  <version epoch="0" ver="1.9.5" rel="bp156.4.3.1"/>
  <changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
  <changelog author="mszeredi@suse.cz" date="1277726400">- updated to version 1.6.0
  * build fixes
  * add support for version field within serialized config
  * add options to help automate filesystem creation
  * modification and access times can be changed for symlinks
  * try to maintain modtime during rename</changelog>
  <changelog author="mszeredi@suse.cz" date="1283774400">- updated to version 1.7.2
  * allow per-block random bytes to be configured independently of
    per-block MAC.
  * new IV initialization
  * fix component configuration to ease adding flags or config</changelog>
  <changelog author="mszeredi@suse.cz" date="1291377600">- updated to version 1.7.4
  * fixes bug with --reverse option setting which causes files to
    be stored incorrectly</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314705600">- Fix build, axing all m4 macros was a bad idea...</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1396353600">- applied patchencfs-1.7.4-fixReverseAbsoluteSymlinks.diff from
  https://code.google.com/p/encfs/issues/detail?id=29
  This fixes encoding of symlinks starting with a "/"
- Added patches:
  * encfs-1.7.4-fixReverseAbsoluteSymlinks.diff</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix bashism in encfssh script
- add patches:
  * encfs-1.7.4-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.8
  * No short chanlog available; please read the ChangeLog file into
    /usr/share/doc/packages/encfs/ChangeLog
- Update Url to new project home
- Use download Url as source
- Copy DESIGN.md, PERFORMANCE.mde and TRANSLATORS into doc directory
- Remove obsolete patchs
  * encfs-1.7.4-fixReverseAbsoluteSymlinks.diff
  * encfs-1.7.4-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1457524800">- Update to version 1.8.1
  * No short chanlog available; please read
    /usr/share/doc/packages/encfs/ChangeLog</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1488628800">- update to 1.9.1
  * Fix empty log file creation
  * Link with libintl when available
  * add LIB_INSTALL_DIR override during build to aid in customized install
    locations
  * upgrade easylogging++
- update to 1.9
  * switch to CMake
  * OSX build improvements, RPATH setup
  * Drop Boost dependency. Uses tinyxml2 to read existing XML config archives.
  * Drop librlog dependency. Uses easylogging++ for logging.
  * add encfs_create operation
  * replace getdir with readdir
  * cleanup includes and reformat code
  * allow writes in reverse mode when no header is used
  * make use of C++11 (eg std unordered_map in place of GNU internal hashmap)
- split *.mo files to a separate package encfs-lang
- preperation to include checks
- removed cmake-libdir-name.patch and old-perm-checks.patch which are not
  needed any more
- install tinyxml2-3 if not available in the official repos
- configure-fix.patch: also not needed anymore</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1492948800">- patch 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch fixes
  some undefined references. See upstream issue
  https://github.com/vgough/encfs/issues/291
  With this patch, the %cmake macro can now be used for building if
  version of cmake is greater than 3.3
- improved detection of tinyxml: now builds on more architectures
  and SLE12 SP2</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1501070400">- update to 1.9.2
  * fix a use-after-free bug that was introduced in v1.9-rc1
  * cast booleans to int before writing the XML config
  * support reading the config file from pipes
  * add "-t" option to set syslog tag
  * allow read/write in standard reverse mode
  * reject empty passwords
  * support building with openssl 1.1
- removed now unneeded 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch</changelog>
  <changelog author="fvogt@suse.com" date="1516190400">- Fix combination of os_has_tinyxml and use_cmake_macro</changelog>
  <changelog author="Markus Ebner&lt;info@ebner-markus.de&gt;" date="1583496000">- update to 1.9.5
  * Correct a int/off_t buffer overflow in getSize()
  * Correct a possible write crash
  * Correct encfsctl cat and add encfsctl --reverse cat
  * Add -c &amp; -u cmdline options
  * Add --noattrcache &amp; --nodatacache cmdline options
  * Ignore .encfs6.xml file in reverse mode
  * Do not count usage on root path (to avoid resetting the --idle option)
  * Use stderr instead of stdout for error messages
  * Add the ability to disable data encryption (absolutely discouraged)
  * Add Cygwin support
- update to 1.9.4
  * Fix packaging error leading to wrong version output
  * Fix shared lib compilation (cmake -DBUILD_SHARED_LIBS=ON ..)
- update to 1.9.3
  * Fix compilation with "-std=c++11"
  * Fix a gid permission issue with allow_other
  * Fix operations on symlinks
  * Fix a race in idle unmount
  * Add --reversewrite cli option
  * Add PID to syslog logging
  * Deep code sanity check
  * Modernize coding style
  * Make codebase warnings &amp; clang-tidy clean
  * Bump FUSE_USE_VERSION to 29
  * Ensure compatibility with LibreSSL
  * Switch to vendored lib tinyxml2 &amp; easylogging
  * Reorganize man page and add missing options
  * Add gtest and micro benchmarks</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1585051200">- Disable RPATH for building</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1747051200">- add README.openSUSE for boo#1221085, boo#1243036</changelog>
</package>
<package pkgid="629c040ee926678db52d45f548fb7bc0dd5a2c23228b678f629bcd994e759c6c" name="encfs" arch="x86_64">
  <version epoch="0" ver="1.9.5" rel="bp156.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix bashism in encfssh script
- add patches:
  * encfs-1.7.4-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.8
  * No short chanlog available; please read the ChangeLog file into
    /usr/share/doc/packages/encfs/ChangeLog
- Update Url to new project home
- Use download Url as source
- Copy DESIGN.md, PERFORMANCE.mde and TRANSLATORS into doc directory
- Remove obsolete patchs
  * encfs-1.7.4-fixReverseAbsoluteSymlinks.diff
  * encfs-1.7.4-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1457524800">- Update to version 1.8.1
  * No short chanlog available; please read
    /usr/share/doc/packages/encfs/ChangeLog</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1488628800">- update to 1.9.1
  * Fix empty log file creation
  * Link with libintl when available
  * add LIB_INSTALL_DIR override during build to aid in customized install
    locations
  * upgrade easylogging++
- update to 1.9
  * switch to CMake
  * OSX build improvements, RPATH setup
  * Drop Boost dependency. Uses tinyxml2 to read existing XML config archives.
  * Drop librlog dependency. Uses easylogging++ for logging.
  * add encfs_create operation
  * replace getdir with readdir
  * cleanup includes and reformat code
  * allow writes in reverse mode when no header is used
  * make use of C++11 (eg std unordered_map in place of GNU internal hashmap)
- split *.mo files to a separate package encfs-lang
- preperation to include checks
- removed cmake-libdir-name.patch and old-perm-checks.patch which are not
  needed any more
- install tinyxml2-3 if not available in the official repos
- configure-fix.patch: also not needed anymore</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1492948800">- patch 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch fixes
  some undefined references. See upstream issue
  https://github.com/vgough/encfs/issues/291
  With this patch, the %cmake macro can now be used for building if
  version of cmake is greater than 3.3
- improved detection of tinyxml: now builds on more architectures
  and SLE12 SP2</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1501070400">- update to 1.9.2
  * fix a use-after-free bug that was introduced in v1.9-rc1
  * cast booleans to int before writing the XML config
  * support reading the config file from pipes
  * add "-t" option to set syslog tag
  * allow read/write in standard reverse mode
  * reject empty passwords
  * support building with openssl 1.1
- removed now unneeded 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch</changelog>
  <changelog author="fvogt@suse.com" date="1516190400">- Fix combination of os_has_tinyxml and use_cmake_macro</changelog>
  <changelog author="Markus Ebner&lt;info@ebner-markus.de&gt;" date="1583496000">- update to 1.9.5
  * Correct a int/off_t buffer overflow in getSize()
  * Correct a possible write crash
  * Correct encfsctl cat and add encfsctl --reverse cat
  * Add -c &amp; -u cmdline options
  * Add --noattrcache &amp; --nodatacache cmdline options
  * Ignore .encfs6.xml file in reverse mode
  * Do not count usage on root path (to avoid resetting the --idle option)
  * Use stderr instead of stdout for error messages
  * Add the ability to disable data encryption (absolutely discouraged)
  * Add Cygwin support
- update to 1.9.4
  * Fix packaging error leading to wrong version output
  * Fix shared lib compilation (cmake -DBUILD_SHARED_LIBS=ON ..)
- update to 1.9.3
  * Fix compilation with "-std=c++11"
  * Fix a gid permission issue with allow_other
  * Fix operations on symlinks
  * Fix a race in idle unmount
  * Add --reversewrite cli option
  * Add PID to syslog logging
  * Deep code sanity check
  * Modernize coding style
  * Make codebase warnings &amp; clang-tidy clean
  * Bump FUSE_USE_VERSION to 29
  * Ensure compatibility with LibreSSL
  * Switch to vendored lib tinyxml2 &amp; easylogging
  * Reorganize man page and add missing options
  * Add gtest and micro benchmarks</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1585051200">- Disable RPATH for building</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1747051200">- add README.openSUSE for boo#1221085, boo#1243036</changelog>
</package>
<package pkgid="6332aa3857dd2d274abd2991dbe81618bd0d44edf3e5552c659cd10cbeffebd2" name="encfs-lang" arch="noarch">
  <version epoch="0" ver="1.9.5" rel="bp156.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix bashism in encfssh script
- add patches:
  * encfs-1.7.4-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.8
  * No short chanlog available; please read the ChangeLog file into
    /usr/share/doc/packages/encfs/ChangeLog
- Update Url to new project home
- Use download Url as source
- Copy DESIGN.md, PERFORMANCE.mde and TRANSLATORS into doc directory
- Remove obsolete patchs
  * encfs-1.7.4-fixReverseAbsoluteSymlinks.diff
  * encfs-1.7.4-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1457524800">- Update to version 1.8.1
  * No short chanlog available; please read
    /usr/share/doc/packages/encfs/ChangeLog</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1488628800">- update to 1.9.1
  * Fix empty log file creation
  * Link with libintl when available
  * add LIB_INSTALL_DIR override during build to aid in customized install
    locations
  * upgrade easylogging++
- update to 1.9
  * switch to CMake
  * OSX build improvements, RPATH setup
  * Drop Boost dependency. Uses tinyxml2 to read existing XML config archives.
  * Drop librlog dependency. Uses easylogging++ for logging.
  * add encfs_create operation
  * replace getdir with readdir
  * cleanup includes and reformat code
  * allow writes in reverse mode when no header is used
  * make use of C++11 (eg std unordered_map in place of GNU internal hashmap)
- split *.mo files to a separate package encfs-lang
- preperation to include checks
- removed cmake-libdir-name.patch and old-perm-checks.patch which are not
  needed any more
- install tinyxml2-3 if not available in the official repos
- configure-fix.patch: also not needed anymore</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1492948800">- patch 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch fixes
  some undefined references. See upstream issue
  https://github.com/vgough/encfs/issues/291
  With this patch, the %cmake macro can now be used for building if
  version of cmake is greater than 3.3
- improved detection of tinyxml: now builds on more architectures
  and SLE12 SP2</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1501070400">- update to 1.9.2
  * fix a use-after-free bug that was introduced in v1.9-rc1
  * cast booleans to int before writing the XML config
  * support reading the config file from pipes
  * add "-t" option to set syslog tag
  * allow read/write in standard reverse mode
  * reject empty passwords
  * support building with openssl 1.1
- removed now unneeded 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch</changelog>
  <changelog author="fvogt@suse.com" date="1516190400">- Fix combination of os_has_tinyxml and use_cmake_macro</changelog>
  <changelog author="Markus Ebner&lt;info@ebner-markus.de&gt;" date="1583496000">- update to 1.9.5
  * Correct a int/off_t buffer overflow in getSize()
  * Correct a possible write crash
  * Correct encfsctl cat and add encfsctl --reverse cat
  * Add -c &amp; -u cmdline options
  * Add --noattrcache &amp; --nodatacache cmdline options
  * Ignore .encfs6.xml file in reverse mode
  * Do not count usage on root path (to avoid resetting the --idle option)
  * Use stderr instead of stdout for error messages
  * Add the ability to disable data encryption (absolutely discouraged)
  * Add Cygwin support
- update to 1.9.4
  * Fix packaging error leading to wrong version output
  * Fix shared lib compilation (cmake -DBUILD_SHARED_LIBS=ON ..)
- update to 1.9.3
  * Fix compilation with "-std=c++11"
  * Fix a gid permission issue with allow_other
  * Fix operations on symlinks
  * Fix a race in idle unmount
  * Add --reversewrite cli option
  * Add PID to syslog logging
  * Deep code sanity check
  * Modernize coding style
  * Make codebase warnings &amp; clang-tidy clean
  * Bump FUSE_USE_VERSION to 29
  * Ensure compatibility with LibreSSL
  * Switch to vendored lib tinyxml2 &amp; easylogging
  * Reorganize man page and add missing options
  * Add gtest and micro benchmarks</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1585051200">- Disable RPATH for building</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1747051200">- add README.openSUSE for boo#1221085, boo#1243036</changelog>
</package>
<package pkgid="a910e9b4155f45155515f2db90d82e359b8dad0e3c4a007cfe315d6c7460eb2c" name="etcd" arch="aarch64">
  <version epoch="0" ver="3.5.12" rel="bp156.4.3.1"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614772800">- Update to version 3.4.15:
  * version: 3.4.15
  * [Backport-3.4] etcdserver/api/etcdhttp: log successful etcd server side health check in debug level
  * etcdserver: Fix 64 KB websocket notification message limit
  * vendor: bump gorilla/websocket
  * pkg/fileutil: fix F_OFD_ constants</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- update etcd.service: avoid args from commandline and environment
  as it leads to start failure (bsc#1183703)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1620907200">- Update to version 3.4.16:
  * version: 3.4.16
  * Backport-3.4 exclude alarms from health check conditionally
  * etcdserver/mvcc: update trace.Step condition
  * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests
  * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17
  * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...'
  * pkg/tlsutil: Adjust cipher suites for go 1.12
  * Fix pkg/tlsutil (test) to not fail on 386.
  * bill-of-materials.json: Update golang.org/x/sys
  * .travis,test: Turn race off in Travis for go version 1.15
  * integration : fix TestTLSClientCipherSuitesMismatch in go1.13
  * vendor: Run go mod vendor
  * go.mod,go.sum: Bump github.com/creack/pty that includes patch
  * go.mod,go.sum: Comply with go v1.15
  * etcdserver,wal: Convert int to string using rune()
  * integration,raft,tests: Comply with go v1.15 gofmt
  * .travis.yml: Test with go v1.15.11
  * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1
  * vendor: Run go mod vendor
  * go.sum, go.mod: Run go mod tidy with go 1.12
  * go.mod: Pin go to 1.12 version
  * etcdserver: fix incorrect metrics generated when clients cancel watches
  * integration: relax leader timeout from 3s to 4s
  * etcdserver: when using --unsafe-no-fsync write data
  * server: Added config parameter experimental-warning-apply-duration
  * etcdserver: Fix PeerURL validation</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628424000">- Change to sysuser-tools to create system user</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1628510400">- Don't require systemd (works without, too)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * etcd.service</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
</package>
<package pkgid="8a5727a196483960331bbf5b9240fc7ba1cea77df4c6c09f57c571e5ff3c7a9b" name="etcd" arch="ppc64le">
  <version epoch="0" ver="3.5.12" rel="bp156.4.3.1"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614772800">- Update to version 3.4.15:
  * version: 3.4.15
  * [Backport-3.4] etcdserver/api/etcdhttp: log successful etcd server side health check in debug level
  * etcdserver: Fix 64 KB websocket notification message limit
  * vendor: bump gorilla/websocket
  * pkg/fileutil: fix F_OFD_ constants</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- update etcd.service: avoid args from commandline and environment
  as it leads to start failure (bsc#1183703)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1620907200">- Update to version 3.4.16:
  * version: 3.4.16
  * Backport-3.4 exclude alarms from health check conditionally
  * etcdserver/mvcc: update trace.Step condition
  * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests
  * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17
  * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...'
  * pkg/tlsutil: Adjust cipher suites for go 1.12
  * Fix pkg/tlsutil (test) to not fail on 386.
  * bill-of-materials.json: Update golang.org/x/sys
  * .travis,test: Turn race off in Travis for go version 1.15
  * integration : fix TestTLSClientCipherSuitesMismatch in go1.13
  * vendor: Run go mod vendor
  * go.mod,go.sum: Bump github.com/creack/pty that includes patch
  * go.mod,go.sum: Comply with go v1.15
  * etcdserver,wal: Convert int to string using rune()
  * integration,raft,tests: Comply with go v1.15 gofmt
  * .travis.yml: Test with go v1.15.11
  * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1
  * vendor: Run go mod vendor
  * go.sum, go.mod: Run go mod tidy with go 1.12
  * go.mod: Pin go to 1.12 version
  * etcdserver: fix incorrect metrics generated when clients cancel watches
  * integration: relax leader timeout from 3s to 4s
  * etcdserver: when using --unsafe-no-fsync write data
  * server: Added config parameter experimental-warning-apply-duration
  * etcdserver: Fix PeerURL validation</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628424000">- Change to sysuser-tools to create system user</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1628510400">- Don't require systemd (works without, too)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * etcd.service</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
</package>
<package pkgid="012faf77fb1459b1e47cd87d52f5c8e417c517e4deeee5dacf71a72a0fea9769" name="etcd" arch="s390x">
  <version epoch="0" ver="3.5.12" rel="bp156.4.3.1"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614772800">- Update to version 3.4.15:
  * version: 3.4.15
  * [Backport-3.4] etcdserver/api/etcdhttp: log successful etcd server side health check in debug level
  * etcdserver: Fix 64 KB websocket notification message limit
  * vendor: bump gorilla/websocket
  * pkg/fileutil: fix F_OFD_ constants</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- update etcd.service: avoid args from commandline and environment
  as it leads to start failure (bsc#1183703)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1620907200">- Update to version 3.4.16:
  * version: 3.4.16
  * Backport-3.4 exclude alarms from health check conditionally
  * etcdserver/mvcc: update trace.Step condition
  * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests
  * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17
  * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...'
  * pkg/tlsutil: Adjust cipher suites for go 1.12
  * Fix pkg/tlsutil (test) to not fail on 386.
  * bill-of-materials.json: Update golang.org/x/sys
  * .travis,test: Turn race off in Travis for go version 1.15
  * integration : fix TestTLSClientCipherSuitesMismatch in go1.13
  * vendor: Run go mod vendor
  * go.mod,go.sum: Bump github.com/creack/pty that includes patch
  * go.mod,go.sum: Comply with go v1.15
  * etcdserver,wal: Convert int to string using rune()
  * integration,raft,tests: Comply with go v1.15 gofmt
  * .travis.yml: Test with go v1.15.11
  * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1
  * vendor: Run go mod vendor
  * go.sum, go.mod: Run go mod tidy with go 1.12
  * go.mod: Pin go to 1.12 version
  * etcdserver: fix incorrect metrics generated when clients cancel watches
  * integration: relax leader timeout from 3s to 4s
  * etcdserver: when using --unsafe-no-fsync write data
  * server: Added config parameter experimental-warning-apply-duration
  * etcdserver: Fix PeerURL validation</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628424000">- Change to sysuser-tools to create system user</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1628510400">- Don't require systemd (works without, too)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * etcd.service</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
</package>
<package pkgid="2c1ecb9db2d1326c6808d060c1a05a912cecf927f86859baebd0af1225077426" name="etcd" arch="src">
  <version epoch="0" ver="3.5.12" rel="bp156.4.3.1"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614772800">- Update to version 3.4.15:
  * version: 3.4.15
  * [Backport-3.4] etcdserver/api/etcdhttp: log successful etcd server side health check in debug level
  * etcdserver: Fix 64 KB websocket notification message limit
  * vendor: bump gorilla/websocket
  * pkg/fileutil: fix F_OFD_ constants</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- update etcd.service: avoid args from commandline and environment
  as it leads to start failure (bsc#1183703)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1620907200">- Update to version 3.4.16:
  * version: 3.4.16
  * Backport-3.4 exclude alarms from health check conditionally
  * etcdserver/mvcc: update trace.Step condition
  * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests
  * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17
  * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...'
  * pkg/tlsutil: Adjust cipher suites for go 1.12
  * Fix pkg/tlsutil (test) to not fail on 386.
  * bill-of-materials.json: Update golang.org/x/sys
  * .travis,test: Turn race off in Travis for go version 1.15
  * integration : fix TestTLSClientCipherSuitesMismatch in go1.13
  * vendor: Run go mod vendor
  * go.mod,go.sum: Bump github.com/creack/pty that includes patch
  * go.mod,go.sum: Comply with go v1.15
  * etcdserver,wal: Convert int to string using rune()
  * integration,raft,tests: Comply with go v1.15 gofmt
  * .travis.yml: Test with go v1.15.11
  * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1
  * vendor: Run go mod vendor
  * go.sum, go.mod: Run go mod tidy with go 1.12
  * go.mod: Pin go to 1.12 version
  * etcdserver: fix incorrect metrics generated when clients cancel watches
  * integration: relax leader timeout from 3s to 4s
  * etcdserver: when using --unsafe-no-fsync write data
  * server: Added config parameter experimental-warning-apply-duration
  * etcdserver: Fix PeerURL validation</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628424000">- Change to sysuser-tools to create system user</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1628510400">- Don't require systemd (works without, too)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * etcd.service</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
</package>
<package pkgid="27b0202d37b6d2ba78599adbadac64eb7a7e9c539c46fba620c5b7a71852c1f1" name="etcd" arch="x86_64">
  <version epoch="0" ver="3.5.12" rel="bp156.4.3.1"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614772800">- Update to version 3.4.15:
  * version: 3.4.15
  * [Backport-3.4] etcdserver/api/etcdhttp: log successful etcd server side health check in debug level
  * etcdserver: Fix 64 KB websocket notification message limit
  * vendor: bump gorilla/websocket
  * pkg/fileutil: fix F_OFD_ constants</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- update etcd.service: avoid args from commandline and environment
  as it leads to start failure (bsc#1183703)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1620907200">- Update to version 3.4.16:
  * version: 3.4.16
  * Backport-3.4 exclude alarms from health check conditionally
  * etcdserver/mvcc: update trace.Step condition
  * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests
  * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17
  * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...'
  * pkg/tlsutil: Adjust cipher suites for go 1.12
  * Fix pkg/tlsutil (test) to not fail on 386.
  * bill-of-materials.json: Update golang.org/x/sys
  * .travis,test: Turn race off in Travis for go version 1.15
  * integration : fix TestTLSClientCipherSuitesMismatch in go1.13
  * vendor: Run go mod vendor
  * go.mod,go.sum: Bump github.com/creack/pty that includes patch
  * go.mod,go.sum: Comply with go v1.15
  * etcdserver,wal: Convert int to string using rune()
  * integration,raft,tests: Comply with go v1.15 gofmt
  * .travis.yml: Test with go v1.15.11
  * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1
  * vendor: Run go mod vendor
  * go.sum, go.mod: Run go mod tidy with go 1.12
  * go.mod: Pin go to 1.12 version
  * etcdserver: fix incorrect metrics generated when clients cancel watches
  * integration: relax leader timeout from 3s to 4s
  * etcdserver: when using --unsafe-no-fsync write data
  * server: Added config parameter experimental-warning-apply-duration
  * etcdserver: Fix PeerURL validation</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628424000">- Change to sysuser-tools to create system user</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1628510400">- Don't require systemd (works without, too)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * etcd.service</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
</package>
<package pkgid="e25051fc9a4daf9b4fb3850d79b150f87677bcac9db7cf1df4f671a59e1abeb4" name="etcd" arch="aarch64">
  <version epoch="0" ver="3.5.21" rel="bp156.4.9.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
</package>
<package pkgid="0b3d45aac56a22d2c779028c098214fb347ec35b87d65953578c8dd8cf506f17" name="etcd" arch="ppc64le">
  <version epoch="0" ver="3.5.21" rel="bp156.4.9.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
</package>
<package pkgid="0689919027aa3348ad3d7f5ff421e7784ff970c14a559b177a0e59054f3e4c36" name="etcd" arch="s390x">
  <version epoch="0" ver="3.5.21" rel="bp156.4.9.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
</package>
<package pkgid="f6180d33dce18ae47e7b3261e72b12d5d6ed7a43dcbf2223dd11aa91ce2c37c5" name="etcd" arch="src">
  <version epoch="0" ver="3.5.21" rel="bp156.4.9.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
</package>
<package pkgid="0aea8f6e9376400648e038ec51ca78883c0203fe2dc306a32e7871d9869cb51b" name="etcd" arch="x86_64">
  <version epoch="0" ver="3.5.21" rel="bp156.4.9.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
</package>
<package pkgid="acd3f5b5d2c0dda005a0ee191f1387efe6b9674a7fa371a5cc43ef8bd1a86a7f" name="etcd" arch="aarch64">
  <version epoch="0" ver="3.6.2" rel="bp156.4.6.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
</package>
<package pkgid="4019d72013b772eb45dc63d11d44313f65a78d565a8454ed06abbf76b7d8729d" name="etcd" arch="ppc64le">
  <version epoch="0" ver="3.6.2" rel="bp156.4.6.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
</package>
<package pkgid="efd2f2ed2c627ceeea4781a0beb8cbd3890d1edea704fae6fda7c44786572412" name="etcd" arch="s390x">
  <version epoch="0" ver="3.6.2" rel="bp156.4.6.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
</package>
<package pkgid="2e319ea43e54038118995e4664f255c1f1ca124dc0c6755f0351f4ee7f935588" name="etcd" arch="src">
  <version epoch="0" ver="3.6.2" rel="bp156.4.6.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
</package>
<package pkgid="36165b902c7ec4549291363a67775960baf63d5772cea3d3ca39cbeee9c69473" name="etcd" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="bp156.4.6.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
</package>
<package pkgid="84de617af54ecefdfd9f50de1f400800a32f36af04d4c2aacc0ebc51b6a5a8dc" name="etcd" arch="aarch64">
  <version epoch="0" ver="3.6.5" rel="bp156.4.12.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753272000">- Update to version 3.6.3:
  * Fix v2store check returning wrong result even there isn't any auth data
  * Updated help for --quota-backend-bytes
  * Prevent flakes with TestWatchRestore</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753704000">- Update to version 3.6.4:
  * Check promotion against v2store when updating v2store
  * Add an e2e test to reproduce the issue 20340</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1758283200">- Update to version 3.6.5:
  * Bump go to 1.24.7
  * fix 20271: protect backend usage from concurrent applySnapshot and defrag
  * Re-check that the lease still exists during the renew process
  * Add an e2e test to reproduce lease Renew returns a wrong response
  * server: Fix TestLogRotation error message in Go 1.24
  * dependency: bump github.com/golangci/golangci-lint from v1.63.4 to v1.64.8
  * Bump bbolt to v1.4.3
  * Remove checking confState during schema migration
  * Remove the --experimental-snapshot-catch-up-entries from help</changelog>
</package>
<package pkgid="4186f567b499a2eac9459ad9d447601c8f94289234c039c93ae0cfa6f5224048" name="etcd" arch="ppc64le">
  <version epoch="0" ver="3.6.5" rel="bp156.4.12.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753272000">- Update to version 3.6.3:
  * Fix v2store check returning wrong result even there isn't any auth data
  * Updated help for --quota-backend-bytes
  * Prevent flakes with TestWatchRestore</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753704000">- Update to version 3.6.4:
  * Check promotion against v2store when updating v2store
  * Add an e2e test to reproduce the issue 20340</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1758283200">- Update to version 3.6.5:
  * Bump go to 1.24.7
  * fix 20271: protect backend usage from concurrent applySnapshot and defrag
  * Re-check that the lease still exists during the renew process
  * Add an e2e test to reproduce lease Renew returns a wrong response
  * server: Fix TestLogRotation error message in Go 1.24
  * dependency: bump github.com/golangci/golangci-lint from v1.63.4 to v1.64.8
  * Bump bbolt to v1.4.3
  * Remove checking confState during schema migration
  * Remove the --experimental-snapshot-catch-up-entries from help</changelog>
</package>
<package pkgid="dfd1c463b79b5fbab2297a7057e51a93c42d753d081d5270e4b4cec13b91fbc7" name="etcd" arch="s390x">
  <version epoch="0" ver="3.6.5" rel="bp156.4.12.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753272000">- Update to version 3.6.3:
  * Fix v2store check returning wrong result even there isn't any auth data
  * Updated help for --quota-backend-bytes
  * Prevent flakes with TestWatchRestore</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753704000">- Update to version 3.6.4:
  * Check promotion against v2store when updating v2store
  * Add an e2e test to reproduce the issue 20340</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1758283200">- Update to version 3.6.5:
  * Bump go to 1.24.7
  * fix 20271: protect backend usage from concurrent applySnapshot and defrag
  * Re-check that the lease still exists during the renew process
  * Add an e2e test to reproduce lease Renew returns a wrong response
  * server: Fix TestLogRotation error message in Go 1.24
  * dependency: bump github.com/golangci/golangci-lint from v1.63.4 to v1.64.8
  * Bump bbolt to v1.4.3
  * Remove checking confState during schema migration
  * Remove the --experimental-snapshot-catch-up-entries from help</changelog>
</package>
<package pkgid="32e3b4d7f15b8b8872b13ff2f5749336c27d8ed2c53f295033495be41680370e" name="etcd" arch="src">
  <version epoch="0" ver="3.6.5" rel="bp156.4.12.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753272000">- Update to version 3.6.3:
  * Fix v2store check returning wrong result even there isn't any auth data
  * Updated help for --quota-backend-bytes
  * Prevent flakes with TestWatchRestore</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753704000">- Update to version 3.6.4:
  * Check promotion against v2store when updating v2store
  * Add an e2e test to reproduce the issue 20340</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1758283200">- Update to version 3.6.5:
  * Bump go to 1.24.7
  * fix 20271: protect backend usage from concurrent applySnapshot and defrag
  * Re-check that the lease still exists during the renew process
  * Add an e2e test to reproduce lease Renew returns a wrong response
  * server: Fix TestLogRotation error message in Go 1.24
  * dependency: bump github.com/golangci/golangci-lint from v1.63.4 to v1.64.8
  * Bump bbolt to v1.4.3
  * Remove checking confState during schema migration
  * Remove the --experimental-snapshot-catch-up-entries from help</changelog>
</package>
<package pkgid="fc337e355a85d15ebbf550e3d9a9691eb57ebd25932bb9602815c88995d9fa83" name="etcd" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="bp156.4.12.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753272000">- Update to version 3.6.3:
  * Fix v2store check returning wrong result even there isn't any auth data
  * Updated help for --quota-backend-bytes
  * Prevent flakes with TestWatchRestore</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753704000">- Update to version 3.6.4:
  * Check promotion against v2store when updating v2store
  * Add an e2e test to reproduce the issue 20340</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1758283200">- Update to version 3.6.5:
  * Bump go to 1.24.7
  * fix 20271: protect backend usage from concurrent applySnapshot and defrag
  * Re-check that the lease still exists during the renew process
  * Add an e2e test to reproduce lease Renew returns a wrong response
  * server: Fix TestLogRotation error message in Go 1.24
  * dependency: bump github.com/golangci/golangci-lint from v1.63.4 to v1.64.8
  * Bump bbolt to v1.4.3
  * Remove checking confState during schema migration
  * Remove the --experimental-snapshot-catch-up-entries from help</changelog>
</package>
<package pkgid="b16608e982b7ab5e704c0443f9daa7e8753c17d77c18ab2d1afbf1d393f91345" name="etcdctl" arch="aarch64">
  <version epoch="0" ver="3.5.12" rel="bp156.4.3.1"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614772800">- Update to version 3.4.15:
  * version: 3.4.15
  * [Backport-3.4] etcdserver/api/etcdhttp: log successful etcd server side health check in debug level
  * etcdserver: Fix 64 KB websocket notification message limit
  * vendor: bump gorilla/websocket
  * pkg/fileutil: fix F_OFD_ constants</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- update etcd.service: avoid args from commandline and environment
  as it leads to start failure (bsc#1183703)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1620907200">- Update to version 3.4.16:
  * version: 3.4.16
  * Backport-3.4 exclude alarms from health check conditionally
  * etcdserver/mvcc: update trace.Step condition
  * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests
  * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17
  * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...'
  * pkg/tlsutil: Adjust cipher suites for go 1.12
  * Fix pkg/tlsutil (test) to not fail on 386.
  * bill-of-materials.json: Update golang.org/x/sys
  * .travis,test: Turn race off in Travis for go version 1.15
  * integration : fix TestTLSClientCipherSuitesMismatch in go1.13
  * vendor: Run go mod vendor
  * go.mod,go.sum: Bump github.com/creack/pty that includes patch
  * go.mod,go.sum: Comply with go v1.15
  * etcdserver,wal: Convert int to string using rune()
  * integration,raft,tests: Comply with go v1.15 gofmt
  * .travis.yml: Test with go v1.15.11
  * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1
  * vendor: Run go mod vendor
  * go.sum, go.mod: Run go mod tidy with go 1.12
  * go.mod: Pin go to 1.12 version
  * etcdserver: fix incorrect metrics generated when clients cancel watches
  * integration: relax leader timeout from 3s to 4s
  * etcdserver: when using --unsafe-no-fsync write data
  * server: Added config parameter experimental-warning-apply-duration
  * etcdserver: Fix PeerURL validation</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628424000">- Change to sysuser-tools to create system user</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1628510400">- Don't require systemd (works without, too)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * etcd.service</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
</package>
<package pkgid="7e7a4fac7d14b6c517a08704082aac54e4fefcb9d941fff1c68cbf7a5b1f7f80" name="etcdctl" arch="ppc64le">
  <version epoch="0" ver="3.5.12" rel="bp156.4.3.1"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614772800">- Update to version 3.4.15:
  * version: 3.4.15
  * [Backport-3.4] etcdserver/api/etcdhttp: log successful etcd server side health check in debug level
  * etcdserver: Fix 64 KB websocket notification message limit
  * vendor: bump gorilla/websocket
  * pkg/fileutil: fix F_OFD_ constants</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- update etcd.service: avoid args from commandline and environment
  as it leads to start failure (bsc#1183703)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1620907200">- Update to version 3.4.16:
  * version: 3.4.16
  * Backport-3.4 exclude alarms from health check conditionally
  * etcdserver/mvcc: update trace.Step condition
  * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests
  * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17
  * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...'
  * pkg/tlsutil: Adjust cipher suites for go 1.12
  * Fix pkg/tlsutil (test) to not fail on 386.
  * bill-of-materials.json: Update golang.org/x/sys
  * .travis,test: Turn race off in Travis for go version 1.15
  * integration : fix TestTLSClientCipherSuitesMismatch in go1.13
  * vendor: Run go mod vendor
  * go.mod,go.sum: Bump github.com/creack/pty that includes patch
  * go.mod,go.sum: Comply with go v1.15
  * etcdserver,wal: Convert int to string using rune()
  * integration,raft,tests: Comply with go v1.15 gofmt
  * .travis.yml: Test with go v1.15.11
  * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1
  * vendor: Run go mod vendor
  * go.sum, go.mod: Run go mod tidy with go 1.12
  * go.mod: Pin go to 1.12 version
  * etcdserver: fix incorrect metrics generated when clients cancel watches
  * integration: relax leader timeout from 3s to 4s
  * etcdserver: when using --unsafe-no-fsync write data
  * server: Added config parameter experimental-warning-apply-duration
  * etcdserver: Fix PeerURL validation</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628424000">- Change to sysuser-tools to create system user</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1628510400">- Don't require systemd (works without, too)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * etcd.service</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
</package>
<package pkgid="af194999164465309078ebe79b7f389925a6204dfa260758fdb6bb95144c1a0a" name="etcdctl" arch="s390x">
  <version epoch="0" ver="3.5.12" rel="bp156.4.3.1"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614772800">- Update to version 3.4.15:
  * version: 3.4.15
  * [Backport-3.4] etcdserver/api/etcdhttp: log successful etcd server side health check in debug level
  * etcdserver: Fix 64 KB websocket notification message limit
  * vendor: bump gorilla/websocket
  * pkg/fileutil: fix F_OFD_ constants</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- update etcd.service: avoid args from commandline and environment
  as it leads to start failure (bsc#1183703)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1620907200">- Update to version 3.4.16:
  * version: 3.4.16
  * Backport-3.4 exclude alarms from health check conditionally
  * etcdserver/mvcc: update trace.Step condition
  * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests
  * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17
  * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...'
  * pkg/tlsutil: Adjust cipher suites for go 1.12
  * Fix pkg/tlsutil (test) to not fail on 386.
  * bill-of-materials.json: Update golang.org/x/sys
  * .travis,test: Turn race off in Travis for go version 1.15
  * integration : fix TestTLSClientCipherSuitesMismatch in go1.13
  * vendor: Run go mod vendor
  * go.mod,go.sum: Bump github.com/creack/pty that includes patch
  * go.mod,go.sum: Comply with go v1.15
  * etcdserver,wal: Convert int to string using rune()
  * integration,raft,tests: Comply with go v1.15 gofmt
  * .travis.yml: Test with go v1.15.11
  * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1
  * vendor: Run go mod vendor
  * go.sum, go.mod: Run go mod tidy with go 1.12
  * go.mod: Pin go to 1.12 version
  * etcdserver: fix incorrect metrics generated when clients cancel watches
  * integration: relax leader timeout from 3s to 4s
  * etcdserver: when using --unsafe-no-fsync write data
  * server: Added config parameter experimental-warning-apply-duration
  * etcdserver: Fix PeerURL validation</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628424000">- Change to sysuser-tools to create system user</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1628510400">- Don't require systemd (works without, too)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * etcd.service</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
</package>
<package pkgid="a3203eb8194c291c5d83b7e4009b84986700af64f14a47f4651c5bb1221f9e41" name="etcdctl" arch="x86_64">
  <version epoch="0" ver="3.5.12" rel="bp156.4.3.1"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614772800">- Update to version 3.4.15:
  * version: 3.4.15
  * [Backport-3.4] etcdserver/api/etcdhttp: log successful etcd server side health check in debug level
  * etcdserver: Fix 64 KB websocket notification message limit
  * vendor: bump gorilla/websocket
  * pkg/fileutil: fix F_OFD_ constants</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- update etcd.service: avoid args from commandline and environment
  as it leads to start failure (bsc#1183703)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1620907200">- Update to version 3.4.16:
  * version: 3.4.16
  * Backport-3.4 exclude alarms from health check conditionally
  * etcdserver/mvcc: update trace.Step condition
  * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests
  * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17
  * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...'
  * pkg/tlsutil: Adjust cipher suites for go 1.12
  * Fix pkg/tlsutil (test) to not fail on 386.
  * bill-of-materials.json: Update golang.org/x/sys
  * .travis,test: Turn race off in Travis for go version 1.15
  * integration : fix TestTLSClientCipherSuitesMismatch in go1.13
  * vendor: Run go mod vendor
  * go.mod,go.sum: Bump github.com/creack/pty that includes patch
  * go.mod,go.sum: Comply with go v1.15
  * etcdserver,wal: Convert int to string using rune()
  * integration,raft,tests: Comply with go v1.15 gofmt
  * .travis.yml: Test with go v1.15.11
  * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1
  * vendor: Run go mod vendor
  * go.sum, go.mod: Run go mod tidy with go 1.12
  * go.mod: Pin go to 1.12 version
  * etcdserver: fix incorrect metrics generated when clients cancel watches
  * integration: relax leader timeout from 3s to 4s
  * etcdserver: when using --unsafe-no-fsync write data
  * server: Added config parameter experimental-warning-apply-duration
  * etcdserver: Fix PeerURL validation</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628424000">- Change to sysuser-tools to create system user</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1628510400">- Don't require systemd (works without, too)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * etcd.service</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
</package>
<package pkgid="abc347f3f9d8e133b1233bc6abe594876ac08f384538072afabf5d7a9ed73f2a" name="etcdctl" arch="aarch64">
  <version epoch="0" ver="3.5.21" rel="bp156.4.9.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
</package>
<package pkgid="0cfcd2a3d7cb060289e801e884655a056d151e014882b361e4dc2dd0aec7af2c" name="etcdctl" arch="ppc64le">
  <version epoch="0" ver="3.5.21" rel="bp156.4.9.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
</package>
<package pkgid="922841c9193cf10575251f2b4c9aacefae3f62ab33d67b04030c81341f598d80" name="etcdctl" arch="s390x">
  <version epoch="0" ver="3.5.21" rel="bp156.4.9.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
</package>
<package pkgid="8edd6d0892fc17e8092adc4a5910f24709f76505862f4a4d1f291ab39ace1cc3" name="etcdctl" arch="x86_64">
  <version epoch="0" ver="3.5.21" rel="bp156.4.9.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
</package>
<package pkgid="44105b9216a8482ab4d2734ffea166e450e21076c66e0058076421f7527f77a7" name="etcdctl" arch="aarch64">
  <version epoch="0" ver="3.6.2" rel="bp156.4.6.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
</package>
<package pkgid="ac23ac7abf7724a16aa73857ebcd6bb6edc3d268eaebfd7347c50079c8a30a7e" name="etcdctl" arch="ppc64le">
  <version epoch="0" ver="3.6.2" rel="bp156.4.6.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
</package>
<package pkgid="5e77874c0fcc7366dc762e1a9480e44b040c4c2671a619c8d83175c684f08ac2" name="etcdctl" arch="s390x">
  <version epoch="0" ver="3.6.2" rel="bp156.4.6.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
</package>
<package pkgid="b85fe1fe09760061e61ac842599afbf67f22c0bb8c4b61ff6ea20277a62169b7" name="etcdctl" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="bp156.4.6.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
</package>
<package pkgid="a44eb9f8cf75be5f49b8986e7a868b0d3aa74ec76e56334e6fa624f7a212159c" name="etcdctl" arch="aarch64">
  <version epoch="0" ver="3.6.5" rel="bp156.4.12.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753272000">- Update to version 3.6.3:
  * Fix v2store check returning wrong result even there isn't any auth data
  * Updated help for --quota-backend-bytes
  * Prevent flakes with TestWatchRestore</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753704000">- Update to version 3.6.4:
  * Check promotion against v2store when updating v2store
  * Add an e2e test to reproduce the issue 20340</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1758283200">- Update to version 3.6.5:
  * Bump go to 1.24.7
  * fix 20271: protect backend usage from concurrent applySnapshot and defrag
  * Re-check that the lease still exists during the renew process
  * Add an e2e test to reproduce lease Renew returns a wrong response
  * server: Fix TestLogRotation error message in Go 1.24
  * dependency: bump github.com/golangci/golangci-lint from v1.63.4 to v1.64.8
  * Bump bbolt to v1.4.3
  * Remove checking confState during schema migration
  * Remove the --experimental-snapshot-catch-up-entries from help</changelog>
</package>
<package pkgid="3f6f96e8a2e869a003b14c4d3da6d972737b3c1b54bef4d8d0beb165b91f843f" name="etcdctl" arch="ppc64le">
  <version epoch="0" ver="3.6.5" rel="bp156.4.12.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753272000">- Update to version 3.6.3:
  * Fix v2store check returning wrong result even there isn't any auth data
  * Updated help for --quota-backend-bytes
  * Prevent flakes with TestWatchRestore</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753704000">- Update to version 3.6.4:
  * Check promotion against v2store when updating v2store
  * Add an e2e test to reproduce the issue 20340</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1758283200">- Update to version 3.6.5:
  * Bump go to 1.24.7
  * fix 20271: protect backend usage from concurrent applySnapshot and defrag
  * Re-check that the lease still exists during the renew process
  * Add an e2e test to reproduce lease Renew returns a wrong response
  * server: Fix TestLogRotation error message in Go 1.24
  * dependency: bump github.com/golangci/golangci-lint from v1.63.4 to v1.64.8
  * Bump bbolt to v1.4.3
  * Remove checking confState during schema migration
  * Remove the --experimental-snapshot-catch-up-entries from help</changelog>
</package>
<package pkgid="3b319b29a2a8292d33434d0af212d73107b037075dd77f8b718d72c9cd9d4f13" name="etcdctl" arch="s390x">
  <version epoch="0" ver="3.6.5" rel="bp156.4.12.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753272000">- Update to version 3.6.3:
  * Fix v2store check returning wrong result even there isn't any auth data
  * Updated help for --quota-backend-bytes
  * Prevent flakes with TestWatchRestore</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753704000">- Update to version 3.6.4:
  * Check promotion against v2store when updating v2store
  * Add an e2e test to reproduce the issue 20340</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1758283200">- Update to version 3.6.5:
  * Bump go to 1.24.7
  * fix 20271: protect backend usage from concurrent applySnapshot and defrag
  * Re-check that the lease still exists during the renew process
  * Add an e2e test to reproduce lease Renew returns a wrong response
  * server: Fix TestLogRotation error message in Go 1.24
  * dependency: bump github.com/golangci/golangci-lint from v1.63.4 to v1.64.8
  * Bump bbolt to v1.4.3
  * Remove checking confState during schema migration
  * Remove the --experimental-snapshot-catch-up-entries from help</changelog>
</package>
<package pkgid="1c422420646901f453078edd342790e8a08a8bed16712506918464165159ecfd" name="etcdctl" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="bp156.4.12.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753272000">- Update to version 3.6.3:
  * Fix v2store check returning wrong result even there isn't any auth data
  * Updated help for --quota-backend-bytes
  * Prevent flakes with TestWatchRestore</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753704000">- Update to version 3.6.4:
  * Check promotion against v2store when updating v2store
  * Add an e2e test to reproduce the issue 20340</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1758283200">- Update to version 3.6.5:
  * Bump go to 1.24.7
  * fix 20271: protect backend usage from concurrent applySnapshot and defrag
  * Re-check that the lease still exists during the renew process
  * Add an e2e test to reproduce lease Renew returns a wrong response
  * server: Fix TestLogRotation error message in Go 1.24
  * dependency: bump github.com/golangci/golangci-lint from v1.63.4 to v1.64.8
  * Bump bbolt to v1.4.3
  * Remove checking confState during schema migration
  * Remove the --experimental-snapshot-catch-up-entries from help</changelog>
</package>
<package pkgid="2f80c92cc2768a519a002c82c306de625524fa2f0cb7ec56c6182d1f5e74f483" name="etcdutl" arch="aarch64">
  <version epoch="0" ver="3.5.12" rel="bp156.4.3.1"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614772800">- Update to version 3.4.15:
  * version: 3.4.15
  * [Backport-3.4] etcdserver/api/etcdhttp: log successful etcd server side health check in debug level
  * etcdserver: Fix 64 KB websocket notification message limit
  * vendor: bump gorilla/websocket
  * pkg/fileutil: fix F_OFD_ constants</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- update etcd.service: avoid args from commandline and environment
  as it leads to start failure (bsc#1183703)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1620907200">- Update to version 3.4.16:
  * version: 3.4.16
  * Backport-3.4 exclude alarms from health check conditionally
  * etcdserver/mvcc: update trace.Step condition
  * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests
  * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17
  * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...'
  * pkg/tlsutil: Adjust cipher suites for go 1.12
  * Fix pkg/tlsutil (test) to not fail on 386.
  * bill-of-materials.json: Update golang.org/x/sys
  * .travis,test: Turn race off in Travis for go version 1.15
  * integration : fix TestTLSClientCipherSuitesMismatch in go1.13
  * vendor: Run go mod vendor
  * go.mod,go.sum: Bump github.com/creack/pty that includes patch
  * go.mod,go.sum: Comply with go v1.15
  * etcdserver,wal: Convert int to string using rune()
  * integration,raft,tests: Comply with go v1.15 gofmt
  * .travis.yml: Test with go v1.15.11
  * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1
  * vendor: Run go mod vendor
  * go.sum, go.mod: Run go mod tidy with go 1.12
  * go.mod: Pin go to 1.12 version
  * etcdserver: fix incorrect metrics generated when clients cancel watches
  * integration: relax leader timeout from 3s to 4s
  * etcdserver: when using --unsafe-no-fsync write data
  * server: Added config parameter experimental-warning-apply-duration
  * etcdserver: Fix PeerURL validation</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628424000">- Change to sysuser-tools to create system user</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1628510400">- Don't require systemd (works without, too)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * etcd.service</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
</package>
<package pkgid="5509498becf79a3fffcfec100fe9c82dead08bc52dcb080d2cc8289e3322cb59" name="etcdutl" arch="ppc64le">
  <version epoch="0" ver="3.5.12" rel="bp156.4.3.1"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614772800">- Update to version 3.4.15:
  * version: 3.4.15
  * [Backport-3.4] etcdserver/api/etcdhttp: log successful etcd server side health check in debug level
  * etcdserver: Fix 64 KB websocket notification message limit
  * vendor: bump gorilla/websocket
  * pkg/fileutil: fix F_OFD_ constants</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- update etcd.service: avoid args from commandline and environment
  as it leads to start failure (bsc#1183703)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1620907200">- Update to version 3.4.16:
  * version: 3.4.16
  * Backport-3.4 exclude alarms from health check conditionally
  * etcdserver/mvcc: update trace.Step condition
  * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests
  * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17
  * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...'
  * pkg/tlsutil: Adjust cipher suites for go 1.12
  * Fix pkg/tlsutil (test) to not fail on 386.
  * bill-of-materials.json: Update golang.org/x/sys
  * .travis,test: Turn race off in Travis for go version 1.15
  * integration : fix TestTLSClientCipherSuitesMismatch in go1.13
  * vendor: Run go mod vendor
  * go.mod,go.sum: Bump github.com/creack/pty that includes patch
  * go.mod,go.sum: Comply with go v1.15
  * etcdserver,wal: Convert int to string using rune()
  * integration,raft,tests: Comply with go v1.15 gofmt
  * .travis.yml: Test with go v1.15.11
  * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1
  * vendor: Run go mod vendor
  * go.sum, go.mod: Run go mod tidy with go 1.12
  * go.mod: Pin go to 1.12 version
  * etcdserver: fix incorrect metrics generated when clients cancel watches
  * integration: relax leader timeout from 3s to 4s
  * etcdserver: when using --unsafe-no-fsync write data
  * server: Added config parameter experimental-warning-apply-duration
  * etcdserver: Fix PeerURL validation</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628424000">- Change to sysuser-tools to create system user</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1628510400">- Don't require systemd (works without, too)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * etcd.service</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
</package>
<package pkgid="1bfc70da6ee94ef91973debd8b7ee84bdd38547d63e81f242c7dd45bd70c0748" name="etcdutl" arch="s390x">
  <version epoch="0" ver="3.5.12" rel="bp156.4.3.1"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614772800">- Update to version 3.4.15:
  * version: 3.4.15
  * [Backport-3.4] etcdserver/api/etcdhttp: log successful etcd server side health check in debug level
  * etcdserver: Fix 64 KB websocket notification message limit
  * vendor: bump gorilla/websocket
  * pkg/fileutil: fix F_OFD_ constants</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- update etcd.service: avoid args from commandline and environment
  as it leads to start failure (bsc#1183703)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1620907200">- Update to version 3.4.16:
  * version: 3.4.16
  * Backport-3.4 exclude alarms from health check conditionally
  * etcdserver/mvcc: update trace.Step condition
  * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests
  * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17
  * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...'
  * pkg/tlsutil: Adjust cipher suites for go 1.12
  * Fix pkg/tlsutil (test) to not fail on 386.
  * bill-of-materials.json: Update golang.org/x/sys
  * .travis,test: Turn race off in Travis for go version 1.15
  * integration : fix TestTLSClientCipherSuitesMismatch in go1.13
  * vendor: Run go mod vendor
  * go.mod,go.sum: Bump github.com/creack/pty that includes patch
  * go.mod,go.sum: Comply with go v1.15
  * etcdserver,wal: Convert int to string using rune()
  * integration,raft,tests: Comply with go v1.15 gofmt
  * .travis.yml: Test with go v1.15.11
  * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1
  * vendor: Run go mod vendor
  * go.sum, go.mod: Run go mod tidy with go 1.12
  * go.mod: Pin go to 1.12 version
  * etcdserver: fix incorrect metrics generated when clients cancel watches
  * integration: relax leader timeout from 3s to 4s
  * etcdserver: when using --unsafe-no-fsync write data
  * server: Added config parameter experimental-warning-apply-duration
  * etcdserver: Fix PeerURL validation</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628424000">- Change to sysuser-tools to create system user</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1628510400">- Don't require systemd (works without, too)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * etcd.service</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
</package>
<package pkgid="0f11bf7b164e8468a7ef28886d2b1a0233617205c475f00a80072941c2d6de24" name="etcdutl" arch="x86_64">
  <version epoch="0" ver="3.5.12" rel="bp156.4.3.1"/>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614772800">- Update to version 3.4.15:
  * version: 3.4.15
  * [Backport-3.4] etcdserver/api/etcdhttp: log successful etcd server side health check in debug level
  * etcdserver: Fix 64 KB websocket notification message limit
  * vendor: bump gorilla/websocket
  * pkg/fileutil: fix F_OFD_ constants</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1618574400">- update etcd.service: avoid args from commandline and environment
  as it leads to start failure (bsc#1183703)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1620907200">- Update to version 3.4.16:
  * version: 3.4.16
  * Backport-3.4 exclude alarms from health check conditionally
  * etcdserver/mvcc: update trace.Step condition
  * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests
  * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17
  * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...'
  * pkg/tlsutil: Adjust cipher suites for go 1.12
  * Fix pkg/tlsutil (test) to not fail on 386.
  * bill-of-materials.json: Update golang.org/x/sys
  * .travis,test: Turn race off in Travis for go version 1.15
  * integration : fix TestTLSClientCipherSuitesMismatch in go1.13
  * vendor: Run go mod vendor
  * go.mod,go.sum: Bump github.com/creack/pty that includes patch
  * go.mod,go.sum: Comply with go v1.15
  * etcdserver,wal: Convert int to string using rune()
  * integration,raft,tests: Comply with go v1.15 gofmt
  * .travis.yml: Test with go v1.15.11
  * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1
  * vendor: Run go mod vendor
  * go.sum, go.mod: Run go mod tidy with go 1.12
  * go.mod: Pin go to 1.12 version
  * etcdserver: fix incorrect metrics generated when clients cancel watches
  * integration: relax leader timeout from 3s to 4s
  * etcdserver: when using --unsafe-no-fsync write data
  * server: Added config parameter experimental-warning-apply-duration
  * etcdserver: Fix PeerURL validation</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628424000">- Change to sysuser-tools to create system user</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1628510400">- Don't require systemd (works without, too)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * etcd.service</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
</package>
<package pkgid="fc0044869eec4658727282c4e82ab4be48c474206eb051f1c27bbaf52adc7788" name="etcdutl" arch="aarch64">
  <version epoch="0" ver="3.5.21" rel="bp156.4.9.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
</package>
<package pkgid="874dda532f5d75b7fdf8b703f5ba401b5b89b6102cc5b250b5490f7cc2d1c57e" name="etcdutl" arch="ppc64le">
  <version epoch="0" ver="3.5.21" rel="bp156.4.9.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
</package>
<package pkgid="8d4846288cab03fc94b0f430ade89eec6f4a5d36b97fdb12ed00c2943cefcadc" name="etcdutl" arch="s390x">
  <version epoch="0" ver="3.5.21" rel="bp156.4.9.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
</package>
<package pkgid="1daf1129b6c5321918b571b5bfd886975cf9b62a576d461b8194210e7c3f59c7" name="etcdutl" arch="x86_64">
  <version epoch="0" ver="3.5.21" rel="bp156.4.9.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1645617600">- Update to version 3.5.2:
  * version: bump up to 3.5.2
  * Update dep: require gopkg.in/yaml.v2 v2.2.8 -&gt; v2.4.0 due to: CVE-2019-11254.
  * fix runlock bug
  * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL
  * etcdserver,integration: Store remaining TTL on checkpoint
  * lease,integration: add checkpoint scheduling after leader change
  * set the backend again after recovering v3 backend from snapshot
  * *: implement a retry logic for auth old revision in the client
  * client/v3: refresh the token when ErrUserEmpty is received while retrying
  * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers
  * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6)
- Update to version 3.5.1:
  * version: 3.5.1
  * Dockerfile: bump debian bullseye-20210927
  * client: Use first endpoint as http2 authority header
  * tests: Add grpc authority e2e tests
  * client: Add grpc authority header integration tests
  * tests: Allow configuring integration tests to use TCP
  * test: Use unique number for grpc port
  * tests: Cleanup member interface by exposing Bridge directly
  * tests: Make using bridge optional
  * tests: Rename grpcAddr to grpcURL to imply that it includes schema
  * tests: Remove bridge dependency on unix
  * Decouple prefixArgs from os.Env dependency
  * server: Ensure that adding and removing members handle storev2 and backend out of sync
  * Stop using tip golang version in CI
  * fix self-signed-cert-validity parameter cannot be specified in the config file
  * fix health endpoint not usable when authentication is enabled
  * workflows: remove ARM64 job for maintenance
- Update to version 3.5.0:
  * See link below, diff is too big
    https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646827200">- Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported
- Update go version to 1.16
- Update etcd.conf variables
- Add the new etcdutl into separate subpackage
- Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl
  * see ./vendor-update.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1646913600">- Add vendor-update.sh as a source to pass obs-service-source_validator</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
</package>
<package pkgid="ddf826a0ef52a77530d45c6305d4cfb9c630623bb7d7ed9636f6e6e149cd1dfb" name="etcdutl" arch="aarch64">
  <version epoch="0" ver="3.6.2" rel="bp156.4.6.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
</package>
<package pkgid="7b414222e54a4f532b6806d43ed3a16bc872fa741baabd16361f5a4d9994dcd8" name="etcdutl" arch="ppc64le">
  <version epoch="0" ver="3.6.2" rel="bp156.4.6.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
</package>
<package pkgid="744bfcdc0a31ddfea1027bac20c9b15b7f793e1730e5c71540390f5ad767449d" name="etcdutl" arch="s390x">
  <version epoch="0" ver="3.6.2" rel="bp156.4.6.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
</package>
<package pkgid="002030b8580c01ffcbdf2b22121500766f02a976393a392a273aaad82d329fb0" name="etcdutl" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="bp156.4.6.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1650456000">- Update to version 3.5.3:
  https://github.com/etcd-io/etcd/compare/v3.5.2...v3.5.3
  * clientv3: disable mirror auth test with proxy
  * cv3/mirror: Fetch the most recent prefix revision
  * set backend to cindex before recovering the lessor in applySnapshot
  * support linearizable renew lease
  * clientv3: filter learners members during autosync
  * etcdserver: upgrade the golang.org/x/crypto dependency
  * fix the data inconsistency issue by adding a txPostLockHook into the backend
  * server: Save consistency index and term to backend even when they decrease
  * server: Add verification of whether lock was called within out outside of apply
  * go.mod: Upgrade to prometheus/client_golang v1.11.1
  * server: Use default logging configuration instead of zap production one
  * Fix offline defrag
  * backport 3.5: #13676 load all leases from backend
  * server/storage/backend: restore original bolt db options after defrag
  * always print raft term in decimal when displaying member list in json
  * enhance health check endpoint to support serializable request
  * trim the suffix dot from the srv.Target for etcd-client DNS lookup</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1651147200">- add variable ETCD_OPTIONS to both service unit and configuration file
  this allows the user to easily add things like "--enable-v2=true"</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- Update to version 3.5.4:
  * version: bump up to 3.5.4
  * Update conssitent_index when applying fails
  * Add unit test for canonical SRV records
  * Revert "trim the suffix dot from the srv.Target for etcd-client DNS lookup"</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
</package>
<package pkgid="5a9ee6f81cba42376343060c8be465aeb87246c5e03ef89c978159f2aeaed0d1" name="etcdutl" arch="aarch64">
  <version epoch="0" ver="3.6.5" rel="bp156.4.12.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753272000">- Update to version 3.6.3:
  * Fix v2store check returning wrong result even there isn't any auth data
  * Updated help for --quota-backend-bytes
  * Prevent flakes with TestWatchRestore</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753704000">- Update to version 3.6.4:
  * Check promotion against v2store when updating v2store
  * Add an e2e test to reproduce the issue 20340</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1758283200">- Update to version 3.6.5:
  * Bump go to 1.24.7
  * fix 20271: protect backend usage from concurrent applySnapshot and defrag
  * Re-check that the lease still exists during the renew process
  * Add an e2e test to reproduce lease Renew returns a wrong response
  * server: Fix TestLogRotation error message in Go 1.24
  * dependency: bump github.com/golangci/golangci-lint from v1.63.4 to v1.64.8
  * Bump bbolt to v1.4.3
  * Remove checking confState during schema migration
  * Remove the --experimental-snapshot-catch-up-entries from help</changelog>
</package>
<package pkgid="a1f69216c4ba9edac3dfd6f027082fe61c19cea310170473137ba2b6ded73d28" name="etcdutl" arch="ppc64le">
  <version epoch="0" ver="3.6.5" rel="bp156.4.12.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753272000">- Update to version 3.6.3:
  * Fix v2store check returning wrong result even there isn't any auth data
  * Updated help for --quota-backend-bytes
  * Prevent flakes with TestWatchRestore</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753704000">- Update to version 3.6.4:
  * Check promotion against v2store when updating v2store
  * Add an e2e test to reproduce the issue 20340</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1758283200">- Update to version 3.6.5:
  * Bump go to 1.24.7
  * fix 20271: protect backend usage from concurrent applySnapshot and defrag
  * Re-check that the lease still exists during the renew process
  * Add an e2e test to reproduce lease Renew returns a wrong response
  * server: Fix TestLogRotation error message in Go 1.24
  * dependency: bump github.com/golangci/golangci-lint from v1.63.4 to v1.64.8
  * Bump bbolt to v1.4.3
  * Remove checking confState during schema migration
  * Remove the --experimental-snapshot-catch-up-entries from help</changelog>
</package>
<package pkgid="348503e52afb75ad1b1ec8087d851d27b1a315ba73f91b1024d9965268301b9b" name="etcdutl" arch="s390x">
  <version epoch="0" ver="3.6.5" rel="bp156.4.12.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753272000">- Update to version 3.6.3:
  * Fix v2store check returning wrong result even there isn't any auth data
  * Updated help for --quota-backend-bytes
  * Prevent flakes with TestWatchRestore</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753704000">- Update to version 3.6.4:
  * Check promotion against v2store when updating v2store
  * Add an e2e test to reproduce the issue 20340</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1758283200">- Update to version 3.6.5:
  * Bump go to 1.24.7
  * fix 20271: protect backend usage from concurrent applySnapshot and defrag
  * Re-check that the lease still exists during the renew process
  * Add an e2e test to reproduce lease Renew returns a wrong response
  * server: Fix TestLogRotation error message in Go 1.24
  * dependency: bump github.com/golangci/golangci-lint from v1.63.4 to v1.64.8
  * Bump bbolt to v1.4.3
  * Remove checking confState during schema migration
  * Remove the --experimental-snapshot-catch-up-entries from help</changelog>
</package>
<package pkgid="23b05c478c6688e64f21d275e92351765ccb5fb667b013bc8c7bcd5961777e4a" name="etcdutl" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="bp156.4.12.1"/>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1674648000">- Add -trimpath which removes specific build time paths from the binary
- Add -w to strip DWARF symbols, not needed
- Update to version 3.5.7:
  * version: bump up to 3.5.7
  * etcdserver: return membership.ErrIDNotFound when the memberID not found
  * etcdserver: process the scenaro of the last WAL record being partially synced to disk
  * update nsswitch.conf for 3.5
  * 3.5: remove the dependency on busybox
  * Remove dependency on gobin
  * resolve build error: parameter may not start with quote character '
  * remove .travis.yml
  * format the source code and tidy the dependencies using go 1.17.13
  * bump go version to 1.17.13
  * deps: bump golang.org/x/net to v0.4.0 to address CVEs
  * security: use distroless base image to address critical Vulnerabilities
  * cidc:  specify the correct branch name of release-3.5 in workflow for trivy nightly scan
  * Add trivy nightly scan for release-3.5
  * clientv3: revert the client side change in 14547
  * client/pkg/v3: fixes Solaris build of transport
  * etcdserver: fix nil pointer panic for readonly txn
  * Fix go fmt error
  * [3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE
  * etcdserver: intentionally set the memberID as 0 in corruption alarm
- Update to version 3.5.6:
  * version: bump up to 3.5.6
  * release: build with consistent paths
  * client/pkg/fileutil: add missing logger to {Create,Touch}DirAll
  * test: add test case to cover the CommonName based authentication
  * test: add certificate with root CommonName
  * clientv3: do not refresh token when using TLS CommonName based authentication
  * etcdserver: call the OnPreCommitUnsafe in unsafeCommit
  * add range flag for delete in etcdctl
  * server: add more context to panic message
  * fix:close conn
  * clientv3: fix the design &amp; implementation of double barrier
  * test: added e2e test case for issue 14571: etcd doesn't load auth info when recovering from a snapshot
  * etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
  * server: add a unit test case for authStore.Reocver() with empty rangePermCache
  * Backport #14591 to 3.5.
  * client/v3: Add backoff before retry when watch stream returns unavailable
  * etcdserver: added more debug log for the purgeFile goroutine
  * netutil: make a `raw` URL comparison part of the urlsEqual function
  * Apply suggestions from code review
  * netutil: add url comparison without resolver to URLStringsEqual
  * tests/Dockerfile: Switch to ubuntu 22.04 base
  * Makefile: Additional logic fix
  * *: avoid closing a watch with ID 0 incorrectly
  * tests: a test case for watch with auth token expiration
  * *: handle auth invalid token and old revision errors in watch
  * server/etcdmain: add configurable cipher list to gRPC proxy listener
  * Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt/v4
- Update to version 3.5.5:
  * version: bump up to 3.5.5
  * fix the flaky test fix_TestV3AuthRestartMember_20220913 for 3.5
  * etcdctl: fix move-leader for multiple endpoints
  * testing: fix TestOpenWithMaxIndex cleanup
  * server,test: refresh cache on each NewAuthStore
  * server/etcdmain: add build support for Apple M1
  * tests: Fix member id in CORRUPT alarm
  * server: Make corrtuption check optional and period configurable
  * server: Implement compaction hash checking
  * tests: Cover periodic check in tests
  * server: Refactor compaction checker
  * tests: Move CorruptBBolt to testutil
  * tests: Rename corruptHash to CorruptBBolt
  * tests: Unify TestCompactionHash and extend it to also Delete keys and Defrag
  * tests: Add tests for HashByRev HTTP API
  * tests: Add integration tests for compact hash
  * server: Cache compaction hash for HashByRev API
  * server: Extract hasher to separate interface
  * server: Remove duplicated compaction revision
  * server: Return revision range that hash was calcualted for
  * server: Store real rv range in hasher
  * server: Move adjusting revision to hasher
  * server: Pass revision as int
  * server: Calculate hash during compaction
  * server: Fix range in mock not returning same number of keys and values
  * server: Move reading KV index inside scheduleCompaction function
  * server: Return error from scheduleCompaction
  * server: Refactor hasher
  * server: Extract kvHash struct
  * server: Move unsafeHashByRev to new hash.go file
  * server: Extract unsafeHashByRev function
  * server: Test HashByRev values to make sure they don't change
  * server: Cover corruptionMonitor with tests
  * server: Extract corruption detection to dedicated struct
  * server: Extract triggerCorruptAlarm to function
  * move consistent_index forward when executing alarmList operation
  * fix the potential data loss for clusters with only one member
  * [backport 3.5] server: don't panic in readonly serializable txn
  * Backport of pull/14354 to 3.5.5
  * Refactor the keepAliveListener and keepAliveConn
  * clientv3: close streams after use in lessor keepAliveOnce method
  * Change default sampling rate from 100% to 0%
  * Fix the failure in TestEndpointSwitchResolvesViolation
  * update all related dependencies
  * move setupTracing into a separate file config_tracing.go
  * etcdserver: bump OpenTelemetry to 1.0.1
  * Change default sampling rate from 100% to 0%
  * server/auth: protect rangePermCache with a RW lock
  * Improve error message for incorrect values of ETCD_CLIENT_DEBUG
  * add e2e test cases to cover the maxConcurrentStreams
  * Add flag `--max-concurrent-streams` to set the max concurrent stream each client can open at a time
  * add the uint32Value data type
  * Client: fix check for WithPrefix op
  * client/v3: do not overwrite authTokenBundle on dial
  * restrict the max size of each WAL entry to the remaining size of the file
  * Add FileReader and FileBufReader utilities
  * Backport two lease related bug fixes to 3.5
  * scripts: Detect staged files before building release
  * scripts: Avoid additional repo clone
  * Make DRY_RUN explicit
  * scripts: Add tests for release scripts
  * server/auth: enable tokenProvider if recoved store enables auth
  * Update golang.org/x/crypto to latest</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1682510400">- Update to version 3.5.8:
  * version: bump up to 3.5.8
  * etcdserver: Guarantee order of requested progress notifications
  * etcdserver: verify field 'username' and 'revision' present when decoding a JWT token
  * set zap logging to wsproxy
  * security: remove password after authenticating the user
  * test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235
  * bump golang to 1.19.8
  * server/auth: disallow creating empty permission ranges
  * chore: enable strict mode for test CI
  * Fixes: #15266 All docker images of Architecture show amd64
  * scripts: Add testing of etcd in local image in release workflow.
  * server: Fix defer function closure escape
  * tests: Test separate http port connection multiplexing
  * server: Add --listen-client-http-urls flag to allow running grpc server separate from http server
  * server: Pick one address that all grpc gateways connect to
  * server: Extract resolveUrl helper function
  * server: Separate client listener grouping from serving
  * refactor: Use proper variable names for urls
  * sever/auth: fix addUserWithNoOption of store_test
  * server/auth: fix auth panic bug when user changes password
  * Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
  * server/embed: fix data race when start insecure grpc
  * server: Test watch restore
  * mvcc: update minRev when watcher stays synced
  * tests: Add v2 API to connection multiplexing test
  * tests: Add connection muiltiplexer testing
  * tests: Backport RunUtilCompletion
  * tests: Backport tls for etcdctl
  * tests: Extract e2e test utils
  * tests: Allow specifying http version in curl
  * tests: Refactor newClient args
  * tests: Refactor CURLPrefixArgs
  * Backport tls 1.3 support.
  * server: Switch back to random scheduler to improve resilience to watch starvation
  * test: Test etcd watch stream starvation under high read response load when sharing the same connection
  * tests: Allow configuring progress notify interval in e2e tests
  * Run go mod tidy
  * Updated go to 1.19.7.
  * Backport go_srcs_in_module changes and fix goword failures.
  * Formatted source code for go 1.19.6.
  * Bump to go 1.19.6
  * Bump golang.org/x/net to v0.7.0 to address CVE GO-2023-1571.
  * test:enhance the test case TestV3WatchProgressOnMemberRestart
  * clientv3: correct the nextRev on receving progress notification response
  * etcdserver: add failpoints walBeforeSync and walAfterSync
  * Fix regression in timestamp resolution
  * upgrade cockroachdb/datadriven to v1.0.2 to remove archived dependencies
  * bump github.com/stretchr/testify to v1.8.1
  * bump bbolt to v1.3.7 for release-3.5
  * netutil: consistently format ipv6 addresses
  * docker: remove nsswitch.conf</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1685016000">- Update to version 3.5.9:
  * version: bump up to 3.5.9
  * Move go version to dedicated .go-version file
  * tests: e2e and integration test for timetolive
  * etcdserver: protect lease timetilive with auth
  * Backport go update to latest patch release 1.19.9.
  * Backport centralising go version for actions workflows.
  * server: backport 15743, improved description of --initial-cluster-state flag</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1705665600">- Update to version 3.5.11:
  * version: bump up to 3.5.11
  * etcdserver: add linearizable_read check to readyz.
  * etcd: Update go version to 1.20.12
  * server: disable redirects in peer communication
  * etcdserver: add metric counters for livez/readyz health checks.
  * etcdserver: add livez and ready http endpoints for etcd.
  * http health check bug fixes
  * server: Split metrics and health code
  * server: Cover V3 health with tests
  * server: Refactor health checks
  * server: Run health check tests in subtests
  * server: Rename test case expect fields
  * server: Use named struct initialization in healthcheck test
  * Backport server: Don't follow redirects when checking peer urls.
  * Backport embed: Add tracing integration test.
  * Backport server: Have tracingExporter own resources it initialises.
  * Backport server: Add sampling rate to distributed tracing.
  * upgrade github.com/stretchr/testify,google.golang.org/genproto/googleapis/api,google.golang.org/grpc to make it consistent
  * CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0
  * github workflow: run arm64 tests on every push
  * etcd: upgrade go version from 1.20.10 to 1.20.11
  * version: bump up to 3.5.10
  * bump bbolt to 1.3.8 for etcd 3.5
  * 3.5: upgrade gRPC-go to 1.58.3
  * Backport corrupt check test fix "etcd server shouldn't wait for the ready notification infinitely on startup"
  * etcdserver: add cluster id check for hashKVHandler
  * [release-3.5]: upgrade gRPC-go to v1.52.0
  * backport #14125 to release-3.5: Update to grpc-1.47 (and fix the connection-string format)
  * Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin
  * Bump go to v1.20.10 Part of https://github.com/etcd-io/etcd/issues/16740
  * bump golang.org/x/net to 0.17.0 Part of https://github.com/etcd-io/etcd/issues/16740
  * etcd: upgrade go version to 1.20.9
  * Remove obsolete http 1.0 version.
  * fix:Ensure that go version is only defined in one file for release-3.5
  * Fix panic in etcd validate secure endpoints
  * dependency: bump golang to 1.20.8
  * Backport redirect metrics data into file to reduce output.
  * test.sh: increase timeout for grpcproxy test
  * test: add v3 curl test to cover maintenance hash/hashkv REST API
  * api: fix duplicate gateway url issue
  * pkg: add a verification on the pagebytes which must be &gt; 0
  * tests: Backport deflake for TestWatchDelay
  * tests: Backport deflake for TestPageWriterRandom
  * Backport adding unit test for socket options.
  * Backport export reuse-port and reuse-address
  * Fix goword failure in rafthttp/transport.go.
  * Backport update to golang 1.20 minor release.
  * bump go version to 1.19.12
  * Update workflows to use makefile recipes for unit, integration &amp; e2e-release.
  * Backport Makefile recipes for common test commands.
  * pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss
  * Backport fix to e2e release version identifcation.
  * Backport #14368 to v3.5
  * Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496
  * etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5.
  * Backport #13577 Disable auth gracefully without impacting existing watchers.
  * bump go version to 1.19.11 to fix CVE GO-2023-1878
  * clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled
  * [3.5] etcdutl: fix db double closed
  * clientv3: remove v3.WithFirstKey() in Barrier.Wait()
  * update etcdctl flag description for snapshot restores
  * etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command
  * Adding optional revision bump and mark compacted to snapshot restore
  * Revert "Merge pull request #16119 from natusameer/release-3.5"
  * Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
  * Backport .github/workflows: Read .go-version as a step and not separate workflow.
  * Add first unit test for authApplierV3
  * Early exit auth check on lease puts
  * remove stack log when etcdutl restore
  * etcdserver: fix corruption check when server has just been compacted
  * replace gobin with go install
  * [3.5] Backport updating go to latest patch release 1.19.10
  * add compact hash check to help
  * Fix test of clientv3/naming
  * clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix
  * grpcproxy: fix memberlist results not update when proxy node down</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707220800">- Drop go_provides macro: it is guarded by if suse_version &lt;= 1110,
  yet has a negative impact on the general RPM dep/provides scanner
  (i.e user provides were not added).
- Drop go_nostrip macro, as it does nothing useful.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1711368000">- Update to version 3.5.12:
  * version: bump up to 3.5.12
  * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795
  * test: fix TestHashKVWhenCompacting: ensure all goroutine finished
  * print error log when creating peer listener failed
  * mvcc: Printing etcd backend database related metrics inside scheduleCompaction function
  * dependency: update go version to 1.20.13
  * commit bbolt transaction if there is any pending deleting operations
  * add tests to test tx delete consistency.
  * Don't flock snapshot files
  * Backport adding digest for etcd base image.
  * Add a unit tests and missing flags in etcd help.
  * Add missing flag in etcd help.
  * Backport testutils.ExecuteUntil to 3.5 branch
  * member replace e2e test
  * Check if be is nil to avoid panic when be is overriden with nil by recoverSnapshotBackend on line 517
  * Don't redeclare err and snapshot variable, fixing validation of consistent index and closing database on defer
  * test: enable gofail in release e2e test.
  * [3.5] backport health check e2e tests.
  * tests: Extract e2e cluster setup to separate package</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1725278400">- vendor-update.sh: Fix static /tmp file issue (bsc#1199031)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1732881600">- Update to version 3.5.17:
  * fix(defrag): close temp file in case of error
  * Bump go toolchain to 1.22.9
  * fix(defrag): handle defragdb failure
  * fix(defrag): handle no space left error
  * [3.5] Fix risk of a partial write txn being applied
  * [serverWatchStream] terminate recvLoop on sws.close()
- Update to version 3.5.16:
  * Bump go toolchain to 1.22.7
  * Introduce compaction sleep interval flag
  * Fix passing default grpc call options in Kubernetes client
  * Skip leadership check if the etcd instance is active processing
    heartbeats
  * Introduce Kubernetes KV interface to etcd client
- Update to version 3.5.15:
  * Differentiate the warning message for rejected client and peer
  * connections
  * Suppress noisy basic auth token deletion log
  * Support multiple values for allowed client and peer TLS
    identities(#18015)
  * print error log when validation on conf change failed
- Update to version 3.5.14:
  * etcdutl: Fix snapshot restore memory alloc issue
  * server: Implement WithMmapSize option for backend config
  * gRPC health server sets serving status to NOT_SERVING on defrag
  * server/mvcc: introduce compactBeforeSetFinishedCompact
    failpoint
  * Update the compaction log when bootstrap and update compact's
    signature
  * add experimental-snapshot-catchup-entries flag.
  * Fix retry requests when receiving ErrGPRCNotSupportedForLearner
- Update to version 3.5.13:
  * Fix progress notification for watch that doesn't get any events
  * pkg/types: Support Unix sockets in NewURLS
  * added arguments to the grpc-proxy: dial-keepalive-time,
    dial-keepalive-timeout, permit-without-stream
  * server: fix comment to match function name
  * Make CGO_ENABLED configurable for etcd 3.5
  * etcdserver: drain leaky goroutines before test completed</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1733054400">- Update etcd configuration file based on
  https://github.com/etcd-io/etcd/blob/v3.5.17/etcd.conf.yml.sample</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1733140800">- Fixing a configuration data loss bug:
  Fillup really really wants that the template and the target file
  actually follow the sysconfig format. The current config and the
  current template do not fulfill this requirement.
  Move the current /etc/sysconfig/etcd to /etc/default/etcd and
  install a new sysconfig file which only adds the ETCD_OPTIONS
  option, which is actually used by the unit file.
  This also makes it a bit cleaner to move etcd to use
  - -config-file in the long run.</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1737979200">- Update to version 3.5.18:
  * Ensure all goroutines created by StartEtcd to exit before
    closing the errc
  * mvcc: restore tombstone index if it's first revision
  * Bump go toolchain to 1.22.11
  * Avoid deadlock in etcd.Close when stopping during bootstrapping
  * etcdutl/etcdutl: use datadir package to build wal/snapdir
  * Remove duplicated &lt;-s.ReadyNotify()
  * Do not wait for ready notify if the server is stopping
  * Fix mixVersion test case: ensure a snapshot to be sent out
  * *: support custom content check offline in v2store
  * Print warning message for deprecated flags if set
  * fix runtime error: comparing uncomparable type
  * add tls min/max version to grpc proxy</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1741262400">- Update to version 3.5.19:
  * Bump go toolchain to 1.23.7
  * fix a compaction induce latency issue
  * Add learner id into log when being promoted or removed
  * add learner check to readyz
  * tools: add mixed read-write performance evaluation scripts</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1742817600">- Update to version 3.5.20:
  * Fix the issue that learner promotion command doesn't support
    json output
  * overwrite the member if already exist
  * add verification to check whether membership data is in sync
    between v2store and v3store
  * fix: grpcproxy can get stuck in and endless loop causing high
    cpu usage
  * perf(release3.5): use RLock in Demoted method for read-only
    access to expiry</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1743163200">- Update to version 3.5.21:
  * bump golang.org/x/net from v0.36.0 to v0.38.0
  * bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
    to address CVE-2025-30204 (bsc#1240515)</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749211200">- Fix a bug when migrating existing /etc/sysconfig/etcd
- Add suggests for subpackages etcdctl and etcdutl
- Add script for updating etcd.conf
  * update-etcd-conf.sh
- Renamed script for vendoring and commented out go_modules
  in service file, we use the script
  * update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1749556800">- See upgrade guide:
  https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/
- Update to version 3.6.1:
  * etcd server:
  - Replaced the deprecated/removed UnaryServerInterceptor and
    StreamServerInterceptor in otelgrpc with NewServerHandler
  - Add protection on PromoteMember and UpdateRaftAttributes to prevent panicking
  - Fix the issue that --force-new-cluster can't remove all other members in a corner case
  - Fix mvcc: avoid double decrement of watcher gauge on close/cancel race
  - Add validation to ensure there is no empty v3discovery endpoint
  * etcdctl:
  - Fix command etcdctl endpoint health doesn't work when options are set via environment variables
- Update to version 3.6.0:
  https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0
  * Dropped flags in v3.6.0:
    ETCD_ENABLE_V2
    ETCD_PROXY
    ETCD_PROXY_DIAL_TIMEOUT
    ETCD_PROXY_FAILURE_WAIT
    ETCD_PROXY_READ_TIMEOUT
    ETCD_PROXY_REFRESH_INTERVAL
    ETCD_PROXY_WRITE_TIMEOUT</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1752580800">- Update to version 3.6.2:
  * Avoid lowering revision of watchers in the future after restore
  * Add verification to verify the watch response have a bigger revision than minRev
  * Disable progress notify validation until we can guarantee response
  * Skip sending progress notification for watch with starting revision in the future
- Switch to _service file for vendoring and drop update-vendor.sh</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753272000">- Update to version 3.6.3:
  * Fix v2store check returning wrong result even there isn't any auth data
  * Updated help for --quota-backend-bytes
  * Prevent flakes with TestWatchRestore</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1753704000">- Update to version 3.6.4:
  * Check promotion against v2store when updating v2store
  * Add an e2e test to reproduce the issue 20340</changelog>
  <changelog author="Elisei Roca &lt;eroca@suse.com&gt;" date="1758283200">- Update to version 3.6.5:
  * Bump go to 1.24.7
  * fix 20271: protect backend usage from concurrent applySnapshot and defrag
  * Re-check that the lease still exists during the renew process
  * Add an e2e test to reproduce lease Renew returns a wrong response
  * server: Fix TestLogRotation error message in Go 1.24
  * dependency: bump github.com/golangci/golangci-lint from v1.63.4 to v1.64.8
  * Bump bbolt to v1.4.3
  * Remove checking confState during schema migration
  * Remove the --experimental-snapshot-catch-up-entries from help</changelog>
</package>
<package pkgid="2f2d294fd1ca3f7217dd310eb0030317225fb2e294d1a6c61c49f104d3bc0025" name="exim" arch="aarch64">
  <version epoch="0" ver="4.98.2" rel="bp156.2.1"/>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1656331200">- update to exim 4.96
  * Move from using the pcre library to pcre2.
  * Constification work in the filters module required a major version
    bump for the local-scan API.  Specifically, the "headers_charset"
    global which is visible via the API is now const and may therefore
    not be modified by local-scan code.
  * Bug 2819: speed up command-line messages being read in.  Previously a
    time check was being done for every character; replace that with one
    per buffer.
  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
    sent was prefixed with a length byte.
  * Change the SMTP feature name for pipelining connect to be compliant with
    RFC 5321.  Previously Dovecot (at least) would log errors during
    submission.
  * Fix macro-definition during "-be" expansion testing.  The move to
    write-protected store for macros had not accounted for these runtime
    additions; fix by removing this protection for "-be" mode.
  * Convert all uses of select() to poll().
  * Fix use of $sender_host_name in daemon process.  When used in certain
    main-section options or in a connect ACL, the value from the first ever
    connection was never replaced for subsequent connections.
  * Bug 2838: Fix for i32lp64 hard-align platforms
  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
    with underbars is given.
  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.
  * Debugging initiated by an ACL control now continues through into routing
    and transport processes.
  * The "expand" debug selector now gives more detail, specifically on the
    result of expansion operators and items.
  * Bug 2751: Fix include_directory in redirect routers.  Previously a
    bad comparison between the option value and the name of the file to
    be included was done, and a mismatch was wrongly identified.
  * Support for Berkeley DB versions 1 and 2 is withdrawn.
  * When built with NDBM for hints DB's check for nonexistence of a name
    supplied as the db file-pair basename.
  * Remove the "allow_insecure_tainted_data" main config option and the
    "taint" log_selector.
  * Fix static address-list lookups to properly return the matched item.
    Previously only the domain part was returned.
  * The ${run} expansion item now expands its command string elements after
    splitting.  Previously it was before; the new ordering makes handling
    zero-length arguments simpler.
  * Taint-check exec arguments for transport-initiated external processes.
    Previously, tainted values could be used.  This affects "pipe", "lmtp" and
    "queryprogram" transport, transport-filter, and ETRN commands.
    The ${run} expansion is also affected: in "preexpand" mode no part of
    the command line may be tainted, in default mode the executable name
    may not be tainted.
  * Fix CHUNKING on a continued-transport.  Previously the usabilility of
    the facility was not passed across execs, and only the first message
    passed over a connection could use BDAT; any further ones using DATA.
  * Support the PIPECONNECT facility in the smtp transport when the helo_data
    uses $sending_ip_address and an interface is specified.
  * OpenSSL: fix transport-required OCSP stapling verification under session
    resumption.
  * TLS resumption: the key for session lookup in the client now includes
    more info that a server could potentially use in configuring a TLS
    session, avoiding oferring mismatching sessions to such a server.
  * Fix string_copyn() for limit greater than actual string length.
  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection
    close; it may be needed for a subsequent connection.
  * Fix CHUNKING for a second message on a connection when the first was
    rejected.
  * Fix ${srs_encode ...} to handle an empty sender address, now returning
    an empty address.
  * Bug 2855: Handle a v4mapped sender address given us by a frontending
    proxy.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
</package>
<package pkgid="a8c1ab6f6b94edcacd384a2fff5bd0d18bca95ef497df1472b6ff408b0036491" name="exim" arch="ppc64le">
  <version epoch="0" ver="4.98.2" rel="bp156.2.1"/>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1656331200">- update to exim 4.96
  * Move from using the pcre library to pcre2.
  * Constification work in the filters module required a major version
    bump for the local-scan API.  Specifically, the "headers_charset"
    global which is visible via the API is now const and may therefore
    not be modified by local-scan code.
  * Bug 2819: speed up command-line messages being read in.  Previously a
    time check was being done for every character; replace that with one
    per buffer.
  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
    sent was prefixed with a length byte.
  * Change the SMTP feature name for pipelining connect to be compliant with
    RFC 5321.  Previously Dovecot (at least) would log errors during
    submission.
  * Fix macro-definition during "-be" expansion testing.  The move to
    write-protected store for macros had not accounted for these runtime
    additions; fix by removing this protection for "-be" mode.
  * Convert all uses of select() to poll().
  * Fix use of $sender_host_name in daemon process.  When used in certain
    main-section options or in a connect ACL, the value from the first ever
    connection was never replaced for subsequent connections.
  * Bug 2838: Fix for i32lp64 hard-align platforms
  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
    with underbars is given.
  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.
  * Debugging initiated by an ACL control now continues through into routing
    and transport processes.
  * The "expand" debug selector now gives more detail, specifically on the
    result of expansion operators and items.
  * Bug 2751: Fix include_directory in redirect routers.  Previously a
    bad comparison between the option value and the name of the file to
    be included was done, and a mismatch was wrongly identified.
  * Support for Berkeley DB versions 1 and 2 is withdrawn.
  * When built with NDBM for hints DB's check for nonexistence of a name
    supplied as the db file-pair basename.
  * Remove the "allow_insecure_tainted_data" main config option and the
    "taint" log_selector.
  * Fix static address-list lookups to properly return the matched item.
    Previously only the domain part was returned.
  * The ${run} expansion item now expands its command string elements after
    splitting.  Previously it was before; the new ordering makes handling
    zero-length arguments simpler.
  * Taint-check exec arguments for transport-initiated external processes.
    Previously, tainted values could be used.  This affects "pipe", "lmtp" and
    "queryprogram" transport, transport-filter, and ETRN commands.
    The ${run} expansion is also affected: in "preexpand" mode no part of
    the command line may be tainted, in default mode the executable name
    may not be tainted.
  * Fix CHUNKING on a continued-transport.  Previously the usabilility of
    the facility was not passed across execs, and only the first message
    passed over a connection could use BDAT; any further ones using DATA.
  * Support the PIPECONNECT facility in the smtp transport when the helo_data
    uses $sending_ip_address and an interface is specified.
  * OpenSSL: fix transport-required OCSP stapling verification under session
    resumption.
  * TLS resumption: the key for session lookup in the client now includes
    more info that a server could potentially use in configuring a TLS
    session, avoiding oferring mismatching sessions to such a server.
  * Fix string_copyn() for limit greater than actual string length.
  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection
    close; it may be needed for a subsequent connection.
  * Fix CHUNKING for a second message on a connection when the first was
    rejected.
  * Fix ${srs_encode ...} to handle an empty sender address, now returning
    an empty address.
  * Bug 2855: Handle a v4mapped sender address given us by a frontending
    proxy.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
</package>
<package pkgid="8209246689317a563b1700d9d37be82c74cbdfe98c08801ad2723f92ca4cfe3f" name="exim" arch="s390x">
  <version epoch="0" ver="4.98.2" rel="bp156.2.1"/>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1656331200">- update to exim 4.96
  * Move from using the pcre library to pcre2.
  * Constification work in the filters module required a major version
    bump for the local-scan API.  Specifically, the "headers_charset"
    global which is visible via the API is now const and may therefore
    not be modified by local-scan code.
  * Bug 2819: speed up command-line messages being read in.  Previously a
    time check was being done for every character; replace that with one
    per buffer.
  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
    sent was prefixed with a length byte.
  * Change the SMTP feature name for pipelining connect to be compliant with
    RFC 5321.  Previously Dovecot (at least) would log errors during
    submission.
  * Fix macro-definition during "-be" expansion testing.  The move to
    write-protected store for macros had not accounted for these runtime
    additions; fix by removing this protection for "-be" mode.
  * Convert all uses of select() to poll().
  * Fix use of $sender_host_name in daemon process.  When used in certain
    main-section options or in a connect ACL, the value from the first ever
    connection was never replaced for subsequent connections.
  * Bug 2838: Fix for i32lp64 hard-align platforms
  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
    with underbars is given.
  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.
  * Debugging initiated by an ACL control now continues through into routing
    and transport processes.
  * The "expand" debug selector now gives more detail, specifically on the
    result of expansion operators and items.
  * Bug 2751: Fix include_directory in redirect routers.  Previously a
    bad comparison between the option value and the name of the file to
    be included was done, and a mismatch was wrongly identified.
  * Support for Berkeley DB versions 1 and 2 is withdrawn.
  * When built with NDBM for hints DB's check for nonexistence of a name
    supplied as the db file-pair basename.
  * Remove the "allow_insecure_tainted_data" main config option and the
    "taint" log_selector.
  * Fix static address-list lookups to properly return the matched item.
    Previously only the domain part was returned.
  * The ${run} expansion item now expands its command string elements after
    splitting.  Previously it was before; the new ordering makes handling
    zero-length arguments simpler.
  * Taint-check exec arguments for transport-initiated external processes.
    Previously, tainted values could be used.  This affects "pipe", "lmtp" and
    "queryprogram" transport, transport-filter, and ETRN commands.
    The ${run} expansion is also affected: in "preexpand" mode no part of
    the command line may be tainted, in default mode the executable name
    may not be tainted.
  * Fix CHUNKING on a continued-transport.  Previously the usabilility of
    the facility was not passed across execs, and only the first message
    passed over a connection could use BDAT; any further ones using DATA.
  * Support the PIPECONNECT facility in the smtp transport when the helo_data
    uses $sending_ip_address and an interface is specified.
  * OpenSSL: fix transport-required OCSP stapling verification under session
    resumption.
  * TLS resumption: the key for session lookup in the client now includes
    more info that a server could potentially use in configuring a TLS
    session, avoiding oferring mismatching sessions to such a server.
  * Fix string_copyn() for limit greater than actual string length.
  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection
    close; it may be needed for a subsequent connection.
  * Fix CHUNKING for a second message on a connection when the first was
    rejected.
  * Fix ${srs_encode ...} to handle an empty sender address, now returning
    an empty address.
  * Bug 2855: Handle a v4mapped sender address given us by a frontending
    proxy.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
</package>
<package pkgid="d62afcefd40164f579607bdf21d460303fab2401921731e94f6e62235911c3d3" name="exim" arch="src">
  <version epoch="0" ver="4.98.2" rel="bp156.2.1"/>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1656331200">- update to exim 4.96
  * Move from using the pcre library to pcre2.
  * Constification work in the filters module required a major version
    bump for the local-scan API.  Specifically, the "headers_charset"
    global which is visible via the API is now const and may therefore
    not be modified by local-scan code.
  * Bug 2819: speed up command-line messages being read in.  Previously a
    time check was being done for every character; replace that with one
    per buffer.
  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
    sent was prefixed with a length byte.
  * Change the SMTP feature name for pipelining connect to be compliant with
    RFC 5321.  Previously Dovecot (at least) would log errors during
    submission.
  * Fix macro-definition during "-be" expansion testing.  The move to
    write-protected store for macros had not accounted for these runtime
    additions; fix by removing this protection for "-be" mode.
  * Convert all uses of select() to poll().
  * Fix use of $sender_host_name in daemon process.  When used in certain
    main-section options or in a connect ACL, the value from the first ever
    connection was never replaced for subsequent connections.
  * Bug 2838: Fix for i32lp64 hard-align platforms
  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
    with underbars is given.
  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.
  * Debugging initiated by an ACL control now continues through into routing
    and transport processes.
  * The "expand" debug selector now gives more detail, specifically on the
    result of expansion operators and items.
  * Bug 2751: Fix include_directory in redirect routers.  Previously a
    bad comparison between the option value and the name of the file to
    be included was done, and a mismatch was wrongly identified.
  * Support for Berkeley DB versions 1 and 2 is withdrawn.
  * When built with NDBM for hints DB's check for nonexistence of a name
    supplied as the db file-pair basename.
  * Remove the "allow_insecure_tainted_data" main config option and the
    "taint" log_selector.
  * Fix static address-list lookups to properly return the matched item.
    Previously only the domain part was returned.
  * The ${run} expansion item now expands its command string elements after
    splitting.  Previously it was before; the new ordering makes handling
    zero-length arguments simpler.
  * Taint-check exec arguments for transport-initiated external processes.
    Previously, tainted values could be used.  This affects "pipe", "lmtp" and
    "queryprogram" transport, transport-filter, and ETRN commands.
    The ${run} expansion is also affected: in "preexpand" mode no part of
    the command line may be tainted, in default mode the executable name
    may not be tainted.
  * Fix CHUNKING on a continued-transport.  Previously the usabilility of
    the facility was not passed across execs, and only the first message
    passed over a connection could use BDAT; any further ones using DATA.
  * Support the PIPECONNECT facility in the smtp transport when the helo_data
    uses $sending_ip_address and an interface is specified.
  * OpenSSL: fix transport-required OCSP stapling verification under session
    resumption.
  * TLS resumption: the key for session lookup in the client now includes
    more info that a server could potentially use in configuring a TLS
    session, avoiding oferring mismatching sessions to such a server.
  * Fix string_copyn() for limit greater than actual string length.
  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection
    close; it may be needed for a subsequent connection.
  * Fix CHUNKING for a second message on a connection when the first was
    rejected.
  * Fix ${srs_encode ...} to handle an empty sender address, now returning
    an empty address.
  * Bug 2855: Handle a v4mapped sender address given us by a frontending
    proxy.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
</package>
<package pkgid="08967699d66c668ff913b2ea5018d217fc6fe8eebb2e5ba0c3ac86873521aa4d" name="exim" arch="x86_64">
  <version epoch="0" ver="4.98.2" rel="bp156.2.1"/>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1656331200">- update to exim 4.96
  * Move from using the pcre library to pcre2.
  * Constification work in the filters module required a major version
    bump for the local-scan API.  Specifically, the "headers_charset"
    global which is visible via the API is now const and may therefore
    not be modified by local-scan code.
  * Bug 2819: speed up command-line messages being read in.  Previously a
    time check was being done for every character; replace that with one
    per buffer.
  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
    sent was prefixed with a length byte.
  * Change the SMTP feature name for pipelining connect to be compliant with
    RFC 5321.  Previously Dovecot (at least) would log errors during
    submission.
  * Fix macro-definition during "-be" expansion testing.  The move to
    write-protected store for macros had not accounted for these runtime
    additions; fix by removing this protection for "-be" mode.
  * Convert all uses of select() to poll().
  * Fix use of $sender_host_name in daemon process.  When used in certain
    main-section options or in a connect ACL, the value from the first ever
    connection was never replaced for subsequent connections.
  * Bug 2838: Fix for i32lp64 hard-align platforms
  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
    with underbars is given.
  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.
  * Debugging initiated by an ACL control now continues through into routing
    and transport processes.
  * The "expand" debug selector now gives more detail, specifically on the
    result of expansion operators and items.
  * Bug 2751: Fix include_directory in redirect routers.  Previously a
    bad comparison between the option value and the name of the file to
    be included was done, and a mismatch was wrongly identified.
  * Support for Berkeley DB versions 1 and 2 is withdrawn.
  * When built with NDBM for hints DB's check for nonexistence of a name
    supplied as the db file-pair basename.
  * Remove the "allow_insecure_tainted_data" main config option and the
    "taint" log_selector.
  * Fix static address-list lookups to properly return the matched item.
    Previously only the domain part was returned.
  * The ${run} expansion item now expands its command string elements after
    splitting.  Previously it was before; the new ordering makes handling
    zero-length arguments simpler.
  * Taint-check exec arguments for transport-initiated external processes.
    Previously, tainted values could be used.  This affects "pipe", "lmtp" and
    "queryprogram" transport, transport-filter, and ETRN commands.
    The ${run} expansion is also affected: in "preexpand" mode no part of
    the command line may be tainted, in default mode the executable name
    may not be tainted.
  * Fix CHUNKING on a continued-transport.  Previously the usabilility of
    the facility was not passed across execs, and only the first message
    passed over a connection could use BDAT; any further ones using DATA.
  * Support the PIPECONNECT facility in the smtp transport when the helo_data
    uses $sending_ip_address and an interface is specified.
  * OpenSSL: fix transport-required OCSP stapling verification under session
    resumption.
  * TLS resumption: the key for session lookup in the client now includes
    more info that a server could potentially use in configuring a TLS
    session, avoiding oferring mismatching sessions to such a server.
  * Fix string_copyn() for limit greater than actual string length.
  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection
    close; it may be needed for a subsequent connection.
  * Fix CHUNKING for a second message on a connection when the first was
    rejected.
  * Fix ${srs_encode ...} to handle an empty sender address, now returning
    an empty address.
  * Bug 2855: Handle a v4mapped sender address given us by a frontending
    proxy.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
</package>
<package pkgid="db0c37af94acd54ee6f759e965b4676c0d892127890a55368e60a3e140208220" name="exim" arch="aarch64">
  <version epoch="0" ver="4.98.2" rel="bp156.5.1"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1758801600">- Fix potential security issue with logfile rotation CVE-2025-53881 (bsc#1246457)</changelog>
</package>
<package pkgid="760d8efb4f2f181f10b49dfb5d2e99147a62dd703d67f99e88c29bf4f83e3487" name="exim" arch="ppc64le">
  <version epoch="0" ver="4.98.2" rel="bp156.5.1"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1758801600">- Fix potential security issue with logfile rotation CVE-2025-53881 (bsc#1246457)</changelog>
</package>
<package pkgid="8f543f972c435c71e026c475353737765386f50bf0413c57f9af92c3ec26f27b" name="exim" arch="s390x">
  <version epoch="0" ver="4.98.2" rel="bp156.5.1"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1758801600">- Fix potential security issue with logfile rotation CVE-2025-53881 (bsc#1246457)</changelog>
</package>
<package pkgid="6f1330661b3505dd987bc568beca89b8d45f1366b6a6037a008ee2dab7034ca3" name="exim" arch="src">
  <version epoch="0" ver="4.98.2" rel="bp156.5.1"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1758801600">- Fix potential security issue with logfile rotation CVE-2025-53881 (bsc#1246457)</changelog>
</package>
<package pkgid="b850d7b171a307e232f82af3bbc07fc8b582d41bb6853ecadc20ea96f0a88802" name="exim" arch="x86_64">
  <version epoch="0" ver="4.98.2" rel="bp156.5.1"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1758801600">- Fix potential security issue with logfile rotation CVE-2025-53881 (bsc#1246457)</changelog>
</package>
<package pkgid="5e19a3caafa649d1b3a74be32f3d879bf3c11bf274fc31db95623cd8cf7ee2f6" name="eximon" arch="aarch64">
  <version epoch="0" ver="4.98.2" rel="bp156.2.1"/>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1656331200">- update to exim 4.96
  * Move from using the pcre library to pcre2.
  * Constification work in the filters module required a major version
    bump for the local-scan API.  Specifically, the "headers_charset"
    global which is visible via the API is now const and may therefore
    not be modified by local-scan code.
  * Bug 2819: speed up command-line messages being read in.  Previously a
    time check was being done for every character; replace that with one
    per buffer.
  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
    sent was prefixed with a length byte.
  * Change the SMTP feature name for pipelining connect to be compliant with
    RFC 5321.  Previously Dovecot (at least) would log errors during
    submission.
  * Fix macro-definition during "-be" expansion testing.  The move to
    write-protected store for macros had not accounted for these runtime
    additions; fix by removing this protection for "-be" mode.
  * Convert all uses of select() to poll().
  * Fix use of $sender_host_name in daemon process.  When used in certain
    main-section options or in a connect ACL, the value from the first ever
    connection was never replaced for subsequent connections.
  * Bug 2838: Fix for i32lp64 hard-align platforms
  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
    with underbars is given.
  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.
  * Debugging initiated by an ACL control now continues through into routing
    and transport processes.
  * The "expand" debug selector now gives more detail, specifically on the
    result of expansion operators and items.
  * Bug 2751: Fix include_directory in redirect routers.  Previously a
    bad comparison between the option value and the name of the file to
    be included was done, and a mismatch was wrongly identified.
  * Support for Berkeley DB versions 1 and 2 is withdrawn.
  * When built with NDBM for hints DB's check for nonexistence of a name
    supplied as the db file-pair basename.
  * Remove the "allow_insecure_tainted_data" main config option and the
    "taint" log_selector.
  * Fix static address-list lookups to properly return the matched item.
    Previously only the domain part was returned.
  * The ${run} expansion item now expands its command string elements after
    splitting.  Previously it was before; the new ordering makes handling
    zero-length arguments simpler.
  * Taint-check exec arguments for transport-initiated external processes.
    Previously, tainted values could be used.  This affects "pipe", "lmtp" and
    "queryprogram" transport, transport-filter, and ETRN commands.
    The ${run} expansion is also affected: in "preexpand" mode no part of
    the command line may be tainted, in default mode the executable name
    may not be tainted.
  * Fix CHUNKING on a continued-transport.  Previously the usabilility of
    the facility was not passed across execs, and only the first message
    passed over a connection could use BDAT; any further ones using DATA.
  * Support the PIPECONNECT facility in the smtp transport when the helo_data
    uses $sending_ip_address and an interface is specified.
  * OpenSSL: fix transport-required OCSP stapling verification under session
    resumption.
  * TLS resumption: the key for session lookup in the client now includes
    more info that a server could potentially use in configuring a TLS
    session, avoiding oferring mismatching sessions to such a server.
  * Fix string_copyn() for limit greater than actual string length.
  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection
    close; it may be needed for a subsequent connection.
  * Fix CHUNKING for a second message on a connection when the first was
    rejected.
  * Fix ${srs_encode ...} to handle an empty sender address, now returning
    an empty address.
  * Bug 2855: Handle a v4mapped sender address given us by a frontending
    proxy.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
</package>
<package pkgid="8c0c8e78b119e126666c7b128b2bbd68fab8c1a92fd5d8bdeefb2c9b4d7938dd" name="eximon" arch="ppc64le">
  <version epoch="0" ver="4.98.2" rel="bp156.2.1"/>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1656331200">- update to exim 4.96
  * Move from using the pcre library to pcre2.
  * Constification work in the filters module required a major version
    bump for the local-scan API.  Specifically, the "headers_charset"
    global which is visible via the API is now const and may therefore
    not be modified by local-scan code.
  * Bug 2819: speed up command-line messages being read in.  Previously a
    time check was being done for every character; replace that with one
    per buffer.
  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
    sent was prefixed with a length byte.
  * Change the SMTP feature name for pipelining connect to be compliant with
    RFC 5321.  Previously Dovecot (at least) would log errors during
    submission.
  * Fix macro-definition during "-be" expansion testing.  The move to
    write-protected store for macros had not accounted for these runtime
    additions; fix by removing this protection for "-be" mode.
  * Convert all uses of select() to poll().
  * Fix use of $sender_host_name in daemon process.  When used in certain
    main-section options or in a connect ACL, the value from the first ever
    connection was never replaced for subsequent connections.
  * Bug 2838: Fix for i32lp64 hard-align platforms
  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
    with underbars is given.
  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.
  * Debugging initiated by an ACL control now continues through into routing
    and transport processes.
  * The "expand" debug selector now gives more detail, specifically on the
    result of expansion operators and items.
  * Bug 2751: Fix include_directory in redirect routers.  Previously a
    bad comparison between the option value and the name of the file to
    be included was done, and a mismatch was wrongly identified.
  * Support for Berkeley DB versions 1 and 2 is withdrawn.
  * When built with NDBM for hints DB's check for nonexistence of a name
    supplied as the db file-pair basename.
  * Remove the "allow_insecure_tainted_data" main config option and the
    "taint" log_selector.
  * Fix static address-list lookups to properly return the matched item.
    Previously only the domain part was returned.
  * The ${run} expansion item now expands its command string elements after
    splitting.  Previously it was before; the new ordering makes handling
    zero-length arguments simpler.
  * Taint-check exec arguments for transport-initiated external processes.
    Previously, tainted values could be used.  This affects "pipe", "lmtp" and
    "queryprogram" transport, transport-filter, and ETRN commands.
    The ${run} expansion is also affected: in "preexpand" mode no part of
    the command line may be tainted, in default mode the executable name
    may not be tainted.
  * Fix CHUNKING on a continued-transport.  Previously the usabilility of
    the facility was not passed across execs, and only the first message
    passed over a connection could use BDAT; any further ones using DATA.
  * Support the PIPECONNECT facility in the smtp transport when the helo_data
    uses $sending_ip_address and an interface is specified.
  * OpenSSL: fix transport-required OCSP stapling verification under session
    resumption.
  * TLS resumption: the key for session lookup in the client now includes
    more info that a server could potentially use in configuring a TLS
    session, avoiding oferring mismatching sessions to such a server.
  * Fix string_copyn() for limit greater than actual string length.
  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection
    close; it may be needed for a subsequent connection.
  * Fix CHUNKING for a second message on a connection when the first was
    rejected.
  * Fix ${srs_encode ...} to handle an empty sender address, now returning
    an empty address.
  * Bug 2855: Handle a v4mapped sender address given us by a frontending
    proxy.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
</package>
<package pkgid="19b9fd2c493f8b45ac1e014852193227487884203ebba095cb1e8c4409c6a189" name="eximon" arch="s390x">
  <version epoch="0" ver="4.98.2" rel="bp156.2.1"/>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1656331200">- update to exim 4.96
  * Move from using the pcre library to pcre2.
  * Constification work in the filters module required a major version
    bump for the local-scan API.  Specifically, the "headers_charset"
    global which is visible via the API is now const and may therefore
    not be modified by local-scan code.
  * Bug 2819: speed up command-line messages being read in.  Previously a
    time check was being done for every character; replace that with one
    per buffer.
  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
    sent was prefixed with a length byte.
  * Change the SMTP feature name for pipelining connect to be compliant with
    RFC 5321.  Previously Dovecot (at least) would log errors during
    submission.
  * Fix macro-definition during "-be" expansion testing.  The move to
    write-protected store for macros had not accounted for these runtime
    additions; fix by removing this protection for "-be" mode.
  * Convert all uses of select() to poll().
  * Fix use of $sender_host_name in daemon process.  When used in certain
    main-section options or in a connect ACL, the value from the first ever
    connection was never replaced for subsequent connections.
  * Bug 2838: Fix for i32lp64 hard-align platforms
  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
    with underbars is given.
  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.
  * Debugging initiated by an ACL control now continues through into routing
    and transport processes.
  * The "expand" debug selector now gives more detail, specifically on the
    result of expansion operators and items.
  * Bug 2751: Fix include_directory in redirect routers.  Previously a
    bad comparison between the option value and the name of the file to
    be included was done, and a mismatch was wrongly identified.
  * Support for Berkeley DB versions 1 and 2 is withdrawn.
  * When built with NDBM for hints DB's check for nonexistence of a name
    supplied as the db file-pair basename.
  * Remove the "allow_insecure_tainted_data" main config option and the
    "taint" log_selector.
  * Fix static address-list lookups to properly return the matched item.
    Previously only the domain part was returned.
  * The ${run} expansion item now expands its command string elements after
    splitting.  Previously it was before; the new ordering makes handling
    zero-length arguments simpler.
  * Taint-check exec arguments for transport-initiated external processes.
    Previously, tainted values could be used.  This affects "pipe", "lmtp" and
    "queryprogram" transport, transport-filter, and ETRN commands.
    The ${run} expansion is also affected: in "preexpand" mode no part of
    the command line may be tainted, in default mode the executable name
    may not be tainted.
  * Fix CHUNKING on a continued-transport.  Previously the usabilility of
    the facility was not passed across execs, and only the first message
    passed over a connection could use BDAT; any further ones using DATA.
  * Support the PIPECONNECT facility in the smtp transport when the helo_data
    uses $sending_ip_address and an interface is specified.
  * OpenSSL: fix transport-required OCSP stapling verification under session
    resumption.
  * TLS resumption: the key for session lookup in the client now includes
    more info that a server could potentially use in configuring a TLS
    session, avoiding oferring mismatching sessions to such a server.
  * Fix string_copyn() for limit greater than actual string length.
  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection
    close; it may be needed for a subsequent connection.
  * Fix CHUNKING for a second message on a connection when the first was
    rejected.
  * Fix ${srs_encode ...} to handle an empty sender address, now returning
    an empty address.
  * Bug 2855: Handle a v4mapped sender address given us by a frontending
    proxy.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
</package>
<package pkgid="9918e53df5213fe3f59a033e68505b125d55e115ed4d4c51e508cb274805fdea" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.98.2" rel="bp156.2.1"/>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1656331200">- update to exim 4.96
  * Move from using the pcre library to pcre2.
  * Constification work in the filters module required a major version
    bump for the local-scan API.  Specifically, the "headers_charset"
    global which is visible via the API is now const and may therefore
    not be modified by local-scan code.
  * Bug 2819: speed up command-line messages being read in.  Previously a
    time check was being done for every character; replace that with one
    per buffer.
  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
    sent was prefixed with a length byte.
  * Change the SMTP feature name for pipelining connect to be compliant with
    RFC 5321.  Previously Dovecot (at least) would log errors during
    submission.
  * Fix macro-definition during "-be" expansion testing.  The move to
    write-protected store for macros had not accounted for these runtime
    additions; fix by removing this protection for "-be" mode.
  * Convert all uses of select() to poll().
  * Fix use of $sender_host_name in daemon process.  When used in certain
    main-section options or in a connect ACL, the value from the first ever
    connection was never replaced for subsequent connections.
  * Bug 2838: Fix for i32lp64 hard-align platforms
  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
    with underbars is given.
  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.
  * Debugging initiated by an ACL control now continues through into routing
    and transport processes.
  * The "expand" debug selector now gives more detail, specifically on the
    result of expansion operators and items.
  * Bug 2751: Fix include_directory in redirect routers.  Previously a
    bad comparison between the option value and the name of the file to
    be included was done, and a mismatch was wrongly identified.
  * Support for Berkeley DB versions 1 and 2 is withdrawn.
  * When built with NDBM for hints DB's check for nonexistence of a name
    supplied as the db file-pair basename.
  * Remove the "allow_insecure_tainted_data" main config option and the
    "taint" log_selector.
  * Fix static address-list lookups to properly return the matched item.
    Previously only the domain part was returned.
  * The ${run} expansion item now expands its command string elements after
    splitting.  Previously it was before; the new ordering makes handling
    zero-length arguments simpler.
  * Taint-check exec arguments for transport-initiated external processes.
    Previously, tainted values could be used.  This affects "pipe", "lmtp" and
    "queryprogram" transport, transport-filter, and ETRN commands.
    The ${run} expansion is also affected: in "preexpand" mode no part of
    the command line may be tainted, in default mode the executable name
    may not be tainted.
  * Fix CHUNKING on a continued-transport.  Previously the usabilility of
    the facility was not passed across execs, and only the first message
    passed over a connection could use BDAT; any further ones using DATA.
  * Support the PIPECONNECT facility in the smtp transport when the helo_data
    uses $sending_ip_address and an interface is specified.
  * OpenSSL: fix transport-required OCSP stapling verification under session
    resumption.
  * TLS resumption: the key for session lookup in the client now includes
    more info that a server could potentially use in configuring a TLS
    session, avoiding oferring mismatching sessions to such a server.
  * Fix string_copyn() for limit greater than actual string length.
  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection
    close; it may be needed for a subsequent connection.
  * Fix CHUNKING for a second message on a connection when the first was
    rejected.
  * Fix ${srs_encode ...} to handle an empty sender address, now returning
    an empty address.
  * Bug 2855: Handle a v4mapped sender address given us by a frontending
    proxy.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
</package>
<package pkgid="8828df5c87d1d3e2a0bd6d060c41075be9666c1131bce45b9da9f7f7091a31d7" name="eximon" arch="aarch64">
  <version epoch="0" ver="4.98.2" rel="bp156.5.1"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1758801600">- Fix potential security issue with logfile rotation CVE-2025-53881 (bsc#1246457)</changelog>
</package>
<package pkgid="a8602d97424f2338ce76627a74ca5e902efdfc0ebd535319b74c9c33132dd876" name="eximon" arch="ppc64le">
  <version epoch="0" ver="4.98.2" rel="bp156.5.1"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1758801600">- Fix potential security issue with logfile rotation CVE-2025-53881 (bsc#1246457)</changelog>
</package>
<package pkgid="e327168f3f7c9b86e3a63d0f3ff73ca6beb31a63959e5b50c9a2978961167008" name="eximon" arch="s390x">
  <version epoch="0" ver="4.98.2" rel="bp156.5.1"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1758801600">- Fix potential security issue with logfile rotation CVE-2025-53881 (bsc#1246457)</changelog>
</package>
<package pkgid="ed47267996b07517585f9e1a91a721c7d9ed7d05606c191edcf149bf301ce154" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.98.2" rel="bp156.5.1"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1758801600">- Fix potential security issue with logfile rotation CVE-2025-53881 (bsc#1246457)</changelog>
</package>
<package pkgid="03ba563669a095c31d8122e55b756fb0b894af29d23cfbae970838c465ca4b6f" name="eximstats-html" arch="aarch64">
  <version epoch="0" ver="4.98.2" rel="bp156.2.1"/>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1656331200">- update to exim 4.96
  * Move from using the pcre library to pcre2.
  * Constification work in the filters module required a major version
    bump for the local-scan API.  Specifically, the "headers_charset"
    global which is visible via the API is now const and may therefore
    not be modified by local-scan code.
  * Bug 2819: speed up command-line messages being read in.  Previously a
    time check was being done for every character; replace that with one
    per buffer.
  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
    sent was prefixed with a length byte.
  * Change the SMTP feature name for pipelining connect to be compliant with
    RFC 5321.  Previously Dovecot (at least) would log errors during
    submission.
  * Fix macro-definition during "-be" expansion testing.  The move to
    write-protected store for macros had not accounted for these runtime
    additions; fix by removing this protection for "-be" mode.
  * Convert all uses of select() to poll().
  * Fix use of $sender_host_name in daemon process.  When used in certain
    main-section options or in a connect ACL, the value from the first ever
    connection was never replaced for subsequent connections.
  * Bug 2838: Fix for i32lp64 hard-align platforms
  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
    with underbars is given.
  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.
  * Debugging initiated by an ACL control now continues through into routing
    and transport processes.
  * The "expand" debug selector now gives more detail, specifically on the
    result of expansion operators and items.
  * Bug 2751: Fix include_directory in redirect routers.  Previously a
    bad comparison between the option value and the name of the file to
    be included was done, and a mismatch was wrongly identified.
  * Support for Berkeley DB versions 1 and 2 is withdrawn.
  * When built with NDBM for hints DB's check for nonexistence of a name
    supplied as the db file-pair basename.
  * Remove the "allow_insecure_tainted_data" main config option and the
    "taint" log_selector.
  * Fix static address-list lookups to properly return the matched item.
    Previously only the domain part was returned.
  * The ${run} expansion item now expands its command string elements after
    splitting.  Previously it was before; the new ordering makes handling
    zero-length arguments simpler.
  * Taint-check exec arguments for transport-initiated external processes.
    Previously, tainted values could be used.  This affects "pipe", "lmtp" and
    "queryprogram" transport, transport-filter, and ETRN commands.
    The ${run} expansion is also affected: in "preexpand" mode no part of
    the command line may be tainted, in default mode the executable name
    may not be tainted.
  * Fix CHUNKING on a continued-transport.  Previously the usabilility of
    the facility was not passed across execs, and only the first message
    passed over a connection could use BDAT; any further ones using DATA.
  * Support the PIPECONNECT facility in the smtp transport when the helo_data
    uses $sending_ip_address and an interface is specified.
  * OpenSSL: fix transport-required OCSP stapling verification under session
    resumption.
  * TLS resumption: the key for session lookup in the client now includes
    more info that a server could potentially use in configuring a TLS
    session, avoiding oferring mismatching sessions to such a server.
  * Fix string_copyn() for limit greater than actual string length.
  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection
    close; it may be needed for a subsequent connection.
  * Fix CHUNKING for a second message on a connection when the first was
    rejected.
  * Fix ${srs_encode ...} to handle an empty sender address, now returning
    an empty address.
  * Bug 2855: Handle a v4mapped sender address given us by a frontending
    proxy.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
</package>
<package pkgid="98160233cc5364c6a6bf7ebca69de67201b1c5cf3af877d4ec9202a02f937ff4" name="eximstats-html" arch="ppc64le">
  <version epoch="0" ver="4.98.2" rel="bp156.2.1"/>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1656331200">- update to exim 4.96
  * Move from using the pcre library to pcre2.
  * Constification work in the filters module required a major version
    bump for the local-scan API.  Specifically, the "headers_charset"
    global which is visible via the API is now const and may therefore
    not be modified by local-scan code.
  * Bug 2819: speed up command-line messages being read in.  Previously a
    time check was being done for every character; replace that with one
    per buffer.
  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
    sent was prefixed with a length byte.
  * Change the SMTP feature name for pipelining connect to be compliant with
    RFC 5321.  Previously Dovecot (at least) would log errors during
    submission.
  * Fix macro-definition during "-be" expansion testing.  The move to
    write-protected store for macros had not accounted for these runtime
    additions; fix by removing this protection for "-be" mode.
  * Convert all uses of select() to poll().
  * Fix use of $sender_host_name in daemon process.  When used in certain
    main-section options or in a connect ACL, the value from the first ever
    connection was never replaced for subsequent connections.
  * Bug 2838: Fix for i32lp64 hard-align platforms
  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
    with underbars is given.
  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.
  * Debugging initiated by an ACL control now continues through into routing
    and transport processes.
  * The "expand" debug selector now gives more detail, specifically on the
    result of expansion operators and items.
  * Bug 2751: Fix include_directory in redirect routers.  Previously a
    bad comparison between the option value and the name of the file to
    be included was done, and a mismatch was wrongly identified.
  * Support for Berkeley DB versions 1 and 2 is withdrawn.
  * When built with NDBM for hints DB's check for nonexistence of a name
    supplied as the db file-pair basename.
  * Remove the "allow_insecure_tainted_data" main config option and the
    "taint" log_selector.
  * Fix static address-list lookups to properly return the matched item.
    Previously only the domain part was returned.
  * The ${run} expansion item now expands its command string elements after
    splitting.  Previously it was before; the new ordering makes handling
    zero-length arguments simpler.
  * Taint-check exec arguments for transport-initiated external processes.
    Previously, tainted values could be used.  This affects "pipe", "lmtp" and
    "queryprogram" transport, transport-filter, and ETRN commands.
    The ${run} expansion is also affected: in "preexpand" mode no part of
    the command line may be tainted, in default mode the executable name
    may not be tainted.
  * Fix CHUNKING on a continued-transport.  Previously the usabilility of
    the facility was not passed across execs, and only the first message
    passed over a connection could use BDAT; any further ones using DATA.
  * Support the PIPECONNECT facility in the smtp transport when the helo_data
    uses $sending_ip_address and an interface is specified.
  * OpenSSL: fix transport-required OCSP stapling verification under session
    resumption.
  * TLS resumption: the key for session lookup in the client now includes
    more info that a server could potentially use in configuring a TLS
    session, avoiding oferring mismatching sessions to such a server.
  * Fix string_copyn() for limit greater than actual string length.
  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection
    close; it may be needed for a subsequent connection.
  * Fix CHUNKING for a second message on a connection when the first was
    rejected.
  * Fix ${srs_encode ...} to handle an empty sender address, now returning
    an empty address.
  * Bug 2855: Handle a v4mapped sender address given us by a frontending
    proxy.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
</package>
<package pkgid="44f04693e426cd012cb6e26b07a1df26482280ae6fa1daeee47dfdc34bfc31e2" name="eximstats-html" arch="s390x">
  <version epoch="0" ver="4.98.2" rel="bp156.2.1"/>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1656331200">- update to exim 4.96
  * Move from using the pcre library to pcre2.
  * Constification work in the filters module required a major version
    bump for the local-scan API.  Specifically, the "headers_charset"
    global which is visible via the API is now const and may therefore
    not be modified by local-scan code.
  * Bug 2819: speed up command-line messages being read in.  Previously a
    time check was being done for every character; replace that with one
    per buffer.
  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
    sent was prefixed with a length byte.
  * Change the SMTP feature name for pipelining connect to be compliant with
    RFC 5321.  Previously Dovecot (at least) would log errors during
    submission.
  * Fix macro-definition during "-be" expansion testing.  The move to
    write-protected store for macros had not accounted for these runtime
    additions; fix by removing this protection for "-be" mode.
  * Convert all uses of select() to poll().
  * Fix use of $sender_host_name in daemon process.  When used in certain
    main-section options or in a connect ACL, the value from the first ever
    connection was never replaced for subsequent connections.
  * Bug 2838: Fix for i32lp64 hard-align platforms
  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
    with underbars is given.
  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.
  * Debugging initiated by an ACL control now continues through into routing
    and transport processes.
  * The "expand" debug selector now gives more detail, specifically on the
    result of expansion operators and items.
  * Bug 2751: Fix include_directory in redirect routers.  Previously a
    bad comparison between the option value and the name of the file to
    be included was done, and a mismatch was wrongly identified.
  * Support for Berkeley DB versions 1 and 2 is withdrawn.
  * When built with NDBM for hints DB's check for nonexistence of a name
    supplied as the db file-pair basename.
  * Remove the "allow_insecure_tainted_data" main config option and the
    "taint" log_selector.
  * Fix static address-list lookups to properly return the matched item.
    Previously only the domain part was returned.
  * The ${run} expansion item now expands its command string elements after
    splitting.  Previously it was before; the new ordering makes handling
    zero-length arguments simpler.
  * Taint-check exec arguments for transport-initiated external processes.
    Previously, tainted values could be used.  This affects "pipe", "lmtp" and
    "queryprogram" transport, transport-filter, and ETRN commands.
    The ${run} expansion is also affected: in "preexpand" mode no part of
    the command line may be tainted, in default mode the executable name
    may not be tainted.
  * Fix CHUNKING on a continued-transport.  Previously the usabilility of
    the facility was not passed across execs, and only the first message
    passed over a connection could use BDAT; any further ones using DATA.
  * Support the PIPECONNECT facility in the smtp transport when the helo_data
    uses $sending_ip_address and an interface is specified.
  * OpenSSL: fix transport-required OCSP stapling verification under session
    resumption.
  * TLS resumption: the key for session lookup in the client now includes
    more info that a server could potentially use in configuring a TLS
    session, avoiding oferring mismatching sessions to such a server.
  * Fix string_copyn() for limit greater than actual string length.
  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection
    close; it may be needed for a subsequent connection.
  * Fix CHUNKING for a second message on a connection when the first was
    rejected.
  * Fix ${srs_encode ...} to handle an empty sender address, now returning
    an empty address.
  * Bug 2855: Handle a v4mapped sender address given us by a frontending
    proxy.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
</package>
<package pkgid="2e3083922c8da741f85c324af669e47046591a5a91f040131add8a7a3077cf59" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.98.2" rel="bp156.2.1"/>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1656331200">- update to exim 4.96
  * Move from using the pcre library to pcre2.
  * Constification work in the filters module required a major version
    bump for the local-scan API.  Specifically, the "headers_charset"
    global which is visible via the API is now const and may therefore
    not be modified by local-scan code.
  * Bug 2819: speed up command-line messages being read in.  Previously a
    time check was being done for every character; replace that with one
    per buffer.
  * Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
    sent was prefixed with a length byte.
  * Change the SMTP feature name for pipelining connect to be compliant with
    RFC 5321.  Previously Dovecot (at least) would log errors during
    submission.
  * Fix macro-definition during "-be" expansion testing.  The move to
    write-protected store for macros had not accounted for these runtime
    additions; fix by removing this protection for "-be" mode.
  * Convert all uses of select() to poll().
  * Fix use of $sender_host_name in daemon process.  When used in certain
    main-section options or in a connect ACL, the value from the first ever
    connection was never replaced for subsequent connections.
  * Bug 2838: Fix for i32lp64 hard-align platforms
  * Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
    with underbars is given.
  * Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.
  * Debugging initiated by an ACL control now continues through into routing
    and transport processes.
  * The "expand" debug selector now gives more detail, specifically on the
    result of expansion operators and items.
  * Bug 2751: Fix include_directory in redirect routers.  Previously a
    bad comparison between the option value and the name of the file to
    be included was done, and a mismatch was wrongly identified.
  * Support for Berkeley DB versions 1 and 2 is withdrawn.
  * When built with NDBM for hints DB's check for nonexistence of a name
    supplied as the db file-pair basename.
  * Remove the "allow_insecure_tainted_data" main config option and the
    "taint" log_selector.
  * Fix static address-list lookups to properly return the matched item.
    Previously only the domain part was returned.
  * The ${run} expansion item now expands its command string elements after
    splitting.  Previously it was before; the new ordering makes handling
    zero-length arguments simpler.
  * Taint-check exec arguments for transport-initiated external processes.
    Previously, tainted values could be used.  This affects "pipe", "lmtp" and
    "queryprogram" transport, transport-filter, and ETRN commands.
    The ${run} expansion is also affected: in "preexpand" mode no part of
    the command line may be tainted, in default mode the executable name
    may not be tainted.
  * Fix CHUNKING on a continued-transport.  Previously the usabilility of
    the facility was not passed across execs, and only the first message
    passed over a connection could use BDAT; any further ones using DATA.
  * Support the PIPECONNECT facility in the smtp transport when the helo_data
    uses $sending_ip_address and an interface is specified.
  * OpenSSL: fix transport-required OCSP stapling verification under session
    resumption.
  * TLS resumption: the key for session lookup in the client now includes
    more info that a server could potentially use in configuring a TLS
    session, avoiding oferring mismatching sessions to such a server.
  * Fix string_copyn() for limit greater than actual string length.
  * Bug 2886: GnuTLS: Do not free the cached creds on transport connection
    close; it may be needed for a subsequent connection.
  * Fix CHUNKING for a second message on a connection when the first was
    rejected.
  * Fix ${srs_encode ...} to handle an empty sender address, now returning
    an empty address.
  * Bug 2855: Handle a v4mapped sender address given us by a frontending
    proxy.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
</package>
<package pkgid="3cc29eae799d2ef0dc2d1431c33f3269a2a54d58eb1c1ddf9fe7189f7969d9e8" name="eximstats-html" arch="aarch64">
  <version epoch="0" ver="4.98.2" rel="bp156.5.1"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1758801600">- Fix potential security issue with logfile rotation CVE-2025-53881 (bsc#1246457)</changelog>
</package>
<package pkgid="a4f14408ef27e3fd2241bad34d6ca690831bfc0d9a6e23cd91ca01fe9bb8bf20" name="eximstats-html" arch="ppc64le">
  <version epoch="0" ver="4.98.2" rel="bp156.5.1"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1758801600">- Fix potential security issue with logfile rotation CVE-2025-53881 (bsc#1246457)</changelog>
</package>
<package pkgid="9f19f5083d99a85abf02b6c2fb6c22c2baa76afbe959fb92e30c018c3b418080" name="eximstats-html" arch="s390x">
  <version epoch="0" ver="4.98.2" rel="bp156.5.1"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1758801600">- Fix potential security issue with logfile rotation CVE-2025-53881 (bsc#1246457)</changelog>
</package>
<package pkgid="e89a31c9f9963d0b3cf66e0c82869ddbeb90a1834a1025975761ef299d156a50" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.98.2" rel="bp156.5.1"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1656504000">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1662465600">- Own /var/spool/mail (boo#1179574)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1664452800">- add (patch-no-exit-on-rewrite-malformed-address.patch)
  Fix exit on attempt to rewrite a malformed address (Bug 2903)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Don't build the NIS module anymore, libnsl/NIS are deprecated</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1680004800">- enable sender rewriting support (SUPPORT_SRS)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- security update to exim 4.96.1
  * fixes CVE-2023-42114 (bsc#1215784)
  * fixes CVE-2023-42115 (bsc#1215785)
  * fixes CVE-2023-42116 (bsc#1215786)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1697457600">- security update to exim 4.96.2
  * fixes CVE-2023-42117 (bsc#1215787)
  * fixes CVE-2023-42119 (bsc#1215789)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1699358400">- update to exim 4.97
  * remove patch-no-exit-on-rewrite-malformed-address.patch (upstreamed)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703937600">- update to 4.97.1 (bsc#1218387, CVE-2023-51766):
  * Fixes for the smtp protocol smuggling (CVE-2023-51766)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721044800">- update to 4.98 (bsc#1227423, CVE-2024-39929):
  * The dkim_status ACL condition may now be used in data ACLs
  * The dkim_verbose logging control also enables logging of signing
  * The dkim_timestamps signing option now accepts zero to include
    a current timestamp but no expiry timestamp.
  * The recipients_max main option is now expanded.
  * Setting variables for "exim -be" can set a tainted value.
  * A dns:fail event.
  * The dsearch lookup supports search for a sub-path.
  * Include mailtest utility for simple connection checking.
  * Add SMTP WELLKNOWN extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731931200">- Own /srv/www which is no longer owned by the filesystem package.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1741694400">- Adding directory /var/spool/mail/ to permissions file /etc/permissions.d/exim
  as required by rpmlint (bsc#123625)</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1743076800">- security release 4.98.2 for CVE-2025-30232 (bsc#1239794)
  * Fixed use-after-free with potential for privilege escalation.
- security release 4.98.1 for CVE-2025-26794 (bsc#1237424)
  * Fixed remote SQL injection when SQLite hints and ETRN serialization
    are used.</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747396800">- fix installation of permissions.exim file in /etc/permissions.d/ directory if
  suse_version is set (bsc#1240755)</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1747742400">- fix issues with permissions (bsc#1240755):
  * remove /usr/sbin/exim from permissions.exim file
  * add set_permissions entry for /var/spool/mail to spec file in
    post section</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1749211200">- fix issues with permissions (bsc#1240755):
  * add su mail mail option to exim.logrotate
  * add %verify_permissions -e /var/spool/mail/
  * add trailing slash
    %set_permissions /var/spool/mail/</changelog>
  <changelog author="Wolfgang Engel &lt;wolfgang.engel@suse.com&gt;" date="1758801600">- Fix potential security issue with logfile rotation CVE-2025-53881 (bsc#1246457)</changelog>
</package>
<package pkgid="60cb3ea856fec8d461099d11810ce3cc3ffa59762d065c2460a438a5a6cb44bd" name="exo" arch="src">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="34b73b3c451c980ba6e9dbc1a096d1759e02e4f3c0c6f546c8a1a6527878cd72" name="exo" arch="src">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="fec88b45f8c2f818a96df2b1a5fe1b780850d54c9dd085d118e6bb5ca8f338ab" name="exo-data" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="64700a9e87beede54e71ac82ef92c2d7c5c40bc7b215dae8bef1ccbe2570af8c" name="exo-data" arch="i586">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="0272ee68e8536c15d9d3643dae4c45ee6300f92df8d6129a2ef4783652e082ca" name="exo-data" arch="ppc64le">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="693bdd2f83c5c37aa70817f1b5ec82e3799391234055af06ab1fe13c1b7a3c3f" name="exo-data" arch="s390x">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="17fbd1c6ee3bc3000e133e7b47a32d23934228ccfeda21caa21626f1df1973f5" name="exo-data" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="d23abf8422d8748c280ee71e2b62f65694d64e27117c6cc952dc663f00969987" name="exo-data" arch="aarch64">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="d12f6908c66b304461bdf196c960472f53e6b657985aee7de0bfb7183d12bf11" name="exo-data" arch="i586">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="b9f24d1217416fd847bc82cba383fe75a7aaf5994c4114ec91b29bbc171b9122" name="exo-data" arch="ppc64le">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="615b5fb127f28e73f87f4247894b91c678cf0f8723f9cfc61673993255eee650" name="exo-data" arch="s390x">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="d33e039a5251513fdef042508ecb6a7346a15b1e075c757945c94621b4fd80c2" name="exo-data" arch="x86_64">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="1b1bd820b63a3922f4ee6dc445bf408f47f50c18d43b941a76697ed0233b558d" name="exo-devel" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="44065cdaffbaab0affbef583ecfd5ef2c6ca2e0545c9f96f70935322c920c973" name="exo-devel" arch="i586">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="9ac115f2e31f431394c058c031a508f008b44a16b6243f186d26be59a1efb0d0" name="exo-devel" arch="ppc64le">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="828bfa082bbcfaa1c6043b9b0c6e79c4fdadc0c0423861492458c5fe354c3e07" name="exo-devel" arch="s390x">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="fbb53eed373c7cc5d3cdcdb5c1102a1d8a787899e9684fb9f1385e8db3a0a1fd" name="exo-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="aea5ce775bca58858e061a0e5a5ba435636ed96827436292daad413239709fbe" name="exo-devel" arch="aarch64">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="bcd2eba80102f1640655db3b750292007d527cdfb8bfa1cd304a8c8e527680a7" name="exo-devel" arch="i586">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="51a370a4ab8acd313fdd16481d208a8e66ae5835888fdf40ceed23aea8efee1e" name="exo-devel" arch="ppc64le">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="e4dd4bdf306b85818987685b393b970c178a29afe0610035f435256c76f81dea" name="exo-devel" arch="s390x">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="e81fda3649bf9f095b5a3fbb304ae58aef654b19a1d43ecd71e2ddd950aa50bd" name="exo-devel" arch="x86_64">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="0eb38251ea54ab5e010c10dc0842b1241095a88ae1b604d5e9f6d5fc5d06cea9" name="exo-lang" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="763eebd8014f5d4ecd456461a8f414a586c241484d0e9e656eb9b962849afd0e" name="exo-lang" arch="noarch">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="efbe2637e324395d53894ebf2eabefa85d0b59c6c8482140822eb08cbb0ac724" name="exo-tools" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="3f849a15539fb8622f3ac016ddef25ca8136d92a2c0e6da437aed439df710871" name="exo-tools" arch="i586">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="f026c5bb565524d9608d6a63f2ca3dd0950bbe891ed751565ebe1ebd6db89b4d" name="exo-tools" arch="ppc64le">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="3a313534751d3774037bf75c1da0d0b62fe7c01e4d9a08c208d874062d3de516" name="exo-tools" arch="s390x">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="daaa68c4440d0faaf97d678d6a54777f82b132d733dcc4f974201b94799f2772" name="exo-tools" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="2525e61c496ae75c28fccec7853cf1b2aea436494659c151f45bd2c42fe31974" name="exo-tools" arch="aarch64">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="db0292e791efb16d57359d6a3e691ff21bda571800e3b3045ff6ac0179fee47b" name="exo-tools" arch="i586">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="88ecaf2e4e9164f6ca22802e7e05d5c9eb20d7963ae55421632f9e2a63954d3c" name="exo-tools" arch="ppc64le">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="da167d8efb01a5b5f76ade608ad2a1bdd8ddb32a1aa27082db17851d978feb9e" name="exo-tools" arch="s390x">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="61010f3699aeba7ce901020fa03fdbfe9523bedc0db8eb4949ee7856b1be9c2b" name="exo-tools" arch="x86_64">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="a7ebc16abbb8c370f895b6ac41220ecbf09e75f2073853d057fbdacdaef47224" name="flannel" arch="aarch64">
  <version epoch="0" ver="0.27.4" rel="bp156.4.3.1"/>
  <changelog author="kukuk@suse.de" date="1559822400">- Fix path of flanneld in yaml file
- Cleanup filelist</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1560081600">- Add missing words in descriptions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1563451200">- Use current kube-flannel.yaml from git to fix DNS problems</changelog>
  <changelog author="kukuk@suse.de" date="1563537600">- Set cni version in flannel manifest</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update flannel manifest to match upstream and support k8s 1.16 API</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708801">- Fix typo in updated flannel manifest</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1570795200">- It's apps/v1, not apps/v1beta1
- Fix some more typos</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1572350400">- Use Tumbleweed Kubic flannel containers instead of devel:kubic
  containers. This fixes aarch64 and ppc64* (boo#1152185)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.12.0:
  * fix deleteLease
  * Use publicIP lookup iface if --public-ip indicated
  * kubernetes 1.16 cni error
  * Add cniVersion to general CNI plugin configuration.
  * Needs to clear NodeNetworkUnavailable flag on Kubernetes
  * Replaces gorillalabs go-powershell with bhendo/go-powershell
  * Make VXLAN device learning attribute configurable
  * change nodeSelector to nodeAffinity and schedule the pod to linux node
  * This PR adds the cni version to the cni-conf.yaml inside the kube-flannel-cfg configmap
  * EnableNonPersistent flag for Windows Overlay networks
  * snap package.
  * Update lease with DR Mac
  * main.go: add the "net-config-path" flag
  * Deploy Flannel with unprivileged PSP
  * Enable local host to local pod connectivity in Windows VXLAN
  * Update hcsshim for HostRoute policy in Windows VXLAN</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1614340800">- update to 0.13.0:
  * Use multi-arch Docker images in the Kubernetes manifest
  * Accept existing XMRF policies and update them intead of raising errors
  * Add --no-sanity-check to iptables-wrapper-installer.sh for architectures other than amd64
  * Use "docker manifest" to publish multi-arch Docker images
  * Add NET_RAW capability to support cri-o
  * remove glide
  * switch to go modules
  * Add and implement iptables-wrapper-installer.sh from https://github.com/kubernetes-sigs/iptables-wrappers
  * documentation: set priorityClassName to system-node-critical
  * Added a hint for firewall rules
  * Disabling ipv6 accept_ra explicitely on the created interface
  * use alpine 3.12 everywhere
  * windows: replace old netsh (rakelkar/gonetsh) with powershell commands
  * fix CVE-2019-14697
  * Bugfix: VtepMac would be empty when lease re-acquire for windows
  * Use stable os and arch label for node
  * doc(awsvpc): correct the required permissions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1615982400">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream version with go.mod</changelog>
  <changelog author="Ralf Haferkamp &lt;ralf@h4kamp.de&gt;" date="1619611200">- Sync manifest with upstream (0.13.0 release). Includes the
  following changes:
  * Fix typo and invalid indent in kube-flannel.yml
  * Use stable os and arch label for node
  * set priorityClassName to system-node-critical
  * Add NET_RAW capability to support cri-o
  * Use multi-arch Docker images in the Kubernetes manifest</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1627041600">- Update to 0.14.0:
  * Add tencent cloud VPC network support
  * moving go modules to flannel-io/flannel and updating to go 1.16
  * fix(windows): nil pointer panic
  * Preserve environment for extension backend
  * Fix flannel hang if lease expired
  * Documentation for the Flannel upgrade/downgrade procedure
  * Move from glog to klog
  * fix(host-gw): failed to restart if gateway hnsep existed
  * ipsec: use well known paths of charon daemon
  * upgrade client-go to 1.19.4
  * move from juju/errors to pkg/errors
  * subnets: move forward the cursor to skip illegal subnet
  * Fix Expired URL to Deploying Flannel with kubeadm
  * Modify kube-flannel.yaml to use rbac.authorization.k8s.io/v1
  * preserve AccessKey &amp; AccessKeySecret environment on sudo fix some typo in doc.
  * iptables: handle errors that prevent rule deletes
- Sync kube-flannel.yaml manifest
- Change project URL to github.com/flannel-io/flannel</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1706702400">- Update to version 0.24.2:
  * Prepare for v0.24.2 release
  * Increase the time out for interface checking in windows
  * Prepare for v0.24.1 release
  * Provide support to select the interface in Windows
  * Improve the log from powershell
  * Wait all the jobs to finish before deploy the github-page
  * remove remaining references to mips64le
  * add multi-arch dockerfile
  * add missing riscv64 in docker manifest create step
  * prepare for v0.24.0 release
  * Bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * Add the VNI to the error message in Windows
  * chart: add possibility for defining image pull secrets in daemonset
  * Remove multiclustercidr logic from code
  * Update opentelemetry dependencies
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  * Add riscv64 arch in GH actions
  * vxlan vni should not be type uint16
  * Quote wireguard psk in helm chart
  * add riscv64 support</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1706702401">- sync `kube-flannel.yaml` manifest with upstream release, v0.24.2 (bsc#1218694)
- refactor, clean spec file. Include following change:
  * bump go version build requirements: `BuildRequires:  golang(API) &gt;= 1.20`
  * include go modules dependencies as vendor tar - vendor.tar.gz, update following %prep, %build, %install sections accordingly</changelog>
  <changelog author="Jeff Mahoney &lt;jeffm@suse.com&gt;" date="1713528000">- Remove dependency on net-tools-deprecated.  It's not actually used.</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929600">- Update to version 0.26.4:
  * Moved to github container registry
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.17 to 3.5.18
  * fix: Fix high CPU usage when losing etcd connection and try to re-establish connection with exponential backoff
  * Bump github.com/containernetworking/plugins from 1.6.1 to 1.6.2
  * Bump alpine from 20240923 to 20250108 in /images
  * Bump golang.org/x/net from 0.31.0 to 0.33.0
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0
  * feat: add bool to control CNI config installation using Helm
  * fix: add missing MY_NODE_NAME env in chart
  * Bump k8s deps to 0.29.12
  * Don't panic upon shutdown when running in standalone mode
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Bump alpine from 20240807 to 20240923 in /images
  * Bump github.com/containernetworking/plugins from 1.6.0 to 1.6.1
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/vishvananda/netns from 0.0.4 to 0.0.5
  * Use the standard context library
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Updated flannel cni image to 1.6.0
  * Updated CNI plugins version on the README
  * Bump sigs.k8s.io/knftables from 0.0.17 to 0.0.18
  * Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1
  * Bump github.com/Microsoft/hcsshim from 0.12.8 to 0.12.9
  * Added check to not check br_filter in case of windows
  * Bumo golangci-lint to latest version
  * Bump to go 1.23
  * Added checks for br_netfilter module
  * Try not to cleanup multiple peers behind same PublicIP
  * fix trivy check
  * check that the lease includes an IP address of the requested family before configuring the flannel interface
  * Fixed IPv6 chosen in case of public-ipv6 configured
  * add timeout to e2e test pipelines
  * Update k8s version ine2e tests to v1.29.8
  * Update netlink to v1.3.0
  * Fixed values file on flannel chart
  * Bump k8s.io/klog/v2 from 2.120.1 to 2.130.1
  * Updated Flannel chart with Netpol containter and removed clustercidr
  * Fix bug in hostgw-windows
  * Fix bug in the logic polling the interface
  * Added node-public-ip annotation
  * Try several times to contact kube-api before failing
  * Fixed IPv6 0 initialization
  * wireguard backend: avoid error message if route already exists
  * Bump github.com/avast/retry-go/v4 from 4.5.1 to 4.6.0
  * use wait.PollUntilContextTimeout instead of deprecated wait.Poll
  * troubleshooting.md: add `ethtool -K flannel.1 tx-checksum-ip-generic off` for NAT
  * Added configuration for pulic-ip through node annotation
  * extension/vxlan: remove arp commands from vxlan examples
  * Refactor TrafficManager windows files to clarify logs
  * Add persistent-mac option to v6 too
  * fix comparison with previous networks in SetupAndEnsureMasqRules
  * show content of stdout and stderr when running iptables-restore returns an error
  * Add extra check before contacting kube-api
  * remove unimplemented error in windows trafficmngr
  * remove --dirty flags in git describe
  * Added leaseAttr string method with logs on VxLan
  * remove multiClusterCidr related-code.
  * Implement nftables masquerading for flannel
  * fix: ipv6 iptables rules were created even when IPv6 was disabled
  * Add tolerations to the flannel chart
  * Added additional check for n.spec.podCIDRs
  * Remove net-tools since it's an old package that we are not using
  * fix iptables_windows.go
  * Clean-up Makefile and use docker buildx locally
  * Use manual test to ensure iptables-* binaries are present
  * Bump github.com/containerd/containerd from 1.6.23 to 1.6.26
  * Bump github.com/joho/godotenv
  * SubnetManager should use the main context
  * Simplify TrafficManager interface
  * refactor iptables package to prepare for nftables-based implementation
- flannel v0.26.4, includes `golang.org/x/net/http2` at v0.34.0, which fixes bsc#1236522 (CVE-2023-45288)</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929601">- add `go-modules` for automated creation of go vendored modules tarball
- bump go version: `BuildRequires:  golang(API) &gt;= 1.23`
- delete unused `kube-flannel.yaml` source in the spec file, it is directly soured from the flannel source tar ball</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1744632000">- Update to version 0.26.6:
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump the etcd group with 4 updates
  * Bump the tencent group with 2 updates
  * Organize dependabot PR's more clearly by using groups
  * Use peer's wireguard port, not our own
  * Bump to codeql v3
  * Pin all GHA to a specific SHA commit
  * Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (fix CVE-2025-30204, bsc#1240516)
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.18 to 3.5.20
  * add missing GH_TOKEN env var in release.yaml
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Upload chart archive with the release files
  * make deps
  * refactor release.yaml to reduce use of potentially vulnerable GH Actions
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * enable setting CNI directory paths in helm chart
  * Added cni file configuration on the chart
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/avast/retry-go/v4 from 4.6.0 to 4.6.1</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1765454400">- Update to version 0.27.4:
  * Removed PodSecurityPolicy manifest creation
  * Fix interface IP address detection in dual-stack mode
  * Fix: recreate VXLAN device (flannel.*) when external interface is deleted and re-added (#2247)
  * golangci-lint: fix iptables_test
  * firewall: add option to disable fully-random mode for MASQUERADE
  * Bump the tencent group with 2 updates
  * Bump github.com/coreos/go-systemd/v22 in the other-go-modules group
  * Bump golang.org/x/sys in the other-go-modules group
  * Bump the etcd group with 4 updates
  * Bump etcd version in tests
  * Stop using deprecated cache.NewIndexerInformer function
  * Bump k8s test version
  * Bump k8s deps to v0.31.11
  * Bump the other-go-modules group with 2 updates
  * helm chart: add nodeSelector in the helm chart
  * Updated Alpine image
  * Added flag to enable blackhole route locally for Canal
  * Bump golang.org/x/sync in the other-go-modules group
  * make enqueueLeaseEvent context aware and prevent dangling goroutines when context is done - fixed a typo/build error
  * make retry interval exp backoff
  * cont_when_cache_not_ready configurable with fail by default * use semaphore as opposed to raw signal channel
  * Update pkg/subnet/kube/kube.go
  * Fix deadlock in startup for large clusters
  * enable setting resources in helm chart
  * capture close() err on subnet file save (#2248)
  * doc: document flag --iptables-forward-rules
  * Bump netlink to v1.3.1
  * fix: clean-up rules when starting instead of shutting down
  * Bump k8s and sles test version
  * Add modprobe br_netfilter step in test workflows
  * test: don't run the workflows on "push" events
  * Update to the latest flannel cni-plugins v1.7.1
  * Move to go 1.23.6</changelog>
</package>
<package pkgid="d41af93fc35e1cb102abf7355759bd476eeb4e0f6d0fc523feebd83e9674dde6" name="flannel" arch="i586">
  <version epoch="0" ver="0.27.4" rel="bp156.4.3.1"/>
  <changelog author="kukuk@suse.de" date="1559822400">- Fix path of flanneld in yaml file
- Cleanup filelist</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1560081600">- Add missing words in descriptions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1563451200">- Use current kube-flannel.yaml from git to fix DNS problems</changelog>
  <changelog author="kukuk@suse.de" date="1563537600">- Set cni version in flannel manifest</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update flannel manifest to match upstream and support k8s 1.16 API</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708801">- Fix typo in updated flannel manifest</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1570795200">- It's apps/v1, not apps/v1beta1
- Fix some more typos</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1572350400">- Use Tumbleweed Kubic flannel containers instead of devel:kubic
  containers. This fixes aarch64 and ppc64* (boo#1152185)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.12.0:
  * fix deleteLease
  * Use publicIP lookup iface if --public-ip indicated
  * kubernetes 1.16 cni error
  * Add cniVersion to general CNI plugin configuration.
  * Needs to clear NodeNetworkUnavailable flag on Kubernetes
  * Replaces gorillalabs go-powershell with bhendo/go-powershell
  * Make VXLAN device learning attribute configurable
  * change nodeSelector to nodeAffinity and schedule the pod to linux node
  * This PR adds the cni version to the cni-conf.yaml inside the kube-flannel-cfg configmap
  * EnableNonPersistent flag for Windows Overlay networks
  * snap package.
  * Update lease with DR Mac
  * main.go: add the "net-config-path" flag
  * Deploy Flannel with unprivileged PSP
  * Enable local host to local pod connectivity in Windows VXLAN
  * Update hcsshim for HostRoute policy in Windows VXLAN</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1614340800">- update to 0.13.0:
  * Use multi-arch Docker images in the Kubernetes manifest
  * Accept existing XMRF policies and update them intead of raising errors
  * Add --no-sanity-check to iptables-wrapper-installer.sh for architectures other than amd64
  * Use "docker manifest" to publish multi-arch Docker images
  * Add NET_RAW capability to support cri-o
  * remove glide
  * switch to go modules
  * Add and implement iptables-wrapper-installer.sh from https://github.com/kubernetes-sigs/iptables-wrappers
  * documentation: set priorityClassName to system-node-critical
  * Added a hint for firewall rules
  * Disabling ipv6 accept_ra explicitely on the created interface
  * use alpine 3.12 everywhere
  * windows: replace old netsh (rakelkar/gonetsh) with powershell commands
  * fix CVE-2019-14697
  * Bugfix: VtepMac would be empty when lease re-acquire for windows
  * Use stable os and arch label for node
  * doc(awsvpc): correct the required permissions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1615982400">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream version with go.mod</changelog>
  <changelog author="Ralf Haferkamp &lt;ralf@h4kamp.de&gt;" date="1619611200">- Sync manifest with upstream (0.13.0 release). Includes the
  following changes:
  * Fix typo and invalid indent in kube-flannel.yml
  * Use stable os and arch label for node
  * set priorityClassName to system-node-critical
  * Add NET_RAW capability to support cri-o
  * Use multi-arch Docker images in the Kubernetes manifest</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1627041600">- Update to 0.14.0:
  * Add tencent cloud VPC network support
  * moving go modules to flannel-io/flannel and updating to go 1.16
  * fix(windows): nil pointer panic
  * Preserve environment for extension backend
  * Fix flannel hang if lease expired
  * Documentation for the Flannel upgrade/downgrade procedure
  * Move from glog to klog
  * fix(host-gw): failed to restart if gateway hnsep existed
  * ipsec: use well known paths of charon daemon
  * upgrade client-go to 1.19.4
  * move from juju/errors to pkg/errors
  * subnets: move forward the cursor to skip illegal subnet
  * Fix Expired URL to Deploying Flannel with kubeadm
  * Modify kube-flannel.yaml to use rbac.authorization.k8s.io/v1
  * preserve AccessKey &amp; AccessKeySecret environment on sudo fix some typo in doc.
  * iptables: handle errors that prevent rule deletes
- Sync kube-flannel.yaml manifest
- Change project URL to github.com/flannel-io/flannel</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1706702400">- Update to version 0.24.2:
  * Prepare for v0.24.2 release
  * Increase the time out for interface checking in windows
  * Prepare for v0.24.1 release
  * Provide support to select the interface in Windows
  * Improve the log from powershell
  * Wait all the jobs to finish before deploy the github-page
  * remove remaining references to mips64le
  * add multi-arch dockerfile
  * add missing riscv64 in docker manifest create step
  * prepare for v0.24.0 release
  * Bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * Add the VNI to the error message in Windows
  * chart: add possibility for defining image pull secrets in daemonset
  * Remove multiclustercidr logic from code
  * Update opentelemetry dependencies
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  * Add riscv64 arch in GH actions
  * vxlan vni should not be type uint16
  * Quote wireguard psk in helm chart
  * add riscv64 support</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1706702401">- sync `kube-flannel.yaml` manifest with upstream release, v0.24.2 (bsc#1218694)
- refactor, clean spec file. Include following change:
  * bump go version build requirements: `BuildRequires:  golang(API) &gt;= 1.20`
  * include go modules dependencies as vendor tar - vendor.tar.gz, update following %prep, %build, %install sections accordingly</changelog>
  <changelog author="Jeff Mahoney &lt;jeffm@suse.com&gt;" date="1713528000">- Remove dependency on net-tools-deprecated.  It's not actually used.</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929600">- Update to version 0.26.4:
  * Moved to github container registry
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.17 to 3.5.18
  * fix: Fix high CPU usage when losing etcd connection and try to re-establish connection with exponential backoff
  * Bump github.com/containernetworking/plugins from 1.6.1 to 1.6.2
  * Bump alpine from 20240923 to 20250108 in /images
  * Bump golang.org/x/net from 0.31.0 to 0.33.0
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0
  * feat: add bool to control CNI config installation using Helm
  * fix: add missing MY_NODE_NAME env in chart
  * Bump k8s deps to 0.29.12
  * Don't panic upon shutdown when running in standalone mode
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Bump alpine from 20240807 to 20240923 in /images
  * Bump github.com/containernetworking/plugins from 1.6.0 to 1.6.1
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/vishvananda/netns from 0.0.4 to 0.0.5
  * Use the standard context library
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Updated flannel cni image to 1.6.0
  * Updated CNI plugins version on the README
  * Bump sigs.k8s.io/knftables from 0.0.17 to 0.0.18
  * Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1
  * Bump github.com/Microsoft/hcsshim from 0.12.8 to 0.12.9
  * Added check to not check br_filter in case of windows
  * Bumo golangci-lint to latest version
  * Bump to go 1.23
  * Added checks for br_netfilter module
  * Try not to cleanup multiple peers behind same PublicIP
  * fix trivy check
  * check that the lease includes an IP address of the requested family before configuring the flannel interface
  * Fixed IPv6 chosen in case of public-ipv6 configured
  * add timeout to e2e test pipelines
  * Update k8s version ine2e tests to v1.29.8
  * Update netlink to v1.3.0
  * Fixed values file on flannel chart
  * Bump k8s.io/klog/v2 from 2.120.1 to 2.130.1
  * Updated Flannel chart with Netpol containter and removed clustercidr
  * Fix bug in hostgw-windows
  * Fix bug in the logic polling the interface
  * Added node-public-ip annotation
  * Try several times to contact kube-api before failing
  * Fixed IPv6 0 initialization
  * wireguard backend: avoid error message if route already exists
  * Bump github.com/avast/retry-go/v4 from 4.5.1 to 4.6.0
  * use wait.PollUntilContextTimeout instead of deprecated wait.Poll
  * troubleshooting.md: add `ethtool -K flannel.1 tx-checksum-ip-generic off` for NAT
  * Added configuration for pulic-ip through node annotation
  * extension/vxlan: remove arp commands from vxlan examples
  * Refactor TrafficManager windows files to clarify logs
  * Add persistent-mac option to v6 too
  * fix comparison with previous networks in SetupAndEnsureMasqRules
  * show content of stdout and stderr when running iptables-restore returns an error
  * Add extra check before contacting kube-api
  * remove unimplemented error in windows trafficmngr
  * remove --dirty flags in git describe
  * Added leaseAttr string method with logs on VxLan
  * remove multiClusterCidr related-code.
  * Implement nftables masquerading for flannel
  * fix: ipv6 iptables rules were created even when IPv6 was disabled
  * Add tolerations to the flannel chart
  * Added additional check for n.spec.podCIDRs
  * Remove net-tools since it's an old package that we are not using
  * fix iptables_windows.go
  * Clean-up Makefile and use docker buildx locally
  * Use manual test to ensure iptables-* binaries are present
  * Bump github.com/containerd/containerd from 1.6.23 to 1.6.26
  * Bump github.com/joho/godotenv
  * SubnetManager should use the main context
  * Simplify TrafficManager interface
  * refactor iptables package to prepare for nftables-based implementation
- flannel v0.26.4, includes `golang.org/x/net/http2` at v0.34.0, which fixes bsc#1236522 (CVE-2023-45288)</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929601">- add `go-modules` for automated creation of go vendored modules tarball
- bump go version: `BuildRequires:  golang(API) &gt;= 1.23`
- delete unused `kube-flannel.yaml` source in the spec file, it is directly soured from the flannel source tar ball</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1744632000">- Update to version 0.26.6:
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump the etcd group with 4 updates
  * Bump the tencent group with 2 updates
  * Organize dependabot PR's more clearly by using groups
  * Use peer's wireguard port, not our own
  * Bump to codeql v3
  * Pin all GHA to a specific SHA commit
  * Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (fix CVE-2025-30204, bsc#1240516)
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.18 to 3.5.20
  * add missing GH_TOKEN env var in release.yaml
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Upload chart archive with the release files
  * make deps
  * refactor release.yaml to reduce use of potentially vulnerable GH Actions
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * enable setting CNI directory paths in helm chart
  * Added cni file configuration on the chart
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/avast/retry-go/v4 from 4.6.0 to 4.6.1</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1765454400">- Update to version 0.27.4:
  * Removed PodSecurityPolicy manifest creation
  * Fix interface IP address detection in dual-stack mode
  * Fix: recreate VXLAN device (flannel.*) when external interface is deleted and re-added (#2247)
  * golangci-lint: fix iptables_test
  * firewall: add option to disable fully-random mode for MASQUERADE
  * Bump the tencent group with 2 updates
  * Bump github.com/coreos/go-systemd/v22 in the other-go-modules group
  * Bump golang.org/x/sys in the other-go-modules group
  * Bump the etcd group with 4 updates
  * Bump etcd version in tests
  * Stop using deprecated cache.NewIndexerInformer function
  * Bump k8s test version
  * Bump k8s deps to v0.31.11
  * Bump the other-go-modules group with 2 updates
  * helm chart: add nodeSelector in the helm chart
  * Updated Alpine image
  * Added flag to enable blackhole route locally for Canal
  * Bump golang.org/x/sync in the other-go-modules group
  * make enqueueLeaseEvent context aware and prevent dangling goroutines when context is done - fixed a typo/build error
  * make retry interval exp backoff
  * cont_when_cache_not_ready configurable with fail by default * use semaphore as opposed to raw signal channel
  * Update pkg/subnet/kube/kube.go
  * Fix deadlock in startup for large clusters
  * enable setting resources in helm chart
  * capture close() err on subnet file save (#2248)
  * doc: document flag --iptables-forward-rules
  * Bump netlink to v1.3.1
  * fix: clean-up rules when starting instead of shutting down
  * Bump k8s and sles test version
  * Add modprobe br_netfilter step in test workflows
  * test: don't run the workflows on "push" events
  * Update to the latest flannel cni-plugins v1.7.1
  * Move to go 1.23.6</changelog>
</package>
<package pkgid="c54fe5106265a50c5e43bab050d3dcbfc90d316db2243f4fe9f278e7e2e039fd" name="flannel" arch="ppc64le">
  <version epoch="0" ver="0.27.4" rel="bp156.4.3.1"/>
  <changelog author="kukuk@suse.de" date="1559822400">- Fix path of flanneld in yaml file
- Cleanup filelist</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1560081600">- Add missing words in descriptions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1563451200">- Use current kube-flannel.yaml from git to fix DNS problems</changelog>
  <changelog author="kukuk@suse.de" date="1563537600">- Set cni version in flannel manifest</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update flannel manifest to match upstream and support k8s 1.16 API</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708801">- Fix typo in updated flannel manifest</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1570795200">- It's apps/v1, not apps/v1beta1
- Fix some more typos</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1572350400">- Use Tumbleweed Kubic flannel containers instead of devel:kubic
  containers. This fixes aarch64 and ppc64* (boo#1152185)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.12.0:
  * fix deleteLease
  * Use publicIP lookup iface if --public-ip indicated
  * kubernetes 1.16 cni error
  * Add cniVersion to general CNI plugin configuration.
  * Needs to clear NodeNetworkUnavailable flag on Kubernetes
  * Replaces gorillalabs go-powershell with bhendo/go-powershell
  * Make VXLAN device learning attribute configurable
  * change nodeSelector to nodeAffinity and schedule the pod to linux node
  * This PR adds the cni version to the cni-conf.yaml inside the kube-flannel-cfg configmap
  * EnableNonPersistent flag for Windows Overlay networks
  * snap package.
  * Update lease with DR Mac
  * main.go: add the "net-config-path" flag
  * Deploy Flannel with unprivileged PSP
  * Enable local host to local pod connectivity in Windows VXLAN
  * Update hcsshim for HostRoute policy in Windows VXLAN</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1614340800">- update to 0.13.0:
  * Use multi-arch Docker images in the Kubernetes manifest
  * Accept existing XMRF policies and update them intead of raising errors
  * Add --no-sanity-check to iptables-wrapper-installer.sh for architectures other than amd64
  * Use "docker manifest" to publish multi-arch Docker images
  * Add NET_RAW capability to support cri-o
  * remove glide
  * switch to go modules
  * Add and implement iptables-wrapper-installer.sh from https://github.com/kubernetes-sigs/iptables-wrappers
  * documentation: set priorityClassName to system-node-critical
  * Added a hint for firewall rules
  * Disabling ipv6 accept_ra explicitely on the created interface
  * use alpine 3.12 everywhere
  * windows: replace old netsh (rakelkar/gonetsh) with powershell commands
  * fix CVE-2019-14697
  * Bugfix: VtepMac would be empty when lease re-acquire for windows
  * Use stable os and arch label for node
  * doc(awsvpc): correct the required permissions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1615982400">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream version with go.mod</changelog>
  <changelog author="Ralf Haferkamp &lt;ralf@h4kamp.de&gt;" date="1619611200">- Sync manifest with upstream (0.13.0 release). Includes the
  following changes:
  * Fix typo and invalid indent in kube-flannel.yml
  * Use stable os and arch label for node
  * set priorityClassName to system-node-critical
  * Add NET_RAW capability to support cri-o
  * Use multi-arch Docker images in the Kubernetes manifest</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1627041600">- Update to 0.14.0:
  * Add tencent cloud VPC network support
  * moving go modules to flannel-io/flannel and updating to go 1.16
  * fix(windows): nil pointer panic
  * Preserve environment for extension backend
  * Fix flannel hang if lease expired
  * Documentation for the Flannel upgrade/downgrade procedure
  * Move from glog to klog
  * fix(host-gw): failed to restart if gateway hnsep existed
  * ipsec: use well known paths of charon daemon
  * upgrade client-go to 1.19.4
  * move from juju/errors to pkg/errors
  * subnets: move forward the cursor to skip illegal subnet
  * Fix Expired URL to Deploying Flannel with kubeadm
  * Modify kube-flannel.yaml to use rbac.authorization.k8s.io/v1
  * preserve AccessKey &amp; AccessKeySecret environment on sudo fix some typo in doc.
  * iptables: handle errors that prevent rule deletes
- Sync kube-flannel.yaml manifest
- Change project URL to github.com/flannel-io/flannel</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1706702400">- Update to version 0.24.2:
  * Prepare for v0.24.2 release
  * Increase the time out for interface checking in windows
  * Prepare for v0.24.1 release
  * Provide support to select the interface in Windows
  * Improve the log from powershell
  * Wait all the jobs to finish before deploy the github-page
  * remove remaining references to mips64le
  * add multi-arch dockerfile
  * add missing riscv64 in docker manifest create step
  * prepare for v0.24.0 release
  * Bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * Add the VNI to the error message in Windows
  * chart: add possibility for defining image pull secrets in daemonset
  * Remove multiclustercidr logic from code
  * Update opentelemetry dependencies
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  * Add riscv64 arch in GH actions
  * vxlan vni should not be type uint16
  * Quote wireguard psk in helm chart
  * add riscv64 support</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1706702401">- sync `kube-flannel.yaml` manifest with upstream release, v0.24.2 (bsc#1218694)
- refactor, clean spec file. Include following change:
  * bump go version build requirements: `BuildRequires:  golang(API) &gt;= 1.20`
  * include go modules dependencies as vendor tar - vendor.tar.gz, update following %prep, %build, %install sections accordingly</changelog>
  <changelog author="Jeff Mahoney &lt;jeffm@suse.com&gt;" date="1713528000">- Remove dependency on net-tools-deprecated.  It's not actually used.</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929600">- Update to version 0.26.4:
  * Moved to github container registry
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.17 to 3.5.18
  * fix: Fix high CPU usage when losing etcd connection and try to re-establish connection with exponential backoff
  * Bump github.com/containernetworking/plugins from 1.6.1 to 1.6.2
  * Bump alpine from 20240923 to 20250108 in /images
  * Bump golang.org/x/net from 0.31.0 to 0.33.0
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0
  * feat: add bool to control CNI config installation using Helm
  * fix: add missing MY_NODE_NAME env in chart
  * Bump k8s deps to 0.29.12
  * Don't panic upon shutdown when running in standalone mode
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Bump alpine from 20240807 to 20240923 in /images
  * Bump github.com/containernetworking/plugins from 1.6.0 to 1.6.1
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/vishvananda/netns from 0.0.4 to 0.0.5
  * Use the standard context library
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Updated flannel cni image to 1.6.0
  * Updated CNI plugins version on the README
  * Bump sigs.k8s.io/knftables from 0.0.17 to 0.0.18
  * Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1
  * Bump github.com/Microsoft/hcsshim from 0.12.8 to 0.12.9
  * Added check to not check br_filter in case of windows
  * Bumo golangci-lint to latest version
  * Bump to go 1.23
  * Added checks for br_netfilter module
  * Try not to cleanup multiple peers behind same PublicIP
  * fix trivy check
  * check that the lease includes an IP address of the requested family before configuring the flannel interface
  * Fixed IPv6 chosen in case of public-ipv6 configured
  * add timeout to e2e test pipelines
  * Update k8s version ine2e tests to v1.29.8
  * Update netlink to v1.3.0
  * Fixed values file on flannel chart
  * Bump k8s.io/klog/v2 from 2.120.1 to 2.130.1
  * Updated Flannel chart with Netpol containter and removed clustercidr
  * Fix bug in hostgw-windows
  * Fix bug in the logic polling the interface
  * Added node-public-ip annotation
  * Try several times to contact kube-api before failing
  * Fixed IPv6 0 initialization
  * wireguard backend: avoid error message if route already exists
  * Bump github.com/avast/retry-go/v4 from 4.5.1 to 4.6.0
  * use wait.PollUntilContextTimeout instead of deprecated wait.Poll
  * troubleshooting.md: add `ethtool -K flannel.1 tx-checksum-ip-generic off` for NAT
  * Added configuration for pulic-ip through node annotation
  * extension/vxlan: remove arp commands from vxlan examples
  * Refactor TrafficManager windows files to clarify logs
  * Add persistent-mac option to v6 too
  * fix comparison with previous networks in SetupAndEnsureMasqRules
  * show content of stdout and stderr when running iptables-restore returns an error
  * Add extra check before contacting kube-api
  * remove unimplemented error in windows trafficmngr
  * remove --dirty flags in git describe
  * Added leaseAttr string method with logs on VxLan
  * remove multiClusterCidr related-code.
  * Implement nftables masquerading for flannel
  * fix: ipv6 iptables rules were created even when IPv6 was disabled
  * Add tolerations to the flannel chart
  * Added additional check for n.spec.podCIDRs
  * Remove net-tools since it's an old package that we are not using
  * fix iptables_windows.go
  * Clean-up Makefile and use docker buildx locally
  * Use manual test to ensure iptables-* binaries are present
  * Bump github.com/containerd/containerd from 1.6.23 to 1.6.26
  * Bump github.com/joho/godotenv
  * SubnetManager should use the main context
  * Simplify TrafficManager interface
  * refactor iptables package to prepare for nftables-based implementation
- flannel v0.26.4, includes `golang.org/x/net/http2` at v0.34.0, which fixes bsc#1236522 (CVE-2023-45288)</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929601">- add `go-modules` for automated creation of go vendored modules tarball
- bump go version: `BuildRequires:  golang(API) &gt;= 1.23`
- delete unused `kube-flannel.yaml` source in the spec file, it is directly soured from the flannel source tar ball</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1744632000">- Update to version 0.26.6:
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump the etcd group with 4 updates
  * Bump the tencent group with 2 updates
  * Organize dependabot PR's more clearly by using groups
  * Use peer's wireguard port, not our own
  * Bump to codeql v3
  * Pin all GHA to a specific SHA commit
  * Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (fix CVE-2025-30204, bsc#1240516)
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.18 to 3.5.20
  * add missing GH_TOKEN env var in release.yaml
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Upload chart archive with the release files
  * make deps
  * refactor release.yaml to reduce use of potentially vulnerable GH Actions
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * enable setting CNI directory paths in helm chart
  * Added cni file configuration on the chart
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/avast/retry-go/v4 from 4.6.0 to 4.6.1</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1765454400">- Update to version 0.27.4:
  * Removed PodSecurityPolicy manifest creation
  * Fix interface IP address detection in dual-stack mode
  * Fix: recreate VXLAN device (flannel.*) when external interface is deleted and re-added (#2247)
  * golangci-lint: fix iptables_test
  * firewall: add option to disable fully-random mode for MASQUERADE
  * Bump the tencent group with 2 updates
  * Bump github.com/coreos/go-systemd/v22 in the other-go-modules group
  * Bump golang.org/x/sys in the other-go-modules group
  * Bump the etcd group with 4 updates
  * Bump etcd version in tests
  * Stop using deprecated cache.NewIndexerInformer function
  * Bump k8s test version
  * Bump k8s deps to v0.31.11
  * Bump the other-go-modules group with 2 updates
  * helm chart: add nodeSelector in the helm chart
  * Updated Alpine image
  * Added flag to enable blackhole route locally for Canal
  * Bump golang.org/x/sync in the other-go-modules group
  * make enqueueLeaseEvent context aware and prevent dangling goroutines when context is done - fixed a typo/build error
  * make retry interval exp backoff
  * cont_when_cache_not_ready configurable with fail by default * use semaphore as opposed to raw signal channel
  * Update pkg/subnet/kube/kube.go
  * Fix deadlock in startup for large clusters
  * enable setting resources in helm chart
  * capture close() err on subnet file save (#2248)
  * doc: document flag --iptables-forward-rules
  * Bump netlink to v1.3.1
  * fix: clean-up rules when starting instead of shutting down
  * Bump k8s and sles test version
  * Add modprobe br_netfilter step in test workflows
  * test: don't run the workflows on "push" events
  * Update to the latest flannel cni-plugins v1.7.1
  * Move to go 1.23.6</changelog>
</package>
<package pkgid="495891cd3cc9019e4707af84203585b0d00a1160b8f076e34562762d32f8ab64" name="flannel" arch="s390x">
  <version epoch="0" ver="0.27.4" rel="bp156.4.3.1"/>
  <changelog author="kukuk@suse.de" date="1559822400">- Fix path of flanneld in yaml file
- Cleanup filelist</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1560081600">- Add missing words in descriptions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1563451200">- Use current kube-flannel.yaml from git to fix DNS problems</changelog>
  <changelog author="kukuk@suse.de" date="1563537600">- Set cni version in flannel manifest</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update flannel manifest to match upstream and support k8s 1.16 API</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708801">- Fix typo in updated flannel manifest</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1570795200">- It's apps/v1, not apps/v1beta1
- Fix some more typos</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1572350400">- Use Tumbleweed Kubic flannel containers instead of devel:kubic
  containers. This fixes aarch64 and ppc64* (boo#1152185)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.12.0:
  * fix deleteLease
  * Use publicIP lookup iface if --public-ip indicated
  * kubernetes 1.16 cni error
  * Add cniVersion to general CNI plugin configuration.
  * Needs to clear NodeNetworkUnavailable flag on Kubernetes
  * Replaces gorillalabs go-powershell with bhendo/go-powershell
  * Make VXLAN device learning attribute configurable
  * change nodeSelector to nodeAffinity and schedule the pod to linux node
  * This PR adds the cni version to the cni-conf.yaml inside the kube-flannel-cfg configmap
  * EnableNonPersistent flag for Windows Overlay networks
  * snap package.
  * Update lease with DR Mac
  * main.go: add the "net-config-path" flag
  * Deploy Flannel with unprivileged PSP
  * Enable local host to local pod connectivity in Windows VXLAN
  * Update hcsshim for HostRoute policy in Windows VXLAN</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1614340800">- update to 0.13.0:
  * Use multi-arch Docker images in the Kubernetes manifest
  * Accept existing XMRF policies and update them intead of raising errors
  * Add --no-sanity-check to iptables-wrapper-installer.sh for architectures other than amd64
  * Use "docker manifest" to publish multi-arch Docker images
  * Add NET_RAW capability to support cri-o
  * remove glide
  * switch to go modules
  * Add and implement iptables-wrapper-installer.sh from https://github.com/kubernetes-sigs/iptables-wrappers
  * documentation: set priorityClassName to system-node-critical
  * Added a hint for firewall rules
  * Disabling ipv6 accept_ra explicitely on the created interface
  * use alpine 3.12 everywhere
  * windows: replace old netsh (rakelkar/gonetsh) with powershell commands
  * fix CVE-2019-14697
  * Bugfix: VtepMac would be empty when lease re-acquire for windows
  * Use stable os and arch label for node
  * doc(awsvpc): correct the required permissions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1615982400">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream version with go.mod</changelog>
  <changelog author="Ralf Haferkamp &lt;ralf@h4kamp.de&gt;" date="1619611200">- Sync manifest with upstream (0.13.0 release). Includes the
  following changes:
  * Fix typo and invalid indent in kube-flannel.yml
  * Use stable os and arch label for node
  * set priorityClassName to system-node-critical
  * Add NET_RAW capability to support cri-o
  * Use multi-arch Docker images in the Kubernetes manifest</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1627041600">- Update to 0.14.0:
  * Add tencent cloud VPC network support
  * moving go modules to flannel-io/flannel and updating to go 1.16
  * fix(windows): nil pointer panic
  * Preserve environment for extension backend
  * Fix flannel hang if lease expired
  * Documentation for the Flannel upgrade/downgrade procedure
  * Move from glog to klog
  * fix(host-gw): failed to restart if gateway hnsep existed
  * ipsec: use well known paths of charon daemon
  * upgrade client-go to 1.19.4
  * move from juju/errors to pkg/errors
  * subnets: move forward the cursor to skip illegal subnet
  * Fix Expired URL to Deploying Flannel with kubeadm
  * Modify kube-flannel.yaml to use rbac.authorization.k8s.io/v1
  * preserve AccessKey &amp; AccessKeySecret environment on sudo fix some typo in doc.
  * iptables: handle errors that prevent rule deletes
- Sync kube-flannel.yaml manifest
- Change project URL to github.com/flannel-io/flannel</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1706702400">- Update to version 0.24.2:
  * Prepare for v0.24.2 release
  * Increase the time out for interface checking in windows
  * Prepare for v0.24.1 release
  * Provide support to select the interface in Windows
  * Improve the log from powershell
  * Wait all the jobs to finish before deploy the github-page
  * remove remaining references to mips64le
  * add multi-arch dockerfile
  * add missing riscv64 in docker manifest create step
  * prepare for v0.24.0 release
  * Bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * Add the VNI to the error message in Windows
  * chart: add possibility for defining image pull secrets in daemonset
  * Remove multiclustercidr logic from code
  * Update opentelemetry dependencies
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  * Add riscv64 arch in GH actions
  * vxlan vni should not be type uint16
  * Quote wireguard psk in helm chart
  * add riscv64 support</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1706702401">- sync `kube-flannel.yaml` manifest with upstream release, v0.24.2 (bsc#1218694)
- refactor, clean spec file. Include following change:
  * bump go version build requirements: `BuildRequires:  golang(API) &gt;= 1.20`
  * include go modules dependencies as vendor tar - vendor.tar.gz, update following %prep, %build, %install sections accordingly</changelog>
  <changelog author="Jeff Mahoney &lt;jeffm@suse.com&gt;" date="1713528000">- Remove dependency on net-tools-deprecated.  It's not actually used.</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929600">- Update to version 0.26.4:
  * Moved to github container registry
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.17 to 3.5.18
  * fix: Fix high CPU usage when losing etcd connection and try to re-establish connection with exponential backoff
  * Bump github.com/containernetworking/plugins from 1.6.1 to 1.6.2
  * Bump alpine from 20240923 to 20250108 in /images
  * Bump golang.org/x/net from 0.31.0 to 0.33.0
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0
  * feat: add bool to control CNI config installation using Helm
  * fix: add missing MY_NODE_NAME env in chart
  * Bump k8s deps to 0.29.12
  * Don't panic upon shutdown when running in standalone mode
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Bump alpine from 20240807 to 20240923 in /images
  * Bump github.com/containernetworking/plugins from 1.6.0 to 1.6.1
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/vishvananda/netns from 0.0.4 to 0.0.5
  * Use the standard context library
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Updated flannel cni image to 1.6.0
  * Updated CNI plugins version on the README
  * Bump sigs.k8s.io/knftables from 0.0.17 to 0.0.18
  * Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1
  * Bump github.com/Microsoft/hcsshim from 0.12.8 to 0.12.9
  * Added check to not check br_filter in case of windows
  * Bumo golangci-lint to latest version
  * Bump to go 1.23
  * Added checks for br_netfilter module
  * Try not to cleanup multiple peers behind same PublicIP
  * fix trivy check
  * check that the lease includes an IP address of the requested family before configuring the flannel interface
  * Fixed IPv6 chosen in case of public-ipv6 configured
  * add timeout to e2e test pipelines
  * Update k8s version ine2e tests to v1.29.8
  * Update netlink to v1.3.0
  * Fixed values file on flannel chart
  * Bump k8s.io/klog/v2 from 2.120.1 to 2.130.1
  * Updated Flannel chart with Netpol containter and removed clustercidr
  * Fix bug in hostgw-windows
  * Fix bug in the logic polling the interface
  * Added node-public-ip annotation
  * Try several times to contact kube-api before failing
  * Fixed IPv6 0 initialization
  * wireguard backend: avoid error message if route already exists
  * Bump github.com/avast/retry-go/v4 from 4.5.1 to 4.6.0
  * use wait.PollUntilContextTimeout instead of deprecated wait.Poll
  * troubleshooting.md: add `ethtool -K flannel.1 tx-checksum-ip-generic off` for NAT
  * Added configuration for pulic-ip through node annotation
  * extension/vxlan: remove arp commands from vxlan examples
  * Refactor TrafficManager windows files to clarify logs
  * Add persistent-mac option to v6 too
  * fix comparison with previous networks in SetupAndEnsureMasqRules
  * show content of stdout and stderr when running iptables-restore returns an error
  * Add extra check before contacting kube-api
  * remove unimplemented error in windows trafficmngr
  * remove --dirty flags in git describe
  * Added leaseAttr string method with logs on VxLan
  * remove multiClusterCidr related-code.
  * Implement nftables masquerading for flannel
  * fix: ipv6 iptables rules were created even when IPv6 was disabled
  * Add tolerations to the flannel chart
  * Added additional check for n.spec.podCIDRs
  * Remove net-tools since it's an old package that we are not using
  * fix iptables_windows.go
  * Clean-up Makefile and use docker buildx locally
  * Use manual test to ensure iptables-* binaries are present
  * Bump github.com/containerd/containerd from 1.6.23 to 1.6.26
  * Bump github.com/joho/godotenv
  * SubnetManager should use the main context
  * Simplify TrafficManager interface
  * refactor iptables package to prepare for nftables-based implementation
- flannel v0.26.4, includes `golang.org/x/net/http2` at v0.34.0, which fixes bsc#1236522 (CVE-2023-45288)</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929601">- add `go-modules` for automated creation of go vendored modules tarball
- bump go version: `BuildRequires:  golang(API) &gt;= 1.23`
- delete unused `kube-flannel.yaml` source in the spec file, it is directly soured from the flannel source tar ball</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1744632000">- Update to version 0.26.6:
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump the etcd group with 4 updates
  * Bump the tencent group with 2 updates
  * Organize dependabot PR's more clearly by using groups
  * Use peer's wireguard port, not our own
  * Bump to codeql v3
  * Pin all GHA to a specific SHA commit
  * Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (fix CVE-2025-30204, bsc#1240516)
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.18 to 3.5.20
  * add missing GH_TOKEN env var in release.yaml
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Upload chart archive with the release files
  * make deps
  * refactor release.yaml to reduce use of potentially vulnerable GH Actions
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * enable setting CNI directory paths in helm chart
  * Added cni file configuration on the chart
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/avast/retry-go/v4 from 4.6.0 to 4.6.1</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1765454400">- Update to version 0.27.4:
  * Removed PodSecurityPolicy manifest creation
  * Fix interface IP address detection in dual-stack mode
  * Fix: recreate VXLAN device (flannel.*) when external interface is deleted and re-added (#2247)
  * golangci-lint: fix iptables_test
  * firewall: add option to disable fully-random mode for MASQUERADE
  * Bump the tencent group with 2 updates
  * Bump github.com/coreos/go-systemd/v22 in the other-go-modules group
  * Bump golang.org/x/sys in the other-go-modules group
  * Bump the etcd group with 4 updates
  * Bump etcd version in tests
  * Stop using deprecated cache.NewIndexerInformer function
  * Bump k8s test version
  * Bump k8s deps to v0.31.11
  * Bump the other-go-modules group with 2 updates
  * helm chart: add nodeSelector in the helm chart
  * Updated Alpine image
  * Added flag to enable blackhole route locally for Canal
  * Bump golang.org/x/sync in the other-go-modules group
  * make enqueueLeaseEvent context aware and prevent dangling goroutines when context is done - fixed a typo/build error
  * make retry interval exp backoff
  * cont_when_cache_not_ready configurable with fail by default * use semaphore as opposed to raw signal channel
  * Update pkg/subnet/kube/kube.go
  * Fix deadlock in startup for large clusters
  * enable setting resources in helm chart
  * capture close() err on subnet file save (#2248)
  * doc: document flag --iptables-forward-rules
  * Bump netlink to v1.3.1
  * fix: clean-up rules when starting instead of shutting down
  * Bump k8s and sles test version
  * Add modprobe br_netfilter step in test workflows
  * test: don't run the workflows on "push" events
  * Update to the latest flannel cni-plugins v1.7.1
  * Move to go 1.23.6</changelog>
</package>
<package pkgid="48b0e498689bf8b1ae552cb7a3692e9cb941f7de54588359541a3352acea1329" name="flannel" arch="src">
  <version epoch="0" ver="0.27.4" rel="bp156.4.3.1"/>
  <changelog author="kukuk@suse.de" date="1559822400">- Fix path of flanneld in yaml file
- Cleanup filelist</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1560081600">- Add missing words in descriptions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1563451200">- Use current kube-flannel.yaml from git to fix DNS problems</changelog>
  <changelog author="kukuk@suse.de" date="1563537600">- Set cni version in flannel manifest</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update flannel manifest to match upstream and support k8s 1.16 API</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708801">- Fix typo in updated flannel manifest</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1570795200">- It's apps/v1, not apps/v1beta1
- Fix some more typos</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1572350400">- Use Tumbleweed Kubic flannel containers instead of devel:kubic
  containers. This fixes aarch64 and ppc64* (boo#1152185)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.12.0:
  * fix deleteLease
  * Use publicIP lookup iface if --public-ip indicated
  * kubernetes 1.16 cni error
  * Add cniVersion to general CNI plugin configuration.
  * Needs to clear NodeNetworkUnavailable flag on Kubernetes
  * Replaces gorillalabs go-powershell with bhendo/go-powershell
  * Make VXLAN device learning attribute configurable
  * change nodeSelector to nodeAffinity and schedule the pod to linux node
  * This PR adds the cni version to the cni-conf.yaml inside the kube-flannel-cfg configmap
  * EnableNonPersistent flag for Windows Overlay networks
  * snap package.
  * Update lease with DR Mac
  * main.go: add the "net-config-path" flag
  * Deploy Flannel with unprivileged PSP
  * Enable local host to local pod connectivity in Windows VXLAN
  * Update hcsshim for HostRoute policy in Windows VXLAN</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1614340800">- update to 0.13.0:
  * Use multi-arch Docker images in the Kubernetes manifest
  * Accept existing XMRF policies and update them intead of raising errors
  * Add --no-sanity-check to iptables-wrapper-installer.sh for architectures other than amd64
  * Use "docker manifest" to publish multi-arch Docker images
  * Add NET_RAW capability to support cri-o
  * remove glide
  * switch to go modules
  * Add and implement iptables-wrapper-installer.sh from https://github.com/kubernetes-sigs/iptables-wrappers
  * documentation: set priorityClassName to system-node-critical
  * Added a hint for firewall rules
  * Disabling ipv6 accept_ra explicitely on the created interface
  * use alpine 3.12 everywhere
  * windows: replace old netsh (rakelkar/gonetsh) with powershell commands
  * fix CVE-2019-14697
  * Bugfix: VtepMac would be empty when lease re-acquire for windows
  * Use stable os and arch label for node
  * doc(awsvpc): correct the required permissions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1615982400">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream version with go.mod</changelog>
  <changelog author="Ralf Haferkamp &lt;ralf@h4kamp.de&gt;" date="1619611200">- Sync manifest with upstream (0.13.0 release). Includes the
  following changes:
  * Fix typo and invalid indent in kube-flannel.yml
  * Use stable os and arch label for node
  * set priorityClassName to system-node-critical
  * Add NET_RAW capability to support cri-o
  * Use multi-arch Docker images in the Kubernetes manifest</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1627041600">- Update to 0.14.0:
  * Add tencent cloud VPC network support
  * moving go modules to flannel-io/flannel and updating to go 1.16
  * fix(windows): nil pointer panic
  * Preserve environment for extension backend
  * Fix flannel hang if lease expired
  * Documentation for the Flannel upgrade/downgrade procedure
  * Move from glog to klog
  * fix(host-gw): failed to restart if gateway hnsep existed
  * ipsec: use well known paths of charon daemon
  * upgrade client-go to 1.19.4
  * move from juju/errors to pkg/errors
  * subnets: move forward the cursor to skip illegal subnet
  * Fix Expired URL to Deploying Flannel with kubeadm
  * Modify kube-flannel.yaml to use rbac.authorization.k8s.io/v1
  * preserve AccessKey &amp; AccessKeySecret environment on sudo fix some typo in doc.
  * iptables: handle errors that prevent rule deletes
- Sync kube-flannel.yaml manifest
- Change project URL to github.com/flannel-io/flannel</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1706702400">- Update to version 0.24.2:
  * Prepare for v0.24.2 release
  * Increase the time out for interface checking in windows
  * Prepare for v0.24.1 release
  * Provide support to select the interface in Windows
  * Improve the log from powershell
  * Wait all the jobs to finish before deploy the github-page
  * remove remaining references to mips64le
  * add multi-arch dockerfile
  * add missing riscv64 in docker manifest create step
  * prepare for v0.24.0 release
  * Bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * Add the VNI to the error message in Windows
  * chart: add possibility for defining image pull secrets in daemonset
  * Remove multiclustercidr logic from code
  * Update opentelemetry dependencies
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  * Add riscv64 arch in GH actions
  * vxlan vni should not be type uint16
  * Quote wireguard psk in helm chart
  * add riscv64 support</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1706702401">- sync `kube-flannel.yaml` manifest with upstream release, v0.24.2 (bsc#1218694)
- refactor, clean spec file. Include following change:
  * bump go version build requirements: `BuildRequires:  golang(API) &gt;= 1.20`
  * include go modules dependencies as vendor tar - vendor.tar.gz, update following %prep, %build, %install sections accordingly</changelog>
  <changelog author="Jeff Mahoney &lt;jeffm@suse.com&gt;" date="1713528000">- Remove dependency on net-tools-deprecated.  It's not actually used.</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929600">- Update to version 0.26.4:
  * Moved to github container registry
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.17 to 3.5.18
  * fix: Fix high CPU usage when losing etcd connection and try to re-establish connection with exponential backoff
  * Bump github.com/containernetworking/plugins from 1.6.1 to 1.6.2
  * Bump alpine from 20240923 to 20250108 in /images
  * Bump golang.org/x/net from 0.31.0 to 0.33.0
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0
  * feat: add bool to control CNI config installation using Helm
  * fix: add missing MY_NODE_NAME env in chart
  * Bump k8s deps to 0.29.12
  * Don't panic upon shutdown when running in standalone mode
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Bump alpine from 20240807 to 20240923 in /images
  * Bump github.com/containernetworking/plugins from 1.6.0 to 1.6.1
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/vishvananda/netns from 0.0.4 to 0.0.5
  * Use the standard context library
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Updated flannel cni image to 1.6.0
  * Updated CNI plugins version on the README
  * Bump sigs.k8s.io/knftables from 0.0.17 to 0.0.18
  * Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1
  * Bump github.com/Microsoft/hcsshim from 0.12.8 to 0.12.9
  * Added check to not check br_filter in case of windows
  * Bumo golangci-lint to latest version
  * Bump to go 1.23
  * Added checks for br_netfilter module
  * Try not to cleanup multiple peers behind same PublicIP
  * fix trivy check
  * check that the lease includes an IP address of the requested family before configuring the flannel interface
  * Fixed IPv6 chosen in case of public-ipv6 configured
  * add timeout to e2e test pipelines
  * Update k8s version ine2e tests to v1.29.8
  * Update netlink to v1.3.0
  * Fixed values file on flannel chart
  * Bump k8s.io/klog/v2 from 2.120.1 to 2.130.1
  * Updated Flannel chart with Netpol containter and removed clustercidr
  * Fix bug in hostgw-windows
  * Fix bug in the logic polling the interface
  * Added node-public-ip annotation
  * Try several times to contact kube-api before failing
  * Fixed IPv6 0 initialization
  * wireguard backend: avoid error message if route already exists
  * Bump github.com/avast/retry-go/v4 from 4.5.1 to 4.6.0
  * use wait.PollUntilContextTimeout instead of deprecated wait.Poll
  * troubleshooting.md: add `ethtool -K flannel.1 tx-checksum-ip-generic off` for NAT
  * Added configuration for pulic-ip through node annotation
  * extension/vxlan: remove arp commands from vxlan examples
  * Refactor TrafficManager windows files to clarify logs
  * Add persistent-mac option to v6 too
  * fix comparison with previous networks in SetupAndEnsureMasqRules
  * show content of stdout and stderr when running iptables-restore returns an error
  * Add extra check before contacting kube-api
  * remove unimplemented error in windows trafficmngr
  * remove --dirty flags in git describe
  * Added leaseAttr string method with logs on VxLan
  * remove multiClusterCidr related-code.
  * Implement nftables masquerading for flannel
  * fix: ipv6 iptables rules were created even when IPv6 was disabled
  * Add tolerations to the flannel chart
  * Added additional check for n.spec.podCIDRs
  * Remove net-tools since it's an old package that we are not using
  * fix iptables_windows.go
  * Clean-up Makefile and use docker buildx locally
  * Use manual test to ensure iptables-* binaries are present
  * Bump github.com/containerd/containerd from 1.6.23 to 1.6.26
  * Bump github.com/joho/godotenv
  * SubnetManager should use the main context
  * Simplify TrafficManager interface
  * refactor iptables package to prepare for nftables-based implementation
- flannel v0.26.4, includes `golang.org/x/net/http2` at v0.34.0, which fixes bsc#1236522 (CVE-2023-45288)</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929601">- add `go-modules` for automated creation of go vendored modules tarball
- bump go version: `BuildRequires:  golang(API) &gt;= 1.23`
- delete unused `kube-flannel.yaml` source in the spec file, it is directly soured from the flannel source tar ball</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1744632000">- Update to version 0.26.6:
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump the etcd group with 4 updates
  * Bump the tencent group with 2 updates
  * Organize dependabot PR's more clearly by using groups
  * Use peer's wireguard port, not our own
  * Bump to codeql v3
  * Pin all GHA to a specific SHA commit
  * Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (fix CVE-2025-30204, bsc#1240516)
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.18 to 3.5.20
  * add missing GH_TOKEN env var in release.yaml
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Upload chart archive with the release files
  * make deps
  * refactor release.yaml to reduce use of potentially vulnerable GH Actions
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * enable setting CNI directory paths in helm chart
  * Added cni file configuration on the chart
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/avast/retry-go/v4 from 4.6.0 to 4.6.1</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1765454400">- Update to version 0.27.4:
  * Removed PodSecurityPolicy manifest creation
  * Fix interface IP address detection in dual-stack mode
  * Fix: recreate VXLAN device (flannel.*) when external interface is deleted and re-added (#2247)
  * golangci-lint: fix iptables_test
  * firewall: add option to disable fully-random mode for MASQUERADE
  * Bump the tencent group with 2 updates
  * Bump github.com/coreos/go-systemd/v22 in the other-go-modules group
  * Bump golang.org/x/sys in the other-go-modules group
  * Bump the etcd group with 4 updates
  * Bump etcd version in tests
  * Stop using deprecated cache.NewIndexerInformer function
  * Bump k8s test version
  * Bump k8s deps to v0.31.11
  * Bump the other-go-modules group with 2 updates
  * helm chart: add nodeSelector in the helm chart
  * Updated Alpine image
  * Added flag to enable blackhole route locally for Canal
  * Bump golang.org/x/sync in the other-go-modules group
  * make enqueueLeaseEvent context aware and prevent dangling goroutines when context is done - fixed a typo/build error
  * make retry interval exp backoff
  * cont_when_cache_not_ready configurable with fail by default * use semaphore as opposed to raw signal channel
  * Update pkg/subnet/kube/kube.go
  * Fix deadlock in startup for large clusters
  * enable setting resources in helm chart
  * capture close() err on subnet file save (#2248)
  * doc: document flag --iptables-forward-rules
  * Bump netlink to v1.3.1
  * fix: clean-up rules when starting instead of shutting down
  * Bump k8s and sles test version
  * Add modprobe br_netfilter step in test workflows
  * test: don't run the workflows on "push" events
  * Update to the latest flannel cni-plugins v1.7.1
  * Move to go 1.23.6</changelog>
</package>
<package pkgid="8f71cde6e34cae803479561b8ed313b4796d29c0e42bcec17b3fce0302e75bf1" name="flannel" arch="x86_64">
  <version epoch="0" ver="0.27.4" rel="bp156.4.3.1"/>
  <changelog author="kukuk@suse.de" date="1559822400">- Fix path of flanneld in yaml file
- Cleanup filelist</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1560081600">- Add missing words in descriptions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1563451200">- Use current kube-flannel.yaml from git to fix DNS problems</changelog>
  <changelog author="kukuk@suse.de" date="1563537600">- Set cni version in flannel manifest</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update flannel manifest to match upstream and support k8s 1.16 API</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708801">- Fix typo in updated flannel manifest</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1570795200">- It's apps/v1, not apps/v1beta1
- Fix some more typos</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1572350400">- Use Tumbleweed Kubic flannel containers instead of devel:kubic
  containers. This fixes aarch64 and ppc64* (boo#1152185)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.12.0:
  * fix deleteLease
  * Use publicIP lookup iface if --public-ip indicated
  * kubernetes 1.16 cni error
  * Add cniVersion to general CNI plugin configuration.
  * Needs to clear NodeNetworkUnavailable flag on Kubernetes
  * Replaces gorillalabs go-powershell with bhendo/go-powershell
  * Make VXLAN device learning attribute configurable
  * change nodeSelector to nodeAffinity and schedule the pod to linux node
  * This PR adds the cni version to the cni-conf.yaml inside the kube-flannel-cfg configmap
  * EnableNonPersistent flag for Windows Overlay networks
  * snap package.
  * Update lease with DR Mac
  * main.go: add the "net-config-path" flag
  * Deploy Flannel with unprivileged PSP
  * Enable local host to local pod connectivity in Windows VXLAN
  * Update hcsshim for HostRoute policy in Windows VXLAN</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1614340800">- update to 0.13.0:
  * Use multi-arch Docker images in the Kubernetes manifest
  * Accept existing XMRF policies and update them intead of raising errors
  * Add --no-sanity-check to iptables-wrapper-installer.sh for architectures other than amd64
  * Use "docker manifest" to publish multi-arch Docker images
  * Add NET_RAW capability to support cri-o
  * remove glide
  * switch to go modules
  * Add and implement iptables-wrapper-installer.sh from https://github.com/kubernetes-sigs/iptables-wrappers
  * documentation: set priorityClassName to system-node-critical
  * Added a hint for firewall rules
  * Disabling ipv6 accept_ra explicitely on the created interface
  * use alpine 3.12 everywhere
  * windows: replace old netsh (rakelkar/gonetsh) with powershell commands
  * fix CVE-2019-14697
  * Bugfix: VtepMac would be empty when lease re-acquire for windows
  * Use stable os and arch label for node
  * doc(awsvpc): correct the required permissions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1615982400">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream version with go.mod</changelog>
  <changelog author="Ralf Haferkamp &lt;ralf@h4kamp.de&gt;" date="1619611200">- Sync manifest with upstream (0.13.0 release). Includes the
  following changes:
  * Fix typo and invalid indent in kube-flannel.yml
  * Use stable os and arch label for node
  * set priorityClassName to system-node-critical
  * Add NET_RAW capability to support cri-o
  * Use multi-arch Docker images in the Kubernetes manifest</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1627041600">- Update to 0.14.0:
  * Add tencent cloud VPC network support
  * moving go modules to flannel-io/flannel and updating to go 1.16
  * fix(windows): nil pointer panic
  * Preserve environment for extension backend
  * Fix flannel hang if lease expired
  * Documentation for the Flannel upgrade/downgrade procedure
  * Move from glog to klog
  * fix(host-gw): failed to restart if gateway hnsep existed
  * ipsec: use well known paths of charon daemon
  * upgrade client-go to 1.19.4
  * move from juju/errors to pkg/errors
  * subnets: move forward the cursor to skip illegal subnet
  * Fix Expired URL to Deploying Flannel with kubeadm
  * Modify kube-flannel.yaml to use rbac.authorization.k8s.io/v1
  * preserve AccessKey &amp; AccessKeySecret environment on sudo fix some typo in doc.
  * iptables: handle errors that prevent rule deletes
- Sync kube-flannel.yaml manifest
- Change project URL to github.com/flannel-io/flannel</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1706702400">- Update to version 0.24.2:
  * Prepare for v0.24.2 release
  * Increase the time out for interface checking in windows
  * Prepare for v0.24.1 release
  * Provide support to select the interface in Windows
  * Improve the log from powershell
  * Wait all the jobs to finish before deploy the github-page
  * remove remaining references to mips64le
  * add multi-arch dockerfile
  * add missing riscv64 in docker manifest create step
  * prepare for v0.24.0 release
  * Bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * Add the VNI to the error message in Windows
  * chart: add possibility for defining image pull secrets in daemonset
  * Remove multiclustercidr logic from code
  * Update opentelemetry dependencies
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  * Add riscv64 arch in GH actions
  * vxlan vni should not be type uint16
  * Quote wireguard psk in helm chart
  * add riscv64 support</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1706702401">- sync `kube-flannel.yaml` manifest with upstream release, v0.24.2 (bsc#1218694)
- refactor, clean spec file. Include following change:
  * bump go version build requirements: `BuildRequires:  golang(API) &gt;= 1.20`
  * include go modules dependencies as vendor tar - vendor.tar.gz, update following %prep, %build, %install sections accordingly</changelog>
  <changelog author="Jeff Mahoney &lt;jeffm@suse.com&gt;" date="1713528000">- Remove dependency on net-tools-deprecated.  It's not actually used.</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929600">- Update to version 0.26.4:
  * Moved to github container registry
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.17 to 3.5.18
  * fix: Fix high CPU usage when losing etcd connection and try to re-establish connection with exponential backoff
  * Bump github.com/containernetworking/plugins from 1.6.1 to 1.6.2
  * Bump alpine from 20240923 to 20250108 in /images
  * Bump golang.org/x/net from 0.31.0 to 0.33.0
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0
  * feat: add bool to control CNI config installation using Helm
  * fix: add missing MY_NODE_NAME env in chart
  * Bump k8s deps to 0.29.12
  * Don't panic upon shutdown when running in standalone mode
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Bump alpine from 20240807 to 20240923 in /images
  * Bump github.com/containernetworking/plugins from 1.6.0 to 1.6.1
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/vishvananda/netns from 0.0.4 to 0.0.5
  * Use the standard context library
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Updated flannel cni image to 1.6.0
  * Updated CNI plugins version on the README
  * Bump sigs.k8s.io/knftables from 0.0.17 to 0.0.18
  * Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1
  * Bump github.com/Microsoft/hcsshim from 0.12.8 to 0.12.9
  * Added check to not check br_filter in case of windows
  * Bumo golangci-lint to latest version
  * Bump to go 1.23
  * Added checks for br_netfilter module
  * Try not to cleanup multiple peers behind same PublicIP
  * fix trivy check
  * check that the lease includes an IP address of the requested family before configuring the flannel interface
  * Fixed IPv6 chosen in case of public-ipv6 configured
  * add timeout to e2e test pipelines
  * Update k8s version ine2e tests to v1.29.8
  * Update netlink to v1.3.0
  * Fixed values file on flannel chart
  * Bump k8s.io/klog/v2 from 2.120.1 to 2.130.1
  * Updated Flannel chart with Netpol containter and removed clustercidr
  * Fix bug in hostgw-windows
  * Fix bug in the logic polling the interface
  * Added node-public-ip annotation
  * Try several times to contact kube-api before failing
  * Fixed IPv6 0 initialization
  * wireguard backend: avoid error message if route already exists
  * Bump github.com/avast/retry-go/v4 from 4.5.1 to 4.6.0
  * use wait.PollUntilContextTimeout instead of deprecated wait.Poll
  * troubleshooting.md: add `ethtool -K flannel.1 tx-checksum-ip-generic off` for NAT
  * Added configuration for pulic-ip through node annotation
  * extension/vxlan: remove arp commands from vxlan examples
  * Refactor TrafficManager windows files to clarify logs
  * Add persistent-mac option to v6 too
  * fix comparison with previous networks in SetupAndEnsureMasqRules
  * show content of stdout and stderr when running iptables-restore returns an error
  * Add extra check before contacting kube-api
  * remove unimplemented error in windows trafficmngr
  * remove --dirty flags in git describe
  * Added leaseAttr string method with logs on VxLan
  * remove multiClusterCidr related-code.
  * Implement nftables masquerading for flannel
  * fix: ipv6 iptables rules were created even when IPv6 was disabled
  * Add tolerations to the flannel chart
  * Added additional check for n.spec.podCIDRs
  * Remove net-tools since it's an old package that we are not using
  * fix iptables_windows.go
  * Clean-up Makefile and use docker buildx locally
  * Use manual test to ensure iptables-* binaries are present
  * Bump github.com/containerd/containerd from 1.6.23 to 1.6.26
  * Bump github.com/joho/godotenv
  * SubnetManager should use the main context
  * Simplify TrafficManager interface
  * refactor iptables package to prepare for nftables-based implementation
- flannel v0.26.4, includes `golang.org/x/net/http2` at v0.34.0, which fixes bsc#1236522 (CVE-2023-45288)</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929601">- add `go-modules` for automated creation of go vendored modules tarball
- bump go version: `BuildRequires:  golang(API) &gt;= 1.23`
- delete unused `kube-flannel.yaml` source in the spec file, it is directly soured from the flannel source tar ball</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1744632000">- Update to version 0.26.6:
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump the etcd group with 4 updates
  * Bump the tencent group with 2 updates
  * Organize dependabot PR's more clearly by using groups
  * Use peer's wireguard port, not our own
  * Bump to codeql v3
  * Pin all GHA to a specific SHA commit
  * Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (fix CVE-2025-30204, bsc#1240516)
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.18 to 3.5.20
  * add missing GH_TOKEN env var in release.yaml
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Upload chart archive with the release files
  * make deps
  * refactor release.yaml to reduce use of potentially vulnerable GH Actions
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * enable setting CNI directory paths in helm chart
  * Added cni file configuration on the chart
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/avast/retry-go/v4 from 4.6.0 to 4.6.1</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1765454400">- Update to version 0.27.4:
  * Removed PodSecurityPolicy manifest creation
  * Fix interface IP address detection in dual-stack mode
  * Fix: recreate VXLAN device (flannel.*) when external interface is deleted and re-added (#2247)
  * golangci-lint: fix iptables_test
  * firewall: add option to disable fully-random mode for MASQUERADE
  * Bump the tencent group with 2 updates
  * Bump github.com/coreos/go-systemd/v22 in the other-go-modules group
  * Bump golang.org/x/sys in the other-go-modules group
  * Bump the etcd group with 4 updates
  * Bump etcd version in tests
  * Stop using deprecated cache.NewIndexerInformer function
  * Bump k8s test version
  * Bump k8s deps to v0.31.11
  * Bump the other-go-modules group with 2 updates
  * helm chart: add nodeSelector in the helm chart
  * Updated Alpine image
  * Added flag to enable blackhole route locally for Canal
  * Bump golang.org/x/sync in the other-go-modules group
  * make enqueueLeaseEvent context aware and prevent dangling goroutines when context is done - fixed a typo/build error
  * make retry interval exp backoff
  * cont_when_cache_not_ready configurable with fail by default * use semaphore as opposed to raw signal channel
  * Update pkg/subnet/kube/kube.go
  * Fix deadlock in startup for large clusters
  * enable setting resources in helm chart
  * capture close() err on subnet file save (#2248)
  * doc: document flag --iptables-forward-rules
  * Bump netlink to v1.3.1
  * fix: clean-up rules when starting instead of shutting down
  * Bump k8s and sles test version
  * Add modprobe br_netfilter step in test workflows
  * test: don't run the workflows on "push" events
  * Update to the latest flannel cni-plugins v1.7.1
  * Move to go 1.23.6</changelog>
</package>
<package pkgid="efbf55c7661863ddc0941324c252f09f4692e91cc8e187fdfcea4032c0a6a61e" name="flannel-k8s-yaml" arch="noarch">
  <version epoch="0" ver="0.27.4" rel="bp156.4.3.1"/>
  <changelog author="kukuk@suse.de" date="1559822400">- Fix path of flanneld in yaml file
- Cleanup filelist</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1560081600">- Add missing words in descriptions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1563451200">- Use current kube-flannel.yaml from git to fix DNS problems</changelog>
  <changelog author="kukuk@suse.de" date="1563537600">- Set cni version in flannel manifest</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708800">- Update flannel manifest to match upstream and support k8s 1.16 API</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1570708801">- Fix typo in updated flannel manifest</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1570795200">- It's apps/v1, not apps/v1beta1
- Fix some more typos</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1572350400">- Use Tumbleweed Kubic flannel containers instead of devel:kubic
  containers. This fixes aarch64 and ppc64* (boo#1152185)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.12.0:
  * fix deleteLease
  * Use publicIP lookup iface if --public-ip indicated
  * kubernetes 1.16 cni error
  * Add cniVersion to general CNI plugin configuration.
  * Needs to clear NodeNetworkUnavailable flag on Kubernetes
  * Replaces gorillalabs go-powershell with bhendo/go-powershell
  * Make VXLAN device learning attribute configurable
  * change nodeSelector to nodeAffinity and schedule the pod to linux node
  * This PR adds the cni version to the cni-conf.yaml inside the kube-flannel-cfg configmap
  * EnableNonPersistent flag for Windows Overlay networks
  * snap package.
  * Update lease with DR Mac
  * main.go: add the "net-config-path" flag
  * Deploy Flannel with unprivileged PSP
  * Enable local host to local pod connectivity in Windows VXLAN
  * Update hcsshim for HostRoute policy in Windows VXLAN</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1614340800">- update to 0.13.0:
  * Use multi-arch Docker images in the Kubernetes manifest
  * Accept existing XMRF policies and update them intead of raising errors
  * Add --no-sanity-check to iptables-wrapper-installer.sh for architectures other than amd64
  * Use "docker manifest" to publish multi-arch Docker images
  * Add NET_RAW capability to support cri-o
  * remove glide
  * switch to go modules
  * Add and implement iptables-wrapper-installer.sh from https://github.com/kubernetes-sigs/iptables-wrappers
  * documentation: set priorityClassName to system-node-critical
  * Added a hint for firewall rules
  * Disabling ipv6 accept_ra explicitely on the created interface
  * use alpine 3.12 everywhere
  * windows: replace old netsh (rakelkar/gonetsh) with powershell commands
  * fix CVE-2019-14697
  * Bugfix: VtepMac would be empty when lease re-acquire for windows
  * Use stable os and arch label for node
  * doc(awsvpc): correct the required permissions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1615982400">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream version with go.mod</changelog>
  <changelog author="Ralf Haferkamp &lt;ralf@h4kamp.de&gt;" date="1619611200">- Sync manifest with upstream (0.13.0 release). Includes the
  following changes:
  * Fix typo and invalid indent in kube-flannel.yml
  * Use stable os and arch label for node
  * set priorityClassName to system-node-critical
  * Add NET_RAW capability to support cri-o
  * Use multi-arch Docker images in the Kubernetes manifest</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1627041600">- Update to 0.14.0:
  * Add tencent cloud VPC network support
  * moving go modules to flannel-io/flannel and updating to go 1.16
  * fix(windows): nil pointer panic
  * Preserve environment for extension backend
  * Fix flannel hang if lease expired
  * Documentation for the Flannel upgrade/downgrade procedure
  * Move from glog to klog
  * fix(host-gw): failed to restart if gateway hnsep existed
  * ipsec: use well known paths of charon daemon
  * upgrade client-go to 1.19.4
  * move from juju/errors to pkg/errors
  * subnets: move forward the cursor to skip illegal subnet
  * Fix Expired URL to Deploying Flannel with kubeadm
  * Modify kube-flannel.yaml to use rbac.authorization.k8s.io/v1
  * preserve AccessKey &amp; AccessKeySecret environment on sudo fix some typo in doc.
  * iptables: handle errors that prevent rule deletes
- Sync kube-flannel.yaml manifest
- Change project URL to github.com/flannel-io/flannel</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1706702400">- Update to version 0.24.2:
  * Prepare for v0.24.2 release
  * Increase the time out for interface checking in windows
  * Prepare for v0.24.1 release
  * Provide support to select the interface in Windows
  * Improve the log from powershell
  * Wait all the jobs to finish before deploy the github-page
  * remove remaining references to mips64le
  * add multi-arch dockerfile
  * add missing riscv64 in docker manifest create step
  * prepare for v0.24.0 release
  * Bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * Add the VNI to the error message in Windows
  * chart: add possibility for defining image pull secrets in daemonset
  * Remove multiclustercidr logic from code
  * Update opentelemetry dependencies
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  * Add riscv64 arch in GH actions
  * vxlan vni should not be type uint16
  * Quote wireguard psk in helm chart
  * add riscv64 support</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1706702401">- sync `kube-flannel.yaml` manifest with upstream release, v0.24.2 (bsc#1218694)
- refactor, clean spec file. Include following change:
  * bump go version build requirements: `BuildRequires:  golang(API) &gt;= 1.20`
  * include go modules dependencies as vendor tar - vendor.tar.gz, update following %prep, %build, %install sections accordingly</changelog>
  <changelog author="Jeff Mahoney &lt;jeffm@suse.com&gt;" date="1713528000">- Remove dependency on net-tools-deprecated.  It's not actually used.</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929600">- Update to version 0.26.4:
  * Moved to github container registry
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.17 to 3.5.18
  * fix: Fix high CPU usage when losing etcd connection and try to re-establish connection with exponential backoff
  * Bump github.com/containernetworking/plugins from 1.6.1 to 1.6.2
  * Bump alpine from 20240923 to 20250108 in /images
  * Bump golang.org/x/net from 0.31.0 to 0.33.0
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0
  * feat: add bool to control CNI config installation using Helm
  * fix: add missing MY_NODE_NAME env in chart
  * Bump k8s deps to 0.29.12
  * Don't panic upon shutdown when running in standalone mode
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Bump alpine from 20240807 to 20240923 in /images
  * Bump github.com/containernetworking/plugins from 1.6.0 to 1.6.1
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/vishvananda/netns from 0.0.4 to 0.0.5
  * Use the standard context library
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Updated flannel cni image to 1.6.0
  * Updated CNI plugins version on the README
  * Bump sigs.k8s.io/knftables from 0.0.17 to 0.0.18
  * Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1
  * Bump github.com/Microsoft/hcsshim from 0.12.8 to 0.12.9
  * Added check to not check br_filter in case of windows
  * Bumo golangci-lint to latest version
  * Bump to go 1.23
  * Added checks for br_netfilter module
  * Try not to cleanup multiple peers behind same PublicIP
  * fix trivy check
  * check that the lease includes an IP address of the requested family before configuring the flannel interface
  * Fixed IPv6 chosen in case of public-ipv6 configured
  * add timeout to e2e test pipelines
  * Update k8s version ine2e tests to v1.29.8
  * Update netlink to v1.3.0
  * Fixed values file on flannel chart
  * Bump k8s.io/klog/v2 from 2.120.1 to 2.130.1
  * Updated Flannel chart with Netpol containter and removed clustercidr
  * Fix bug in hostgw-windows
  * Fix bug in the logic polling the interface
  * Added node-public-ip annotation
  * Try several times to contact kube-api before failing
  * Fixed IPv6 0 initialization
  * wireguard backend: avoid error message if route already exists
  * Bump github.com/avast/retry-go/v4 from 4.5.1 to 4.6.0
  * use wait.PollUntilContextTimeout instead of deprecated wait.Poll
  * troubleshooting.md: add `ethtool -K flannel.1 tx-checksum-ip-generic off` for NAT
  * Added configuration for pulic-ip through node annotation
  * extension/vxlan: remove arp commands from vxlan examples
  * Refactor TrafficManager windows files to clarify logs
  * Add persistent-mac option to v6 too
  * fix comparison with previous networks in SetupAndEnsureMasqRules
  * show content of stdout and stderr when running iptables-restore returns an error
  * Add extra check before contacting kube-api
  * remove unimplemented error in windows trafficmngr
  * remove --dirty flags in git describe
  * Added leaseAttr string method with logs on VxLan
  * remove multiClusterCidr related-code.
  * Implement nftables masquerading for flannel
  * fix: ipv6 iptables rules were created even when IPv6 was disabled
  * Add tolerations to the flannel chart
  * Added additional check for n.spec.podCIDRs
  * Remove net-tools since it's an old package that we are not using
  * fix iptables_windows.go
  * Clean-up Makefile and use docker buildx locally
  * Use manual test to ensure iptables-* binaries are present
  * Bump github.com/containerd/containerd from 1.6.23 to 1.6.26
  * Bump github.com/joho/godotenv
  * SubnetManager should use the main context
  * Simplify TrafficManager interface
  * refactor iptables package to prepare for nftables-based implementation
- flannel v0.26.4, includes `golang.org/x/net/http2` at v0.34.0, which fixes bsc#1236522 (CVE-2023-45288)</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1738929601">- add `go-modules` for automated creation of go vendored modules tarball
- bump go version: `BuildRequires:  golang(API) &gt;= 1.23`
- delete unused `kube-flannel.yaml` source in the spec file, it is directly soured from the flannel source tar ball</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1744632000">- Update to version 0.26.6:
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump the etcd group with 4 updates
  * Bump the tencent group with 2 updates
  * Organize dependabot PR's more clearly by using groups
  * Use peer's wireguard port, not our own
  * Bump to codeql v3
  * Pin all GHA to a specific SHA commit
  * Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (fix CVE-2025-30204, bsc#1240516)
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
  * Bump go.etcd.io/etcd/tests/v3 from 3.5.18 to 3.5.20
  * add missing GH_TOKEN env var in release.yaml
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Upload chart archive with the release files
  * make deps
  * refactor release.yaml to reduce use of potentially vulnerable GH Actions
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * enable setting CNI directory paths in helm chart
  * Added cni file configuration on the chart
  * Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
  * Bump github.com/avast/retry-go/v4 from 4.6.0 to 4.6.1</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1765454400">- Update to version 0.27.4:
  * Removed PodSecurityPolicy manifest creation
  * Fix interface IP address detection in dual-stack mode
  * Fix: recreate VXLAN device (flannel.*) when external interface is deleted and re-added (#2247)
  * golangci-lint: fix iptables_test
  * firewall: add option to disable fully-random mode for MASQUERADE
  * Bump the tencent group with 2 updates
  * Bump github.com/coreos/go-systemd/v22 in the other-go-modules group
  * Bump golang.org/x/sys in the other-go-modules group
  * Bump the etcd group with 4 updates
  * Bump etcd version in tests
  * Stop using deprecated cache.NewIndexerInformer function
  * Bump k8s test version
  * Bump k8s deps to v0.31.11
  * Bump the other-go-modules group with 2 updates
  * helm chart: add nodeSelector in the helm chart
  * Updated Alpine image
  * Added flag to enable blackhole route locally for Canal
  * Bump golang.org/x/sync in the other-go-modules group
  * make enqueueLeaseEvent context aware and prevent dangling goroutines when context is done - fixed a typo/build error
  * make retry interval exp backoff
  * cont_when_cache_not_ready configurable with fail by default * use semaphore as opposed to raw signal channel
  * Update pkg/subnet/kube/kube.go
  * Fix deadlock in startup for large clusters
  * enable setting resources in helm chart
  * capture close() err on subnet file save (#2248)
  * doc: document flag --iptables-forward-rules
  * Bump netlink to v1.3.1
  * fix: clean-up rules when starting instead of shutting down
  * Bump k8s and sles test version
  * Add modprobe br_netfilter step in test workflows
  * test: don't run the workflows on "push" events
  * Update to the latest flannel cni-plugins v1.7.1
  * Move to go 1.23.6</changelog>
</package>
<package pkgid="2a5db1d897a446ff67b2f189182915e139dc76245e1c52085806be3204ef3f91" name="fuc" arch="aarch64">
  <version epoch="0" ver="3.1.1" rel="bp156.2.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- initial package (1.1.7)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1700913600">- Update to version 1.1.9:
  * Upgrade deps
  * Don't show stack traces in errors
  * Tweak copy error message slightly
  * Use better pattern matching
  * Fix inconsistent badge sytling
  * Support flipping cpz argument order
  * Slight efficiency improvement (at the expense of throughput in hopefully rare cases)
  * Update README.md
- removed cargo config from spec since now it's bundled in vendor</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1706097600">- Update to version 2.0.0:
  * Improved handling of deeply nested folders and other IO errors
  * Never follow symlinks for deletion</changelog>
  <changelog author="andrea.manzini@suse.com" date="1713700800">- Update to version 2.1.0:
  * Stable rust patch
  * Upgrade FTZZ
  * Add progress feature (closes #14)
  * Upgrade deps
  * Remove release_max_level_off since tracing is completely compiled out by default anyway
  * Add tip for merging directories
  * Integrate tracing</changelog>
  <changelog author="andrea.manzini@suse.com" date="1721908800">- Update to version 2.2.0:
  * Stable rust patch
  * Upgrade deps
  * Add -L / --dereference option (#36)
  * Add NO_UNSHARE envvar support to avoid calling unshare for default docker configs which block the syscall (closes #34)
  * Use official cache-size version
  * Use my own cache-size dep to fix the build
  * Remove cargo warning about "no edition set"
  * Clarify what rmz/cpz are</changelog>
  <changelog author="andrea.manzini@suse.com" date="1741003200">- Update to version 3.0.0:
  * Upgrade deps
  * Fix bug when trying to copy "." into a directory
  * Eliminate pointless statx when removing files with unknown d_type
  * requires Rust 2024 edition
  * Remove extra mkdir (push that responsibility outside the library so we
    don't have a ton of redundant mkdirs)
  * Avoid pointless copy_file_range calls that we know won't copy anything
  * Remember cross-device copy failures per directory
  * Swap binary name and arch for better sorting
  * Add docs on progress indicator</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1741780800">- Update to version 3.0.1:
  * dependency bumps, including Rustix1.0</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1747915200">- Update to version 3.1.0:
  * Support hard linking files in cpz!
  * Fixed bugs with --force and symlinks.
  * Upgrade deps</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753358400">- Update to version 3.1.1:
  * fix recursive copy detection for multiple directories
  * Upgrade deps</changelog>
</package>
<package pkgid="570b615865635bae917e69cde34f86f7b40d8038246139b974655f00cb91aac3" name="fuc" arch="src">
  <version epoch="0" ver="3.1.1" rel="bp156.2.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- initial package (1.1.7)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1700913600">- Update to version 1.1.9:
  * Upgrade deps
  * Don't show stack traces in errors
  * Tweak copy error message slightly
  * Use better pattern matching
  * Fix inconsistent badge sytling
  * Support flipping cpz argument order
  * Slight efficiency improvement (at the expense of throughput in hopefully rare cases)
  * Update README.md
- removed cargo config from spec since now it's bundled in vendor</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1706097600">- Update to version 2.0.0:
  * Improved handling of deeply nested folders and other IO errors
  * Never follow symlinks for deletion</changelog>
  <changelog author="andrea.manzini@suse.com" date="1713700800">- Update to version 2.1.0:
  * Stable rust patch
  * Upgrade FTZZ
  * Add progress feature (closes #14)
  * Upgrade deps
  * Remove release_max_level_off since tracing is completely compiled out by default anyway
  * Add tip for merging directories
  * Integrate tracing</changelog>
  <changelog author="andrea.manzini@suse.com" date="1721908800">- Update to version 2.2.0:
  * Stable rust patch
  * Upgrade deps
  * Add -L / --dereference option (#36)
  * Add NO_UNSHARE envvar support to avoid calling unshare for default docker configs which block the syscall (closes #34)
  * Use official cache-size version
  * Use my own cache-size dep to fix the build
  * Remove cargo warning about "no edition set"
  * Clarify what rmz/cpz are</changelog>
  <changelog author="andrea.manzini@suse.com" date="1741003200">- Update to version 3.0.0:
  * Upgrade deps
  * Fix bug when trying to copy "." into a directory
  * Eliminate pointless statx when removing files with unknown d_type
  * requires Rust 2024 edition
  * Remove extra mkdir (push that responsibility outside the library so we
    don't have a ton of redundant mkdirs)
  * Avoid pointless copy_file_range calls that we know won't copy anything
  * Remember cross-device copy failures per directory
  * Swap binary name and arch for better sorting
  * Add docs on progress indicator</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1741780800">- Update to version 3.0.1:
  * dependency bumps, including Rustix1.0</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1747915200">- Update to version 3.1.0:
  * Support hard linking files in cpz!
  * Fixed bugs with --force and symlinks.
  * Upgrade deps</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753358400">- Update to version 3.1.1:
  * fix recursive copy detection for multiple directories
  * Upgrade deps</changelog>
</package>
<package pkgid="a75ea1268428324ad64b1e76c22696173d4524c04ea80d2472164863d3376c61" name="fuc" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="bp156.2.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- initial package (1.1.7)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1700913600">- Update to version 1.1.9:
  * Upgrade deps
  * Don't show stack traces in errors
  * Tweak copy error message slightly
  * Use better pattern matching
  * Fix inconsistent badge sytling
  * Support flipping cpz argument order
  * Slight efficiency improvement (at the expense of throughput in hopefully rare cases)
  * Update README.md
- removed cargo config from spec since now it's bundled in vendor</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1706097600">- Update to version 2.0.0:
  * Improved handling of deeply nested folders and other IO errors
  * Never follow symlinks for deletion</changelog>
  <changelog author="andrea.manzini@suse.com" date="1713700800">- Update to version 2.1.0:
  * Stable rust patch
  * Upgrade FTZZ
  * Add progress feature (closes #14)
  * Upgrade deps
  * Remove release_max_level_off since tracing is completely compiled out by default anyway
  * Add tip for merging directories
  * Integrate tracing</changelog>
  <changelog author="andrea.manzini@suse.com" date="1721908800">- Update to version 2.2.0:
  * Stable rust patch
  * Upgrade deps
  * Add -L / --dereference option (#36)
  * Add NO_UNSHARE envvar support to avoid calling unshare for default docker configs which block the syscall (closes #34)
  * Use official cache-size version
  * Use my own cache-size dep to fix the build
  * Remove cargo warning about "no edition set"
  * Clarify what rmz/cpz are</changelog>
  <changelog author="andrea.manzini@suse.com" date="1741003200">- Update to version 3.0.0:
  * Upgrade deps
  * Fix bug when trying to copy "." into a directory
  * Eliminate pointless statx when removing files with unknown d_type
  * requires Rust 2024 edition
  * Remove extra mkdir (push that responsibility outside the library so we
    don't have a ton of redundant mkdirs)
  * Avoid pointless copy_file_range calls that we know won't copy anything
  * Remember cross-device copy failures per directory
  * Swap binary name and arch for better sorting
  * Add docs on progress indicator</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1741780800">- Update to version 3.0.1:
  * dependency bumps, including Rustix1.0</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1747915200">- Update to version 3.1.0:
  * Support hard linking files in cpz!
  * Fixed bugs with --force and symlinks.
  * Upgrade deps</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753358400">- Update to version 3.1.1:
  * fix recursive copy detection for multiple directories
  * Upgrade deps</changelog>
</package>
<package pkgid="857dddc6a61aa822902383b6ac57722a86ed7071edcd4c619d8416f4522ccc96" name="fwts" arch="aarch64">
  <version epoch="0" ver="24.11.00" rel="bp156.2.3.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1669377600">- Update to version 22.11.00:
  * lib: fwts_version.h - update to V22.11.00
  * debian: update changelog
  * auto-package: mkpackage.sh: add lunar
  * fwts-test: sync test logs with latest ACPICA
  * ACPICA: Update to version 20221020
  * Add Support for EV_COMPACT_HASH event type
  * fwts-test: add regression tests for CEDT
  * acpi: cedt: add tests for ACPI CEDT table (mantis 2076)
  * fwts-test: add regression test for RGRT
  * acpi: rgrt: add test for ACPI RGRT table( mantis 2056)
  * fwts-test: sync up with the default s3 sleep type description change
  * s3: modify the default sleep type description</changelog>
  <changelog author="mpluskal@suse.com" date="1672920000">- Update to version 22.11.00:
  * tpmevlog: add tests for checking the UEFI_IMAGE_LOAD_EVENT Structure
  * acpi: s3: fix the issue for determining time to resume</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1673956800">- Update to version 23.01.00:
  * lib: fwts_version.h - update to V23.01.00
  * debian: update changelog
  * fwts-test: sync up with the fix of passed reserved value
  * Update copyright year to 2023
  * lib: fwts_acpi_tables: fix the passed reserved value
  * fwts-test: add regression tests for AEST
  * acpi: aest: add tests for ACPI AEST table</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1680091200">- Update to version 23.03.00:
  * lib: fwts_version.h - update to V23.03.00
  * debian: update changelog
  * auto-packager: mkpackage: add build depend dh-dkms for lunar
  * dmicheck: fix the print format
  * dmicheck: update for supporting DMI version to 3.6
  * dmicheck: update the device type field for type 41
  * dmicheck: update the interface field for type 21
  * dmicheck: add some bit 0 reserved checks for type 17
  * dmicheck: modify the memory type range check for type 17
  * dmicheck: add bit 0 reserved check of the processor characteristics for type 4
  * dmicheck: add status check for type 4
  * dmicheck: add processor family check for type 4
  * dmicheck: fix the extended bios ROM size bit check of type 0
  * dmicheck: fix the wrong slot height value range
  * dmicheck: fix the length check error for type 9
  * debian: update copyright
  * acpi: method: NIH method output buffer should be 4 bytes
  * ebbr: add some tests to ebbr option
  * sbbr: add esrt and uefibootpath tests to sbbr option
  * Add support for 64 bit LoongArch compilation
  * libfwtsiasl: fix undefined symbols in shared library</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1684929600">- Update to version 23.05.00:
  * lib: fwts_version.h - update to V23.05.00
  * debian: update changelog
  * auto-packager: mkpackage.sh remove the dh-dkms dependency
  * debian: control: add build depend dh-dkms
  * auto-packager: mkpackage.sh: add mantic
  * fwts_framwork: add ebbr test for RISC-V
  * s3: fix the display time of resume for Timekeeping suspended string missing
  * lib: fwts_framework: add EBBR to category
  * acpi: button: remove check fixed hardware &amp; control method power buttons
  * fwts-test: add regression tests for IVRS
  * acpi: ivrs: add tests for ACPI IVRS table
  * acpi: cedt: remove unused code
  * dmicheck: add more checks for invalid serial number string
  * ACPICA: Update to version 20230331
  * dmicheck: extent the dmi_patterns for the default serial number string</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1688990400">- Update to version 23.07.00:
  * lib: fwts_version.h - update to V23.07.00
  * debian: update changelog
  * debian: fix lintian errors and warnings
  * debian: fix debuild fail for the not installed files
  * debian: update compat level and standards version
  * ACPICA: Update to version 20230628
  * fwts_acpica: Remove unused variable "context"
  * acpi/wmi: Fix bug when counting WMI methods
  * acpi/wmi: Check if the mandatory block query method exists
  * acpi/wmi: Add WMI GUID for the dell-wmi-ddv driver
  * Increase number of max semaphores to fix OOM crashes on some systems
  * lib: fwts_acpi_object_eval: sync up the AML exceptions from ACPICA
  * uefi: esrt: update the LastAttemptStatus values to UEFI spec 2.10
  * acpi: mpam: fix build fail on bionic
  * fwts-test: sync up with test with resource specific data
  * acpi: mpam: test with resource specific data for interconnect location type
  * fwts-test: sync up with adding the mpam tests
  * acpi: mpam: add test for ACPI MPAM table
  * fwts-test: sync up aest modify the dumping raw data
  * acpi: aest: modify the dumping raw data without noisy info
  * lib: fwts_dump_data: add library function for dumping all raw data with prefix
  * lib: fwts_dump_data: add function for simply dump raw data
  * auto-packager: mkpackage.sh: remove the control hook
  * lib: make the return types consistent
  * debian: control: modify newer dkms dependency
  * debian: control: update uploader
  * lib: fwts_oops: fix the WARN_ON warnings in kernel not found
  * cppcheck: fix the cppcheck source link error
  * fwts-test: sync up the removing ARM specific for ebbr
  * lib: framework: remvoe ARM specific for ebbr</changelog>
  <changelog author="Martin Pluskal &lt;martin@pluskal.org&gt;" date="1697630400">- Update _service url</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702468800">- Update to version 23.11.00:
  * snapcraft: add source type for repo
  * snapcraft: update the source repo for snap build
  * lib: fwts_version.h - update to V23.11.00
  * debian: update changelog
  * fwts-test: add regression tests for iBFT
  * acpi: ibft: add tests for iBFT table
  * auto-packager: mkpackage.sh: add noble
  * lib: framework: fix the unclear error message of the results log
  * auto-packager: update the fwts git repo
  * fwts-test: add regression tests for RAS2
  * acpi: ras2: add test for ACPI RAS2 table
  * acpi/wmi: Add WMI GUID for the wmi-bmof driver
  * fwts-test: sync up with the klog message update
  * fwts-test: sync up the SPTT typo fix
  * klog.json: Add some missing power kernel messages to klog database
  * klog.json: Add some missing battery kernel messages to klog database
  * klog.json: Add some missing bus kernel messages to klog database
  * klog.json: Add some missing nsaccess kernel messages to klog database
  * klog.json: Add some missing exutils kernel messages to klog database
  * klog.json: Add some missing hwregs kernel messages to klog database
  * klog.json: Add some missing tbfadt kernel messages to klog database
  * klog.json: Add some missing exfield kernel messages to klog database
  * klog.json: Add some missing rslist kernel messages to klog database
  * klog.json: Add some missing evmisc kernel messages to klog database
  * klog.json: Add some missing exmisc kernel messages to klog database
  * klog.json: Add some missing efi64 kernel messages to klog database
  * klog.json: Add some missing exresolv kernel messages to klog database
  * acpi: aspt: fix typo of SPTT
  * README: modify the fwts git repository
  * klog.json: Add some missinig processor_perflib kernel messages to klog database
  * klog.json: Add some missing apmt kernel messages to klog database
  * klog.json: Add some missing hest kernel messages to klog database
  * lib: fwts_acpi_table: fix fwts_acpi_reserved_zero_array with the input string
  * klog.json: Add some missing erst kernel messages to klog database
  * klog.json: Add some missing bert kernel messages to klog database
  * klog.json: Add some missing einj kernel messages to klog database
  * fwts-test: sync up with Recognize Pluton TPM patch
  * acpi: Recognize Pluton TPM
  * lib: fwts_version.h - update to V23.09.00
  * debian: update changelog
  * klog.json: Add some missing ACPI PCI IRQ kernel messages to klog database
  * tpmevlog: Correct boundary checking for PCR4 event check
  * acpi: ivrs: fix the tests stuck at validate IVRS table
  * klog.json: Add some missing dma kernel messages to klog database
  * klog.json: Add some missing amba kernel messages to klog database
  * klog.json: Add some missing sleep kernel messages to klog database
  * klog.json: Add some missing ACPI NFIT kernel messages to klog database
  * klog.json: Add some missing processor idle kernel messages to klog database
  * klog.json: Add some missing ACPI memory hotplug kernel messages to klog database
  * kernelscan: modify some pathes of the scan files
  * acpi: madt: add more interrupt controller structure types defined in ACPI 6.5
  * uefi: esrt: fix the last_attempt_status wrongly interpretation of value
  * acpi: fadt: remove the tests for expecting smi_cmd is zero
  * fwts-test: sync up with iort test to version E.e
  * acpi: iort: update IORT table to specification version E.e
  * lib: fwts_acpi_object_eval.: fix build fail for ppc64el on mantic
  * auto-packager: mkpackage.sh: remove kinetic
  * acpi: s3: build fail for unexpected format of argument types for i386
  * fwts-test: sync up with the dumping s3-dump-wakeup-src option
  * snapcraft: add snap build for riscv64
  * s3: add dumping the all devices and signed wakeup sources
  * s3: add checking the device signed wakeup events
  * dmicheck: update supported DMI version to 3.7
  * Upgrade the max value for "Processor Upgrade" to 0x50
  * fwts-test: sync up the spcr test updating to revision 4
  * acpi: spcr: update the spcr tests to lastest revision 4
  * fwts-test: sync up with the phat dumping vendor data modification
  * acpi: phat: modify the dumping vendor data format
  * klog.json: Add and modify some more e820 kernel messages to klog database
  * fwts-test: sync up with phat fix the device path for the health data record
  * acpi: phat: fix the device path for the health data record
  * uefi: esrtdump: update the LastAttemptStatus values to UEFI spec 2.10
  * acpi: update fadt and madt revisions to ACPI 6.5
  * fwts-test: sync up with update supported port types
  * fwts-test: sync up with klog.json ix spelling mistakes found using codespell
  * acpi/scpr: spcr-&gt;interrupt_type == 0 is valid
  * acpi/spcr: Update supported port types
  * src/*: Fix various spelling mistakes in source code
  * data/klog.json: Fix spelling mistakes found using codespell</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1706529600">- Only build on supported architectures (bsc#1219232)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709640000">- Update to version 24.01.00:
  * acpi: sbbr: check the existence of SPCR console devices
  * acpi: dbg2: update the subtype RISC-V SBI console for DBG2
  * acpi: ras2: stop for loop when list exceeds the table
  * framework: fix memory leaks caused by fwts_log_get_filenames
  * acpi: s3: fix potential memory leaks on fwts_get() calls
  * acpi: s3: enable debug messages on S0ix failure for Intel platforms
  * lib: fwts_version.h - update to V24.01.00
  * debian: update changelog
  * Update copyright year to 2024
  * fwts-test: add regression tests for SKVL</changelog>
  <changelog author="mpluskal@suse.com" date="1710417600">- Update to version 24.01.00:
  * opal: fix the resource leak for get_linux_mem_devices
  * dmicheck: Don't check firmware version on anything but NVDIMM devices</changelog>
  <changelog author="mpluskal@suse.com" date="1711540800">- Update to version 24.01.00:
  * acpi: acpipld: add tests to check _PLD methods only on the connectable ports
  * opal: fix the resource leak for cpus
  * opal: fix the resource leak for process_dimm and process_mba
  * acpi: srat: fix the untrusted loop bound warning</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1712750400">- Update to version 24.03.00:
  * lib: fwts_version.h - update to V24.03.00
  * debian: update changelog
  * lib: fwts_acpi_tables: fix the build fail on armhf
  * ACPICA: Update to version 20240322</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1724673600">- Update to version 24.07.00:
  * acpi: acpipld: downgrade the severity for PLD on the not connected port
  * configure.ac: fix the autoreconf AC_PROG_LEX warning
  * configure.ac: fix the autoreconf AC_PROG_LIBTOOL warning
  * lib: fwts_version.h - update to V24.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove mantic
  * acpi: acpipld: modify the test description to aviod misunderstanding
  * fwts-test: add regression tests for S3PT
  * acpi: s3pt: add tests for ACPI S3PT table
  * aspm: Only require ASPM for devices with an actual link
  * fwts-test: cedt: sync up with adding raw data dump
  * fwts-test: cedt: fix the wrong value of ENIW
  * acpi: cedt: add raw data dump for interleave target list
  * libfwtsiasl: fix parallel build with GNU Make &gt;= 4.4
  * tpmevlog: Ensure EV_SEPARATOR recorded for PCRs 0-7
  * efi_runtime: don't build dkms module for those kernels with efi_test
  * auto-packer: mkpackage.sh: add oracular
  * lib: fwts_log_html: fix the invalid printf format string
  * autopackager: mkpackage.sh: remove lunar</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1727870400">- Update to version 24.09.00:
  * lib: fwts_version.h - update to V24.09.00
  * debian: update changelog
  * klog.json: Add the missing processor error message to klog database
  * klog.json: Add the missing exreqion error message to klog database
  * klog.json: Add the missing exserial error message to klog database
  * klog.json: Add the missing exoparg2 error message to klog database
  * klog.json: Add the missing dswload2 error message to klog database
  * klog.json: Add the missing nsinit error message to klog database
  * klog.json: Add the missing exstore error message to klog database
  * klog.json: Add more nsxfeval error messages to klog database
  * klog.json: Add more utobject error messages to klog database
  * klog.json: Add more uttrack error messages to klog database
  * klog.json: Add the missing srat error message to klog database
  * klog.json: Add more error messages for battery to klog database
  * klog.json: Add the missing scan error messages to klog database
  * klog.json: Add the missing prmt error messages to klog database
  * klog.json: Add the missing viot error messages to klog database
  * klog.json: Add the missing ipmi error messages to klog database
  * klog.json: Add the missing fan_core error message to klog database
  * klog.json: Add more missing acpi pcc kernel messages to klog database
  * klog.json: Add more missing osl kernel messages to klog database
  * fwts-test: slic: sync test results with fixes to ACPICA SLIC dumping
  * ACPICA: Update to version 20240827
  * lib: modprobe: add checking the compressed zst module format
  * klog.json: Add more missing iort kernel messages to klog database
  * klog.json: Add some missing gtdt kernel messages to klog database
  * klog.json: Add some missing ghes kernel messages to klog database
  * klog.json: Add some missing agdi kernel messages to klog database
  * klog: fix the pattern errors for einj trigger table entry</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1732622400">- Update to version 24.11.00:
  * lib: fwts_version.h - update to V24.11.00
  * debian: update changelog
  * hdaaudio: fix the the build errors under plucky amd64
  * auto-packager: mkpackage.sh: add plucky
  * dmicheck: add more types for version length test.
  * dmicheck: update for supporting DMI version to 3.8.0
  * acpi: iort: memory access flag update.
  * src/acpi: Fix a few spelling mistakes
  * acpi/wmi: Warn if WMI GUIDs from the Windows driver samples are found
  * lib: fwts_acpi_object_eval: Do not return FWTS_OK if method lookup fails
  * script: fix bash-completion-with-hashbang lintian warning
  * dmicheck: update for supporting DMI version to 3.7.1
  * tpmevlog: Ensure the event log matches the actual TPM PCRs</changelog>
</package>
<package pkgid="034ce9b9f87c3333ad753da9e039d454afe9faf9d32f0e733f043c5afe6a1eac" name="fwts" arch="i586">
  <version epoch="0" ver="24.11.00" rel="bp156.2.3.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1669377600">- Update to version 22.11.00:
  * lib: fwts_version.h - update to V22.11.00
  * debian: update changelog
  * auto-package: mkpackage.sh: add lunar
  * fwts-test: sync test logs with latest ACPICA
  * ACPICA: Update to version 20221020
  * Add Support for EV_COMPACT_HASH event type
  * fwts-test: add regression tests for CEDT
  * acpi: cedt: add tests for ACPI CEDT table (mantis 2076)
  * fwts-test: add regression test for RGRT
  * acpi: rgrt: add test for ACPI RGRT table( mantis 2056)
  * fwts-test: sync up with the default s3 sleep type description change
  * s3: modify the default sleep type description</changelog>
  <changelog author="mpluskal@suse.com" date="1672920000">- Update to version 22.11.00:
  * tpmevlog: add tests for checking the UEFI_IMAGE_LOAD_EVENT Structure
  * acpi: s3: fix the issue for determining time to resume</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1673956800">- Update to version 23.01.00:
  * lib: fwts_version.h - update to V23.01.00
  * debian: update changelog
  * fwts-test: sync up with the fix of passed reserved value
  * Update copyright year to 2023
  * lib: fwts_acpi_tables: fix the passed reserved value
  * fwts-test: add regression tests for AEST
  * acpi: aest: add tests for ACPI AEST table</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1680091200">- Update to version 23.03.00:
  * lib: fwts_version.h - update to V23.03.00
  * debian: update changelog
  * auto-packager: mkpackage: add build depend dh-dkms for lunar
  * dmicheck: fix the print format
  * dmicheck: update for supporting DMI version to 3.6
  * dmicheck: update the device type field for type 41
  * dmicheck: update the interface field for type 21
  * dmicheck: add some bit 0 reserved checks for type 17
  * dmicheck: modify the memory type range check for type 17
  * dmicheck: add bit 0 reserved check of the processor characteristics for type 4
  * dmicheck: add status check for type 4
  * dmicheck: add processor family check for type 4
  * dmicheck: fix the extended bios ROM size bit check of type 0
  * dmicheck: fix the wrong slot height value range
  * dmicheck: fix the length check error for type 9
  * debian: update copyright
  * acpi: method: NIH method output buffer should be 4 bytes
  * ebbr: add some tests to ebbr option
  * sbbr: add esrt and uefibootpath tests to sbbr option
  * Add support for 64 bit LoongArch compilation
  * libfwtsiasl: fix undefined symbols in shared library</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1684929600">- Update to version 23.05.00:
  * lib: fwts_version.h - update to V23.05.00
  * debian: update changelog
  * auto-packager: mkpackage.sh remove the dh-dkms dependency
  * debian: control: add build depend dh-dkms
  * auto-packager: mkpackage.sh: add mantic
  * fwts_framwork: add ebbr test for RISC-V
  * s3: fix the display time of resume for Timekeeping suspended string missing
  * lib: fwts_framework: add EBBR to category
  * acpi: button: remove check fixed hardware &amp; control method power buttons
  * fwts-test: add regression tests for IVRS
  * acpi: ivrs: add tests for ACPI IVRS table
  * acpi: cedt: remove unused code
  * dmicheck: add more checks for invalid serial number string
  * ACPICA: Update to version 20230331
  * dmicheck: extent the dmi_patterns for the default serial number string</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1688990400">- Update to version 23.07.00:
  * lib: fwts_version.h - update to V23.07.00
  * debian: update changelog
  * debian: fix lintian errors and warnings
  * debian: fix debuild fail for the not installed files
  * debian: update compat level and standards version
  * ACPICA: Update to version 20230628
  * fwts_acpica: Remove unused variable "context"
  * acpi/wmi: Fix bug when counting WMI methods
  * acpi/wmi: Check if the mandatory block query method exists
  * acpi/wmi: Add WMI GUID for the dell-wmi-ddv driver
  * Increase number of max semaphores to fix OOM crashes on some systems
  * lib: fwts_acpi_object_eval: sync up the AML exceptions from ACPICA
  * uefi: esrt: update the LastAttemptStatus values to UEFI spec 2.10
  * acpi: mpam: fix build fail on bionic
  * fwts-test: sync up with test with resource specific data
  * acpi: mpam: test with resource specific data for interconnect location type
  * fwts-test: sync up with adding the mpam tests
  * acpi: mpam: add test for ACPI MPAM table
  * fwts-test: sync up aest modify the dumping raw data
  * acpi: aest: modify the dumping raw data without noisy info
  * lib: fwts_dump_data: add library function for dumping all raw data with prefix
  * lib: fwts_dump_data: add function for simply dump raw data
  * auto-packager: mkpackage.sh: remove the control hook
  * lib: make the return types consistent
  * debian: control: modify newer dkms dependency
  * debian: control: update uploader
  * lib: fwts_oops: fix the WARN_ON warnings in kernel not found
  * cppcheck: fix the cppcheck source link error
  * fwts-test: sync up the removing ARM specific for ebbr
  * lib: framework: remvoe ARM specific for ebbr</changelog>
  <changelog author="Martin Pluskal &lt;martin@pluskal.org&gt;" date="1697630400">- Update _service url</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702468800">- Update to version 23.11.00:
  * snapcraft: add source type for repo
  * snapcraft: update the source repo for snap build
  * lib: fwts_version.h - update to V23.11.00
  * debian: update changelog
  * fwts-test: add regression tests for iBFT
  * acpi: ibft: add tests for iBFT table
  * auto-packager: mkpackage.sh: add noble
  * lib: framework: fix the unclear error message of the results log
  * auto-packager: update the fwts git repo
  * fwts-test: add regression tests for RAS2
  * acpi: ras2: add test for ACPI RAS2 table
  * acpi/wmi: Add WMI GUID for the wmi-bmof driver
  * fwts-test: sync up with the klog message update
  * fwts-test: sync up the SPTT typo fix
  * klog.json: Add some missing power kernel messages to klog database
  * klog.json: Add some missing battery kernel messages to klog database
  * klog.json: Add some missing bus kernel messages to klog database
  * klog.json: Add some missing nsaccess kernel messages to klog database
  * klog.json: Add some missing exutils kernel messages to klog database
  * klog.json: Add some missing hwregs kernel messages to klog database
  * klog.json: Add some missing tbfadt kernel messages to klog database
  * klog.json: Add some missing exfield kernel messages to klog database
  * klog.json: Add some missing rslist kernel messages to klog database
  * klog.json: Add some missing evmisc kernel messages to klog database
  * klog.json: Add some missing exmisc kernel messages to klog database
  * klog.json: Add some missing efi64 kernel messages to klog database
  * klog.json: Add some missing exresolv kernel messages to klog database
  * acpi: aspt: fix typo of SPTT
  * README: modify the fwts git repository
  * klog.json: Add some missinig processor_perflib kernel messages to klog database
  * klog.json: Add some missing apmt kernel messages to klog database
  * klog.json: Add some missing hest kernel messages to klog database
  * lib: fwts_acpi_table: fix fwts_acpi_reserved_zero_array with the input string
  * klog.json: Add some missing erst kernel messages to klog database
  * klog.json: Add some missing bert kernel messages to klog database
  * klog.json: Add some missing einj kernel messages to klog database
  * fwts-test: sync up with Recognize Pluton TPM patch
  * acpi: Recognize Pluton TPM
  * lib: fwts_version.h - update to V23.09.00
  * debian: update changelog
  * klog.json: Add some missing ACPI PCI IRQ kernel messages to klog database
  * tpmevlog: Correct boundary checking for PCR4 event check
  * acpi: ivrs: fix the tests stuck at validate IVRS table
  * klog.json: Add some missing dma kernel messages to klog database
  * klog.json: Add some missing amba kernel messages to klog database
  * klog.json: Add some missing sleep kernel messages to klog database
  * klog.json: Add some missing ACPI NFIT kernel messages to klog database
  * klog.json: Add some missing processor idle kernel messages to klog database
  * klog.json: Add some missing ACPI memory hotplug kernel messages to klog database
  * kernelscan: modify some pathes of the scan files
  * acpi: madt: add more interrupt controller structure types defined in ACPI 6.5
  * uefi: esrt: fix the last_attempt_status wrongly interpretation of value
  * acpi: fadt: remove the tests for expecting smi_cmd is zero
  * fwts-test: sync up with iort test to version E.e
  * acpi: iort: update IORT table to specification version E.e
  * lib: fwts_acpi_object_eval.: fix build fail for ppc64el on mantic
  * auto-packager: mkpackage.sh: remove kinetic
  * acpi: s3: build fail for unexpected format of argument types for i386
  * fwts-test: sync up with the dumping s3-dump-wakeup-src option
  * snapcraft: add snap build for riscv64
  * s3: add dumping the all devices and signed wakeup sources
  * s3: add checking the device signed wakeup events
  * dmicheck: update supported DMI version to 3.7
  * Upgrade the max value for "Processor Upgrade" to 0x50
  * fwts-test: sync up the spcr test updating to revision 4
  * acpi: spcr: update the spcr tests to lastest revision 4
  * fwts-test: sync up with the phat dumping vendor data modification
  * acpi: phat: modify the dumping vendor data format
  * klog.json: Add and modify some more e820 kernel messages to klog database
  * fwts-test: sync up with phat fix the device path for the health data record
  * acpi: phat: fix the device path for the health data record
  * uefi: esrtdump: update the LastAttemptStatus values to UEFI spec 2.10
  * acpi: update fadt and madt revisions to ACPI 6.5
  * fwts-test: sync up with update supported port types
  * fwts-test: sync up with klog.json ix spelling mistakes found using codespell
  * acpi/scpr: spcr-&gt;interrupt_type == 0 is valid
  * acpi/spcr: Update supported port types
  * src/*: Fix various spelling mistakes in source code
  * data/klog.json: Fix spelling mistakes found using codespell</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1706529600">- Only build on supported architectures (bsc#1219232)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709640000">- Update to version 24.01.00:
  * acpi: sbbr: check the existence of SPCR console devices
  * acpi: dbg2: update the subtype RISC-V SBI console for DBG2
  * acpi: ras2: stop for loop when list exceeds the table
  * framework: fix memory leaks caused by fwts_log_get_filenames
  * acpi: s3: fix potential memory leaks on fwts_get() calls
  * acpi: s3: enable debug messages on S0ix failure for Intel platforms
  * lib: fwts_version.h - update to V24.01.00
  * debian: update changelog
  * Update copyright year to 2024
  * fwts-test: add regression tests for SKVL</changelog>
  <changelog author="mpluskal@suse.com" date="1710417600">- Update to version 24.01.00:
  * opal: fix the resource leak for get_linux_mem_devices
  * dmicheck: Don't check firmware version on anything but NVDIMM devices</changelog>
  <changelog author="mpluskal@suse.com" date="1711540800">- Update to version 24.01.00:
  * acpi: acpipld: add tests to check _PLD methods only on the connectable ports
  * opal: fix the resource leak for cpus
  * opal: fix the resource leak for process_dimm and process_mba
  * acpi: srat: fix the untrusted loop bound warning</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1712750400">- Update to version 24.03.00:
  * lib: fwts_version.h - update to V24.03.00
  * debian: update changelog
  * lib: fwts_acpi_tables: fix the build fail on armhf
  * ACPICA: Update to version 20240322</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1724673600">- Update to version 24.07.00:
  * acpi: acpipld: downgrade the severity for PLD on the not connected port
  * configure.ac: fix the autoreconf AC_PROG_LEX warning
  * configure.ac: fix the autoreconf AC_PROG_LIBTOOL warning
  * lib: fwts_version.h - update to V24.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove mantic
  * acpi: acpipld: modify the test description to aviod misunderstanding
  * fwts-test: add regression tests for S3PT
  * acpi: s3pt: add tests for ACPI S3PT table
  * aspm: Only require ASPM for devices with an actual link
  * fwts-test: cedt: sync up with adding raw data dump
  * fwts-test: cedt: fix the wrong value of ENIW
  * acpi: cedt: add raw data dump for interleave target list
  * libfwtsiasl: fix parallel build with GNU Make &gt;= 4.4
  * tpmevlog: Ensure EV_SEPARATOR recorded for PCRs 0-7
  * efi_runtime: don't build dkms module for those kernels with efi_test
  * auto-packer: mkpackage.sh: add oracular
  * lib: fwts_log_html: fix the invalid printf format string
  * autopackager: mkpackage.sh: remove lunar</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1727870400">- Update to version 24.09.00:
  * lib: fwts_version.h - update to V24.09.00
  * debian: update changelog
  * klog.json: Add the missing processor error message to klog database
  * klog.json: Add the missing exreqion error message to klog database
  * klog.json: Add the missing exserial error message to klog database
  * klog.json: Add the missing exoparg2 error message to klog database
  * klog.json: Add the missing dswload2 error message to klog database
  * klog.json: Add the missing nsinit error message to klog database
  * klog.json: Add the missing exstore error message to klog database
  * klog.json: Add more nsxfeval error messages to klog database
  * klog.json: Add more utobject error messages to klog database
  * klog.json: Add more uttrack error messages to klog database
  * klog.json: Add the missing srat error message to klog database
  * klog.json: Add more error messages for battery to klog database
  * klog.json: Add the missing scan error messages to klog database
  * klog.json: Add the missing prmt error messages to klog database
  * klog.json: Add the missing viot error messages to klog database
  * klog.json: Add the missing ipmi error messages to klog database
  * klog.json: Add the missing fan_core error message to klog database
  * klog.json: Add more missing acpi pcc kernel messages to klog database
  * klog.json: Add more missing osl kernel messages to klog database
  * fwts-test: slic: sync test results with fixes to ACPICA SLIC dumping
  * ACPICA: Update to version 20240827
  * lib: modprobe: add checking the compressed zst module format
  * klog.json: Add more missing iort kernel messages to klog database
  * klog.json: Add some missing gtdt kernel messages to klog database
  * klog.json: Add some missing ghes kernel messages to klog database
  * klog.json: Add some missing agdi kernel messages to klog database
  * klog: fix the pattern errors for einj trigger table entry</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1732622400">- Update to version 24.11.00:
  * lib: fwts_version.h - update to V24.11.00
  * debian: update changelog
  * hdaaudio: fix the the build errors under plucky amd64
  * auto-packager: mkpackage.sh: add plucky
  * dmicheck: add more types for version length test.
  * dmicheck: update for supporting DMI version to 3.8.0
  * acpi: iort: memory access flag update.
  * src/acpi: Fix a few spelling mistakes
  * acpi/wmi: Warn if WMI GUIDs from the Windows driver samples are found
  * lib: fwts_acpi_object_eval: Do not return FWTS_OK if method lookup fails
  * script: fix bash-completion-with-hashbang lintian warning
  * dmicheck: update for supporting DMI version to 3.7.1
  * tpmevlog: Ensure the event log matches the actual TPM PCRs</changelog>
</package>
<package pkgid="1ce6b24e70d668734775e02c3238938d8057b881d18b9649802f3442c653fc18" name="fwts" arch="src">
  <version epoch="0" ver="24.11.00" rel="bp156.2.3.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1669377600">- Update to version 22.11.00:
  * lib: fwts_version.h - update to V22.11.00
  * debian: update changelog
  * auto-package: mkpackage.sh: add lunar
  * fwts-test: sync test logs with latest ACPICA
  * ACPICA: Update to version 20221020
  * Add Support for EV_COMPACT_HASH event type
  * fwts-test: add regression tests for CEDT
  * acpi: cedt: add tests for ACPI CEDT table (mantis 2076)
  * fwts-test: add regression test for RGRT
  * acpi: rgrt: add test for ACPI RGRT table( mantis 2056)
  * fwts-test: sync up with the default s3 sleep type description change
  * s3: modify the default sleep type description</changelog>
  <changelog author="mpluskal@suse.com" date="1672920000">- Update to version 22.11.00:
  * tpmevlog: add tests for checking the UEFI_IMAGE_LOAD_EVENT Structure
  * acpi: s3: fix the issue for determining time to resume</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1673956800">- Update to version 23.01.00:
  * lib: fwts_version.h - update to V23.01.00
  * debian: update changelog
  * fwts-test: sync up with the fix of passed reserved value
  * Update copyright year to 2023
  * lib: fwts_acpi_tables: fix the passed reserved value
  * fwts-test: add regression tests for AEST
  * acpi: aest: add tests for ACPI AEST table</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1680091200">- Update to version 23.03.00:
  * lib: fwts_version.h - update to V23.03.00
  * debian: update changelog
  * auto-packager: mkpackage: add build depend dh-dkms for lunar
  * dmicheck: fix the print format
  * dmicheck: update for supporting DMI version to 3.6
  * dmicheck: update the device type field for type 41
  * dmicheck: update the interface field for type 21
  * dmicheck: add some bit 0 reserved checks for type 17
  * dmicheck: modify the memory type range check for type 17
  * dmicheck: add bit 0 reserved check of the processor characteristics for type 4
  * dmicheck: add status check for type 4
  * dmicheck: add processor family check for type 4
  * dmicheck: fix the extended bios ROM size bit check of type 0
  * dmicheck: fix the wrong slot height value range
  * dmicheck: fix the length check error for type 9
  * debian: update copyright
  * acpi: method: NIH method output buffer should be 4 bytes
  * ebbr: add some tests to ebbr option
  * sbbr: add esrt and uefibootpath tests to sbbr option
  * Add support for 64 bit LoongArch compilation
  * libfwtsiasl: fix undefined symbols in shared library</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1684929600">- Update to version 23.05.00:
  * lib: fwts_version.h - update to V23.05.00
  * debian: update changelog
  * auto-packager: mkpackage.sh remove the dh-dkms dependency
  * debian: control: add build depend dh-dkms
  * auto-packager: mkpackage.sh: add mantic
  * fwts_framwork: add ebbr test for RISC-V
  * s3: fix the display time of resume for Timekeeping suspended string missing
  * lib: fwts_framework: add EBBR to category
  * acpi: button: remove check fixed hardware &amp; control method power buttons
  * fwts-test: add regression tests for IVRS
  * acpi: ivrs: add tests for ACPI IVRS table
  * acpi: cedt: remove unused code
  * dmicheck: add more checks for invalid serial number string
  * ACPICA: Update to version 20230331
  * dmicheck: extent the dmi_patterns for the default serial number string</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1688990400">- Update to version 23.07.00:
  * lib: fwts_version.h - update to V23.07.00
  * debian: update changelog
  * debian: fix lintian errors and warnings
  * debian: fix debuild fail for the not installed files
  * debian: update compat level and standards version
  * ACPICA: Update to version 20230628
  * fwts_acpica: Remove unused variable "context"
  * acpi/wmi: Fix bug when counting WMI methods
  * acpi/wmi: Check if the mandatory block query method exists
  * acpi/wmi: Add WMI GUID for the dell-wmi-ddv driver
  * Increase number of max semaphores to fix OOM crashes on some systems
  * lib: fwts_acpi_object_eval: sync up the AML exceptions from ACPICA
  * uefi: esrt: update the LastAttemptStatus values to UEFI spec 2.10
  * acpi: mpam: fix build fail on bionic
  * fwts-test: sync up with test with resource specific data
  * acpi: mpam: test with resource specific data for interconnect location type
  * fwts-test: sync up with adding the mpam tests
  * acpi: mpam: add test for ACPI MPAM table
  * fwts-test: sync up aest modify the dumping raw data
  * acpi: aest: modify the dumping raw data without noisy info
  * lib: fwts_dump_data: add library function for dumping all raw data with prefix
  * lib: fwts_dump_data: add function for simply dump raw data
  * auto-packager: mkpackage.sh: remove the control hook
  * lib: make the return types consistent
  * debian: control: modify newer dkms dependency
  * debian: control: update uploader
  * lib: fwts_oops: fix the WARN_ON warnings in kernel not found
  * cppcheck: fix the cppcheck source link error
  * fwts-test: sync up the removing ARM specific for ebbr
  * lib: framework: remvoe ARM specific for ebbr</changelog>
  <changelog author="Martin Pluskal &lt;martin@pluskal.org&gt;" date="1697630400">- Update _service url</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702468800">- Update to version 23.11.00:
  * snapcraft: add source type for repo
  * snapcraft: update the source repo for snap build
  * lib: fwts_version.h - update to V23.11.00
  * debian: update changelog
  * fwts-test: add regression tests for iBFT
  * acpi: ibft: add tests for iBFT table
  * auto-packager: mkpackage.sh: add noble
  * lib: framework: fix the unclear error message of the results log
  * auto-packager: update the fwts git repo
  * fwts-test: add regression tests for RAS2
  * acpi: ras2: add test for ACPI RAS2 table
  * acpi/wmi: Add WMI GUID for the wmi-bmof driver
  * fwts-test: sync up with the klog message update
  * fwts-test: sync up the SPTT typo fix
  * klog.json: Add some missing power kernel messages to klog database
  * klog.json: Add some missing battery kernel messages to klog database
  * klog.json: Add some missing bus kernel messages to klog database
  * klog.json: Add some missing nsaccess kernel messages to klog database
  * klog.json: Add some missing exutils kernel messages to klog database
  * klog.json: Add some missing hwregs kernel messages to klog database
  * klog.json: Add some missing tbfadt kernel messages to klog database
  * klog.json: Add some missing exfield kernel messages to klog database
  * klog.json: Add some missing rslist kernel messages to klog database
  * klog.json: Add some missing evmisc kernel messages to klog database
  * klog.json: Add some missing exmisc kernel messages to klog database
  * klog.json: Add some missing efi64 kernel messages to klog database
  * klog.json: Add some missing exresolv kernel messages to klog database
  * acpi: aspt: fix typo of SPTT
  * README: modify the fwts git repository
  * klog.json: Add some missinig processor_perflib kernel messages to klog database
  * klog.json: Add some missing apmt kernel messages to klog database
  * klog.json: Add some missing hest kernel messages to klog database
  * lib: fwts_acpi_table: fix fwts_acpi_reserved_zero_array with the input string
  * klog.json: Add some missing erst kernel messages to klog database
  * klog.json: Add some missing bert kernel messages to klog database
  * klog.json: Add some missing einj kernel messages to klog database
  * fwts-test: sync up with Recognize Pluton TPM patch
  * acpi: Recognize Pluton TPM
  * lib: fwts_version.h - update to V23.09.00
  * debian: update changelog
  * klog.json: Add some missing ACPI PCI IRQ kernel messages to klog database
  * tpmevlog: Correct boundary checking for PCR4 event check
  * acpi: ivrs: fix the tests stuck at validate IVRS table
  * klog.json: Add some missing dma kernel messages to klog database
  * klog.json: Add some missing amba kernel messages to klog database
  * klog.json: Add some missing sleep kernel messages to klog database
  * klog.json: Add some missing ACPI NFIT kernel messages to klog database
  * klog.json: Add some missing processor idle kernel messages to klog database
  * klog.json: Add some missing ACPI memory hotplug kernel messages to klog database
  * kernelscan: modify some pathes of the scan files
  * acpi: madt: add more interrupt controller structure types defined in ACPI 6.5
  * uefi: esrt: fix the last_attempt_status wrongly interpretation of value
  * acpi: fadt: remove the tests for expecting smi_cmd is zero
  * fwts-test: sync up with iort test to version E.e
  * acpi: iort: update IORT table to specification version E.e
  * lib: fwts_acpi_object_eval.: fix build fail for ppc64el on mantic
  * auto-packager: mkpackage.sh: remove kinetic
  * acpi: s3: build fail for unexpected format of argument types for i386
  * fwts-test: sync up with the dumping s3-dump-wakeup-src option
  * snapcraft: add snap build for riscv64
  * s3: add dumping the all devices and signed wakeup sources
  * s3: add checking the device signed wakeup events
  * dmicheck: update supported DMI version to 3.7
  * Upgrade the max value for "Processor Upgrade" to 0x50
  * fwts-test: sync up the spcr test updating to revision 4
  * acpi: spcr: update the spcr tests to lastest revision 4
  * fwts-test: sync up with the phat dumping vendor data modification
  * acpi: phat: modify the dumping vendor data format
  * klog.json: Add and modify some more e820 kernel messages to klog database
  * fwts-test: sync up with phat fix the device path for the health data record
  * acpi: phat: fix the device path for the health data record
  * uefi: esrtdump: update the LastAttemptStatus values to UEFI spec 2.10
  * acpi: update fadt and madt revisions to ACPI 6.5
  * fwts-test: sync up with update supported port types
  * fwts-test: sync up with klog.json ix spelling mistakes found using codespell
  * acpi/scpr: spcr-&gt;interrupt_type == 0 is valid
  * acpi/spcr: Update supported port types
  * src/*: Fix various spelling mistakes in source code
  * data/klog.json: Fix spelling mistakes found using codespell</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1706529600">- Only build on supported architectures (bsc#1219232)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709640000">- Update to version 24.01.00:
  * acpi: sbbr: check the existence of SPCR console devices
  * acpi: dbg2: update the subtype RISC-V SBI console for DBG2
  * acpi: ras2: stop for loop when list exceeds the table
  * framework: fix memory leaks caused by fwts_log_get_filenames
  * acpi: s3: fix potential memory leaks on fwts_get() calls
  * acpi: s3: enable debug messages on S0ix failure for Intel platforms
  * lib: fwts_version.h - update to V24.01.00
  * debian: update changelog
  * Update copyright year to 2024
  * fwts-test: add regression tests for SKVL</changelog>
  <changelog author="mpluskal@suse.com" date="1710417600">- Update to version 24.01.00:
  * opal: fix the resource leak for get_linux_mem_devices
  * dmicheck: Don't check firmware version on anything but NVDIMM devices</changelog>
  <changelog author="mpluskal@suse.com" date="1711540800">- Update to version 24.01.00:
  * acpi: acpipld: add tests to check _PLD methods only on the connectable ports
  * opal: fix the resource leak for cpus
  * opal: fix the resource leak for process_dimm and process_mba
  * acpi: srat: fix the untrusted loop bound warning</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1712750400">- Update to version 24.03.00:
  * lib: fwts_version.h - update to V24.03.00
  * debian: update changelog
  * lib: fwts_acpi_tables: fix the build fail on armhf
  * ACPICA: Update to version 20240322</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1724673600">- Update to version 24.07.00:
  * acpi: acpipld: downgrade the severity for PLD on the not connected port
  * configure.ac: fix the autoreconf AC_PROG_LEX warning
  * configure.ac: fix the autoreconf AC_PROG_LIBTOOL warning
  * lib: fwts_version.h - update to V24.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove mantic
  * acpi: acpipld: modify the test description to aviod misunderstanding
  * fwts-test: add regression tests for S3PT
  * acpi: s3pt: add tests for ACPI S3PT table
  * aspm: Only require ASPM for devices with an actual link
  * fwts-test: cedt: sync up with adding raw data dump
  * fwts-test: cedt: fix the wrong value of ENIW
  * acpi: cedt: add raw data dump for interleave target list
  * libfwtsiasl: fix parallel build with GNU Make &gt;= 4.4
  * tpmevlog: Ensure EV_SEPARATOR recorded for PCRs 0-7
  * efi_runtime: don't build dkms module for those kernels with efi_test
  * auto-packer: mkpackage.sh: add oracular
  * lib: fwts_log_html: fix the invalid printf format string
  * autopackager: mkpackage.sh: remove lunar</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1727870400">- Update to version 24.09.00:
  * lib: fwts_version.h - update to V24.09.00
  * debian: update changelog
  * klog.json: Add the missing processor error message to klog database
  * klog.json: Add the missing exreqion error message to klog database
  * klog.json: Add the missing exserial error message to klog database
  * klog.json: Add the missing exoparg2 error message to klog database
  * klog.json: Add the missing dswload2 error message to klog database
  * klog.json: Add the missing nsinit error message to klog database
  * klog.json: Add the missing exstore error message to klog database
  * klog.json: Add more nsxfeval error messages to klog database
  * klog.json: Add more utobject error messages to klog database
  * klog.json: Add more uttrack error messages to klog database
  * klog.json: Add the missing srat error message to klog database
  * klog.json: Add more error messages for battery to klog database
  * klog.json: Add the missing scan error messages to klog database
  * klog.json: Add the missing prmt error messages to klog database
  * klog.json: Add the missing viot error messages to klog database
  * klog.json: Add the missing ipmi error messages to klog database
  * klog.json: Add the missing fan_core error message to klog database
  * klog.json: Add more missing acpi pcc kernel messages to klog database
  * klog.json: Add more missing osl kernel messages to klog database
  * fwts-test: slic: sync test results with fixes to ACPICA SLIC dumping
  * ACPICA: Update to version 20240827
  * lib: modprobe: add checking the compressed zst module format
  * klog.json: Add more missing iort kernel messages to klog database
  * klog.json: Add some missing gtdt kernel messages to klog database
  * klog.json: Add some missing ghes kernel messages to klog database
  * klog.json: Add some missing agdi kernel messages to klog database
  * klog: fix the pattern errors for einj trigger table entry</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1732622400">- Update to version 24.11.00:
  * lib: fwts_version.h - update to V24.11.00
  * debian: update changelog
  * hdaaudio: fix the the build errors under plucky amd64
  * auto-packager: mkpackage.sh: add plucky
  * dmicheck: add more types for version length test.
  * dmicheck: update for supporting DMI version to 3.8.0
  * acpi: iort: memory access flag update.
  * src/acpi: Fix a few spelling mistakes
  * acpi/wmi: Warn if WMI GUIDs from the Windows driver samples are found
  * lib: fwts_acpi_object_eval: Do not return FWTS_OK if method lookup fails
  * script: fix bash-completion-with-hashbang lintian warning
  * dmicheck: update for supporting DMI version to 3.7.1
  * tpmevlog: Ensure the event log matches the actual TPM PCRs</changelog>
</package>
<package pkgid="a9fb1273aaa9fc734512ed13babce155bc1890ac10ed96b18e96a03c569996d8" name="fwts" arch="x86_64">
  <version epoch="0" ver="24.11.00" rel="bp156.2.3.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1669377600">- Update to version 22.11.00:
  * lib: fwts_version.h - update to V22.11.00
  * debian: update changelog
  * auto-package: mkpackage.sh: add lunar
  * fwts-test: sync test logs with latest ACPICA
  * ACPICA: Update to version 20221020
  * Add Support for EV_COMPACT_HASH event type
  * fwts-test: add regression tests for CEDT
  * acpi: cedt: add tests for ACPI CEDT table (mantis 2076)
  * fwts-test: add regression test for RGRT
  * acpi: rgrt: add test for ACPI RGRT table( mantis 2056)
  * fwts-test: sync up with the default s3 sleep type description change
  * s3: modify the default sleep type description</changelog>
  <changelog author="mpluskal@suse.com" date="1672920000">- Update to version 22.11.00:
  * tpmevlog: add tests for checking the UEFI_IMAGE_LOAD_EVENT Structure
  * acpi: s3: fix the issue for determining time to resume</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1673956800">- Update to version 23.01.00:
  * lib: fwts_version.h - update to V23.01.00
  * debian: update changelog
  * fwts-test: sync up with the fix of passed reserved value
  * Update copyright year to 2023
  * lib: fwts_acpi_tables: fix the passed reserved value
  * fwts-test: add regression tests for AEST
  * acpi: aest: add tests for ACPI AEST table</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1680091200">- Update to version 23.03.00:
  * lib: fwts_version.h - update to V23.03.00
  * debian: update changelog
  * auto-packager: mkpackage: add build depend dh-dkms for lunar
  * dmicheck: fix the print format
  * dmicheck: update for supporting DMI version to 3.6
  * dmicheck: update the device type field for type 41
  * dmicheck: update the interface field for type 21
  * dmicheck: add some bit 0 reserved checks for type 17
  * dmicheck: modify the memory type range check for type 17
  * dmicheck: add bit 0 reserved check of the processor characteristics for type 4
  * dmicheck: add status check for type 4
  * dmicheck: add processor family check for type 4
  * dmicheck: fix the extended bios ROM size bit check of type 0
  * dmicheck: fix the wrong slot height value range
  * dmicheck: fix the length check error for type 9
  * debian: update copyright
  * acpi: method: NIH method output buffer should be 4 bytes
  * ebbr: add some tests to ebbr option
  * sbbr: add esrt and uefibootpath tests to sbbr option
  * Add support for 64 bit LoongArch compilation
  * libfwtsiasl: fix undefined symbols in shared library</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1684929600">- Update to version 23.05.00:
  * lib: fwts_version.h - update to V23.05.00
  * debian: update changelog
  * auto-packager: mkpackage.sh remove the dh-dkms dependency
  * debian: control: add build depend dh-dkms
  * auto-packager: mkpackage.sh: add mantic
  * fwts_framwork: add ebbr test for RISC-V
  * s3: fix the display time of resume for Timekeeping suspended string missing
  * lib: fwts_framework: add EBBR to category
  * acpi: button: remove check fixed hardware &amp; control method power buttons
  * fwts-test: add regression tests for IVRS
  * acpi: ivrs: add tests for ACPI IVRS table
  * acpi: cedt: remove unused code
  * dmicheck: add more checks for invalid serial number string
  * ACPICA: Update to version 20230331
  * dmicheck: extent the dmi_patterns for the default serial number string</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1688990400">- Update to version 23.07.00:
  * lib: fwts_version.h - update to V23.07.00
  * debian: update changelog
  * debian: fix lintian errors and warnings
  * debian: fix debuild fail for the not installed files
  * debian: update compat level and standards version
  * ACPICA: Update to version 20230628
  * fwts_acpica: Remove unused variable "context"
  * acpi/wmi: Fix bug when counting WMI methods
  * acpi/wmi: Check if the mandatory block query method exists
  * acpi/wmi: Add WMI GUID for the dell-wmi-ddv driver
  * Increase number of max semaphores to fix OOM crashes on some systems
  * lib: fwts_acpi_object_eval: sync up the AML exceptions from ACPICA
  * uefi: esrt: update the LastAttemptStatus values to UEFI spec 2.10
  * acpi: mpam: fix build fail on bionic
  * fwts-test: sync up with test with resource specific data
  * acpi: mpam: test with resource specific data for interconnect location type
  * fwts-test: sync up with adding the mpam tests
  * acpi: mpam: add test for ACPI MPAM table
  * fwts-test: sync up aest modify the dumping raw data
  * acpi: aest: modify the dumping raw data without noisy info
  * lib: fwts_dump_data: add library function for dumping all raw data with prefix
  * lib: fwts_dump_data: add function for simply dump raw data
  * auto-packager: mkpackage.sh: remove the control hook
  * lib: make the return types consistent
  * debian: control: modify newer dkms dependency
  * debian: control: update uploader
  * lib: fwts_oops: fix the WARN_ON warnings in kernel not found
  * cppcheck: fix the cppcheck source link error
  * fwts-test: sync up the removing ARM specific for ebbr
  * lib: framework: remvoe ARM specific for ebbr</changelog>
  <changelog author="Martin Pluskal &lt;martin@pluskal.org&gt;" date="1697630400">- Update _service url</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702468800">- Update to version 23.11.00:
  * snapcraft: add source type for repo
  * snapcraft: update the source repo for snap build
  * lib: fwts_version.h - update to V23.11.00
  * debian: update changelog
  * fwts-test: add regression tests for iBFT
  * acpi: ibft: add tests for iBFT table
  * auto-packager: mkpackage.sh: add noble
  * lib: framework: fix the unclear error message of the results log
  * auto-packager: update the fwts git repo
  * fwts-test: add regression tests for RAS2
  * acpi: ras2: add test for ACPI RAS2 table
  * acpi/wmi: Add WMI GUID for the wmi-bmof driver
  * fwts-test: sync up with the klog message update
  * fwts-test: sync up the SPTT typo fix
  * klog.json: Add some missing power kernel messages to klog database
  * klog.json: Add some missing battery kernel messages to klog database
  * klog.json: Add some missing bus kernel messages to klog database
  * klog.json: Add some missing nsaccess kernel messages to klog database
  * klog.json: Add some missing exutils kernel messages to klog database
  * klog.json: Add some missing hwregs kernel messages to klog database
  * klog.json: Add some missing tbfadt kernel messages to klog database
  * klog.json: Add some missing exfield kernel messages to klog database
  * klog.json: Add some missing rslist kernel messages to klog database
  * klog.json: Add some missing evmisc kernel messages to klog database
  * klog.json: Add some missing exmisc kernel messages to klog database
  * klog.json: Add some missing efi64 kernel messages to klog database
  * klog.json: Add some missing exresolv kernel messages to klog database
  * acpi: aspt: fix typo of SPTT
  * README: modify the fwts git repository
  * klog.json: Add some missinig processor_perflib kernel messages to klog database
  * klog.json: Add some missing apmt kernel messages to klog database
  * klog.json: Add some missing hest kernel messages to klog database
  * lib: fwts_acpi_table: fix fwts_acpi_reserved_zero_array with the input string
  * klog.json: Add some missing erst kernel messages to klog database
  * klog.json: Add some missing bert kernel messages to klog database
  * klog.json: Add some missing einj kernel messages to klog database
  * fwts-test: sync up with Recognize Pluton TPM patch
  * acpi: Recognize Pluton TPM
  * lib: fwts_version.h - update to V23.09.00
  * debian: update changelog
  * klog.json: Add some missing ACPI PCI IRQ kernel messages to klog database
  * tpmevlog: Correct boundary checking for PCR4 event check
  * acpi: ivrs: fix the tests stuck at validate IVRS table
  * klog.json: Add some missing dma kernel messages to klog database
  * klog.json: Add some missing amba kernel messages to klog database
  * klog.json: Add some missing sleep kernel messages to klog database
  * klog.json: Add some missing ACPI NFIT kernel messages to klog database
  * klog.json: Add some missing processor idle kernel messages to klog database
  * klog.json: Add some missing ACPI memory hotplug kernel messages to klog database
  * kernelscan: modify some pathes of the scan files
  * acpi: madt: add more interrupt controller structure types defined in ACPI 6.5
  * uefi: esrt: fix the last_attempt_status wrongly interpretation of value
  * acpi: fadt: remove the tests for expecting smi_cmd is zero
  * fwts-test: sync up with iort test to version E.e
  * acpi: iort: update IORT table to specification version E.e
  * lib: fwts_acpi_object_eval.: fix build fail for ppc64el on mantic
  * auto-packager: mkpackage.sh: remove kinetic
  * acpi: s3: build fail for unexpected format of argument types for i386
  * fwts-test: sync up with the dumping s3-dump-wakeup-src option
  * snapcraft: add snap build for riscv64
  * s3: add dumping the all devices and signed wakeup sources
  * s3: add checking the device signed wakeup events
  * dmicheck: update supported DMI version to 3.7
  * Upgrade the max value for "Processor Upgrade" to 0x50
  * fwts-test: sync up the spcr test updating to revision 4
  * acpi: spcr: update the spcr tests to lastest revision 4
  * fwts-test: sync up with the phat dumping vendor data modification
  * acpi: phat: modify the dumping vendor data format
  * klog.json: Add and modify some more e820 kernel messages to klog database
  * fwts-test: sync up with phat fix the device path for the health data record
  * acpi: phat: fix the device path for the health data record
  * uefi: esrtdump: update the LastAttemptStatus values to UEFI spec 2.10
  * acpi: update fadt and madt revisions to ACPI 6.5
  * fwts-test: sync up with update supported port types
  * fwts-test: sync up with klog.json ix spelling mistakes found using codespell
  * acpi/scpr: spcr-&gt;interrupt_type == 0 is valid
  * acpi/spcr: Update supported port types
  * src/*: Fix various spelling mistakes in source code
  * data/klog.json: Fix spelling mistakes found using codespell</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1706529600">- Only build on supported architectures (bsc#1219232)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709640000">- Update to version 24.01.00:
  * acpi: sbbr: check the existence of SPCR console devices
  * acpi: dbg2: update the subtype RISC-V SBI console for DBG2
  * acpi: ras2: stop for loop when list exceeds the table
  * framework: fix memory leaks caused by fwts_log_get_filenames
  * acpi: s3: fix potential memory leaks on fwts_get() calls
  * acpi: s3: enable debug messages on S0ix failure for Intel platforms
  * lib: fwts_version.h - update to V24.01.00
  * debian: update changelog
  * Update copyright year to 2024
  * fwts-test: add regression tests for SKVL</changelog>
  <changelog author="mpluskal@suse.com" date="1710417600">- Update to version 24.01.00:
  * opal: fix the resource leak for get_linux_mem_devices
  * dmicheck: Don't check firmware version on anything but NVDIMM devices</changelog>
  <changelog author="mpluskal@suse.com" date="1711540800">- Update to version 24.01.00:
  * acpi: acpipld: add tests to check _PLD methods only on the connectable ports
  * opal: fix the resource leak for cpus
  * opal: fix the resource leak for process_dimm and process_mba
  * acpi: srat: fix the untrusted loop bound warning</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1712750400">- Update to version 24.03.00:
  * lib: fwts_version.h - update to V24.03.00
  * debian: update changelog
  * lib: fwts_acpi_tables: fix the build fail on armhf
  * ACPICA: Update to version 20240322</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1724673600">- Update to version 24.07.00:
  * acpi: acpipld: downgrade the severity for PLD on the not connected port
  * configure.ac: fix the autoreconf AC_PROG_LEX warning
  * configure.ac: fix the autoreconf AC_PROG_LIBTOOL warning
  * lib: fwts_version.h - update to V24.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove mantic
  * acpi: acpipld: modify the test description to aviod misunderstanding
  * fwts-test: add regression tests for S3PT
  * acpi: s3pt: add tests for ACPI S3PT table
  * aspm: Only require ASPM for devices with an actual link
  * fwts-test: cedt: sync up with adding raw data dump
  * fwts-test: cedt: fix the wrong value of ENIW
  * acpi: cedt: add raw data dump for interleave target list
  * libfwtsiasl: fix parallel build with GNU Make &gt;= 4.4
  * tpmevlog: Ensure EV_SEPARATOR recorded for PCRs 0-7
  * efi_runtime: don't build dkms module for those kernels with efi_test
  * auto-packer: mkpackage.sh: add oracular
  * lib: fwts_log_html: fix the invalid printf format string
  * autopackager: mkpackage.sh: remove lunar</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1727870400">- Update to version 24.09.00:
  * lib: fwts_version.h - update to V24.09.00
  * debian: update changelog
  * klog.json: Add the missing processor error message to klog database
  * klog.json: Add the missing exreqion error message to klog database
  * klog.json: Add the missing exserial error message to klog database
  * klog.json: Add the missing exoparg2 error message to klog database
  * klog.json: Add the missing dswload2 error message to klog database
  * klog.json: Add the missing nsinit error message to klog database
  * klog.json: Add the missing exstore error message to klog database
  * klog.json: Add more nsxfeval error messages to klog database
  * klog.json: Add more utobject error messages to klog database
  * klog.json: Add more uttrack error messages to klog database
  * klog.json: Add the missing srat error message to klog database
  * klog.json: Add more error messages for battery to klog database
  * klog.json: Add the missing scan error messages to klog database
  * klog.json: Add the missing prmt error messages to klog database
  * klog.json: Add the missing viot error messages to klog database
  * klog.json: Add the missing ipmi error messages to klog database
  * klog.json: Add the missing fan_core error message to klog database
  * klog.json: Add more missing acpi pcc kernel messages to klog database
  * klog.json: Add more missing osl kernel messages to klog database
  * fwts-test: slic: sync test results with fixes to ACPICA SLIC dumping
  * ACPICA: Update to version 20240827
  * lib: modprobe: add checking the compressed zst module format
  * klog.json: Add more missing iort kernel messages to klog database
  * klog.json: Add some missing gtdt kernel messages to klog database
  * klog.json: Add some missing ghes kernel messages to klog database
  * klog.json: Add some missing agdi kernel messages to klog database
  * klog: fix the pattern errors for einj trigger table entry</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1732622400">- Update to version 24.11.00:
  * lib: fwts_version.h - update to V24.11.00
  * debian: update changelog
  * hdaaudio: fix the the build errors under plucky amd64
  * auto-packager: mkpackage.sh: add plucky
  * dmicheck: add more types for version length test.
  * dmicheck: update for supporting DMI version to 3.8.0
  * acpi: iort: memory access flag update.
  * src/acpi: Fix a few spelling mistakes
  * acpi/wmi: Warn if WMI GUIDs from the Windows driver samples are found
  * lib: fwts_acpi_object_eval: Do not return FWTS_OK if method lookup fails
  * script: fix bash-completion-with-hashbang lintian warning
  * dmicheck: update for supporting DMI version to 3.7.1
  * tpmevlog: Ensure the event log matches the actual TPM PCRs</changelog>
</package>
<package pkgid="b29a9f8ccc4b78e6bfd0d003befe7c5b2d6dcfad167b9f70fdc89a9b83fd53a5" name="gajim" arch="noarch">
  <version epoch="0" ver="1.8.4" rel="bp156.2.3.1"/>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1663675200">- update to version  1.5.1:
  - Bug Fixes
  - ChatBanner: Format markup string correctly
- update to version  1.5.0:
  - CVE-2022-39835
  - This release fixes a vulnerability which allowed attackers to craft a XML
  - stanza in a way, so Gajim would accept it as message correction for messages
  - not originating from the attacker.
  - New
  - Add drag and drop support for pinned chats
  - Workspaces: Add shortcuts for switching
  - Refactor ChatWidgets so they are only created once (#10987, #11038, #10973, #10119, #11052, #10945)
  - Improvements
  - Preview: Improve mime type detection (#11150)
  - SearchView: Add hint for search filters (#11136)
  - Preview: Show left click action tooltip on icon (#11138)
  - ACE: Highlight non-default values (#11120)
  - XMLConsole: Use SourceView for XML input (#11121)
  - Migration: Make archive migation more resilient
  - Workspaces: Move chats when removing workspace (#11098)
  - ChatList: Always show when switching workspace (#11108)
  - MessageActionsBox: Disable encryption button if MUC is public (#10959)
  - Increase contrast for message row meta elements
  - StatusIcon: Use new icon for pending events
  - WorkspaceSidebar: Allow removing workspace from context menu
  - AccountPage: Add button for Ad-Hoc commands
  - Don’t try to query avatars in MUCs which don’t allow it (#10937)
  - Don’t disco MUC participants on presence
  - Chatstate: Don’t make too many assumptions
  - Windows: Increase default font size
  - CSS: Use relative sizes for fonts
  - ChatControl: Show error if encryption plugin is missing
  - Store and restore running HTTP File Transfer uploads
  - Add button for toggling chat list (#11035)
  - ContactInfo/GroupchatDetails: Toggle icon when editing name
  - Change
  - Raise nbxmpp version
  - Raise PyGObject version (#11132)
  - Add requirement for min sqlite version
  - ChatBanner: Add button for managing voice requests
  - Remove IPython support
  - Rework ChatCommands
  - Shortcuts: Use Ctrl+F for opening the search bar (#11073)
  - Remove clear-chat action (Ctrl+L)
  - Raise required nbxmpp version to 3.2.2
  - Performance
  - Use Task Queue to request avatars on MUC join
  - Bug Fixes
  - GroupchatState: Hide when we are offline
  - Corrections: Don’t correct message if text has not changed (#11146)
  - Make plugin usable check work on all unix/linux systems (#11134)
  - MUC: Don’t ignore MUC invites when ignore_unknown_contacts is set (#11107)
  - Make shortcuts more discoverable (#11122, #11127)
  - Better validate message corrections
  - MUC: Improve automatically adding members on invite
  - Preview: Sanitize filename from disallowed chars (#11105#10752)
  - Chatstates: Don’t sent chatstate delayed to ourself
  - Don’t reset setting when closing single chat
  - Preview: Don’t fail if thumb file already exists (#11091)
  - MessageInputTextView: Account for having multiple blocks when applying style (#11015)
  - ActionMenu: Correctly execute text actions if text contains underscore
  - InfoMessage: Don’t escape text
  - MUC: Send password and reason correctly on invite
  - Preview: Reset received size before cancelling or downloading
  - BlockingList: Don’t fail with placeholder address (#11084)
  - ChatList: Update status for private chats correctly
  - ChatList: Update avatar for all chats correctly
  - GroupChat: Handle nickname changes correctly
  - Roster: Add missing contact-info action
  - Make switch-next-unread-tab action work
  - ChatBanner: Use correct scaling for chatstates
  - FileTransferRow: Don’t cancel transfer when switching chat
  - ChatBanner: Don’t show phone icon for group chats
  - Don’t handle message-sent even for groupchats
  - ChatBanner: Display account badge again
  - Make nick completion test pass
  - Preview: Store last_save_dir with Save As
  - Preview: Make sure the widget is not being destroyed while updating (#10920)
  - Fix handling of URLs without scheme (#11059)
  - GroupchatState: Call correct page for not-joined
  - ChatControl: Don’t assume messages always have a resource (#11042)
  - Notes
  - ChatCommands have been reworked. Only following commands are now available
  - - status
  - - invite
  - - ban
  - - affiliate
  - - kick
  - - role
  - Ctrl+H for opening the search bar has been removed, please use the
  - commonly used Ctrl+F (find). The shortcut for starting a file transfer
  - has been dropped.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1664366400">- Temporarily remove auto generated requirement on GUPnPIgd GI
  bindings to address fatal error caused by requirement on both
  LibSoup2 and LibSoup3 thus making the app unlaunchable. This is
  caused because Gajim itself depends on LibSoup 2.4 while the
  GUPnPIgd GI bindings pulls in UPnP which in turns depends on
  LibSoup 3.0 (boo#1203676).
- Add missing GSSAPI Python module runtime requirement.</changelog>
  <changelog author="Fritz Reichwald &lt;reichwald@b1-systems.de&gt;" date="1664971200">- Add 0001-remove-upnp.patch to (temporarily) remove the code in
  app.py that is going to use GUPnP-IGD since the prior fix from
  Luciaon is not working here.
- Add missing libpcre BuildDep that made the build fail locally</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1665230400">- Update to version 1.5.2:
  * PEPConfig: Add PEP item view.
  * Add shortcut to restore chats after closing.
  * ServerInfo: Add TLS version and cipher suite.
  * XMLConsole: Apply account filter to all visible stanzas.
  * MessageRow: Set text direction for RTL text.
  * AvatarSelector: Add border to mark drag and drop zone.
  * Drag and drop: Highlight target areas.
  * GroupChatNickCompletion: Simplify suggestions.
  * MUC: Add participant menu to avatar.
  * StartChat: Add timeout when requesting MUC disco info.
  * StartChat: Pass message body from XMPP URI.
  * Windows: Ellipsise body text in notifications.
  * Emojis: Improve shortcode usability.
  * Avatars: Use PangoCairo for generate_avatar.
  * Emojis: Extract codepoints for all emoji variants.
  * Raise nbxmpp version to 3.2.4.
  * Show account colour bar only when multiple accounts are active.
  * Remove queue_resize leftover from MessageTextView.
  * SearchView: Update calendar only if widget is visible.
  * SearchView: Speed up clearing of search results.
  * Styling: Parse emojis for Darwin only.
  * Control: Load events before messages.
  * Fix disabling accounts while reconnecting.
  * Use custom icon for "Send Message" action.
  * MessageActionsBox: Don’t fail if no contact is set while
    updating file actions.
  * Scroll to end after sending message.
  * Update chat actions when account state changes.
  * StatusIcon: Reset unread state correctly when using Flatpak.
  * Notifications: Show correct message sender for MUC
    notifications.
  * Discovery: Don’t allow to join top level components.
  * ChatList: Show context menu in correct position.
  * Styling: Allow dots in local part of email addresses.
  * ChatList: Set message_id correctly.
  * Notifications: React to incoming group chat messages.
  * When removing a chat, clear view only if it's currently loaded.
  * AccountPage: Disable Ad-Hoc Commands button when offline.
  * CreateGroupchatWindow: Fix Create button state when switching
    MUC type.
  * React correctly to UserAvatar updates.
  * GajimRemote: Remove not needed shebang.</changelog>
  <changelog author="I. Petrov &lt;ico@dante.tk&gt;" date="1666872000">- Bump python-nbxmpp version requirement to 3.2.4.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1667217600">- Update to version 1.5.3:
  * Allow to copy multiple messages.
  * Accounts: Add setting for default workspace.
  * Preferences: Add send_on_ctrl_enter setting.
  * Add actions menu to Start Chat button.
  * ExceptionDialog: Close dialog with ESC.
  * ChatList: Show drafts.
  * StartChat: Recognise input of xmpp uris.
  * Workspaces: Add "Mark as read" menu item.
  * Improve emoji completion.
  * ACE: Enable reset button only for changed values.
  * Avatar: Follow modernxmpps suggestions for color generation.
  * Preferences: Add escape_key_closes to "Chat" section.
  * Preferences: Reorder "Chat" settings and add a "General"
    section.
  * Preferences: Move show_chatstate_in_banner to ACE settings.
  * Remove confirm_paste_image setting.
  * Remove setting to hide the chat banner.
  * GroupchatRoster: Don’t load roster when its hidden.
  * Emoji completion: Abort early if max menu entry count reached.
  * Disable loading of GUPnPIgd library.
  * Remote: Make get_status() return correct status when offline.
  * Plugins: Use correct gettext import.
  * Make strings translatable.
  * Enable emoji chooser action.
  * AvatarBox: Only react to clicks for GroupchatContacts.
  * Remote: Return True for change_status.
  * ChatActionProcessor: Popdown on focus out event.
  * Avatar placeholders: Correctly use the first grapheme as the
    "letter".
  * Fix quoting /me messages.
  * StartChat: Don’t use jid argument for global dialogue.
  * Try leaving group chat only if account is online.
  * AccountPage: Disable profile button when not connected.
  * MUC: Allow changing subject if there is none.
  * PluginsWindow: Fix typo in plugin tooltip.
  * PluginManager: Block plugins which have been integrated into
    Gajim.
  * MessageInputTextView: Fix correction mode when switching chats.
  * AdHoc: Make MultiLineLabel selectable.
  * Settings: Check if account is connected before trying to get
    context.
  * Styling: Various link parsing issues.
  * Send message icon: Increase line width and make icon symbolic.
  * Accounts: Use account label for disable confirmation.
  * AccountBadge: Update colours correctly.
  * Update account label when changing label setting.
  * SearchView: Scroll to to when resetting.
  * Notification: Draw avatar correctly on scale &gt; 1.
  * Preview: Don’t fail hard when parsing fragments.
  * PreviewAudio: Increase update rate for seek bar.
  * AccountPage: Disable Excute Command button by default.
  * Client: Load trusted certificates on connect().
  * ChatList: Don’t increase in width while drag and drop.
  * Roster: Always show workspace when starting chat.
  * WorkspaceSidebar: Don't increase in width while drag and drop.
  * ChatFunctionPage: React to connection changes.
  * Preview: Set user-agent for session.
  * SearchView: Limit displayed results to account_id of contact.
  * Don’t fail when disabling accounts.
- Drop 0001-remove-upnp.patch: applied upstream.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1670068800">- Update to version 1.5.4:
  * DataFormWidget: Set min width on right box.
  * MUC: Add method for aborting join.
  * Message selection: Improve wording for deselecting messages.
  * Message selection: Improve styling.
  * Features: Add entry for Audio Preview.
  * Styling: Introduce URI scheme whitelisting.
  * Message selection: Use date_time_format instead of time_format.
  * Settings: Unify timestamp settings.
  * Prettify display of geographical locations.
  * ChatList: Scroll to top when switching workspace.
  * Preferences: Improve preview settings.
  * Chatstates: Add a timeout for the "composing" animation.
  * Accounts window: Use equal widths for account switch label.
  * VCardGrid: Linkify all URI-type fields iff they are valid URIs.
  * URI parsing: Detect invalid file URIs earlier.
  * Styling: Validate link syntax deeper and *after* parenthesis
    correction.
  * Add msg_log_id to live message events.
  * Dependencies: Remove pyOpenSSL, add python-cryptography.
  * Jingle: Remove XTLS support.
  * Add FileTransferSelector as a central page for sending files.
  * Block opening file:/ links by default.
  * Control: Request history more efficiently.
  * Preview: Handle multiple simultaneous certificate verification
    errors.
  * Styling: Linkify URIs only if at the start of a word.
  * MessageInputTextView: Reintroduce gui_extension_point.
  * GUI tests: Adapt GUI tests to Gajim changes.
  * SSLErrorDialog: Fix test, remove OpenSSL usage.
  * ChatFunctionPage: Don't close control on cancelling join error.
  * SearchView: Set chat type correctly for ResultRows.
  * Chatstates: Switch to Chatstate.ACTIVE after timeout.
  * GroupchatRoster: Set visibility when hiding.
  * MessageActionsBox: Reintroduce gui_extension_point.
  * Preview: Respect MUC context for PMs.
  * ConversationView: Fix scrollbar not being the right-most
    widget.
  * Preview: Stop further processing if decompression bomb
    detected.
  * URI parsing: More robustness with geo URIs.
  * URI parsing: Properly unescape mailto URIs.
  * URI parsing: Properly unescape XMPP URIs and handle unknown
    query types.
  * MessageInputTextView: Handle is_correcting if no contact is
    set.
  * Fix various issues with chat markers.
  * Plugins: Replace usage of gui_extention_point().
  * CSS: Fix settings related inconsistencies.
  * CSS: Move overriding rules to bottom.
  * Message selection: Don’t fail hard if log_line_id is None.
  * Don’t fail when trying to reset last message id.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1673092800">- Update to version 1.6.0:
  * Raise required nbxmpp version to 4.0.0.
  * Depend on Python 3.10.
  * Port to libsoup3.
  * Allow sending files by copy-pasting them from file managers.
  * Preview: Add audio preview controls and visualisation.
  * Resurrect URI-specific context menus.
  * Highlight the file when opening containing directory.
  * BaseAvatarChooserDialog: Allow all image types.
  * Timestamps: Use date/time format preference in more places.
  * AppPage: Show date for last update check.
  * Add dedicated context menu for non-specific URI types.
  * Restore ability to manually disambiguate JID-like addresses.
  * Use the unified Start/Join Chat flow for "?join" links.
  * CertificateBox: Format serial number in hex.
  * MessageActionsBox: Restore emoji button behaviour.
  * Settings: Add migration for global MUC search api endpoint.
  * AccountWizard: Remove subscriptions after successful login.
  * Audio Preview: Fix visuals on EOS while seeking.
  * Audio Preview: Don't let seekbar handle jump to end on EOS when
    user is seeking.
  * Commands: Attempt to parse only if message can have a command.
  * Notifications: Use correct nickname for /me messages.
  * AvatarSelector: Set default crop scale to 1.0.
  * Menus: Don’t use GLib variant text format parsing.
  * Remember last folder correctly after sending file.
  * Preview: Don't treat multi-line message body as previewable
    URL.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1673697600">- Update to version 1.6.1:
  * Raise required nbxmpp version to 4.0.1.
  * AdHocCommands: Refresh commands list after completing command.
  * Limit message length and add FullMessageWindow.
  * ChatList: Improve timedelta function.
  * CreateGroupchatWindow: Add Advanced switch and always show
    address entry.
  * UX: Make more text labels selectable/enable can-focus for
    copying.
  * AccountPage: Add menu item to deny all subscription requests.
  * Account menu: Add Execute Command… entry for convenience.
  * AccountPage: Make all account menu items available.
  * AccountPage: Add menu entry for adding contacts.
  * Notifications: Fix rare case where Gajim displays notifications
    for our own messages.
  * ServiceDiscoveryWindow: Fix jumping when resizing window.
  * Don't fail in mark_as_unread if there are no messages.
  * Profile: Fix setting avatar.
  * ChatStack DnD: Add workaround for mis-fired drag-motion signal.
  * AudioPreview: Make visualisation fully RTL compatible again and
    ensure graph is always drawn.
  * Preview: Handle exceptions while decrypting.
  * Audio Visualizer: Port deprecated methods.
  * AudioPreview: Always format progress time as LTR.
  * AppPage: Differentiate between updates (Gajim/Plugins).
  * GroupChat: Display reason when group chat is destroyed.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1675512000">- Update to version 1.7.0:
  * Port to pyproject.toml.
  * Preferences: Add 0 and 25 MiB to preview size settings.
  * Account wizard: Don't allow to add account twice.
  * Fix loading localised emojis.
  * HTTPUpload: Don’t cache temp path.
  * JingleAudio: Always resample audio before processing with
    webrtcdsp.
  * Disable legacy ciphers in cryptography.
- Add gajim-1.7.0-fix-status-switching.patch: Make switching status
  work again (commit 3c2c6448).</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1675857600">- Update to version 1.7.1:
  * Raise nbxmpp version to 4.2.0.
  * Improve KeepassXC Integration.
  * MUC: Enable archiving when creating MUCs on ejabberd.
  * Apply SASLprep to passwords.
  * Make switching status work again.
- Drop gajim-1.7.0-fix-status-switching.patch: fixed upstream.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1678622400">- Update to version 1.7.2:
  * Add message menu entry for deleting messages locally.
  * Proxies: Add "Tor (Browser)" default proxy setting.
  * Select group chat after creating it.
  * Don’t colour log timestamps.
  * PEPConfig: Ask for confirmation when deleting nodes.
  * Improve get_recent_muc_nicks query.
  * Improve check for message highlight and add tests.
  * Tests: Use in-memory settings database.
  * Add audio/x-wav to default mime types.
  * Audio preview: Allow skipping by clicking the visualisation.
  * Migration: Don’t fail on colour setting migration.
  * HTTPUpload: Respect infinite file size limit.
  * Chatstates: Remove composing timeout correctly.
  * Show chat notifications when chat page is not visible.
  * Don't fail if contact name for MUC message is None.
  * Notifications: Honour notification_preview_message setting.
  * Fix nickname highlight in group chats.
  * Profile: Don't allow saving profile when not connected.
  * GetRelativeTimeTest: Fix comparison of translated strings and
    off-by timezone errors.
  * Don't highlight message if it's an URI containing our nick.
  * Nickname completion: Make sure recent nicknames list does not
    contain None.
  * Plugins: Don't fail hard on uninstall errors.
  * Start Chat: Fix wrong JID type in _start_new_chat.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1680696000">- Update to version 1.7.3:
  * Allow muting chat notifications.
  * Make `gemini` URIs clickable.
  * Workspace menu: Always show Mark as read action.
  * Audio Preview: Set correct pos when clicking into visualiser.
  * Audio Preview: Add delay before pausing on EOS.
  * Flatpak: Fix drag and drop.
  * GroupChatDetails: Adapt to changed icons.
  * Message input: Fix height for single line messages.
  * Update message merged state after deleting a message.
  * ChatActionProcessor: Fix inserting emojis by click.
  * Account preferences: Adapt to changed icons.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1685188800">- Update to version 1.8.0:
  * XMLConsole: Add logging view.
  * JID sharing: Include verified OMEMO fingerprints.
  * Integrate OMEMO plugin.
  * Redesign Group Chat actions.
  * Audio preview: Support more mime types.
  * ChatBanner: Add share instructions.
  * ChatList: Clear row content when removing history.
  * XMLConsole: Always use dark theme.
  * AboutDialog: Show libsoup version.
  * GroupchatState: Show MAM synchronisation.
  * ChatList: Improve sorting.
  * Make contact details/settings available when offline.
  * ACE: Make descriptions selectable and copyable.
  * Notifications: Withdraw all when a corresponding chat is read.
  * ChatList: Show indicator if group chat is not connected.
  * ChatList: Show indicator when joining group chat.
  * StartChat: Don't filter for account labels.
  * ChatStack: Only respond to supported drag-n-drop types while
    dragging.
  * App menu: Add menu entry for privacy policy.
  * GroupchatRoster: Highlight own nick and sort it to the top.
  * CertificateDialog: Add additional infos and remove org unit
    field.
  * GroupchatDetails: Hide OMEMO page in public MUCs.
  * ChatBanner: Add QR code for sharing JIDs.
  * Windows: Package pixbuf loaders for avif and webp.
  * Remove "escape_key_closes" from ACE.
  * Enable spell checker by default.
  * OMEMO verification: Generate URIs with pedantically correct
    query.
  * Raise gajim when no cmdline options are provided.
  * QR codes: Avoid roundtrip to PNG in storage and back.
  * ProfileWindow: Don't fail when no vcard is set.
  * ContactInfo: Don’t fail when no vcard is set.
  * Message menu: Fix issue with chats not supplying correct ID.
  * Exceptions: Fix sending reports via sentry in conjunction with
    proxy settings.
  * ChatActionProcessor: De-duplicate emojis.
  * Fix encryption deadlock with changed MUC configurations.
  * UI: Update avatar on muc-disco-update.
  * AvatarSelector: Fix that images don't display after repeated
    loading.
  * SearchView: Don't change search context when switching chats.
  * SearchView: Remove overlay.
  * ChatActionProcessor: Allow to click items with mouse cursor.
  * MessageWidget: Don't return truncated text for message actions
    Fixes.
  * Idle: Use default xa implementation for XSS backend.
  * ConversationView: Fix loading messages going forward from
    specific point.
  * ACE: Handle invalid numeric values gracefully.
  * XMLConsole: Select first account by default.
  * Fix rendering of copied code blocks and quotes.
  * ContactInfo: Improve behavior for connection changes.
  * Escape JIDs for xmpp URIs everywhere.
  * Ask for confirmation when leaving a MUC while offline.
  * ContactInfo: Improve behaviour for connection changes.
  * Make manually changing the pinned chat sort order work again.
  * MessageActionsBox: Update send file button tooltip when
    switching chats.
  * GroupChatRoster: Make scrollbar the right-most widget.
  * GroupChatInviter: Don't filter by account name.
  * CertificateDialog: Display issued-to information correctly.
  * AccountWizard: Respect global proxy.
- Obsolete gajim-plugin-omemo.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1691409600">- Update to version 1.8.1:
  * Add setting for default encryption.
  * XMLConsole: Enable browsing sent stanzas in message input.
  * Sort cprofile output after total time.
  * Moderation: Handle unknown moderator JID.
  * Preview: Always show preview widget.
  * Preview: Add loading placeholder.
  * Account page: Show our XMPP address.
  * Idle: Raise poll interval.
  * Search: Don't fail while closing if no chat has been loaded
    before.
  * Dataform: Correctly serialise multi list fields.
  * Profile: Respect avatar/nickname privacy setting on
    consecutive changes.
  * Don’t forget ignored TLS errors from previous connects.
  * App menu: Add missing mnemonic for Accounts menu.
  * Gateway: Fix roster method call.
  * Contacts: Fix supports_{audio,video} property.
  * AvatarSelector: Fix crash on reset.
  * CertificateBox: Catch exception if cert does not offer
    extension.
  * CreateGroupchatWindow: Improve handling of MUC service
    availability.
  * Preview: Show error if file saving directory is not available.
  * SecurityLabels: Display labels for messages received with MAM.
  * DataForm: Handle destroy correctly.
  * ChatListRow: Always update group chat name.
  * Fix showing MAM synch errors and show error text.
  * OMEMOTrustManager: React correctly to connection changes.
  * Fix interaction of GroupchatRoster and SearchView.
  * Init plugin translation module later.
  * GroupchatManage: Improve checks for joined state.
  * Search: Restore group chat participants list to previous state
    when closing search.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1698667200">- Update to version 1.8.2:
  * Raise minimum GLib version to 2.66.0.
  * Avatar: Don’t use custom avatar for IRC group chats.
  * Raise minimum nbxmpp version to 4.4.0.
  * Depend on Pillow &gt;= 9.1.0.
  * Allow adjusting user interface font size via key bindings.
  * Display composing participants in MUC chat banner.
  * ChatBanner: Show contact tooltip when hovering the avatar.
  * Hint that a contact is a bot in the chat banner.
  * Support multiple item dataforms.
  * Display gateway icon in avatars.
  * RosterTooltip: Display BareContact presence.
  * Display status message in banner.
  * ChatMenu: Always show "Execute command" action.
  * MUC features: Use better icons for public and anonymous
    properties.
  * Allow GroupChatInfoScrolled to be set with minimal information.
  * Settings: Allow to set step size for spin settings; bind
    setting value.
  * StartChat: Better discover MUC services.
  * StartChat: Allow to start chats with domain JIDs.
  * ChatBanner: Don't show QR code for privated MUCs.
  * Windows: Add gst-plugins-bad dependency for broader media
    preview support.
  * MUC: Raise rejoin timeout.
  * Accounts: Be more consistent with chat state settings.
  * GroupChatInfo: Improve scaling of subject text.
  * View: Reset view faster.
  * VideoPreview: Disable preview on destroy.
  * GroupchatDetails: Depend on joined state for some elements.
  * GroupChatInfo: Align max width of labels.
  * SynchronizeAccounts: Adapt to connection state changes.
  * Tooltip: Do not escape presence status text.
  * Chatstates: Remove timeout id on remote timeout.
  * NotificationManager: Update actions if online state changes.
  * Caps: Add disco info to cache after query.
  * MUC: Don’t show old join errors when disconnected from room.
  * MUC: Always remove rejoin timer when closing chat.
  * MUC: Update state correctly on disco info error.
  * Switch phone icon to something more widely supported.
  * ChatListStack: Handle missing last visible child.
  * Observable: Fix race condition when removing handlers.
  * PasswordDialog: Use verb instead of noun for log in button.
  * AdHoc: Wrap notes label.
  * Unpack string correctly while handling update error.
  * CSSConfig: Quote font-family property correctly.
  * File transfers: Don't fail when tryting to send non-existing
    file.
  * MusicTrackListener: Don't fail if playing track could not be
    determined.
  * Catch error if loading image with PIL fails due to
    unidentifiable image.
  * CSSConfig: Fix parsing float sizes for font description.
  * Modules: Make sure BaseModule.cleanup() is always called on
    destroy.
  * Roster: Unregister all handlers on destroy.
  * Observable: Don’t allow to register handler multiple times.
  * View: Add newline after username when copying a message.
  * Show notification on group chat mentions again.
  * Make it impossible to connect without config.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1699444800">- Update to version 1.8.3:
  * Profile: Show error page on errors after saving.
  * Close main window when pressing Escape key.
  * GroupchatRoster: Display participants correctly on reveal.
  * Filetransfer: Always focus confirm button.
  * AccountWizard: Don’t allow multiple anonymous accounts for the
    same domain.
  * AccountPage: Show anonymous address.
  * Accounts: Don’t try to save password for anonymous accounts.
  * Message row menu: Show quote and copy actions only if there is
    text.
  * Audio/Video: Disable broken stun server code.
  * Presence: Don’t fail on unknown MUC presences.
  * Control: Add events with correct timestamp.
  * Avatar: Send presence after changing avatar.
  * ServerInfo: Use domain instead of hostname for queries.
  * Emojis: Improve detection of shortcode start.
  * DBusFileManager: Set self._proxy attribute on init.
  * GroupchatRoster: Check for contact before trying to load
    roster.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1701777600">- Update to version 1.8.4:
  * Raise minimum nbxmpp version to 4.5.3.
  * Add shortcuts for quoting previous messages.
  * Raise nbxmpp log level.
  * Passwords: Use JID as username instead of account.
  * MUC: Allow nick change for IRC channels.
  * HTTPUpload: Remove temporary files after transfer.
  * MessageInput: Regain focus on common key presses.
  * ShortcutWindow: Remove duplicated entry.
  * SearchView: Fix displaying results for newly created group
    chats.
  * ChatList: Update mute state periodically.
  * Icons: Register icon size to make it work for scale &gt; 1.
  * Message input: Don't allow text actions if input is disabled.
  * Avatar: Draw status circle correctly for scale &gt; 1.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1713528000">- Fix Leap15 build
  * Add %{?sle15_python_module_pythons}
  * Run build_metadata.py and install_metadata.py with a
    specific executable python flavor</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1717675200">- %{?python_enable_dependency_generator} does not work in SLE15/Leap15
  codestream, the runtime requirement need to be defined explicitly. (
  boo#1225938)</changelog>
</package>
<package pkgid="f1bcc9404bfebe2db3ee5f0e5a8985311e36ae718dfe33dbeb2dc039afee11ed" name="gajim" arch="src">
  <version epoch="0" ver="1.8.4" rel="bp156.2.3.1"/>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1663675200">- update to version  1.5.1:
  - Bug Fixes
  - ChatBanner: Format markup string correctly
- update to version  1.5.0:
  - CVE-2022-39835
  - This release fixes a vulnerability which allowed attackers to craft a XML
  - stanza in a way, so Gajim would accept it as message correction for messages
  - not originating from the attacker.
  - New
  - Add drag and drop support for pinned chats
  - Workspaces: Add shortcuts for switching
  - Refactor ChatWidgets so they are only created once (#10987, #11038, #10973, #10119, #11052, #10945)
  - Improvements
  - Preview: Improve mime type detection (#11150)
  - SearchView: Add hint for search filters (#11136)
  - Preview: Show left click action tooltip on icon (#11138)
  - ACE: Highlight non-default values (#11120)
  - XMLConsole: Use SourceView for XML input (#11121)
  - Migration: Make archive migation more resilient
  - Workspaces: Move chats when removing workspace (#11098)
  - ChatList: Always show when switching workspace (#11108)
  - MessageActionsBox: Disable encryption button if MUC is public (#10959)
  - Increase contrast for message row meta elements
  - StatusIcon: Use new icon for pending events
  - WorkspaceSidebar: Allow removing workspace from context menu
  - AccountPage: Add button for Ad-Hoc commands
  - Don’t try to query avatars in MUCs which don’t allow it (#10937)
  - Don’t disco MUC participants on presence
  - Chatstate: Don’t make too many assumptions
  - Windows: Increase default font size
  - CSS: Use relative sizes for fonts
  - ChatControl: Show error if encryption plugin is missing
  - Store and restore running HTTP File Transfer uploads
  - Add button for toggling chat list (#11035)
  - ContactInfo/GroupchatDetails: Toggle icon when editing name
  - Change
  - Raise nbxmpp version
  - Raise PyGObject version (#11132)
  - Add requirement for min sqlite version
  - ChatBanner: Add button for managing voice requests
  - Remove IPython support
  - Rework ChatCommands
  - Shortcuts: Use Ctrl+F for opening the search bar (#11073)
  - Remove clear-chat action (Ctrl+L)
  - Raise required nbxmpp version to 3.2.2
  - Performance
  - Use Task Queue to request avatars on MUC join
  - Bug Fixes
  - GroupchatState: Hide when we are offline
  - Corrections: Don’t correct message if text has not changed (#11146)
  - Make plugin usable check work on all unix/linux systems (#11134)
  - MUC: Don’t ignore MUC invites when ignore_unknown_contacts is set (#11107)
  - Make shortcuts more discoverable (#11122, #11127)
  - Better validate message corrections
  - MUC: Improve automatically adding members on invite
  - Preview: Sanitize filename from disallowed chars (#11105#10752)
  - Chatstates: Don’t sent chatstate delayed to ourself
  - Don’t reset setting when closing single chat
  - Preview: Don’t fail if thumb file already exists (#11091)
  - MessageInputTextView: Account for having multiple blocks when applying style (#11015)
  - ActionMenu: Correctly execute text actions if text contains underscore
  - InfoMessage: Don’t escape text
  - MUC: Send password and reason correctly on invite
  - Preview: Reset received size before cancelling or downloading
  - BlockingList: Don’t fail with placeholder address (#11084)
  - ChatList: Update status for private chats correctly
  - ChatList: Update avatar for all chats correctly
  - GroupChat: Handle nickname changes correctly
  - Roster: Add missing contact-info action
  - Make switch-next-unread-tab action work
  - ChatBanner: Use correct scaling for chatstates
  - FileTransferRow: Don’t cancel transfer when switching chat
  - ChatBanner: Don’t show phone icon for group chats
  - Don’t handle message-sent even for groupchats
  - ChatBanner: Display account badge again
  - Make nick completion test pass
  - Preview: Store last_save_dir with Save As
  - Preview: Make sure the widget is not being destroyed while updating (#10920)
  - Fix handling of URLs without scheme (#11059)
  - GroupchatState: Call correct page for not-joined
  - ChatControl: Don’t assume messages always have a resource (#11042)
  - Notes
  - ChatCommands have been reworked. Only following commands are now available
  - - status
  - - invite
  - - ban
  - - affiliate
  - - kick
  - - role
  - Ctrl+H for opening the search bar has been removed, please use the
  - commonly used Ctrl+F (find). The shortcut for starting a file transfer
  - has been dropped.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1664366400">- Temporarily remove auto generated requirement on GUPnPIgd GI
  bindings to address fatal error caused by requirement on both
  LibSoup2 and LibSoup3 thus making the app unlaunchable. This is
  caused because Gajim itself depends on LibSoup 2.4 while the
  GUPnPIgd GI bindings pulls in UPnP which in turns depends on
  LibSoup 3.0 (boo#1203676).
- Add missing GSSAPI Python module runtime requirement.</changelog>
  <changelog author="Fritz Reichwald &lt;reichwald@b1-systems.de&gt;" date="1664971200">- Add 0001-remove-upnp.patch to (temporarily) remove the code in
  app.py that is going to use GUPnP-IGD since the prior fix from
  Luciaon is not working here.
- Add missing libpcre BuildDep that made the build fail locally</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1665230400">- Update to version 1.5.2:
  * PEPConfig: Add PEP item view.
  * Add shortcut to restore chats after closing.
  * ServerInfo: Add TLS version and cipher suite.
  * XMLConsole: Apply account filter to all visible stanzas.
  * MessageRow: Set text direction for RTL text.
  * AvatarSelector: Add border to mark drag and drop zone.
  * Drag and drop: Highlight target areas.
  * GroupChatNickCompletion: Simplify suggestions.
  * MUC: Add participant menu to avatar.
  * StartChat: Add timeout when requesting MUC disco info.
  * StartChat: Pass message body from XMPP URI.
  * Windows: Ellipsise body text in notifications.
  * Emojis: Improve shortcode usability.
  * Avatars: Use PangoCairo for generate_avatar.
  * Emojis: Extract codepoints for all emoji variants.
  * Raise nbxmpp version to 3.2.4.
  * Show account colour bar only when multiple accounts are active.
  * Remove queue_resize leftover from MessageTextView.
  * SearchView: Update calendar only if widget is visible.
  * SearchView: Speed up clearing of search results.
  * Styling: Parse emojis for Darwin only.
  * Control: Load events before messages.
  * Fix disabling accounts while reconnecting.
  * Use custom icon for "Send Message" action.
  * MessageActionsBox: Don’t fail if no contact is set while
    updating file actions.
  * Scroll to end after sending message.
  * Update chat actions when account state changes.
  * StatusIcon: Reset unread state correctly when using Flatpak.
  * Notifications: Show correct message sender for MUC
    notifications.
  * Discovery: Don’t allow to join top level components.
  * ChatList: Show context menu in correct position.
  * Styling: Allow dots in local part of email addresses.
  * ChatList: Set message_id correctly.
  * Notifications: React to incoming group chat messages.
  * When removing a chat, clear view only if it's currently loaded.
  * AccountPage: Disable Ad-Hoc Commands button when offline.
  * CreateGroupchatWindow: Fix Create button state when switching
    MUC type.
  * React correctly to UserAvatar updates.
  * GajimRemote: Remove not needed shebang.</changelog>
  <changelog author="I. Petrov &lt;ico@dante.tk&gt;" date="1666872000">- Bump python-nbxmpp version requirement to 3.2.4.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1667217600">- Update to version 1.5.3:
  * Allow to copy multiple messages.
  * Accounts: Add setting for default workspace.
  * Preferences: Add send_on_ctrl_enter setting.
  * Add actions menu to Start Chat button.
  * ExceptionDialog: Close dialog with ESC.
  * ChatList: Show drafts.
  * StartChat: Recognise input of xmpp uris.
  * Workspaces: Add "Mark as read" menu item.
  * Improve emoji completion.
  * ACE: Enable reset button only for changed values.
  * Avatar: Follow modernxmpps suggestions for color generation.
  * Preferences: Add escape_key_closes to "Chat" section.
  * Preferences: Reorder "Chat" settings and add a "General"
    section.
  * Preferences: Move show_chatstate_in_banner to ACE settings.
  * Remove confirm_paste_image setting.
  * Remove setting to hide the chat banner.
  * GroupchatRoster: Don’t load roster when its hidden.
  * Emoji completion: Abort early if max menu entry count reached.
  * Disable loading of GUPnPIgd library.
  * Remote: Make get_status() return correct status when offline.
  * Plugins: Use correct gettext import.
  * Make strings translatable.
  * Enable emoji chooser action.
  * AvatarBox: Only react to clicks for GroupchatContacts.
  * Remote: Return True for change_status.
  * ChatActionProcessor: Popdown on focus out event.
  * Avatar placeholders: Correctly use the first grapheme as the
    "letter".
  * Fix quoting /me messages.
  * StartChat: Don’t use jid argument for global dialogue.
  * Try leaving group chat only if account is online.
  * AccountPage: Disable profile button when not connected.
  * MUC: Allow changing subject if there is none.
  * PluginsWindow: Fix typo in plugin tooltip.
  * PluginManager: Block plugins which have been integrated into
    Gajim.
  * MessageInputTextView: Fix correction mode when switching chats.
  * AdHoc: Make MultiLineLabel selectable.
  * Settings: Check if account is connected before trying to get
    context.
  * Styling: Various link parsing issues.
  * Send message icon: Increase line width and make icon symbolic.
  * Accounts: Use account label for disable confirmation.
  * AccountBadge: Update colours correctly.
  * Update account label when changing label setting.
  * SearchView: Scroll to to when resetting.
  * Notification: Draw avatar correctly on scale &gt; 1.
  * Preview: Don’t fail hard when parsing fragments.
  * PreviewAudio: Increase update rate for seek bar.
  * AccountPage: Disable Excute Command button by default.
  * Client: Load trusted certificates on connect().
  * ChatList: Don’t increase in width while drag and drop.
  * Roster: Always show workspace when starting chat.
  * WorkspaceSidebar: Don't increase in width while drag and drop.
  * ChatFunctionPage: React to connection changes.
  * Preview: Set user-agent for session.
  * SearchView: Limit displayed results to account_id of contact.
  * Don’t fail when disabling accounts.
- Drop 0001-remove-upnp.patch: applied upstream.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1670068800">- Update to version 1.5.4:
  * DataFormWidget: Set min width on right box.
  * MUC: Add method for aborting join.
  * Message selection: Improve wording for deselecting messages.
  * Message selection: Improve styling.
  * Features: Add entry for Audio Preview.
  * Styling: Introduce URI scheme whitelisting.
  * Message selection: Use date_time_format instead of time_format.
  * Settings: Unify timestamp settings.
  * Prettify display of geographical locations.
  * ChatList: Scroll to top when switching workspace.
  * Preferences: Improve preview settings.
  * Chatstates: Add a timeout for the "composing" animation.
  * Accounts window: Use equal widths for account switch label.
  * VCardGrid: Linkify all URI-type fields iff they are valid URIs.
  * URI parsing: Detect invalid file URIs earlier.
  * Styling: Validate link syntax deeper and *after* parenthesis
    correction.
  * Add msg_log_id to live message events.
  * Dependencies: Remove pyOpenSSL, add python-cryptography.
  * Jingle: Remove XTLS support.
  * Add FileTransferSelector as a central page for sending files.
  * Block opening file:/ links by default.
  * Control: Request history more efficiently.
  * Preview: Handle multiple simultaneous certificate verification
    errors.
  * Styling: Linkify URIs only if at the start of a word.
  * MessageInputTextView: Reintroduce gui_extension_point.
  * GUI tests: Adapt GUI tests to Gajim changes.
  * SSLErrorDialog: Fix test, remove OpenSSL usage.
  * ChatFunctionPage: Don't close control on cancelling join error.
  * SearchView: Set chat type correctly for ResultRows.
  * Chatstates: Switch to Chatstate.ACTIVE after timeout.
  * GroupchatRoster: Set visibility when hiding.
  * MessageActionsBox: Reintroduce gui_extension_point.
  * Preview: Respect MUC context for PMs.
  * ConversationView: Fix scrollbar not being the right-most
    widget.
  * Preview: Stop further processing if decompression bomb
    detected.
  * URI parsing: More robustness with geo URIs.
  * URI parsing: Properly unescape mailto URIs.
  * URI parsing: Properly unescape XMPP URIs and handle unknown
    query types.
  * MessageInputTextView: Handle is_correcting if no contact is
    set.
  * Fix various issues with chat markers.
  * Plugins: Replace usage of gui_extention_point().
  * CSS: Fix settings related inconsistencies.
  * CSS: Move overriding rules to bottom.
  * Message selection: Don’t fail hard if log_line_id is None.
  * Don’t fail when trying to reset last message id.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1673092800">- Update to version 1.6.0:
  * Raise required nbxmpp version to 4.0.0.
  * Depend on Python 3.10.
  * Port to libsoup3.
  * Allow sending files by copy-pasting them from file managers.
  * Preview: Add audio preview controls and visualisation.
  * Resurrect URI-specific context menus.
  * Highlight the file when opening containing directory.
  * BaseAvatarChooserDialog: Allow all image types.
  * Timestamps: Use date/time format preference in more places.
  * AppPage: Show date for last update check.
  * Add dedicated context menu for non-specific URI types.
  * Restore ability to manually disambiguate JID-like addresses.
  * Use the unified Start/Join Chat flow for "?join" links.
  * CertificateBox: Format serial number in hex.
  * MessageActionsBox: Restore emoji button behaviour.
  * Settings: Add migration for global MUC search api endpoint.
  * AccountWizard: Remove subscriptions after successful login.
  * Audio Preview: Fix visuals on EOS while seeking.
  * Audio Preview: Don't let seekbar handle jump to end on EOS when
    user is seeking.
  * Commands: Attempt to parse only if message can have a command.
  * Notifications: Use correct nickname for /me messages.
  * AvatarSelector: Set default crop scale to 1.0.
  * Menus: Don’t use GLib variant text format parsing.
  * Remember last folder correctly after sending file.
  * Preview: Don't treat multi-line message body as previewable
    URL.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1673697600">- Update to version 1.6.1:
  * Raise required nbxmpp version to 4.0.1.
  * AdHocCommands: Refresh commands list after completing command.
  * Limit message length and add FullMessageWindow.
  * ChatList: Improve timedelta function.
  * CreateGroupchatWindow: Add Advanced switch and always show
    address entry.
  * UX: Make more text labels selectable/enable can-focus for
    copying.
  * AccountPage: Add menu item to deny all subscription requests.
  * Account menu: Add Execute Command… entry for convenience.
  * AccountPage: Make all account menu items available.
  * AccountPage: Add menu entry for adding contacts.
  * Notifications: Fix rare case where Gajim displays notifications
    for our own messages.
  * ServiceDiscoveryWindow: Fix jumping when resizing window.
  * Don't fail in mark_as_unread if there are no messages.
  * Profile: Fix setting avatar.
  * ChatStack DnD: Add workaround for mis-fired drag-motion signal.
  * AudioPreview: Make visualisation fully RTL compatible again and
    ensure graph is always drawn.
  * Preview: Handle exceptions while decrypting.
  * Audio Visualizer: Port deprecated methods.
  * AudioPreview: Always format progress time as LTR.
  * AppPage: Differentiate between updates (Gajim/Plugins).
  * GroupChat: Display reason when group chat is destroyed.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1675512000">- Update to version 1.7.0:
  * Port to pyproject.toml.
  * Preferences: Add 0 and 25 MiB to preview size settings.
  * Account wizard: Don't allow to add account twice.
  * Fix loading localised emojis.
  * HTTPUpload: Don’t cache temp path.
  * JingleAudio: Always resample audio before processing with
    webrtcdsp.
  * Disable legacy ciphers in cryptography.
- Add gajim-1.7.0-fix-status-switching.patch: Make switching status
  work again (commit 3c2c6448).</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1675857600">- Update to version 1.7.1:
  * Raise nbxmpp version to 4.2.0.
  * Improve KeepassXC Integration.
  * MUC: Enable archiving when creating MUCs on ejabberd.
  * Apply SASLprep to passwords.
  * Make switching status work again.
- Drop gajim-1.7.0-fix-status-switching.patch: fixed upstream.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1678622400">- Update to version 1.7.2:
  * Add message menu entry for deleting messages locally.
  * Proxies: Add "Tor (Browser)" default proxy setting.
  * Select group chat after creating it.
  * Don’t colour log timestamps.
  * PEPConfig: Ask for confirmation when deleting nodes.
  * Improve get_recent_muc_nicks query.
  * Improve check for message highlight and add tests.
  * Tests: Use in-memory settings database.
  * Add audio/x-wav to default mime types.
  * Audio preview: Allow skipping by clicking the visualisation.
  * Migration: Don’t fail on colour setting migration.
  * HTTPUpload: Respect infinite file size limit.
  * Chatstates: Remove composing timeout correctly.
  * Show chat notifications when chat page is not visible.
  * Don't fail if contact name for MUC message is None.
  * Notifications: Honour notification_preview_message setting.
  * Fix nickname highlight in group chats.
  * Profile: Don't allow saving profile when not connected.
  * GetRelativeTimeTest: Fix comparison of translated strings and
    off-by timezone errors.
  * Don't highlight message if it's an URI containing our nick.
  * Nickname completion: Make sure recent nicknames list does not
    contain None.
  * Plugins: Don't fail hard on uninstall errors.
  * Start Chat: Fix wrong JID type in _start_new_chat.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1680696000">- Update to version 1.7.3:
  * Allow muting chat notifications.
  * Make `gemini` URIs clickable.
  * Workspace menu: Always show Mark as read action.
  * Audio Preview: Set correct pos when clicking into visualiser.
  * Audio Preview: Add delay before pausing on EOS.
  * Flatpak: Fix drag and drop.
  * GroupChatDetails: Adapt to changed icons.
  * Message input: Fix height for single line messages.
  * Update message merged state after deleting a message.
  * ChatActionProcessor: Fix inserting emojis by click.
  * Account preferences: Adapt to changed icons.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1685188800">- Update to version 1.8.0:
  * XMLConsole: Add logging view.
  * JID sharing: Include verified OMEMO fingerprints.
  * Integrate OMEMO plugin.
  * Redesign Group Chat actions.
  * Audio preview: Support more mime types.
  * ChatBanner: Add share instructions.
  * ChatList: Clear row content when removing history.
  * XMLConsole: Always use dark theme.
  * AboutDialog: Show libsoup version.
  * GroupchatState: Show MAM synchronisation.
  * ChatList: Improve sorting.
  * Make contact details/settings available when offline.
  * ACE: Make descriptions selectable and copyable.
  * Notifications: Withdraw all when a corresponding chat is read.
  * ChatList: Show indicator if group chat is not connected.
  * ChatList: Show indicator when joining group chat.
  * StartChat: Don't filter for account labels.
  * ChatStack: Only respond to supported drag-n-drop types while
    dragging.
  * App menu: Add menu entry for privacy policy.
  * GroupchatRoster: Highlight own nick and sort it to the top.
  * CertificateDialog: Add additional infos and remove org unit
    field.
  * GroupchatDetails: Hide OMEMO page in public MUCs.
  * ChatBanner: Add QR code for sharing JIDs.
  * Windows: Package pixbuf loaders for avif and webp.
  * Remove "escape_key_closes" from ACE.
  * Enable spell checker by default.
  * OMEMO verification: Generate URIs with pedantically correct
    query.
  * Raise gajim when no cmdline options are provided.
  * QR codes: Avoid roundtrip to PNG in storage and back.
  * ProfileWindow: Don't fail when no vcard is set.
  * ContactInfo: Don’t fail when no vcard is set.
  * Message menu: Fix issue with chats not supplying correct ID.
  * Exceptions: Fix sending reports via sentry in conjunction with
    proxy settings.
  * ChatActionProcessor: De-duplicate emojis.
  * Fix encryption deadlock with changed MUC configurations.
  * UI: Update avatar on muc-disco-update.
  * AvatarSelector: Fix that images don't display after repeated
    loading.
  * SearchView: Don't change search context when switching chats.
  * SearchView: Remove overlay.
  * ChatActionProcessor: Allow to click items with mouse cursor.
  * MessageWidget: Don't return truncated text for message actions
    Fixes.
  * Idle: Use default xa implementation for XSS backend.
  * ConversationView: Fix loading messages going forward from
    specific point.
  * ACE: Handle invalid numeric values gracefully.
  * XMLConsole: Select first account by default.
  * Fix rendering of copied code blocks and quotes.
  * ContactInfo: Improve behavior for connection changes.
  * Escape JIDs for xmpp URIs everywhere.
  * Ask for confirmation when leaving a MUC while offline.
  * ContactInfo: Improve behaviour for connection changes.
  * Make manually changing the pinned chat sort order work again.
  * MessageActionsBox: Update send file button tooltip when
    switching chats.
  * GroupChatRoster: Make scrollbar the right-most widget.
  * GroupChatInviter: Don't filter by account name.
  * CertificateDialog: Display issued-to information correctly.
  * AccountWizard: Respect global proxy.
- Obsolete gajim-plugin-omemo.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1691409600">- Update to version 1.8.1:
  * Add setting for default encryption.
  * XMLConsole: Enable browsing sent stanzas in message input.
  * Sort cprofile output after total time.
  * Moderation: Handle unknown moderator JID.
  * Preview: Always show preview widget.
  * Preview: Add loading placeholder.
  * Account page: Show our XMPP address.
  * Idle: Raise poll interval.
  * Search: Don't fail while closing if no chat has been loaded
    before.
  * Dataform: Correctly serialise multi list fields.
  * Profile: Respect avatar/nickname privacy setting on
    consecutive changes.
  * Don’t forget ignored TLS errors from previous connects.
  * App menu: Add missing mnemonic for Accounts menu.
  * Gateway: Fix roster method call.
  * Contacts: Fix supports_{audio,video} property.
  * AvatarSelector: Fix crash on reset.
  * CertificateBox: Catch exception if cert does not offer
    extension.
  * CreateGroupchatWindow: Improve handling of MUC service
    availability.
  * Preview: Show error if file saving directory is not available.
  * SecurityLabels: Display labels for messages received with MAM.
  * DataForm: Handle destroy correctly.
  * ChatListRow: Always update group chat name.
  * Fix showing MAM synch errors and show error text.
  * OMEMOTrustManager: React correctly to connection changes.
  * Fix interaction of GroupchatRoster and SearchView.
  * Init plugin translation module later.
  * GroupchatManage: Improve checks for joined state.
  * Search: Restore group chat participants list to previous state
    when closing search.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1698667200">- Update to version 1.8.2:
  * Raise minimum GLib version to 2.66.0.
  * Avatar: Don’t use custom avatar for IRC group chats.
  * Raise minimum nbxmpp version to 4.4.0.
  * Depend on Pillow &gt;= 9.1.0.
  * Allow adjusting user interface font size via key bindings.
  * Display composing participants in MUC chat banner.
  * ChatBanner: Show contact tooltip when hovering the avatar.
  * Hint that a contact is a bot in the chat banner.
  * Support multiple item dataforms.
  * Display gateway icon in avatars.
  * RosterTooltip: Display BareContact presence.
  * Display status message in banner.
  * ChatMenu: Always show "Execute command" action.
  * MUC features: Use better icons for public and anonymous
    properties.
  * Allow GroupChatInfoScrolled to be set with minimal information.
  * Settings: Allow to set step size for spin settings; bind
    setting value.
  * StartChat: Better discover MUC services.
  * StartChat: Allow to start chats with domain JIDs.
  * ChatBanner: Don't show QR code for privated MUCs.
  * Windows: Add gst-plugins-bad dependency for broader media
    preview support.
  * MUC: Raise rejoin timeout.
  * Accounts: Be more consistent with chat state settings.
  * GroupChatInfo: Improve scaling of subject text.
  * View: Reset view faster.
  * VideoPreview: Disable preview on destroy.
  * GroupchatDetails: Depend on joined state for some elements.
  * GroupChatInfo: Align max width of labels.
  * SynchronizeAccounts: Adapt to connection state changes.
  * Tooltip: Do not escape presence status text.
  * Chatstates: Remove timeout id on remote timeout.
  * NotificationManager: Update actions if online state changes.
  * Caps: Add disco info to cache after query.
  * MUC: Don’t show old join errors when disconnected from room.
  * MUC: Always remove rejoin timer when closing chat.
  * MUC: Update state correctly on disco info error.
  * Switch phone icon to something more widely supported.
  * ChatListStack: Handle missing last visible child.
  * Observable: Fix race condition when removing handlers.
  * PasswordDialog: Use verb instead of noun for log in button.
  * AdHoc: Wrap notes label.
  * Unpack string correctly while handling update error.
  * CSSConfig: Quote font-family property correctly.
  * File transfers: Don't fail when tryting to send non-existing
    file.
  * MusicTrackListener: Don't fail if playing track could not be
    determined.
  * Catch error if loading image with PIL fails due to
    unidentifiable image.
  * CSSConfig: Fix parsing float sizes for font description.
  * Modules: Make sure BaseModule.cleanup() is always called on
    destroy.
  * Roster: Unregister all handlers on destroy.
  * Observable: Don’t allow to register handler multiple times.
  * View: Add newline after username when copying a message.
  * Show notification on group chat mentions again.
  * Make it impossible to connect without config.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1699444800">- Update to version 1.8.3:
  * Profile: Show error page on errors after saving.
  * Close main window when pressing Escape key.
  * GroupchatRoster: Display participants correctly on reveal.
  * Filetransfer: Always focus confirm button.
  * AccountWizard: Don’t allow multiple anonymous accounts for the
    same domain.
  * AccountPage: Show anonymous address.
  * Accounts: Don’t try to save password for anonymous accounts.
  * Message row menu: Show quote and copy actions only if there is
    text.
  * Audio/Video: Disable broken stun server code.
  * Presence: Don’t fail on unknown MUC presences.
  * Control: Add events with correct timestamp.
  * Avatar: Send presence after changing avatar.
  * ServerInfo: Use domain instead of hostname for queries.
  * Emojis: Improve detection of shortcode start.
  * DBusFileManager: Set self._proxy attribute on init.
  * GroupchatRoster: Check for contact before trying to load
    roster.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1701777600">- Update to version 1.8.4:
  * Raise minimum nbxmpp version to 4.5.3.
  * Add shortcuts for quoting previous messages.
  * Raise nbxmpp log level.
  * Passwords: Use JID as username instead of account.
  * MUC: Allow nick change for IRC channels.
  * HTTPUpload: Remove temporary files after transfer.
  * MessageInput: Regain focus on common key presses.
  * ShortcutWindow: Remove duplicated entry.
  * SearchView: Fix displaying results for newly created group
    chats.
  * ChatList: Update mute state periodically.
  * Icons: Register icon size to make it work for scale &gt; 1.
  * Message input: Don't allow text actions if input is disabled.
  * Avatar: Draw status circle correctly for scale &gt; 1.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1713528000">- Fix Leap15 build
  * Add %{?sle15_python_module_pythons}
  * Run build_metadata.py and install_metadata.py with a
    specific executable python flavor</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1717675200">- %{?python_enable_dependency_generator} does not work in SLE15/Leap15
  codestream, the runtime requirement need to be defined explicitly. (
  boo#1225938)</changelog>
</package>
<package pkgid="ce318924af59deec95597ad3bb9d83fc58c04845a4230627aa41575ba76dfa8a" name="gajim-lang" arch="noarch">
  <version epoch="0" ver="1.8.4" rel="bp156.2.3.1"/>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1663675200">- update to version  1.5.1:
  - Bug Fixes
  - ChatBanner: Format markup string correctly
- update to version  1.5.0:
  - CVE-2022-39835
  - This release fixes a vulnerability which allowed attackers to craft a XML
  - stanza in a way, so Gajim would accept it as message correction for messages
  - not originating from the attacker.
  - New
  - Add drag and drop support for pinned chats
  - Workspaces: Add shortcuts for switching
  - Refactor ChatWidgets so they are only created once (#10987, #11038, #10973, #10119, #11052, #10945)
  - Improvements
  - Preview: Improve mime type detection (#11150)
  - SearchView: Add hint for search filters (#11136)
  - Preview: Show left click action tooltip on icon (#11138)
  - ACE: Highlight non-default values (#11120)
  - XMLConsole: Use SourceView for XML input (#11121)
  - Migration: Make archive migation more resilient
  - Workspaces: Move chats when removing workspace (#11098)
  - ChatList: Always show when switching workspace (#11108)
  - MessageActionsBox: Disable encryption button if MUC is public (#10959)
  - Increase contrast for message row meta elements
  - StatusIcon: Use new icon for pending events
  - WorkspaceSidebar: Allow removing workspace from context menu
  - AccountPage: Add button for Ad-Hoc commands
  - Don’t try to query avatars in MUCs which don’t allow it (#10937)
  - Don’t disco MUC participants on presence
  - Chatstate: Don’t make too many assumptions
  - Windows: Increase default font size
  - CSS: Use relative sizes for fonts
  - ChatControl: Show error if encryption plugin is missing
  - Store and restore running HTTP File Transfer uploads
  - Add button for toggling chat list (#11035)
  - ContactInfo/GroupchatDetails: Toggle icon when editing name
  - Change
  - Raise nbxmpp version
  - Raise PyGObject version (#11132)
  - Add requirement for min sqlite version
  - ChatBanner: Add button for managing voice requests
  - Remove IPython support
  - Rework ChatCommands
  - Shortcuts: Use Ctrl+F for opening the search bar (#11073)
  - Remove clear-chat action (Ctrl+L)
  - Raise required nbxmpp version to 3.2.2
  - Performance
  - Use Task Queue to request avatars on MUC join
  - Bug Fixes
  - GroupchatState: Hide when we are offline
  - Corrections: Don’t correct message if text has not changed (#11146)
  - Make plugin usable check work on all unix/linux systems (#11134)
  - MUC: Don’t ignore MUC invites when ignore_unknown_contacts is set (#11107)
  - Make shortcuts more discoverable (#11122, #11127)
  - Better validate message corrections
  - MUC: Improve automatically adding members on invite
  - Preview: Sanitize filename from disallowed chars (#11105#10752)
  - Chatstates: Don’t sent chatstate delayed to ourself
  - Don’t reset setting when closing single chat
  - Preview: Don’t fail if thumb file already exists (#11091)
  - MessageInputTextView: Account for having multiple blocks when applying style (#11015)
  - ActionMenu: Correctly execute text actions if text contains underscore
  - InfoMessage: Don’t escape text
  - MUC: Send password and reason correctly on invite
  - Preview: Reset received size before cancelling or downloading
  - BlockingList: Don’t fail with placeholder address (#11084)
  - ChatList: Update status for private chats correctly
  - ChatList: Update avatar for all chats correctly
  - GroupChat: Handle nickname changes correctly
  - Roster: Add missing contact-info action
  - Make switch-next-unread-tab action work
  - ChatBanner: Use correct scaling for chatstates
  - FileTransferRow: Don’t cancel transfer when switching chat
  - ChatBanner: Don’t show phone icon for group chats
  - Don’t handle message-sent even for groupchats
  - ChatBanner: Display account badge again
  - Make nick completion test pass
  - Preview: Store last_save_dir with Save As
  - Preview: Make sure the widget is not being destroyed while updating (#10920)
  - Fix handling of URLs without scheme (#11059)
  - GroupchatState: Call correct page for not-joined
  - ChatControl: Don’t assume messages always have a resource (#11042)
  - Notes
  - ChatCommands have been reworked. Only following commands are now available
  - - status
  - - invite
  - - ban
  - - affiliate
  - - kick
  - - role
  - Ctrl+H for opening the search bar has been removed, please use the
  - commonly used Ctrl+F (find). The shortcut for starting a file transfer
  - has been dropped.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1664366400">- Temporarily remove auto generated requirement on GUPnPIgd GI
  bindings to address fatal error caused by requirement on both
  LibSoup2 and LibSoup3 thus making the app unlaunchable. This is
  caused because Gajim itself depends on LibSoup 2.4 while the
  GUPnPIgd GI bindings pulls in UPnP which in turns depends on
  LibSoup 3.0 (boo#1203676).
- Add missing GSSAPI Python module runtime requirement.</changelog>
  <changelog author="Fritz Reichwald &lt;reichwald@b1-systems.de&gt;" date="1664971200">- Add 0001-remove-upnp.patch to (temporarily) remove the code in
  app.py that is going to use GUPnP-IGD since the prior fix from
  Luciaon is not working here.
- Add missing libpcre BuildDep that made the build fail locally</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1665230400">- Update to version 1.5.2:
  * PEPConfig: Add PEP item view.
  * Add shortcut to restore chats after closing.
  * ServerInfo: Add TLS version and cipher suite.
  * XMLConsole: Apply account filter to all visible stanzas.
  * MessageRow: Set text direction for RTL text.
  * AvatarSelector: Add border to mark drag and drop zone.
  * Drag and drop: Highlight target areas.
  * GroupChatNickCompletion: Simplify suggestions.
  * MUC: Add participant menu to avatar.
  * StartChat: Add timeout when requesting MUC disco info.
  * StartChat: Pass message body from XMPP URI.
  * Windows: Ellipsise body text in notifications.
  * Emojis: Improve shortcode usability.
  * Avatars: Use PangoCairo for generate_avatar.
  * Emojis: Extract codepoints for all emoji variants.
  * Raise nbxmpp version to 3.2.4.
  * Show account colour bar only when multiple accounts are active.
  * Remove queue_resize leftover from MessageTextView.
  * SearchView: Update calendar only if widget is visible.
  * SearchView: Speed up clearing of search results.
  * Styling: Parse emojis for Darwin only.
  * Control: Load events before messages.
  * Fix disabling accounts while reconnecting.
  * Use custom icon for "Send Message" action.
  * MessageActionsBox: Don’t fail if no contact is set while
    updating file actions.
  * Scroll to end after sending message.
  * Update chat actions when account state changes.
  * StatusIcon: Reset unread state correctly when using Flatpak.
  * Notifications: Show correct message sender for MUC
    notifications.
  * Discovery: Don’t allow to join top level components.
  * ChatList: Show context menu in correct position.
  * Styling: Allow dots in local part of email addresses.
  * ChatList: Set message_id correctly.
  * Notifications: React to incoming group chat messages.
  * When removing a chat, clear view only if it's currently loaded.
  * AccountPage: Disable Ad-Hoc Commands button when offline.
  * CreateGroupchatWindow: Fix Create button state when switching
    MUC type.
  * React correctly to UserAvatar updates.
  * GajimRemote: Remove not needed shebang.</changelog>
  <changelog author="I. Petrov &lt;ico@dante.tk&gt;" date="1666872000">- Bump python-nbxmpp version requirement to 3.2.4.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1667217600">- Update to version 1.5.3:
  * Allow to copy multiple messages.
  * Accounts: Add setting for default workspace.
  * Preferences: Add send_on_ctrl_enter setting.
  * Add actions menu to Start Chat button.
  * ExceptionDialog: Close dialog with ESC.
  * ChatList: Show drafts.
  * StartChat: Recognise input of xmpp uris.
  * Workspaces: Add "Mark as read" menu item.
  * Improve emoji completion.
  * ACE: Enable reset button only for changed values.
  * Avatar: Follow modernxmpps suggestions for color generation.
  * Preferences: Add escape_key_closes to "Chat" section.
  * Preferences: Reorder "Chat" settings and add a "General"
    section.
  * Preferences: Move show_chatstate_in_banner to ACE settings.
  * Remove confirm_paste_image setting.
  * Remove setting to hide the chat banner.
  * GroupchatRoster: Don’t load roster when its hidden.
  * Emoji completion: Abort early if max menu entry count reached.
  * Disable loading of GUPnPIgd library.
  * Remote: Make get_status() return correct status when offline.
  * Plugins: Use correct gettext import.
  * Make strings translatable.
  * Enable emoji chooser action.
  * AvatarBox: Only react to clicks for GroupchatContacts.
  * Remote: Return True for change_status.
  * ChatActionProcessor: Popdown on focus out event.
  * Avatar placeholders: Correctly use the first grapheme as the
    "letter".
  * Fix quoting /me messages.
  * StartChat: Don’t use jid argument for global dialogue.
  * Try leaving group chat only if account is online.
  * AccountPage: Disable profile button when not connected.
  * MUC: Allow changing subject if there is none.
  * PluginsWindow: Fix typo in plugin tooltip.
  * PluginManager: Block plugins which have been integrated into
    Gajim.
  * MessageInputTextView: Fix correction mode when switching chats.
  * AdHoc: Make MultiLineLabel selectable.
  * Settings: Check if account is connected before trying to get
    context.
  * Styling: Various link parsing issues.
  * Send message icon: Increase line width and make icon symbolic.
  * Accounts: Use account label for disable confirmation.
  * AccountBadge: Update colours correctly.
  * Update account label when changing label setting.
  * SearchView: Scroll to to when resetting.
  * Notification: Draw avatar correctly on scale &gt; 1.
  * Preview: Don’t fail hard when parsing fragments.
  * PreviewAudio: Increase update rate for seek bar.
  * AccountPage: Disable Excute Command button by default.
  * Client: Load trusted certificates on connect().
  * ChatList: Don’t increase in width while drag and drop.
  * Roster: Always show workspace when starting chat.
  * WorkspaceSidebar: Don't increase in width while drag and drop.
  * ChatFunctionPage: React to connection changes.
  * Preview: Set user-agent for session.
  * SearchView: Limit displayed results to account_id of contact.
  * Don’t fail when disabling accounts.
- Drop 0001-remove-upnp.patch: applied upstream.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1670068800">- Update to version 1.5.4:
  * DataFormWidget: Set min width on right box.
  * MUC: Add method for aborting join.
  * Message selection: Improve wording for deselecting messages.
  * Message selection: Improve styling.
  * Features: Add entry for Audio Preview.
  * Styling: Introduce URI scheme whitelisting.
  * Message selection: Use date_time_format instead of time_format.
  * Settings: Unify timestamp settings.
  * Prettify display of geographical locations.
  * ChatList: Scroll to top when switching workspace.
  * Preferences: Improve preview settings.
  * Chatstates: Add a timeout for the "composing" animation.
  * Accounts window: Use equal widths for account switch label.
  * VCardGrid: Linkify all URI-type fields iff they are valid URIs.
  * URI parsing: Detect invalid file URIs earlier.
  * Styling: Validate link syntax deeper and *after* parenthesis
    correction.
  * Add msg_log_id to live message events.
  * Dependencies: Remove pyOpenSSL, add python-cryptography.
  * Jingle: Remove XTLS support.
  * Add FileTransferSelector as a central page for sending files.
  * Block opening file:/ links by default.
  * Control: Request history more efficiently.
  * Preview: Handle multiple simultaneous certificate verification
    errors.
  * Styling: Linkify URIs only if at the start of a word.
  * MessageInputTextView: Reintroduce gui_extension_point.
  * GUI tests: Adapt GUI tests to Gajim changes.
  * SSLErrorDialog: Fix test, remove OpenSSL usage.
  * ChatFunctionPage: Don't close control on cancelling join error.
  * SearchView: Set chat type correctly for ResultRows.
  * Chatstates: Switch to Chatstate.ACTIVE after timeout.
  * GroupchatRoster: Set visibility when hiding.
  * MessageActionsBox: Reintroduce gui_extension_point.
  * Preview: Respect MUC context for PMs.
  * ConversationView: Fix scrollbar not being the right-most
    widget.
  * Preview: Stop further processing if decompression bomb
    detected.
  * URI parsing: More robustness with geo URIs.
  * URI parsing: Properly unescape mailto URIs.
  * URI parsing: Properly unescape XMPP URIs and handle unknown
    query types.
  * MessageInputTextView: Handle is_correcting if no contact is
    set.
  * Fix various issues with chat markers.
  * Plugins: Replace usage of gui_extention_point().
  * CSS: Fix settings related inconsistencies.
  * CSS: Move overriding rules to bottom.
  * Message selection: Don’t fail hard if log_line_id is None.
  * Don’t fail when trying to reset last message id.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1673092800">- Update to version 1.6.0:
  * Raise required nbxmpp version to 4.0.0.
  * Depend on Python 3.10.
  * Port to libsoup3.
  * Allow sending files by copy-pasting them from file managers.
  * Preview: Add audio preview controls and visualisation.
  * Resurrect URI-specific context menus.
  * Highlight the file when opening containing directory.
  * BaseAvatarChooserDialog: Allow all image types.
  * Timestamps: Use date/time format preference in more places.
  * AppPage: Show date for last update check.
  * Add dedicated context menu for non-specific URI types.
  * Restore ability to manually disambiguate JID-like addresses.
  * Use the unified Start/Join Chat flow for "?join" links.
  * CertificateBox: Format serial number in hex.
  * MessageActionsBox: Restore emoji button behaviour.
  * Settings: Add migration for global MUC search api endpoint.
  * AccountWizard: Remove subscriptions after successful login.
  * Audio Preview: Fix visuals on EOS while seeking.
  * Audio Preview: Don't let seekbar handle jump to end on EOS when
    user is seeking.
  * Commands: Attempt to parse only if message can have a command.
  * Notifications: Use correct nickname for /me messages.
  * AvatarSelector: Set default crop scale to 1.0.
  * Menus: Don’t use GLib variant text format parsing.
  * Remember last folder correctly after sending file.
  * Preview: Don't treat multi-line message body as previewable
    URL.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1673697600">- Update to version 1.6.1:
  * Raise required nbxmpp version to 4.0.1.
  * AdHocCommands: Refresh commands list after completing command.
  * Limit message length and add FullMessageWindow.
  * ChatList: Improve timedelta function.
  * CreateGroupchatWindow: Add Advanced switch and always show
    address entry.
  * UX: Make more text labels selectable/enable can-focus for
    copying.
  * AccountPage: Add menu item to deny all subscription requests.
  * Account menu: Add Execute Command… entry for convenience.
  * AccountPage: Make all account menu items available.
  * AccountPage: Add menu entry for adding contacts.
  * Notifications: Fix rare case where Gajim displays notifications
    for our own messages.
  * ServiceDiscoveryWindow: Fix jumping when resizing window.
  * Don't fail in mark_as_unread if there are no messages.
  * Profile: Fix setting avatar.
  * ChatStack DnD: Add workaround for mis-fired drag-motion signal.
  * AudioPreview: Make visualisation fully RTL compatible again and
    ensure graph is always drawn.
  * Preview: Handle exceptions while decrypting.
  * Audio Visualizer: Port deprecated methods.
  * AudioPreview: Always format progress time as LTR.
  * AppPage: Differentiate between updates (Gajim/Plugins).
  * GroupChat: Display reason when group chat is destroyed.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1675512000">- Update to version 1.7.0:
  * Port to pyproject.toml.
  * Preferences: Add 0 and 25 MiB to preview size settings.
  * Account wizard: Don't allow to add account twice.
  * Fix loading localised emojis.
  * HTTPUpload: Don’t cache temp path.
  * JingleAudio: Always resample audio before processing with
    webrtcdsp.
  * Disable legacy ciphers in cryptography.
- Add gajim-1.7.0-fix-status-switching.patch: Make switching status
  work again (commit 3c2c6448).</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1675857600">- Update to version 1.7.1:
  * Raise nbxmpp version to 4.2.0.
  * Improve KeepassXC Integration.
  * MUC: Enable archiving when creating MUCs on ejabberd.
  * Apply SASLprep to passwords.
  * Make switching status work again.
- Drop gajim-1.7.0-fix-status-switching.patch: fixed upstream.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1678622400">- Update to version 1.7.2:
  * Add message menu entry for deleting messages locally.
  * Proxies: Add "Tor (Browser)" default proxy setting.
  * Select group chat after creating it.
  * Don’t colour log timestamps.
  * PEPConfig: Ask for confirmation when deleting nodes.
  * Improve get_recent_muc_nicks query.
  * Improve check for message highlight and add tests.
  * Tests: Use in-memory settings database.
  * Add audio/x-wav to default mime types.
  * Audio preview: Allow skipping by clicking the visualisation.
  * Migration: Don’t fail on colour setting migration.
  * HTTPUpload: Respect infinite file size limit.
  * Chatstates: Remove composing timeout correctly.
  * Show chat notifications when chat page is not visible.
  * Don't fail if contact name for MUC message is None.
  * Notifications: Honour notification_preview_message setting.
  * Fix nickname highlight in group chats.
  * Profile: Don't allow saving profile when not connected.
  * GetRelativeTimeTest: Fix comparison of translated strings and
    off-by timezone errors.
  * Don't highlight message if it's an URI containing our nick.
  * Nickname completion: Make sure recent nicknames list does not
    contain None.
  * Plugins: Don't fail hard on uninstall errors.
  * Start Chat: Fix wrong JID type in _start_new_chat.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1680696000">- Update to version 1.7.3:
  * Allow muting chat notifications.
  * Make `gemini` URIs clickable.
  * Workspace menu: Always show Mark as read action.
  * Audio Preview: Set correct pos when clicking into visualiser.
  * Audio Preview: Add delay before pausing on EOS.
  * Flatpak: Fix drag and drop.
  * GroupChatDetails: Adapt to changed icons.
  * Message input: Fix height for single line messages.
  * Update message merged state after deleting a message.
  * ChatActionProcessor: Fix inserting emojis by click.
  * Account preferences: Adapt to changed icons.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1685188800">- Update to version 1.8.0:
  * XMLConsole: Add logging view.
  * JID sharing: Include verified OMEMO fingerprints.
  * Integrate OMEMO plugin.
  * Redesign Group Chat actions.
  * Audio preview: Support more mime types.
  * ChatBanner: Add share instructions.
  * ChatList: Clear row content when removing history.
  * XMLConsole: Always use dark theme.
  * AboutDialog: Show libsoup version.
  * GroupchatState: Show MAM synchronisation.
  * ChatList: Improve sorting.
  * Make contact details/settings available when offline.
  * ACE: Make descriptions selectable and copyable.
  * Notifications: Withdraw all when a corresponding chat is read.
  * ChatList: Show indicator if group chat is not connected.
  * ChatList: Show indicator when joining group chat.
  * StartChat: Don't filter for account labels.
  * ChatStack: Only respond to supported drag-n-drop types while
    dragging.
  * App menu: Add menu entry for privacy policy.
  * GroupchatRoster: Highlight own nick and sort it to the top.
  * CertificateDialog: Add additional infos and remove org unit
    field.
  * GroupchatDetails: Hide OMEMO page in public MUCs.
  * ChatBanner: Add QR code for sharing JIDs.
  * Windows: Package pixbuf loaders for avif and webp.
  * Remove "escape_key_closes" from ACE.
  * Enable spell checker by default.
  * OMEMO verification: Generate URIs with pedantically correct
    query.
  * Raise gajim when no cmdline options are provided.
  * QR codes: Avoid roundtrip to PNG in storage and back.
  * ProfileWindow: Don't fail when no vcard is set.
  * ContactInfo: Don’t fail when no vcard is set.
  * Message menu: Fix issue with chats not supplying correct ID.
  * Exceptions: Fix sending reports via sentry in conjunction with
    proxy settings.
  * ChatActionProcessor: De-duplicate emojis.
  * Fix encryption deadlock with changed MUC configurations.
  * UI: Update avatar on muc-disco-update.
  * AvatarSelector: Fix that images don't display after repeated
    loading.
  * SearchView: Don't change search context when switching chats.
  * SearchView: Remove overlay.
  * ChatActionProcessor: Allow to click items with mouse cursor.
  * MessageWidget: Don't return truncated text for message actions
    Fixes.
  * Idle: Use default xa implementation for XSS backend.
  * ConversationView: Fix loading messages going forward from
    specific point.
  * ACE: Handle invalid numeric values gracefully.
  * XMLConsole: Select first account by default.
  * Fix rendering of copied code blocks and quotes.
  * ContactInfo: Improve behavior for connection changes.
  * Escape JIDs for xmpp URIs everywhere.
  * Ask for confirmation when leaving a MUC while offline.
  * ContactInfo: Improve behaviour for connection changes.
  * Make manually changing the pinned chat sort order work again.
  * MessageActionsBox: Update send file button tooltip when
    switching chats.
  * GroupChatRoster: Make scrollbar the right-most widget.
  * GroupChatInviter: Don't filter by account name.
  * CertificateDialog: Display issued-to information correctly.
  * AccountWizard: Respect global proxy.
- Obsolete gajim-plugin-omemo.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1691409600">- Update to version 1.8.1:
  * Add setting for default encryption.
  * XMLConsole: Enable browsing sent stanzas in message input.
  * Sort cprofile output after total time.
  * Moderation: Handle unknown moderator JID.
  * Preview: Always show preview widget.
  * Preview: Add loading placeholder.
  * Account page: Show our XMPP address.
  * Idle: Raise poll interval.
  * Search: Don't fail while closing if no chat has been loaded
    before.
  * Dataform: Correctly serialise multi list fields.
  * Profile: Respect avatar/nickname privacy setting on
    consecutive changes.
  * Don’t forget ignored TLS errors from previous connects.
  * App menu: Add missing mnemonic for Accounts menu.
  * Gateway: Fix roster method call.
  * Contacts: Fix supports_{audio,video} property.
  * AvatarSelector: Fix crash on reset.
  * CertificateBox: Catch exception if cert does not offer
    extension.
  * CreateGroupchatWindow: Improve handling of MUC service
    availability.
  * Preview: Show error if file saving directory is not available.
  * SecurityLabels: Display labels for messages received with MAM.
  * DataForm: Handle destroy correctly.
  * ChatListRow: Always update group chat name.
  * Fix showing MAM synch errors and show error text.
  * OMEMOTrustManager: React correctly to connection changes.
  * Fix interaction of GroupchatRoster and SearchView.
  * Init plugin translation module later.
  * GroupchatManage: Improve checks for joined state.
  * Search: Restore group chat participants list to previous state
    when closing search.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1698667200">- Update to version 1.8.2:
  * Raise minimum GLib version to 2.66.0.
  * Avatar: Don’t use custom avatar for IRC group chats.
  * Raise minimum nbxmpp version to 4.4.0.
  * Depend on Pillow &gt;= 9.1.0.
  * Allow adjusting user interface font size via key bindings.
  * Display composing participants in MUC chat banner.
  * ChatBanner: Show contact tooltip when hovering the avatar.
  * Hint that a contact is a bot in the chat banner.
  * Support multiple item dataforms.
  * Display gateway icon in avatars.
  * RosterTooltip: Display BareContact presence.
  * Display status message in banner.
  * ChatMenu: Always show "Execute command" action.
  * MUC features: Use better icons for public and anonymous
    properties.
  * Allow GroupChatInfoScrolled to be set with minimal information.
  * Settings: Allow to set step size for spin settings; bind
    setting value.
  * StartChat: Better discover MUC services.
  * StartChat: Allow to start chats with domain JIDs.
  * ChatBanner: Don't show QR code for privated MUCs.
  * Windows: Add gst-plugins-bad dependency for broader media
    preview support.
  * MUC: Raise rejoin timeout.
  * Accounts: Be more consistent with chat state settings.
  * GroupChatInfo: Improve scaling of subject text.
  * View: Reset view faster.
  * VideoPreview: Disable preview on destroy.
  * GroupchatDetails: Depend on joined state for some elements.
  * GroupChatInfo: Align max width of labels.
  * SynchronizeAccounts: Adapt to connection state changes.
  * Tooltip: Do not escape presence status text.
  * Chatstates: Remove timeout id on remote timeout.
  * NotificationManager: Update actions if online state changes.
  * Caps: Add disco info to cache after query.
  * MUC: Don’t show old join errors when disconnected from room.
  * MUC: Always remove rejoin timer when closing chat.
  * MUC: Update state correctly on disco info error.
  * Switch phone icon to something more widely supported.
  * ChatListStack: Handle missing last visible child.
  * Observable: Fix race condition when removing handlers.
  * PasswordDialog: Use verb instead of noun for log in button.
  * AdHoc: Wrap notes label.
  * Unpack string correctly while handling update error.
  * CSSConfig: Quote font-family property correctly.
  * File transfers: Don't fail when tryting to send non-existing
    file.
  * MusicTrackListener: Don't fail if playing track could not be
    determined.
  * Catch error if loading image with PIL fails due to
    unidentifiable image.
  * CSSConfig: Fix parsing float sizes for font description.
  * Modules: Make sure BaseModule.cleanup() is always called on
    destroy.
  * Roster: Unregister all handlers on destroy.
  * Observable: Don’t allow to register handler multiple times.
  * View: Add newline after username when copying a message.
  * Show notification on group chat mentions again.
  * Make it impossible to connect without config.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1699444800">- Update to version 1.8.3:
  * Profile: Show error page on errors after saving.
  * Close main window when pressing Escape key.
  * GroupchatRoster: Display participants correctly on reveal.
  * Filetransfer: Always focus confirm button.
  * AccountWizard: Don’t allow multiple anonymous accounts for the
    same domain.
  * AccountPage: Show anonymous address.
  * Accounts: Don’t try to save password for anonymous accounts.
  * Message row menu: Show quote and copy actions only if there is
    text.
  * Audio/Video: Disable broken stun server code.
  * Presence: Don’t fail on unknown MUC presences.
  * Control: Add events with correct timestamp.
  * Avatar: Send presence after changing avatar.
  * ServerInfo: Use domain instead of hostname for queries.
  * Emojis: Improve detection of shortcode start.
  * DBusFileManager: Set self._proxy attribute on init.
  * GroupchatRoster: Check for contact before trying to load
    roster.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1701777600">- Update to version 1.8.4:
  * Raise minimum nbxmpp version to 4.5.3.
  * Add shortcuts for quoting previous messages.
  * Raise nbxmpp log level.
  * Passwords: Use JID as username instead of account.
  * MUC: Allow nick change for IRC channels.
  * HTTPUpload: Remove temporary files after transfer.
  * MessageInput: Regain focus on common key presses.
  * ShortcutWindow: Remove duplicated entry.
  * SearchView: Fix displaying results for newly created group
    chats.
  * ChatList: Update mute state periodically.
  * Icons: Register icon size to make it work for scale &gt; 1.
  * Message input: Don't allow text actions if input is disabled.
  * Avatar: Draw status circle correctly for scale &gt; 1.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1713528000">- Fix Leap15 build
  * Add %{?sle15_python_module_pythons}
  * Run build_metadata.py and install_metadata.py with a
    specific executable python flavor</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1717675200">- %{?python_enable_dependency_generator} does not work in SLE15/Leap15
  codestream, the runtime requirement need to be defined explicitly. (
  boo#1225938)</changelog>
</package>
<package pkgid="540962de68c8fb1bd62d0fe6272823ce542debadf09ba55eb21933bd21f1daee" name="gcrane" arch="aarch64">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="7347eea8f2b2a96379d9705f635b301f6abb0c3e7b6a0af40e6e4e18c5e05993" name="gcrane" arch="i586">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="0e7e58d21bd9032d1c778819f862a2507798e9eeac609fe98e39d31856da13c4" name="gcrane" arch="ppc64le">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="cb70e2d1a7c356b8f180b8991656b148f5e716d5786b13cdde01aee47ce2d092" name="gcrane" arch="s390x">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="6a3131adf27d1dfcd306c6408b5ccdb9fbceb4b1fd78087779474cf3436ba396" name="gcrane" arch="x86_64">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="81527b7311b5a2a2e3d20b22ebbc19a4dfa3a7313690d7b423f97e51ec875ba8" name="gcrane-bash-completion" arch="noarch">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="c9365d4e06f112bbc978a535de8b2e101cea051193884a151b2e26e7355d3b6b" name="gcrane-fish-completion" arch="noarch">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="02554680c826a44dde8dd41c68d9c32530158e3038e12849052c4011249c0bc8" name="gcrane-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="8f1db1c72f0b86b6ec6673c50b335b5096d94c42575df6f9d313e00913c67a0c" name="gdcm" arch="aarch64">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="28f4fa81909703aa2e556b41afadc576bef08a372d0390e9edd1ef875fd5bb41" name="gdcm" arch="ppc64le">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="ae2be9082c11085276f38d17d09492a89e4adb4a15a3d2a74016b3768c21eb95" name="gdcm" arch="s390x">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="8c9ec62975a12aa44ff6795d8beef6ab7ebfb75ec2e6f57cf941d94cb3cbcea9" name="gdcm" arch="src">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="5d8542219974d3387e571d7eb277a1a1f3f828fd9c91625b10dfb0e1b6226306" name="gdcm" arch="x86_64">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="fb60adff277c7f5d78001aba18d32470a18e05330e64a9476a385a1cb1e6db4a" name="gdcm-applications" arch="aarch64">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="f919948ae76201fee6db1647bde636229d7c5695c6a7c44a55d8e7d54681d96b" name="gdcm-applications" arch="ppc64le">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="6c09823a1b1a3f2557eeefa0532f96c17e52306612fc2e95359c6af6334cd4c7" name="gdcm-applications" arch="s390x">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="6a47885746c9b92f94346459a7fa2d073662983991b4203930906b1859fc8569" name="gdcm-applications" arch="x86_64">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="8b2751042e0487eac89ecfc9561c0032a90240cd106d26b043d646c274e5f275" name="gdcm-devel" arch="aarch64">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="334618a7f84876d72ea9ea2b465bcf48c917f5f3cfd0fe8e4d876b64af6a4f31" name="gdcm-devel" arch="ppc64le">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="df9f294f53b88d8b31e6ff5241f1cb904af77caaa578659da8bd239ddeac56d0" name="gdcm-devel" arch="s390x">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="30fc0cbfe02b9b5069127216ef094d6b1a5cbb856e9d80e03e063a1f505d9456" name="gdcm-devel" arch="x86_64">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="62084eaac13d406e5413cac0b71cd16244ea6a7323397236e775266529c89f5c" name="gdcm-examples" arch="aarch64">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="b1cfcd4bc58738e91c2da60ced50138daf9977882a0e9ebe3f79dd838325d204" name="gdcm-examples" arch="ppc64le">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="1e7f525d005025f1a1cbe847ae75744985aa331358adad1a663d9b3a520f1510" name="gdcm-examples" arch="s390x">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="d9f9c21aa39a2a469324c8bf4b6639c399f0170a85aea767a701ab5a1af77426" name="gdcm-examples" arch="x86_64">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="4dc020db2503c19655c6a25c46d5b6bf463d1ec8a5702859089585975a534ca8" name="gdk-pixbuf-loader-jxl" arch="aarch64">
  <version epoch="0" ver="0.8.4" rel="bp156.3.3.4"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658577600">- Initial package (version 0.7~779.f5d6e29) build.opensuse.org</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1663848000">- Update to 0.7.0:
  * new functions for retrieving associated alpha channel with
    premultiplied or unpremultiplied colors, for blending
    information for extra channels in the non-coalesced case, for
    getting the intended downsampling ratio of progressive steps,
    for disabling rendering of spot colors.
  * Added ability to add metadata boxes, to set several encoder
    options, to check required codestream compatibility level,
    for force-emitting the box-based container format, to store
    JPEG metadata for lossless reconstruction, to encode
    arbitrary extra channels.</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1671105600">- Added missing baselibs.conf so that 32bit library packages
  become available</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1671451200">- Add patch (applied reversed) to revert the requirement for an
  updated liblcms2 library when we have an older one. This allows
  libjxl to build in SLE15 SP4/SP5 (and Leap 15.4/15.5):
  * 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674043200">- Update to release 0.8
  * API: new function JxlDecoderSetImageBitDepth and
    JxlEncoderSetFrameBitDepth to set the bit depth of buffers.
  * encoder API: add an effort 10 option for lossless
    compression; using this setting requires calling
    JxlEncoderAllowExpertOptions.
- Enable PNG utilities [boo#1205107]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675598400">- Update to release 0.8.1
  * Allow fast-lossless for 16-bit float input
  * Fix OOB read in exif.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676030400">- build glibc hwcaps optimized overlay</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1681732800">- Refresh 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686312000">- Build package in correct phase
- Use macros for ldconfig</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1686744000">- Update to release 0.8.2
  * Fix an integer underflow bug in patch decoding.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694865600">- Build plugins:
  * Add _service file to generate skcms tarball (needed to build
    plugins).
  * Add skcms tarball as source and copy extracted dir to
    ./third_party/ so cmake can find it.
  * Split out new packages:
  * gdk-pixbuf-loader-jxl: Pixbuf loader for supported apps.
  * gimp-plugin-jxl: Plugin to allow gimp to work with JPEG XL
    files.
  * jxl-thumbnailer: Thumbnailer and mime files to allow
    generating thumbnails for JPEG XL files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1695297600">- Switch from LCMS to SKCMS: libjxl core can use either, but
  plugins can only use SKCMS. Exercising two CMS simultaneously
  also is silly. Delete 0001-Remove-LCMS-mutex.patch .</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732622400">- Update to release 0.8.4
  * Huffman lookup table size fix [CVE-2024-11403]
  * Check height limit in modular trees [CVE-2024-11498]</changelog>
</package>
<package pkgid="66bbf860dec15be41774e6c4c3e778f6ac7916e5a4d73435b4ae87dacbd11ab8" name="gdk-pixbuf-loader-jxl" arch="i586">
  <version epoch="0" ver="0.8.4" rel="bp156.3.3.4"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658577600">- Initial package (version 0.7~779.f5d6e29) build.opensuse.org</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1663848000">- Update to 0.7.0:
  * new functions for retrieving associated alpha channel with
    premultiplied or unpremultiplied colors, for blending
    information for extra channels in the non-coalesced case, for
    getting the intended downsampling ratio of progressive steps,
    for disabling rendering of spot colors.
  * Added ability to add metadata boxes, to set several encoder
    options, to check required codestream compatibility level,
    for force-emitting the box-based container format, to store
    JPEG metadata for lossless reconstruction, to encode
    arbitrary extra channels.</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1671105600">- Added missing baselibs.conf so that 32bit library packages
  become available</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1671451200">- Add patch (applied reversed) to revert the requirement for an
  updated liblcms2 library when we have an older one. This allows
  libjxl to build in SLE15 SP4/SP5 (and Leap 15.4/15.5):
  * 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674043200">- Update to release 0.8
  * API: new function JxlDecoderSetImageBitDepth and
    JxlEncoderSetFrameBitDepth to set the bit depth of buffers.
  * encoder API: add an effort 10 option for lossless
    compression; using this setting requires calling
    JxlEncoderAllowExpertOptions.
- Enable PNG utilities [boo#1205107]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675598400">- Update to release 0.8.1
  * Allow fast-lossless for 16-bit float input
  * Fix OOB read in exif.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676030400">- build glibc hwcaps optimized overlay</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1681732800">- Refresh 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686312000">- Build package in correct phase
- Use macros for ldconfig</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1686744000">- Update to release 0.8.2
  * Fix an integer underflow bug in patch decoding.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694865600">- Build plugins:
  * Add _service file to generate skcms tarball (needed to build
    plugins).
  * Add skcms tarball as source and copy extracted dir to
    ./third_party/ so cmake can find it.
  * Split out new packages:
  * gdk-pixbuf-loader-jxl: Pixbuf loader for supported apps.
  * gimp-plugin-jxl: Plugin to allow gimp to work with JPEG XL
    files.
  * jxl-thumbnailer: Thumbnailer and mime files to allow
    generating thumbnails for JPEG XL files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1695297600">- Switch from LCMS to SKCMS: libjxl core can use either, but
  plugins can only use SKCMS. Exercising two CMS simultaneously
  also is silly. Delete 0001-Remove-LCMS-mutex.patch .</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732622400">- Update to release 0.8.4
  * Huffman lookup table size fix [CVE-2024-11403]
  * Check height limit in modular trees [CVE-2024-11498]</changelog>
</package>
<package pkgid="633d505f75e8a6542dd12db10d06c35d79aa075decb4b7f2135d23e481aed279" name="gdk-pixbuf-loader-jxl" arch="s390x">
  <version epoch="0" ver="0.8.4" rel="bp156.3.3.4"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658577600">- Initial package (version 0.7~779.f5d6e29) build.opensuse.org</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1663848000">- Update to 0.7.0:
  * new functions for retrieving associated alpha channel with
    premultiplied or unpremultiplied colors, for blending
    information for extra channels in the non-coalesced case, for
    getting the intended downsampling ratio of progressive steps,
    for disabling rendering of spot colors.
  * Added ability to add metadata boxes, to set several encoder
    options, to check required codestream compatibility level,
    for force-emitting the box-based container format, to store
    JPEG metadata for lossless reconstruction, to encode
    arbitrary extra channels.</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1671105600">- Added missing baselibs.conf so that 32bit library packages
  become available</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1671451200">- Add patch (applied reversed) to revert the requirement for an
  updated liblcms2 library when we have an older one. This allows
  libjxl to build in SLE15 SP4/SP5 (and Leap 15.4/15.5):
  * 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674043200">- Update to release 0.8
  * API: new function JxlDecoderSetImageBitDepth and
    JxlEncoderSetFrameBitDepth to set the bit depth of buffers.
  * encoder API: add an effort 10 option for lossless
    compression; using this setting requires calling
    JxlEncoderAllowExpertOptions.
- Enable PNG utilities [boo#1205107]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675598400">- Update to release 0.8.1
  * Allow fast-lossless for 16-bit float input
  * Fix OOB read in exif.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676030400">- build glibc hwcaps optimized overlay</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1681732800">- Refresh 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686312000">- Build package in correct phase
- Use macros for ldconfig</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1686744000">- Update to release 0.8.2
  * Fix an integer underflow bug in patch decoding.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694865600">- Build plugins:
  * Add _service file to generate skcms tarball (needed to build
    plugins).
  * Add skcms tarball as source and copy extracted dir to
    ./third_party/ so cmake can find it.
  * Split out new packages:
  * gdk-pixbuf-loader-jxl: Pixbuf loader for supported apps.
  * gimp-plugin-jxl: Plugin to allow gimp to work with JPEG XL
    files.
  * jxl-thumbnailer: Thumbnailer and mime files to allow
    generating thumbnails for JPEG XL files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1695297600">- Switch from LCMS to SKCMS: libjxl core can use either, but
  plugins can only use SKCMS. Exercising two CMS simultaneously
  also is silly. Delete 0001-Remove-LCMS-mutex.patch .</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732622400">- Update to release 0.8.4
  * Huffman lookup table size fix [CVE-2024-11403]
  * Check height limit in modular trees [CVE-2024-11498]</changelog>
</package>
<package pkgid="efe6c05e4ed78001238815eacc88389c16f29691c502fa938326d73291f293d9" name="gdk-pixbuf-loader-jxl" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="bp156.3.3.4"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658577600">- Initial package (version 0.7~779.f5d6e29) build.opensuse.org</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1663848000">- Update to 0.7.0:
  * new functions for retrieving associated alpha channel with
    premultiplied or unpremultiplied colors, for blending
    information for extra channels in the non-coalesced case, for
    getting the intended downsampling ratio of progressive steps,
    for disabling rendering of spot colors.
  * Added ability to add metadata boxes, to set several encoder
    options, to check required codestream compatibility level,
    for force-emitting the box-based container format, to store
    JPEG metadata for lossless reconstruction, to encode
    arbitrary extra channels.</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1671105600">- Added missing baselibs.conf so that 32bit library packages
  become available</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1671451200">- Add patch (applied reversed) to revert the requirement for an
  updated liblcms2 library when we have an older one. This allows
  libjxl to build in SLE15 SP4/SP5 (and Leap 15.4/15.5):
  * 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674043200">- Update to release 0.8
  * API: new function JxlDecoderSetImageBitDepth and
    JxlEncoderSetFrameBitDepth to set the bit depth of buffers.
  * encoder API: add an effort 10 option for lossless
    compression; using this setting requires calling
    JxlEncoderAllowExpertOptions.
- Enable PNG utilities [boo#1205107]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675598400">- Update to release 0.8.1
  * Allow fast-lossless for 16-bit float input
  * Fix OOB read in exif.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676030400">- build glibc hwcaps optimized overlay</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1681732800">- Refresh 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686312000">- Build package in correct phase
- Use macros for ldconfig</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1686744000">- Update to release 0.8.2
  * Fix an integer underflow bug in patch decoding.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694865600">- Build plugins:
  * Add _service file to generate skcms tarball (needed to build
    plugins).
  * Add skcms tarball as source and copy extracted dir to
    ./third_party/ so cmake can find it.
  * Split out new packages:
  * gdk-pixbuf-loader-jxl: Pixbuf loader for supported apps.
  * gimp-plugin-jxl: Plugin to allow gimp to work with JPEG XL
    files.
  * jxl-thumbnailer: Thumbnailer and mime files to allow
    generating thumbnails for JPEG XL files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1695297600">- Switch from LCMS to SKCMS: libjxl core can use either, but
  plugins can only use SKCMS. Exercising two CMS simultaneously
  also is silly. Delete 0001-Remove-LCMS-mutex.patch .</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732622400">- Update to release 0.8.4
  * Huffman lookup table size fix [CVE-2024-11403]
  * Check height limit in modular trees [CVE-2024-11498]</changelog>
</package>
<package pkgid="a1f223cdc5aa49eb983926cabf9ef61b82c00ef1cd98df5d848c0df3a9fba60b" name="gede" arch="aarch64">
  <version epoch="0" ver="2.21.1" rel="bp156.2.3.1"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1642680000">- Initial packaging of version 2.18.2 for openSUSE.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1644926400">- Use qmake rpm macros directly instead of calling build.py to set CFLAGS correctly.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1687780800">- New upstream release 2.18.3
  * Add “focus after stop” option
- Do not unnecessarily compile code with PIC relocations</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1693396800">- New upstream release 2.19.1
  * Added support for remote debugging over serial port</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1704456000">- New upstream release 2.19.3
  * No user-visible changes.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1731931200">- New upstream release 2.20.1
  * Added support for entering gdb commands manually
- Do not force a ctags vendor on users
- Run the only unit test in %check</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1732536000">- New upstream version 2.20.2
  * Fixed incorrect cursor position in console output</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1733054400">- New upstream version 2.21.1
  * Add Qt6 port</changelog>
</package>
<package pkgid="40718fbdce99af53ece21a2bcf904975f52328c2e858b382c59d998d75ba9ef5" name="gede" arch="ppc64le">
  <version epoch="0" ver="2.21.1" rel="bp156.2.3.1"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1642680000">- Initial packaging of version 2.18.2 for openSUSE.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1644926400">- Use qmake rpm macros directly instead of calling build.py to set CFLAGS correctly.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1687780800">- New upstream release 2.18.3
  * Add “focus after stop” option
- Do not unnecessarily compile code with PIC relocations</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1693396800">- New upstream release 2.19.1
  * Added support for remote debugging over serial port</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1704456000">- New upstream release 2.19.3
  * No user-visible changes.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1731931200">- New upstream release 2.20.1
  * Added support for entering gdb commands manually
- Do not force a ctags vendor on users
- Run the only unit test in %check</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1732536000">- New upstream version 2.20.2
  * Fixed incorrect cursor position in console output</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1733054400">- New upstream version 2.21.1
  * Add Qt6 port</changelog>
</package>
<package pkgid="eec5b173b88aefd24e0e35615eed9cdd2c6a25dc50e380a7c75151b1eb5d62f7" name="gede" arch="s390x">
  <version epoch="0" ver="2.21.1" rel="bp156.2.3.1"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1642680000">- Initial packaging of version 2.18.2 for openSUSE.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1644926400">- Use qmake rpm macros directly instead of calling build.py to set CFLAGS correctly.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1687780800">- New upstream release 2.18.3
  * Add “focus after stop” option
- Do not unnecessarily compile code with PIC relocations</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1693396800">- New upstream release 2.19.1
  * Added support for remote debugging over serial port</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1704456000">- New upstream release 2.19.3
  * No user-visible changes.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1731931200">- New upstream release 2.20.1
  * Added support for entering gdb commands manually
- Do not force a ctags vendor on users
- Run the only unit test in %check</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1732536000">- New upstream version 2.20.2
  * Fixed incorrect cursor position in console output</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1733054400">- New upstream version 2.21.1
  * Add Qt6 port</changelog>
</package>
<package pkgid="5fad0c91516e615299a36fbc233940839d629bd078f760f898263a7df59d7fed" name="gede" arch="src">
  <version epoch="0" ver="2.21.1" rel="bp156.2.3.1"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1642680000">- Initial packaging of version 2.18.2 for openSUSE.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1644926400">- Use qmake rpm macros directly instead of calling build.py to set CFLAGS correctly.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1687780800">- New upstream release 2.18.3
  * Add “focus after stop” option
- Do not unnecessarily compile code with PIC relocations</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1693396800">- New upstream release 2.19.1
  * Added support for remote debugging over serial port</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1704456000">- New upstream release 2.19.3
  * No user-visible changes.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1731931200">- New upstream release 2.20.1
  * Added support for entering gdb commands manually
- Do not force a ctags vendor on users
- Run the only unit test in %check</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1732536000">- New upstream version 2.20.2
  * Fixed incorrect cursor position in console output</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1733054400">- New upstream version 2.21.1
  * Add Qt6 port</changelog>
</package>
<package pkgid="61a0315cd9990a00c96b858770634a7dc3d48fa94bf5313438cb6447ac865c8d" name="gede" arch="x86_64">
  <version epoch="0" ver="2.21.1" rel="bp156.2.3.1"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1642680000">- Initial packaging of version 2.18.2 for openSUSE.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1644926400">- Use qmake rpm macros directly instead of calling build.py to set CFLAGS correctly.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1687780800">- New upstream release 2.18.3
  * Add “focus after stop” option
- Do not unnecessarily compile code with PIC relocations</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1693396800">- New upstream release 2.19.1
  * Added support for remote debugging over serial port</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1704456000">- New upstream release 2.19.3
  * No user-visible changes.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1731931200">- New upstream release 2.20.1
  * Added support for entering gdb commands manually
- Do not force a ctags vendor on users
- Run the only unit test in %check</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1732536000">- New upstream version 2.20.2
  * Fixed incorrect cursor position in console output</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1733054400">- New upstream version 2.21.1
  * Add Qt6 port</changelog>
</package>
<package pkgid="7d317fe71ddd75444aa6b24547aef4388227d189a9e89b6a48be97c281d7d4b1" name="gede-qt6" arch="aarch64">
  <version epoch="0" ver="2.21.1" rel="bp156.2.3.1"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1642680000">- Initial packaging of version 2.18.2 for openSUSE.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1644926400">- Use qmake rpm macros directly instead of calling build.py to set CFLAGS correctly.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1687780800">- New upstream release 2.18.3
  * Add “focus after stop” option
- Do not unnecessarily compile code with PIC relocations</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1693396800">- New upstream release 2.19.1
  * Added support for remote debugging over serial port</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1704456000">- New upstream release 2.19.3
  * No user-visible changes.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1731931200">- New upstream release 2.20.1
  * Added support for entering gdb commands manually
- Do not force a ctags vendor on users
- Run the only unit test in %check</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1732536000">- New upstream version 2.20.2
  * Fixed incorrect cursor position in console output</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1733054400">- New upstream version 2.21.1
  * Add Qt6 port</changelog>
</package>
<package pkgid="440cad0508710a839169d82a2dabbecd1ef7530ac0f7de3dd01ef5f0647b7a73" name="gede-qt6" arch="ppc64le">
  <version epoch="0" ver="2.21.1" rel="bp156.2.3.1"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1642680000">- Initial packaging of version 2.18.2 for openSUSE.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1644926400">- Use qmake rpm macros directly instead of calling build.py to set CFLAGS correctly.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1687780800">- New upstream release 2.18.3
  * Add “focus after stop” option
- Do not unnecessarily compile code with PIC relocations</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1693396800">- New upstream release 2.19.1
  * Added support for remote debugging over serial port</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1704456000">- New upstream release 2.19.3
  * No user-visible changes.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1731931200">- New upstream release 2.20.1
  * Added support for entering gdb commands manually
- Do not force a ctags vendor on users
- Run the only unit test in %check</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1732536000">- New upstream version 2.20.2
  * Fixed incorrect cursor position in console output</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1733054400">- New upstream version 2.21.1
  * Add Qt6 port</changelog>
</package>
<package pkgid="7f2149e60f3c853065f2696a4defc225bf338dcf73e4e0714c5008ae3267a062" name="gede-qt6" arch="s390x">
  <version epoch="0" ver="2.21.1" rel="bp156.2.3.1"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1642680000">- Initial packaging of version 2.18.2 for openSUSE.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1644926400">- Use qmake rpm macros directly instead of calling build.py to set CFLAGS correctly.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1687780800">- New upstream release 2.18.3
  * Add “focus after stop” option
- Do not unnecessarily compile code with PIC relocations</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1693396800">- New upstream release 2.19.1
  * Added support for remote debugging over serial port</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1704456000">- New upstream release 2.19.3
  * No user-visible changes.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1731931200">- New upstream release 2.20.1
  * Added support for entering gdb commands manually
- Do not force a ctags vendor on users
- Run the only unit test in %check</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1732536000">- New upstream version 2.20.2
  * Fixed incorrect cursor position in console output</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1733054400">- New upstream version 2.21.1
  * Add Qt6 port</changelog>
</package>
<package pkgid="19bd8cde391289408d1bedd85801649a4e817e8b676e3802cfe7bbf543694191" name="gede-qt6" arch="src">
  <version epoch="0" ver="2.21.1" rel="bp156.2.3.1"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1642680000">- Initial packaging of version 2.18.2 for openSUSE.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1644926400">- Use qmake rpm macros directly instead of calling build.py to set CFLAGS correctly.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1687780800">- New upstream release 2.18.3
  * Add “focus after stop” option
- Do not unnecessarily compile code with PIC relocations</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1693396800">- New upstream release 2.19.1
  * Added support for remote debugging over serial port</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1704456000">- New upstream release 2.19.3
  * No user-visible changes.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1731931200">- New upstream release 2.20.1
  * Added support for entering gdb commands manually
- Do not force a ctags vendor on users
- Run the only unit test in %check</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1732536000">- New upstream version 2.20.2
  * Fixed incorrect cursor position in console output</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1733054400">- New upstream version 2.21.1
  * Add Qt6 port</changelog>
</package>
<package pkgid="f36a8be7f4aa63832d8b4091643441957df77d29b9f8dc62b21554d8f5338c01" name="gede-qt6" arch="x86_64">
  <version epoch="0" ver="2.21.1" rel="bp156.2.3.1"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1642680000">- Initial packaging of version 2.18.2 for openSUSE.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1644926400">- Use qmake rpm macros directly instead of calling build.py to set CFLAGS correctly.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1687780800">- New upstream release 2.18.3
  * Add “focus after stop” option
- Do not unnecessarily compile code with PIC relocations</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1693396800">- New upstream release 2.19.1
  * Added support for remote debugging over serial port</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1704456000">- New upstream release 2.19.3
  * No user-visible changes.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1731931200">- New upstream release 2.20.1
  * Added support for entering gdb commands manually
- Do not force a ctags vendor on users
- Run the only unit test in %check</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1732536000">- New upstream version 2.20.2
  * Fixed incorrect cursor position in console output</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1733054400">- New upstream version 2.21.1
  * Add Qt6 port</changelog>
</package>
<package pkgid="55d010e4a2dc9812d9be088dcd3a9d973fa5762c11d04fe1d46b0ef23b5de023" name="gh" arch="aarch64">
  <version epoch="0" ver="2.51.0" rel="bp156.2.3.1"/>
  <changelog author="pdostal@suse.com" date="1694088000">- Update to version 2.34.0:
  * Use consistent variable naming
  * `gh status`: show status even if a comment 404s (#7873)
  * build(deps): bump actions/checkout from 3 to 4 (#7937)
  * rename template to mark-template cmd (#7923)
  * Simplify mock jobs response
  * Use "Link" header for pagination completion check
  * Fix pagination resp with "Link" header
  * Refactor GetJobs to use RESTWithNext
  * Add formula-path to homebrew-bump step (#7930)
  * Add JSON output flags to workflow list command (#7902)
  * fix tests
  * no other descriptions have a period
  * mark and unmark project as template
  * Add config clear-cache command (#7693)
  * Allow --disable-wiki flag with --template flag in repo create command (#7886)
  * Reword token invalid message (#7906)
  * 🐛 (repo create)execute clone when readme option is enabled (#7837)
  * Use go-gh prompter package (#7896)
  * pr checks return distinct exit code for PENDING checks (#7866)
  * Properly rename remote for GHES hosts (#7890)
  * Add verbose flag to api cmd (#7826)
  * Fix up Nix installation instructions (#7891)
  * Fetch all jobs on a gh view run --json</changelog>
  <changelog author="pdostal@suse.com" date="1695211200">- Update to version 2.35.0:
  * Cleanup release create around new --notes-from-tag flag (#8016)
  * Document when gh auth login writes oauth token to plain text (#7781)
  * Show full permissions URL in `gh cs create` (#7983)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5
  * moved remoteTagExists under if NotesFromTag exists and added three tests
  * Clarify list repo behavior (#7964)
  * Reinforce not opening PRs without approval on an issue
  * Delete local tag when running `gh release delete --cleanup-tag` (#7884)
  * Add `--all` flag to `alias delete` command (#7900)
  * Move homebrew bump fork to personal repo
  * Revert "Add a test workflow for homebrew bump investigations (#7951)"
  * Add a test workflow for homebrew bump investigations (#7951)
  * Add `gh release create [&lt;tag&gt;] --notes-from-tag`</changelog>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
</package>
<package pkgid="70fdf4ae4c1681290b7f30ea13614c30ce19fe7cd13d2564a0d42074c5398199" name="gh" arch="i586">
  <version epoch="0" ver="2.51.0" rel="bp156.2.3.1"/>
  <changelog author="pdostal@suse.com" date="1694088000">- Update to version 2.34.0:
  * Use consistent variable naming
  * `gh status`: show status even if a comment 404s (#7873)
  * build(deps): bump actions/checkout from 3 to 4 (#7937)
  * rename template to mark-template cmd (#7923)
  * Simplify mock jobs response
  * Use "Link" header for pagination completion check
  * Fix pagination resp with "Link" header
  * Refactor GetJobs to use RESTWithNext
  * Add formula-path to homebrew-bump step (#7930)
  * Add JSON output flags to workflow list command (#7902)
  * fix tests
  * no other descriptions have a period
  * mark and unmark project as template
  * Add config clear-cache command (#7693)
  * Allow --disable-wiki flag with --template flag in repo create command (#7886)
  * Reword token invalid message (#7906)
  * 🐛 (repo create)execute clone when readme option is enabled (#7837)
  * Use go-gh prompter package (#7896)
  * pr checks return distinct exit code for PENDING checks (#7866)
  * Properly rename remote for GHES hosts (#7890)
  * Add verbose flag to api cmd (#7826)
  * Fix up Nix installation instructions (#7891)
  * Fetch all jobs on a gh view run --json</changelog>
  <changelog author="pdostal@suse.com" date="1695211200">- Update to version 2.35.0:
  * Cleanup release create around new --notes-from-tag flag (#8016)
  * Document when gh auth login writes oauth token to plain text (#7781)
  * Show full permissions URL in `gh cs create` (#7983)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5
  * moved remoteTagExists under if NotesFromTag exists and added three tests
  * Clarify list repo behavior (#7964)
  * Reinforce not opening PRs without approval on an issue
  * Delete local tag when running `gh release delete --cleanup-tag` (#7884)
  * Add `--all` flag to `alias delete` command (#7900)
  * Move homebrew bump fork to personal repo
  * Revert "Add a test workflow for homebrew bump investigations (#7951)"
  * Add a test workflow for homebrew bump investigations (#7951)
  * Add `gh release create [&lt;tag&gt;] --notes-from-tag`</changelog>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
</package>
<package pkgid="91f9d3c5c078dc4069e228da15f733090d96b06d2b74c636953ffc572489de29" name="gh" arch="ppc64le">
  <version epoch="0" ver="2.51.0" rel="bp156.2.3.1"/>
  <changelog author="pdostal@suse.com" date="1694088000">- Update to version 2.34.0:
  * Use consistent variable naming
  * `gh status`: show status even if a comment 404s (#7873)
  * build(deps): bump actions/checkout from 3 to 4 (#7937)
  * rename template to mark-template cmd (#7923)
  * Simplify mock jobs response
  * Use "Link" header for pagination completion check
  * Fix pagination resp with "Link" header
  * Refactor GetJobs to use RESTWithNext
  * Add formula-path to homebrew-bump step (#7930)
  * Add JSON output flags to workflow list command (#7902)
  * fix tests
  * no other descriptions have a period
  * mark and unmark project as template
  * Add config clear-cache command (#7693)
  * Allow --disable-wiki flag with --template flag in repo create command (#7886)
  * Reword token invalid message (#7906)
  * 🐛 (repo create)execute clone when readme option is enabled (#7837)
  * Use go-gh prompter package (#7896)
  * pr checks return distinct exit code for PENDING checks (#7866)
  * Properly rename remote for GHES hosts (#7890)
  * Add verbose flag to api cmd (#7826)
  * Fix up Nix installation instructions (#7891)
  * Fetch all jobs on a gh view run --json</changelog>
  <changelog author="pdostal@suse.com" date="1695211200">- Update to version 2.35.0:
  * Cleanup release create around new --notes-from-tag flag (#8016)
  * Document when gh auth login writes oauth token to plain text (#7781)
  * Show full permissions URL in `gh cs create` (#7983)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5
  * moved remoteTagExists under if NotesFromTag exists and added three tests
  * Clarify list repo behavior (#7964)
  * Reinforce not opening PRs without approval on an issue
  * Delete local tag when running `gh release delete --cleanup-tag` (#7884)
  * Add `--all` flag to `alias delete` command (#7900)
  * Move homebrew bump fork to personal repo
  * Revert "Add a test workflow for homebrew bump investigations (#7951)"
  * Add a test workflow for homebrew bump investigations (#7951)
  * Add `gh release create [&lt;tag&gt;] --notes-from-tag`</changelog>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
</package>
<package pkgid="5106e3b66c3bb54ae3e5a549a3f3975720ac29925e9ff28030602c7ec20d0fe1" name="gh" arch="s390x">
  <version epoch="0" ver="2.51.0" rel="bp156.2.3.1"/>
  <changelog author="pdostal@suse.com" date="1694088000">- Update to version 2.34.0:
  * Use consistent variable naming
  * `gh status`: show status even if a comment 404s (#7873)
  * build(deps): bump actions/checkout from 3 to 4 (#7937)
  * rename template to mark-template cmd (#7923)
  * Simplify mock jobs response
  * Use "Link" header for pagination completion check
  * Fix pagination resp with "Link" header
  * Refactor GetJobs to use RESTWithNext
  * Add formula-path to homebrew-bump step (#7930)
  * Add JSON output flags to workflow list command (#7902)
  * fix tests
  * no other descriptions have a period
  * mark and unmark project as template
  * Add config clear-cache command (#7693)
  * Allow --disable-wiki flag with --template flag in repo create command (#7886)
  * Reword token invalid message (#7906)
  * 🐛 (repo create)execute clone when readme option is enabled (#7837)
  * Use go-gh prompter package (#7896)
  * pr checks return distinct exit code for PENDING checks (#7866)
  * Properly rename remote for GHES hosts (#7890)
  * Add verbose flag to api cmd (#7826)
  * Fix up Nix installation instructions (#7891)
  * Fetch all jobs on a gh view run --json</changelog>
  <changelog author="pdostal@suse.com" date="1695211200">- Update to version 2.35.0:
  * Cleanup release create around new --notes-from-tag flag (#8016)
  * Document when gh auth login writes oauth token to plain text (#7781)
  * Show full permissions URL in `gh cs create` (#7983)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5
  * moved remoteTagExists under if NotesFromTag exists and added three tests
  * Clarify list repo behavior (#7964)
  * Reinforce not opening PRs without approval on an issue
  * Delete local tag when running `gh release delete --cleanup-tag` (#7884)
  * Add `--all` flag to `alias delete` command (#7900)
  * Move homebrew bump fork to personal repo
  * Revert "Add a test workflow for homebrew bump investigations (#7951)"
  * Add a test workflow for homebrew bump investigations (#7951)
  * Add `gh release create [&lt;tag&gt;] --notes-from-tag`</changelog>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
</package>
<package pkgid="2b51fcb4033e96a860cd46b84e7f1a257772b0bf05c0b9871ebcdce83b8dc8ec" name="gh" arch="src">
  <version epoch="0" ver="2.51.0" rel="bp156.2.3.1"/>
  <changelog author="pdostal@suse.com" date="1694088000">- Update to version 2.34.0:
  * Use consistent variable naming
  * `gh status`: show status even if a comment 404s (#7873)
  * build(deps): bump actions/checkout from 3 to 4 (#7937)
  * rename template to mark-template cmd (#7923)
  * Simplify mock jobs response
  * Use "Link" header for pagination completion check
  * Fix pagination resp with "Link" header
  * Refactor GetJobs to use RESTWithNext
  * Add formula-path to homebrew-bump step (#7930)
  * Add JSON output flags to workflow list command (#7902)
  * fix tests
  * no other descriptions have a period
  * mark and unmark project as template
  * Add config clear-cache command (#7693)
  * Allow --disable-wiki flag with --template flag in repo create command (#7886)
  * Reword token invalid message (#7906)
  * 🐛 (repo create)execute clone when readme option is enabled (#7837)
  * Use go-gh prompter package (#7896)
  * pr checks return distinct exit code for PENDING checks (#7866)
  * Properly rename remote for GHES hosts (#7890)
  * Add verbose flag to api cmd (#7826)
  * Fix up Nix installation instructions (#7891)
  * Fetch all jobs on a gh view run --json</changelog>
  <changelog author="pdostal@suse.com" date="1695211200">- Update to version 2.35.0:
  * Cleanup release create around new --notes-from-tag flag (#8016)
  * Document when gh auth login writes oauth token to plain text (#7781)
  * Show full permissions URL in `gh cs create` (#7983)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5
  * moved remoteTagExists under if NotesFromTag exists and added three tests
  * Clarify list repo behavior (#7964)
  * Reinforce not opening PRs without approval on an issue
  * Delete local tag when running `gh release delete --cleanup-tag` (#7884)
  * Add `--all` flag to `alias delete` command (#7900)
  * Move homebrew bump fork to personal repo
  * Revert "Add a test workflow for homebrew bump investigations (#7951)"
  * Add a test workflow for homebrew bump investigations (#7951)
  * Add `gh release create [&lt;tag&gt;] --notes-from-tag`</changelog>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
</package>
<package pkgid="87d542077951e5a4410fd6630780d09e8e6bbc9fe640b83ab66078826325344e" name="gh" arch="x86_64">
  <version epoch="0" ver="2.51.0" rel="bp156.2.3.1"/>
  <changelog author="pdostal@suse.com" date="1694088000">- Update to version 2.34.0:
  * Use consistent variable naming
  * `gh status`: show status even if a comment 404s (#7873)
  * build(deps): bump actions/checkout from 3 to 4 (#7937)
  * rename template to mark-template cmd (#7923)
  * Simplify mock jobs response
  * Use "Link" header for pagination completion check
  * Fix pagination resp with "Link" header
  * Refactor GetJobs to use RESTWithNext
  * Add formula-path to homebrew-bump step (#7930)
  * Add JSON output flags to workflow list command (#7902)
  * fix tests
  * no other descriptions have a period
  * mark and unmark project as template
  * Add config clear-cache command (#7693)
  * Allow --disable-wiki flag with --template flag in repo create command (#7886)
  * Reword token invalid message (#7906)
  * 🐛 (repo create)execute clone when readme option is enabled (#7837)
  * Use go-gh prompter package (#7896)
  * pr checks return distinct exit code for PENDING checks (#7866)
  * Properly rename remote for GHES hosts (#7890)
  * Add verbose flag to api cmd (#7826)
  * Fix up Nix installation instructions (#7891)
  * Fetch all jobs on a gh view run --json</changelog>
  <changelog author="pdostal@suse.com" date="1695211200">- Update to version 2.35.0:
  * Cleanup release create around new --notes-from-tag flag (#8016)
  * Document when gh auth login writes oauth token to plain text (#7781)
  * Show full permissions URL in `gh cs create` (#7983)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5
  * moved remoteTagExists under if NotesFromTag exists and added three tests
  * Clarify list repo behavior (#7964)
  * Reinforce not opening PRs without approval on an issue
  * Delete local tag when running `gh release delete --cleanup-tag` (#7884)
  * Add `--all` flag to `alias delete` command (#7900)
  * Move homebrew bump fork to personal repo
  * Revert "Add a test workflow for homebrew bump investigations (#7951)"
  * Add a test workflow for homebrew bump investigations (#7951)
  * Add `gh release create [&lt;tag&gt;] --notes-from-tag`</changelog>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
</package>
<package pkgid="f6e7ff3a092a00194e34bcaeed4056634dc303d033d5ef7e2e405e5353e2c5f4" name="gh" arch="aarch64">
  <version epoch="0" ver="2.53.0" rel="bp156.2.6.1"/>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
</package>
<package pkgid="1a6868a3fbfeb4be3a3b17e8c62f37f351e77b95bbfd61dd20454aa02d97364f" name="gh" arch="i586">
  <version epoch="0" ver="2.53.0" rel="bp156.2.6.1"/>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
</package>
<package pkgid="e307b78a76d8a10b84ad2c5fb61823067345d654740cddfda7a2c924d19cdaf1" name="gh" arch="ppc64le">
  <version epoch="0" ver="2.53.0" rel="bp156.2.6.1"/>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
</package>
<package pkgid="57c48a7a2cbe240f5c533dd6b36db8b657da4736f9e6c4f7d08840dc4720bfe5" name="gh" arch="s390x">
  <version epoch="0" ver="2.53.0" rel="bp156.2.6.1"/>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
</package>
<package pkgid="e56df7d1cbad9f132fd4b4d110f90941cc9b07039a6ab93084342c6e06e5564d" name="gh" arch="src">
  <version epoch="0" ver="2.53.0" rel="bp156.2.6.1"/>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
</package>
<package pkgid="4f7fe7d58b1873b1c8dfb61880a0d8b18c95891e6c4dc66a72350552f77ad6a2" name="gh" arch="x86_64">
  <version epoch="0" ver="2.53.0" rel="bp156.2.6.1"/>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
</package>
<package pkgid="7873dfa7b77156cd4702e737b108d4faed4899633b781635d3c5b3e03b8d0915" name="gh" arch="aarch64">
  <version epoch="0" ver="2.55.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
</package>
<package pkgid="e278e811af775826bf1de7116b1bba059118a46dd0729938630070f70bb00e1f" name="gh" arch="i586">
  <version epoch="0" ver="2.55.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
</package>
<package pkgid="030a2f663b59cd3313e66ff78af4e4004296b8529977a36c09be0da71b76bb14" name="gh" arch="ppc64le">
  <version epoch="0" ver="2.55.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
</package>
<package pkgid="40da4b9afad0a0cde3f2eefeed2120104a4daa33edbe8a4929c055054c4f7889" name="gh" arch="s390x">
  <version epoch="0" ver="2.55.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
</package>
<package pkgid="c44b21c1d20b4f8a5723e70da8517aced3f316f29c8ae1ce9a61ea9ce4dfcd6d" name="gh" arch="src">
  <version epoch="0" ver="2.55.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
</package>
<package pkgid="6e9a0ac541c01b8a4cc72ff985aaaf4b93586f22eac19a6cefbecd4803c680a9" name="gh" arch="x86_64">
  <version epoch="0" ver="2.55.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
</package>
<package pkgid="9bd2d69eef4da0692677f350ad1251e38951020ab72f725752f5e47392370373" name="gh" arch="aarch64">
  <version epoch="0" ver="2.57.0" rel="bp156.2.12.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
</package>
<package pkgid="c7288c42845a3f21b1e071595bfb4a5c269b60ceef40a9065078505ac337d02d" name="gh" arch="i586">
  <version epoch="0" ver="2.57.0" rel="bp156.2.12.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
</package>
<package pkgid="8dcac718c1641df52ad7e0d708772fc09d18f59298e83efceca4328e42af5d2f" name="gh" arch="ppc64le">
  <version epoch="0" ver="2.57.0" rel="bp156.2.12.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
</package>
<package pkgid="8197a28fa06377e24b3bd068c4dab2b79d172529c30d48b0385fcec18e6ef573" name="gh" arch="s390x">
  <version epoch="0" ver="2.57.0" rel="bp156.2.12.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
</package>
<package pkgid="e0c8ae0366257a53d81b9f6fa4a6dd615186a0e8587929d0a945efe54f83d96c" name="gh" arch="src">
  <version epoch="0" ver="2.57.0" rel="bp156.2.12.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
</package>
<package pkgid="0fff8b2bcc21de799ca75e06760a037c430759b65e7711b76abd258360dd6248" name="gh" arch="x86_64">
  <version epoch="0" ver="2.57.0" rel="bp156.2.12.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
</package>
<package pkgid="82747f411adb4fb06d144a0008ddbf24e73e538fd0ecfcd72b2019adc0a8d65b" name="gh" arch="aarch64">
  <version epoch="0" ver="2.65.0" rel="bp156.2.17.1"/>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
</package>
<package pkgid="896b546396cd483485920b1c52b0999dd519e1d5c67c0e129a487d935320db87" name="gh" arch="i586">
  <version epoch="0" ver="2.65.0" rel="bp156.2.17.1"/>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
</package>
<package pkgid="c6eb20c315622f1d493b4e576f219ee57ad03deeda8c6662f260db674c210d06" name="gh" arch="ppc64le">
  <version epoch="0" ver="2.65.0" rel="bp156.2.17.1"/>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
</package>
<package pkgid="88fc7449ce0038050818739ff701dcc97598b0ac5a138145bd0bf50586126aa7" name="gh" arch="s390x">
  <version epoch="0" ver="2.65.0" rel="bp156.2.17.1"/>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
</package>
<package pkgid="eb9d5d3df58429664edc00f8aa764493ffaaf7db0a615cb09a230ec9c39c2ff7" name="gh" arch="src">
  <version epoch="0" ver="2.65.0" rel="bp156.2.17.1"/>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
</package>
<package pkgid="58f52c370f527dae77dab4479274ccb8a63954ddf5d7cdf17d9efb483420219f" name="gh" arch="x86_64">
  <version epoch="0" ver="2.65.0" rel="bp156.2.17.1"/>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
</package>
<package pkgid="c603cd92fc11f1824b53297c5d82da767320e54ee6201687da69bb9fab0a917f" name="gh" arch="aarch64">
  <version epoch="0" ver="2.66.1" rel="bp156.2.20.1"/>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
</package>
<package pkgid="161ea0c99b337bd636217af0a75586e985e1ec42edffaeaaaf600be61ff17bc1" name="gh" arch="i586">
  <version epoch="0" ver="2.66.1" rel="bp156.2.20.1"/>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
</package>
<package pkgid="680d265133b1add2f5a91b2e52cfd09e83f4ce6c57e253cce01143a7965df500" name="gh" arch="ppc64le">
  <version epoch="0" ver="2.66.1" rel="bp156.2.20.1"/>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
</package>
<package pkgid="39b594733239fb88c35dcd9b19611a038249a9343cb069018ec4782dc8b215f4" name="gh" arch="s390x">
  <version epoch="0" ver="2.66.1" rel="bp156.2.20.1"/>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
</package>
<package pkgid="fc4647235d10e180317e52d1d0a05ce9fc381e772995ad17727893f7696fbd78" name="gh" arch="src">
  <version epoch="0" ver="2.66.1" rel="bp156.2.20.1"/>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
</package>
<package pkgid="ed70b609f161e163deec7faa632e073ab92d481b047e286aa157d2c426dc7c02" name="gh" arch="x86_64">
  <version epoch="0" ver="2.66.1" rel="bp156.2.20.1"/>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
</package>
<package pkgid="3cc56d7fb43c9a70c0699bc7f6aab086776b4ea38cccb4001fbf4ca8bbf9b510" name="gh" arch="aarch64">
  <version epoch="0" ver="2.68.1" rel="bp156.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
</package>
<package pkgid="62b5babeaa19d728fe2ab560e5b67fc8d291d8771f6f35477884cd04219005d7" name="gh" arch="i586">
  <version epoch="0" ver="2.68.1" rel="bp156.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
</package>
<package pkgid="33e8784cf212c847d9277e24714a08562dfff83977fe241f0837876d7ec285f0" name="gh" arch="ppc64le">
  <version epoch="0" ver="2.68.1" rel="bp156.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
</package>
<package pkgid="2cc7998542118df80f8114d39334c87d219b40b02b72a50426009b9937f2caec" name="gh" arch="s390x">
  <version epoch="0" ver="2.68.1" rel="bp156.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
</package>
<package pkgid="e42f39a50c8dce338ab3c9a0b89b9118b02c5df481309a0f81cd8db5c3ab8633" name="gh" arch="src">
  <version epoch="0" ver="2.68.1" rel="bp156.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
</package>
<package pkgid="5fa6b1d0184a54c17ca321a3a74685490ed18c082d1082a13efca90a764acec1" name="gh" arch="x86_64">
  <version epoch="0" ver="2.68.1" rel="bp156.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
</package>
<package pkgid="358ecdba970f8352d712b432b9089eeeb8156dda35315eeb9d637760092f6776" name="gh" arch="aarch64">
  <version epoch="0" ver="2.74.2" rel="bp156.2.26.1"/>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
</package>
<package pkgid="307f91da7c5286ad7566f55675db3336b1e22d46e204bb6bb550973c80f29af5" name="gh" arch="i586">
  <version epoch="0" ver="2.74.2" rel="bp156.2.26.1"/>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
</package>
<package pkgid="cafe22a27c3c2fe0aa1f2dc05b81df8670aebedf2f24ca5a576a60eaefcfad70" name="gh" arch="ppc64le">
  <version epoch="0" ver="2.74.2" rel="bp156.2.26.1"/>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
</package>
<package pkgid="aeaea96ee4ead2a945613ec536c45480174a2b24b36f20e7eef1772f72db517c" name="gh" arch="s390x">
  <version epoch="0" ver="2.74.2" rel="bp156.2.26.1"/>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
</package>
<package pkgid="095548656816d8d70026b777566ff1af8dee877f433d562427922cec48d28b94" name="gh" arch="src">
  <version epoch="0" ver="2.74.2" rel="bp156.2.26.1"/>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
</package>
<package pkgid="361734bdfd12c22648d8b29cd0c260f9241c3c313a64621c4225e96dfda5d909" name="gh" arch="x86_64">
  <version epoch="0" ver="2.74.2" rel="bp156.2.26.1"/>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
</package>
<package pkgid="43768b95622d1a26fa6084422cdf4f5825950c7e087db1ec148724026bfacbc7" name="gh" arch="aarch64">
  <version epoch="0" ver="2.76.2" rel="bp156.2.29.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
</package>
<package pkgid="5f03ffafbe8875ae7222a14ff09d42d3a35f34cfe0d23eeed40ca7832a7a3baf" name="gh" arch="i586">
  <version epoch="0" ver="2.76.2" rel="bp156.2.29.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
</package>
<package pkgid="96040e675ff78fc3a673f74066cd692ae0dfd0d278369d4879a0213541e2044a" name="gh" arch="ppc64le">
  <version epoch="0" ver="2.76.2" rel="bp156.2.29.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
</package>
<package pkgid="2e10e209a338bc17e1731a5b290f845c945d1ec84b85021acd4f1ac8bcea4018" name="gh" arch="s390x">
  <version epoch="0" ver="2.76.2" rel="bp156.2.29.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
</package>
<package pkgid="2cd536b4114e6822fb5f4cf327f60380cd18be1dd4fb6427671380c156691c22" name="gh" arch="src">
  <version epoch="0" ver="2.76.2" rel="bp156.2.29.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
</package>
<package pkgid="4bb29e6d5802b58d083530a0fccb54bb986a5afab3e8951039473ba6fdb29326" name="gh" arch="x86_64">
  <version epoch="0" ver="2.76.2" rel="bp156.2.29.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
</package>
<package pkgid="375fedd5327379fcc3dbdc07da511bf17ba1f597a798859fc642f7baa50c7bbd" name="gh" arch="aarch64">
  <version epoch="0" ver="2.78.0" rel="bp156.2.32.1"/>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1756123200">- Update to version 2.78.0:
  * Add `--force` flag to `gh run cancel` (#11513)
  * Update third-party license versions (#11557)
  * chore(deps): bump github.com/go-viper/mapstructure/v2 (#11556)
  * Merge pull request #11536 from cli/copilot/fix-11535
  * chore(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2
  * Update pkg/cmd/release/verify/verify.go
  * Update pkg/cmd/release/verify-asset/verify_asset.go
  * Hidden trusted root flag for release verify
  * Update Go dependencies to latest versions
  * chore(deps): bump actions/checkout from 4 to 5
  * udpate the test
  * replace /git/refs/tags/ to /git/ref/tags/
  * Update feature_detection.go
  * Update PR tests for v2 projects
  * Base changes for PR project items
  * Update `gh issue view` to show v2 projects
  * PR feedback from @bagtoad
  * Update v1 project detection logic
  * Update govulncheck workflow to scan source code
  * add test for FetchRefSHA
  * Apply suggestion from @Copilot
  * Update docs/install_windows.md
  * Consolidate repo profile, fix headings
  * chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13
  * Update docs on contributing new install methods
  * markdown lint fixes
  * Formatting
  * Initial installation doc refactor
  * Pushing empty commit to run CI
  * Bump Go to 1.24.6
  * Fix linter
  * Update pkg/cmd/search/search.go
  * chore(deps): bump actions/download-artifact from 4 to 5
  * Update docs/triage.md
  * Update docs/triage.md
  * Update issue triage guidelines and label usage
  * fix error for ErrReleaseNotFound when fetching ref
  * Apply suggestion from @Copilot
  * Update .github/workflows/scripts/spam-detection/process-issue.sh
  * docs(search): move search syntax note to `gh search --help`
  * Update spam detection to comment on and close issue
  * Update permissions and events for workflow
  * ci: use `help wanted` label link in comment
  * ci: anchor regexp for `help wanted` label
  * Improve spam detection evals (#11419)
  * v1 project feature detection spike using version
  * docs(help): rename `search-syntax` help topic
  * docs(search): add reference to `gh help search`
  * Add help topic for search syntax in gh commands
  * docs(search): add note for exclusion search syntax
  * Regenerate third-party licenses on trunk pushes
  * chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7</changelog>
</package>
<package pkgid="3d5b84aff3d9bca8428ba884ba605524f1b2e146c5a1839277d4bc3bc79417f8" name="gh" arch="i586">
  <version epoch="0" ver="2.78.0" rel="bp156.2.32.1"/>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1756123200">- Update to version 2.78.0:
  * Add `--force` flag to `gh run cancel` (#11513)
  * Update third-party license versions (#11557)
  * chore(deps): bump github.com/go-viper/mapstructure/v2 (#11556)
  * Merge pull request #11536 from cli/copilot/fix-11535
  * chore(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2
  * Update pkg/cmd/release/verify/verify.go
  * Update pkg/cmd/release/verify-asset/verify_asset.go
  * Hidden trusted root flag for release verify
  * Update Go dependencies to latest versions
  * chore(deps): bump actions/checkout from 4 to 5
  * udpate the test
  * replace /git/refs/tags/ to /git/ref/tags/
  * Update feature_detection.go
  * Update PR tests for v2 projects
  * Base changes for PR project items
  * Update `gh issue view` to show v2 projects
  * PR feedback from @bagtoad
  * Update v1 project detection logic
  * Update govulncheck workflow to scan source code
  * add test for FetchRefSHA
  * Apply suggestion from @Copilot
  * Update docs/install_windows.md
  * Consolidate repo profile, fix headings
  * chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13
  * Update docs on contributing new install methods
  * markdown lint fixes
  * Formatting
  * Initial installation doc refactor
  * Pushing empty commit to run CI
  * Bump Go to 1.24.6
  * Fix linter
  * Update pkg/cmd/search/search.go
  * chore(deps): bump actions/download-artifact from 4 to 5
  * Update docs/triage.md
  * Update docs/triage.md
  * Update issue triage guidelines and label usage
  * fix error for ErrReleaseNotFound when fetching ref
  * Apply suggestion from @Copilot
  * Update .github/workflows/scripts/spam-detection/process-issue.sh
  * docs(search): move search syntax note to `gh search --help`
  * Update spam detection to comment on and close issue
  * Update permissions and events for workflow
  * ci: use `help wanted` label link in comment
  * ci: anchor regexp for `help wanted` label
  * Improve spam detection evals (#11419)
  * v1 project feature detection spike using version
  * docs(help): rename `search-syntax` help topic
  * docs(search): add reference to `gh help search`
  * Add help topic for search syntax in gh commands
  * docs(search): add note for exclusion search syntax
  * Regenerate third-party licenses on trunk pushes
  * chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7</changelog>
</package>
<package pkgid="bef1c41ab62e0142f2f05d13a62a8ed5f644ccc886d9ff820e7dd6a5a9c19282" name="gh" arch="ppc64le">
  <version epoch="0" ver="2.78.0" rel="bp156.2.32.1"/>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1756123200">- Update to version 2.78.0:
  * Add `--force` flag to `gh run cancel` (#11513)
  * Update third-party license versions (#11557)
  * chore(deps): bump github.com/go-viper/mapstructure/v2 (#11556)
  * Merge pull request #11536 from cli/copilot/fix-11535
  * chore(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2
  * Update pkg/cmd/release/verify/verify.go
  * Update pkg/cmd/release/verify-asset/verify_asset.go
  * Hidden trusted root flag for release verify
  * Update Go dependencies to latest versions
  * chore(deps): bump actions/checkout from 4 to 5
  * udpate the test
  * replace /git/refs/tags/ to /git/ref/tags/
  * Update feature_detection.go
  * Update PR tests for v2 projects
  * Base changes for PR project items
  * Update `gh issue view` to show v2 projects
  * PR feedback from @bagtoad
  * Update v1 project detection logic
  * Update govulncheck workflow to scan source code
  * add test for FetchRefSHA
  * Apply suggestion from @Copilot
  * Update docs/install_windows.md
  * Consolidate repo profile, fix headings
  * chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13
  * Update docs on contributing new install methods
  * markdown lint fixes
  * Formatting
  * Initial installation doc refactor
  * Pushing empty commit to run CI
  * Bump Go to 1.24.6
  * Fix linter
  * Update pkg/cmd/search/search.go
  * chore(deps): bump actions/download-artifact from 4 to 5
  * Update docs/triage.md
  * Update docs/triage.md
  * Update issue triage guidelines and label usage
  * fix error for ErrReleaseNotFound when fetching ref
  * Apply suggestion from @Copilot
  * Update .github/workflows/scripts/spam-detection/process-issue.sh
  * docs(search): move search syntax note to `gh search --help`
  * Update spam detection to comment on and close issue
  * Update permissions and events for workflow
  * ci: use `help wanted` label link in comment
  * ci: anchor regexp for `help wanted` label
  * Improve spam detection evals (#11419)
  * v1 project feature detection spike using version
  * docs(help): rename `search-syntax` help topic
  * docs(search): add reference to `gh help search`
  * Add help topic for search syntax in gh commands
  * docs(search): add note for exclusion search syntax
  * Regenerate third-party licenses on trunk pushes
  * chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7</changelog>
</package>
<package pkgid="e96786866c289a45f55e0edd6b564d7cc81a2d0cc7dfb400a07c8c19b9cbb3f3" name="gh" arch="s390x">
  <version epoch="0" ver="2.78.0" rel="bp156.2.32.1"/>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1756123200">- Update to version 2.78.0:
  * Add `--force` flag to `gh run cancel` (#11513)
  * Update third-party license versions (#11557)
  * chore(deps): bump github.com/go-viper/mapstructure/v2 (#11556)
  * Merge pull request #11536 from cli/copilot/fix-11535
  * chore(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2
  * Update pkg/cmd/release/verify/verify.go
  * Update pkg/cmd/release/verify-asset/verify_asset.go
  * Hidden trusted root flag for release verify
  * Update Go dependencies to latest versions
  * chore(deps): bump actions/checkout from 4 to 5
  * udpate the test
  * replace /git/refs/tags/ to /git/ref/tags/
  * Update feature_detection.go
  * Update PR tests for v2 projects
  * Base changes for PR project items
  * Update `gh issue view` to show v2 projects
  * PR feedback from @bagtoad
  * Update v1 project detection logic
  * Update govulncheck workflow to scan source code
  * add test for FetchRefSHA
  * Apply suggestion from @Copilot
  * Update docs/install_windows.md
  * Consolidate repo profile, fix headings
  * chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13
  * Update docs on contributing new install methods
  * markdown lint fixes
  * Formatting
  * Initial installation doc refactor
  * Pushing empty commit to run CI
  * Bump Go to 1.24.6
  * Fix linter
  * Update pkg/cmd/search/search.go
  * chore(deps): bump actions/download-artifact from 4 to 5
  * Update docs/triage.md
  * Update docs/triage.md
  * Update issue triage guidelines and label usage
  * fix error for ErrReleaseNotFound when fetching ref
  * Apply suggestion from @Copilot
  * Update .github/workflows/scripts/spam-detection/process-issue.sh
  * docs(search): move search syntax note to `gh search --help`
  * Update spam detection to comment on and close issue
  * Update permissions and events for workflow
  * ci: use `help wanted` label link in comment
  * ci: anchor regexp for `help wanted` label
  * Improve spam detection evals (#11419)
  * v1 project feature detection spike using version
  * docs(help): rename `search-syntax` help topic
  * docs(search): add reference to `gh help search`
  * Add help topic for search syntax in gh commands
  * docs(search): add note for exclusion search syntax
  * Regenerate third-party licenses on trunk pushes
  * chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7</changelog>
</package>
<package pkgid="f2b8f561f2b95410e886cdab0f4957dc23021bfe1f5f3cc4379ffcf877b918d0" name="gh" arch="src">
  <version epoch="0" ver="2.78.0" rel="bp156.2.32.1"/>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1756123200">- Update to version 2.78.0:
  * Add `--force` flag to `gh run cancel` (#11513)
  * Update third-party license versions (#11557)
  * chore(deps): bump github.com/go-viper/mapstructure/v2 (#11556)
  * Merge pull request #11536 from cli/copilot/fix-11535
  * chore(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2
  * Update pkg/cmd/release/verify/verify.go
  * Update pkg/cmd/release/verify-asset/verify_asset.go
  * Hidden trusted root flag for release verify
  * Update Go dependencies to latest versions
  * chore(deps): bump actions/checkout from 4 to 5
  * udpate the test
  * replace /git/refs/tags/ to /git/ref/tags/
  * Update feature_detection.go
  * Update PR tests for v2 projects
  * Base changes for PR project items
  * Update `gh issue view` to show v2 projects
  * PR feedback from @bagtoad
  * Update v1 project detection logic
  * Update govulncheck workflow to scan source code
  * add test for FetchRefSHA
  * Apply suggestion from @Copilot
  * Update docs/install_windows.md
  * Consolidate repo profile, fix headings
  * chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13
  * Update docs on contributing new install methods
  * markdown lint fixes
  * Formatting
  * Initial installation doc refactor
  * Pushing empty commit to run CI
  * Bump Go to 1.24.6
  * Fix linter
  * Update pkg/cmd/search/search.go
  * chore(deps): bump actions/download-artifact from 4 to 5
  * Update docs/triage.md
  * Update docs/triage.md
  * Update issue triage guidelines and label usage
  * fix error for ErrReleaseNotFound when fetching ref
  * Apply suggestion from @Copilot
  * Update .github/workflows/scripts/spam-detection/process-issue.sh
  * docs(search): move search syntax note to `gh search --help`
  * Update spam detection to comment on and close issue
  * Update permissions and events for workflow
  * ci: use `help wanted` label link in comment
  * ci: anchor regexp for `help wanted` label
  * Improve spam detection evals (#11419)
  * v1 project feature detection spike using version
  * docs(help): rename `search-syntax` help topic
  * docs(search): add reference to `gh help search`
  * Add help topic for search syntax in gh commands
  * docs(search): add note for exclusion search syntax
  * Regenerate third-party licenses on trunk pushes
  * chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7</changelog>
</package>
<package pkgid="1696d3a344d0a8a1794f465beeb39edf26ba199cef219210962b9a074b5d6c9f" name="gh" arch="x86_64">
  <version epoch="0" ver="2.78.0" rel="bp156.2.32.1"/>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1756123200">- Update to version 2.78.0:
  * Add `--force` flag to `gh run cancel` (#11513)
  * Update third-party license versions (#11557)
  * chore(deps): bump github.com/go-viper/mapstructure/v2 (#11556)
  * Merge pull request #11536 from cli/copilot/fix-11535
  * chore(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2
  * Update pkg/cmd/release/verify/verify.go
  * Update pkg/cmd/release/verify-asset/verify_asset.go
  * Hidden trusted root flag for release verify
  * Update Go dependencies to latest versions
  * chore(deps): bump actions/checkout from 4 to 5
  * udpate the test
  * replace /git/refs/tags/ to /git/ref/tags/
  * Update feature_detection.go
  * Update PR tests for v2 projects
  * Base changes for PR project items
  * Update `gh issue view` to show v2 projects
  * PR feedback from @bagtoad
  * Update v1 project detection logic
  * Update govulncheck workflow to scan source code
  * add test for FetchRefSHA
  * Apply suggestion from @Copilot
  * Update docs/install_windows.md
  * Consolidate repo profile, fix headings
  * chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13
  * Update docs on contributing new install methods
  * markdown lint fixes
  * Formatting
  * Initial installation doc refactor
  * Pushing empty commit to run CI
  * Bump Go to 1.24.6
  * Fix linter
  * Update pkg/cmd/search/search.go
  * chore(deps): bump actions/download-artifact from 4 to 5
  * Update docs/triage.md
  * Update docs/triage.md
  * Update issue triage guidelines and label usage
  * fix error for ErrReleaseNotFound when fetching ref
  * Apply suggestion from @Copilot
  * Update .github/workflows/scripts/spam-detection/process-issue.sh
  * docs(search): move search syntax note to `gh search --help`
  * Update spam detection to comment on and close issue
  * Update permissions and events for workflow
  * ci: use `help wanted` label link in comment
  * ci: anchor regexp for `help wanted` label
  * Improve spam detection evals (#11419)
  * v1 project feature detection spike using version
  * docs(help): rename `search-syntax` help topic
  * docs(search): add reference to `gh help search`
  * Add help topic for search syntax in gh commands
  * docs(search): add note for exclusion search syntax
  * Regenerate third-party licenses on trunk pushes
  * chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7</changelog>
</package>
<package pkgid="1faea86f7f8684430701ebe92705c8d538a2344387d8b006768f1e85287c5652" name="gh-bash-completion" arch="noarch">
  <version epoch="0" ver="2.51.0" rel="bp156.2.3.1"/>
  <changelog author="pdostal@suse.com" date="1694088000">- Update to version 2.34.0:
  * Use consistent variable naming
  * `gh status`: show status even if a comment 404s (#7873)
  * build(deps): bump actions/checkout from 3 to 4 (#7937)
  * rename template to mark-template cmd (#7923)
  * Simplify mock jobs response
  * Use "Link" header for pagination completion check
  * Fix pagination resp with "Link" header
  * Refactor GetJobs to use RESTWithNext
  * Add formula-path to homebrew-bump step (#7930)
  * Add JSON output flags to workflow list command (#7902)
  * fix tests
  * no other descriptions have a period
  * mark and unmark project as template
  * Add config clear-cache command (#7693)
  * Allow --disable-wiki flag with --template flag in repo create command (#7886)
  * Reword token invalid message (#7906)
  * 🐛 (repo create)execute clone when readme option is enabled (#7837)
  * Use go-gh prompter package (#7896)
  * pr checks return distinct exit code for PENDING checks (#7866)
  * Properly rename remote for GHES hosts (#7890)
  * Add verbose flag to api cmd (#7826)
  * Fix up Nix installation instructions (#7891)
  * Fetch all jobs on a gh view run --json</changelog>
  <changelog author="pdostal@suse.com" date="1695211200">- Update to version 2.35.0:
  * Cleanup release create around new --notes-from-tag flag (#8016)
  * Document when gh auth login writes oauth token to plain text (#7781)
  * Show full permissions URL in `gh cs create` (#7983)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5
  * moved remoteTagExists under if NotesFromTag exists and added three tests
  * Clarify list repo behavior (#7964)
  * Reinforce not opening PRs without approval on an issue
  * Delete local tag when running `gh release delete --cleanup-tag` (#7884)
  * Add `--all` flag to `alias delete` command (#7900)
  * Move homebrew bump fork to personal repo
  * Revert "Add a test workflow for homebrew bump investigations (#7951)"
  * Add a test workflow for homebrew bump investigations (#7951)
  * Add `gh release create [&lt;tag&gt;] --notes-from-tag`</changelog>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
</package>
<package pkgid="ddda728a07840e5845d8f6edf1c45a7a155bdb2aa41b2d38006cf9c7ed96f279" name="gh-bash-completion" arch="noarch">
  <version epoch="0" ver="2.53.0" rel="bp156.2.6.1"/>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
</package>
<package pkgid="c8727ab131d7702f33d2a2394bec233abb407ae7389d0ac000044b0d0f14481d" name="gh-bash-completion" arch="noarch">
  <version epoch="0" ver="2.55.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
</package>
<package pkgid="7e7ea717097d72e70daf2168f104093c951f9fee512a70b2328b0eff305b8992" name="gh-bash-completion" arch="noarch">
  <version epoch="0" ver="2.57.0" rel="bp156.2.12.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
</package>
<package pkgid="ed9187f44ff2f37d724dfa02402d89229a0b7ecde64727488be915b288ee9200" name="gh-bash-completion" arch="noarch">
  <version epoch="0" ver="2.65.0" rel="bp156.2.17.1"/>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
</package>
<package pkgid="66c4700a2b7104a7f66a99d31eef1ac4a878a3dc160ab92fb7eb9229e58fb68f" name="gh-bash-completion" arch="noarch">
  <version epoch="0" ver="2.66.1" rel="bp156.2.20.1"/>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
</package>
<package pkgid="fa00ffb8228c229b497685e9feed7711c4f1ba8a13302c54d05cc7265396d910" name="gh-bash-completion" arch="noarch">
  <version epoch="0" ver="2.68.1" rel="bp156.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
</package>
<package pkgid="409172590413ef89964c9bf8d9039ed51556d07e1c5b9fbe3e398f16064dde11" name="gh-bash-completion" arch="noarch">
  <version epoch="0" ver="2.74.2" rel="bp156.2.26.1"/>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
</package>
<package pkgid="b6ad3062d7d485f9b9afe30d6954c246310c58722b97b8f6bbc154920d8e6931" name="gh-bash-completion" arch="noarch">
  <version epoch="0" ver="2.76.2" rel="bp156.2.29.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
</package>
<package pkgid="0c90c6cdac437e366f43e21a21b65ef67a9114a03ca784c94388129518ebc06a" name="gh-bash-completion" arch="noarch">
  <version epoch="0" ver="2.78.0" rel="bp156.2.32.1"/>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1756123200">- Update to version 2.78.0:
  * Add `--force` flag to `gh run cancel` (#11513)
  * Update third-party license versions (#11557)
  * chore(deps): bump github.com/go-viper/mapstructure/v2 (#11556)
  * Merge pull request #11536 from cli/copilot/fix-11535
  * chore(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2
  * Update pkg/cmd/release/verify/verify.go
  * Update pkg/cmd/release/verify-asset/verify_asset.go
  * Hidden trusted root flag for release verify
  * Update Go dependencies to latest versions
  * chore(deps): bump actions/checkout from 4 to 5
  * udpate the test
  * replace /git/refs/tags/ to /git/ref/tags/
  * Update feature_detection.go
  * Update PR tests for v2 projects
  * Base changes for PR project items
  * Update `gh issue view` to show v2 projects
  * PR feedback from @bagtoad
  * Update v1 project detection logic
  * Update govulncheck workflow to scan source code
  * add test for FetchRefSHA
  * Apply suggestion from @Copilot
  * Update docs/install_windows.md
  * Consolidate repo profile, fix headings
  * chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13
  * Update docs on contributing new install methods
  * markdown lint fixes
  * Formatting
  * Initial installation doc refactor
  * Pushing empty commit to run CI
  * Bump Go to 1.24.6
  * Fix linter
  * Update pkg/cmd/search/search.go
  * chore(deps): bump actions/download-artifact from 4 to 5
  * Update docs/triage.md
  * Update docs/triage.md
  * Update issue triage guidelines and label usage
  * fix error for ErrReleaseNotFound when fetching ref
  * Apply suggestion from @Copilot
  * Update .github/workflows/scripts/spam-detection/process-issue.sh
  * docs(search): move search syntax note to `gh search --help`
  * Update spam detection to comment on and close issue
  * Update permissions and events for workflow
  * ci: use `help wanted` label link in comment
  * ci: anchor regexp for `help wanted` label
  * Improve spam detection evals (#11419)
  * v1 project feature detection spike using version
  * docs(help): rename `search-syntax` help topic
  * docs(search): add reference to `gh help search`
  * Add help topic for search syntax in gh commands
  * docs(search): add note for exclusion search syntax
  * Regenerate third-party licenses on trunk pushes
  * chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7</changelog>
</package>
<package pkgid="ee933b5309b7698802e09e6e8508e7cea3089beea1815a57eb76232dd3d8c656" name="gh-fish-completion" arch="noarch">
  <version epoch="0" ver="2.51.0" rel="bp156.2.3.1"/>
  <changelog author="pdostal@suse.com" date="1694088000">- Update to version 2.34.0:
  * Use consistent variable naming
  * `gh status`: show status even if a comment 404s (#7873)
  * build(deps): bump actions/checkout from 3 to 4 (#7937)
  * rename template to mark-template cmd (#7923)
  * Simplify mock jobs response
  * Use "Link" header for pagination completion check
  * Fix pagination resp with "Link" header
  * Refactor GetJobs to use RESTWithNext
  * Add formula-path to homebrew-bump step (#7930)
  * Add JSON output flags to workflow list command (#7902)
  * fix tests
  * no other descriptions have a period
  * mark and unmark project as template
  * Add config clear-cache command (#7693)
  * Allow --disable-wiki flag with --template flag in repo create command (#7886)
  * Reword token invalid message (#7906)
  * 🐛 (repo create)execute clone when readme option is enabled (#7837)
  * Use go-gh prompter package (#7896)
  * pr checks return distinct exit code for PENDING checks (#7866)
  * Properly rename remote for GHES hosts (#7890)
  * Add verbose flag to api cmd (#7826)
  * Fix up Nix installation instructions (#7891)
  * Fetch all jobs on a gh view run --json</changelog>
  <changelog author="pdostal@suse.com" date="1695211200">- Update to version 2.35.0:
  * Cleanup release create around new --notes-from-tag flag (#8016)
  * Document when gh auth login writes oauth token to plain text (#7781)
  * Show full permissions URL in `gh cs create` (#7983)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5
  * moved remoteTagExists under if NotesFromTag exists and added three tests
  * Clarify list repo behavior (#7964)
  * Reinforce not opening PRs without approval on an issue
  * Delete local tag when running `gh release delete --cleanup-tag` (#7884)
  * Add `--all` flag to `alias delete` command (#7900)
  * Move homebrew bump fork to personal repo
  * Revert "Add a test workflow for homebrew bump investigations (#7951)"
  * Add a test workflow for homebrew bump investigations (#7951)
  * Add `gh release create [&lt;tag&gt;] --notes-from-tag`</changelog>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
</package>
<package pkgid="10b32b2054cb78ca19a8def7ff36febd39f34c84aa3b3b1f16214b07c487c210" name="gh-fish-completion" arch="noarch">
  <version epoch="0" ver="2.53.0" rel="bp156.2.6.1"/>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
</package>
<package pkgid="89591f464558e56d8835491eda64fb4f28407b6416e55afb7032166d32a16c7b" name="gh-fish-completion" arch="noarch">
  <version epoch="0" ver="2.55.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
</package>
<package pkgid="e4502ef59a3ec52c43472e774b8a2e02441d8250a0d47010224fc27451a23f86" name="gh-fish-completion" arch="noarch">
  <version epoch="0" ver="2.57.0" rel="bp156.2.12.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
</package>
<package pkgid="6d54bc8fabdb5b8cb4001af5da934868b514e7adca068993d21326062cbde53c" name="gh-fish-completion" arch="noarch">
  <version epoch="0" ver="2.65.0" rel="bp156.2.17.1"/>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
</package>
<package pkgid="d6c7bd4a31824f578ef85d3ddc720500dac55955cf6bb7e95fb44e30e11c664e" name="gh-fish-completion" arch="noarch">
  <version epoch="0" ver="2.66.1" rel="bp156.2.20.1"/>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
</package>
<package pkgid="9fae3ad748f1737b56f6b1d56e93cdd496bfc4e2d6df8cd4ad3e8b3d882a5bf0" name="gh-fish-completion" arch="noarch">
  <version epoch="0" ver="2.68.1" rel="bp156.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
</package>
<package pkgid="41d624a271317a51004803802cb6bbe8f9347286c9cbff297b2d03137e7dbc4d" name="gh-fish-completion" arch="noarch">
  <version epoch="0" ver="2.74.2" rel="bp156.2.26.1"/>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
</package>
<package pkgid="677a573b9b619e5fede14a9875e87fbe288c955353b074663a5a2216b7a9c43f" name="gh-fish-completion" arch="noarch">
  <version epoch="0" ver="2.76.2" rel="bp156.2.29.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
</package>
<package pkgid="41df7315102ac56b73059a48e9b483e857bcc45d558bd2704434bc8c2452b967" name="gh-fish-completion" arch="noarch">
  <version epoch="0" ver="2.78.0" rel="bp156.2.32.1"/>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1756123200">- Update to version 2.78.0:
  * Add `--force` flag to `gh run cancel` (#11513)
  * Update third-party license versions (#11557)
  * chore(deps): bump github.com/go-viper/mapstructure/v2 (#11556)
  * Merge pull request #11536 from cli/copilot/fix-11535
  * chore(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2
  * Update pkg/cmd/release/verify/verify.go
  * Update pkg/cmd/release/verify-asset/verify_asset.go
  * Hidden trusted root flag for release verify
  * Update Go dependencies to latest versions
  * chore(deps): bump actions/checkout from 4 to 5
  * udpate the test
  * replace /git/refs/tags/ to /git/ref/tags/
  * Update feature_detection.go
  * Update PR tests for v2 projects
  * Base changes for PR project items
  * Update `gh issue view` to show v2 projects
  * PR feedback from @bagtoad
  * Update v1 project detection logic
  * Update govulncheck workflow to scan source code
  * add test for FetchRefSHA
  * Apply suggestion from @Copilot
  * Update docs/install_windows.md
  * Consolidate repo profile, fix headings
  * chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13
  * Update docs on contributing new install methods
  * markdown lint fixes
  * Formatting
  * Initial installation doc refactor
  * Pushing empty commit to run CI
  * Bump Go to 1.24.6
  * Fix linter
  * Update pkg/cmd/search/search.go
  * chore(deps): bump actions/download-artifact from 4 to 5
  * Update docs/triage.md
  * Update docs/triage.md
  * Update issue triage guidelines and label usage
  * fix error for ErrReleaseNotFound when fetching ref
  * Apply suggestion from @Copilot
  * Update .github/workflows/scripts/spam-detection/process-issue.sh
  * docs(search): move search syntax note to `gh search --help`
  * Update spam detection to comment on and close issue
  * Update permissions and events for workflow
  * ci: use `help wanted` label link in comment
  * ci: anchor regexp for `help wanted` label
  * Improve spam detection evals (#11419)
  * v1 project feature detection spike using version
  * docs(help): rename `search-syntax` help topic
  * docs(search): add reference to `gh help search`
  * Add help topic for search syntax in gh commands
  * docs(search): add note for exclusion search syntax
  * Regenerate third-party licenses on trunk pushes
  * chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7</changelog>
</package>
<package pkgid="0c32b90f7e400f763e6fdd95e98ed701bea16db21eafa08ae485a8a589b6760c" name="gh-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.51.0" rel="bp156.2.3.1"/>
  <changelog author="pdostal@suse.com" date="1694088000">- Update to version 2.34.0:
  * Use consistent variable naming
  * `gh status`: show status even if a comment 404s (#7873)
  * build(deps): bump actions/checkout from 3 to 4 (#7937)
  * rename template to mark-template cmd (#7923)
  * Simplify mock jobs response
  * Use "Link" header for pagination completion check
  * Fix pagination resp with "Link" header
  * Refactor GetJobs to use RESTWithNext
  * Add formula-path to homebrew-bump step (#7930)
  * Add JSON output flags to workflow list command (#7902)
  * fix tests
  * no other descriptions have a period
  * mark and unmark project as template
  * Add config clear-cache command (#7693)
  * Allow --disable-wiki flag with --template flag in repo create command (#7886)
  * Reword token invalid message (#7906)
  * 🐛 (repo create)execute clone when readme option is enabled (#7837)
  * Use go-gh prompter package (#7896)
  * pr checks return distinct exit code for PENDING checks (#7866)
  * Properly rename remote for GHES hosts (#7890)
  * Add verbose flag to api cmd (#7826)
  * Fix up Nix installation instructions (#7891)
  * Fetch all jobs on a gh view run --json</changelog>
  <changelog author="pdostal@suse.com" date="1695211200">- Update to version 2.35.0:
  * Cleanup release create around new --notes-from-tag flag (#8016)
  * Document when gh auth login writes oauth token to plain text (#7781)
  * Show full permissions URL in `gh cs create` (#7983)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5
  * moved remoteTagExists under if NotesFromTag exists and added three tests
  * Clarify list repo behavior (#7964)
  * Reinforce not opening PRs without approval on an issue
  * Delete local tag when running `gh release delete --cleanup-tag` (#7884)
  * Add `--all` flag to `alias delete` command (#7900)
  * Move homebrew bump fork to personal repo
  * Revert "Add a test workflow for homebrew bump investigations (#7951)"
  * Add a test workflow for homebrew bump investigations (#7951)
  * Add `gh release create [&lt;tag&gt;] --notes-from-tag`</changelog>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
</package>
<package pkgid="a4a74e252649435b1fdc3a35ada99c2ccb5241ddc17f24a639ea6b4e0c309243" name="gh-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.53.0" rel="bp156.2.6.1"/>
  <changelog author="pdostal@suse.com" date="1696420800">- Update to version 2.36.0:
  * update(run): Use attempt input when fetching jobs (#7831)
  * Bubble up return value from inner function calls in runEditItem
  * Update pkg/cmd/pr/create/create.go
  * pkg/cmd/root: fix startup panic (#8105)
  * Split clearing item, updating draft item and updating item values into individual functions for better readability; refactor field ID and project ID presence check into a separate function
  * Document clear flag in long form help as well
  * Add clear flag usage example
  * Move field value flag and clear flag exclusivity one level higher up to RunE
  * Use camelCase for fields
  * docs: update the details of fill and fill-first
  * Forward codespace ports over Dev Tunnels
  * Update triage.md
  * Support standard output format flags for secret and deploy-key list
  * docs: update the flag `--fill` docs
  * Show cancelled checks (#7960)
  * Return HTTP errors properly for some commands (#8037)
  * test: Add unit test for cache.ExportData
  * cache/delete: percent-encode keys
  * build(deps): bump mislav/bump-homebrew-formula-action from 2 to 3
  * Hint adding codespace scope to auth login (#7961)
  * Tests for the new clear flag
  * Driveby unrelated update: when both field ID and project ID are missing, specify that it's necessary to update the field value
  * Introduce clear flag on 'project item-edit' command to remove field value
  * feat(cache): Add JSON exporting support for cache list</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699617600">- update to 2.38.0:
  * `extension install` no longer errors unhelpfully if the
    extension is already installed
  * All tables now have headers
  * `project` commands have a clearer error message when no owner
    can be resolved
  * `workflow run` now presents a select for `choice` workflow
    input types
  * `codespace create` no longer polls for additional codespace
    permissions unnecessarily
  * `go install` now works with the removal of our crypto fork
- update to 2.37.0:
  * `project`: Remove `template` field from `--format=json`
    output
  * In v2.34.0 we introduced the `template` field when outputing
    projects to JSON, unfortunately we forgot to take into account
    our GHES users. This field does not exist on GHES 3.8 and older.
    Including this field in our queries and output broke nearly
    all the `project` commands for users targeting these older
    versions of GHES. As we try our hardest to keep `gh` compatible
    with all * non-deprecated GHES versions this was a pretty big
    mistake.  In order to fix it we are reverting the querying and
    exporting of the `template` field for `project` commands. We
    apologize for the inconvenience this may cause, and plan to
    bring back this field once GHES 3.8 gets deprecated.
  * `repo create`: Allow `--disable-issues` and `--template`
    flags to be used together
  * `repo create`: Allow `--homepage` and `--template` flag to be
    used together
  * `repo create`: Allow creating repositories from templates in
    interactive mode
  * `repo fork`: Set default repo when forking repo
  * `codespace`: Migrate all Codespaces operations from Live
    Share to Dev Tunnels
  * `codespace create`: Poll permission acceptance endpoint on
    codespace creation
  * `pr create`: Remove duplicates targets for push survey
  * `pr create`: Fix typo in documentation
  * `browse`: Do not use relative paths when `--repo` flag is
    used</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
</package>
<package pkgid="847a12b93ca2a1689cc761452833592bdeaca876dbb7f14b21e8a9a02853dd55" name="gh-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.55.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1702555200">- update to 2.40.1:
  * add Multiple Account Support
  * fix build after 2024-01-06
  * Full changelog https://github.com/cli/cli/compare/v2.38.0...v2.40.1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Restore _service to generate changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
</package>
<package pkgid="6f2f056adabfa3f8fef787c498ea2f87c30ef320ea0e28071f25b97ab194adae" name="gh-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.57.0" rel="bp156.2.12.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704888000">- Update to version 2.41.0:
  * Update deployment.yml
  * Update pkg/cmd/browse/browse.go
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#8473)
  * Ensure Windows sign script fails based on signtool
  * Update deployment workflow for final HSM solution
  * Fix signtool invocation
  * Fix sign script fail conditions
  * Fix HSM goreleaser calling sign script
  * Fix HSM Windows signing
  * Fix issue sourcing signtool for Windows signing
  * build(deps): bump github/codeql-action from 2 to 3
  * Verify the downloaded zip for `gh run view --log`
  * Add missing PowerShell file from previous commit
  * Unify Windows sign process on signtool
  * Add more help message to browse command</changelog>
  <changelog author="pdostal@suse.com" date="1705320000">- Update to version 2.42.0:
  * Prevent downloading releases with assets that match windows reserved filenames (#8517)
  * Support template, jq flags with standard format flag (#7832)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1705492800">- Update to version 2.42.1:
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707998400">- Update to version 2.43.1:
  * Avoid parsing create or update label http response
  * go mod tidy
  * Upgrade cli/go-gh to v2.5.0 for home-manager fix
  * Fix linting error
  * Parse SSH args before creating the shell
  * Send activity signals during non-interactive codespace SSH command
  * build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2
  * Specify refspec to push to the correct branch in the event of a conflicting tag
  * Update Arch repo to [extra]
  * added URL for newly created repo (#8574)
  * build(deps): bump actions/cache from 3 to 4 (#8594)
  * Add force flag to setup-git command (#8552)
  * fix: Prevent nil dereference in `pr view`. (#8566)
  * search repos command add usage example for --archived=false (#8391)
  * Add --json export flags to release list command (#8474)
  * Add json export flags to variable list command (#8516)
  * build(deps): bump actions/download-artifact from 3 to 4 (#8466)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#8467)
  * Remove project JSON formatting objects (#8541)
  * Fix some typos raised by codespell
  * Add Webi as an option for installation (#8555)
  * Align devcontainer Go version with go.mod (#8570)
  * Move create codespace permission opt out behind `else` to fix token permissions
  * chore: Unify calling gh in examples (#8560)
  * Mark-up `gh-config` settings with backticks</changelog>
  <changelog author="pdostal@suse.com" date="1708344000">- Update to version 2.44.1:
  * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707
- Update to version 2.44.0:
  * Feature: added Order flag for release list command by @leevic31 in #8632
  * autofill with body by @guerinoni in #8423
  * Add default values to web manual and man pages by @zsloane in #8395
  * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
  * Documentation for built-in aliases by @Rebeccasun31 in #8367
  * Add more detail to fork failure message by @chrisroat in #8614
  * feat: Add cache key option to gh cache list by @toshimaru in #8667</changelog>
  <changelog author="pdostal@suse.com" date="1709640000">- Update to version 2.45.0:
  * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)
  * Support `project view --web` with TTY (#8773)
  * Handle case: some system set 600 mod for new file.
  * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos
  * Make minor cache list ref flag adjustments
  * Update incorrect regex comment for client Commits
  * Use regex to split apart the git client Commit logs
  * Use null byte separators when fetching comments from git
  * Add new tests to git client Commits
  * Remove unnecessary split conditional from client Commits
  * Extract new test helper for git client Commits
  * redirect users to the `gh environment` command
  * Revert "make comments in the default config file more informative"
  * make comments in the default config file more informative
  * fixed whitespace
  * Clarify helptext for search prs regarding archived repos
  * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function.
  * Remove mainLoop label from garden
  * feat: Add `ref` option to `gh cache list`
  * chore: simplify parameter `owner`
  * Support for `[HOST/]OWNER/REPO` format
  * Replace `assert` with `require` in testing
  * Simplify install command for Debian &amp; Ubuntu
  * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag
  * Fix printed project number
  * Support for directory based repo and `GH_REPO` env variable
  * Change the output of link` and `unlink`
  * Refactor `OrganizationTeam`
  * Replace `httpmock` with `gock` in testing
  * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go`
  * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team
  * Fix wording
  * Add testing for link and unlink
  * Support for team
  * Support for unlink
  * Remove support for team
  * Link Project to Repository or Team Command</changelog>
  <changelog author="pdostal@suse.com" date="1711108800">- Update to version 2.46.0:
  * Include draft ID in project item list JSON (#8754)
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
  * Document run watch and view not supporting fine grained PATs
  * Document auth switch behaviour for two or more accounts
  * Improve discovery of `gh auth status`
  * grammar: avoid e.g.+etc. together
  * Fix the description of `gh release upload`
  * Bump go-keyring to fix race condition
  * feat: support `dry-run` in gh `pr create` (#8376)
  * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
  * fixed doc string
  * remove repetitive word
  * Fix breaking test for PR/issue # change
  * Enhance 2nd round of issue and PR number output
  * Apply first round of owner/repo#number consistency
  * fix: format files
  * feat(merge): add owner/repo in prompt</changelog>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
</package>
<package pkgid="3bc580ddb8c177b4f82c44e5f2d0c38ce9fda00e3eba8869ced7cca023560eb3" name="gh-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.65.0" rel="bp156.2.17.1"/>
  <changelog author="pdostal@suse.com" date="1712232000">- Update to version 2.47.0:
  * Bump go-gh to v2.8.0 and go mod tidy
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1
  * Bump glamour to v0.7.0 and go mod tidy
  * build(deps): bump github.com/google/go-containerregistry
  * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1
  * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
  * Rely on go.mod go version in all workflows (#8911)
  * Upgrade to Go 1.22 (#8836)
  * build(deps): bump github.com/docker/docker
  * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
  * gh-attestation cmd integration (#8698)
  * fix segfault in `gh repo rename`
  * Bump go-gh to 2.7.0
  * Fix typo in auth switch help example</changelog>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
</package>
<package pkgid="101238dabbf778586b01fbd5f40365536ae3aab8482ca52b5998338f0c99144b" name="gh-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.66.1" rel="bp156.2.20.1"/>
  <changelog author="pdostal@suse.com" date="1713355200">- Update to version 2.48.0:
  * Update install_linux.md (#8950)
  * Remove unnecessary --help comment
  * Fix `go` directive in `go.mod` (#8956)
  * Use `filepath.Join` to support different platforms
  * Run `go mod tidy`
  * Refactor into table tests
  * Explain `--skip-ssh-key` usage in long doc
  * Tidy `go.mod`
  * Fix cache contention in Go CI jobs
  * Fix `attestation` cmd offline unit test failure (#8933)
  * Change subcommands default to be more user friendly
  * Add unit test, update naming, ensure DSSE envelope is in-toto
  * Updates from linter feedback
  * Add support to `attestation` command for more predicate types.
  * Close zip file in run view tests
  * Ensure run log cache creates cache dir if it doesn't exist
  * Test `--skip-ssh-key` is captured correctly
  * Add test to verify skipped SSH key prompts
  * Add `--skip-ssh-key` to options
  * Add `SkipSSHKey` field to `LoginOptions`
  * Add tests for non-happy field paths
  * Fix api cache test
  * Use testify in git url tests
  * Ensure cache dir is always available in RunLogCache
  * Remove RunLogCache interface
  * Use real Run Log Cache in run view tests
  * Capture error on Run Log Cache Exists
  * Rework Run Log Cache so that cache dir is injected
  * Expose CacheDir on Config
  * Minorly refactor scheme normalization in git ParseURL
  * Test for parsing error in git ParseURL
  * Remove naked returns from git ParseURL
  * Fix parsing IPv6 remote URLs (#8893)
  * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919)
  * Add comment to explain `showSelectedReposInfo` assignment
  * Rename const to avoid CodeQL error
  * Add tests to verify `numSelectedRepos` is populated when necessary
  * Populate `numSelectedRepos` only if needed
  * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2
  * Run defers in queue
  * Resolve PR comments
  * Wrap JSON arrays, objects in array with --slurp
  * Resolve PR comments
  * Clarify --merge-pages docs
  * Replace --paginate-all with --merge-pages
  * Resolve test issues
  * Add more JSON merge tests
  * Move jsonmerge package to internal
  * Merge JSON responses from `gh api`
  * Add tests for `FindByRepo`
  * Apply suggestions from code review
  * Improve error message returned by `FindByRepo`
  * Add test cases to verify exported JSON has non-zero `numSelectedRepos`
  * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected
  * Anchor the log filename to the start
  * Add pr url pattern
  * Test pr url lock
  * update example for deeply nested array update
  * allow multiple items in nested array</changelog>
  <changelog author="pdostal@suse.com" date="1714564800">- Update to version 2.49.0:
  * Document repo clone protocol behaviour
  * whitespace aligment for inspect/inspect.go
  * whitespace alignment in attestation/attestation.go
  * Added tweaked note to tuf-root-verify
  * Tweaked gh attestation help strings to generate nicer cli manual site.
  * Update attestation's beta designation
  * Update cli/go-gh to v2.9.0
  * Add beta designation on attestation command set
  * Test `gh at verify -b` does not require auth
  * Use ghinstance package for attestation host checks
  * Test cmdutil.IsAuthCheckEnabled cases
  * Fix issue with closing pager stream (#9020)
  * Support long URLs in `gh repo clone` (#9008)
  * check for enterprise host
  * Add missing title field for projectv2
  * Match query fields with `ProjectV2` type
  * Include `URL` in `ProjectV2` type
  * Include `projectsV2` in GraphQL query
  * Remove unnecessary defensive check
  * Test verification failures when attestations are bad
  * Rework sigstore tests for easier maintenance
  * Make error more obvious when bundle has wrong extension
  * Add colon at the end of secret prompts (#9004)
  * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests
  * proof of concept for flag-level disable auth check
  * remove hidden flag from attestation command (#8998)
  * Update `gh attestation verify` output (#8991)
  * Just base verification policy on trusted root, not bundle
  * Support offline mode for `gh attestation verify`
  * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2
  * `gh attestation tuf-root-verify` offline test fix (#8975)
  * Update `sigstore-go` dependency to v0.3.0 (#8977)
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * Make it clearer that job flag is meant to be an ID
  * Ignore run-id when providing also job for rerun</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
</package>
<package pkgid="bf8b9df99e466e2dde13db26c6f8fcfdc727b0cddb78d7c3a726cbc0fbc17e00" name="gh-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.68.1" rel="bp156.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715256000">- Reenable all tests
  https://github.com/cli/cli/issues/8928 looks resolved.
- Update to version 2.49.1:
  * Fix `attestation verify` source repository check bug
  * Fix unused params across project
  * Add support for jobs with long filenames
  * Run `attestation` command set integration tests separately
  * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
  * Adjust short and long to be the same
  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account</changelog>
  <changelog author="pdostal@suse.com" date="1715601600">- Update to version 2.49.2:
  * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2
  * Add further docs to Option type
  * Comment further on config changes
  * Remove unnecessary config list variable
  * Fix mistaken find and replace for Option type
  * Fix repo fork to use remote protocol if none configured
  * Avoid reconstructing config Options on each use
  * Make config list less fallible
  * Provide more type safety around config values
  * Move config interfaces into gh package (#9060)
  * Fix typos
  * Creating doc to capture Codespace usage guidance
  * Fix test function name
  * Add test to verify JSON fields section is rendered in Markdown
  * Output `JSON Fields` section in Markdown
  * Add test to verify JSON fields section is rendered
  * Add `jsonCmd` test command variable
  * Output `JSON Fields` section
  * Output `JSON FIELDS`
  * Add tests to verify proper `help:json-fields` annotations
  * Add `help:json-fields` annotation
  * Add `FormatSlice` function
  * Add --latest=false example to `release create` command
  * Update create.go
  * Add --latest=false to `gh release create` docs</changelog>
  <changelog author="pdostal@suse.com" date="1717070400">- Update to version 2.50.0:
  * Clarify Mac OS Installer packages are unsigned
  * Build completions during release on macos
  * Add build provenance for gh CLI releases (#9087)
  * Add integration tests for `gh attestation verify` shared workflow use case (#9107)
  * Update readme about MacOS pkg
  * Remove `v` prefix when `pkgmacos` is called
  * Integrate argument array to remove duplicate code
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
  * Added native min os version blocking
  * Fix distribution.xml + min macos version requirements
  * Added make macospkg target
  * Fix directory already exists
  * Add a `gh variable get FOO` command (#9106)
  * Add comment to pr diff regex
  * Update regex in changedFilesNames to handle quoted paths
  * fix: rename the `Attempts` field to `Attempt`; expose in `gh run view` and `gh run ls` (#8905)
  * Change minimum build script macOS version
  * Cleanup pkgmacos build script
  * Removed redundant specifications
  * Fix indentation
  * Undo goreleaser change
  * feat: add support for stateReason in `gh pr view` (#9080)
  * Fix indentation
  * Fix indentation
  * Indentation fix
  * Update choice title
  * Update pkg title
  * update generated content for man pages and website
  * williammartin simplifications
  * remove no-op if clause that returns 'No Aliases'
  * Conditionalize references, remove redundant alias
  * list the various alias permutations for the command and subcommands
  * Remove TODO and add comment on LoginFlow tests
  * Comment the purpose of the helper config contract
  * Test git credentials are configured in LoginFlow
  * Add HelperConfig contract test and FakeHelperConfig
  * Inject GitCredentialFlow to LoginFlow as test seam
  * Removed unused param flagDryRun from upgradeFunc
  * Added summary TTY message to tests
  * Added TTY message to summarize checking extension upgrades
  * Add Helper test for Windows
  * Add tests for gitcredentials Updater
  * Fix mistaken git installation error check
  * Move gitcredentials HelperConfig and add tests
  * Comment the new gitcredentials package
  * Comment the git credential flow
  * Remove unnecessary credential setup private method
  * Use tighter interface in setup-git
  * Rename gitcredentials Configure to ConfigureOurs
  * Make gitcredential helper smarter
  * Move fetching configured helper into gitcredentials
  * Extract units for configuring and updating git credential helpers
  * removed tty message
  * Implement ExportData to filter json fields
  * fix: rename fields list
  * feat: add json output for PR checks
  * Fix doc bug for gh run watch
  * Fix typo in macOS pkg installer build script
  * Add macOS pkg installer to deployment</changelog>
  <changelog author="pdostal@suse.com" date="1718366400">- Update to version 2.51.0:
  * Gracefully degrade when fetching annotations fails due to 403 (#9113)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
  * build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
  * Bump go-keyring to fix keepassxc prompt confirmation
  * build(deps): bump goreleaser/goreleaser-action from 5 to 6
  * replaced deprecated --json-result flag with --format=json in the gh at docstring.
  * build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
  * Specify rpm repository to avoid conflicts with community repositories
  * Add `signer-repo` and `signer-workflow` flags to `gh attestation verify` (#9137)
  * Ensure signed RPMs have attestations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720267200">- Update to version 2.52.0:
  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`</changelog>
  <changelog author="pdostal@suse.com" date="1721304000">- Update to version 2.53.0:
  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test
    due to https://github.com/cli/cli/issues/8928
  * Fix bsc#1227035 - VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp:
    url might write sensitive information to log file
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * build(deps): bump github.com/hashicorp/go-retryablehttp
  * Update .github/ISSUE_TEMPLATE/bug_report.md
  * Add GH_DEBUG to issue template
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`</changelog>
  <changelog author="pdostal@suse.com" date="1722686400">- Reenable TestGetTrustedRoot test
- Update to version 2.54.0:
  * update test and remove logic to check SourceRepositoryOwnerURI is empty string
  * update test
  * minor fix
  * update test
  * added
  * handle attest case insensitivity
  * Fix missing variable
  * Use closure-scoped variable to catch `--remove-milestone` option
  * Use closure-scoped variable to catch `--remove-milestone` option
  * build(deps): bump github.com/google/go-containerregistry
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Add `--remove-milestone` option
  * Improve `--remove-milestone` option description
  * Point to `Editable.MilestoneId` method
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
  * Update sigstore-go in gh CLI to v0.5.1 (#9366)
  * Handle `--bare` clone targets (#9271)
  * Slightly clarify when CLI will exit with 4
  * Export databaseId for releases
  * Alphabetise release json fields
  * Add test for release view json export fields
  * Expose fullDatabaseId for PR json export
  * Add examples for template usage in PR and issue creation
  * document exit code behavior
  * Update documentation for gh api PATCH
  * Exit with 1 on authentication failure
  * Verify `--milestone` and `--remove-milestone` are not assignable at the same time
  * Assert correct parsing of `--remove-milestone` option
  * Add `--remove-milestone` option
  * Remove unused expected `output` from test case (with `wantsErr: true`)
  * Verify `--body` and `--body-file` are not assignable at the same time
  * Remove attestation test that requires being online (#9340)
  * Remove redundant whitespace</changelog>
  <changelog author="pdostal@suse.com" date="1724241600">- Update to version 2.55.0:
  * Add flox to linux installation instructions
  * Update pkg/cmd/issue/develop/develop.go
  * Update api/queries_branch_issue_reference.go
  * add testing
  * fix behavior for `issue develop -b non-exist-branch`
  * Describe bucket and state JSON fields in pr checks command
  * Fix pr checks exit code (#9452)
  * Add a note about external contributors to `working-with-us.md`
  * Update attestation TUF root
  * include required permissions to generate attestations
  * build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 (#9459)
  * Do not generate build attestations for otherBinWorkflow.yml
  * Use latest checkout version, generate attestations, and specify go version file input.
  * Update `gh search issues --project` flag doc to specify `owner/number` syntax
  * Update `gh search prs --project` flag doc to specify `owner/number` syntax
  * build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1
  * Minor grammatical fix
  * Add test cases for PGP, SSH and X.509 signatures
  * Explain why not looking for signature begin marker
  * Wrap flags with backticks, continued
  * Replace `--project.*` flags' `name` with `title` in docs (#9443)
  * Change to requiring bundle v0.2
  * Fix tests
  * Require Sigstore Bundle v0.3 when verifying with `gh attestation`
  * Change `gh repo set-default --view` to print to `stderr` when no default exists (#9431)
  * Document that `gh run download` downloads the latest artifact by default
  * Deduplicate the initialization of editor mode
  * Update docs/triage.md
  * Add Acceptance Criteria requirement to triage.md for accepted issues
  * Add `pr create --editor`
  * build(deps): bump github.com/google/go-containerregistry
  * Fix host handling in variable and secret delete
  * Unify use of tab indent in non-test source files
  * Update `gh variable get` to use repo host
  * build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0
  * Add Flox as an installation option
  * Update tests with changes to `gitTagInfo` function
  * Add example for `--notes-from-tag`
  * Add test for `gitTagInfo`
  * Use signature-stripped tag annotation content</changelog>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
</package>
<package pkgid="fd15acb2ddfd67930684b6abbe51ed5e3abd8b974a8158510b00791e9bb2df31" name="gh-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.74.2" rel="bp156.2.26.1"/>
  <changelog author="pdostal@suse.com" date="1725969600">- Update to version 2.56.0:
  * Check for nil values to prevent nil dereference panic
  * build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
  * Update linux install to point to GPG troubleshoot
  * Revert "Remove note explaining 2 year old GPG ID change"
  * Remove note explaining 2 year old GPG ID change
  * Rename ProtobufBundle to Bundle
  * Upgrade to sigstore-go v0.6.1
  * `gh attestation verify` handles empty JSONL files (#9541)
  * verify 2nd artifact without swapping order (#9532)
  * chore: fix some function names
  * Improve the help message for -F (#9525)
  * build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#9518)
  * "offline" verification using the bundle of attestations without any additional handling of the file (#9523)
  * Drop surplus trailing space char in flag names in web
  * Remove `Internal` from `gh repo create` prompt when owner is not an org (#9465)
  * Fix doc typo for `repo sync`
  * Quote repo names consistently in `gh repo sync` stdout (#9491)
  * fixed the test
  * update error message
  * rename flag to bundle-from-oci
  * fix the trimming of log filenames for `gh run view`
  * Check http scheme as well
  * Fix tests
  * Always print URL scheme to stdout
  * udpate the options
  * addded more test
  * minor fixed
  * minor fixed
  * added test
  * clean naming
  * add contain check
  * refactor the logic and logging
  * tmp</changelog>
  <changelog author="pdostal@suse.com" date="1726660800">- Update to version 2.57.0:
  * Update go-gh to use api subdomains
  * Use api subdomains for commands using ghinstance package
  * Add test for extension install fallback to amd64 on darwin
  * Stub hasRosetta for tests
  * Refactor conditions
  * suppress att verify output when no tty
  * add att verify test for custom OIDC issuer
  * build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2
  * Suggest installing Rosetta when extension installation fails due to missing `darwin-arm64` binary, but a `darwin-amd64` binary is available
  * This commit introduces tenancy aware attestation policy building.
  * use sigstore-go v0.6.2
  * check specific err
  * check err in GetLocalAttestations
  * go mod tidy
  * check for sigstore-go validation errs
  * get latest sigstore-go commit
  * handle os.PathError in GetLocalAttestations
  * Move non-integration test to different test file
  * print verify err
  * check for os.PathError
  * dont print err content
  * update bundle file parsing err messages
  * Expand active test cases
  * Added `--active` flag to the `gh auth status` command</changelog>
  <changelog author="pdostal@suse.com" date="1727870400">- Update to version 2.58.0:
  * build(deps): bump github.com/theupdateframework/go-tuf/v2
  * Include `dnf5` commands
  * Add GPG key instructions to appropriate sections
  * Update docs language to remove possible confusion around 'where you log in'
  * Change conditional in promptForHostname to better reflect prompter changes
  * Shorten language on Authenticate with a GitHub host.
  * Update language on docstring for `gh auth login`
  * Change prompts for `gh auth login` to reflect change from GHE to Other
  * Sentence case 'Other' option in hostname prompt
  * build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4
  * Add documentation explaining how to use `hostname` for `gh auth login`
  * Replace "GitHub Enterprise Server" with "other" in `gh auth login` prompt
  * fix tenant-awareness for trusted-root command
  * Fix test
  * Update pkg/cmd/extension/manager.go
  * Update comment formatting
  * Use new HasActiveToken method in trustedroot.go
  * Add HasActiveToken method to AuthConfig interface
  * Add HasActiveToken to AuthConfig.
  * Improve error presentation
  * Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform
  * Update pkg/cmd/attestation/trustedroot/trustedroot_test.go
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5
  * enforce auth for tenancy
  * disable auth check for att trusted-root cmd
  * better error for att verify custom issuer mismatch
  * Enhance gh repo create docs, fix random cmd link</changelog>
  <changelog author="pdostal@suse.com" date="1730030400">- Update to version 2.60.1:
  * Update testscript to use hard fork
  * Note token redaction in Acceptance test README
  * Refactor gpg-key delete to align with ssh-key delete
  * Add acceptance tests for org command
  * Adjust environment help for host and tokens (#9809)
  * Add SSH Key Acceptance test
  * Add Acceptance test for label command
  * Add acceptance test for gpg-key
  * Update go-internal to redact more token types in Acceptance tests
  * Address PR feedback
  * Clarify `gh` is available for GitHub Enterprise Cloud
  * Remove comment from gh auth logout
  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  * Use forked testscript for token redaction
  * Use new GitHub preview terms in working-with-us.md
  * Use new GitHub previews terminology in attestation
  * Test json flags for repo view and list
  * Clean up auth-login-logout acceptance test with native functionality
  * Add --token flag to `gh auth login` to accept a PAT as a flag
  * Setup acceptance testing for auth and tests for auth-token and auth-status
  * Update variable testscripts based on secret
  * Check extOwner for no value instead
  * Fix tests for invalid extension name
  * Refactor to remove code duplication
  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  * Minor tweaks, added backoff to getTrustDomain
  * added test for verifying we do 3 retries when fetching attestations.
  * Fix single quote not expanding vars
  * Added constant backoff retry to getAttestations.
  * Address @williammartin PR feedback
  * wip: added test that fails in the absence of a backoff.
  * add validation for local ext install
  * feat: add ArchivedAt field to Repository struct
  * Refactor `gh secret` testscript
  * Wrap true in '' in repo-fork-sync
  * Rename acceptance test directory from repos to repo
  * Remove unnecessary flags from repo-delete testscript
  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  * Wrap boolean strings in '' so it is clear they are strings
  * Remove unnecessary gh auth setup-git steps
  * Cleanup some inconsistencies and improve collapse some functionality
  * Add acceptance tests for repo deploy-key add/list/delete
  * Add acceptance tests for repo-fork and repo-sync
  * Add acceptance test for repo-set-default
  * Add acceptance test for repo-edit
  * Add acceptance tests for repo-list and repo-rename
  * Acceptance testing for repo-archive and repo-unarchive
  * Add acceptance test for repo-clone
  * Added acceptance test for repo-delete
  * Added test function for repos and repo-create test
  * Implement acceptance tests for search commands
  * Remove . from test case for TestTitleSurvey
  * Clean up Title Survey empty title message code
  * Add missing test to trigger acceptance tests
  * Add acceptance tests for `gh variable`
  * Minor polish / consistency
  * Fix typo in custom command doc
  * Refactor env2upper, env2lower; add docs
  * Update secret note about potential failure
  * Add testscripts for `gh secret`, helper cmds
  * Remove stdout assertion from release
  * Rename test files
  * Add acceptance tests for `release` commands
  * Implement basic API acceptance test
  * Remove unnecesary mkdir from download Acceptance test
  * Remove empty stdout checks
  * Adjust sleeps to echos in Acceptance workflows
  * Use regex assert for enable disable workflow Acceptance test
  * Watch for run to end for cancel Acceptance test
  * Include startedAt, completedAt in run steps data
  * Rewrite a sentence in CONTRIBUTING.md
  * Add filtered content output to docs
  * sleep 10s before checking for workflow run
  * Update run-rerun.txtar
  * Create cache-list-delete.txtar
  * Create run-view.txtar
  * Create run-rerun.txtar
  * Create run-download.txtar
  * Create run-delete.txtar
  * Remove IsTenancy and relevant tests from gists as they are unsupported
  * Remove unnecessary code branches
  * Add ghe.com to tests describing ghec data residency
  * Remove comment
  * auth: Removed redundant ghauth.IsTenancy(host) check
  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  * Upgrade go-gh version to 2.11.0
  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  * Fix issue creation with metadata regex
  * Create run-cancel.txtar
  * Create workflow-run.txtar
  * Create workflow-view.txtar
  * implement workflow enable/disable acceptance test
  * implement base workflow list acceptance test
  * Add comment to acceptance make target
  * Resolve PR feedback
  * Acceptance test issue command
  * Support GH_ACCEPTANCE_SCRIPT
  * Ensure Acceptance defer failures are debuggable
  * Add acceptance task to makefile
  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  * Ensure pr create with metadata has assignment
  * Document sharedCmds func in acceptance tests
  * Correct testscript description in Acceptance readme
  * Add link to testscript pkg documentation
  * Add VSCode extension links to Acceptance README
  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  * Acceptance test PR list
  * Support skipping Acceptance test cleanup
  * Acceptance test PR creation with metadata
  * Suggest using legacy PAT for acceptance tests
  * Add host recommendation to Acceptance test docs
  * Don't append remaining text if more matches
  * Highlight matches in table and content
  * Split all newlines, and output no-color to non-TTY
  * Print filtered gists similar to code search
  * Show progress when filtering
  * Simplify description
  * Disallow use of --include-content without --filter
  * Improve help docs
  * Refactor filtering into existing `gist list`
  * Improve performance
  * Add `gist search` command
  * Fix api tests after function signature changes
  * Return nil instead of empty objects when err
  * Fix license list and view tests
  * Validate required env vars not-empty for Acceptance tests
  * Add go to test instructions in Acceptance README
  * Apply suggestions from code review
  * Error if acceptance tests are targeting github or cli orgs
  * Add codecoverage to Acceptance README
  * Isolate acceptance env vars
  * Add Writing Tests section to Acceptance README
  * Add Debug and Authoring sections to Acceptance README
  * Acceptance test PR comment
  * Acceptance test PR merge and rebase
  * Note syntax highlighting support for txtar files
  * Refactor acceptance test environment handling
  * Add initial acceptance test README
  * Use txtar extension for testscripts
  * Support targeting other hosts in acceptance tests
  * Use stdout2env in PR acceptance tests
  * Acceptance test PR checkout
  * Add pr view test script
  * Initial testscript introduction
  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  * Add examples for creating `.gitignore` files
  * Update help for license view
  * Refactor http error handling
  * implement `--web` flag for license view
  * Fix license view help doc, add LICENSE.md example
  * Update help and fix heredoc indentation
  * Add SPDX ID to license list output
  * Fix ExactArgs invocation
  * Add `Long` for license list indicating limitations
  * Update function names
  * Reverse repo/shared package name change
  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  * Bump cli/oauth to 1.1.1
  * Add test coverage for TitleSurvey change
  * Fix failing test for pr and issue create
  * Make the X in the error message red and print with io writer
  * Handle errors from parsing hostname in auth flow
  * Apply suggestions from code review
  * Refactor tests and add new tests
  * Move API calls to queries_repo.go
  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  * Add handling of empty titles for Issues and PRs
  * Print the login URL even when opening a browser
  * Apply suggestions from code review
  * Update SECURITY.md
  * Fix typo and wordsmithing
  * fix typo
  * Remove trailing space from heading
  * Revise wording
  * Update docs to allow community submitted designs
  * Implement license view
  * Implement gitignore view
  * implement gitignore list
  * Update license table headings and tests
  * Fix ListLicenseTemplates doc
  * fix output capitalization
  * Cleanup rendering and tests
  * Remove json output option
  * Divide shared repo package and add queries tests
  * First pass at implementing `gh repo license list`
  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
</package>
<package pkgid="a407049ae95c0fbd06f038e8564e11548fb036b7e9609d047425d75faa77a4d6" name="gh-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.76.2" rel="bp156.2.29.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1731672000">- Update to version 2.62.0
  * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
  * Check extension for latest version when executed
  * Shorten extension release checking from 3s to 1s
- includes changes from 2.61.0:
  * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes</changelog>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
</package>
<package pkgid="83687056696d12570be8d29fc5eda651dc61d3c40ee3f953d84a6cac67c7b8e3" name="gh-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.78.0" rel="bp156.2.32.1"/>
  <changelog author="pdostal@suse.com" date="1733140800">- Update to version 2.63.0:
  * Bump cli/go-gh for codespace fix
  * Update git/client_test.go
  * Update git/client_test.go
  * Update git/client_test.go
  * Add checkout test that uses ssh git remote url
  * Rename backwards compatible credentials pattern
  * Fix CredentialPattern doc typos
  * Remove TODOs
  * Fix typos and add tests for CredentialPatternFrom* functions
  * Add SSH remote todo
  * General cleanup and docs
  * Allow repo sync fetch to use insecure credentials pattern
  * Allow client fetch to use insecure credentials pattern
  * Allow client push to use insecure credential pattern
  * Allow client pull to use insecure credential pattern
  * Allow opt-in to insecure pattern
  * Support secure credential pattern
  * Refactor error handling for missing "workflow" scope in createRelease
  * ScopesResponder wraps StatusScopesResponder
  * Refactor `workflow` scope checking
  * pr feedback
  * pr feedback
  * Update pkg/cmd/attestation/verify/attestation_integration_test.go
  * Apply suggestions from code review
  * Refactor command documentation to use heredoc
  * pr feedback
  * remove unused test file
  * undo change
  * add more testing testing fixtures
  * update test with new test bundle
  * naming
  * update test
  * update test
  * Fix README.md code block formatting
  * clean up
  * wrap sigstore and cert ext verification into a single function
  * Adding option to return `baseRefOid` in `pr view`
  * verify cert extensions function should return filtered result list
  * pr feedback
  * Update pkg/cmd/attestation/download/download.go
  * fix function param calls
  * Update pkg/cmd/attestation/verification/extensions.go
  * Formatting fix
  * Updated formatting to be more clear
  * Updated markdown syntax for a `note`.
  * Added a section on manual verification of the relases.
  * Handle missing "workflow" scope in createRelease
  * Modify push prompt on repo create when bare
  * Doc push behaviour for bare repo create
  * Push --mirror on bare repo create
  * Add acceptance test for bare repo create
  * Doc isLocalRepo and git.Client IsLocalRepo differences
  * Use errWithExitCode interface in repo create isLocalRepo
  * Backfill repo creation failure tests
  * Support bare repo creation
  * use logger println method
  * simplify verifyCertExtensions
  * rename type
  * refactor fetch attestations funcs</changelog>
  <changelog author="pdostal@suse.com" date="1733486400">- Update to version 2.63.2:
  * include alg with digest when fetching bundles from OCI
  * Error for mutually exclusive json and watch flags
  * Use safepaths for run download
  * Use consistent slice ordering in run download tests
  * Consolidate logic for isolating artifacts
  * Fix PR checkout panic when base repo is not in remotes
  * When renaming an existing remote in `gh repo fork`, log the change
  * Improve DNF version clarity in install steps
  * Fix formatting in client_test.go comments for linter
  * Expand logic and tests to handle edge cases
  * Refactor download testing, simpler file descends
  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  * Improve test names so there is no repetition
  * Second attempt to address exploit</changelog>
  <changelog author="pdostal@suse.com" date="1734955200">- Update to version 2.64.0:
  * add test for different SAN and SourceRepositoryURI values
  * add test for signerRepo and tenant
  * add some more fields to test that san, sanregex are set properly
  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  * update san and sanregex configuration for readability
  * reduce duplication when creating policy content
  * tweak output of build policy info
  * Name conditionals in PR finder
  * Support pr view for intra-org forks
  * Return err instead of silentError in merge queue check
  * linting pointed out this var is no longer used
  * Removed fun, but inaccessible ASCII header
  * further tweaks to the long description
  * Exit on pr merge with `-d` and merge queue
  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  * Update pkg/cmd/attestation/inspect/inspect.go
  * Update gh auth commands to point to GitHub Docs
  * Reformat ext install long
  * Mention Windows quirk in ext install help text
  * Fix error mishandling in local ext install
  * Assert on err msg directly in ext install tests
  * Clarify hosts in ext install help text
  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * Removed now redundant file
  * minor tweak to language
  * go mod tidy
  * Deleted no-longer-used code.
  * deleted now-invalid tests, added a tiny patina of new testing.
  * Tightened up docs, deleted dead code, improved printing
  * fix file name creation on windows
  * wording
  * hard code expected digest
  * fix download test
  * use bash shell with integration tests
  * simplify var creation
  * update integration test scripts
  * fix: list branches in square brackets in gh codespace
  * try nesting scripts
  * run all tests in a single script
  * windows for loop syntax
  * use replaceAll
  * update expected file path on windows
  * run integration tests with windows specific syntax
  * run all attestation cmd integration tests automatically
  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  * Improve error handling in apt setup script
  * use different file name for attestation files on windows
  * test(gh run): assert branch names are enclosed in square brackets
  * docs: enhance help text and prompt for rename command
  * Revert "Confirm auto-detected base branch"
  * Confirm auto-detected base branch
  * Merge changes from #10004
  * Set gh-merge-base from `issue develop`
  * Open PR against gh-merge-base
  * Refactor extension executable error handling
  * fix: list branches in square brackets in gh run view (#10038)
  * docs: update description of command
  * style: reformat files
  * docs: update sentence case
  * use github owned oci image
  * docs: add mention of scopes help topic in `auth refresh` command help
  * docs: add mention of scopes help topic in `auth login` command help
  * docs: add help topic for auth scopes
  * docs: improve help for browse command
  * docs: improve docs for browse command as of #5352
  * fix package reference
  * add gh attestation verify integration test for oci bundles
  * add integration test for bundle-from-oci option
  * update tests
  * update tests
  * move content of veriy policy options function into enforcement criteria
  * comment
  * try switch statement
  * remove duplicate err checking
  * get bundle issuer in another func
  * more logic updating to remove nesting
  * inverse logic for less nesting
  * remove unneeded nesting
  * wip, linting, getting tests to pass
  * wording
  * var naming
  * drop table view
  * order policy info so relevant info is printed next to each other
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * Update pkg/cmd/attestation/verification/policy.go
  * wip: added new printSummaryInspection
  * Improve error handling for missing executable
  * experiment with table output
  * Assert stderr is empty in manager_test.go
  * Update error message wording
  * Change: exit zero, still print warning to stderr
  * wording
  * Improve docs on installing extensions
  * Update language for missing extension executable
  * Update test comments about Windows behavior
  * wording
  * wording
  * wording
  * add newlines for additional policy info
  * Document requirements for local extensions
  * Warn when installing local ext with no executable
  * wording
  * formatting
  * print policy information before verifying
  * add initial policy info method
  * more wip poking around, now with table printing
  * wip, gh at inspect will check the signature on the bundle
  * wip: inspect now prints various bundle fields in a nice json</changelog>
  <changelog author="pdostal@suse.com" date="1736942400">- Update to version 2.65.0:
  * Bump cli/go-gh for indirect security vulnerability
  * Panic mustParseTrackingRef if format is incorrect
  * Move trackingRef into pr create package
  * Make tryDetermineTrackingRef tests more respective of reality
  * Rework tryDetermineTrackingRef tests
  * Avoid pointer return from determineTrackingBranch
  * Doc determineTrackingBranch
  * Don't use pointer for determineTrackingBranch branchConfig
  * Panic if tracking ref can't be reconstructed
  * Document and rework pr create tracking branch lookup
  * Upgrade generated workflows
  * Fixed test for stdout in non-tty use case of repo fork
  * Fix test
  * Alternative: remove LocalBranch from BranchConfig
  * Set LocalBranch even if the git config fails
  * Add test for permissions check for security and analysis edits (#1)
  * print repo url to stdout
  * Update pkg/cmd/auth/login/login.go
  * Move mention of classic token to correct line
  * Separate type decrarations
  * Add mention of classic token in gh auth login docs
  * Update pkg/cmd/repo/create/create.go
  * docs(repo): make explicit which branch is used when creating a repo
  * fix(repo fork): add non-TTY output when fork is newly created
  * Move api call to editRun
  * Complete get -&gt; list renaming
  * Better error testing for autolink TestListRun
  * Decode instead of unmarshal
  * Use 'list' instead of 'get' for autolink list type and method
  * Remove NewAutolinkClient
  * Break out autolink list json fields test
  * PR nits
  * Refactor autolink subcommands into their own packages
  * Whitespace
  * Refactor out early return in test code
  * Add testing for AutoLinkGetter
  * Refactor autolink list and test to use http interface for simpler testing
  * Apply PR comment changes
  * Introduce repo autolinks list commands
  * Remove release discussion posts and clean up related block in deployment yml
  * Extract logic into helper function
  * add pending status for workflow runs
  * Feat: Allow setting security_and_analysis settings in gh repo edit
  * Upgrade golang.org/x/net to v0.33.0
  * Document SmartBaseRepoFunc
  * Document BaseRepoFunc
  * Update releasing.md
  * Document how to set gh-merge-base</changelog>
  <changelog author="pdostal@suse.com" date="1739275200">- Update to version 2.66.1:
  * Address PR comments
  * Remove unused ErrNoGitRepository error
  * Handle error from ParsePRRefs when the selector is provided
  * Add comment to status recognizing when we require a repo
  * Refactor finder to work with URL selectors
  * Add tests for using the pr Finder outside of repo
  * Update deployment.yml
  * update tests to account for logic flip
  * flip bundle fetching logic
  * Update formatting for autolink output
  * Rename PRRefs to PullRequestRefs and PR comment cleanup
  * Remove redundant error check
  * Keeping autolink IDs the same in all test cases
  * Expand test case
  * Remove unused test field
  * Remove unused test field
  * Use `defer` instead
  * Error case test for viewRun
  * Autolink view HTTP tests
  * Shorten description
  * Updates following renaming domain to shared
  * Partial testing for view
  * Initial, working implementation
  * Stop progress indicator on failure (`gh run list --workflow`)
  * Cleaned up some naming and comments
  * Minor refactoring autolink create help and logic
  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  * Cleanup comment
  * Fix pr create tests
  * Fix breaking changes from sigstore-go v0.7.0 upgrade
  * go mod tidy
  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  * Refactor pr status to use the ParsePRRefs helper on the Finder
  * Moved remote.pushDefault out of ReadBranchConfig and into finder
  * Remove @{push} from branch config
  * Add PushDefault method to git client
  * WIP: push default defaults to simple
  * Error if push revision doesn't match a remote
  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  * remove bolding from bullet point output
  * Update test to be compatible with latest Glamour v0.8.0
  * reorder policy enforcement criteria print out
  * bold bullet point list header text
  * Enable MSI building for Windows arm64
  * chore: fix some comments
  * Bump go module version to 1.23
  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  * Remove unncessary printf usage
  * Bump golang ci lint to work with go 1.24
  * Fix: Ensure constant format strings in fmt and printf calls
  * Change back to exponential backoff
  * Linter
  * Better handling for codespace state polling
  * Add affected version to bug report form
  * fix: tiny typo fix
  * Fix: accidental whitespace in gist edit
  * Fix: gist edit test name
  * Fix: gist edit/view tests var name consistency
  * Fix: Gist edit tests for interactivity
  * Add small wait to extension update tests
  * Refactor test based on PR feedback
  * fixup! Add comments and a bit of code cleanup
  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  * Add comments and a bit of code cleanup
  * skip check
  * add tty check
  * formatting
  * delete unused function
  * drop unused handler method
  * print attestation output info as bullet points instead of table
  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  * Fix typo in secret base repo selection comment
  * Change wording on secret repo prompt
  * Print informative message before prompting for secret repo
  * Secret base repo prompting should not use resolved remote
  * Move secret base repo prompting earlier
  * Add acceptance test for secrets remote disambiguation
  * Remove validated TODO and add review warning
  * Rename secret BaseRepo func
  * Use smarter base repo funcs for secret commands
  * Move secret repo validation into secrets subpackage
  * Always prompt on secret set when multiple remotes
  * Update setdefault test
  * Update docs for set-default
  * Prompt for secret commands
  * Add tests for secret commands
  * Add remote check to secret commands
  * Add missing git stubs to tests
  * Add tests for deleteGist
  * Make extension update check non-blocking
  * Update pkg/cmd/attestation/verify/verify.go
  * add install instructions for Manjaro Linux
  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  * Rename domain pkg to shared
  * #10042: Applied code review suggestions to view_test.go
  * show error message for rerun workflow older than a month ago
  * Enhance help docs on ext upgrade notices
  * fix tests
  * fix tests
  * gist delete - check no gists
  * removed unnecessary space
  * Update pkg/cmd/gist/edit/edit.go
  * chore: fix some function names in comment
  * drop description from prompts, fix tests
  * Expand docs on cleaning extension update dir
  * Simplifying cleanExtensionUpdateDir logic
  * Separate logic for checking updates
  * Capture greater detail on updaterEnabled
  * Restore old error functionality of prSelectorForCurrentBranch
  * Change error handling on ReadBranchConfig to respect git Exit Codes
  * fix: add back colon that I removed
  * fix: actually read how MaxFunc work and simplify the code
  * fix: padded display
  * Collapse dryrun checks in ext bin upgrade
  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  * gist delete - use  in confirmation and success info
  * Rename test user in tests
  * Change pr number in test
  * Surface and handle error from ReadBranchConfig in parseCurrentBranch
  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  * Refactor error handling in ReadBranchConfig to avoid panic
  * Refine error handling of ReadBranchConfig
  * Add test for empty BranchConfig in prSelectorForCurrentBranch
  * #10042 removed unnecessary field
  * Correct help documentation around template use in `gh issue create`
  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  * Comment exported functions
  * fix gist description in tests
  * gist delete prompt with gist description
  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  * Refactor prSelectorForCurrentBranch and tests
  * Add missing test for RemoteURL in parseBranchConfig
  * update table column headers
  * Change ReadBranchConfig error message in gh pr create
  * Remove private readBranchConfig method and remove parseBranchConfig from Client
  * update test fixtures to include buildConfigURI
  * add check for invalid attestation
  * tentative updates for acceptance criteria - pending confirmation re description in prompt
  * PR review edits
  * Refactor Test_readGitBranchConfig for easier parsing
  * update tests to use new function name
  * Update pkg/cmd/attestation/api/client.go
  * Update pkg/cmd/attestation/api/client.go
  * Remove named return values from prSelectorForCurrentBranch
  * Refactor ReadBranchConfig for test coverage of newly returned erros
  * Remove named returns from ReadBranchConfig and surface errors
  * remove old comment
  * remove commented out code
  * comment
  * undo more name chanages
  * undo other name change
  * remove spaces
  * undo name change for now
  * more mock http client cleanup
  * Update triage.md to reflect FR experiment outcome
  * simplify mock http client
  * use mock to assert number of http calls
  * add http client test constructors
  * setup testing struct for test cases
  * feat: make the extension upgrade fancier
  * Fix up intra-org fork test setup
  * Add renamed acceptance tests
  * Reflect coverage for view and status subcommands
  * Expand with gh pr status
  * Add base gh pr view acceptance tests for changes
  * Find push remote using branch.&lt;name&gt;.pushRemote and remote.pushDefault
  * Only find PRs w/ branch.&lt;name&gt;.merge if push.default = upstream/tracking
  * Find PRs using @{push}
  * add mutex for test field
  * add test case for bundle url fetch failure
  * add tests for bundle url fetch and fallback
  * fetch bundles in parallel
  * return fetch attestations err directly
  * provide additional logging and fallback
  * Update pkg/cmd/auth/login/login.go
  * Clear up --with-token fine grained PAT usage
  * Fix typos
  * feat: Add support for creating autolink references
  * cleanup
  * gist delete prompt for confirmation
  * undo extra move
  * rearrange struct vals for consistency
  * add gist delete tests for blank gist id
  * gh gist delete: prompt for gist id
  * Escape '.' in version validation regex in deployment workflow
  * Add job to deployment workflow to validate the tag name for a given release
  * update verify output table
  * simplify func params
  * add more verification integration tests
  * fix failing tests
  * add mock http client
  * update error messages
  * var naming
  * go mod tidy
  * add httpClient field to LiveClient struct
  * remove unused method
  * fetch bundles with sas url
  * Fix failig local extension tests
  * Implement remaining PR feedback
  * Implement partial feedback before trunk update
  * Add build constraint for non-Windows systems
  * Add build constraint for non-Windows systems
  * Refactor local installation manager test by OS
  * #10042 fixed test
  * fixing gh gist view prompts with no TTY
  * Remove unnecessary Extension.FullName()
  * Expand update tests for local extensions
  * Test whether extension update should be checked
  * Remove Extension.FullName() from interface
  * Enhance extension manager and tests
  * Initial extension update check testing
  * Refactor extension command testing
  * Bring extension update check in line with gh check
  * initial pass at fetching bundles with sas urls</changelog>
  <changelog author="pdostal@suse.com" date="1739361600">- Update to version 2.67.0:
  * Exit with error if no matching predicate type exists
  * Fix logic error in contributing docs
  * Improve http error test cases
  * Handle non-TTY behavior
  * Do not try to parse bodies for HEAD requests
  * Update pkg/cmd/pr/status/status.go
  * Collapse related instructions
  * Remove redundant instructions
  * Update language
  * [gh pr status] Mention `gh pr checks` in the `Long` section
  * Update release doc content
  * Doc: Clarify guidelines for `help wanted` issues and prs
  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  * Update tests
  * [gh project item-edit] Fix number type
  * Address review comments
  * Address review comments
  * Revert breaking change
  * Revert "[gh repo edit] Allow setting commit message defaults"
  * Use HTML numeric code instead of escaping with slash
  * [gh config] Escape pipe symbol in Long desc for website manual
  * Ensure item iteration field is populated in tests
  * Drop accidental help text change
  * Error when `gh repo rename` is used with a new repo name that contains an owner
  * [gh repo edit] Allow setting commit title defaults
  * Rename staggler
  * Formatting
  * AuoLink -&gt; Autolink
  * Use http constants
  * refac and some spacing in output
  * More consistency
  * whitespace
  * clean up
  * Autolink delete http tests
  * Revert change to deps
  * Autolink delete tests
  * Initial working implementation
  * remove duplicated Prompter type
  * revert isEqualSet to private
  * Revert color changes
  * [docs/releasing.md] Add basic info for homebrew update flow
  * consolidate tests around getBundle func when possible
  * change permanent backoff error condition
  * Remove unused env var, PRID
  * dont retry when parsing fails
  * Update test
  * [gh issue/pr list] Improve help text
  * [gh extensions install] Improve help text and error message
  * [gh api] Fix mutual exclusion messages of `--slurp` flag
  * Remove v1 project 'add to board' automation from prauto workflow
  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue
  * [gh workflow run] Improve error handling for `--ref` flag
  * update tests
  * add missing return statement
  * method update
  * update no attestations found err
  * remove old tests
  * drop unneeded methods
  * deduplicate get attestation code
  * fix tests
  * update testing
  * chore: remove unused file
  * feat: integrate new PRLister into pr list command
  * issue #2329: create shared PRLister
  * fix: tab format may break checkout prompts
  * issue #2329: handle empty list of PR
  * issue #2329: include PR status in the prompt's options
  * issue #2329: fix prompt header getting duplicated
  * issue #2329: simplify the UI of the prompt
  * issue #2329: update the prompt's format
  * issue #2329: fix unit tests
  * issue cli#2329: Fix linter
  * issue cli#2329: fix unsufficent properties required for PR checkout
  * issue #2329: move Interactive check to RunE
  * fix: update the copy
  * issue #2329: return error when not running interactively
  * issue #2329: fix missing stub
  * issue #2329: improve UI/UX
  * issue #2329: add happy path unit test
  * issue #2329: fix the linting issue
  * issue #2329: fix the unit tests issue - ensure its backward compatible
  * feat: let user select pr to checkout</changelog>
  <changelog author="pdostal@suse.com" date="1741780800">- Update to version 2.68.1:
  * Fix secret command panic when base repo from cwd
  * Fix(ci): base64 decode GPG passphrase
  * Update pkg/cmd/attestation/verification/attestation.go
  * Update pkg/cmd/attestation/verification/attestation.go
  * Fix acceptance test descriptions
  * Fix gh secret disambiguity test
  * Expand gh secret acceptance tests
  * Expand gh secret base repo tests
  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation
  * Deep Dive Document Release Process (#10503)
  * Fix unhandled panic in FindWorkflow and add tests
  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  * Fix checkout when URL arg is from fork and cwd is upstream
  * Update `project` help text; fix `unlink` usage
  * Inconsistent format of examples in help text
  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  * Update Go version to 1.23 in CONTRIBUTING.md
  * Fix minor auth login help typo
  * Add docs; rename function name
  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  * docs: OAuth doc link moves to newline
  * fix expected test output
  * undo regex changes
  * remove signer-ref option
  * chore: update go version in devcontainer
  * docs: warn about process revoking all tokens
  * docs: document how to revoke `gh` OAuth tokens
  * refactor: use a more straightforward return value
  * Test pr checkout force on different branch
  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  * Allow injection of TUFMetadataDir in tests
  * Refactor remote resolver caching tests
  * Fix `remoteResolver` caching issue
  * Address pr comments
  * Add test for item-edit --number 0
  * Support setting project item number to 0
  * Wrap error
  * Rename flag to `--fail-on-no-commits`
  * Update tests
  * Fix non-TTY case
  * Suggestions to enhance upstream default handling
  * Use API REST Client
  * Use subtests in attestation verification integration tests
  * update default upstream when forking repo
  * Update usage to lower-kebab-case
  * Fix typo in README
  * Add missing &lt;&gt; in gh auth login docs
  * Add mutex to fix race in attestation test client
  * Update tests
  * Remove trailing whitespace
  * Standardize URLs
  * [gh issue/pr comment] Create a comment if no comment already
  * Update tests
  * Address review comments
  * Align no default repo message with other uses
  * [gh release create] Fail when there are no new commits since the most recent release
  * Use API without shorthand flag
  * Update tests
  * [gh api] Escape package name (URL encoding) for packages endpoint
  * remove custom transport
  * var naming
  * dedup local bundle err handling
  * Update tests
  * Add test cases for succeed on no cache and api errors for --all (#1)
  * Remove short (abbreviated) flag support
  * Address PR review comments
  * add checks to cert extensions func
  * fix option ordering
  * fix issues causing tests to fail
  * add signer and source ref, commit options
  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * [gh repo view] Improve error message for forked repo
  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0
  * set new options in enforcement criteria
  * reorder fields
  * add new signing options</changelog>
  <changelog author="pdostal@suse.com" date="1742817600">- Update to version 2.69.0:
  * Curly bracket wrapping acceptance tests
  * Refactor commentable logic
  * Clean up pr/issue comment test names
  * Bring issue/PR comment tests up to par, correct
  * Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  * Initial pass fixing gh issue and gh pr comment
  * Bump golang.org/x/net from 0.34.0 to 0.36.0
  * chore: remove redundant word in comment
  * Make missing workflow regexp aware of GitHub App
  * Change issueauto and prauto actions to use the cli-automation env
  * Add environment to prauto and issueauto workflows
  * Add cli-discuss-automation environment to triage.md
  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  * Add `exclude` callback function
  * Add tests for - and label args
  * Remove slicing
  * Support globbing for all platforms
  * Add testing to GlobWindowsPaths (#2)
  * Fix `gh gist create` for multiple filenames and glob patterns
  * [gh release create/upload] Expand glob patterns on Windows</changelog>
  <changelog author="pdostal@suse.com" date="1744718400">- Update to version 2.70.0:
  * Explain job log resolution reason
  * Document UNKNOWN STEP in run view
  * Add `$` anchor to log file regexps
  * Test normal job run log is preferred over legacy one
  * Prefer normal job run log file over legacy one
  * Explain when a negative number prefix appears
  * Improve explanation for missing step logs
  * Explain the `UNKNWON STEP` placeholder
  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log
  * Explain why step logs are preferred
  * test(prompter): fix invalid comment
  * test(prompter):  fix race condition
  * Ensure markdown confirm prompt shows editor name
  * fix(prompter): remove needless default value assignment
  * test(prompter): doc how accessible prompter tests work
  * test(prompter): describe why echo is editorcmd
  * test(prompter): use *testing.T instead
  * Add missing `gc.AssertExpectations` calls
  * Add tests for `IsPinned` method
  * Simplify cosign verification example by not using a regex.
  * chore: go mod tidy
  * fix(prompter): pass io to `huh` and refactor tests
  * fix(prompter): update `huh` and fix tests
  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  * doc(prompter env): accessible prompter includes braille reader
  * chore: go mod tidy
  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  * Update pkg/cmd/run/shared/presentation.go
  * Apply suggestions from code review
  * Test for explicit config disable of label colors
  * Use truthy value for `GH_COLOR_LABELS`
  * test(prompter):  re-add skipped test for accessible confirm default
  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  * refactor(prompter): explicit return values
  * doc(prompter): remove senseless comment
  * refactor(prompter): remove unused variable
  * test(prompter): timeout for tests is 1s
  * fix(prompter): use os.lookupenv for accessible prompter
  * test(prompter): remove needless NO_COLOR set
  * test: use example.com in tests
  * doc: comment typos and formatting
  * test(prompter): add basic survey prompter test
  * test(prompter): fix race conditions
  * doc(envs): speech synthesis prompter
  * Escape dots in regexp pattern in example command
  * Verify fallback to job run logs when step logs are missing
  * Verify job run logs attached in `attachRunLog` test
  * Update `run_log.zip` fixture
  * Fallback to print entire job run log if step logs are missing
  * Add `Log` to `Job` data structure
  * Add `jobLogFilenameRegexp` function
  * Extract job name sanitization as a separate function
  * Deprecate ColorScheme.Gray for ColorScheme.Muted
  * ci: pin third party actions to commit sha
  * doc(prompter): clarify comments
  * refactor(prompter): less magic strings
  * fix(prompter): remove impossible condition
  * fix(prompter): notes about Confirm default
  * fix(prompter): input returns default when blank
  * test(prompter): more tests for bad input
  * Refactor ColorScheme initializer
  * Add label color env var to help topic, unused fix
  * refactor(prompter): rename env var for speech synthesizer friendly prompter
  * docs(prompter): doc prompter interface
  * fix(linter): linter errors
  * test(prompter): move to external package
  * test(prompter): skip vt10x tests on Windows
  * Fix comment language
  * Introduce `color_labels` support, update commands
  * test(prompter): remove needless variable declaration
  * tests(prompter): rename huhprompter
  * test(prompter): replace assert with require
  * fix(prompter): rename huhprompter
  * test(prompter): `go-expect` based prompter tests
  * feat(prompter): include `no` as false-y value
  * test(prompter): remove t.parallel calls
  * fix(md prompter): accessible prompt allows blank
  * feat(md prompter): md prompt respects blankAllowed
  * feat(prompter): add accessible prompter support
  * Remove deprecated note on gray color functions
  * Regenerate mocks
  * Remove configuration setting vestage
  * Remove out of scope configuration setting change
  * Implement tests for muted logic, standardize reset
  * Remove out of scope changes, update list commands
  * Accessible color config boilerplate, colors update
  * Acceptance test issue/pr create/edit with project
  * Update pkg/cmd/attestation/verify/verify.go
  * test(release view): fix indentation
  * doc(formatting): add line breaks for readability
  * Renaming tabl eheader variables for maintainability
  * doc(formatting): update sprig func descriptions
  * test(many): fix whitespace in tests expectations
  * updated test
  * added minor caveat
  * Tweaked language a bit, improved error message.
  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  * doc(run shared): clarify 404 handling
  * Fixes #10590
  * docs: add Sprig library functions to help topics
  * chore: update go-gh to v2.12.0
  * Implement and fix tests for table headers
  * test(run list): update rulesets test name
  * doc(run list): add enterprise ruleset notes
  * refactor(tests): update test name for org workflows
  * docs(run list): doc runs without workflow names
  * fix(run list): do not fail on org workflows
  * Fix typos in CONTRIBUTING.md
  * Underline table headers if colors enabled but no theme
  * Ensure table headers are thematically contrasting
  * [gh ext] Fix `GitKind` extension directory path
  * More cleanup
  * `./script/sign` cleanup
  * Add initial test
  * Show host name in repo creation prompts</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746273600">- Update to version 2.72.0:
  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility
    experiences
  * [gh pr view] Support closingIssuesReferences JSON field
  * Fix expected error output of TestRepo/repo-set-default
  * Ensure accessible password and auth token prompters disable echo mode
  * Fix: Accessible multiselect prompt respects default selections
- Update to version 2.71.2:
  * Fix pr create when push.default tracking and no merge ref
- Update to version 2.71.1:
  * Fix pr create when branch name contains slashes
- Update to version 2.71.0:
  * gh pr create: Support Git's @{push} revision syntax for determining
    head ref
  * Introduce option to opt-out of spinners
  * Update configuration support for accessible colors
  * gh config: add config settings for accessible prompter and disabling spinner
  * Fix multi pages search for gh search
  * Fix: project commands use shared progress indicator
  * Issue commands should parse args early
  * Feature detect v1 projects on issue view and edit
  * Feature detect v1 projects on web and non web-mode issue create
  * Refactor Sigstore verifier logic
  * bump deps</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1746446400">- Fix the package tests:
  * Ignore TestNewInspectCmd
  https://github.com/cli/cli/issues/10926
  * Ignore TestAccessiblePrompter
  https://github.com/cli/cli/issues/10916</changelog>
  <changelog author="pdostal@suse.com" date="1748260800">- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service
- Do not skip the TestAccessiblePrompter tests
- Update to version 2.73.0:
  * refactor(api): inline struct definitions in RepoAssignableActors
  * refactor(api): change CopilotActorLogin to constant
  * fix(editable): include DefaultLogins in EditableAssignees clone
  * doc(params): incorrect func name in comment
  * refactor(api): use constant for Copilot login
  * doc(issue/pr edit): clarify @copilot usage
  * doc(issue/pr edit): doc `@copilot` assignee
  * test(params): enhance Copilot replacer tests for edge cases
  * fix(params): remove needless err return
  * doc(editable): remove needless comment
  * test(editable): prompts use assignee display names
  * fix(pr edit): clarify error messages for assignee actors and users
  * doc(pr edit): condense comment for reviewer/user filtering
  * test(pr edit): fix typo in test name
  * refactor(pr edit): move httpclient initialization
  * feat(issue/pr edit): support @copilot in assignee flags
  * doc(pr edit): Add comments describing the use of DefaultLogins
  * fix(issues): fix non-interactive assignee matching to logins&amp;IDs
  * fix(pr edit): remove merge conflict artifact, extra detector
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * fix(api): correct var name capitalization
  * refactor(api): remove needless parenthesis
  * doc(api): code comment typo
  * feat(editable): update assigned actors to use display names
  * feat(pr edit): fetch assignable actors
  * feat(pr edit): fetch assigned actors
  * doc(issue edit): clarify synchronous handling of assignees
  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  * doc(api): remove needless comment
  * refactor(api): rename assignable user types and methods
  * fix(issue edit): revert rename of ActorAssignees
  * fix(issue edit): use double quotes for assignedActors
  * refactor(issue edit): add assignedActors to lookupFields
  * refactor(issue edit): rename loop variable for clarity
  * refactor(issue edit): rename AssignedActors to ActorAssignees
  * Increase `beforePasswordSendTimeout` to 100 us (#10977)
  * Update test case for removing all reviewers
  * doc(repo queries): clarify reviewer actor fetching logic
  * doc(issue): comment why assignable actors disabled
  * refactor(issue edit): improve actor type handling
  * Add test to verify removing all reviewers
  * fix bug when removing all PR reviwers
  * fix(issue edit): resolve race condition in actor assignment
  * chore(issue edit): comments cleanup
  * feat(issue edit): support assigning actors to issues
  * feat(issue edit): fetch assignable actors
  * feat(issue edit): fetch currently assigned actors
  * Improve assertion for disabled echo mode (#10927)
  * fix(a11y prompter): remove invalid defaults
  * Release download handles missing archive URLs
  * Fix release download test http stubbing
  * feat(fd): add ActorIsAssignable to IssueFeatures
  * Feature detect v1 projects on pr edit
  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)
  * fix(a11y prompter): confirm prompt default is readable
  * fix(a11y prompter): multi select defaults are readable
  * doc(prompter): remove TODO about default value panic
  * fix(a11y prompter): select prompt default value is readable
  * refactor(a11yprompter): shared method for prompt defaults
  * fix(a11y prompter): Select prompt respects defaults
  * fix(a11y prompter): input prompt default value is readable
  * test(prompter): add timeout before password input
  * Feature detect v1 projects for preview URL
  * Feature detect v1 projects on interactive pr create
  * Feature detect v1 projects on web mode pr create
  * Feature detect v1 projects on non-interactive pr create
  * Cleanup run command stubbed finders in tests
  * Fix `StatusJSONResponse` usage (#10810)
  * Feature detect v1 projects on pr view
  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)
  * Apply code review changes
  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  * Update the test code to align with latest changes
  * test pr number 0
  * handle find pr number 0
  * restore deleted file
  * move filterAttestations function
  * getAttestations unit tests
  * add test for predicate type filtering
  * add missing nil struct checks and udpate error messages
  * add check for nil api client
  * clean up test fixtures
  * reduce test duplication
  * comment
  * restructure api client methods
  * simplify client methods
  * remove duplicate predicate filtering code
  * create single fetch by digest client method
  * dedpulicate if else logic
  * pass params object to api client methods
  * move local and oci registry attestation filtering
  * reorganize getAttestations func to check for remote gh api fetching first
  * pass predicate type to get attestation api methods</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1748606400">- Update to version 2.74.0:
  * Update `go-gh` to v2.12.1
  * fixup release asset digest tests
  * remove nolint comment for release header
  * Update pkg/cmd/release/view/view.go
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  * fix: `gh gist edit` panic when no file in a gist (#10627)
  * docs(pr list): mention `--head` does not support `&lt;owner&gt;:&lt;branch&gt;` syntax
  * add Digest to ReleaseAsset struct
  * doc(update): improve comments on updaterEnabled
  * Refactor build tag logic
  * replace deprecated func
  * replace deprecated type
  * update sigstore-go to v1
  * feat(update): add `updateable` build tag for update notifications
  * Update README.md
  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`
  * Add `--compact` flag to `run watch` (#10629)
  * test: improve test case naming
  * chore: run `go mod tidy`
  * test: ensure proper usage of pipes in docs
  * Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  * doc(pr): format allowed values and defaults in help
  * Mention created PR's URL will be printed upon success
  * Add example usage of `--head` option
  * doc(preview): add long description
  * fix(prompter): print to iostreams stdout
  * fix(prompter): update prompter create for changes in trunk
  * fix(preview): remove needless newlines
  * import sigstore-go at a more recent commit
  * use constructor
  * include http client in verifier setup
  * add missing http client field in sigstoreConfig
  * simplify test
  * alphabetize fields
  * move live inspect test to integration test file
  * fetch http client from factory
  * set custom fetcher in options
  * pass http client for use with tuf
  * get the latest go-tuf release
  * get latest go-tuf version
  * create fetcher with custom http client and retry options
  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  * feat(preview): enforce fixed order for prompts
  * feat(preview): add `preview prompter` command</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1749816000">- Update to version 2.74.1:
  * test: fix test data const
  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)
  * Fix pr edit when URL is provided</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1750420800">- Update to version 2.74.2:
  * Update docs/install_linux.md
  * Fix step order for CodeQL workflow
  * docs: update install command for Debian
  * chore(deps): bump github.com/google/go-containerregistry
  * Use t.Chdir in tests
  * Bump to Go 1.24
  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  * Apply suggestion from @Copilot
  * Improve help wanted check skipping logic
  * Ensure gh executes in workflow check script
  * Fix repo checkout in help-wanted check
  * Fixes #11126
  * Fix script path for help-wanted check
  * Quote filenames suggested at the end of worklow run
  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  * Quote workflow conditional
  * Add workflow to check `help wanted` labelling (#11105)
  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  * Add accurate context when `run rerun` fails (#10774)
  * Avoid requesting PR reviewer twice
  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  * test(pr): Add tests for actor assignees
  * Fix test, remove partial standalone test
  * Iterate on `pr edit` problems with existing assignees
  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  * Fix expected error output of TestRepo/repo-rename-transfer-ownership
  * Add instructions for MidnightBSD installation</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1752148800">- Update to version 2.75.0:
  * Quote Windows rsyso script global hook
  * test(search): verify `URL` returns quoted query
  * test(search): test pagination with multi-word quoted queries
  * fix(search): fix mutating query state fields
  * Add setup-go to bump-go
  * Update contribution design link
  * test(pr merge): always assert stderr
  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error
  * fix(pr merge): ignore 404 as error when deleting remote branch
  * Ensure go mod tidy is run in bump-go
  * Inject token into bump-go workflow
  * Reformat gh run view help
  * docs(run view): explain restrictions of fallback API calls
  * test(run view): delete unused ZIP archive
  * refactor(run view): remove `Log` field from DTO types
  * test(run view): update tests
  * refactor(run view): use API as fallback to fetch job logs
  * test: add `BinaryResponse` helper function
  * Ensure bump go script has git user configured
  * Support --no-repos-selected on secret set
  * docs: consistently use apt in installation instructions
  * Consume dependabot minor versions for go modules
  * test: add test for `ParseURL`
  * Update microsoft dev-tunnels to v0.1.13
  * Bump all dependencies except dev-tunnels
  * Fix inconsistent use of tabs and spaces
  * docs: explain PR URL parsing reason
  * test: improve test case to highlight host name override
  * test: remove references to `AssignedActorsUsed` field
  * test: verify providing a URL arg affects the base repo
  * refactor: select PR fields based on detected features
  * test: remove tests verifying assigne-related behaviour
  * fix: remove assignee-related intervention
  * fix: remove `AssignedActorsUsed` field
  * Add workflow to automate go version bumping
  * fix: expose `ParseURL` as a public func
  * Remove unused GH_TOKEN env variable from workflow
  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)
  * chore: improve error message when `versioninfo.json` is not found
  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)
  * chore: create `.syso` libs only on Windows
  * chore: delete `script/winres.json`
  * chore: add `versioninfo.template.json`
  * refactor: switch to `github.com/josephspurrier/goversioninfo`
  * chore: exclude generated `.syso` files from git repo
  * Ensure automation uses pinned go-licenses version
  * Fix missing newline in install_linux.md
  * Apply suggestions from code review
  * Update missed Go 1.23 references
  * chore: update Go version to 1.24 in devcontainer configuration
  * Use `make` for license generation and checks
  * Use temp directory for license checks
  * Update 3rd party licenses
  * Restored original test setup, clarified
  * Enhance Activetoken prioritize test
  * improve the description for gh release verify cmd
  * chore: fix function name
  * Push up
  * Use active token stubbing on auth config
  * refactor to simplify implementation
  * Primer formatting
  * Fix spacing
  * Add missing files
  * Rename READMEs
  * Initial restore of Primer CLI docs
  * use standardize color roles logic for the logging
  * moved to shared lib
  * moved to shared lib
  * update the artifact and bundle for testing
  * empty commit
  * clean the code
  * revert the workflow
  * debug windows env
  * debug windows env
  * debug windows env
  * chore: fix variable name casing
  * Avoid analyzing 3rd party license content with CodeQL
  * chore: ensure output path is a directory
  * clean the path
  * clean the path
  * Update 3rd party license information
  * Adopt license compliance scripts into workflows, docs
  * clean the path
  * improve test
  * fix test
  * add unit test
  * chore: prepare Windows resources `.syso` files before build
  * chore: add script to create Windows resources
  * Cleanup
  * fix: get token for active user instead of blank if possible
  * remove filepath test
  * update Sprintf
  * removed unused file
  * added the unit test
  * add json format
  * change verify-asset logic
  * minor fix
  * clean up the code
  * update the lng
  * wip
  * remove comment
  * wip
  * init
  * docs: install_linux.md: add Solus linux install instructions</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753012800">- Update to version 2.76.0:
  * Copilot Pro+ / Enterprise subscribers can now assign issues to
    Copilot during issue creation
  * Display immutable field in release view command
  * Do not fetch logs for skipped jobs
  * Transform extension and filename qualifiers into path qualifier
    for web code search</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1753358400">- Update to version 2.76.1:
  * Updated third-party license compliance content
  * Add tests for reviewer team handling in PR creation
  * Refactor and improve RepoMetadata teams test
  * Refactor error assertion in Test_RepoMetadataTeams
  * FIX: conditionally fetching team reviewers
  * Add TeamReviewers flag to RepoMetadataInput
  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  * Use gh go templating for user prompt
  * Update eval script comments
  * Remove unnecessary file for heredoc
  * First pass to optimize and improve
  * Limit permissions of govulncheck workflow
  * Incorporate govulncheck into workflows
  * update ownership of pkg/cmd/release/shared/
  * Run Lint and Tests on `push` to `trunk` branch
  * ci: echo spam detection result
  * ci: add `models: read` permission
  * ci: correct `sed` usage to remove Markdown front matter
  * docs: fix typo in script docs
  * ci: fix potentially confusing typo in system prompt
  * ci: use `issue.html_url` instead of `issue.url`
  * ci: remove unused env vars
  * ci: add spam issue detection workflow
  * ci: add spam issue detection scripts
  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  * Improve `api` `--preview` docs
  * add tenancy aware for san matcher</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1754049600">- Update to version 2.76.2:
  * Refactor tab completion test
  * Test `gh pr create --reviewer` tab completion
  * Include org teams for PR reviewers
  * docs(ci): delete obsolete comment</changelog>
  <changelog author="Pavel Dost&#xE1;l &lt;pdostal@suse.com&gt;" date="1756123200">- Update to version 2.78.0:
  * Add `--force` flag to `gh run cancel` (#11513)
  * Update third-party license versions (#11557)
  * chore(deps): bump github.com/go-viper/mapstructure/v2 (#11556)
  * Merge pull request #11536 from cli/copilot/fix-11535
  * chore(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2
  * Update pkg/cmd/release/verify/verify.go
  * Update pkg/cmd/release/verify-asset/verify_asset.go
  * Hidden trusted root flag for release verify
  * Update Go dependencies to latest versions
  * chore(deps): bump actions/checkout from 4 to 5
  * udpate the test
  * replace /git/refs/tags/ to /git/ref/tags/
  * Update feature_detection.go
  * Update PR tests for v2 projects
  * Base changes for PR project items
  * Update `gh issue view` to show v2 projects
  * PR feedback from @bagtoad
  * Update v1 project detection logic
  * Update govulncheck workflow to scan source code
  * add test for FetchRefSHA
  * Apply suggestion from @Copilot
  * Update docs/install_windows.md
  * Consolidate repo profile, fix headings
  * chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
  * chore(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13
  * Update docs on contributing new install methods
  * markdown lint fixes
  * Formatting
  * Initial installation doc refactor
  * Pushing empty commit to run CI
  * Bump Go to 1.24.6
  * Fix linter
  * Update pkg/cmd/search/search.go
  * chore(deps): bump actions/download-artifact from 4 to 5
  * Update docs/triage.md
  * Update docs/triage.md
  * Update issue triage guidelines and label usage
  * fix error for ErrReleaseNotFound when fetching ref
  * Apply suggestion from @Copilot
  * Update .github/workflows/scripts/spam-detection/process-issue.sh
  * docs(search): move search syntax note to `gh search --help`
  * Update spam detection to comment on and close issue
  * Update permissions and events for workflow
  * ci: use `help wanted` label link in comment
  * ci: anchor regexp for `help wanted` label
  * Improve spam detection evals (#11419)
  * v1 project feature detection spike using version
  * docs(help): rename `search-syntax` help topic
  * docs(search): add reference to `gh help search`
  * Add help topic for search syntax in gh commands
  * docs(search): add note for exclusion search syntax
  * Regenerate third-party licenses on trunk pushes
  * chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7</changelog>
</package>
<package pkgid="4cb1473be973be2774b2c3cb0d7ea7bb5eb6508411d6fd61b8d1e18fbc9e11a4" name="gigolo" arch="aarch64">
  <version epoch="0" ver="0.5.4" rel="bp156.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1335700800">- added dependency on xdg-utils since xdg-open is used
- require gvfs, gigolo does not make much sense without it</changelog>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
</package>
<package pkgid="36501c000671f2196a39c25acc1f66e11b27a3f001ce3f3c4969edee1f2054cd" name="gigolo" arch="i586">
  <version epoch="0" ver="0.5.4" rel="bp156.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1335700800">- added dependency on xdg-utils since xdg-open is used
- require gvfs, gigolo does not make much sense without it</changelog>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
</package>
<package pkgid="1e96be9524f72d04eda79f8787e4465abb1b223321242bfde71a0c7c5d9d00ef" name="gigolo" arch="ppc64le">
  <version epoch="0" ver="0.5.4" rel="bp156.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1335700800">- added dependency on xdg-utils since xdg-open is used
- require gvfs, gigolo does not make much sense without it</changelog>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
</package>
<package pkgid="93ae4bc84c546d9b5c651be41725d41672b19298612f56d4dd16c671548869e4" name="gigolo" arch="s390x">
  <version epoch="0" ver="0.5.4" rel="bp156.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1335700800">- added dependency on xdg-utils since xdg-open is used
- require gvfs, gigolo does not make much sense without it</changelog>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
</package>
<package pkgid="56c4e9f83f77ab70834431d5d5c5454b5aae16372818189f81fe4469846bdcf0" name="gigolo" arch="src">
  <version epoch="0" ver="0.5.4" rel="bp156.2.3.1"/>
  <changelog author="prusnak@suse.cz" date="1240315200">- updated to 0.3.1
  * Fix build with GTK 2.12
  * Show the main window when the status icon in the notification
    area gets removed</changelog>
  <changelog author="prusnak@suse.cz" date="1240315201">- updated to 0.3.2
  * Improve the network browsing code to poperly auto-mount Samba
    resources for browsing if necessary
  * Updated translations</changelog>
  <changelog author="prusnak@suse.cz" date="1263384000">- updated to 0.4.0
  * Support mounting volumes like local partitions
  * WebDav URIs may have an optional path argument
  * Add a folder property for bookmarks which is used to open the file
    manager with this folder
  * Add a Bookmark side panel
  * Many minor fixes and improvements</changelog>
  <changelog author="andrea@opensuse.org" date="1287921600">- update to 0.4.1
  * Use SSH/SFTP as default connection type for new
    bookmarks/connections
  * Allow finishing the Connect / Bookmark Edit dialog by
    pressing Enter
  * Improve build system to respect LINGUAS environment variable
  * Show an error message dialog if the file-manager command failed
    to execute
  * Remove the preference to select the Volume Manager
    implementation
  * Many minor fixes and improvements
- remove unsopported locale</changelog>
  <changelog author="andrea@opensuse.org" date="1291550400">-  spec file clean up, using pkgconfig for BuildRequires</changelog>
  <changelog author="gber@opensuse.org" date="1293105600">- fix waf usage
  * use $RPM_OPT_FLAGS
  * show compiler output
- split off lang subpackage</changelog>
  <changelog author="gber@opensuse.org" date="1295092800">- do not require but recommend -lang subpackage</changelog>
  <changelog author="gber@opensuse.org" date="1297944000">- call %desktop_database_post/un</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1333108800">- specfile cleanup
- correct dependencies
- build using autotools rather than waf</changelog>
  <changelog author="gber@opensuse.org" date="1335700800">- added dependency on xdg-utils since xdg-open is used
- require gvfs, gigolo does not make much sense without it</changelog>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
</package>
<package pkgid="b843dfcc4fc58fbde0b621839f78aaf186223cccde0728cc6558d201c0cd2a99" name="gigolo" arch="x86_64">
  <version epoch="0" ver="0.5.4" rel="bp156.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1335700800">- added dependency on xdg-utils since xdg-open is used
- require gvfs, gigolo does not make much sense without it</changelog>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
</package>
<package pkgid="639cf043ffdfcf8e2f4f45d274a7bbfb1365a26672ec1d7fa84c3acdc25a190d" name="gigolo" arch="aarch64">
  <version epoch="0" ver="0.6.0" rel="bp156.2.6.1"/>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1748347200">Meson has been added as a build system in this release, and the
  associated archive has been generated by 'meson dist'. Although
  autotools has been retained for the time being and can still be used
  via 'autogen.sh', meson is now the preferred build system, and
  autotools will be removed in a future release.
- Update to version 0.6.0
  * Update README after switchover to meson
  * Add suport to Meson
  * Replace deprecated exo with libxfce4ui 4.21.0
  * Translation Updates</changelog>
</package>
<package pkgid="78586d80283166eb555e50082e937206a57738bdf20ce991f5a9f75ff21ac070" name="gigolo" arch="i586">
  <version epoch="0" ver="0.6.0" rel="bp156.2.6.1"/>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1748347200">Meson has been added as a build system in this release, and the
  associated archive has been generated by 'meson dist'. Although
  autotools has been retained for the time being and can still be used
  via 'autogen.sh', meson is now the preferred build system, and
  autotools will be removed in a future release.
- Update to version 0.6.0
  * Update README after switchover to meson
  * Add suport to Meson
  * Replace deprecated exo with libxfce4ui 4.21.0
  * Translation Updates</changelog>
</package>
<package pkgid="15712b4727ce1e8987cd808fc5ee909f92d4bd78e8dafc5f3d2c9dbc05b39933" name="gigolo" arch="ppc64le">
  <version epoch="0" ver="0.6.0" rel="bp156.2.6.1"/>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1748347200">Meson has been added as a build system in this release, and the
  associated archive has been generated by 'meson dist'. Although
  autotools has been retained for the time being and can still be used
  via 'autogen.sh', meson is now the preferred build system, and
  autotools will be removed in a future release.
- Update to version 0.6.0
  * Update README after switchover to meson
  * Add suport to Meson
  * Replace deprecated exo with libxfce4ui 4.21.0
  * Translation Updates</changelog>
</package>
<package pkgid="8d1a041b5c083bea0879b28c4e3ae6a8cb476b82f034883622367a1162d06786" name="gigolo" arch="s390x">
  <version epoch="0" ver="0.6.0" rel="bp156.2.6.1"/>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1748347200">Meson has been added as a build system in this release, and the
  associated archive has been generated by 'meson dist'. Although
  autotools has been retained for the time being and can still be used
  via 'autogen.sh', meson is now the preferred build system, and
  autotools will be removed in a future release.
- Update to version 0.6.0
  * Update README after switchover to meson
  * Add suport to Meson
  * Replace deprecated exo with libxfce4ui 4.21.0
  * Translation Updates</changelog>
</package>
<package pkgid="c3f6b6b503c83f5abb850b8950e4f2101c050d04bf4b88532d6360e8ca79a981" name="gigolo" arch="src">
  <version epoch="0" ver="0.6.0" rel="bp156.2.6.1"/>
  <changelog author="prusnak@suse.cz" date="1240315200">- updated to 0.3.2
  * Improve the network browsing code to poperly auto-mount Samba
    resources for browsing if necessary
  * Updated translations</changelog>
  <changelog author="prusnak@suse.cz" date="1263384000">- updated to 0.4.0
  * Support mounting volumes like local partitions
  * WebDav URIs may have an optional path argument
  * Add a folder property for bookmarks which is used to open the file
    manager with this folder
  * Add a Bookmark side panel
  * Many minor fixes and improvements</changelog>
  <changelog author="andrea@opensuse.org" date="1287921600">- update to 0.4.1
  * Use SSH/SFTP as default connection type for new
    bookmarks/connections
  * Allow finishing the Connect / Bookmark Edit dialog by
    pressing Enter
  * Improve build system to respect LINGUAS environment variable
  * Show an error message dialog if the file-manager command failed
    to execute
  * Remove the preference to select the Volume Manager
    implementation
  * Many minor fixes and improvements
- remove unsopported locale</changelog>
  <changelog author="andrea@opensuse.org" date="1291550400">-  spec file clean up, using pkgconfig for BuildRequires</changelog>
  <changelog author="gber@opensuse.org" date="1293105600">- fix waf usage
  * use $RPM_OPT_FLAGS
  * show compiler output
- split off lang subpackage</changelog>
  <changelog author="gber@opensuse.org" date="1295092800">- do not require but recommend -lang subpackage</changelog>
  <changelog author="gber@opensuse.org" date="1297944000">- call %desktop_database_post/un</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1333108800">- specfile cleanup
- correct dependencies
- build using autotools rather than waf</changelog>
  <changelog author="gber@opensuse.org" date="1335700800">- added dependency on xdg-utils since xdg-open is used
- require gvfs, gigolo does not make much sense without it</changelog>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1748347200">Meson has been added as a build system in this release, and the
  associated archive has been generated by 'meson dist'. Although
  autotools has been retained for the time being and can still be used
  via 'autogen.sh', meson is now the preferred build system, and
  autotools will be removed in a future release.
- Update to version 0.6.0
  * Update README after switchover to meson
  * Add suport to Meson
  * Replace deprecated exo with libxfce4ui 4.21.0
  * Translation Updates</changelog>
</package>
<package pkgid="4a8128bfc9debd14a10bf037133a715afa33eacffdf400a45d25ab8c9dc80b26" name="gigolo" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="bp156.2.6.1"/>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1748347200">Meson has been added as a build system in this release, and the
  associated archive has been generated by 'meson dist'. Although
  autotools has been retained for the time being and can still be used
  via 'autogen.sh', meson is now the preferred build system, and
  autotools will be removed in a future release.
- Update to version 0.6.0
  * Update README after switchover to meson
  * Add suport to Meson
  * Replace deprecated exo with libxfce4ui 4.21.0
  * Translation Updates</changelog>
</package>
<package pkgid="cbeeb9c4cc5457cff5bf5ba15bd93a208aec54b4db645f1090b345fdf54e7cae" name="gigolo-lang" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="bp156.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1335700800">- added dependency on xdg-utils since xdg-open is used
- require gvfs, gigolo does not make much sense without it</changelog>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
</package>
<package pkgid="48e79d9b47c302a73ed5300fe025ec4b6591b5df6a411382278fa45812283e0d" name="gigolo-lang" arch="noarch">
  <version epoch="0" ver="0.6.0" rel="bp156.2.6.1"/>
  <changelog author="gber@opensuse.org" date="1389268800">- update to version 0.4.2
  - Fix mnemonics in the Connect dialog.
  - Resolve symbolic links before writing config files.
  - Remember side panel position.
  - Store and display colours for bookmarks.
  - Allow editing bookmarks from the main window popup menu.
  - Do not set the colour when no colour is explicitly selected.
  - Add a separator to the Bookmark Edit Dialog.
  - Don't show errors we are not supposed to show.
  - Automatically choose the first Samba share if any were found.
  - Add 'Open in Terminal' command.
  - Remove some set but unused variables.
  - Display bookmark name in the connection list if the connection
    has a bookmark.
  - Do not make the Connect button insensitive, never (bug #8103).
  - Improve WebDav URI handling.
  - Validate an entered custom URI by trying to parse it.
  - After creating/editing a bookmark, update the list of mounts.
  - Fix WebDav path parsing when there is no path.
  - Add new command-line option to auto connect bookmarks.
  - Drop Waf build system support and just use autotools.
  - Translation updates
- drop gigolo-desktop.patch and edit desktop file in-place instead</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543579200">- Gigolo 0.4.90
  * Port to GTK+ 3
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations-
- Cleaned spec file
- Use system icon for better integration</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1543579201">- more explicit gtk3 dependency specification
- Leap 42.3 does not build anymore, remove obsolete %post*-snippets</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1544011200">- Regression in 0.4.90 (bxo#14928)
- Revert to 0.4.2 version to preserve functionalties.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565697600">- Update to version 0.5.0
  * Stable GTK+3 release
  * Migrate gvfs commands to gio
  * Set port number when connection type changes
  * Only ask for share name if the field is shown/mandatory (bxo#14928)
  * Improved appearance of various dialogs
  * Improved sizings of the icon view
  * Updated translations
- Cleaned up spec file
- Only use NEWS as changelog</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1584187200">- Update to version 0.5.1
  * Fixes an annoying bug about wrong port being saved in the bookmark
    when saving it (bxo#15455 boo#1155611)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1616587200">- Update to version 0.5.2
  * Refresh Glade file, drop unused tab labels (gxo#apps/gigolo#13)
  * move the logic setting GtkSpin port value to setup_for_type()
    (gxo#apps/gigolo#11)
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (gxo#apps/gigolo#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (gxo#apps/gigolo#6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * bxo#16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1695988800">- Update to version 0.5.3
  * Update copyright year and urls
  * Replace remaining stock icons
  * Replace (some) deprecated stock icons
  * Fix double free
  * Fix compiler warning -Wmaybe-uninitialized
  * Disable systray icon outside X11
  * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19)
  * Add icons at missing sizes, clean up SVG metadata
  * build: Use XDT_CHECK_PACKAGE
  * build: Fix autotools warnings
  * Update `.gitignore`
  * Rename "SSH" to "SSH / SFTP"
  * Fix intltool lock file issue during make distcheck
  * Update TODO
  * Refresh Glade file, drop unused tab labels (fixes #13)
  * move the logic setting GtkSpin port value to setup_for_type()
  * Use new icon in window titlebar
  * Fix compilation warnings
  * autoconf: Some updates
  * Only show an error dialog if the host field is visible/required
  * Remove capitalization from icon name
  * Update GenericName (#2)
  * Fix comment style.
  * Remove GSourceFunc casts
  * Update Makefile.am
  * Add gigolo.ui to POTFILES.in (Issue #6)
  * Added new icons following new style and reverse DNS format.
  * Add new README.md and update AM_INIT_AUTOMAKE
  * Add basic GitLab pipeline
  * Bug #16717: Move from exo-csource to xdt-csource
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1735560000">- Update to version 0.5.4
  * Update copyright year
  * I18n: Update po/LINGUAS list
  * Added missing Keywords entry to .desktop file
  * build: Use XDT_VERSION_INIT
  * build: Switch from intltool to gettext
  * build: Add #ifdef around bind_textdomain_codeset
  * build: Define our own windowing macro instead of extending GDK's
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1748347200">Meson has been added as a build system in this release, and the
  associated archive has been generated by 'meson dist'. Although
  autotools has been retained for the time being and can still be used
  via 'autogen.sh', meson is now the preferred build system, and
  autotools will be removed in a future release.
- Update to version 0.6.0
  * Update README after switchover to meson
  * Add suport to Meson
  * Replace deprecated exo with libxfce4ui 4.21.0
  * Translation Updates</changelog>
</package>
<package pkgid="9467ce92c3835531125930b36384d113f025dba3c5ddfe00ad20c470827e05e0" name="gimp-plugin-jxl" arch="aarch64">
  <version epoch="0" ver="0.8.4" rel="bp156.3.3.4"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658577600">- Initial package (version 0.7~779.f5d6e29) build.opensuse.org</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1663848000">- Update to 0.7.0:
  * new functions for retrieving associated alpha channel with
    premultiplied or unpremultiplied colors, for blending
    information for extra channels in the non-coalesced case, for
    getting the intended downsampling ratio of progressive steps,
    for disabling rendering of spot colors.
  * Added ability to add metadata boxes, to set several encoder
    options, to check required codestream compatibility level,
    for force-emitting the box-based container format, to store
    JPEG metadata for lossless reconstruction, to encode
    arbitrary extra channels.</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1671105600">- Added missing baselibs.conf so that 32bit library packages
  become available</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1671451200">- Add patch (applied reversed) to revert the requirement for an
  updated liblcms2 library when we have an older one. This allows
  libjxl to build in SLE15 SP4/SP5 (and Leap 15.4/15.5):
  * 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674043200">- Update to release 0.8
  * API: new function JxlDecoderSetImageBitDepth and
    JxlEncoderSetFrameBitDepth to set the bit depth of buffers.
  * encoder API: add an effort 10 option for lossless
    compression; using this setting requires calling
    JxlEncoderAllowExpertOptions.
- Enable PNG utilities [boo#1205107]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675598400">- Update to release 0.8.1
  * Allow fast-lossless for 16-bit float input
  * Fix OOB read in exif.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676030400">- build glibc hwcaps optimized overlay</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1681732800">- Refresh 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686312000">- Build package in correct phase
- Use macros for ldconfig</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1686744000">- Update to release 0.8.2
  * Fix an integer underflow bug in patch decoding.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694865600">- Build plugins:
  * Add _service file to generate skcms tarball (needed to build
    plugins).
  * Add skcms tarball as source and copy extracted dir to
    ./third_party/ so cmake can find it.
  * Split out new packages:
  * gdk-pixbuf-loader-jxl: Pixbuf loader for supported apps.
  * gimp-plugin-jxl: Plugin to allow gimp to work with JPEG XL
    files.
  * jxl-thumbnailer: Thumbnailer and mime files to allow
    generating thumbnails for JPEG XL files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1695297600">- Switch from LCMS to SKCMS: libjxl core can use either, but
  plugins can only use SKCMS. Exercising two CMS simultaneously
  also is silly. Delete 0001-Remove-LCMS-mutex.patch .</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732622400">- Update to release 0.8.4
  * Huffman lookup table size fix [CVE-2024-11403]
  * Check height limit in modular trees [CVE-2024-11498]</changelog>
</package>
<package pkgid="d8e94caa6233600fa2a75f0cd5a34a11ea3c84f1c2c0396e3fcc901a364a216f" name="gimp-plugin-jxl" arch="i586">
  <version epoch="0" ver="0.8.4" rel="bp156.3.3.4"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658577600">- Initial package (version 0.7~779.f5d6e29) build.opensuse.org</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1663848000">- Update to 0.7.0:
  * new functions for retrieving associated alpha channel with
    premultiplied or unpremultiplied colors, for blending
    information for extra channels in the non-coalesced case, for
    getting the intended downsampling ratio of progressive steps,
    for disabling rendering of spot colors.
  * Added ability to add metadata boxes, to set several encoder
    options, to check required codestream compatibility level,
    for force-emitting the box-based container format, to store
    JPEG metadata for lossless reconstruction, to encode
    arbitrary extra channels.</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1671105600">- Added missing baselibs.conf so that 32bit library packages
  become available</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1671451200">- Add patch (applied reversed) to revert the requirement for an
  updated liblcms2 library when we have an older one. This allows
  libjxl to build in SLE15 SP4/SP5 (and Leap 15.4/15.5):
  * 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674043200">- Update to release 0.8
  * API: new function JxlDecoderSetImageBitDepth and
    JxlEncoderSetFrameBitDepth to set the bit depth of buffers.
  * encoder API: add an effort 10 option for lossless
    compression; using this setting requires calling
    JxlEncoderAllowExpertOptions.
- Enable PNG utilities [boo#1205107]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675598400">- Update to release 0.8.1
  * Allow fast-lossless for 16-bit float input
  * Fix OOB read in exif.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676030400">- build glibc hwcaps optimized overlay</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1681732800">- Refresh 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686312000">- Build package in correct phase
- Use macros for ldconfig</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1686744000">- Update to release 0.8.2
  * Fix an integer underflow bug in patch decoding.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694865600">- Build plugins:
  * Add _service file to generate skcms tarball (needed to build
    plugins).
  * Add skcms tarball as source and copy extracted dir to
    ./third_party/ so cmake can find it.
  * Split out new packages:
  * gdk-pixbuf-loader-jxl: Pixbuf loader for supported apps.
  * gimp-plugin-jxl: Plugin to allow gimp to work with JPEG XL
    files.
  * jxl-thumbnailer: Thumbnailer and mime files to allow
    generating thumbnails for JPEG XL files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1695297600">- Switch from LCMS to SKCMS: libjxl core can use either, but
  plugins can only use SKCMS. Exercising two CMS simultaneously
  also is silly. Delete 0001-Remove-LCMS-mutex.patch .</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732622400">- Update to release 0.8.4
  * Huffman lookup table size fix [CVE-2024-11403]
  * Check height limit in modular trees [CVE-2024-11498]</changelog>
</package>
<package pkgid="cd4ec7245678d3a7e9bda320958d3eb6bbc7de2e8841761622e4d42232143a92" name="gimp-plugin-jxl" arch="s390x">
  <version epoch="0" ver="0.8.4" rel="bp156.3.3.4"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658577600">- Initial package (version 0.7~779.f5d6e29) build.opensuse.org</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1663848000">- Update to 0.7.0:
  * new functions for retrieving associated alpha channel with
    premultiplied or unpremultiplied colors, for blending
    information for extra channels in the non-coalesced case, for
    getting the intended downsampling ratio of progressive steps,
    for disabling rendering of spot colors.
  * Added ability to add metadata boxes, to set several encoder
    options, to check required codestream compatibility level,
    for force-emitting the box-based container format, to store
    JPEG metadata for lossless reconstruction, to encode
    arbitrary extra channels.</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1671105600">- Added missing baselibs.conf so that 32bit library packages
  become available</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1671451200">- Add patch (applied reversed) to revert the requirement for an
  updated liblcms2 library when we have an older one. This allows
  libjxl to build in SLE15 SP4/SP5 (and Leap 15.4/15.5):
  * 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674043200">- Update to release 0.8
  * API: new function JxlDecoderSetImageBitDepth and
    JxlEncoderSetFrameBitDepth to set the bit depth of buffers.
  * encoder API: add an effort 10 option for lossless
    compression; using this setting requires calling
    JxlEncoderAllowExpertOptions.
- Enable PNG utilities [boo#1205107]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675598400">- Update to release 0.8.1
  * Allow fast-lossless for 16-bit float input
  * Fix OOB read in exif.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676030400">- build glibc hwcaps optimized overlay</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1681732800">- Refresh 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686312000">- Build package in correct phase
- Use macros for ldconfig</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1686744000">- Update to release 0.8.2
  * Fix an integer underflow bug in patch decoding.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694865600">- Build plugins:
  * Add _service file to generate skcms tarball (needed to build
    plugins).
  * Add skcms tarball as source and copy extracted dir to
    ./third_party/ so cmake can find it.
  * Split out new packages:
  * gdk-pixbuf-loader-jxl: Pixbuf loader for supported apps.
  * gimp-plugin-jxl: Plugin to allow gimp to work with JPEG XL
    files.
  * jxl-thumbnailer: Thumbnailer and mime files to allow
    generating thumbnails for JPEG XL files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1695297600">- Switch from LCMS to SKCMS: libjxl core can use either, but
  plugins can only use SKCMS. Exercising two CMS simultaneously
  also is silly. Delete 0001-Remove-LCMS-mutex.patch .</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732622400">- Update to release 0.8.4
  * Huffman lookup table size fix [CVE-2024-11403]
  * Check height limit in modular trees [CVE-2024-11498]</changelog>
</package>
<package pkgid="c53114738fd3f5611d47d1d65fee482ab2b9c2381cb25496ba41a1f9004595ef" name="gimp-plugin-jxl" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="bp156.3.3.4"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658577600">- Initial package (version 0.7~779.f5d6e29) build.opensuse.org</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1663848000">- Update to 0.7.0:
  * new functions for retrieving associated alpha channel with
    premultiplied or unpremultiplied colors, for blending
    information for extra channels in the non-coalesced case, for
    getting the intended downsampling ratio of progressive steps,
    for disabling rendering of spot colors.
  * Added ability to add metadata boxes, to set several encoder
    options, to check required codestream compatibility level,
    for force-emitting the box-based container format, to store
    JPEG metadata for lossless reconstruction, to encode
    arbitrary extra channels.</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1671105600">- Added missing baselibs.conf so that 32bit library packages
  become available</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1671451200">- Add patch (applied reversed) to revert the requirement for an
  updated liblcms2 library when we have an older one. This allows
  libjxl to build in SLE15 SP4/SP5 (and Leap 15.4/15.5):
  * 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674043200">- Update to release 0.8
  * API: new function JxlDecoderSetImageBitDepth and
    JxlEncoderSetFrameBitDepth to set the bit depth of buffers.
  * encoder API: add an effort 10 option for lossless
    compression; using this setting requires calling
    JxlEncoderAllowExpertOptions.
- Enable PNG utilities [boo#1205107]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675598400">- Update to release 0.8.1
  * Allow fast-lossless for 16-bit float input
  * Fix OOB read in exif.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676030400">- build glibc hwcaps optimized overlay</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1681732800">- Refresh 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686312000">- Build package in correct phase
- Use macros for ldconfig</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1686744000">- Update to release 0.8.2
  * Fix an integer underflow bug in patch decoding.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694865600">- Build plugins:
  * Add _service file to generate skcms tarball (needed to build
    plugins).
  * Add skcms tarball as source and copy extracted dir to
    ./third_party/ so cmake can find it.
  * Split out new packages:
  * gdk-pixbuf-loader-jxl: Pixbuf loader for supported apps.
  * gimp-plugin-jxl: Plugin to allow gimp to work with JPEG XL
    files.
  * jxl-thumbnailer: Thumbnailer and mime files to allow
    generating thumbnails for JPEG XL files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1695297600">- Switch from LCMS to SKCMS: libjxl core can use either, but
  plugins can only use SKCMS. Exercising two CMS simultaneously
  also is silly. Delete 0001-Remove-LCMS-mutex.patch .</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732622400">- Update to release 0.8.4
  * Huffman lookup table size fix [CVE-2024-11403]
  * Check height limit in modular trees [CVE-2024-11498]</changelog>
</package>
<package pkgid="1b8e0eef1e3da8cb738ea8ded3f28e441b3fe589f07b8bff512d7ff1b2cf3376" name="git-bug" arch="aarch64">
  <version epoch="0" ver="0.10.1" rel="bp156.3.6.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
  <changelog author="mcepl@cepl.eu" date="1742904000">- Update to version 0.8.0+git.1742269202.0ab94c9:
  * deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
  (apparently upstream still didn’t see the other one).</changelog>
  <changelog author="mcepl@cepl.eu" date="1746532800">- Update to version 0.8.1+git.1746484874.96c7a111:
  * docs: update install, contrib, and usage documentation (#1222)
  * fix: resolve the remote URI using url.*.insteadOf (#1394)
  * build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
  * chore: gofmt simplify gitlab/export_test.go (#1392)
  * fix: checkout repo before setting up go environment (#1390)
  * feat: bump to go v1.24.2 (#1389)
  * chore: update golang.org/x/net (#1379)
  * fix: use -0700 when formatting time (#1388)
  * fix: use correct url for gitlab PATs (#1384)
  * refactor: remove depdendency on pnpm for auto-label action (#1383)
  * feat: add action: auto-label (#1380)
  * feat: remove lifecycle/frozen (#1377)
  * build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
  * feat: support new exclusion label: lifecycle/pinned (#1375)
  * fix: refactor how gitlab title changes are detected (#1370)
  * revert: "Create Dependabot config file" (#1374)
  * refactor: rename //:git-bug.go to //:main.go (#1373)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
  * fix: set GitLastTag to an empty string when git-describe errors (#1355)
  * chore: update go-git to v5@masterupdate_mods (#1284)
  * refactor: Directly swap two variables to optimize code (#1272)
  * Update README.md Matrix link to new room (#1275)
- Remove upstreamed patch:
  - CVE-2025-22869-bump-go-crypto-ssh.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1747656000">- Update to version 0.10.1:
  - cli: ignore missing sections when removing configuration (ddb22a2f)
- Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
- Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
- Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1760529600">- Revendor to include golang.org/x/net/html v 0.45.0 to prevent
  possible DoS by various algorithms with quadratic complexity
  when parsing HTML documents (bsc#1251463, CVE-2025-47911 and
  bsc#1251664, CVE-2025-58190).</changelog>
</package>
<package pkgid="bba50f7d3e0f7db4dcae4f3d40ee6478331bce9be8a6bfafbd58ab2cce93b1ce" name="git-bug" arch="i586">
  <version epoch="0" ver="0.10.1" rel="bp156.3.6.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
  <changelog author="mcepl@cepl.eu" date="1742904000">- Update to version 0.8.0+git.1742269202.0ab94c9:
  * deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
  (apparently upstream still didn’t see the other one).</changelog>
  <changelog author="mcepl@cepl.eu" date="1746532800">- Update to version 0.8.1+git.1746484874.96c7a111:
  * docs: update install, contrib, and usage documentation (#1222)
  * fix: resolve the remote URI using url.*.insteadOf (#1394)
  * build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
  * chore: gofmt simplify gitlab/export_test.go (#1392)
  * fix: checkout repo before setting up go environment (#1390)
  * feat: bump to go v1.24.2 (#1389)
  * chore: update golang.org/x/net (#1379)
  * fix: use -0700 when formatting time (#1388)
  * fix: use correct url for gitlab PATs (#1384)
  * refactor: remove depdendency on pnpm for auto-label action (#1383)
  * feat: add action: auto-label (#1380)
  * feat: remove lifecycle/frozen (#1377)
  * build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
  * feat: support new exclusion label: lifecycle/pinned (#1375)
  * fix: refactor how gitlab title changes are detected (#1370)
  * revert: "Create Dependabot config file" (#1374)
  * refactor: rename //:git-bug.go to //:main.go (#1373)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
  * fix: set GitLastTag to an empty string when git-describe errors (#1355)
  * chore: update go-git to v5@masterupdate_mods (#1284)
  * refactor: Directly swap two variables to optimize code (#1272)
  * Update README.md Matrix link to new room (#1275)
- Remove upstreamed patch:
  - CVE-2025-22869-bump-go-crypto-ssh.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1747656000">- Update to version 0.10.1:
  - cli: ignore missing sections when removing configuration (ddb22a2f)
- Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
- Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
- Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1760529600">- Revendor to include golang.org/x/net/html v 0.45.0 to prevent
  possible DoS by various algorithms with quadratic complexity
  when parsing HTML documents (bsc#1251463, CVE-2025-47911 and
  bsc#1251664, CVE-2025-58190).</changelog>
</package>
<package pkgid="9133e5e576e4a0cd7984c2e6441da7a0b6d718120fba5f3edd35ec6f982257c1" name="git-bug" arch="ppc64le">
  <version epoch="0" ver="0.10.1" rel="bp156.3.6.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
  <changelog author="mcepl@cepl.eu" date="1742904000">- Update to version 0.8.0+git.1742269202.0ab94c9:
  * deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
  (apparently upstream still didn’t see the other one).</changelog>
  <changelog author="mcepl@cepl.eu" date="1746532800">- Update to version 0.8.1+git.1746484874.96c7a111:
  * docs: update install, contrib, and usage documentation (#1222)
  * fix: resolve the remote URI using url.*.insteadOf (#1394)
  * build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
  * chore: gofmt simplify gitlab/export_test.go (#1392)
  * fix: checkout repo before setting up go environment (#1390)
  * feat: bump to go v1.24.2 (#1389)
  * chore: update golang.org/x/net (#1379)
  * fix: use -0700 when formatting time (#1388)
  * fix: use correct url for gitlab PATs (#1384)
  * refactor: remove depdendency on pnpm for auto-label action (#1383)
  * feat: add action: auto-label (#1380)
  * feat: remove lifecycle/frozen (#1377)
  * build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
  * feat: support new exclusion label: lifecycle/pinned (#1375)
  * fix: refactor how gitlab title changes are detected (#1370)
  * revert: "Create Dependabot config file" (#1374)
  * refactor: rename //:git-bug.go to //:main.go (#1373)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
  * fix: set GitLastTag to an empty string when git-describe errors (#1355)
  * chore: update go-git to v5@masterupdate_mods (#1284)
  * refactor: Directly swap two variables to optimize code (#1272)
  * Update README.md Matrix link to new room (#1275)
- Remove upstreamed patch:
  - CVE-2025-22869-bump-go-crypto-ssh.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1747656000">- Update to version 0.10.1:
  - cli: ignore missing sections when removing configuration (ddb22a2f)
- Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
- Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
- Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1760529600">- Revendor to include golang.org/x/net/html v 0.45.0 to prevent
  possible DoS by various algorithms with quadratic complexity
  when parsing HTML documents (bsc#1251463, CVE-2025-47911 and
  bsc#1251664, CVE-2025-58190).</changelog>
</package>
<package pkgid="2037b56bca46647f2ba00e150cf5f1ee542ab23c709c2d226735753232999cf0" name="git-bug" arch="s390x">
  <version epoch="0" ver="0.10.1" rel="bp156.3.6.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
  <changelog author="mcepl@cepl.eu" date="1742904000">- Update to version 0.8.0+git.1742269202.0ab94c9:
  * deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
  (apparently upstream still didn’t see the other one).</changelog>
  <changelog author="mcepl@cepl.eu" date="1746532800">- Update to version 0.8.1+git.1746484874.96c7a111:
  * docs: update install, contrib, and usage documentation (#1222)
  * fix: resolve the remote URI using url.*.insteadOf (#1394)
  * build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
  * chore: gofmt simplify gitlab/export_test.go (#1392)
  * fix: checkout repo before setting up go environment (#1390)
  * feat: bump to go v1.24.2 (#1389)
  * chore: update golang.org/x/net (#1379)
  * fix: use -0700 when formatting time (#1388)
  * fix: use correct url for gitlab PATs (#1384)
  * refactor: remove depdendency on pnpm for auto-label action (#1383)
  * feat: add action: auto-label (#1380)
  * feat: remove lifecycle/frozen (#1377)
  * build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
  * feat: support new exclusion label: lifecycle/pinned (#1375)
  * fix: refactor how gitlab title changes are detected (#1370)
  * revert: "Create Dependabot config file" (#1374)
  * refactor: rename //:git-bug.go to //:main.go (#1373)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
  * fix: set GitLastTag to an empty string when git-describe errors (#1355)
  * chore: update go-git to v5@masterupdate_mods (#1284)
  * refactor: Directly swap two variables to optimize code (#1272)
  * Update README.md Matrix link to new room (#1275)
- Remove upstreamed patch:
  - CVE-2025-22869-bump-go-crypto-ssh.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1747656000">- Update to version 0.10.1:
  - cli: ignore missing sections when removing configuration (ddb22a2f)
- Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
- Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
- Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1760529600">- Revendor to include golang.org/x/net/html v 0.45.0 to prevent
  possible DoS by various algorithms with quadratic complexity
  when parsing HTML documents (bsc#1251463, CVE-2025-47911 and
  bsc#1251664, CVE-2025-58190).</changelog>
</package>
<package pkgid="e2048c919f196da3ff7db86c9e170dae35db50618ca3d30d89e77467052494d5" name="git-bug" arch="src">
  <version epoch="0" ver="0.10.1" rel="bp156.3.6.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
  <changelog author="mcepl@cepl.eu" date="1742904000">- Update to version 0.8.0+git.1742269202.0ab94c9:
  * deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
  (apparently upstream still didn’t see the other one).</changelog>
  <changelog author="mcepl@cepl.eu" date="1746532800">- Update to version 0.8.1+git.1746484874.96c7a111:
  * docs: update install, contrib, and usage documentation (#1222)
  * fix: resolve the remote URI using url.*.insteadOf (#1394)
  * build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
  * chore: gofmt simplify gitlab/export_test.go (#1392)
  * fix: checkout repo before setting up go environment (#1390)
  * feat: bump to go v1.24.2 (#1389)
  * chore: update golang.org/x/net (#1379)
  * fix: use -0700 when formatting time (#1388)
  * fix: use correct url for gitlab PATs (#1384)
  * refactor: remove depdendency on pnpm for auto-label action (#1383)
  * feat: add action: auto-label (#1380)
  * feat: remove lifecycle/frozen (#1377)
  * build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
  * feat: support new exclusion label: lifecycle/pinned (#1375)
  * fix: refactor how gitlab title changes are detected (#1370)
  * revert: "Create Dependabot config file" (#1374)
  * refactor: rename //:git-bug.go to //:main.go (#1373)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
  * fix: set GitLastTag to an empty string when git-describe errors (#1355)
  * chore: update go-git to v5@masterupdate_mods (#1284)
  * refactor: Directly swap two variables to optimize code (#1272)
  * Update README.md Matrix link to new room (#1275)
- Remove upstreamed patch:
  - CVE-2025-22869-bump-go-crypto-ssh.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1747656000">- Update to version 0.10.1:
  - cli: ignore missing sections when removing configuration (ddb22a2f)
- Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
- Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
- Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1760529600">- Revendor to include golang.org/x/net/html v 0.45.0 to prevent
  possible DoS by various algorithms with quadratic complexity
  when parsing HTML documents (bsc#1251463, CVE-2025-47911 and
  bsc#1251664, CVE-2025-58190).</changelog>
</package>
<package pkgid="c9f14aacbe6a83ce30f51f1f682a4faf288fbc8fe5674a66b8cee232d2be1a73" name="git-bug" arch="x86_64">
  <version epoch="0" ver="0.10.1" rel="bp156.3.6.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
  <changelog author="mcepl@cepl.eu" date="1742904000">- Update to version 0.8.0+git.1742269202.0ab94c9:
  * deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
  (apparently upstream still didn’t see the other one).</changelog>
  <changelog author="mcepl@cepl.eu" date="1746532800">- Update to version 0.8.1+git.1746484874.96c7a111:
  * docs: update install, contrib, and usage documentation (#1222)
  * fix: resolve the remote URI using url.*.insteadOf (#1394)
  * build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
  * chore: gofmt simplify gitlab/export_test.go (#1392)
  * fix: checkout repo before setting up go environment (#1390)
  * feat: bump to go v1.24.2 (#1389)
  * chore: update golang.org/x/net (#1379)
  * fix: use -0700 when formatting time (#1388)
  * fix: use correct url for gitlab PATs (#1384)
  * refactor: remove depdendency on pnpm for auto-label action (#1383)
  * feat: add action: auto-label (#1380)
  * feat: remove lifecycle/frozen (#1377)
  * build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
  * feat: support new exclusion label: lifecycle/pinned (#1375)
  * fix: refactor how gitlab title changes are detected (#1370)
  * revert: "Create Dependabot config file" (#1374)
  * refactor: rename //:git-bug.go to //:main.go (#1373)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
  * fix: set GitLastTag to an empty string when git-describe errors (#1355)
  * chore: update go-git to v5@masterupdate_mods (#1284)
  * refactor: Directly swap two variables to optimize code (#1272)
  * Update README.md Matrix link to new room (#1275)
- Remove upstreamed patch:
  - CVE-2025-22869-bump-go-crypto-ssh.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1747656000">- Update to version 0.10.1:
  - cli: ignore missing sections when removing configuration (ddb22a2f)
- Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
- Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
- Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1760529600">- Revendor to include golang.org/x/net/html v 0.45.0 to prevent
  possible DoS by various algorithms with quadratic complexity
  when parsing HTML documents (bsc#1251463, CVE-2025-47911 and
  bsc#1251664, CVE-2025-58190).</changelog>
</package>
<package pkgid="f9fcf5ff07723ce1f368065f8419ce79ac9bc9966ed4f9cfbd05ed6b123b906b" name="git-bug" arch="aarch64">
  <version epoch="0" ver="0.8.0+git.1733745604.d499b6e" rel="bp156.3.3.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
</package>
<package pkgid="c53d19f3861ab4b18241006540ca2177f1ada78f1acb48b7f1930ef5c210c9a1" name="git-bug" arch="i586">
  <version epoch="0" ver="0.8.0+git.1733745604.d499b6e" rel="bp156.3.3.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
</package>
<package pkgid="cd66ecfff24fe4adebbdca9d5f39ea90325cdd8580db6ce6592b9ffad1a002ab" name="git-bug" arch="ppc64le">
  <version epoch="0" ver="0.8.0+git.1733745604.d499b6e" rel="bp156.3.3.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
</package>
<package pkgid="532e443617fa29ea20030f80af9570eda37df0b26fb90dc333bc030a9a14e00f" name="git-bug" arch="s390x">
  <version epoch="0" ver="0.8.0+git.1733745604.d499b6e" rel="bp156.3.3.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
</package>
<package pkgid="4991781f94f658520bbc1424401d167680a8a47f441000d87f3f9b6b3965ff22" name="git-bug" arch="src">
  <version epoch="0" ver="0.8.0+git.1733745604.d499b6e" rel="bp156.3.3.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
</package>
<package pkgid="1ddd6b864a769a8a442d9755fc83570d70283f9a54882d99e56f5b5fba3e92f8" name="git-bug" arch="x86_64">
  <version epoch="0" ver="0.8.0+git.1733745604.d499b6e" rel="bp156.3.3.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
</package>
<package pkgid="7ac6abafd53c09913c40e28b29e8db36f055f47f52a7fbb9ae674cdd3293a342" name="git-bug-bash-completion" arch="noarch">
  <version epoch="0" ver="0.10.1" rel="bp156.3.6.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
  <changelog author="mcepl@cepl.eu" date="1742904000">- Update to version 0.8.0+git.1742269202.0ab94c9:
  * deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
  (apparently upstream still didn’t see the other one).</changelog>
  <changelog author="mcepl@cepl.eu" date="1746532800">- Update to version 0.8.1+git.1746484874.96c7a111:
  * docs: update install, contrib, and usage documentation (#1222)
  * fix: resolve the remote URI using url.*.insteadOf (#1394)
  * build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
  * chore: gofmt simplify gitlab/export_test.go (#1392)
  * fix: checkout repo before setting up go environment (#1390)
  * feat: bump to go v1.24.2 (#1389)
  * chore: update golang.org/x/net (#1379)
  * fix: use -0700 when formatting time (#1388)
  * fix: use correct url for gitlab PATs (#1384)
  * refactor: remove depdendency on pnpm for auto-label action (#1383)
  * feat: add action: auto-label (#1380)
  * feat: remove lifecycle/frozen (#1377)
  * build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
  * feat: support new exclusion label: lifecycle/pinned (#1375)
  * fix: refactor how gitlab title changes are detected (#1370)
  * revert: "Create Dependabot config file" (#1374)
  * refactor: rename //:git-bug.go to //:main.go (#1373)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
  * fix: set GitLastTag to an empty string when git-describe errors (#1355)
  * chore: update go-git to v5@masterupdate_mods (#1284)
  * refactor: Directly swap two variables to optimize code (#1272)
  * Update README.md Matrix link to new room (#1275)
- Remove upstreamed patch:
  - CVE-2025-22869-bump-go-crypto-ssh.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1747656000">- Update to version 0.10.1:
  - cli: ignore missing sections when removing configuration (ddb22a2f)
- Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
- Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
- Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1760529600">- Revendor to include golang.org/x/net/html v 0.45.0 to prevent
  possible DoS by various algorithms with quadratic complexity
  when parsing HTML documents (bsc#1251463, CVE-2025-47911 and
  bsc#1251664, CVE-2025-58190).</changelog>
</package>
<package pkgid="9f425192153e7027df6801d63514ff51b11be7a26ffaae5ef001fc2b344bad79" name="git-bug-bash-completion" arch="noarch">
  <version epoch="0" ver="0.8.0+git.1733745604.d499b6e" rel="bp156.3.3.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
</package>
<package pkgid="e5256b46d038600ee368b53f5ffff627a69d842a9f12bd6aab773f3fae3d51b4" name="git-bug-fish-completion" arch="noarch">
  <version epoch="0" ver="0.10.1" rel="bp156.3.6.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
  <changelog author="mcepl@cepl.eu" date="1742904000">- Update to version 0.8.0+git.1742269202.0ab94c9:
  * deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
  (apparently upstream still didn’t see the other one).</changelog>
  <changelog author="mcepl@cepl.eu" date="1746532800">- Update to version 0.8.1+git.1746484874.96c7a111:
  * docs: update install, contrib, and usage documentation (#1222)
  * fix: resolve the remote URI using url.*.insteadOf (#1394)
  * build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
  * chore: gofmt simplify gitlab/export_test.go (#1392)
  * fix: checkout repo before setting up go environment (#1390)
  * feat: bump to go v1.24.2 (#1389)
  * chore: update golang.org/x/net (#1379)
  * fix: use -0700 when formatting time (#1388)
  * fix: use correct url for gitlab PATs (#1384)
  * refactor: remove depdendency on pnpm for auto-label action (#1383)
  * feat: add action: auto-label (#1380)
  * feat: remove lifecycle/frozen (#1377)
  * build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
  * feat: support new exclusion label: lifecycle/pinned (#1375)
  * fix: refactor how gitlab title changes are detected (#1370)
  * revert: "Create Dependabot config file" (#1374)
  * refactor: rename //:git-bug.go to //:main.go (#1373)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
  * fix: set GitLastTag to an empty string when git-describe errors (#1355)
  * chore: update go-git to v5@masterupdate_mods (#1284)
  * refactor: Directly swap two variables to optimize code (#1272)
  * Update README.md Matrix link to new room (#1275)
- Remove upstreamed patch:
  - CVE-2025-22869-bump-go-crypto-ssh.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1747656000">- Update to version 0.10.1:
  - cli: ignore missing sections when removing configuration (ddb22a2f)
- Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
- Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
- Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1760529600">- Revendor to include golang.org/x/net/html v 0.45.0 to prevent
  possible DoS by various algorithms with quadratic complexity
  when parsing HTML documents (bsc#1251463, CVE-2025-47911 and
  bsc#1251664, CVE-2025-58190).</changelog>
</package>
<package pkgid="4324740078308ee7ed8f6a3c6db04dacbe1b15f6ef235d1be0f70af57d8efb57" name="git-bug-fish-completion" arch="noarch">
  <version epoch="0" ver="0.8.0+git.1733745604.d499b6e" rel="bp156.3.3.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
</package>
<package pkgid="f908694ad50e5c143a9abb887593763001cb1d576859a10db265adc5a86c70b6" name="git-bug-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.10.1" rel="bp156.3.6.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
  <changelog author="mcepl@cepl.eu" date="1742904000">- Update to version 0.8.0+git.1742269202.0ab94c9:
  * deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
  (apparently upstream still didn’t see the other one).</changelog>
  <changelog author="mcepl@cepl.eu" date="1746532800">- Update to version 0.8.1+git.1746484874.96c7a111:
  * docs: update install, contrib, and usage documentation (#1222)
  * fix: resolve the remote URI using url.*.insteadOf (#1394)
  * build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
  * chore: gofmt simplify gitlab/export_test.go (#1392)
  * fix: checkout repo before setting up go environment (#1390)
  * feat: bump to go v1.24.2 (#1389)
  * chore: update golang.org/x/net (#1379)
  * fix: use -0700 when formatting time (#1388)
  * fix: use correct url for gitlab PATs (#1384)
  * refactor: remove depdendency on pnpm for auto-label action (#1383)
  * feat: add action: auto-label (#1380)
  * feat: remove lifecycle/frozen (#1377)
  * build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
  * feat: support new exclusion label: lifecycle/pinned (#1375)
  * fix: refactor how gitlab title changes are detected (#1370)
  * revert: "Create Dependabot config file" (#1374)
  * refactor: rename //:git-bug.go to //:main.go (#1373)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
  * fix: set GitLastTag to an empty string when git-describe errors (#1355)
  * chore: update go-git to v5@masterupdate_mods (#1284)
  * refactor: Directly swap two variables to optimize code (#1272)
  * Update README.md Matrix link to new room (#1275)
- Remove upstreamed patch:
  - CVE-2025-22869-bump-go-crypto-ssh.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1747656000">- Update to version 0.10.1:
  - cli: ignore missing sections when removing configuration (ddb22a2f)
- Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
- Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
- Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1760529600">- Revendor to include golang.org/x/net/html v 0.45.0 to prevent
  possible DoS by various algorithms with quadratic complexity
  when parsing HTML documents (bsc#1251463, CVE-2025-47911 and
  bsc#1251664, CVE-2025-58190).</changelog>
</package>
<package pkgid="6ba2a4745608d1509a18e2617c186f19ad8877a497828eac692c68dc048f645e" name="git-bug-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.8.0+git.1733745604.d499b6e" rel="bp156.3.3.1"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1611316800">- Initial packaging of 0.7.1</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1638014400">- Update to 0.7.2:
  - fixes a security issue (CVE-2021-28955) where arbitrary
    malicious code could be executed if someone commit a git
    executable inside the repository (reproducible only on
    Windows).</changelog>
  <changelog author="mcepl@cepl.eu" date="1638187200">- Update to version 0.7.2+git.1632416688.1eaf3ec0:
  * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 (#709)
  * Tests for the github bridge (#706)
  * feature: Github bridge mutation rate limit (#694)
  * Add Linter Step (#698)
  * Bump golang.org/x/text from 0.3.6 to 0.3.7 (#702)
  * Bump github.com/xanzy/go-gitlab from 0.50.1 to 0.50.4 (#707)
  * Bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#695)
  * Bump github.com/go-git/go-git/v5 from 5.4.1 to 5.4.2 (#689)
  * Bump github.com/xanzy/go-gitlab from 0.50.0 to 0.50.1 (#693)
  * Bump dns-packet from 1.3.1 to 1.3.4 in /webui</changelog>
  <changelog author="mcepl@cepl.eu" date="1666008000">- Update to version 0.7.2+git.1665512451.0eef939:
  * makefile: better PHONY
  * webui: put react-scripts and typescript as dev-dependency
  * webui: update most of dependencies
  * build(deps): bump github.com/99designs/gqlgen from 0.17.17 to 0.17.20
  * fix: process unused (but assigned) error
  * fix(884): scan PRs for insecure practices
  * feat(530) make label commands consistent
  * test(863): fix test for full id instead of "human"
  * refactor(git-bug-863): merge ls-id into ls
  * build(deps): bump github.com/praetorian-inc/gokart from 0.4.0 to 0.5.1
  * build(deps): bump github.com/99designs/gqlgen from 0.17.13 to 0.17.17
  * fix: correct name for one of the security phonies
  * feat: run security checks during Go workflow
  * feat: add recipes for security analysis
  * fix: hide tools versioning behind build tags
  * feat: add security tools
  * feat: version tools using Go module system
  * generalized interface for an Entity
  * dag: test op serialisation with the unmarshaller, to allow resolving entities
  * fix(850): normalize Windows line endings -&gt; *nix (golden files)
  * fix(850): normalize Windows line endings -&gt; *nix
  * fix(850): merge in CombinedId from 664
  * webui: add a flag to log handling errors
  * build(deps): bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.1
  * webui: adapt to CombinedId
  * bug: have a type for combined ids, fix https://github.com/MichaelMure/git-bug/issues/653
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.68.0 to 0.72.0
  * move bug.Status in entities/common for reuse
  * fix(850): remove obsolete test logging
  * tests(850): add tests for comment ls, add and edit
  * move {bug,identity} to /entities, move input to /commands
  * remove file that shouldn't be there
  * core: generalized resolvers to resolve any entity time when unmarshalling an operation
  * fix(836): revert to older test harness
  * feat(836): updates default ls formatter for TSV output
  * docs(847): add compact to docs and bash for ls command's format flag
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
  * build: go 1.18 minimum
  * bug: fix an issue where Id would be used, then changed due to metadata
  * entity/dag: proper base operation for simplified implementation
  * doc: more tiny fixes
  * doc: more tiny fixes
  * doc: tiny tweaks
  * test(809): do not export function that returns GoGit filesystem
  * test(809): remove reliance on repo's filesystem
  * test: use testing.TB as common interface
  * test(809): remove remaining calls to InitGoRepo in tests
  * refactor(809): eliminate need to defer CleanupTestRepos()
  * test(778): simplify and guarantee backend cleanup
  * refactor(778): test only command implementations
  * chore(808): rearrange imports to git-bug convention
  * test(808): document getCWD() and clean-up arguments
  * test(808): skip root help test that uses a golden file
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * fix(808): remove duplication stderr/stdout set-up
  * test(808): make build tag compatible with Go 1.16
  * test(808): do not run golden file tests on Windows
  * fix(808): simplify handling of Windows line terminations
  * chore(808): merge in LocalStorage namespace configuration
  * fix(808): replace Windows line terminators
  * github: fix data race when closing event channel
  * graphql: fix two invalid mutex lock leading to data races
  * fix(778): remove extra mutex lock when resolving bug prefix
  * cache: ensure that the default repo has a non-empty name to make js/apollo happy
  * doc: more discoverable docs
  * misc: move all completions in a dedicated folder
  * refactor: simplify creation of temp dir - after 1.15
  * fix: remove only t.Parallel()
  * gogit: close index before deleting it on disk
  * test: clean up temp dir and repo correctly
  * test(778): execute rm bug in testEnv (hangs)
  * test(778): execute add user in testEnv and return userID
  * test(778): clear output after user creation
  * test(778): verify user create results in an identity and cache
  * test(778): verify root command returns main help text
  * test(778): allow alternate CWD via context
  * test(778): capture stderr and stdout during tests
  * test: add verification that localStorage.Root() resolves to the correct absolute filepath
  * refactor: use namespace instead of application of applicationName
  * chore: clean-up commented code
  * feat: make local storage configurable
  * build(deps): bump github.com/xanzy/go-gitlab from 0.64.0 to 0.68.0
  * model: Multiple, minor readability and language improvements
  * model: Removes now outdated statement about ops and root
  * model: Highlight some words with special meaning
  * model: Links to a section further down
  * model: Moves example description after the example
  * model: Adds link explaining nounce (wikipedia)
  * model: strict Markdown requires empty lines before (and after) lists
  * completion: lots of small ironing
  * ls: fix incorrect query parsing with quotes escaped by the shell
  * misc: fix bash completion with "git bug"
  * completion: use the correct GenBashCompletionV2 instead of the legacy function
  * Add command-specific argument completions
  * a few fixes
  * build(deps): bump github.com/xanzy/go-gitlab from 0.59.0 to 0.64.0
  * Allow new gitlab PAT format
  * entity/dag: add an extensive example
  * doc: add missing file
  * update doc
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * bug: don't serialize multiple time the author, only once in OperationPack
  * jira: fix incorrect client creation reusing the same credential
  * update cobra to v1.4.0
  * Bump github.com/99designs/gqlgen from 0.16.0 to 0.17.1
  * build: require go 1.16
  * build(deps): bump github.com/99designs/keyring from 1.2.0 to 1.2.1
  * Bump github.com/vektah/gqlparser/v2 from 2.4.0 to 2.4.1
  * entity: allow to resolve identities when numashalling operations
  * Fix a bunch of comments and documentations
  * build(deps): bump github.com/xanzy/go-gitlab from 0.57.0 to 0.59.0
  * Bump github.com/xanzy/go-gitlab from 0.55.1 to 0.57.0 (#757)
  * webui: fix dark theme colors
  * webui: fix compile
  * CI: update nodejs
  * Bump github.com/vektah/gqlparser/v2 from 2.2.0 to 2.4.0
  * webui: replace GraphQL linter
  * webui: upgrade Material UI
  * webui: upgrade react-router
  * webui: replace React imports
  * webui: upgrade most dependencies
  * webui: upgrade graphql-codegen dependencies
  * Bump github.com/xanzy/go-gitlab from 0.54.3 to 0.55.1
  * update gocui
  * update keyring and migrate to github.com/ProtonMail/go-crypto
  * update gqlgen
  * Bump follow-redirects from 1.13.0 to 1.14.7 in /webui (#735)
  * Bump github.com/xanzy/go-gitlab from 0.54.1 to 0.54.3 (#734)
  * Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#731)
  * Bump ws from 5.2.2 to 5.2.3 in /webui (#728)
  * Bump tmpl from 1.0.4 to 1.0.5 in /webui (#711)
  * Bump path-parse from 1.0.6 to 1.0.7 in /webui (#701)
  * Bump url-parse from 1.5.1 to 1.5.3 in /webui (#714)
  * Bump github.com/xanzy/go-gitlab from 0.50.4 to 0.54.1 (#732)
  * gitlab: re-enable previously broken test
  * gitlab: order events on the fly
  * Fix: github import, some issue titles cause error
  * Fix: github bridge: push then pull without duplication
  * Update URL of GitLab access token settings
  * Fix GitLab showing https:/../personal_access_token
  * Add scoop installation for Windows
  * Bump github.com/fatih/color from 1.12.0 to 1.13.0
  * Command ls: Add compact format
  * Add some documentation comments
  * gitlab: Add new iterator with state change events</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1666008001">- Fix Supplements tag for bash-completion subpackage.</changelog>
  <changelog author="mcepl@cepl.eu" date="1667476800">- Update to version 0.7.2+git.1666446996.55a2e8e:
  * doc: fix incorrect indentation</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1668945600">- Update to 0.8.0:
  - More than 800 commits and a long long time after, git-bug
    v0.8.0 is now available.
  - Once again, this release represent a push towards making
    git-bug generally useful and correct. The two main
    improvements are a new Entity framework and write-capable
    WebUI.
  - Breaking changes(openSUSE package is much closer to this
    release)
  - changes in the data model makes it a requirement to use the
    migration tool to to update any previous repo.
  - remove the legacy identities that were directly embedded in
    bugs
  - Core
  - introduce a reusable entity package capable of handling
    all the complex operations of an Entity (bug, board,
    config ...): operations, DAG manipulation, conflict merge,
    signature, integrity ... to greatly simplify writing and
    maintaining an entity. Documentation 1, Documentation 2
  - introduce CombinedId, a new kind of identifier for an
    item within an Entity (for example a comment in a bug),
    that hold two partial identifiers interleaved for fast
    addressing. Documentation
  - introduce the concept of resolvers, so that entities can
    link to another
  - use go-git to manipulate the git repository, instead of
    executing the local git binary
  - add support for signing the git commit with the author's
    signature, and verifying
  - add support for git config includes by @mindriot101
  - rework of the Repository layer for modularity, simplicity
    and testing, allowing more easily to plug an alternative
    storage
  - support for full text search in bug comments
  - support application namespace in the repository so that
    other app can use the entity package as a framework by
    @smoyer64
  - Commands
  - auto-completion of bug identifier, bridge names,
    credentials, labels, remote, identity and flags tada by
    @krobelus
  - complete refactoring to avoid global variables and be more
    conductive to testing
  - new command comment edit to edit a bug's comment
  - new command rm to remove a bug by @vincetiu8
  - ls and show learned different output format with
  - -format=&lt;format&gt;, with format being one of default, plain,
    json, compact and org-mode by @vincetiu8 and @karlicoss
  - allow user create without interactive prompt by
    @cvhariharan
  - Query language
  - support filtering on bugs having no labels
  - support filtering on metadata by @vmiklos
  - Bug
  - complete rework using the new entity framework
  - Cache
  - introduce a LRU to have a limit of entities loaded in
    memory and effectively cap the memory usage of long running
    processes by @vincetiu8
  - proper locking for concurrent access by @vincetiu8
  - Bridges
  - core: support for remote bug tracker rate limiting by
    @rng-dynamics
  - core: support to indicate that the configuration wizard is
    executed non-interactively and should have all the required
    parameters set by @GlancingMind
  - Github: revamped client and iterator with proper rate
    limiting handling by @rng-dynamics
  - Github: revamped credentials creation following Github
    removing the previous API by @rng-dynamics
  - Github: support new token format by @ellsclytn
  - Github: extended tests by @rng-dynamics
  - Github: fix push then pull creating duplicates by
    @rng-dynamics
  - Gitlab: revamped client to use the much better event API to
    replace the note API that was hard to use and caused a lot
    of problems and headaches by @5nord
  - Gitlab: fix access token settings by @remram44
  - Gitlab: cleanup titles on import by @vincetiu8
  - Gitlab: support new token format by @gaelj
  - Jira: fix incorrect client creation reusing the same
    credential
  - API
  - new HTTP handler to access files stored in git
  - new HTTP handler to upload a file to git
  - GraphQL
  - strong typing for identifiers
  - prepare for external authentication
  - introduce addCommentAndClose and addCommentAndReopen
    mutations, to comment and change a bug state in a single
    atomic operation by @GlancingMind
  - introduce editComment mutation to edit comments
  - TermUI
  - fix a crash when trying to open a bug when there are none
    by @vojta001
  - properly trim spaces in titles by @wavexx
  - make the help visually easier to parse
  - denser bug list view by @wavexx
  - fixed readability on bright terminal by @zdenek-crha
  - WebUI
  - now report GraphQL errors in the console when --log-errors
    is used
  - large refactoring to bring good practice and simplify
    future work by @sandhose
  - add support for read-only mode by @lukegb and
    @claudioantonio
  - support for creating bugs by @claudioantonio
  - support for closing and reopening bugs by @claudioantonio
  - allow to specify the host address when launching with
  - -host=&lt;host&gt; for easier hosting, in particular in
    container by @GlancingMind
  - allow specifying the initial query with --query by @vmiklos
  - dark mode by @GlancingMind
  - show count of comment on each bug in the list by
    @GlancingMind
  - improved navigation by @GlancingMind
  - comment edition and show edit history by @GlancingMind
  - bug list filtering by @GlancingMind
  - add user profile by @GlancingMind
  - show placeholder for empty comment preview by @GlancingMind</changelog>
  <changelog author="mcepl@cepl.eu" date="1711022400">- Update to version 0.8.0+git.1697403397.1212f75:
  * Fix typo
  * fix openpgp handling to sign/check
  * codespell: more ignore
  * api/graphql: regenerate after gqlgen upgrade
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * build(deps): bump github.com/99designs/gqlgen from 0.17.20 to 0.17.36
  * regenerate after cobra update
  * update to golang-lru v2
  * build(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2
  * build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.11.0
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19
  * build(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0
  * build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0
  * build(deps): bump golang.org/x/vuln
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump github.com/cloudflare/circl from 1.3.1 to 1.3.3
  * build(deps): bump golang.org/x/crypto from 0.5.0 to 0.12.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.5.2
  * codespell: no "with" means using codespellrc, add more opt out
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/sys from 0.8.0 to 0.11.0
  * build(deps): bump golang.org/x/text from 0.9.0 to 0.12.0
  * build(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.90.0
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4
  * build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.8.0
  * execenv: fix some cache building progress bar artifact
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1
  * util: better IsRunning(pid)
  * webui: also teardown cleanly on SIGTERM
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * CI: ignore spelling mistake in repo to be imported from github
  * tools: fix how security tools are setup and launched
  * repo: improve support for gitdir indirection
  * build(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.1
  * add more ideas in the feature matrix
  * cache: faster indexing by caping Bleve batch count
  * doc: add a feature matrix
  * chore: updated error message when detectGitPath fails
  * test: resolve changes for PR #1004, add unit test, fix issue uncovered by unit test
  * Add github workflow for codespell
  * [DATALAD RUNCMD] Run codespell -w
  * rudimentary codespell configuration
  * [DATALAD RUNCMD] Fix one ambigous overrided
  * build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0
  * commands: add a helper to generate testing regex for CLI output
  * fix(#971): parse submodule .git files instead of erroring
  * docs(commands): try to make cleaned argument use more obvious
  * style: resolve PR comments
  * version: code cleanup, fix some edge cases
  * dirty should be bool
  * address PR review
  * commands: different pattern to detect changed flags
  * style: clean up linter complaints
  * build(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0
  * fix(commands): replace missing import
  * fix(commands): create env.Env once for all Cobra commands
  * commands: remove compact style for "bug", as the width adaptive default renderer cover that usage
  * command: adapt the output of the bug list to the terminal size
  * execenv: move terminal detection to Out, introduce the compagnion In
  * feat: use isatty to detect a Termios instead
  * feat: detect os.Stdin/os.Stdout mode
  * New approach to define the version
  * build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1
  * repo: don't forget to close a file
  * repo: temporary use a fork of go-git due to https://github.com/go-git/go-git/pull/659
  * Fixed version info be set when go install
  * added EventMentionedInCommit
  * add wipe sub-command that remove local bugs and identities
  * commands: add a nice terminal progress bar when building the cache
  * properly close files in edge cases in various places
  * repo: check error when closing a repo in tests
  * make go1.19 fmt happy
  * cache: fix tests?
  * fix(commands): run tests in ./commands/... without ANSI color
  * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2
  * chore(TestCache): cleanup per PR review
  * build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/text from 0.5.0 to 0.6.0
  * refactor(TestCache): guarantee test caches are closed when tests finish
  * fix(TestCache): eliminate hanging Windows tests
  * style(TestCache): remove empty trailing line from function
  * test(cache): close second instance of RepoCache
  * ci: use Go 1.19.4 and setup-go@v3
  * fix: resolve Go vulnerabilities
  * fix(972): use prerelease of GoKart with repaired panic
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0
  * fix: keyrings must return keys with entities/identities
  * commands: share JSON creation
  * CI: remove lint security step as it's crashing
  * commands: don't double build the lamport clocks
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
  * feat: upgrade go-git to v5.1.1
  * commands: generic "select" code, move bug completion in bugcmd
  * cache: simplify cache building events handling
  * commands: move bug specific input code into commands/bug/input
  * cache: tie the last printf in an event to make the core print free
  * cache: fix some bugs after refactor
  * github: cleanup test token when test is done
  * cache: generic withSnapshot, some cleanup
  * cache: tie up the refactor up to compiling
  * repository: return specific error on object not found, accept multiple namespace to push/pull
  * build(deps): bump github.com/99designs/keyring from 1.2.1 to 1.2.2
  * WIP
  * repo: proper reduced interface for full-text indexing
  * WIP
  * doc/README: normalize verb tense and fix typo
  * build(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0
  * build(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
  * WIP
  * fix: remove repeated use of the same fmt.Errorf() calls
  * WIP
  * feat: wrap ErrMultipleConfigEntry to report duplicate key
  * feat: wrap ErrNoConfigEntry to report missing key
  * benchmark-action: make it work?
  * gha: add a workflow to continuously run benchmarks
  * build(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0
  * commands: reorg into different packages
  * release: don't build for darwin/386 as support has been removed in golang
  * GHA: add a release workflow to build and upload binaries
  * webui: pack into binary
  * gogit: fix incorrect loader handling
  * github: sanitize rate limit waiting time
  * go-git: concurrent loading of clocks
  * github: fix rate limiting
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * core: bubble up the comment ID when created, or edited the first comment
  * build(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Update to version 0.8.0+git.1713935544.6d051a2:
  * Fix some comments
  * Update README.md
  * chore: fix some struct names in comments
  * Use HTTPS repo url</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1722686400">- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
  reading git-bug.remote config value before defaulting to
  'origin' when no explicit REMOTE argument.</changelog>
  <changelog author="mcepl@cepl.eu" date="1727956800">- Update to version 0.8.0+git.1725552198.b0cc690:
  * build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps =&gt; accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1734436800">- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1736337600">- Update vendorization.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1737547200">- Add missing Requires to completion subpackages.</changelog>
  <changelog author="mcepl@cepl.eu" date="1741867200">- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).</changelog>
</package>
<package pkgid="52246b0162729e1920cc40e65c31d6c817dee8c66542fb1d90009d97fa71a22a" name="git-credential-oauth" arch="aarch64">
  <version epoch="0" ver="0.15.0" rel="bp156.2.1"/>
  <changelog author="draskmont@protonmail.com" date="1713009600">- Initial pacakge (version 0.11.1)</changelog>
  <changelog author="draskmont@protonmail.com" date="1713787200">- Cleaned up specfile</changelog>
  <changelog author="draskmont@protonmail.com" date="1714478400">- Update to version 0.11.2:
  * Warn when username incompatible with OAuth
  * Read multiple values from the git-credential input format</changelog>
  <changelog author="draskmont@protonmail.com" date="1714996800">- Update to version 0.11.3:
  * Increase default cache timeout to six hours
  * Warn when OAuth configuration missing</changelog>
  <changelog author="draskmont@protonmail.com" date="1721217600">- Update to version 0.13.0:
  * New config key credential.oauthDeviceAuthURL
  * GitHub username hint
  * Update go version to 1.22</changelog>
  <changelog author="draskmont@protonmail.com" date="1731499200">- Update to version 0.13.4:
  * Config for host codebase.helmholtz.cloud
  * Simplify username logic
- Update to version 0.13.3:
  * Browser errors no longer fatal
  * Updated dependencies
- Update to version 0.13.2:
  * Config for custom gitlab device auth</changelog>
  <changelog author="draskmont@protonmail.com" date="1740830400">- Update to version 0.15.0:
  * Correct scopes
  * Add version flag
  * Always print authtype capability
- Update to version 0.14.0:
  * New option -bearer</changelog>
</package>
<package pkgid="5963d7208cba494f2bdb644b5cb587cad71c5be16adeb665c588ce59d385f519" name="git-credential-oauth" arch="i586">
  <version epoch="0" ver="0.15.0" rel="bp156.2.1"/>
  <changelog author="draskmont@protonmail.com" date="1713009600">- Initial pacakge (version 0.11.1)</changelog>
  <changelog author="draskmont@protonmail.com" date="1713787200">- Cleaned up specfile</changelog>
  <changelog author="draskmont@protonmail.com" date="1714478400">- Update to version 0.11.2:
  * Warn when username incompatible with OAuth
  * Read multiple values from the git-credential input format</changelog>
  <changelog author="draskmont@protonmail.com" date="1714996800">- Update to version 0.11.3:
  * Increase default cache timeout to six hours
  * Warn when OAuth configuration missing</changelog>
  <changelog author="draskmont@protonmail.com" date="1721217600">- Update to version 0.13.0:
  * New config key credential.oauthDeviceAuthURL
  * GitHub username hint
  * Update go version to 1.22</changelog>
  <changelog author="draskmont@protonmail.com" date="1731499200">- Update to version 0.13.4:
  * Config for host codebase.helmholtz.cloud
  * Simplify username logic
- Update to version 0.13.3:
  * Browser errors no longer fatal
  * Updated dependencies
- Update to version 0.13.2:
  * Config for custom gitlab device auth</changelog>
  <changelog author="draskmont@protonmail.com" date="1740830400">- Update to version 0.15.0:
  * Correct scopes
  * Add version flag
  * Always print authtype capability
- Update to version 0.14.0:
  * New option -bearer</changelog>
</package>
<package pkgid="8e44bf32bb930acb3dbe34b28244a3d513f84a76e3abf0411323ccfbcf8153a9" name="git-credential-oauth" arch="ppc64le">
  <version epoch="0" ver="0.15.0" rel="bp156.2.1"/>
  <changelog author="draskmont@protonmail.com" date="1713009600">- Initial pacakge (version 0.11.1)</changelog>
  <changelog author="draskmont@protonmail.com" date="1713787200">- Cleaned up specfile</changelog>
  <changelog author="draskmont@protonmail.com" date="1714478400">- Update to version 0.11.2:
  * Warn when username incompatible with OAuth
  * Read multiple values from the git-credential input format</changelog>
  <changelog author="draskmont@protonmail.com" date="1714996800">- Update to version 0.11.3:
  * Increase default cache timeout to six hours
  * Warn when OAuth configuration missing</changelog>
  <changelog author="draskmont@protonmail.com" date="1721217600">- Update to version 0.13.0:
  * New config key credential.oauthDeviceAuthURL
  * GitHub username hint
  * Update go version to 1.22</changelog>
  <changelog author="draskmont@protonmail.com" date="1731499200">- Update to version 0.13.4:
  * Config for host codebase.helmholtz.cloud
  * Simplify username logic
- Update to version 0.13.3:
  * Browser errors no longer fatal
  * Updated dependencies
- Update to version 0.13.2:
  * Config for custom gitlab device auth</changelog>
  <changelog author="draskmont@protonmail.com" date="1740830400">- Update to version 0.15.0:
  * Correct scopes
  * Add version flag
  * Always print authtype capability
- Update to version 0.14.0:
  * New option -bearer</changelog>
</package>
<package pkgid="605323d6b3c3a0126151fd762c3b3bc1779f844be75d13ee62f3c0915f68b434" name="git-credential-oauth" arch="s390x">
  <version epoch="0" ver="0.15.0" rel="bp156.2.1"/>
  <changelog author="draskmont@protonmail.com" date="1713009600">- Initial pacakge (version 0.11.1)</changelog>
  <changelog author="draskmont@protonmail.com" date="1713787200">- Cleaned up specfile</changelog>
  <changelog author="draskmont@protonmail.com" date="1714478400">- Update to version 0.11.2:
  * Warn when username incompatible with OAuth
  * Read multiple values from the git-credential input format</changelog>
  <changelog author="draskmont@protonmail.com" date="1714996800">- Update to version 0.11.3:
  * Increase default cache timeout to six hours
  * Warn when OAuth configuration missing</changelog>
  <changelog author="draskmont@protonmail.com" date="1721217600">- Update to version 0.13.0:
  * New config key credential.oauthDeviceAuthURL
  * GitHub username hint
  * Update go version to 1.22</changelog>
  <changelog author="draskmont@protonmail.com" date="1731499200">- Update to version 0.13.4:
  * Config for host codebase.helmholtz.cloud
  * Simplify username logic
- Update to version 0.13.3:
  * Browser errors no longer fatal
  * Updated dependencies
- Update to version 0.13.2:
  * Config for custom gitlab device auth</changelog>
  <changelog author="draskmont@protonmail.com" date="1740830400">- Update to version 0.15.0:
  * Correct scopes
  * Add version flag
  * Always print authtype capability
- Update to version 0.14.0:
  * New option -bearer</changelog>
</package>
<package pkgid="f617592f69cd703779233003e1167661ae577d354e57c65f45f6523d2f7f7a17" name="git-credential-oauth" arch="src">
  <version epoch="0" ver="0.15.0" rel="bp156.2.1"/>
  <changelog author="draskmont@protonmail.com" date="1713009600">- Initial pacakge (version 0.11.1)</changelog>
  <changelog author="draskmont@protonmail.com" date="1713787200">- Cleaned up specfile</changelog>
  <changelog author="draskmont@protonmail.com" date="1714478400">- Update to version 0.11.2:
  * Warn when username incompatible with OAuth
  * Read multiple values from the git-credential input format</changelog>
  <changelog author="draskmont@protonmail.com" date="1714996800">- Update to version 0.11.3:
  * Increase default cache timeout to six hours
  * Warn when OAuth configuration missing</changelog>
  <changelog author="draskmont@protonmail.com" date="1721217600">- Update to version 0.13.0:
  * New config key credential.oauthDeviceAuthURL
  * GitHub username hint
  * Update go version to 1.22</changelog>
  <changelog author="draskmont@protonmail.com" date="1731499200">- Update to version 0.13.4:
  * Config for host codebase.helmholtz.cloud
  * Simplify username logic
- Update to version 0.13.3:
  * Browser errors no longer fatal
  * Updated dependencies
- Update to version 0.13.2:
  * Config for custom gitlab device auth</changelog>
  <changelog author="draskmont@protonmail.com" date="1740830400">- Update to version 0.15.0:
  * Correct scopes
  * Add version flag
  * Always print authtype capability
- Update to version 0.14.0:
  * New option -bearer</changelog>
</package>
<package pkgid="c3150a4612a54fe7e833df0776db55babdfa55b4aa7336df83a733ba1f6f5db6" name="git-credential-oauth" arch="x86_64">
  <version epoch="0" ver="0.15.0" rel="bp156.2.1"/>
  <changelog author="draskmont@protonmail.com" date="1713009600">- Initial pacakge (version 0.11.1)</changelog>
  <changelog author="draskmont@protonmail.com" date="1713787200">- Cleaned up specfile</changelog>
  <changelog author="draskmont@protonmail.com" date="1714478400">- Update to version 0.11.2:
  * Warn when username incompatible with OAuth
  * Read multiple values from the git-credential input format</changelog>
  <changelog author="draskmont@protonmail.com" date="1714996800">- Update to version 0.11.3:
  * Increase default cache timeout to six hours
  * Warn when OAuth configuration missing</changelog>
  <changelog author="draskmont@protonmail.com" date="1721217600">- Update to version 0.13.0:
  * New config key credential.oauthDeviceAuthURL
  * GitHub username hint
  * Update go version to 1.22</changelog>
  <changelog author="draskmont@protonmail.com" date="1731499200">- Update to version 0.13.4:
  * Config for host codebase.helmholtz.cloud
  * Simplify username logic
- Update to version 0.13.3:
  * Browser errors no longer fatal
  * Updated dependencies
- Update to version 0.13.2:
  * Config for custom gitlab device auth</changelog>
  <changelog author="draskmont@protonmail.com" date="1740830400">- Update to version 0.15.0:
  * Correct scopes
  * Add version flag
  * Always print authtype capability
- Update to version 0.14.0:
  * New option -bearer</changelog>
</package>
<package pkgid="991e67556dc920e10a1c19b6b72579cc5b128327e96df6e2bd684dd958110e70" name="git-filter-repo" arch="noarch">
  <version epoch="0" ver="2.47.0" rel="bp156.3.3.1"/>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1576756800">- Initial package version 2.24.0
  * https://github.com/newren/git-filter-repo/releases/tag/v2.24.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1585137600">- Update to version 2.26.0
  * https://github.com/newren/git-filter-repo/releases/tag/v2.26.0
  * https://github.com/newren/git-filter-repo/releases/tag/v2.25.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1591099200">- Update to version 2.27.0
  * https://github.com/newren/git-filter-repo/releases/tag/v2.27.0</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1599652800">- Update to version 2.28.0
  * --path-glob can now be used with directory globs like '*/bin'
  * allow comments starting with '#' with --paths-from-file</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1599652801">- Upstream fix: Remove wrong note in README that 2.28.0 isn't released yet
  add patch: filter-repo-README-remove-outdated-2.28.0-not-yet-re.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1615809600">- Update to version 2.29.0
  * https://github.com/newren/git-filter-repo/releases/tag/v2.29.0
- Removed filter-repo-README-remove-outdated-2.28.0-not-yet-re.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1639742400">- Update to version 2.34.0
  * https://github.com/newren/git-filter-repo/releases/tag/v2.34.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 2.38.0:
  https://github.com/newren/git-filter-repo/compare/v2.34.0...v2.38.0</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1745064000">- update to 2.47.0:
  https://github.com/newren/git-filter-repo/compare/v2.38.0...v2.47.0</changelog>
</package>
<package pkgid="4692872177b7c7ef070ac6bb05119314f22aefec463b02abb8b04492770376ee" name="git-filter-repo" arch="src">
  <version epoch="0" ver="2.47.0" rel="bp156.3.3.1"/>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1576756800">- Initial package version 2.24.0
  * https://github.com/newren/git-filter-repo/releases/tag/v2.24.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1585137600">- Update to version 2.26.0
  * https://github.com/newren/git-filter-repo/releases/tag/v2.26.0
  * https://github.com/newren/git-filter-repo/releases/tag/v2.25.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1591099200">- Update to version 2.27.0
  * https://github.com/newren/git-filter-repo/releases/tag/v2.27.0</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1599652800">- Update to version 2.28.0
  * --path-glob can now be used with directory globs like '*/bin'
  * allow comments starting with '#' with --paths-from-file</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1599652801">- Upstream fix: Remove wrong note in README that 2.28.0 isn't released yet
  add patch: filter-repo-README-remove-outdated-2.28.0-not-yet-re.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1615809600">- Update to version 2.29.0
  * https://github.com/newren/git-filter-repo/releases/tag/v2.29.0
- Removed filter-repo-README-remove-outdated-2.28.0-not-yet-re.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1639742400">- Update to version 2.34.0
  * https://github.com/newren/git-filter-repo/releases/tag/v2.34.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 2.38.0:
  https://github.com/newren/git-filter-repo/compare/v2.34.0...v2.38.0</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1745064000">- update to 2.47.0:
  https://github.com/newren/git-filter-repo/compare/v2.38.0...v2.47.0</changelog>
</package>
<package pkgid="ab10f29c2e99a5664a1bbd4019d9dbe9e3cb726e71fac094cb836354b7b89bb2" name="git-lfs" arch="aarch64">
  <version epoch="0" ver="3.6.1" rel="bp156.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- actually make the uninstall step also call it with --system</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1611144000">- update to 2.13.2
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.0
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.1
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.2
- use tarball that actually has the vendored golang libraries
  already. drop vendor.tar.xz
- disable documentation as it relies on an unmaintained tool.
- only run the uninstall script if it is actually the last copy
  being uninstalled</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612958400">- add missing "#" for the tarball rename</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620475200">- update to 2.13.3:
  * This release fixes two bugs that caused `git lfs prune` to hang, updates some
    dependencies to versions which lack a security issue (which did not affect Git
    LFS), and adds support for ARM64 builds on macOS.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1632916800">- update to 3.0.1
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.0
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.1
- drop Makefile_path.patch: no longer needed</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1635681600">- update to 3.0.2
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644840000">- update to 3.1.1
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645099200">- update to 3.1.2
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645099201">- Drop README.packaging as the tarball now comes with all vendored
  libraries.</changelog>
  <changelog author="kastl@b1-systems.de" date="1650542400">- Update to version 3.1.4:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653480000">- Update to version 3.2.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.2.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653480001">- bump golang to 1.18 or newer as we need support for
  os.ErrDeadlineExceeded</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1659182400">- Cherry pick the switch to asciidoctor so we can have man pages
  again (5054.patch)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1670328000">- Update to version 3.3.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.3.0
- drop 5054.patch:
  included in update
- we need a vendor tarball now</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1690459200">- update to version 3.4.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.4.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702555200">- update to version 3.4.1:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.4.1</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590400">- update to 3.5.0:
  no changelog available
- rework package to use obscpio</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590401">- update to 3.5.1:
  * Build release assets with Go 1.21 #5668 (@bk2204)
  * script/packagecloud: instantiate distro map properly #5662
    (@bk2204)
  * Install msgfmt on Windows in CI and release workflows
    [#5666] (@chrisd8088)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1732190400">- update to version 3.6.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.6.0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1736942400">- update to 3.6.1: (boo#1235876)
  This release introduces a security fix for all platforms, which
  has been assigned CVE-2024-53263.
  When requesting credentials from Git for a remote host, prior
  versions of Git LFS passed portions of the host's URL to the
  git-credential(1) command without checking for embedded
  line-ending control characters, and then sent any credentials
  received back from the Git credential helper to the remote host.
  By inserting URL-encoded control characters such as line feed
  (LF) or carriage return (CR) characters into the URL, an attacker
  might have been able to retrieve a user's Git credentials.
  Git LFS now prevents bare line feed (LF) characters from being
  included in the values sent to the git-credential(1) command, and
  also prevents bare carriage return (CR) characters from being
  included unless the credential.protectProtocol configuration
  option is set to a value equivalent to false.
  * Bugs
  - Reject bare line-ending control characters in Git credential
    requests (@chrisd8088)</changelog>
</package>
<package pkgid="c809e99924230ae3fa95a0ba4c668b60141c854ba8cb9437e90c8a453c831e48" name="git-lfs" arch="i586">
  <version epoch="0" ver="3.6.1" rel="bp156.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- actually make the uninstall step also call it with --system</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1611144000">- update to 2.13.2
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.0
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.1
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.2
- use tarball that actually has the vendored golang libraries
  already. drop vendor.tar.xz
- disable documentation as it relies on an unmaintained tool.
- only run the uninstall script if it is actually the last copy
  being uninstalled</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612958400">- add missing "#" for the tarball rename</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620475200">- update to 2.13.3:
  * This release fixes two bugs that caused `git lfs prune` to hang, updates some
    dependencies to versions which lack a security issue (which did not affect Git
    LFS), and adds support for ARM64 builds on macOS.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1632916800">- update to 3.0.1
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.0
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.1
- drop Makefile_path.patch: no longer needed</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1635681600">- update to 3.0.2
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644840000">- update to 3.1.1
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645099200">- update to 3.1.2
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645099201">- Drop README.packaging as the tarball now comes with all vendored
  libraries.</changelog>
  <changelog author="kastl@b1-systems.de" date="1650542400">- Update to version 3.1.4:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653480000">- Update to version 3.2.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.2.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653480001">- bump golang to 1.18 or newer as we need support for
  os.ErrDeadlineExceeded</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1659182400">- Cherry pick the switch to asciidoctor so we can have man pages
  again (5054.patch)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1670328000">- Update to version 3.3.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.3.0
- drop 5054.patch:
  included in update
- we need a vendor tarball now</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1690459200">- update to version 3.4.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.4.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702555200">- update to version 3.4.1:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.4.1</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590400">- update to 3.5.0:
  no changelog available
- rework package to use obscpio</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590401">- update to 3.5.1:
  * Build release assets with Go 1.21 #5668 (@bk2204)
  * script/packagecloud: instantiate distro map properly #5662
    (@bk2204)
  * Install msgfmt on Windows in CI and release workflows
    [#5666] (@chrisd8088)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1732190400">- update to version 3.6.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.6.0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1736942400">- update to 3.6.1: (boo#1235876)
  This release introduces a security fix for all platforms, which
  has been assigned CVE-2024-53263.
  When requesting credentials from Git for a remote host, prior
  versions of Git LFS passed portions of the host's URL to the
  git-credential(1) command without checking for embedded
  line-ending control characters, and then sent any credentials
  received back from the Git credential helper to the remote host.
  By inserting URL-encoded control characters such as line feed
  (LF) or carriage return (CR) characters into the URL, an attacker
  might have been able to retrieve a user's Git credentials.
  Git LFS now prevents bare line feed (LF) characters from being
  included in the values sent to the git-credential(1) command, and
  also prevents bare carriage return (CR) characters from being
  included unless the credential.protectProtocol configuration
  option is set to a value equivalent to false.
  * Bugs
  - Reject bare line-ending control characters in Git credential
    requests (@chrisd8088)</changelog>
</package>
<package pkgid="78825630fb1c3b498a77ddceeaf7ffaff6af8af06b2f6c14241ab900fb6b9597" name="git-lfs" arch="ppc64le">
  <version epoch="0" ver="3.6.1" rel="bp156.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- actually make the uninstall step also call it with --system</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1611144000">- update to 2.13.2
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.0
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.1
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.2
- use tarball that actually has the vendored golang libraries
  already. drop vendor.tar.xz
- disable documentation as it relies on an unmaintained tool.
- only run the uninstall script if it is actually the last copy
  being uninstalled</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612958400">- add missing "#" for the tarball rename</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620475200">- update to 2.13.3:
  * This release fixes two bugs that caused `git lfs prune` to hang, updates some
    dependencies to versions which lack a security issue (which did not affect Git
    LFS), and adds support for ARM64 builds on macOS.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1632916800">- update to 3.0.1
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.0
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.1
- drop Makefile_path.patch: no longer needed</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1635681600">- update to 3.0.2
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644840000">- update to 3.1.1
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645099200">- update to 3.1.2
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645099201">- Drop README.packaging as the tarball now comes with all vendored
  libraries.</changelog>
  <changelog author="kastl@b1-systems.de" date="1650542400">- Update to version 3.1.4:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653480000">- Update to version 3.2.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.2.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653480001">- bump golang to 1.18 or newer as we need support for
  os.ErrDeadlineExceeded</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1659182400">- Cherry pick the switch to asciidoctor so we can have man pages
  again (5054.patch)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1670328000">- Update to version 3.3.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.3.0
- drop 5054.patch:
  included in update
- we need a vendor tarball now</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1690459200">- update to version 3.4.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.4.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702555200">- update to version 3.4.1:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.4.1</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590400">- update to 3.5.0:
  no changelog available
- rework package to use obscpio</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590401">- update to 3.5.1:
  * Build release assets with Go 1.21 #5668 (@bk2204)
  * script/packagecloud: instantiate distro map properly #5662
    (@bk2204)
  * Install msgfmt on Windows in CI and release workflows
    [#5666] (@chrisd8088)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1732190400">- update to version 3.6.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.6.0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1736942400">- update to 3.6.1: (boo#1235876)
  This release introduces a security fix for all platforms, which
  has been assigned CVE-2024-53263.
  When requesting credentials from Git for a remote host, prior
  versions of Git LFS passed portions of the host's URL to the
  git-credential(1) command without checking for embedded
  line-ending control characters, and then sent any credentials
  received back from the Git credential helper to the remote host.
  By inserting URL-encoded control characters such as line feed
  (LF) or carriage return (CR) characters into the URL, an attacker
  might have been able to retrieve a user's Git credentials.
  Git LFS now prevents bare line feed (LF) characters from being
  included in the values sent to the git-credential(1) command, and
  also prevents bare carriage return (CR) characters from being
  included unless the credential.protectProtocol configuration
  option is set to a value equivalent to false.
  * Bugs
  - Reject bare line-ending control characters in Git credential
    requests (@chrisd8088)</changelog>
</package>
<package pkgid="579969b033c13b82258f8295486996f712a2f9656454c417e3a88a070e8b0ef5" name="git-lfs" arch="s390x">
  <version epoch="0" ver="3.6.1" rel="bp156.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- actually make the uninstall step also call it with --system</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1611144000">- update to 2.13.2
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.0
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.1
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.2
- use tarball that actually has the vendored golang libraries
  already. drop vendor.tar.xz
- disable documentation as it relies on an unmaintained tool.
- only run the uninstall script if it is actually the last copy
  being uninstalled</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612958400">- add missing "#" for the tarball rename</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620475200">- update to 2.13.3:
  * This release fixes two bugs that caused `git lfs prune` to hang, updates some
    dependencies to versions which lack a security issue (which did not affect Git
    LFS), and adds support for ARM64 builds on macOS.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1632916800">- update to 3.0.1
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.0
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.1
- drop Makefile_path.patch: no longer needed</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1635681600">- update to 3.0.2
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644840000">- update to 3.1.1
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645099200">- update to 3.1.2
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645099201">- Drop README.packaging as the tarball now comes with all vendored
  libraries.</changelog>
  <changelog author="kastl@b1-systems.de" date="1650542400">- Update to version 3.1.4:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653480000">- Update to version 3.2.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.2.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653480001">- bump golang to 1.18 or newer as we need support for
  os.ErrDeadlineExceeded</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1659182400">- Cherry pick the switch to asciidoctor so we can have man pages
  again (5054.patch)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1670328000">- Update to version 3.3.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.3.0
- drop 5054.patch:
  included in update
- we need a vendor tarball now</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1690459200">- update to version 3.4.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.4.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702555200">- update to version 3.4.1:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.4.1</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590400">- update to 3.5.0:
  no changelog available
- rework package to use obscpio</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590401">- update to 3.5.1:
  * Build release assets with Go 1.21 #5668 (@bk2204)
  * script/packagecloud: instantiate distro map properly #5662
    (@bk2204)
  * Install msgfmt on Windows in CI and release workflows
    [#5666] (@chrisd8088)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1732190400">- update to version 3.6.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.6.0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1736942400">- update to 3.6.1: (boo#1235876)
  This release introduces a security fix for all platforms, which
  has been assigned CVE-2024-53263.
  When requesting credentials from Git for a remote host, prior
  versions of Git LFS passed portions of the host's URL to the
  git-credential(1) command without checking for embedded
  line-ending control characters, and then sent any credentials
  received back from the Git credential helper to the remote host.
  By inserting URL-encoded control characters such as line feed
  (LF) or carriage return (CR) characters into the URL, an attacker
  might have been able to retrieve a user's Git credentials.
  Git LFS now prevents bare line feed (LF) characters from being
  included in the values sent to the git-credential(1) command, and
  also prevents bare carriage return (CR) characters from being
  included unless the credential.protectProtocol configuration
  option is set to a value equivalent to false.
  * Bugs
  - Reject bare line-ending control characters in Git credential
    requests (@chrisd8088)</changelog>
</package>
<package pkgid="eb527103ff064d4848d9bf16741eb528385f64b55432d2eed96513aac6876c51" name="git-lfs" arch="src">
  <version epoch="0" ver="3.6.1" rel="bp156.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- actually make the uninstall step also call it with --system</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1611144000">- update to 2.13.2
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.0
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.1
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.2
- use tarball that actually has the vendored golang libraries
  already. drop vendor.tar.xz
- disable documentation as it relies on an unmaintained tool.
- only run the uninstall script if it is actually the last copy
  being uninstalled</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612958400">- add missing "#" for the tarball rename</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620475200">- update to 2.13.3:
  * This release fixes two bugs that caused `git lfs prune` to hang, updates some
    dependencies to versions which lack a security issue (which did not affect Git
    LFS), and adds support for ARM64 builds on macOS.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1632916800">- update to 3.0.1
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.0
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.1
- drop Makefile_path.patch: no longer needed</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1635681600">- update to 3.0.2
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644840000">- update to 3.1.1
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645099200">- update to 3.1.2
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645099201">- Drop README.packaging as the tarball now comes with all vendored
  libraries.</changelog>
  <changelog author="kastl@b1-systems.de" date="1650542400">- Update to version 3.1.4:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653480000">- Update to version 3.2.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.2.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653480001">- bump golang to 1.18 or newer as we need support for
  os.ErrDeadlineExceeded</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1659182400">- Cherry pick the switch to asciidoctor so we can have man pages
  again (5054.patch)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1670328000">- Update to version 3.3.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.3.0
- drop 5054.patch:
  included in update
- we need a vendor tarball now</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1690459200">- update to version 3.4.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.4.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702555200">- update to version 3.4.1:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.4.1</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590400">- update to 3.5.0:
  no changelog available
- rework package to use obscpio</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590401">- update to 3.5.1:
  * Build release assets with Go 1.21 #5668 (@bk2204)
  * script/packagecloud: instantiate distro map properly #5662
    (@bk2204)
  * Install msgfmt on Windows in CI and release workflows
    [#5666] (@chrisd8088)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1732190400">- update to version 3.6.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.6.0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1736942400">- update to 3.6.1: (boo#1235876)
  This release introduces a security fix for all platforms, which
  has been assigned CVE-2024-53263.
  When requesting credentials from Git for a remote host, prior
  versions of Git LFS passed portions of the host's URL to the
  git-credential(1) command without checking for embedded
  line-ending control characters, and then sent any credentials
  received back from the Git credential helper to the remote host.
  By inserting URL-encoded control characters such as line feed
  (LF) or carriage return (CR) characters into the URL, an attacker
  might have been able to retrieve a user's Git credentials.
  Git LFS now prevents bare line feed (LF) characters from being
  included in the values sent to the git-credential(1) command, and
  also prevents bare carriage return (CR) characters from being
  included unless the credential.protectProtocol configuration
  option is set to a value equivalent to false.
  * Bugs
  - Reject bare line-ending control characters in Git credential
    requests (@chrisd8088)</changelog>
</package>
<package pkgid="9a0be73f629dfbcfad6a37bc5658d6ff7a3e27434901eacbdf911709803fee6d" name="git-lfs" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="bp156.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- actually make the uninstall step also call it with --system</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1611144000">- update to 2.13.2
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.0
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.1
  https://github.com/git-lfs/git-lfs/releases/tag/v2.13.2
- use tarball that actually has the vendored golang libraries
  already. drop vendor.tar.xz
- disable documentation as it relies on an unmaintained tool.
- only run the uninstall script if it is actually the last copy
  being uninstalled</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612958400">- add missing "#" for the tarball rename</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620475200">- update to 2.13.3:
  * This release fixes two bugs that caused `git lfs prune` to hang, updates some
    dependencies to versions which lack a security issue (which did not affect Git
    LFS), and adds support for ARM64 builds on macOS.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1632916800">- update to 3.0.1
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.0
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.1
- drop Makefile_path.patch: no longer needed</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1635681600">- update to 3.0.2
  https://github.com/git-lfs/git-lfs/releases/tag/v3.0.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644840000">- update to 3.1.1
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645099200">- update to 3.1.2
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1645099201">- Drop README.packaging as the tarball now comes with all vendored
  libraries.</changelog>
  <changelog author="kastl@b1-systems.de" date="1650542400">- Update to version 3.1.4:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.1.4</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653480000">- Update to version 3.2.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.2.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1653480001">- bump golang to 1.18 or newer as we need support for
  os.ErrDeadlineExceeded</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1659182400">- Cherry pick the switch to asciidoctor so we can have man pages
  again (5054.patch)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1670328000">- Update to version 3.3.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.3.0
- drop 5054.patch:
  included in update
- we need a vendor tarball now</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1690459200">- update to version 3.4.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.4.0</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702555200">- update to version 3.4.1:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.4.1</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590400">- update to 3.5.0:
  no changelog available
- rework package to use obscpio</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1710590401">- update to 3.5.1:
  * Build release assets with Go 1.21 #5668 (@bk2204)
  * script/packagecloud: instantiate distro map properly #5662
    (@bk2204)
  * Install msgfmt on Windows in CI and release workflows
    [#5666] (@chrisd8088)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1732190400">- update to version 3.6.0:
  https://github.com/git-lfs/git-lfs/releases/tag/v3.6.0</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1736942400">- update to 3.6.1: (boo#1235876)
  This release introduces a security fix for all platforms, which
  has been assigned CVE-2024-53263.
  When requesting credentials from Git for a remote host, prior
  versions of Git LFS passed portions of the host's URL to the
  git-credential(1) command without checking for embedded
  line-ending control characters, and then sent any credentials
  received back from the Git credential helper to the remote host.
  By inserting URL-encoded control characters such as line feed
  (LF) or carriage return (CR) characters into the URL, an attacker
  might have been able to retrieve a user's Git credentials.
  Git LFS now prevents bare line feed (LF) characters from being
  included in the values sent to the git-credential(1) command, and
  also prevents bare carriage return (CR) characters from being
  included unless the credential.protectProtocol configuration
  option is set to a value equivalent to false.
  * Bugs
  - Reject bare line-ending control characters in Git credential
    requests (@chrisd8088)</changelog>
</package>
<package pkgid="f056c8e9c104f742a1d856ca9ffea08d4d1b4848bc5b25e44291dbf9e2180e2c" name="gitea-tea" arch="aarch64">
  <version epoch="0" ver="0.10.1" rel="bp156.11.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
</package>
<package pkgid="040f5aa9623a7dfbe4a5a96deb427f0b413eaf73e5ec2b0f673e9324d9f6895b" name="gitea-tea" arch="i586">
  <version epoch="0" ver="0.10.1" rel="bp156.11.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
</package>
<package pkgid="1898c038efbeb5ba36e11c685b8ec90890dcc55cdfb54a2f2dd062fe813a1d04" name="gitea-tea" arch="ppc64le">
  <version epoch="0" ver="0.10.1" rel="bp156.11.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
</package>
<package pkgid="64b6c72f9dfe378582666ac34832c9ed7f730b5e5c125f2c9dc0436080bf7510" name="gitea-tea" arch="s390x">
  <version epoch="0" ver="0.10.1" rel="bp156.11.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
</package>
<package pkgid="012bbafe76a5229b3383058090cfdacf4d6248b6340856907784a2e79ad6d45f" name="gitea-tea" arch="src">
  <version epoch="0" ver="0.10.1" rel="bp156.11.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
</package>
<package pkgid="978ddaea63c3d5187c3703f95fdcb5674c1447d2d4f255683cc3b7b430b243f7" name="gitea-tea" arch="x86_64">
  <version epoch="0" ver="0.10.1" rel="bp156.11.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
</package>
<package pkgid="4ab10da95f7c9319d150b46b8c2d5ecf535a0d3fe768cbe9e3fbb270e8fc39e8" name="gitea-tea" arch="aarch64">
  <version epoch="0" ver="0.10.1" rel="bp156.8.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
</package>
<package pkgid="350f09930707f72fe0e398b5ecae812c417e1e0f1c5e2baaa63805f771e895eb" name="gitea-tea" arch="i586">
  <version epoch="0" ver="0.10.1" rel="bp156.8.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
</package>
<package pkgid="ac162a13034e5c2cf4f2ccbebc24dd1e3cc771e6098832dc28b45b480a465d26" name="gitea-tea" arch="ppc64le">
  <version epoch="0" ver="0.10.1" rel="bp156.8.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
</package>
<package pkgid="14697792c3473354731274d87dc600b2c9c0bc63b0a5a567f80cfbda3c2a90a5" name="gitea-tea" arch="s390x">
  <version epoch="0" ver="0.10.1" rel="bp156.8.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
</package>
<package pkgid="e342a6e84d7d18e8a22b3c9e8c7e8930afe107014de4d7d12f8078acbe886c61" name="gitea-tea" arch="src">
  <version epoch="0" ver="0.10.1" rel="bp156.8.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
</package>
<package pkgid="305d8dc1ad9ad7d46267f9a1b06e845fd67e2210d0ea4f528a6e7b2a5bbd0a9a" name="gitea-tea" arch="x86_64">
  <version epoch="0" ver="0.10.1" rel="bp156.8.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
</package>
<package pkgid="2a9721e440b0c7600a3674bca4f12ef94814f3ca32fd1b3e4e971c3a8b724f6f" name="gitea-tea" arch="aarch64">
  <version epoch="0" ver="0.11.1" rel="bp156.14.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
</package>
<package pkgid="5c05cb23a0bb81490636d12d5276ac24d96d7727f0163584ca9c1df9889cd504" name="gitea-tea" arch="i586">
  <version epoch="0" ver="0.11.1" rel="bp156.14.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
</package>
<package pkgid="36ff99450fe69b3514f6a5fe3d349c22a1f6f5ea83cf4946a3fc4d5081c3aacb" name="gitea-tea" arch="ppc64le">
  <version epoch="0" ver="0.11.1" rel="bp156.14.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
</package>
<package pkgid="48f9b3f1fecba780dbd6a540b0337c036660d1714ef774d63bc66aab8e4c609f" name="gitea-tea" arch="s390x">
  <version epoch="0" ver="0.11.1" rel="bp156.14.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
</package>
<package pkgid="67621b4a4b4cb3a8c378de4ca8f326981b7b206a01bbe9da9075211f29da36fa" name="gitea-tea" arch="src">
  <version epoch="0" ver="0.11.1" rel="bp156.14.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
</package>
<package pkgid="1f210d84c924cff2b03f902cd61ee0d5e5c29abf1b83dd54794e8467d6b73f84" name="gitea-tea" arch="x86_64">
  <version epoch="0" ver="0.11.1" rel="bp156.14.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
</package>
<package pkgid="a625a13d0c81110bdc9441c47907c0d12573c3cb7ccc0b21067d7013d6509bee" name="gitea-tea" arch="aarch64">
  <version epoch="0" ver="0.11.1" rel="bp156.17.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1764331200">- Do not make config file group-readable.
  * remove-config-file-group-readwrite-permission-856.patch</changelog>
</package>
<package pkgid="555604f527d101332f99ed6604de6f5777a2339196946a674e5e9cc92d320265" name="gitea-tea" arch="i586">
  <version epoch="0" ver="0.11.1" rel="bp156.17.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1764331200">- Do not make config file group-readable.
  * remove-config-file-group-readwrite-permission-856.patch</changelog>
</package>
<package pkgid="32379fa9458e702ff6699e27fb9db6dd018509225ee08fbcdeb49a18961d7b1e" name="gitea-tea" arch="ppc64le">
  <version epoch="0" ver="0.11.1" rel="bp156.17.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1764331200">- Do not make config file group-readable.
  * remove-config-file-group-readwrite-permission-856.patch</changelog>
</package>
<package pkgid="e70b928bcc0125c872d87fc4627716332f36910b12abc8ec48af9daa947f14e4" name="gitea-tea" arch="s390x">
  <version epoch="0" ver="0.11.1" rel="bp156.17.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1764331200">- Do not make config file group-readable.
  * remove-config-file-group-readwrite-permission-856.patch</changelog>
</package>
<package pkgid="0318018f54dcf945f62440dea53155e3a6db6a278a73078cc057cd1e607bc9c5" name="gitea-tea" arch="src">
  <version epoch="0" ver="0.11.1" rel="bp156.17.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1764331200">- Do not make config file group-readable.
  * remove-config-file-group-readwrite-permission-856.patch</changelog>
</package>
<package pkgid="7d156d938f0af7d1689e1e0b91766b0cbdf93398e081cc801d127a04bb0629c6" name="gitea-tea" arch="x86_64">
  <version epoch="0" ver="0.11.1" rel="bp156.17.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1764331200">- Do not make config file group-readable.
  * remove-config-file-group-readwrite-permission-856.patch</changelog>
</package>
<package pkgid="dd8a28ac9478fa1374a14547d49ef88185baafde4ad36dabad99b1dfe034cc5f" name="gitea-tea" arch="aarch64">
  <version epoch="0" ver="0.9.2" rel="bp156.2.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
</package>
<package pkgid="d250d0cd05daf3b60d783a149685cc2771a910acc86703629f6244be868c26c7" name="gitea-tea" arch="i586">
  <version epoch="0" ver="0.9.2" rel="bp156.2.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
</package>
<package pkgid="ea4c55265cd772fe7355919bd566b68c1a2a68fb0b195bd103572220d090951f" name="gitea-tea" arch="ppc64le">
  <version epoch="0" ver="0.9.2" rel="bp156.2.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
</package>
<package pkgid="f92a67ae8237f6d3fb1cf293acd0ed5d79975ccca757bb14b968fef370a50f5e" name="gitea-tea" arch="s390x">
  <version epoch="0" ver="0.9.2" rel="bp156.2.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
</package>
<package pkgid="7b8727c7cb1b9ade9f2a3a0e4f74353b3a0754317f68285f12c44749eccf9c1e" name="gitea-tea" arch="src">
  <version epoch="0" ver="0.9.2" rel="bp156.2.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
</package>
<package pkgid="874c6e063315dca901c32dad2a29cfba6eabe7727458b20724bee72a686a2572" name="gitea-tea" arch="x86_64">
  <version epoch="0" ver="0.9.2" rel="bp156.2.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
</package>
<package pkgid="aa19937ce5b39e60733c4ee1796273b3bd2e7ad018dd02daff06d1c5118b554c" name="gitea-tea" arch="aarch64">
  <version epoch="0" ver="0.9.2" rel="bp156.5.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
</package>
<package pkgid="63e4e418abaa786b0fcf534005733e467b5d081f28b74a27f1863cb522f92c0d" name="gitea-tea" arch="i586">
  <version epoch="0" ver="0.9.2" rel="bp156.5.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
</package>
<package pkgid="5d11a3f16bdea644c62a58493f8b7b340fd41438940f73bb2056c098dae3e833" name="gitea-tea" arch="ppc64le">
  <version epoch="0" ver="0.9.2" rel="bp156.5.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
</package>
<package pkgid="044de804a031ffe562ee78de6ea5c3451f96f79a9ff3b1c2dc94c084e7707d1e" name="gitea-tea" arch="s390x">
  <version epoch="0" ver="0.9.2" rel="bp156.5.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
</package>
<package pkgid="0816bf369b8a66e1315a1dab7d9a3cbb47e26711c042d29cc1a9a7682c076c01" name="gitea-tea" arch="src">
  <version epoch="0" ver="0.9.2" rel="bp156.5.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
</package>
<package pkgid="8ec2bab89775c75a85a5e065d862e89303a05d159c909af7d44f8278c9d2377f" name="gitea-tea" arch="x86_64">
  <version epoch="0" ver="0.9.2" rel="bp156.5.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
</package>
<package pkgid="f308ee0cfcf49eccb0cf9d47a84937d124e8e3ee2c86d7c008412d31260e8694" name="gitea-tea-bash-completion" arch="noarch">
  <version epoch="0" ver="0.10.1" rel="bp156.11.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
</package>
<package pkgid="a2dfcebd7cbab3a200eaff87a5fa1cce53dbb2bc93a70f837dc38c1059a5d1b6" name="gitea-tea-bash-completion" arch="noarch">
  <version epoch="0" ver="0.10.1" rel="bp156.8.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
</package>
<package pkgid="30c9c3f14a12838a8f0b134ca8c4f4633ef29bded43c80f8718174476402819a" name="gitea-tea-bash-completion" arch="noarch">
  <version epoch="0" ver="0.11.1" rel="bp156.14.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
</package>
<package pkgid="caa31363e19c7ecb267756fb8e809325c1ac86e0c67dc940a602a65b7bcd09e2" name="gitea-tea-bash-completion" arch="noarch">
  <version epoch="0" ver="0.11.1" rel="bp156.17.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1764331200">- Do not make config file group-readable.
  * remove-config-file-group-readwrite-permission-856.patch</changelog>
</package>
<package pkgid="e1a585af0cbaca9aeadb0a25c9048389675fe37742d722431eb606eb2cbdb8c9" name="gitea-tea-bash-completion" arch="noarch">
  <version epoch="0" ver="0.9.2" rel="bp156.2.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
</package>
<package pkgid="2daaeec8447a992753a6d9434b56a408a118808bb3a60d6fd336fa165d1ab73f" name="gitea-tea-bash-completion" arch="noarch">
  <version epoch="0" ver="0.9.2" rel="bp156.5.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
</package>
<package pkgid="7f88317382ee807210cf3e21c2dd28bfca3089619ed68c5a860687b1e87ad94f" name="gitea-tea-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.10.1" rel="bp156.11.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
</package>
<package pkgid="3af262fcc54112c9e0f47dad64a7c36e6e7dc58318298029725b395e9eeda378" name="gitea-tea-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.10.1" rel="bp156.8.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
</package>
<package pkgid="8e7579217297a5be1baaba79bced192b31c444632475a78c7e235f63785a98c1" name="gitea-tea-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.11.1" rel="bp156.14.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
</package>
<package pkgid="365aed5cbe5e4069a79a032251dc3c1f77ea200e1a61eac125d6a367cbc3af2a" name="gitea-tea-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.11.1" rel="bp156.17.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1745496000">- update newer-dependencies.patch, fixing bsc#1241819</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1749556800">- update to 0.10.0:
  * fix: support SSH remotes with non-standard ports
  * minor helper fixes
  * Bump Table Dep
  * Login via oauth2 flow
  * Feat: interactive issue edit command
  * Use flakes vs devbox
  * Fix helper panic
  * Add --note-file flag to read release notes from a file
  * Fix/Login Edit Use Editor Env
  * Gitea Actions support
  * Expose --labels option
  * Add git helper
  * Support auto detecting branch for PRs
  * context: move human readable note to stderr
  * Add repos rm/delete command
  * Release Asset Management
  * tea branches list/protect/unprotect
  * Add OTP and scopes to login
  * Initial CLI docs
  * Fix for go tools called from make
  * fix interactive login add
  * issues list can show filtered by owner/org instead of repo too
  * fix: non-standard ssh port URL's repo can't be recognized
  * updated dependencies
- remove newer-dependencies.patch, as upstream updated them</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750161600">- update to 0.10.1:
  * 8212d5f Update release ci (#768)
  * d536242 chore(deps): update crazy-max/ghaction-import-gpg action
    to v6 (#736)
  * ffff540 fix(deps): update module github.com/urfave/cli/v3 to
    v3.3.8 (#766)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1753272000">- Fix argument parsing fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1757678400">- Update to 0.10.1+git.1757695903.cc20b52:
  - feat: add validation for object-format flag in repo create
    command (see gh#openSUSE/openSUSE-git#60)
  - Fix release version
  - update gitea sdk to v0.22
  - don't fallback login directly
  - Check duplicated login name in interact mode when creating
    new login
  - Fix bug when output json with special chars
  - add debug mode and update readme
  - update go.mod to retract the wrong tag v1.3.3
  - revert completion scripts removal
  - Remove pagination from context
  - Continue auth when failed to open browser
  - Fix bug
  - Fix tea login add with ssh public key bug
  - Add temporary authentication via environment variables
  - Fix attachment size
  - deploy image when tagging
  - Add Zip URL for release list
  - Use bubbletea instead of survey for interacting with TUI
  - capitalize a few items
  - rm out of date comparison file
  - README: Document logging in to gitea
  - remove autocomplete command
  - chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5
  - replace arch package url
  - fix: Reenable `-p` and `--limit` switches
- Remove upstreamed patch:
  - fix-Reenable-p-and-limit-switches-778.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1757937600">- Install up-to-date autocompletion files.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1758283200">- update to 0.11.0:
  * Fix yaml output single quote (#814)
  * generate man page (#811)
  * feat: add validation for object-format flag in repo create
    command (#741)
  * Fix release version (#815)
  * update gitea sdk to v0.22 (#813)
  * don't fallback login directly (#806)
  * Check duplicated login name in interact mode when creating new
    login (#803)
  * Fix bug when output json with special chars (#801)
  * add debug mode and update readme (#805)
  * update go.mod to retract the wrong tag v1.3.3 (#802)
  * revert completion scripts removal (#808)
  * Remove pagination from context (#807)
  * Continue auth when failed to open browser (#794)
  * Fix bug (#793)
  * Fix tea login add with ssh public key bug (#789)
  * Add temporary authentication via environment variables (#639)
  * Fix attachment size (#787)
  * deploy image when tagging (#792)
  * Add Zip URL for release list (#788)
  * Use bubbletea instead of survey for interacting with TUI (#786)
  * capitalize a few items
  * rm out of date comparison file
  * README: Document logging in to gitea (#790)
  * remove autocomplete command (#782)
  * chore(deps): update ghcr.io/devcontainers/features/git-lfs
    docker tag to v1.2.5 (#773)
  * replace arch package url (#783)
  * fix: Reenable -p and --limit switches (#778)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1758283201">- fix version to something simpler</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1760011200">- add fix-CVE-2025-58190.patch, fixing bsc#1251663
- add fix-CVE-2025-47911.patch, fixing bsc#1251471</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1760788800">- update to 0.11.1:
  * 61d4e57 Fix Pr Create crash (#823)
  * 4f33146 add test for matching logins (#820)
  * 08b8398 Update README.md (#819)</changelog>
  <changelog author="olaf@aepfle.de" date="1762603200">- CLI.md is supposed to be a text file
- Use fixed git revision to refer to version 0.11.1
- Remove bogus part from package description</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1764331200">- Do not make config file group-readable.
  * remove-config-file-group-readwrite-permission-856.patch</changelog>
</package>
<package pkgid="2c2373fcc95257016fb8f5e37df80db1a32e502c30f52f5187cd50f6a9236d79" name="gitea-tea-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.9.2" rel="bp156.2.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
</package>
<package pkgid="4277a833d30e2df0a91f8a03a63248e42492d8810dfb84022f25ca97d48de9fa" name="gitea-tea-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.9.2" rel="bp156.5.1"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1688817600">- Upstream version 0.9.2: Initial openSUSE package.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1709812800">- rename binary to tea (actual name) and conflict tea text edidor</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724328000">- fix build for non x86_64 and aarch64 (CGO_ENABLED=0 was set as default)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1740484800">- adding newer-dependencies.patch, for updating dependencies,
  fixing bsc#1234598</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741780800">- update newer-dependencies.patch, fixes bsc#1235367 bsc#1239493 bsc#1234598</changelog>
</package>
<package pkgid="28021c3e4b827803ff7946f1cd64c6ef0334131c3df9ef25311b774f3502df72" name="global" arch="aarch64">
  <version epoch="0" ver="6.6.9" rel="bp156.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1427457600">- update to 6.4
  see /usr/share/doc/packages/global/NEWS for complete list
  of changes since 6.3.2</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Add gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1432382400">- Update dependencies
- Enable exuberant-ctags
- Enable sqlite3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1438776000">- Update to 6.5
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1442923200">- Update to 6.5.1
  * See attached NEWS for detailed list of changes
- Drop unreferenced patches as none of them seems necessary
  * global-5.7-gcc.diff
  * global-5.9.5-fix-gcc-warnings.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1450353600">- Update to 6.5.2
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1458302400">- Update to 6.5.3
  * Added new plug-in parser 'universal-ctags.la'.
  * gtags.conf:
    + Added new entry 'universal-ctags'.
    + Added new variable 'ctagscom'. You can overwrite the path of
    ctags(1) dynamically for exuberant-ctags.la,
    universal-ctags.la and pygments-parser.la.
  * gtags.conf: Added the following patterns to the skip list.
    '*.o,*.a,*.so,*.lo,*.zip,*.gz,*.bz2,*.xz,*.lzh,*.Z,*.tgz,*.min.js,*min.css'
  * gtags: Added some explanations for the --explain option.
- Small spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1459080000">- Update to 6.5.4
  * gtags.conf: The entries which include '.xml' were commented
    out, because they require libxml.a. If you use them, please
    uncomment them.
  * universal-ctags.la: Universal ctags plug-in parser did not
    work on almost files. Now it works.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1463140800">- set correctly path paths for parsers (bnc#977967)
  new patch: fix_paths.patch</changelog>
  <changelog author="astieger@suse.com" date="1483012800">- GNU global 6.5.6:
  * htags-server: New --retry[=n] option
  * htags: Changed the format of function header (--show-position)
    to make copying text easier.
  * geco.rc: Added 'fzf' as a selector candidate.
  * gtags: New configuration variable 'gtags_hook'.
  * htags: Now --cvsweb option always insert 'view=log' to the
    generated URLs.
  * fix gtags: Gtags often aborted with a message "buffer overflow
  * fix htags: CGI scripts (completion.cgi, global.cgi) included by
    mistake are now generated during package build
- includes changes from 6.5.5:
  * fix exuberant-ctags.la: The path name of ctags command couldn't
    be changed. (new configuration variable 'ctagscom')
  * fix Tag files got corrupted when the built-in C++ parser gave
    up parsing and aborted
  * Some inappropriate error messages were changed.</changelog>
  <changelog author="mpluskal@suse.com" date="1495713600">- Update to version 6.5.7:
  * global: Now global(1) accept a file as --nearness option.
    If it is a file, tags in the file are shown first.
  * global: Added aliases for MAKEOBJDIR and MAKEOBJDIRPREFIX.
    GTAGSOBJDIR: alias for MAKEOBJDIR
    GTAGSOBJDIRPREFIX: alias for MAKEOBJDIRPREFIX
    These aliases are given higher priority than the originals.
  * global: New command --print=&lt;name&gt;.
    &lt;name&gt; may be one of: root, dbpath or conf.
    This is a generic version of the -p (--print-dbpath) command.
  'global -p' is equal to 'global --print=dbpath'
  'global -pr' is equal to 'global --print=root'
  * gtags: Updated the built-in PHP parser to support namespaces
    and traits, which were introduced in PHP5. The following
    keywords have been removed:
    + failure: not a keyword
  + header: normal built-in function
  + is_array: normal built-in function
  + is_set: typo -&gt; isset
  + printf: normal built-in function
  + setcookie: normal built-in function
  + success: not a keyword
- Refresh patches
- Update dependencies</changelog>
  <changelog author="astieger@suse.com" date="1513425600">- GNU Global 6.6.1:
  * CVE-2017-17531: Command injection vulnerability in gozilla
    allowed arbitrary command execution via crafted URLs
    (boo#1073197)
- includes changes from 6.6.0:
  * gtags: Add support for glob patterns in langmap variable
  * gozilla: Change the default browser from 'mozilla' to 'firefox'
  * gtags.conf.in: Updated to adapt to the latest ctags(s).
    Removed: common-ctags-maps
    Updated: exuberant-ctags, universal-ctags
  * incompatible change: universal-ctags.la: The --extra option in
    Exuberant-ctags is renamed to --extras (plural) in
    Universal-ctags for making consistent with --kinds-&lt;LANG&gt; and
  - -fields.
  * various bug fixes
- rebase fix_paths.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1552996800">- GNU Global 6.6.3:
  * gtags: New --skip-symlink option.
  * gtags-cscope: 'Find assignments to this symbol:' was
    implemented.
  * gtags-cscope.vim: the following key assignment was added.
    &lt;C-\&gt;a, &lt;C-@&gt;a, &lt;C-@&gt;&lt;C-@&gt;a
  * various bug fixes.
- includes changes from 6.6.2:
  * gozilla: Deleted functions to reduce or eliminate possibility
    of future security risks.
  * various bug fixes.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1561377600">- Switch to python3
- Update dependcies
- Get rid of env usage</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 6.6.4
  o gtags.vim: New custom variable 'Gtags_Emacs_Like_Mode'.
  If this variable is 1, use the tag files of the project to which the current
  file belongs. By default, use the tag files of the current project.
  o gtags.vim: Gtags command discarded all unsaved changes. Now it brings
  the following error: E37: No write since last change (add ! to override).
  o gtags: Now gtags skips java annotations (@...[(...)]).
- add global-gcc10.patch to fix build with -fcommon</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1600516800">- global 6.6.5:
  * gtags: Now gtags_hook is not executed when the following
    options are specified: --version, --help, --config, --dump
  * gtags: Added new option: -C (--directory)
  * gtags: the built-in C++ parser is deprecated
- drop global-gcc10.patch to fix build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619956800">- global 6.6.6:
  * gtags.el: Added native support for TRAMP. 'global-client'
    command is no longer needed to use TRAMP.
  * gtags: environment variable GTAGSFORCECPP is deprecated.
  * gtags: If GTAGSFORCECPP was defined and --explain was used and
    the first file is a '*.h', gtags crashed
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 6.6.8:
  * gtags: Now you can write comments in '.notfunction' file.
    Lines starting with ';' are comment lines.
  * configure: Now you can build Global with external SQLite3 library.
  - -with-sqlite3[=dir]    By default, the embedded version is used.
  * plugin-factory/PLUGIN_HOWTO.reference:
    Added a howto document: 'How to get Universal Ctags to handle references'
  * global: The --print0 option was ignored when using the --completion command.
  Now it works.
  * gtags: The --file option could cause segmentation fault.
  * Pygments-enabled gtags failed to start. Now it works.
    (Changed the shebang of pygments_parser.py.in from '#!/usr/bin/env python'
    to '#!@PYTHON@'.)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671364800">- update to 6.6.9:
  * o gtags(C++ parser): did not recognize 'final' keyword. Now it works.
  * o Fixed a couple of bugs in MinGW.
  * Fixed unknown type sigset_t error in MinGW.
  * Fixed pointer to integer cast warnings in MinGW.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720353600">- CVE-2024-38448: htags may allow code execution via untrusted
  dbpath (boo#1226420), add global-6.6.9-CVE-2024-38448.patch</changelog>
</package>
<package pkgid="d181224b93a99cc201ac42ab9992b52322109db51c5447c8029b9abc9c6c89ec" name="global" arch="i586">
  <version epoch="0" ver="6.6.9" rel="bp156.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1427457600">- update to 6.4
  see /usr/share/doc/packages/global/NEWS for complete list
  of changes since 6.3.2</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Add gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1432382400">- Update dependencies
- Enable exuberant-ctags
- Enable sqlite3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1438776000">- Update to 6.5
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1442923200">- Update to 6.5.1
  * See attached NEWS for detailed list of changes
- Drop unreferenced patches as none of them seems necessary
  * global-5.7-gcc.diff
  * global-5.9.5-fix-gcc-warnings.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1450353600">- Update to 6.5.2
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1458302400">- Update to 6.5.3
  * Added new plug-in parser 'universal-ctags.la'.
  * gtags.conf:
    + Added new entry 'universal-ctags'.
    + Added new variable 'ctagscom'. You can overwrite the path of
    ctags(1) dynamically for exuberant-ctags.la,
    universal-ctags.la and pygments-parser.la.
  * gtags.conf: Added the following patterns to the skip list.
    '*.o,*.a,*.so,*.lo,*.zip,*.gz,*.bz2,*.xz,*.lzh,*.Z,*.tgz,*.min.js,*min.css'
  * gtags: Added some explanations for the --explain option.
- Small spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1459080000">- Update to 6.5.4
  * gtags.conf: The entries which include '.xml' were commented
    out, because they require libxml.a. If you use them, please
    uncomment them.
  * universal-ctags.la: Universal ctags plug-in parser did not
    work on almost files. Now it works.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1463140800">- set correctly path paths for parsers (bnc#977967)
  new patch: fix_paths.patch</changelog>
  <changelog author="astieger@suse.com" date="1483012800">- GNU global 6.5.6:
  * htags-server: New --retry[=n] option
  * htags: Changed the format of function header (--show-position)
    to make copying text easier.
  * geco.rc: Added 'fzf' as a selector candidate.
  * gtags: New configuration variable 'gtags_hook'.
  * htags: Now --cvsweb option always insert 'view=log' to the
    generated URLs.
  * fix gtags: Gtags often aborted with a message "buffer overflow
  * fix htags: CGI scripts (completion.cgi, global.cgi) included by
    mistake are now generated during package build
- includes changes from 6.5.5:
  * fix exuberant-ctags.la: The path name of ctags command couldn't
    be changed. (new configuration variable 'ctagscom')
  * fix Tag files got corrupted when the built-in C++ parser gave
    up parsing and aborted
  * Some inappropriate error messages were changed.</changelog>
  <changelog author="mpluskal@suse.com" date="1495713600">- Update to version 6.5.7:
  * global: Now global(1) accept a file as --nearness option.
    If it is a file, tags in the file are shown first.
  * global: Added aliases for MAKEOBJDIR and MAKEOBJDIRPREFIX.
    GTAGSOBJDIR: alias for MAKEOBJDIR
    GTAGSOBJDIRPREFIX: alias for MAKEOBJDIRPREFIX
    These aliases are given higher priority than the originals.
  * global: New command --print=&lt;name&gt;.
    &lt;name&gt; may be one of: root, dbpath or conf.
    This is a generic version of the -p (--print-dbpath) command.
  'global -p' is equal to 'global --print=dbpath'
  'global -pr' is equal to 'global --print=root'
  * gtags: Updated the built-in PHP parser to support namespaces
    and traits, which were introduced in PHP5. The following
    keywords have been removed:
    + failure: not a keyword
  + header: normal built-in function
  + is_array: normal built-in function
  + is_set: typo -&gt; isset
  + printf: normal built-in function
  + setcookie: normal built-in function
  + success: not a keyword
- Refresh patches
- Update dependencies</changelog>
  <changelog author="astieger@suse.com" date="1513425600">- GNU Global 6.6.1:
  * CVE-2017-17531: Command injection vulnerability in gozilla
    allowed arbitrary command execution via crafted URLs
    (boo#1073197)
- includes changes from 6.6.0:
  * gtags: Add support for glob patterns in langmap variable
  * gozilla: Change the default browser from 'mozilla' to 'firefox'
  * gtags.conf.in: Updated to adapt to the latest ctags(s).
    Removed: common-ctags-maps
    Updated: exuberant-ctags, universal-ctags
  * incompatible change: universal-ctags.la: The --extra option in
    Exuberant-ctags is renamed to --extras (plural) in
    Universal-ctags for making consistent with --kinds-&lt;LANG&gt; and
  - -fields.
  * various bug fixes
- rebase fix_paths.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1552996800">- GNU Global 6.6.3:
  * gtags: New --skip-symlink option.
  * gtags-cscope: 'Find assignments to this symbol:' was
    implemented.
  * gtags-cscope.vim: the following key assignment was added.
    &lt;C-\&gt;a, &lt;C-@&gt;a, &lt;C-@&gt;&lt;C-@&gt;a
  * various bug fixes.
- includes changes from 6.6.2:
  * gozilla: Deleted functions to reduce or eliminate possibility
    of future security risks.
  * various bug fixes.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1561377600">- Switch to python3
- Update dependcies
- Get rid of env usage</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 6.6.4
  o gtags.vim: New custom variable 'Gtags_Emacs_Like_Mode'.
  If this variable is 1, use the tag files of the project to which the current
  file belongs. By default, use the tag files of the current project.
  o gtags.vim: Gtags command discarded all unsaved changes. Now it brings
  the following error: E37: No write since last change (add ! to override).
  o gtags: Now gtags skips java annotations (@...[(...)]).
- add global-gcc10.patch to fix build with -fcommon</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1600516800">- global 6.6.5:
  * gtags: Now gtags_hook is not executed when the following
    options are specified: --version, --help, --config, --dump
  * gtags: Added new option: -C (--directory)
  * gtags: the built-in C++ parser is deprecated
- drop global-gcc10.patch to fix build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619956800">- global 6.6.6:
  * gtags.el: Added native support for TRAMP. 'global-client'
    command is no longer needed to use TRAMP.
  * gtags: environment variable GTAGSFORCECPP is deprecated.
  * gtags: If GTAGSFORCECPP was defined and --explain was used and
    the first file is a '*.h', gtags crashed
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 6.6.8:
  * gtags: Now you can write comments in '.notfunction' file.
    Lines starting with ';' are comment lines.
  * configure: Now you can build Global with external SQLite3 library.
  - -with-sqlite3[=dir]    By default, the embedded version is used.
  * plugin-factory/PLUGIN_HOWTO.reference:
    Added a howto document: 'How to get Universal Ctags to handle references'
  * global: The --print0 option was ignored when using the --completion command.
  Now it works.
  * gtags: The --file option could cause segmentation fault.
  * Pygments-enabled gtags failed to start. Now it works.
    (Changed the shebang of pygments_parser.py.in from '#!/usr/bin/env python'
    to '#!@PYTHON@'.)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671364800">- update to 6.6.9:
  * o gtags(C++ parser): did not recognize 'final' keyword. Now it works.
  * o Fixed a couple of bugs in MinGW.
  * Fixed unknown type sigset_t error in MinGW.
  * Fixed pointer to integer cast warnings in MinGW.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720353600">- CVE-2024-38448: htags may allow code execution via untrusted
  dbpath (boo#1226420), add global-6.6.9-CVE-2024-38448.patch</changelog>
</package>
<package pkgid="dfc11afada05835a1e876dc1165dadc829355b178f665a27fecbb2dd66221129" name="global" arch="ppc64le">
  <version epoch="0" ver="6.6.9" rel="bp156.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1427457600">- update to 6.4
  see /usr/share/doc/packages/global/NEWS for complete list
  of changes since 6.3.2</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Add gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1432382400">- Update dependencies
- Enable exuberant-ctags
- Enable sqlite3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1438776000">- Update to 6.5
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1442923200">- Update to 6.5.1
  * See attached NEWS for detailed list of changes
- Drop unreferenced patches as none of them seems necessary
  * global-5.7-gcc.diff
  * global-5.9.5-fix-gcc-warnings.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1450353600">- Update to 6.5.2
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1458302400">- Update to 6.5.3
  * Added new plug-in parser 'universal-ctags.la'.
  * gtags.conf:
    + Added new entry 'universal-ctags'.
    + Added new variable 'ctagscom'. You can overwrite the path of
    ctags(1) dynamically for exuberant-ctags.la,
    universal-ctags.la and pygments-parser.la.
  * gtags.conf: Added the following patterns to the skip list.
    '*.o,*.a,*.so,*.lo,*.zip,*.gz,*.bz2,*.xz,*.lzh,*.Z,*.tgz,*.min.js,*min.css'
  * gtags: Added some explanations for the --explain option.
- Small spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1459080000">- Update to 6.5.4
  * gtags.conf: The entries which include '.xml' were commented
    out, because they require libxml.a. If you use them, please
    uncomment them.
  * universal-ctags.la: Universal ctags plug-in parser did not
    work on almost files. Now it works.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1463140800">- set correctly path paths for parsers (bnc#977967)
  new patch: fix_paths.patch</changelog>
  <changelog author="astieger@suse.com" date="1483012800">- GNU global 6.5.6:
  * htags-server: New --retry[=n] option
  * htags: Changed the format of function header (--show-position)
    to make copying text easier.
  * geco.rc: Added 'fzf' as a selector candidate.
  * gtags: New configuration variable 'gtags_hook'.
  * htags: Now --cvsweb option always insert 'view=log' to the
    generated URLs.
  * fix gtags: Gtags often aborted with a message "buffer overflow
  * fix htags: CGI scripts (completion.cgi, global.cgi) included by
    mistake are now generated during package build
- includes changes from 6.5.5:
  * fix exuberant-ctags.la: The path name of ctags command couldn't
    be changed. (new configuration variable 'ctagscom')
  * fix Tag files got corrupted when the built-in C++ parser gave
    up parsing and aborted
  * Some inappropriate error messages were changed.</changelog>
  <changelog author="mpluskal@suse.com" date="1495713600">- Update to version 6.5.7:
  * global: Now global(1) accept a file as --nearness option.
    If it is a file, tags in the file are shown first.
  * global: Added aliases for MAKEOBJDIR and MAKEOBJDIRPREFIX.
    GTAGSOBJDIR: alias for MAKEOBJDIR
    GTAGSOBJDIRPREFIX: alias for MAKEOBJDIRPREFIX
    These aliases are given higher priority than the originals.
  * global: New command --print=&lt;name&gt;.
    &lt;name&gt; may be one of: root, dbpath or conf.
    This is a generic version of the -p (--print-dbpath) command.
  'global -p' is equal to 'global --print=dbpath'
  'global -pr' is equal to 'global --print=root'
  * gtags: Updated the built-in PHP parser to support namespaces
    and traits, which were introduced in PHP5. The following
    keywords have been removed:
    + failure: not a keyword
  + header: normal built-in function
  + is_array: normal built-in function
  + is_set: typo -&gt; isset
  + printf: normal built-in function
  + setcookie: normal built-in function
  + success: not a keyword
- Refresh patches
- Update dependencies</changelog>
  <changelog author="astieger@suse.com" date="1513425600">- GNU Global 6.6.1:
  * CVE-2017-17531: Command injection vulnerability in gozilla
    allowed arbitrary command execution via crafted URLs
    (boo#1073197)
- includes changes from 6.6.0:
  * gtags: Add support for glob patterns in langmap variable
  * gozilla: Change the default browser from 'mozilla' to 'firefox'
  * gtags.conf.in: Updated to adapt to the latest ctags(s).
    Removed: common-ctags-maps
    Updated: exuberant-ctags, universal-ctags
  * incompatible change: universal-ctags.la: The --extra option in
    Exuberant-ctags is renamed to --extras (plural) in
    Universal-ctags for making consistent with --kinds-&lt;LANG&gt; and
  - -fields.
  * various bug fixes
- rebase fix_paths.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1552996800">- GNU Global 6.6.3:
  * gtags: New --skip-symlink option.
  * gtags-cscope: 'Find assignments to this symbol:' was
    implemented.
  * gtags-cscope.vim: the following key assignment was added.
    &lt;C-\&gt;a, &lt;C-@&gt;a, &lt;C-@&gt;&lt;C-@&gt;a
  * various bug fixes.
- includes changes from 6.6.2:
  * gozilla: Deleted functions to reduce or eliminate possibility
    of future security risks.
  * various bug fixes.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1561377600">- Switch to python3
- Update dependcies
- Get rid of env usage</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 6.6.4
  o gtags.vim: New custom variable 'Gtags_Emacs_Like_Mode'.
  If this variable is 1, use the tag files of the project to which the current
  file belongs. By default, use the tag files of the current project.
  o gtags.vim: Gtags command discarded all unsaved changes. Now it brings
  the following error: E37: No write since last change (add ! to override).
  o gtags: Now gtags skips java annotations (@...[(...)]).
- add global-gcc10.patch to fix build with -fcommon</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1600516800">- global 6.6.5:
  * gtags: Now gtags_hook is not executed when the following
    options are specified: --version, --help, --config, --dump
  * gtags: Added new option: -C (--directory)
  * gtags: the built-in C++ parser is deprecated
- drop global-gcc10.patch to fix build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619956800">- global 6.6.6:
  * gtags.el: Added native support for TRAMP. 'global-client'
    command is no longer needed to use TRAMP.
  * gtags: environment variable GTAGSFORCECPP is deprecated.
  * gtags: If GTAGSFORCECPP was defined and --explain was used and
    the first file is a '*.h', gtags crashed
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 6.6.8:
  * gtags: Now you can write comments in '.notfunction' file.
    Lines starting with ';' are comment lines.
  * configure: Now you can build Global with external SQLite3 library.
  - -with-sqlite3[=dir]    By default, the embedded version is used.
  * plugin-factory/PLUGIN_HOWTO.reference:
    Added a howto document: 'How to get Universal Ctags to handle references'
  * global: The --print0 option was ignored when using the --completion command.
  Now it works.
  * gtags: The --file option could cause segmentation fault.
  * Pygments-enabled gtags failed to start. Now it works.
    (Changed the shebang of pygments_parser.py.in from '#!/usr/bin/env python'
    to '#!@PYTHON@'.)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671364800">- update to 6.6.9:
  * o gtags(C++ parser): did not recognize 'final' keyword. Now it works.
  * o Fixed a couple of bugs in MinGW.
  * Fixed unknown type sigset_t error in MinGW.
  * Fixed pointer to integer cast warnings in MinGW.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720353600">- CVE-2024-38448: htags may allow code execution via untrusted
  dbpath (boo#1226420), add global-6.6.9-CVE-2024-38448.patch</changelog>
</package>
<package pkgid="49e0ee4fcc9646d087148ec38c080c1fea8ed0ce8cca46a16157eb7a1558a84e" name="global" arch="s390x">
  <version epoch="0" ver="6.6.9" rel="bp156.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1427457600">- update to 6.4
  see /usr/share/doc/packages/global/NEWS for complete list
  of changes since 6.3.2</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Add gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1432382400">- Update dependencies
- Enable exuberant-ctags
- Enable sqlite3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1438776000">- Update to 6.5
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1442923200">- Update to 6.5.1
  * See attached NEWS for detailed list of changes
- Drop unreferenced patches as none of them seems necessary
  * global-5.7-gcc.diff
  * global-5.9.5-fix-gcc-warnings.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1450353600">- Update to 6.5.2
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1458302400">- Update to 6.5.3
  * Added new plug-in parser 'universal-ctags.la'.
  * gtags.conf:
    + Added new entry 'universal-ctags'.
    + Added new variable 'ctagscom'. You can overwrite the path of
    ctags(1) dynamically for exuberant-ctags.la,
    universal-ctags.la and pygments-parser.la.
  * gtags.conf: Added the following patterns to the skip list.
    '*.o,*.a,*.so,*.lo,*.zip,*.gz,*.bz2,*.xz,*.lzh,*.Z,*.tgz,*.min.js,*min.css'
  * gtags: Added some explanations for the --explain option.
- Small spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1459080000">- Update to 6.5.4
  * gtags.conf: The entries which include '.xml' were commented
    out, because they require libxml.a. If you use them, please
    uncomment them.
  * universal-ctags.la: Universal ctags plug-in parser did not
    work on almost files. Now it works.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1463140800">- set correctly path paths for parsers (bnc#977967)
  new patch: fix_paths.patch</changelog>
  <changelog author="astieger@suse.com" date="1483012800">- GNU global 6.5.6:
  * htags-server: New --retry[=n] option
  * htags: Changed the format of function header (--show-position)
    to make copying text easier.
  * geco.rc: Added 'fzf' as a selector candidate.
  * gtags: New configuration variable 'gtags_hook'.
  * htags: Now --cvsweb option always insert 'view=log' to the
    generated URLs.
  * fix gtags: Gtags often aborted with a message "buffer overflow
  * fix htags: CGI scripts (completion.cgi, global.cgi) included by
    mistake are now generated during package build
- includes changes from 6.5.5:
  * fix exuberant-ctags.la: The path name of ctags command couldn't
    be changed. (new configuration variable 'ctagscom')
  * fix Tag files got corrupted when the built-in C++ parser gave
    up parsing and aborted
  * Some inappropriate error messages were changed.</changelog>
  <changelog author="mpluskal@suse.com" date="1495713600">- Update to version 6.5.7:
  * global: Now global(1) accept a file as --nearness option.
    If it is a file, tags in the file are shown first.
  * global: Added aliases for MAKEOBJDIR and MAKEOBJDIRPREFIX.
    GTAGSOBJDIR: alias for MAKEOBJDIR
    GTAGSOBJDIRPREFIX: alias for MAKEOBJDIRPREFIX
    These aliases are given higher priority than the originals.
  * global: New command --print=&lt;name&gt;.
    &lt;name&gt; may be one of: root, dbpath or conf.
    This is a generic version of the -p (--print-dbpath) command.
  'global -p' is equal to 'global --print=dbpath'
  'global -pr' is equal to 'global --print=root'
  * gtags: Updated the built-in PHP parser to support namespaces
    and traits, which were introduced in PHP5. The following
    keywords have been removed:
    + failure: not a keyword
  + header: normal built-in function
  + is_array: normal built-in function
  + is_set: typo -&gt; isset
  + printf: normal built-in function
  + setcookie: normal built-in function
  + success: not a keyword
- Refresh patches
- Update dependencies</changelog>
  <changelog author="astieger@suse.com" date="1513425600">- GNU Global 6.6.1:
  * CVE-2017-17531: Command injection vulnerability in gozilla
    allowed arbitrary command execution via crafted URLs
    (boo#1073197)
- includes changes from 6.6.0:
  * gtags: Add support for glob patterns in langmap variable
  * gozilla: Change the default browser from 'mozilla' to 'firefox'
  * gtags.conf.in: Updated to adapt to the latest ctags(s).
    Removed: common-ctags-maps
    Updated: exuberant-ctags, universal-ctags
  * incompatible change: universal-ctags.la: The --extra option in
    Exuberant-ctags is renamed to --extras (plural) in
    Universal-ctags for making consistent with --kinds-&lt;LANG&gt; and
  - -fields.
  * various bug fixes
- rebase fix_paths.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1552996800">- GNU Global 6.6.3:
  * gtags: New --skip-symlink option.
  * gtags-cscope: 'Find assignments to this symbol:' was
    implemented.
  * gtags-cscope.vim: the following key assignment was added.
    &lt;C-\&gt;a, &lt;C-@&gt;a, &lt;C-@&gt;&lt;C-@&gt;a
  * various bug fixes.
- includes changes from 6.6.2:
  * gozilla: Deleted functions to reduce or eliminate possibility
    of future security risks.
  * various bug fixes.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1561377600">- Switch to python3
- Update dependcies
- Get rid of env usage</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 6.6.4
  o gtags.vim: New custom variable 'Gtags_Emacs_Like_Mode'.
  If this variable is 1, use the tag files of the project to which the current
  file belongs. By default, use the tag files of the current project.
  o gtags.vim: Gtags command discarded all unsaved changes. Now it brings
  the following error: E37: No write since last change (add ! to override).
  o gtags: Now gtags skips java annotations (@...[(...)]).
- add global-gcc10.patch to fix build with -fcommon</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1600516800">- global 6.6.5:
  * gtags: Now gtags_hook is not executed when the following
    options are specified: --version, --help, --config, --dump
  * gtags: Added new option: -C (--directory)
  * gtags: the built-in C++ parser is deprecated
- drop global-gcc10.patch to fix build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619956800">- global 6.6.6:
  * gtags.el: Added native support for TRAMP. 'global-client'
    command is no longer needed to use TRAMP.
  * gtags: environment variable GTAGSFORCECPP is deprecated.
  * gtags: If GTAGSFORCECPP was defined and --explain was used and
    the first file is a '*.h', gtags crashed
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 6.6.8:
  * gtags: Now you can write comments in '.notfunction' file.
    Lines starting with ';' are comment lines.
  * configure: Now you can build Global with external SQLite3 library.
  - -with-sqlite3[=dir]    By default, the embedded version is used.
  * plugin-factory/PLUGIN_HOWTO.reference:
    Added a howto document: 'How to get Universal Ctags to handle references'
  * global: The --print0 option was ignored when using the --completion command.
  Now it works.
  * gtags: The --file option could cause segmentation fault.
  * Pygments-enabled gtags failed to start. Now it works.
    (Changed the shebang of pygments_parser.py.in from '#!/usr/bin/env python'
    to '#!@PYTHON@'.)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671364800">- update to 6.6.9:
  * o gtags(C++ parser): did not recognize 'final' keyword. Now it works.
  * o Fixed a couple of bugs in MinGW.
  * Fixed unknown type sigset_t error in MinGW.
  * Fixed pointer to integer cast warnings in MinGW.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720353600">- CVE-2024-38448: htags may allow code execution via untrusted
  dbpath (boo#1226420), add global-6.6.9-CVE-2024-38448.patch</changelog>
</package>
<package pkgid="29368aeb8486dea280af4342893af7e8e47fefce924c11de72c35d1be9abe5c0" name="global" arch="src">
  <version epoch="0" ver="6.6.9" rel="bp156.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1427457600">- update to 6.4
  see /usr/share/doc/packages/global/NEWS for complete list
  of changes since 6.3.2</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Add gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1432382400">- Update dependencies
- Enable exuberant-ctags
- Enable sqlite3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1438776000">- Update to 6.5
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1442923200">- Update to 6.5.1
  * See attached NEWS for detailed list of changes
- Drop unreferenced patches as none of them seems necessary
  * global-5.7-gcc.diff
  * global-5.9.5-fix-gcc-warnings.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1450353600">- Update to 6.5.2
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1458302400">- Update to 6.5.3
  * Added new plug-in parser 'universal-ctags.la'.
  * gtags.conf:
    + Added new entry 'universal-ctags'.
    + Added new variable 'ctagscom'. You can overwrite the path of
    ctags(1) dynamically for exuberant-ctags.la,
    universal-ctags.la and pygments-parser.la.
  * gtags.conf: Added the following patterns to the skip list.
    '*.o,*.a,*.so,*.lo,*.zip,*.gz,*.bz2,*.xz,*.lzh,*.Z,*.tgz,*.min.js,*min.css'
  * gtags: Added some explanations for the --explain option.
- Small spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1459080000">- Update to 6.5.4
  * gtags.conf: The entries which include '.xml' were commented
    out, because they require libxml.a. If you use them, please
    uncomment them.
  * universal-ctags.la: Universal ctags plug-in parser did not
    work on almost files. Now it works.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1463140800">- set correctly path paths for parsers (bnc#977967)
  new patch: fix_paths.patch</changelog>
  <changelog author="astieger@suse.com" date="1483012800">- GNU global 6.5.6:
  * htags-server: New --retry[=n] option
  * htags: Changed the format of function header (--show-position)
    to make copying text easier.
  * geco.rc: Added 'fzf' as a selector candidate.
  * gtags: New configuration variable 'gtags_hook'.
  * htags: Now --cvsweb option always insert 'view=log' to the
    generated URLs.
  * fix gtags: Gtags often aborted with a message "buffer overflow
  * fix htags: CGI scripts (completion.cgi, global.cgi) included by
    mistake are now generated during package build
- includes changes from 6.5.5:
  * fix exuberant-ctags.la: The path name of ctags command couldn't
    be changed. (new configuration variable 'ctagscom')
  * fix Tag files got corrupted when the built-in C++ parser gave
    up parsing and aborted
  * Some inappropriate error messages were changed.</changelog>
  <changelog author="mpluskal@suse.com" date="1495713600">- Update to version 6.5.7:
  * global: Now global(1) accept a file as --nearness option.
    If it is a file, tags in the file are shown first.
  * global: Added aliases for MAKEOBJDIR and MAKEOBJDIRPREFIX.
    GTAGSOBJDIR: alias for MAKEOBJDIR
    GTAGSOBJDIRPREFIX: alias for MAKEOBJDIRPREFIX
    These aliases are given higher priority than the originals.
  * global: New command --print=&lt;name&gt;.
    &lt;name&gt; may be one of: root, dbpath or conf.
    This is a generic version of the -p (--print-dbpath) command.
  'global -p' is equal to 'global --print=dbpath'
  'global -pr' is equal to 'global --print=root'
  * gtags: Updated the built-in PHP parser to support namespaces
    and traits, which were introduced in PHP5. The following
    keywords have been removed:
    + failure: not a keyword
  + header: normal built-in function
  + is_array: normal built-in function
  + is_set: typo -&gt; isset
  + printf: normal built-in function
  + setcookie: normal built-in function
  + success: not a keyword
- Refresh patches
- Update dependencies</changelog>
  <changelog author="astieger@suse.com" date="1513425600">- GNU Global 6.6.1:
  * CVE-2017-17531: Command injection vulnerability in gozilla
    allowed arbitrary command execution via crafted URLs
    (boo#1073197)
- includes changes from 6.6.0:
  * gtags: Add support for glob patterns in langmap variable
  * gozilla: Change the default browser from 'mozilla' to 'firefox'
  * gtags.conf.in: Updated to adapt to the latest ctags(s).
    Removed: common-ctags-maps
    Updated: exuberant-ctags, universal-ctags
  * incompatible change: universal-ctags.la: The --extra option in
    Exuberant-ctags is renamed to --extras (plural) in
    Universal-ctags for making consistent with --kinds-&lt;LANG&gt; and
  - -fields.
  * various bug fixes
- rebase fix_paths.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1552996800">- GNU Global 6.6.3:
  * gtags: New --skip-symlink option.
  * gtags-cscope: 'Find assignments to this symbol:' was
    implemented.
  * gtags-cscope.vim: the following key assignment was added.
    &lt;C-\&gt;a, &lt;C-@&gt;a, &lt;C-@&gt;&lt;C-@&gt;a
  * various bug fixes.
- includes changes from 6.6.2:
  * gozilla: Deleted functions to reduce or eliminate possibility
    of future security risks.
  * various bug fixes.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1561377600">- Switch to python3
- Update dependcies
- Get rid of env usage</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 6.6.4
  o gtags.vim: New custom variable 'Gtags_Emacs_Like_Mode'.
  If this variable is 1, use the tag files of the project to which the current
  file belongs. By default, use the tag files of the current project.
  o gtags.vim: Gtags command discarded all unsaved changes. Now it brings
  the following error: E37: No write since last change (add ! to override).
  o gtags: Now gtags skips java annotations (@...[(...)]).
- add global-gcc10.patch to fix build with -fcommon</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1600516800">- global 6.6.5:
  * gtags: Now gtags_hook is not executed when the following
    options are specified: --version, --help, --config, --dump
  * gtags: Added new option: -C (--directory)
  * gtags: the built-in C++ parser is deprecated
- drop global-gcc10.patch to fix build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619956800">- global 6.6.6:
  * gtags.el: Added native support for TRAMP. 'global-client'
    command is no longer needed to use TRAMP.
  * gtags: environment variable GTAGSFORCECPP is deprecated.
  * gtags: If GTAGSFORCECPP was defined and --explain was used and
    the first file is a '*.h', gtags crashed
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 6.6.8:
  * gtags: Now you can write comments in '.notfunction' file.
    Lines starting with ';' are comment lines.
  * configure: Now you can build Global with external SQLite3 library.
  - -with-sqlite3[=dir]    By default, the embedded version is used.
  * plugin-factory/PLUGIN_HOWTO.reference:
    Added a howto document: 'How to get Universal Ctags to handle references'
  * global: The --print0 option was ignored when using the --completion command.
  Now it works.
  * gtags: The --file option could cause segmentation fault.
  * Pygments-enabled gtags failed to start. Now it works.
    (Changed the shebang of pygments_parser.py.in from '#!/usr/bin/env python'
    to '#!@PYTHON@'.)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671364800">- update to 6.6.9:
  * o gtags(C++ parser): did not recognize 'final' keyword. Now it works.
  * o Fixed a couple of bugs in MinGW.
  * Fixed unknown type sigset_t error in MinGW.
  * Fixed pointer to integer cast warnings in MinGW.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720353600">- CVE-2024-38448: htags may allow code execution via untrusted
  dbpath (boo#1226420), add global-6.6.9-CVE-2024-38448.patch</changelog>
</package>
<package pkgid="f908aa08a2c7d8c843bf687e20713e9e4d67de559e288d1758bd133536c266ea" name="global" arch="x86_64">
  <version epoch="0" ver="6.6.9" rel="bp156.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1427457600">- update to 6.4
  see /usr/share/doc/packages/global/NEWS for complete list
  of changes since 6.3.2</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Add gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1432382400">- Update dependencies
- Enable exuberant-ctags
- Enable sqlite3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1438776000">- Update to 6.5
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1442923200">- Update to 6.5.1
  * See attached NEWS for detailed list of changes
- Drop unreferenced patches as none of them seems necessary
  * global-5.7-gcc.diff
  * global-5.9.5-fix-gcc-warnings.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1450353600">- Update to 6.5.2
  * See attached NEWS for detailed list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1458302400">- Update to 6.5.3
  * Added new plug-in parser 'universal-ctags.la'.
  * gtags.conf:
    + Added new entry 'universal-ctags'.
    + Added new variable 'ctagscom'. You can overwrite the path of
    ctags(1) dynamically for exuberant-ctags.la,
    universal-ctags.la and pygments-parser.la.
  * gtags.conf: Added the following patterns to the skip list.
    '*.o,*.a,*.so,*.lo,*.zip,*.gz,*.bz2,*.xz,*.lzh,*.Z,*.tgz,*.min.js,*min.css'
  * gtags: Added some explanations for the --explain option.
- Small spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1459080000">- Update to 6.5.4
  * gtags.conf: The entries which include '.xml' were commented
    out, because they require libxml.a. If you use them, please
    uncomment them.
  * universal-ctags.la: Universal ctags plug-in parser did not
    work on almost files. Now it works.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1463140800">- set correctly path paths for parsers (bnc#977967)
  new patch: fix_paths.patch</changelog>
  <changelog author="astieger@suse.com" date="1483012800">- GNU global 6.5.6:
  * htags-server: New --retry[=n] option
  * htags: Changed the format of function header (--show-position)
    to make copying text easier.
  * geco.rc: Added 'fzf' as a selector candidate.
  * gtags: New configuration variable 'gtags_hook'.
  * htags: Now --cvsweb option always insert 'view=log' to the
    generated URLs.
  * fix gtags: Gtags often aborted with a message "buffer overflow
  * fix htags: CGI scripts (completion.cgi, global.cgi) included by
    mistake are now generated during package build
- includes changes from 6.5.5:
  * fix exuberant-ctags.la: The path name of ctags command couldn't
    be changed. (new configuration variable 'ctagscom')
  * fix Tag files got corrupted when the built-in C++ parser gave
    up parsing and aborted
  * Some inappropriate error messages were changed.</changelog>
  <changelog author="mpluskal@suse.com" date="1495713600">- Update to version 6.5.7:
  * global: Now global(1) accept a file as --nearness option.
    If it is a file, tags in the file are shown first.
  * global: Added aliases for MAKEOBJDIR and MAKEOBJDIRPREFIX.
    GTAGSOBJDIR: alias for MAKEOBJDIR
    GTAGSOBJDIRPREFIX: alias for MAKEOBJDIRPREFIX
    These aliases are given higher priority than the originals.
  * global: New command --print=&lt;name&gt;.
    &lt;name&gt; may be one of: root, dbpath or conf.
    This is a generic version of the -p (--print-dbpath) command.
  'global -p' is equal to 'global --print=dbpath'
  'global -pr' is equal to 'global --print=root'
  * gtags: Updated the built-in PHP parser to support namespaces
    and traits, which were introduced in PHP5. The following
    keywords have been removed:
    + failure: not a keyword
  + header: normal built-in function
  + is_array: normal built-in function
  + is_set: typo -&gt; isset
  + printf: normal built-in function
  + setcookie: normal built-in function
  + success: not a keyword
- Refresh patches
- Update dependencies</changelog>
  <changelog author="astieger@suse.com" date="1513425600">- GNU Global 6.6.1:
  * CVE-2017-17531: Command injection vulnerability in gozilla
    allowed arbitrary command execution via crafted URLs
    (boo#1073197)
- includes changes from 6.6.0:
  * gtags: Add support for glob patterns in langmap variable
  * gozilla: Change the default browser from 'mozilla' to 'firefox'
  * gtags.conf.in: Updated to adapt to the latest ctags(s).
    Removed: common-ctags-maps
    Updated: exuberant-ctags, universal-ctags
  * incompatible change: universal-ctags.la: The --extra option in
    Exuberant-ctags is renamed to --extras (plural) in
    Universal-ctags for making consistent with --kinds-&lt;LANG&gt; and
  - -fields.
  * various bug fixes
- rebase fix_paths.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1552996800">- GNU Global 6.6.3:
  * gtags: New --skip-symlink option.
  * gtags-cscope: 'Find assignments to this symbol:' was
    implemented.
  * gtags-cscope.vim: the following key assignment was added.
    &lt;C-\&gt;a, &lt;C-@&gt;a, &lt;C-@&gt;&lt;C-@&gt;a
  * various bug fixes.
- includes changes from 6.6.2:
  * gozilla: Deleted functions to reduce or eliminate possibility
    of future security risks.
  * various bug fixes.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1561377600">- Switch to python3
- Update dependcies
- Get rid of env usage</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 6.6.4
  o gtags.vim: New custom variable 'Gtags_Emacs_Like_Mode'.
  If this variable is 1, use the tag files of the project to which the current
  file belongs. By default, use the tag files of the current project.
  o gtags.vim: Gtags command discarded all unsaved changes. Now it brings
  the following error: E37: No write since last change (add ! to override).
  o gtags: Now gtags skips java annotations (@...[(...)]).
- add global-gcc10.patch to fix build with -fcommon</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1600516800">- global 6.6.5:
  * gtags: Now gtags_hook is not executed when the following
    options are specified: --version, --help, --config, --dump
  * gtags: Added new option: -C (--directory)
  * gtags: the built-in C++ parser is deprecated
- drop global-gcc10.patch to fix build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619956800">- global 6.6.6:
  * gtags.el: Added native support for TRAMP. 'global-client'
    command is no longer needed to use TRAMP.
  * gtags: environment variable GTAGSFORCECPP is deprecated.
  * gtags: If GTAGSFORCECPP was defined and --explain was used and
    the first file is a '*.h', gtags crashed
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 6.6.8:
  * gtags: Now you can write comments in '.notfunction' file.
    Lines starting with ';' are comment lines.
  * configure: Now you can build Global with external SQLite3 library.
  - -with-sqlite3[=dir]    By default, the embedded version is used.
  * plugin-factory/PLUGIN_HOWTO.reference:
    Added a howto document: 'How to get Universal Ctags to handle references'
  * global: The --print0 option was ignored when using the --completion command.
  Now it works.
  * gtags: The --file option could cause segmentation fault.
  * Pygments-enabled gtags failed to start. Now it works.
    (Changed the shebang of pygments_parser.py.in from '#!/usr/bin/env python'
    to '#!@PYTHON@'.)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671364800">- update to 6.6.9:
  * o gtags(C++ parser): did not recognize 'final' keyword. Now it works.
  * o Fixed a couple of bugs in MinGW.
  * Fixed unknown type sigset_t error in MinGW.
  * Fixed pointer to integer cast warnings in MinGW.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720353600">- CVE-2024-38448: htags may allow code execution via untrusted
  dbpath (boo#1226420), add global-6.6.9-CVE-2024-38448.patch</changelog>
</package>
<package pkgid="93330efa017a2c50e495f218cdfb57259034bd7179d8116a51b0cba222c7d9ee" name="gmenudbusmenuproxy" arch="aarch64">
  <version epoch="0" ver="5.27.11" rel="bp156.3.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1683633600">- Update to 5.27.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.5
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1683806400">- Require cpp explicitly, xrdb doesn't do it anymore</changelog>
  <changelog author="Moon Glass &lt;moonglass@gmx.net&gt;" date="1686744000">- Enabled KUserFeedback, since new KDE privacy policy now complies. See https://invent.kde.org/websites/kde-org/-/commit/71992cc8a177c959706088d02413c1a97f989749</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1687262400">- Update to 5.27.6
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.6
- Changes since 5.27.5:
  * applets/kicker: fix test error in testrunnermodel
  * kcms/krdb: Set X root window cursor
  * shell: make accent color optional, and enable accent color after slot connection (kde#470280)
  * libtaskmanager: fix copy leftover in document
  * runners/calculator: implement thread-safety in QalculateEngine::evaluate (kde#470219)
  * applets/batterymonitor: Fix wrong tooltip when plugged in but discharging (kde#470632)
  * applets/mediacontroller: add busy indicator for remote images
  * Widgetexplorer: Properly handle translations for applet categories (kde#460523)
  * wallpapers/image: resize svg wallpaper to requested size (kde#469294)
  * Klipper config: set UI state when loading the same way as when editing
  * holidaysevents: reload event data when config changes (kde#437654)
  * runners/services: Do not match categories for short queries (kde#469769)
  * components/calendar: reset label under Gregorian date when plugin list changes
  * components/calendar: use QHash::contains instead of QHash::count
  * applets/digital-clock: show today's sublabel in tooltip if there is one
  * applets/systemtray: fix highlight being on top of first column items (kde#456180)
  * applets/digital-clock: Fix localization for TimeZoneModel (kde#469196)
  * applets/digital-clock: Allow event titles to be wrapped
  * Export a new helper function that read Xft.dpi value
  * libtaskmanager: Fix appmenu caching (kde#422786)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1687608000">- Mark org.kde.userfeedback.kcm as internal QML import</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1690891200">- Update to 5.27.7
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.7
- Changes since 5.27.6:
  * libtaskmanager: fix unable to change order of launchers (kde#472812)
  * Reorder removals to ensure launcher url is deallocated after last use
  * Fix crash in LauncherTasksModel::Private::requestRemoveLauncherFromActivities (kde#472378)
  * libtaskmanager: skip empty appId when matching '*.appId.desktop' (kde#472576,kde#428559)
  * Do not write empty path to desktop file (kde#433304)
  * Fix crash in TasksModel::move (kde#472524)
  * kcm/region_language: fix enum order (kde#472108)
  * kcms/region_language: Read from $LANGUAGE in options model
  * kcms/region_language: Improve isSupportedLanguage detection
  * kcms/region_language: Chop off the UTF-8 codepoint again
  * kcms/region_language: Check if the language setting is default as well
  * kcms/region_language: Simplify the language settings read
  * kcms/region_language: Read the LANGUAGE environment variable for the default language value
  * TriangleMouseFilter: remove unnecessary return
  * TriangleMouseFilter: make `resendHoverEvents` actually work
  * TriangleMouseFilter: fix incorrect handling of hover events and inactive state (kde#467426)
  * TriangularMouseFilter: Filter event everytime when there was no movement at all
  * Improve responsiveness of triangular filter
  * shell: move `forceActiveFocus` to `PanelView`
  * applets/mediacontroller: use PauseAnimation to delay showing busy indicator
  * applets/mediacontroller: remove duplicate opacity animation
  * applets/notifications: add workaround for QTBUG-100392 (kde#468180)
  * Notifications: Also try X-SnapInstanceName for desktop file resolution
  * libtaskmanager: fix a potential leak</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1690891201">- Add patch to fix line wrapping of "100 %" in OSDs (kde#469576):
  * 0001-OSD-Fix-size-calculation-for-progress-value.patch</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1691323200">- Add patch to fix crash when closing popup on Wayland (kde#473054)
  * 0001-shell-avoid-potential-crash-when-previous-window-is-.patch</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1692360000">- Add patch to fix crash when opening windows (kde#473432)
  * 0001-TriangleMouseFilter-check-intercepted-item-still-exi.patch
  * 0002-TriangleMouseFilter-also-check-optional-position-has.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1694520000">- Update to 5.27.8
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.8
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-OSD-Fix-size-calculation-for-progress-value.patch
  * 0001-shell-avoid-potential-crash-when-previous-window-is-.patch
  * 0001-TriangleMouseFilter-check-intercepted-item-still-exi.patch
  * 0002-TriangleMouseFilter-also-check-optional-position-has.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1698148800">- Update to 5.27.9
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.9
- Changes since 5.27.8:
  * Do not consider icon changes excess notification creation
  * lockscreen: handle user switching also on nopassword page (kde#458951)
  * applets/lock_logout: add a11y properties and restore tooltip
  * runners/recentdocuments: Fix results being discarded when casing is different (kde#474782)
  * [plasmacalendarintegration] Fix selected regions are randomly reset to default (kde#472483)
  * libtaskmanager: test waylandtasksmodel</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1698235200">- Add patch to fix the logout applet:
  * 0001-applets-lock_logout-use-PlasmaCore.IconItem.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1701864000">- Update to 5.27.10
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.10
- Changes since 5.27.9:
  * kcm_regionandlang: support glibc style 'utf8' variant (kde#477283)
  * Adapt CI to renamed plasma-framework and kactivities
  * Unbreak Region&amp;Lang KCM on !Linux (again)
  * Fixup! The variable has a different name on 5.27
  * kcms/region_lanuage: Also enable GLIBC when UBUNTU_LOCALE is set
  * kcms/nightcolor: Fix nighcolor typos and warnings
  * kcms/nightcolor: Fix nightcolor with automatic location (kde#469730)
  * Adapt to plasma-framework moving to Plasma
  * Reflect move of KActivities out of Frameworks to Plasma
  * Update to reflect move of KUserFeedback to Frameworks
  * Reset KSMClient state even when logout is cancelled
  * kcms/region_language: Fix check for GLIBC_LOCALE.
  * applets/lock_logout: use PlasmaCore.IconItem
  * appiumtests: add lock_logouttest
  * appiumtests: adapt to Appium 3.0
- Drop patches, now upstream:
  * 0001-applets-lock_logout-use-PlasmaCore.IconItem.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1703160000">- Update appstream build requirement for compatibility with 1.0.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706702400">- Switch to the latest GCC version available in Leap for packages
  that can't build with the default compiler</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709121600">- Make sure plasma5-workspace doesn't pull Plasma 6 build dependencies</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1709726400">- Update to 5.27.11:
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.11
- Changes since 5.27.10:
  * Notification: ensure arg is StructureType when decoding ImageHint (kde#481033)
  * dataengines/weather: Reset wind info when parsing new data (envcan) (kde#481492)
  * Handle previously ignored LC_* values (kde#480379)
  * klipper: Expose selected files through desktop portal (kde#476600)
  * Port to new CI template syntax</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1713787200">- Remove leftover %_plasma5_bugfix override (boo#1223149)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1717156800">- Add patches to fix ksmserver authentication (CVE-2024-36041, boo#1225774):
  * 0001-Authenticate-local-clients.patch
  * 0002-Remove-iceauth-dependency.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1718020800">- Add patch to fix a regression introduced by the preceding change
  (kde#487912, boo#1226110):
  * 0001-Fix-writing-ICEAuthority-file.patch</changelog>
</package>
<package pkgid="48a247a8681bdfe82039016182116e041e56f339b60afcd03bf198419af3c986" name="gmenudbusmenuproxy" arch="ppc64le">
  <version epoch="0" ver="5.27.11" rel="bp156.3.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1683633600">- Update to 5.27.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.5
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1683806400">- Require cpp explicitly, xrdb doesn't do it anymore</changelog>
  <changelog author="Moon Glass &lt;moonglass@gmx.net&gt;" date="1686744000">- Enabled KUserFeedback, since new KDE privacy policy now complies. See https://invent.kde.org/websites/kde-org/-/commit/71992cc8a177c959706088d02413c1a97f989749</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1687262400">- Update to 5.27.6
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.6
- Changes since 5.27.5:
  * applets/kicker: fix test error in testrunnermodel
  * kcms/krdb: Set X root window cursor
  * shell: make accent color optional, and enable accent color after slot connection (kde#470280)
  * libtaskmanager: fix copy leftover in document
  * runners/calculator: implement thread-safety in QalculateEngine::evaluate (kde#470219)
  * applets/batterymonitor: Fix wrong tooltip when plugged in but discharging (kde#470632)
  * applets/mediacontroller: add busy indicator for remote images
  * Widgetexplorer: Properly handle translations for applet categories (kde#460523)
  * wallpapers/image: resize svg wallpaper to requested size (kde#469294)
  * Klipper config: set UI state when loading the same way as when editing
  * holidaysevents: reload event data when config changes (kde#437654)
  * runners/services: Do not match categories for short queries (kde#469769)
  * components/calendar: reset label under Gregorian date when plugin list changes
  * components/calendar: use QHash::contains instead of QHash::count
  * applets/digital-clock: show today's sublabel in tooltip if there is one
  * applets/systemtray: fix highlight being on top of first column items (kde#456180)
  * applets/digital-clock: Fix localization for TimeZoneModel (kde#469196)
  * applets/digital-clock: Allow event titles to be wrapped
  * Export a new helper function that read Xft.dpi value
  * libtaskmanager: Fix appmenu caching (kde#422786)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1687608000">- Mark org.kde.userfeedback.kcm as internal QML import</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1690891200">- Update to 5.27.7
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.7
- Changes since 5.27.6:
  * libtaskmanager: fix unable to change order of launchers (kde#472812)
  * Reorder removals to ensure launcher url is deallocated after last use
  * Fix crash in LauncherTasksModel::Private::requestRemoveLauncherFromActivities (kde#472378)
  * libtaskmanager: skip empty appId when matching '*.appId.desktop' (kde#472576,kde#428559)
  * Do not write empty path to desktop file (kde#433304)
  * Fix crash in TasksModel::move (kde#472524)
  * kcm/region_language: fix enum order (kde#472108)
  * kcms/region_language: Read from $LANGUAGE in options model
  * kcms/region_language: Improve isSupportedLanguage detection
  * kcms/region_language: Chop off the UTF-8 codepoint again
  * kcms/region_language: Check if the language setting is default as well
  * kcms/region_language: Simplify the language settings read
  * kcms/region_language: Read the LANGUAGE environment variable for the default language value
  * TriangleMouseFilter: remove unnecessary return
  * TriangleMouseFilter: make `resendHoverEvents` actually work
  * TriangleMouseFilter: fix incorrect handling of hover events and inactive state (kde#467426)
  * TriangularMouseFilter: Filter event everytime when there was no movement at all
  * Improve responsiveness of triangular filter
  * shell: move `forceActiveFocus` to `PanelView`
  * applets/mediacontroller: use PauseAnimation to delay showing busy indicator
  * applets/mediacontroller: remove duplicate opacity animation
  * applets/notifications: add workaround for QTBUG-100392 (kde#468180)
  * Notifications: Also try X-SnapInstanceName for desktop file resolution
  * libtaskmanager: fix a potential leak</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1690891201">- Add patch to fix line wrapping of "100 %" in OSDs (kde#469576):
  * 0001-OSD-Fix-size-calculation-for-progress-value.patch</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1691323200">- Add patch to fix crash when closing popup on Wayland (kde#473054)
  * 0001-shell-avoid-potential-crash-when-previous-window-is-.patch</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1692360000">- Add patch to fix crash when opening windows (kde#473432)
  * 0001-TriangleMouseFilter-check-intercepted-item-still-exi.patch
  * 0002-TriangleMouseFilter-also-check-optional-position-has.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1694520000">- Update to 5.27.8
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.8
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-OSD-Fix-size-calculation-for-progress-value.patch
  * 0001-shell-avoid-potential-crash-when-previous-window-is-.patch
  * 0001-TriangleMouseFilter-check-intercepted-item-still-exi.patch
  * 0002-TriangleMouseFilter-also-check-optional-position-has.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1698148800">- Update to 5.27.9
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.9
- Changes since 5.27.8:
  * Do not consider icon changes excess notification creation
  * lockscreen: handle user switching also on nopassword page (kde#458951)
  * applets/lock_logout: add a11y properties and restore tooltip
  * runners/recentdocuments: Fix results being discarded when casing is different (kde#474782)
  * [plasmacalendarintegration] Fix selected regions are randomly reset to default (kde#472483)
  * libtaskmanager: test waylandtasksmodel</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1698235200">- Add patch to fix the logout applet:
  * 0001-applets-lock_logout-use-PlasmaCore.IconItem.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1701864000">- Update to 5.27.10
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.10
- Changes since 5.27.9:
  * kcm_regionandlang: support glibc style 'utf8' variant (kde#477283)
  * Adapt CI to renamed plasma-framework and kactivities
  * Unbreak Region&amp;Lang KCM on !Linux (again)
  * Fixup! The variable has a different name on 5.27
  * kcms/region_lanuage: Also enable GLIBC when UBUNTU_LOCALE is set
  * kcms/nightcolor: Fix nighcolor typos and warnings
  * kcms/nightcolor: Fix nightcolor with automatic location (kde#469730)
  * Adapt to plasma-framework moving to Plasma
  * Reflect move of KActivities out of Frameworks to Plasma
  * Update to reflect move of KUserFeedback to Frameworks
  * Reset KSMClient state even when logout is cancelled
  * kcms/region_language: Fix check for GLIBC_LOCALE.
  * applets/lock_logout: use PlasmaCore.IconItem
  * appiumtests: add lock_logouttest
  * appiumtests: adapt to Appium 3.0
- Drop patches, now upstream:
  * 0001-applets-lock_logout-use-PlasmaCore.IconItem.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1703160000">- Update appstream build requirement for compatibility with 1.0.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706702400">- Switch to the latest GCC version available in Leap for packages
  that can't build with the default compiler</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709121600">- Make sure plasma5-workspace doesn't pull Plasma 6 build dependencies</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1709726400">- Update to 5.27.11:
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.11
- Changes since 5.27.10:
  * Notification: ensure arg is StructureType when decoding ImageHint (kde#481033)
  * dataengines/weather: Reset wind info when parsing new data (envcan) (kde#481492)
  * Handle previously ignored LC_* values (kde#480379)
  * klipper: Expose selected files through desktop portal (kde#476600)
  * Port to new CI template syntax</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1713787200">- Remove leftover %_plasma5_bugfix override (boo#1223149)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1717156800">- Add patches to fix ksmserver authentication (CVE-2024-36041, boo#1225774):
  * 0001-Authenticate-local-clients.patch
  * 0002-Remove-iceauth-dependency.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1718020800">- Add patch to fix a regression introduced by the preceding change
  (kde#487912, boo#1226110):
  * 0001-Fix-writing-ICEAuthority-file.patch</changelog>
</package>
<package pkgid="ba9a3455aacebe11836f6029d969f3362cb479b43f2ce5283e5b5067d9fbd3ef" name="gmenudbusmenuproxy" arch="x86_64">
  <version epoch="0" ver="5.27.11" rel="bp156.3.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1683633600">- Update to 5.27.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.5
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1683806400">- Require cpp explicitly, xrdb doesn't do it anymore</changelog>
  <changelog author="Moon Glass &lt;moonglass@gmx.net&gt;" date="1686744000">- Enabled KUserFeedback, since new KDE privacy policy now complies. See https://invent.kde.org/websites/kde-org/-/commit/71992cc8a177c959706088d02413c1a97f989749</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1687262400">- Update to 5.27.6
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.6
- Changes since 5.27.5:
  * applets/kicker: fix test error in testrunnermodel
  * kcms/krdb: Set X root window cursor
  * shell: make accent color optional, and enable accent color after slot connection (kde#470280)
  * libtaskmanager: fix copy leftover in document
  * runners/calculator: implement thread-safety in QalculateEngine::evaluate (kde#470219)
  * applets/batterymonitor: Fix wrong tooltip when plugged in but discharging (kde#470632)
  * applets/mediacontroller: add busy indicator for remote images
  * Widgetexplorer: Properly handle translations for applet categories (kde#460523)
  * wallpapers/image: resize svg wallpaper to requested size (kde#469294)
  * Klipper config: set UI state when loading the same way as when editing
  * holidaysevents: reload event data when config changes (kde#437654)
  * runners/services: Do not match categories for short queries (kde#469769)
  * components/calendar: reset label under Gregorian date when plugin list changes
  * components/calendar: use QHash::contains instead of QHash::count
  * applets/digital-clock: show today's sublabel in tooltip if there is one
  * applets/systemtray: fix highlight being on top of first column items (kde#456180)
  * applets/digital-clock: Fix localization for TimeZoneModel (kde#469196)
  * applets/digital-clock: Allow event titles to be wrapped
  * Export a new helper function that read Xft.dpi value
  * libtaskmanager: Fix appmenu caching (kde#422786)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1687608000">- Mark org.kde.userfeedback.kcm as internal QML import</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1690891200">- Update to 5.27.7
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.7
- Changes since 5.27.6:
  * libtaskmanager: fix unable to change order of launchers (kde#472812)
  * Reorder removals to ensure launcher url is deallocated after last use
  * Fix crash in LauncherTasksModel::Private::requestRemoveLauncherFromActivities (kde#472378)
  * libtaskmanager: skip empty appId when matching '*.appId.desktop' (kde#472576,kde#428559)
  * Do not write empty path to desktop file (kde#433304)
  * Fix crash in TasksModel::move (kde#472524)
  * kcm/region_language: fix enum order (kde#472108)
  * kcms/region_language: Read from $LANGUAGE in options model
  * kcms/region_language: Improve isSupportedLanguage detection
  * kcms/region_language: Chop off the UTF-8 codepoint again
  * kcms/region_language: Check if the language setting is default as well
  * kcms/region_language: Simplify the language settings read
  * kcms/region_language: Read the LANGUAGE environment variable for the default language value
  * TriangleMouseFilter: remove unnecessary return
  * TriangleMouseFilter: make `resendHoverEvents` actually work
  * TriangleMouseFilter: fix incorrect handling of hover events and inactive state (kde#467426)
  * TriangularMouseFilter: Filter event everytime when there was no movement at all
  * Improve responsiveness of triangular filter
  * shell: move `forceActiveFocus` to `PanelView`
  * applets/mediacontroller: use PauseAnimation to delay showing busy indicator
  * applets/mediacontroller: remove duplicate opacity animation
  * applets/notifications: add workaround for QTBUG-100392 (kde#468180)
  * Notifications: Also try X-SnapInstanceName for desktop file resolution
  * libtaskmanager: fix a potential leak</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1690891201">- Add patch to fix line wrapping of "100 %" in OSDs (kde#469576):
  * 0001-OSD-Fix-size-calculation-for-progress-value.patch</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1691323200">- Add patch to fix crash when closing popup on Wayland (kde#473054)
  * 0001-shell-avoid-potential-crash-when-previous-window-is-.patch</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1692360000">- Add patch to fix crash when opening windows (kde#473432)
  * 0001-TriangleMouseFilter-check-intercepted-item-still-exi.patch
  * 0002-TriangleMouseFilter-also-check-optional-position-has.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1694520000">- Update to 5.27.8
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.8
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-OSD-Fix-size-calculation-for-progress-value.patch
  * 0001-shell-avoid-potential-crash-when-previous-window-is-.patch
  * 0001-TriangleMouseFilter-check-intercepted-item-still-exi.patch
  * 0002-TriangleMouseFilter-also-check-optional-position-has.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1698148800">- Update to 5.27.9
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.9
- Changes since 5.27.8:
  * Do not consider icon changes excess notification creation
  * lockscreen: handle user switching also on nopassword page (kde#458951)
  * applets/lock_logout: add a11y properties and restore tooltip
  * runners/recentdocuments: Fix results being discarded when casing is different (kde#474782)
  * [plasmacalendarintegration] Fix selected regions are randomly reset to default (kde#472483)
  * libtaskmanager: test waylandtasksmodel</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1698235200">- Add patch to fix the logout applet:
  * 0001-applets-lock_logout-use-PlasmaCore.IconItem.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1701864000">- Update to 5.27.10
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.10
- Changes since 5.27.9:
  * kcm_regionandlang: support glibc style 'utf8' variant (kde#477283)
  * Adapt CI to renamed plasma-framework and kactivities
  * Unbreak Region&amp;Lang KCM on !Linux (again)
  * Fixup! The variable has a different name on 5.27
  * kcms/region_lanuage: Also enable GLIBC when UBUNTU_LOCALE is set
  * kcms/nightcolor: Fix nighcolor typos and warnings
  * kcms/nightcolor: Fix nightcolor with automatic location (kde#469730)
  * Adapt to plasma-framework moving to Plasma
  * Reflect move of KActivities out of Frameworks to Plasma
  * Update to reflect move of KUserFeedback to Frameworks
  * Reset KSMClient state even when logout is cancelled
  * kcms/region_language: Fix check for GLIBC_LOCALE.
  * applets/lock_logout: use PlasmaCore.IconItem
  * appiumtests: add lock_logouttest
  * appiumtests: adapt to Appium 3.0
- Drop patches, now upstream:
  * 0001-applets-lock_logout-use-PlasmaCore.IconItem.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1703160000">- Update appstream build requirement for compatibility with 1.0.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706702400">- Switch to the latest GCC version available in Leap for packages
  that can't build with the default compiler</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709121600">- Make sure plasma5-workspace doesn't pull Plasma 6 build dependencies</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1709726400">- Update to 5.27.11:
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.27.11
- Changes since 5.27.10:
  * Notification: ensure arg is StructureType when decoding ImageHint (kde#481033)
  * dataengines/weather: Reset wind info when parsing new data (envcan) (kde#481492)
  * Handle previously ignored LC_* values (kde#480379)
  * klipper: Expose selected files through desktop portal (kde#476600)
  * Port to new CI template syntax</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1713787200">- Remove leftover %_plasma5_bugfix override (boo#1223149)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1717156800">- Add patches to fix ksmserver authentication (CVE-2024-36041, boo#1225774):
  * 0001-Authenticate-local-clients.patch
  * 0002-Remove-iceauth-dependency.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1718020800">- Add patch to fix a regression introduced by the preceding change
  (kde#487912, boo#1226110):
  * 0001-Fix-writing-ICEAuthority-file.patch</changelog>
</package>
<package pkgid="5aa712089f0fb701b83d5292449a40f597b31e0f81055bd5a11de56f418b75a2" name="gn" arch="aarch64">
  <version epoch="0" ver="0.20240730" rel="bp156.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
</package>
<package pkgid="76e2fa5dbba52ff157c0ba3373555eb6d7d5aa99ecf31e621b30daa4d4c77f73" name="gn" arch="i586">
  <version epoch="0" ver="0.20240730" rel="bp156.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
</package>
<package pkgid="002bfba7aad4157c3b7d22628d1780b146a91f44a4135b7d9d5dfedd431c1e8f" name="gn" arch="ppc64le">
  <version epoch="0" ver="0.20240730" rel="bp156.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
</package>
<package pkgid="4611a96131da22e062234816ececf1f91681a84c727b16071c44bbb871f3ea98" name="gn" arch="s390x">
  <version epoch="0" ver="0.20240730" rel="bp156.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
</package>
<package pkgid="64eee5b6488babc7b0a0237bd521f91341aec4d4934ae62e04c36f71ea7f6568" name="gn" arch="src">
  <version epoch="0" ver="0.20240730" rel="bp156.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
</package>
<package pkgid="2f2c8fc869999bf35adab91dc4dcbf005533c75c57c8a939111caea3332d9064" name="gn" arch="x86_64">
  <version epoch="0" ver="0.20240730" rel="bp156.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
</package>
<package pkgid="4e154f5501e7ae2d392d8045b0989caa456a775429143c6189a25187e014d054" name="gn" arch="aarch64">
  <version epoch="0" ver="0.20250306" rel="bp156.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
</package>
<package pkgid="dc70af381f00c5e01d8c30a866dd21cd7dfd68009a03360a36419788aaca6baf" name="gn" arch="i586">
  <version epoch="0" ver="0.20250306" rel="bp156.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
</package>
<package pkgid="a3538c33aac304522365ec789fee93a63d5a06ba19c52e1cee05b3079a1aee11" name="gn" arch="ppc64le">
  <version epoch="0" ver="0.20250306" rel="bp156.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
</package>
<package pkgid="64b59e1cfbf2f97a17d2153be1a2d240fe46836f5deca893c094fc0770ea09c0" name="gn" arch="s390x">
  <version epoch="0" ver="0.20250306" rel="bp156.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
</package>
<package pkgid="b68565a08e9e453113c4e6c1acd412f82db56cd50204a8feb9d629483491aef4" name="gn" arch="src">
  <version epoch="0" ver="0.20250306" rel="bp156.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
</package>
<package pkgid="244c3acdba52495509998a4992779fe6b607c18e4c8f5f0a083eead01da111fe" name="gn" arch="x86_64">
  <version epoch="0" ver="0.20250306" rel="bp156.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
</package>
<package pkgid="f54b6f82ea6ff8a43d10c1f84579d8612abaad0080e9362af576c3a4c100b0b5" name="gn" arch="aarch64">
  <version epoch="0" ver="0.20250520" rel="bp156.2.9.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
</package>
<package pkgid="f021ce09b0b0392b7a9d9db49dc884d4200311f45c1c2822e9000b3864ea1851" name="gn" arch="i586">
  <version epoch="0" ver="0.20250520" rel="bp156.2.9.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
</package>
<package pkgid="b5b41c04ac2a1d1018b1f8dcb12b277243579fe2ac0d089c636d1b31b68266fc" name="gn" arch="ppc64le">
  <version epoch="0" ver="0.20250520" rel="bp156.2.9.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
</package>
<package pkgid="26e7819d3239b4555a0a5f5da8495e919577563c08a465acbd07481c22d3ff45" name="gn" arch="s390x">
  <version epoch="0" ver="0.20250520" rel="bp156.2.9.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
</package>
<package pkgid="3ebfe0754f3114dcd74e8af2760574a3c86c09fc574f4bd3ee261afbc9710cb7" name="gn" arch="src">
  <version epoch="0" ver="0.20250520" rel="bp156.2.9.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
</package>
<package pkgid="5d6b2f5f6689efa247e71b39a92b021ddbb7e1800af981472cd2479cd9631bd7" name="gn" arch="x86_64">
  <version epoch="0" ver="0.20250520" rel="bp156.2.9.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
</package>
<package pkgid="0bd73b8d2c3221fc9e870c456f16e6f03daaef4e3ba61e6585ccbe013465167a" name="gn" arch="aarch64">
  <version epoch="0" ver="0.20250619" rel="bp156.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1751371200">- Update to version 0.20250619:
  * Reland #2 "Run Target::OnResolve() on background threads"
  * Propagate module dependencies transitively via public_deps
  * Fix bug in Grow logic in HashTableBase
  * Apply tools/run_formatter.sh
  * Revert "Reland "Run Target::OnResolve() on background threads""
  * Reland "Run Target::OnResolve() on background threads"
  * Enable ASAN &amp; UBSAN when running tests in debug on CQ/CI
  * Revert "Run Target::OnResolve() on background threads"
  * Check all targets before generating shortnames
  * [tvos] Search for `kTargetXcodePlatform` from all arguments
  * Run Target::OnResolve() on background threads
  * specify the gerrit listener type to be legacy poller
  * Optimize Target::EnsureFileIsGeneratedByDependency()
  * Fix lsan errors
  * Add myself to OWNERS, remove xoolger addresses
  * Revert "Use JSON escaping for JSON string output"
  * Use JSON escaping for JSON string output
  * [tvos] Handle a type error with target_xcode_platform
  * [tvos] Add target_xcode_platform to set Xcode project
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
</package>
<package pkgid="73e25e7c15eaf31c3909eb497709e09f84770801930915aa0c35266181ef6c1c" name="gn" arch="i586">
  <version epoch="0" ver="0.20250619" rel="bp156.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1751371200">- Update to version 0.20250619:
  * Reland #2 "Run Target::OnResolve() on background threads"
  * Propagate module dependencies transitively via public_deps
  * Fix bug in Grow logic in HashTableBase
  * Apply tools/run_formatter.sh
  * Revert "Reland "Run Target::OnResolve() on background threads""
  * Reland "Run Target::OnResolve() on background threads"
  * Enable ASAN &amp; UBSAN when running tests in debug on CQ/CI
  * Revert "Run Target::OnResolve() on background threads"
  * Check all targets before generating shortnames
  * [tvos] Search for `kTargetXcodePlatform` from all arguments
  * Run Target::OnResolve() on background threads
  * specify the gerrit listener type to be legacy poller
  * Optimize Target::EnsureFileIsGeneratedByDependency()
  * Fix lsan errors
  * Add myself to OWNERS, remove xoolger addresses
  * Revert "Use JSON escaping for JSON string output"
  * Use JSON escaping for JSON string output
  * [tvos] Handle a type error with target_xcode_platform
  * [tvos] Add target_xcode_platform to set Xcode project
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
</package>
<package pkgid="ed9c455081bbd993ea2e8d503c25496ea1b6e8b751d8d513f0a759d0120914e3" name="gn" arch="ppc64le">
  <version epoch="0" ver="0.20250619" rel="bp156.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1751371200">- Update to version 0.20250619:
  * Reland #2 "Run Target::OnResolve() on background threads"
  * Propagate module dependencies transitively via public_deps
  * Fix bug in Grow logic in HashTableBase
  * Apply tools/run_formatter.sh
  * Revert "Reland "Run Target::OnResolve() on background threads""
  * Reland "Run Target::OnResolve() on background threads"
  * Enable ASAN &amp; UBSAN when running tests in debug on CQ/CI
  * Revert "Run Target::OnResolve() on background threads"
  * Check all targets before generating shortnames
  * [tvos] Search for `kTargetXcodePlatform` from all arguments
  * Run Target::OnResolve() on background threads
  * specify the gerrit listener type to be legacy poller
  * Optimize Target::EnsureFileIsGeneratedByDependency()
  * Fix lsan errors
  * Add myself to OWNERS, remove xoolger addresses
  * Revert "Use JSON escaping for JSON string output"
  * Use JSON escaping for JSON string output
  * [tvos] Handle a type error with target_xcode_platform
  * [tvos] Add target_xcode_platform to set Xcode project
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
</package>
<package pkgid="c51884d45281886d89714771cea8aa5c6316ef163e26251a817edefc1545735d" name="gn" arch="s390x">
  <version epoch="0" ver="0.20250619" rel="bp156.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1751371200">- Update to version 0.20250619:
  * Reland #2 "Run Target::OnResolve() on background threads"
  * Propagate module dependencies transitively via public_deps
  * Fix bug in Grow logic in HashTableBase
  * Apply tools/run_formatter.sh
  * Revert "Reland "Run Target::OnResolve() on background threads""
  * Reland "Run Target::OnResolve() on background threads"
  * Enable ASAN &amp; UBSAN when running tests in debug on CQ/CI
  * Revert "Run Target::OnResolve() on background threads"
  * Check all targets before generating shortnames
  * [tvos] Search for `kTargetXcodePlatform` from all arguments
  * Run Target::OnResolve() on background threads
  * specify the gerrit listener type to be legacy poller
  * Optimize Target::EnsureFileIsGeneratedByDependency()
  * Fix lsan errors
  * Add myself to OWNERS, remove xoolger addresses
  * Revert "Use JSON escaping for JSON string output"
  * Use JSON escaping for JSON string output
  * [tvos] Handle a type error with target_xcode_platform
  * [tvos] Add target_xcode_platform to set Xcode project
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
</package>
<package pkgid="dcb2c7cdf0f1fe594368e179d55ab96b7cd7f565980e82e83eb7422d4de195f6" name="gn" arch="src">
  <version epoch="0" ver="0.20250619" rel="bp156.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1751371200">- Update to version 0.20250619:
  * Reland #2 "Run Target::OnResolve() on background threads"
  * Propagate module dependencies transitively via public_deps
  * Fix bug in Grow logic in HashTableBase
  * Apply tools/run_formatter.sh
  * Revert "Reland "Run Target::OnResolve() on background threads""
  * Reland "Run Target::OnResolve() on background threads"
  * Enable ASAN &amp; UBSAN when running tests in debug on CQ/CI
  * Revert "Run Target::OnResolve() on background threads"
  * Check all targets before generating shortnames
  * [tvos] Search for `kTargetXcodePlatform` from all arguments
  * Run Target::OnResolve() on background threads
  * specify the gerrit listener type to be legacy poller
  * Optimize Target::EnsureFileIsGeneratedByDependency()
  * Fix lsan errors
  * Add myself to OWNERS, remove xoolger addresses
  * Revert "Use JSON escaping for JSON string output"
  * Use JSON escaping for JSON string output
  * [tvos] Handle a type error with target_xcode_platform
  * [tvos] Add target_xcode_platform to set Xcode project
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
</package>
<package pkgid="2af00509b9c7a4a6b4c5073bddec8bcbefb9f85b9fc3c9020ecfb8ff1bcbe2d2" name="gn" arch="x86_64">
  <version epoch="0" ver="0.20250619" rel="bp156.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1751371200">- Update to version 0.20250619:
  * Reland #2 "Run Target::OnResolve() on background threads"
  * Propagate module dependencies transitively via public_deps
  * Fix bug in Grow logic in HashTableBase
  * Apply tools/run_formatter.sh
  * Revert "Reland "Run Target::OnResolve() on background threads""
  * Reland "Run Target::OnResolve() on background threads"
  * Enable ASAN &amp; UBSAN when running tests in debug on CQ/CI
  * Revert "Run Target::OnResolve() on background threads"
  * Check all targets before generating shortnames
  * [tvos] Search for `kTargetXcodePlatform` from all arguments
  * Run Target::OnResolve() on background threads
  * specify the gerrit listener type to be legacy poller
  * Optimize Target::EnsureFileIsGeneratedByDependency()
  * Fix lsan errors
  * Add myself to OWNERS, remove xoolger addresses
  * Revert "Use JSON escaping for JSON string output"
  * Use JSON escaping for JSON string output
  * [tvos] Handle a type error with target_xcode_platform
  * [tvos] Add target_xcode_platform to set Xcode project
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
</package>
<package pkgid="3af8103706ae6c4e3f20e4077fd90883de8537149d94b74b3500627e6593f934" name="gn" arch="aarch64">
  <version epoch="0" ver="0.20251217" rel="bp156.2.15.1"/>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1751371200">- Update to version 0.20250619:
  * Reland #2 "Run Target::OnResolve() on background threads"
  * Propagate module dependencies transitively via public_deps
  * Fix bug in Grow logic in HashTableBase
  * Apply tools/run_formatter.sh
  * Revert "Reland "Run Target::OnResolve() on background threads""
  * Reland "Run Target::OnResolve() on background threads"
  * Enable ASAN &amp; UBSAN when running tests in debug on CQ/CI
  * Revert "Run Target::OnResolve() on background threads"
  * Check all targets before generating shortnames
  * [tvos] Search for `kTargetXcodePlatform` from all arguments
  * Run Target::OnResolve() on background threads
  * specify the gerrit listener type to be legacy poller
  * Optimize Target::EnsureFileIsGeneratedByDependency()
  * Fix lsan errors
  * Add myself to OWNERS, remove xoolger addresses
  * Revert "Use JSON escaping for JSON string output"
  * Use JSON escaping for JSON string output
  * [tvos] Handle a type error with target_xcode_platform
  * [tvos] Add target_xcode_platform to set Xcode project
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759492800">- Update to version 0.20250918:
  * update reference.md
  * Include -fmodule-file flags in compile_commands.json
  * Refactor C++ module dependency logic into a new utility
  * Gitiles navigation bar
  * Adds a len() function
  * Avoid clashes of include_dir in rust-project.json.
  * Check all targets to find duplicated outputs.
  * infra/config: Remove luci.recipes.use_python3 experiment
  * Handle empty outputs in WriteInputDepsStampOrPhonyAndGetDep
  * build: Propagate module dependencies through group targets
  * Deduplicate item in 'deps', 'sources' and related lists
  * infra: Update comment for macOS version used in CQ/CI
  * [Apple] Allow passing a manifest to the post-processing script
  * Update link to buganizer in README.md
  * [Apple] Fix `gn gen` when using swift and no_stamp_files
  * [Apple] Remove deprecated aliases for `post_processing_$var`
  * Revert "Allow newline in string literal"
  * Use std::ranges::all_of in parse_tree_unittest
  * infra: Correctly use macOS 13 instead of 11
  * Update Xcode and macOS version in bots
  * infra: Add shadow buckets to trigger led job
  * Allow newline in string literal
  * Revert "Update macOS version to 13 used in CQ/CI"
  * Update macOS version to 13 used in CQ/CI
  * Refactor command_format.cc
  * Shorten targets from //path/to/foo:foo to //path/to/foo
  * Modernize and improve parse_tree.cc
  * Auto-format the codebase
  * Remove hardcoded -fmodules-embed-all-files flag
  * Reland "Use JSON escaping for JSON string output"</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1766750400">- Update to version 0.20251217:
  * Fix sha2 on big endian
  * [Windows] Reduce the number of worker threads on many-core machines
  * Add a sha256 hash implementation and use it for string_hash
  * Opt-in to the Windows SegmentHeap
  * Add a `module_name` flag to source_set.
  * Refactor module name to be dynamic.
  * Optimize vector creation in compile_commands_writer.cc.
  * Run 'tools/run_formatter.sh'
  * Implement `string_hash` function.
  * Support weak_libraries
  * Do not add .inputdeps paths to --ninja-outputs-file
  * Make clang modules output -fmodule-file=foo=&lt;pcm&gt;.
  * infra: Revert CIPD autoconf
  * infra: Include autoconf bin directory to PATH
  * infra: Fix autoconf executable path
  * infra: Use CIPD autoconf
  * Allow led access in GN via http://go/ciba
  * Revert "Build non-linkable deps async with Ninja's validaitons"
  * Upgrade linux bots from ubuntu 22.04 to ubuntu 24.04
  * Use unordered_map instead of map in HeaderChecker
  * Add --file_relation to gn refs command
  * Optimize vector initialization and preallocation in desc_builder.cc.
  * Add `reserve` statement when vector size is known beforehand.
  * Refactor container update by preferring the range insert.
  * Handle symlinked directories correctly during gn clean on Windows.
  * Fix relative imports from args.gn.</changelog>
</package>
<package pkgid="e40a0c079714046a85e115272f0106ee9462ba159c6a218b33187d695a80d2c8" name="gn" arch="i586">
  <version epoch="0" ver="0.20251217" rel="bp156.2.15.1"/>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1751371200">- Update to version 0.20250619:
  * Reland #2 "Run Target::OnResolve() on background threads"
  * Propagate module dependencies transitively via public_deps
  * Fix bug in Grow logic in HashTableBase
  * Apply tools/run_formatter.sh
  * Revert "Reland "Run Target::OnResolve() on background threads""
  * Reland "Run Target::OnResolve() on background threads"
  * Enable ASAN &amp; UBSAN when running tests in debug on CQ/CI
  * Revert "Run Target::OnResolve() on background threads"
  * Check all targets before generating shortnames
  * [tvos] Search for `kTargetXcodePlatform` from all arguments
  * Run Target::OnResolve() on background threads
  * specify the gerrit listener type to be legacy poller
  * Optimize Target::EnsureFileIsGeneratedByDependency()
  * Fix lsan errors
  * Add myself to OWNERS, remove xoolger addresses
  * Revert "Use JSON escaping for JSON string output"
  * Use JSON escaping for JSON string output
  * [tvos] Handle a type error with target_xcode_platform
  * [tvos] Add target_xcode_platform to set Xcode project
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759492800">- Update to version 0.20250918:
  * update reference.md
  * Include -fmodule-file flags in compile_commands.json
  * Refactor C++ module dependency logic into a new utility
  * Gitiles navigation bar
  * Adds a len() function
  * Avoid clashes of include_dir in rust-project.json.
  * Check all targets to find duplicated outputs.
  * infra/config: Remove luci.recipes.use_python3 experiment
  * Handle empty outputs in WriteInputDepsStampOrPhonyAndGetDep
  * build: Propagate module dependencies through group targets
  * Deduplicate item in 'deps', 'sources' and related lists
  * infra: Update comment for macOS version used in CQ/CI
  * [Apple] Allow passing a manifest to the post-processing script
  * Update link to buganizer in README.md
  * [Apple] Fix `gn gen` when using swift and no_stamp_files
  * [Apple] Remove deprecated aliases for `post_processing_$var`
  * Revert "Allow newline in string literal"
  * Use std::ranges::all_of in parse_tree_unittest
  * infra: Correctly use macOS 13 instead of 11
  * Update Xcode and macOS version in bots
  * infra: Add shadow buckets to trigger led job
  * Allow newline in string literal
  * Revert "Update macOS version to 13 used in CQ/CI"
  * Update macOS version to 13 used in CQ/CI
  * Refactor command_format.cc
  * Shorten targets from //path/to/foo:foo to //path/to/foo
  * Modernize and improve parse_tree.cc
  * Auto-format the codebase
  * Remove hardcoded -fmodules-embed-all-files flag
  * Reland "Use JSON escaping for JSON string output"</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1766750400">- Update to version 0.20251217:
  * Fix sha2 on big endian
  * [Windows] Reduce the number of worker threads on many-core machines
  * Add a sha256 hash implementation and use it for string_hash
  * Opt-in to the Windows SegmentHeap
  * Add a `module_name` flag to source_set.
  * Refactor module name to be dynamic.
  * Optimize vector creation in compile_commands_writer.cc.
  * Run 'tools/run_formatter.sh'
  * Implement `string_hash` function.
  * Support weak_libraries
  * Do not add .inputdeps paths to --ninja-outputs-file
  * Make clang modules output -fmodule-file=foo=&lt;pcm&gt;.
  * infra: Revert CIPD autoconf
  * infra: Include autoconf bin directory to PATH
  * infra: Fix autoconf executable path
  * infra: Use CIPD autoconf
  * Allow led access in GN via http://go/ciba
  * Revert "Build non-linkable deps async with Ninja's validaitons"
  * Upgrade linux bots from ubuntu 22.04 to ubuntu 24.04
  * Use unordered_map instead of map in HeaderChecker
  * Add --file_relation to gn refs command
  * Optimize vector initialization and preallocation in desc_builder.cc.
  * Add `reserve` statement when vector size is known beforehand.
  * Refactor container update by preferring the range insert.
  * Handle symlinked directories correctly during gn clean on Windows.
  * Fix relative imports from args.gn.</changelog>
</package>
<package pkgid="7ff6450634d490732990dded59fc1633f7d99464d7a2992858b6aedb68905666" name="gn" arch="ppc64le">
  <version epoch="0" ver="0.20251217" rel="bp156.2.15.1"/>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1751371200">- Update to version 0.20250619:
  * Reland #2 "Run Target::OnResolve() on background threads"
  * Propagate module dependencies transitively via public_deps
  * Fix bug in Grow logic in HashTableBase
  * Apply tools/run_formatter.sh
  * Revert "Reland "Run Target::OnResolve() on background threads""
  * Reland "Run Target::OnResolve() on background threads"
  * Enable ASAN &amp; UBSAN when running tests in debug on CQ/CI
  * Revert "Run Target::OnResolve() on background threads"
  * Check all targets before generating shortnames
  * [tvos] Search for `kTargetXcodePlatform` from all arguments
  * Run Target::OnResolve() on background threads
  * specify the gerrit listener type to be legacy poller
  * Optimize Target::EnsureFileIsGeneratedByDependency()
  * Fix lsan errors
  * Add myself to OWNERS, remove xoolger addresses
  * Revert "Use JSON escaping for JSON string output"
  * Use JSON escaping for JSON string output
  * [tvos] Handle a type error with target_xcode_platform
  * [tvos] Add target_xcode_platform to set Xcode project
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759492800">- Update to version 0.20250918:
  * update reference.md
  * Include -fmodule-file flags in compile_commands.json
  * Refactor C++ module dependency logic into a new utility
  * Gitiles navigation bar
  * Adds a len() function
  * Avoid clashes of include_dir in rust-project.json.
  * Check all targets to find duplicated outputs.
  * infra/config: Remove luci.recipes.use_python3 experiment
  * Handle empty outputs in WriteInputDepsStampOrPhonyAndGetDep
  * build: Propagate module dependencies through group targets
  * Deduplicate item in 'deps', 'sources' and related lists
  * infra: Update comment for macOS version used in CQ/CI
  * [Apple] Allow passing a manifest to the post-processing script
  * Update link to buganizer in README.md
  * [Apple] Fix `gn gen` when using swift and no_stamp_files
  * [Apple] Remove deprecated aliases for `post_processing_$var`
  * Revert "Allow newline in string literal"
  * Use std::ranges::all_of in parse_tree_unittest
  * infra: Correctly use macOS 13 instead of 11
  * Update Xcode and macOS version in bots
  * infra: Add shadow buckets to trigger led job
  * Allow newline in string literal
  * Revert "Update macOS version to 13 used in CQ/CI"
  * Update macOS version to 13 used in CQ/CI
  * Refactor command_format.cc
  * Shorten targets from //path/to/foo:foo to //path/to/foo
  * Modernize and improve parse_tree.cc
  * Auto-format the codebase
  * Remove hardcoded -fmodules-embed-all-files flag
  * Reland "Use JSON escaping for JSON string output"</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1766750400">- Update to version 0.20251217:
  * Fix sha2 on big endian
  * [Windows] Reduce the number of worker threads on many-core machines
  * Add a sha256 hash implementation and use it for string_hash
  * Opt-in to the Windows SegmentHeap
  * Add a `module_name` flag to source_set.
  * Refactor module name to be dynamic.
  * Optimize vector creation in compile_commands_writer.cc.
  * Run 'tools/run_formatter.sh'
  * Implement `string_hash` function.
  * Support weak_libraries
  * Do not add .inputdeps paths to --ninja-outputs-file
  * Make clang modules output -fmodule-file=foo=&lt;pcm&gt;.
  * infra: Revert CIPD autoconf
  * infra: Include autoconf bin directory to PATH
  * infra: Fix autoconf executable path
  * infra: Use CIPD autoconf
  * Allow led access in GN via http://go/ciba
  * Revert "Build non-linkable deps async with Ninja's validaitons"
  * Upgrade linux bots from ubuntu 22.04 to ubuntu 24.04
  * Use unordered_map instead of map in HeaderChecker
  * Add --file_relation to gn refs command
  * Optimize vector initialization and preallocation in desc_builder.cc.
  * Add `reserve` statement when vector size is known beforehand.
  * Refactor container update by preferring the range insert.
  * Handle symlinked directories correctly during gn clean on Windows.
  * Fix relative imports from args.gn.</changelog>
</package>
<package pkgid="af741a4f729e47c5a6cbabd47129ca0be7ee3a9a087a37c567b8f3380d6c9dce" name="gn" arch="s390x">
  <version epoch="0" ver="0.20251217" rel="bp156.2.15.1"/>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1751371200">- Update to version 0.20250619:
  * Reland #2 "Run Target::OnResolve() on background threads"
  * Propagate module dependencies transitively via public_deps
  * Fix bug in Grow logic in HashTableBase
  * Apply tools/run_formatter.sh
  * Revert "Reland "Run Target::OnResolve() on background threads""
  * Reland "Run Target::OnResolve() on background threads"
  * Enable ASAN &amp; UBSAN when running tests in debug on CQ/CI
  * Revert "Run Target::OnResolve() on background threads"
  * Check all targets before generating shortnames
  * [tvos] Search for `kTargetXcodePlatform` from all arguments
  * Run Target::OnResolve() on background threads
  * specify the gerrit listener type to be legacy poller
  * Optimize Target::EnsureFileIsGeneratedByDependency()
  * Fix lsan errors
  * Add myself to OWNERS, remove xoolger addresses
  * Revert "Use JSON escaping for JSON string output"
  * Use JSON escaping for JSON string output
  * [tvos] Handle a type error with target_xcode_platform
  * [tvos] Add target_xcode_platform to set Xcode project
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759492800">- Update to version 0.20250918:
  * update reference.md
  * Include -fmodule-file flags in compile_commands.json
  * Refactor C++ module dependency logic into a new utility
  * Gitiles navigation bar
  * Adds a len() function
  * Avoid clashes of include_dir in rust-project.json.
  * Check all targets to find duplicated outputs.
  * infra/config: Remove luci.recipes.use_python3 experiment
  * Handle empty outputs in WriteInputDepsStampOrPhonyAndGetDep
  * build: Propagate module dependencies through group targets
  * Deduplicate item in 'deps', 'sources' and related lists
  * infra: Update comment for macOS version used in CQ/CI
  * [Apple] Allow passing a manifest to the post-processing script
  * Update link to buganizer in README.md
  * [Apple] Fix `gn gen` when using swift and no_stamp_files
  * [Apple] Remove deprecated aliases for `post_processing_$var`
  * Revert "Allow newline in string literal"
  * Use std::ranges::all_of in parse_tree_unittest
  * infra: Correctly use macOS 13 instead of 11
  * Update Xcode and macOS version in bots
  * infra: Add shadow buckets to trigger led job
  * Allow newline in string literal
  * Revert "Update macOS version to 13 used in CQ/CI"
  * Update macOS version to 13 used in CQ/CI
  * Refactor command_format.cc
  * Shorten targets from //path/to/foo:foo to //path/to/foo
  * Modernize and improve parse_tree.cc
  * Auto-format the codebase
  * Remove hardcoded -fmodules-embed-all-files flag
  * Reland "Use JSON escaping for JSON string output"</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1766750400">- Update to version 0.20251217:
  * Fix sha2 on big endian
  * [Windows] Reduce the number of worker threads on many-core machines
  * Add a sha256 hash implementation and use it for string_hash
  * Opt-in to the Windows SegmentHeap
  * Add a `module_name` flag to source_set.
  * Refactor module name to be dynamic.
  * Optimize vector creation in compile_commands_writer.cc.
  * Run 'tools/run_formatter.sh'
  * Implement `string_hash` function.
  * Support weak_libraries
  * Do not add .inputdeps paths to --ninja-outputs-file
  * Make clang modules output -fmodule-file=foo=&lt;pcm&gt;.
  * infra: Revert CIPD autoconf
  * infra: Include autoconf bin directory to PATH
  * infra: Fix autoconf executable path
  * infra: Use CIPD autoconf
  * Allow led access in GN via http://go/ciba
  * Revert "Build non-linkable deps async with Ninja's validaitons"
  * Upgrade linux bots from ubuntu 22.04 to ubuntu 24.04
  * Use unordered_map instead of map in HeaderChecker
  * Add --file_relation to gn refs command
  * Optimize vector initialization and preallocation in desc_builder.cc.
  * Add `reserve` statement when vector size is known beforehand.
  * Refactor container update by preferring the range insert.
  * Handle symlinked directories correctly during gn clean on Windows.
  * Fix relative imports from args.gn.</changelog>
</package>
<package pkgid="f3b9b36a2fe1c03a3a1728e67ecad72cf7ec6a36af562db7e207639bcf9390c9" name="gn" arch="src">
  <version epoch="0" ver="0.20251217" rel="bp156.2.15.1"/>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1751371200">- Update to version 0.20250619:
  * Reland #2 "Run Target::OnResolve() on background threads"
  * Propagate module dependencies transitively via public_deps
  * Fix bug in Grow logic in HashTableBase
  * Apply tools/run_formatter.sh
  * Revert "Reland "Run Target::OnResolve() on background threads""
  * Reland "Run Target::OnResolve() on background threads"
  * Enable ASAN &amp; UBSAN when running tests in debug on CQ/CI
  * Revert "Run Target::OnResolve() on background threads"
  * Check all targets before generating shortnames
  * [tvos] Search for `kTargetXcodePlatform` from all arguments
  * Run Target::OnResolve() on background threads
  * specify the gerrit listener type to be legacy poller
  * Optimize Target::EnsureFileIsGeneratedByDependency()
  * Fix lsan errors
  * Add myself to OWNERS, remove xoolger addresses
  * Revert "Use JSON escaping for JSON string output"
  * Use JSON escaping for JSON string output
  * [tvos] Handle a type error with target_xcode_platform
  * [tvos] Add target_xcode_platform to set Xcode project
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759492800">- Update to version 0.20250918:
  * update reference.md
  * Include -fmodule-file flags in compile_commands.json
  * Refactor C++ module dependency logic into a new utility
  * Gitiles navigation bar
  * Adds a len() function
  * Avoid clashes of include_dir in rust-project.json.
  * Check all targets to find duplicated outputs.
  * infra/config: Remove luci.recipes.use_python3 experiment
  * Handle empty outputs in WriteInputDepsStampOrPhonyAndGetDep
  * build: Propagate module dependencies through group targets
  * Deduplicate item in 'deps', 'sources' and related lists
  * infra: Update comment for macOS version used in CQ/CI
  * [Apple] Allow passing a manifest to the post-processing script
  * Update link to buganizer in README.md
  * [Apple] Fix `gn gen` when using swift and no_stamp_files
  * [Apple] Remove deprecated aliases for `post_processing_$var`
  * Revert "Allow newline in string literal"
  * Use std::ranges::all_of in parse_tree_unittest
  * infra: Correctly use macOS 13 instead of 11
  * Update Xcode and macOS version in bots
  * infra: Add shadow buckets to trigger led job
  * Allow newline in string literal
  * Revert "Update macOS version to 13 used in CQ/CI"
  * Update macOS version to 13 used in CQ/CI
  * Refactor command_format.cc
  * Shorten targets from //path/to/foo:foo to //path/to/foo
  * Modernize and improve parse_tree.cc
  * Auto-format the codebase
  * Remove hardcoded -fmodules-embed-all-files flag
  * Reland "Use JSON escaping for JSON string output"</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1766750400">- Update to version 0.20251217:
  * Fix sha2 on big endian
  * [Windows] Reduce the number of worker threads on many-core machines
  * Add a sha256 hash implementation and use it for string_hash
  * Opt-in to the Windows SegmentHeap
  * Add a `module_name` flag to source_set.
  * Refactor module name to be dynamic.
  * Optimize vector creation in compile_commands_writer.cc.
  * Run 'tools/run_formatter.sh'
  * Implement `string_hash` function.
  * Support weak_libraries
  * Do not add .inputdeps paths to --ninja-outputs-file
  * Make clang modules output -fmodule-file=foo=&lt;pcm&gt;.
  * infra: Revert CIPD autoconf
  * infra: Include autoconf bin directory to PATH
  * infra: Fix autoconf executable path
  * infra: Use CIPD autoconf
  * Allow led access in GN via http://go/ciba
  * Revert "Build non-linkable deps async with Ninja's validaitons"
  * Upgrade linux bots from ubuntu 22.04 to ubuntu 24.04
  * Use unordered_map instead of map in HeaderChecker
  * Add --file_relation to gn refs command
  * Optimize vector initialization and preallocation in desc_builder.cc.
  * Add `reserve` statement when vector size is known beforehand.
  * Refactor container update by preferring the range insert.
  * Handle symlinked directories correctly during gn clean on Windows.
  * Fix relative imports from args.gn.</changelog>
</package>
<package pkgid="54575f5923015901da83ca7f44c05e44af7d4c6387cff3d69e0f21e2079560c0" name="gn" arch="x86_64">
  <version epoch="0" ver="0.20251217" rel="bp156.2.15.1"/>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ro@suse.com" date="1722600000">- Update to version 0.20240730:
  * Rust: link_output, depend_output and runtime_outputs for dylibs
  * Add missing reference section to function_toolchain.cc
  * Do not cleanup args.gn imports located in the output directory.
  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule
  * Do not add native dependencies to the library search path
  * Support linking frameworks and swiftmodules in Rust targets
  * [desc] Silence print() statements when outputing json
  * infra: Move CI/try builds to Ubuntu-22.04
  * [MinGW] Fix mingw building issues
  * [gn] Fix "link" in the //examples/simple_build/build/toolchain/BUILD.gn
  * [template] Fix "rule alink_thin" in the //build/build_linux.ninja.template
  * Allow multiple --ide switches
  * [src] Add "#include &lt;limits&gt;" in the //src/base/files/file_enumerator_win.cc
  * Get updates to infra/recipes.py from upstream
  * Revert "Teach gn to handle systems with &gt; 64 processors"
  * [apple] Rename the code-signing properties of create_bundle
  * Fix a typo in "gn help refs" output
  * Revert "[bundle] Use "phony" builtin tool for create_bundle targets"
  * [bundle] Use "phony" builtin tool for create_bundle targets
  * [ios] Simplify handling of assets catalog
  * [swift] List all outputs as deps of "source_set" stamp file
  * [swift] Update `gn check ...` to consider the generated header
  * [swift] Set `restat = 1` to swift build rules
  * Fix build with gcc12
  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()
  * [swift] Remove problematic use of "stamp" tool
  * Implement new --ninja-outputs-file option.
  * Add NinjaOutputsWriter class
  * Move InvokePython() function to its own source file.
  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat
  * Enable C++ runtime assertions in debug mode.
  * Fix regression in MakeRelativePath()
  * fix: Fix Windows MakeRelativePath.
  * Add long path support for windows
  * Ensure read_file() files are considered by "gn analyze"
  * apply 2to3 to for some Python scripts
  * Add rustflags to desc and help output
  * strings: support case insensitive check only in StartsWith/EndsWith
  * add .git-blame-ignore-revs
  * use std::{string,string_view}::{starts_with,ends_with}
  * apply clang-format to all C++ sources
  * add forward declaration in rust_values.h
  * Add `root_patterns` list to build configuration.
  * Use c++20 in GN build
  * update windows sdk to 2024-01-11
  * update windows sdk
  * Add linux-riscv64.
  * Update OWNERS list.
  * remove unused function
  * Ignore build warning -Werror=redundant-move
  * Fix --as=buildfile `gn desc deps` output.
  * Update recipe engine to 9dea1246.
  * treewide: Fix spelling mistakes
- add subprocess-python36.patch
  to build with python3.6 on sle15
- use gcc-13 instead of gcc-12
  to work around maybe uninitialized error</changelog>
  <changelog author="ro@suse.de" date="1727092800">- add "-Wno-unused-value" to fix build on armv6/armv7</changelog>
  <changelog author="ro@suse.com" date="1741262400">- Update to version 0.20250306:
  * Remove deps from rust executable to module's pcm files
  * Update test for rust executable deps
  * Add toolchain for cxx modules in TestWithScope
  * Apply the latest clang-format
  * Update reference for {rustdeps}
  * Always generate a .toolchain file even if it is empty.
  * Pass --with-lg-page=16 when building jemalloc for arm64.
  * Remove obsolete debug checks.
  * Make default vs ide version on Windows as 2022
  * Reland "Adds a path_exists() function"
  * Revert "Adds a path_exists() function"
  * Adds a path_exists() function
  * Revert "Speed-up GN with custom OutputStream interface."
  * Speed-up GN with custom OutputStream interface.
  * Add `exec_script_allowlist` to replace `exec_script_whitelist`.
  * Retry ReplaceFile in case of failure
  * Fix crash when NinjaBuildWriter::RunAndWriteFile fails
  * fix include for escape.h
  * fix exit code for gn gen failure
  * misc: Use html.escape instead of cgi.escape
  * Do not copy parent build_dependency_files_ in Scope constructors.
  * Improve error message for duplicated items
  * [rust-project] Always use forward slashes in sysroot paths
  * Update all_dependent_configs docs.
  * set 'no_stamp_files' by default
  * fix a typo
  * Stop using transitional LFS64 APIs
  * do not use tool prefix for phony rule
  * [rust] Add sysroot_src to rust-project.json
  * Implement and enable 'no_stamp_files'
  * Add Target::dependency_output_alias()
  * Add "outputs" to generated_file documentation.
  * Update bug database link.
  * remove a trailing space after variable bindings
  * fix tool name in error
  * remove unused includes
  * Markdown optimization (follow-up)
  * Support link_output, depend_output in Rust linked tools.
  * Properly verify runtime_outputs in rust tool definitions.
  * BugFix: Syntax error in gen.py file
  * generated_file: add output to input deps of stamp
  * Markdown optimization:
  * Revert "Rust: link_output, depend_output and runtime_outputs for dylibs"
  * hint using nogncheck on disallowed includes</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1747742400">- Update to version 0.20250520:
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1751371200">- Update to version 0.20250619:
  * Reland #2 "Run Target::OnResolve() on background threads"
  * Propagate module dependencies transitively via public_deps
  * Fix bug in Grow logic in HashTableBase
  * Apply tools/run_formatter.sh
  * Revert "Reland "Run Target::OnResolve() on background threads""
  * Reland "Run Target::OnResolve() on background threads"
  * Enable ASAN &amp; UBSAN when running tests in debug on CQ/CI
  * Revert "Run Target::OnResolve() on background threads"
  * Check all targets before generating shortnames
  * [tvos] Search for `kTargetXcodePlatform` from all arguments
  * Run Target::OnResolve() on background threads
  * specify the gerrit listener type to be legacy poller
  * Optimize Target::EnsureFileIsGeneratedByDependency()
  * Fix lsan errors
  * Add myself to OWNERS, remove xoolger addresses
  * Revert "Use JSON escaping for JSON string output"
  * Use JSON escaping for JSON string output
  * [tvos] Handle a type error with target_xcode_platform
  * [tvos] Add target_xcode_platform to set Xcode project
  * Add `--filter-with-data` flag for `gn gen --ide=json`
  * Handle --ide=vs2019 switch
  * Handle hpp11 file extension.
  * Fix `gn help --root-pattern`
  * Build non-linkable deps async with Ninja's validaitons
  * Generate compile_commands.json as part of build/gen.py
  * apply the latest clang-format
  * Add a test for source_set with modulemap
  * Write .gitignore file to build directory
  * Add more on how args are processed to "help execution".
  * Make `gn_version` available in the dotfile.
  * Tweak `help execution` wording after c0a46c5.
  * Attempt to improve the documentation for "help execution".
  * zos: build with -m64 and ignore unknown-pragmas
  * Unit test parser/tokenizer against double minus</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759492800">- Update to version 0.20250918:
  * update reference.md
  * Include -fmodule-file flags in compile_commands.json
  * Refactor C++ module dependency logic into a new utility
  * Gitiles navigation bar
  * Adds a len() function
  * Avoid clashes of include_dir in rust-project.json.
  * Check all targets to find duplicated outputs.
  * infra/config: Remove luci.recipes.use_python3 experiment
  * Handle empty outputs in WriteInputDepsStampOrPhonyAndGetDep
  * build: Propagate module dependencies through group targets
  * Deduplicate item in 'deps', 'sources' and related lists
  * infra: Update comment for macOS version used in CQ/CI
  * [Apple] Allow passing a manifest to the post-processing script
  * Update link to buganizer in README.md
  * [Apple] Fix `gn gen` when using swift and no_stamp_files
  * [Apple] Remove deprecated aliases for `post_processing_$var`
  * Revert "Allow newline in string literal"
  * Use std::ranges::all_of in parse_tree_unittest
  * infra: Correctly use macOS 13 instead of 11
  * Update Xcode and macOS version in bots
  * infra: Add shadow buckets to trigger led job
  * Allow newline in string literal
  * Revert "Update macOS version to 13 used in CQ/CI"
  * Update macOS version to 13 used in CQ/CI
  * Refactor command_format.cc
  * Shorten targets from //path/to/foo:foo to //path/to/foo
  * Modernize and improve parse_tree.cc
  * Auto-format the codebase
  * Remove hardcoded -fmodules-embed-all-files flag
  * Reland "Use JSON escaping for JSON string output"</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1766750400">- Update to version 0.20251217:
  * Fix sha2 on big endian
  * [Windows] Reduce the number of worker threads on many-core machines
  * Add a sha256 hash implementation and use it for string_hash
  * Opt-in to the Windows SegmentHeap
  * Add a `module_name` flag to source_set.
  * Refactor module name to be dynamic.
  * Optimize vector creation in compile_commands_writer.cc.
  * Run 'tools/run_formatter.sh'
  * Implement `string_hash` function.
  * Support weak_libraries
  * Do not add .inputdeps paths to --ninja-outputs-file
  * Make clang modules output -fmodule-file=foo=&lt;pcm&gt;.
  * infra: Revert CIPD autoconf
  * infra: Include autoconf bin directory to PATH
  * infra: Fix autoconf executable path
  * infra: Use CIPD autoconf
  * Allow led access in GN via http://go/ciba
  * Revert "Build non-linkable deps async with Ninja's validaitons"
  * Upgrade linux bots from ubuntu 22.04 to ubuntu 24.04
  * Use unordered_map instead of map in HeaderChecker
  * Add --file_relation to gn refs command
  * Optimize vector initialization and preallocation in desc_builder.cc.
  * Add `reserve` statement when vector size is known beforehand.
  * Refactor container update by preferring the range insert.
  * Handle symlinked directories correctly during gn clean on Windows.
  * Fix relative imports from args.gn.</changelog>
</package>
<package pkgid="6a4c4af63d3510466e98ddc877d3c4b2145d27d82f23b7819a4b0f55113dcbf4" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="4.4.1" rel="bp156.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598011200">- version 3.6.5
  HMIS: Update to 3.6.5 including ICD10 codes 2020</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608638400">- Documentation added to package description</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- version 3.8.0
  dentistry package added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python_dependency_generator removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and verify source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1616587200">- Variable for EDITOR set</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1618574400">- update to gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646568000">- version 4.0.0
  * based on Tryton 6.0
  * Improved ergonomics on the GTK client
  * New HELP command that allows offline and contextualized documentation
  * WebDAV and CalDAV packages are fully integrated in GH (no links)
  * Weblate now holds 34 language teams!
  * Removed obsoleted binary ODT (except for some charts)
  * Improved integration with OpenStreetMap (OSM)
  * Improved surgery and patient evaluation flows
  * New health service Dx imaging package
  * Update person gender list
  * Add medical evaluations to health services
  * Include (optional) expiration date on the person ID
  * Add context field for Dx Imaging and Lab tests</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648036800">- version 4.0.2
  * Use ODT binary format for pediatric growth charts reports
  * Force Beren library to 0.7.0 to make it compatible with Python 3.6
  * Allow Python minor versions &gt; 10 (ej Python 3.10.2)
  * fix webdav import error, bug #62165</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 4.0.3
  * Remove pinning from vobject library version (Vanilla installation)
  * fix bug #62235: Traceback on default health professional</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1655380800">- version 4.0.4
  * various bugfixes - see changelog for details</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1676203200">- version 4.2.0
  * Enhanced Medical Imaging functionality and ergonomics.
  * Introduced GNU Health "Focus on" section on patient main form.
  * Surgery package has been vastly revised and enhanced in collaboration
    with our colleagues from Cirugia Solidaria
  * Enhanced Insurance and billing functionality.
  * The Vital Record System (VRS) can now issue reports on birth and
    death certificates.
  * Demographics can now accept entering estimate age / DoB.
  * Health services has now the functionality of "grouping" all the tests
    from a single order - lab and medical imaging.
  * Improved Patient encounter / evaluation.
  * Weblate translations holds 35 languages
  * On the technical side, we have improved unit testing on each package,
    speedup load times on large datafiles and using python-sql for most
    queries.
  * GNU Health is now REUSE (Free Software Foundation Europe) compliant.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1680868800">- version 4.2.1
  * Fix bug TypeError: unsupported operand type(s) for &amp;=: 'bool' and 'GreaterEqual'
  * Fix bug #63871: Imaging Result Report: genshitemplateevalUndefinedError: None has no member named 'rec_name'
  * Fix bug #64009: Include signing health professional and avoid scrolling in patient evaluation
  * Fix bug #64014: Update gender identity in patient evaluations and reports</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1694952000">- version 4.2.2
  * Fix [bug #64665] Product cost_price needs to be passed as an argument in stock moves
  * Fix bug #64530: traceback on evaluation page of life if no institution is given
  * Fix bug #64457: Patient automatic critical information entries should be unique
  * Fix bug #64432: Gestational weeks show floating point instead of weeks</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1695556800">- version 4.2.3
  * Fix bug #64706: Error saving party with photo due to PIL deprecation of ANTIALIAS</changelog>
  <changelog author="Daniel Garcia Moreno &lt;daniel.garcia@suse.com&gt;" date="1697544000">- Remove %python3_install prefix and root options, that's included in
  the macro by default.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1703332800">- version 4.4.0
  See Changelog for details</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1704542400">- Switch Leap packages to Python 3.11
  shebang.diff removed (call in spec file)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1722600000">- version 4.4.1
  * Issue #15: readfp on setup.py no longer supported since python 3.12
  * Issue #33: health orthanc: Errors on imaging request when worklist
    template set on imaging test type</changelog>
</package>
<package pkgid="f86b09a6d7c573c61ee26968a82cec2698ce967e29e091d167b020dc2c4b9265" name="gnuhealth" arch="src">
  <version epoch="0" ver="4.4.1" rel="bp156.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598011200">- version 3.6.5
  HMIS: Update to 3.6.5 including ICD10 codes 2020</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608638400">- Documentation added to package description</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- version 3.8.0
  dentistry package added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python_dependency_generator removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and verify source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1616587200">- Variable for EDITOR set</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1618574400">- update to gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646568000">- version 4.0.0
  * based on Tryton 6.0
  * Improved ergonomics on the GTK client
  * New HELP command that allows offline and contextualized documentation
  * WebDAV and CalDAV packages are fully integrated in GH (no links)
  * Weblate now holds 34 language teams!
  * Removed obsoleted binary ODT (except for some charts)
  * Improved integration with OpenStreetMap (OSM)
  * Improved surgery and patient evaluation flows
  * New health service Dx imaging package
  * Update person gender list
  * Add medical evaluations to health services
  * Include (optional) expiration date on the person ID
  * Add context field for Dx Imaging and Lab tests</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648036800">- version 4.0.2
  * Use ODT binary format for pediatric growth charts reports
  * Force Beren library to 0.7.0 to make it compatible with Python 3.6
  * Allow Python minor versions &gt; 10 (ej Python 3.10.2)
  * fix webdav import error, bug #62165</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 4.0.3
  * Remove pinning from vobject library version (Vanilla installation)
  * fix bug #62235: Traceback on default health professional</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1655380800">- version 4.0.4
  * various bugfixes - see changelog for details</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1676203200">- version 4.2.0
  * Enhanced Medical Imaging functionality and ergonomics.
  * Introduced GNU Health "Focus on" section on patient main form.
  * Surgery package has been vastly revised and enhanced in collaboration
    with our colleagues from Cirugia Solidaria
  * Enhanced Insurance and billing functionality.
  * The Vital Record System (VRS) can now issue reports on birth and
    death certificates.
  * Demographics can now accept entering estimate age / DoB.
  * Health services has now the functionality of "grouping" all the tests
    from a single order - lab and medical imaging.
  * Improved Patient encounter / evaluation.
  * Weblate translations holds 35 languages
  * On the technical side, we have improved unit testing on each package,
    speedup load times on large datafiles and using python-sql for most
    queries.
  * GNU Health is now REUSE (Free Software Foundation Europe) compliant.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1680868800">- version 4.2.1
  * Fix bug TypeError: unsupported operand type(s) for &amp;=: 'bool' and 'GreaterEqual'
  * Fix bug #63871: Imaging Result Report: genshitemplateevalUndefinedError: None has no member named 'rec_name'
  * Fix bug #64009: Include signing health professional and avoid scrolling in patient evaluation
  * Fix bug #64014: Update gender identity in patient evaluations and reports</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1694952000">- version 4.2.2
  * Fix [bug #64665] Product cost_price needs to be passed as an argument in stock moves
  * Fix bug #64530: traceback on evaluation page of life if no institution is given
  * Fix bug #64457: Patient automatic critical information entries should be unique
  * Fix bug #64432: Gestational weeks show floating point instead of weeks</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1695556800">- version 4.2.3
  * Fix bug #64706: Error saving party with photo due to PIL deprecation of ANTIALIAS</changelog>
  <changelog author="Daniel Garcia Moreno &lt;daniel.garcia@suse.com&gt;" date="1697544000">- Remove %python3_install prefix and root options, that's included in
  the macro by default.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1703332800">- version 4.4.0
  See Changelog for details</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1704542400">- Switch Leap packages to Python 3.11
  shebang.diff removed (call in spec file)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1722600000">- version 4.4.1
  * Issue #15: readfp on setup.py no longer supported since python 3.12
  * Issue #33: health orthanc: Errors on imaging request when worklist
    template set on imaging test type</changelog>
</package>
<package pkgid="e3b08920b838a88cf616a3c5fe3e2cac7a364fed969d4604b6d990c5612071fc" name="gnuhealth-orthanc" arch="noarch">
  <version epoch="0" ver="4.4.1" rel="bp156.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598011200">- version 3.6.5
  HMIS: Update to 3.6.5 including ICD10 codes 2020</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608638400">- Documentation added to package description</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613390400">- version 3.8.0
  dentistry package added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1613476800">- python_dependency_generator removed</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1614427200">- add upstream signing key and verify source signature</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1616587200">- Variable for EDITOR set</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1618574400">- update to gnuhealth-control</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646568000">- version 4.0.0
  * based on Tryton 6.0
  * Improved ergonomics on the GTK client
  * New HELP command that allows offline and contextualized documentation
  * WebDAV and CalDAV packages are fully integrated in GH (no links)
  * Weblate now holds 34 language teams!
  * Removed obsoleted binary ODT (except for some charts)
  * Improved integration with OpenStreetMap (OSM)
  * Improved surgery and patient evaluation flows
  * New health service Dx imaging package
  * Update person gender list
  * Add medical evaluations to health services
  * Include (optional) expiration date on the person ID
  * Add context field for Dx Imaging and Lab tests</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648036800">- version 4.0.2
  * Use ODT binary format for pediatric growth charts reports
  * Force Beren library to 0.7.0 to make it compatible with Python 3.6
  * Allow Python minor versions &gt; 10 (ej Python 3.10.2)
  * fix webdav import error, bug #62165</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 4.0.3
  * Remove pinning from vobject library version (Vanilla installation)
  * fix bug #62235: Traceback on default health professional</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1655380800">- version 4.0.4
  * various bugfixes - see changelog for details</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1676203200">- version 4.2.0
  * Enhanced Medical Imaging functionality and ergonomics.
  * Introduced GNU Health "Focus on" section on patient main form.
  * Surgery package has been vastly revised and enhanced in collaboration
    with our colleagues from Cirugia Solidaria
  * Enhanced Insurance and billing functionality.
  * The Vital Record System (VRS) can now issue reports on birth and
    death certificates.
  * Demographics can now accept entering estimate age / DoB.
  * Health services has now the functionality of "grouping" all the tests
    from a single order - lab and medical imaging.
  * Improved Patient encounter / evaluation.
  * Weblate translations holds 35 languages
  * On the technical side, we have improved unit testing on each package,
    speedup load times on large datafiles and using python-sql for most
    queries.
  * GNU Health is now REUSE (Free Software Foundation Europe) compliant.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1680868800">- version 4.2.1
  * Fix bug TypeError: unsupported operand type(s) for &amp;=: 'bool' and 'GreaterEqual'
  * Fix bug #63871: Imaging Result Report: genshitemplateevalUndefinedError: None has no member named 'rec_name'
  * Fix bug #64009: Include signing health professional and avoid scrolling in patient evaluation
  * Fix bug #64014: Update gender identity in patient evaluations and reports</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1694952000">- version 4.2.2
  * Fix [bug #64665] Product cost_price needs to be passed as an argument in stock moves
  * Fix bug #64530: traceback on evaluation page of life if no institution is given
  * Fix bug #64457: Patient automatic critical information entries should be unique
  * Fix bug #64432: Gestational weeks show floating point instead of weeks</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1695556800">- version 4.2.3
  * Fix bug #64706: Error saving party with photo due to PIL deprecation of ANTIALIAS</changelog>
  <changelog author="Daniel Garcia Moreno &lt;daniel.garcia@suse.com&gt;" date="1697544000">- Remove %python3_install prefix and root options, that's included in
  the macro by default.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1703332800">- version 4.4.0
  See Changelog for details</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1704542400">- Switch Leap packages to Python 3.11
  shebang.diff removed (call in spec file)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1722600000">- version 4.4.1
  * Issue #15: readfp on setup.py no longer supported since python 3.12
  * Issue #33: health orthanc: Errors on imaging request when worklist
    template set on imaging test type</changelog>
</package>
<package pkgid="4214cdf9ef394cd27a3eb05d608ba2132306bc300407205c15dd00a961a626b8" name="go-containerregistry" arch="src">
  <version epoch="0" ver="0.20.3" rel="bp156.2.3.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1741953600">- update to 0.20.3:
  * remote/transport: Make bearer transport go-routine-safe
  * Expose compare package
  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
    password
  * bump actions to latest
  * don't pin chainguard-dev/actions
  * Check for 406 status code when handling referrers API
    endpoint response
  * mutate: Create a defensive annotations copy
  * Detect zstd in crane append
  * bump deps using hack/bump-deps.sh
- update to 0.20.2:
  * deps: bump docker dep</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)</changelog>
</package>
<package pkgid="5accc6e725892f5619b6410e9a22d5124c20c2b2d45ff6cd55442f8f92b5823f" name="go-sendxmpp" arch="aarch64">
  <version epoch="0" ver="0.14.0" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688299200">- Update to 0.6.0:
  Added:
  * Add support for sending Out of Band Data (OOB).
  * Add SCRAM-SHA-1, SCRAM-SHA-256 and SCRAM-SHA512 support (via go-xmpp commit bef3e54).
  * Add support for messages of type headline.
  Changed:
  * Print --help output to stdout instead of stderr.
  * Print sent stanzas when --debug is used (via go-xmpp commit 9129a110df1b).
  * Allow JIDs without localpart.
  * Use single quotes for attributes in stanzas created by github.com/beevik/etree (vial etree v1.1.4).
  * Fix SRV lookup when the domain has a CNAME (via xmppsrv v0.2.5).
  * Fall back to directTLS on port 5223 (instead of StartTLS on port 5222)
    if no SRV records are provided and -t is set.
  * Remove trailing newlines in interactive mode.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690372800">- Update to 0.6.1:
  * Properly close connection to server.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696075200">- Update to 0.6.2:
  * Properly close connection to server if ^C is pressed in
    interactive mode.
  * Replace invalid characters by UTF8 replacement char.
  * Add warning that there is no Ox support for messages of type
    headline.
  * Suppress warnings about reading from closed connection if
    go-sendxmpp closes the connection before exiting.
  * Remove unnecessary newlines after stanzas.
  * Fix segfault when authentication fails due to invalid username
    or password.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
</package>
<package pkgid="8cdbe45cf0976e4790cdd4f56c5f25c0c5e52fcbee5d199e8a98d88b31fd97c5" name="go-sendxmpp" arch="i586">
  <version epoch="0" ver="0.14.0" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688299200">- Update to 0.6.0:
  Added:
  * Add support for sending Out of Band Data (OOB).
  * Add SCRAM-SHA-1, SCRAM-SHA-256 and SCRAM-SHA512 support (via go-xmpp commit bef3e54).
  * Add support for messages of type headline.
  Changed:
  * Print --help output to stdout instead of stderr.
  * Print sent stanzas when --debug is used (via go-xmpp commit 9129a110df1b).
  * Allow JIDs without localpart.
  * Use single quotes for attributes in stanzas created by github.com/beevik/etree (vial etree v1.1.4).
  * Fix SRV lookup when the domain has a CNAME (via xmppsrv v0.2.5).
  * Fall back to directTLS on port 5223 (instead of StartTLS on port 5222)
    if no SRV records are provided and -t is set.
  * Remove trailing newlines in interactive mode.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690372800">- Update to 0.6.1:
  * Properly close connection to server.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696075200">- Update to 0.6.2:
  * Properly close connection to server if ^C is pressed in
    interactive mode.
  * Replace invalid characters by UTF8 replacement char.
  * Add warning that there is no Ox support for messages of type
    headline.
  * Suppress warnings about reading from closed connection if
    go-sendxmpp closes the connection before exiting.
  * Remove unnecessary newlines after stanzas.
  * Fix segfault when authentication fails due to invalid username
    or password.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
</package>
<package pkgid="59b85784f7d0a7c3ce4cf432013a6c2196762c4a11f72031e2bbf5be2f0a0e3a" name="go-sendxmpp" arch="ppc64le">
  <version epoch="0" ver="0.14.0" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688299200">- Update to 0.6.0:
  Added:
  * Add support for sending Out of Band Data (OOB).
  * Add SCRAM-SHA-1, SCRAM-SHA-256 and SCRAM-SHA512 support (via go-xmpp commit bef3e54).
  * Add support for messages of type headline.
  Changed:
  * Print --help output to stdout instead of stderr.
  * Print sent stanzas when --debug is used (via go-xmpp commit 9129a110df1b).
  * Allow JIDs without localpart.
  * Use single quotes for attributes in stanzas created by github.com/beevik/etree (vial etree v1.1.4).
  * Fix SRV lookup when the domain has a CNAME (via xmppsrv v0.2.5).
  * Fall back to directTLS on port 5223 (instead of StartTLS on port 5222)
    if no SRV records are provided and -t is set.
  * Remove trailing newlines in interactive mode.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690372800">- Update to 0.6.1:
  * Properly close connection to server.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696075200">- Update to 0.6.2:
  * Properly close connection to server if ^C is pressed in
    interactive mode.
  * Replace invalid characters by UTF8 replacement char.
  * Add warning that there is no Ox support for messages of type
    headline.
  * Suppress warnings about reading from closed connection if
    go-sendxmpp closes the connection before exiting.
  * Remove unnecessary newlines after stanzas.
  * Fix segfault when authentication fails due to invalid username
    or password.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
</package>
<package pkgid="a80afc19416cc11d29791acc8219e0f1227c29f275ceb9ef13b496e6ee3db882" name="go-sendxmpp" arch="s390x">
  <version epoch="0" ver="0.14.0" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688299200">- Update to 0.6.0:
  Added:
  * Add support for sending Out of Band Data (OOB).
  * Add SCRAM-SHA-1, SCRAM-SHA-256 and SCRAM-SHA512 support (via go-xmpp commit bef3e54).
  * Add support for messages of type headline.
  Changed:
  * Print --help output to stdout instead of stderr.
  * Print sent stanzas when --debug is used (via go-xmpp commit 9129a110df1b).
  * Allow JIDs without localpart.
  * Use single quotes for attributes in stanzas created by github.com/beevik/etree (vial etree v1.1.4).
  * Fix SRV lookup when the domain has a CNAME (via xmppsrv v0.2.5).
  * Fall back to directTLS on port 5223 (instead of StartTLS on port 5222)
    if no SRV records are provided and -t is set.
  * Remove trailing newlines in interactive mode.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690372800">- Update to 0.6.1:
  * Properly close connection to server.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696075200">- Update to 0.6.2:
  * Properly close connection to server if ^C is pressed in
    interactive mode.
  * Replace invalid characters by UTF8 replacement char.
  * Add warning that there is no Ox support for messages of type
    headline.
  * Suppress warnings about reading from closed connection if
    go-sendxmpp closes the connection before exiting.
  * Remove unnecessary newlines after stanzas.
  * Fix segfault when authentication fails due to invalid username
    or password.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
</package>
<package pkgid="9f20261d20ff85d0f1d135838abe66082d13e420d460845af5cb743646958050" name="go-sendxmpp" arch="src">
  <version epoch="0" ver="0.14.0" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688299200">- Update to 0.6.0:
  Added:
  * Add support for sending Out of Band Data (OOB).
  * Add SCRAM-SHA-1, SCRAM-SHA-256 and SCRAM-SHA512 support (via go-xmpp commit bef3e54).
  * Add support for messages of type headline.
  Changed:
  * Print --help output to stdout instead of stderr.
  * Print sent stanzas when --debug is used (via go-xmpp commit 9129a110df1b).
  * Allow JIDs without localpart.
  * Use single quotes for attributes in stanzas created by github.com/beevik/etree (vial etree v1.1.4).
  * Fix SRV lookup when the domain has a CNAME (via xmppsrv v0.2.5).
  * Fall back to directTLS on port 5223 (instead of StartTLS on port 5222)
    if no SRV records are provided and -t is set.
  * Remove trailing newlines in interactive mode.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690372800">- Update to 0.6.1:
  * Properly close connection to server.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696075200">- Update to 0.6.2:
  * Properly close connection to server if ^C is pressed in
    interactive mode.
  * Replace invalid characters by UTF8 replacement char.
  * Add warning that there is no Ox support for messages of type
    headline.
  * Suppress warnings about reading from closed connection if
    go-sendxmpp closes the connection before exiting.
  * Remove unnecessary newlines after stanzas.
  * Fix segfault when authentication fails due to invalid username
    or password.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
</package>
<package pkgid="b702e57fed50e16755f45170cbf7356aee093c5e5cf3eb1895fc15818081881f" name="go-sendxmpp" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688299200">- Update to 0.6.0:
  Added:
  * Add support for sending Out of Band Data (OOB).
  * Add SCRAM-SHA-1, SCRAM-SHA-256 and SCRAM-SHA512 support (via go-xmpp commit bef3e54).
  * Add support for messages of type headline.
  Changed:
  * Print --help output to stdout instead of stderr.
  * Print sent stanzas when --debug is used (via go-xmpp commit 9129a110df1b).
  * Allow JIDs without localpart.
  * Use single quotes for attributes in stanzas created by github.com/beevik/etree (vial etree v1.1.4).
  * Fix SRV lookup when the domain has a CNAME (via xmppsrv v0.2.5).
  * Fall back to directTLS on port 5223 (instead of StartTLS on port 5222)
    if no SRV records are provided and -t is set.
  * Remove trailing newlines in interactive mode.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690372800">- Update to 0.6.1:
  * Properly close connection to server.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696075200">- Update to 0.6.2:
  * Properly close connection to server if ^C is pressed in
    interactive mode.
  * Replace invalid characters by UTF8 replacement char.
  * Add warning that there is no Ox support for messages of type
    headline.
  * Suppress warnings about reading from closed connection if
    go-sendxmpp closes the connection before exiting.
  * Remove unnecessary newlines after stanzas.
  * Fix segfault when authentication fails due to invalid username
    or password.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
</package>
<package pkgid="461e15855e21af76b92fc6a72a0f1b1c9655368fde5f1d685f3a4ae46aa48fc5" name="go-sendxmpp" arch="aarch64">
  <version epoch="0" ver="0.15.0" rel="bp156.2.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696075200">- Update to 0.6.2:
  * Properly close connection to server if ^C is pressed in
    interactive mode.
  * Replace invalid characters by UTF8 replacement char.
  * Add warning that there is no Ox support for messages of type
    headline.
  * Suppress warnings about reading from closed connection if
    go-sendxmpp closes the connection before exiting.
  * Remove unnecessary newlines after stanzas.
  * Fix segfault when authentication fails due to invalid username
    or password.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1738065600">- Update to 0.14.1:
  * Use prettier date format for error messages.
  * Update XEP-0474 to version 0.4.0 (requires go-xmpp &gt;= 0.2.10).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755604800">- Update to 0.15.0:
  Added:
  * Add flag --verbose to show debug information.
  * Add flag --recipients to specify recipients by file.
  * Add flag --retry-connect to try after a waiting time if the connection fails.
  * Add flag --retry-connect-max to specify the amount of retry attempts.
  * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys.
  * Add support for punycode domains.
  Changed:
  * Update gopenpgp library to v3.
  * Improve error detection for MUC joins.
  * Don't try to connect to other SRV record targets if error contains 'auth-failure'.
  * Remove support for old SSDP version (via go-xmpp v0.2.15).
  * Http-upload: Stop checking other disco items after finding upload component.
  * Increase default TLS version to 1.3.
- bsc#1241814 (CVE-2025-22872): This update includes golang.org/x/net/html 0.43.0</changelog>
</package>
<package pkgid="e7e1acdc97816d65b5c42ae1f64032f543a66a98226edbc18116b70a42e938ec" name="go-sendxmpp" arch="i586">
  <version epoch="0" ver="0.15.0" rel="bp156.2.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696075200">- Update to 0.6.2:
  * Properly close connection to server if ^C is pressed in
    interactive mode.
  * Replace invalid characters by UTF8 replacement char.
  * Add warning that there is no Ox support for messages of type
    headline.
  * Suppress warnings about reading from closed connection if
    go-sendxmpp closes the connection before exiting.
  * Remove unnecessary newlines after stanzas.
  * Fix segfault when authentication fails due to invalid username
    or password.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1738065600">- Update to 0.14.1:
  * Use prettier date format for error messages.
  * Update XEP-0474 to version 0.4.0 (requires go-xmpp &gt;= 0.2.10).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755604800">- Update to 0.15.0:
  Added:
  * Add flag --verbose to show debug information.
  * Add flag --recipients to specify recipients by file.
  * Add flag --retry-connect to try after a waiting time if the connection fails.
  * Add flag --retry-connect-max to specify the amount of retry attempts.
  * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys.
  * Add support for punycode domains.
  Changed:
  * Update gopenpgp library to v3.
  * Improve error detection for MUC joins.
  * Don't try to connect to other SRV record targets if error contains 'auth-failure'.
  * Remove support for old SSDP version (via go-xmpp v0.2.15).
  * Http-upload: Stop checking other disco items after finding upload component.
  * Increase default TLS version to 1.3.
- bsc#1241814 (CVE-2025-22872): This update includes golang.org/x/net/html 0.43.0</changelog>
</package>
<package pkgid="f080f0108b63bff8f0910d18d454341aa72032ab62e63fe8c4e4e3a548b6fd97" name="go-sendxmpp" arch="ppc64le">
  <version epoch="0" ver="0.15.0" rel="bp156.2.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696075200">- Update to 0.6.2:
  * Properly close connection to server if ^C is pressed in
    interactive mode.
  * Replace invalid characters by UTF8 replacement char.
  * Add warning that there is no Ox support for messages of type
    headline.
  * Suppress warnings about reading from closed connection if
    go-sendxmpp closes the connection before exiting.
  * Remove unnecessary newlines after stanzas.
  * Fix segfault when authentication fails due to invalid username
    or password.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1738065600">- Update to 0.14.1:
  * Use prettier date format for error messages.
  * Update XEP-0474 to version 0.4.0 (requires go-xmpp &gt;= 0.2.10).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755604800">- Update to 0.15.0:
  Added:
  * Add flag --verbose to show debug information.
  * Add flag --recipients to specify recipients by file.
  * Add flag --retry-connect to try after a waiting time if the connection fails.
  * Add flag --retry-connect-max to specify the amount of retry attempts.
  * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys.
  * Add support for punycode domains.
  Changed:
  * Update gopenpgp library to v3.
  * Improve error detection for MUC joins.
  * Don't try to connect to other SRV record targets if error contains 'auth-failure'.
  * Remove support for old SSDP version (via go-xmpp v0.2.15).
  * Http-upload: Stop checking other disco items after finding upload component.
  * Increase default TLS version to 1.3.
- bsc#1241814 (CVE-2025-22872): This update includes golang.org/x/net/html 0.43.0</changelog>
</package>
<package pkgid="96dc93adcbba30c9965a3840f6526d6b802a6acb1ca3bdacf73c09a42930146b" name="go-sendxmpp" arch="s390x">
  <version epoch="0" ver="0.15.0" rel="bp156.2.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696075200">- Update to 0.6.2:
  * Properly close connection to server if ^C is pressed in
    interactive mode.
  * Replace invalid characters by UTF8 replacement char.
  * Add warning that there is no Ox support for messages of type
    headline.
  * Suppress warnings about reading from closed connection if
    go-sendxmpp closes the connection before exiting.
  * Remove unnecessary newlines after stanzas.
  * Fix segfault when authentication fails due to invalid username
    or password.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1738065600">- Update to 0.14.1:
  * Use prettier date format for error messages.
  * Update XEP-0474 to version 0.4.0 (requires go-xmpp &gt;= 0.2.10).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755604800">- Update to 0.15.0:
  Added:
  * Add flag --verbose to show debug information.
  * Add flag --recipients to specify recipients by file.
  * Add flag --retry-connect to try after a waiting time if the connection fails.
  * Add flag --retry-connect-max to specify the amount of retry attempts.
  * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys.
  * Add support for punycode domains.
  Changed:
  * Update gopenpgp library to v3.
  * Improve error detection for MUC joins.
  * Don't try to connect to other SRV record targets if error contains 'auth-failure'.
  * Remove support for old SSDP version (via go-xmpp v0.2.15).
  * Http-upload: Stop checking other disco items after finding upload component.
  * Increase default TLS version to 1.3.
- bsc#1241814 (CVE-2025-22872): This update includes golang.org/x/net/html 0.43.0</changelog>
</package>
<package pkgid="c32837f9a75c70def74b181d99d125f34cc62cf8d70efc93a9399e6afd69b6c4" name="go-sendxmpp" arch="src">
  <version epoch="0" ver="0.15.0" rel="bp156.2.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696075200">- Update to 0.6.2:
  * Properly close connection to server if ^C is pressed in
    interactive mode.
  * Replace invalid characters by UTF8 replacement char.
  * Add warning that there is no Ox support for messages of type
    headline.
  * Suppress warnings about reading from closed connection if
    go-sendxmpp closes the connection before exiting.
  * Remove unnecessary newlines after stanzas.
  * Fix segfault when authentication fails due to invalid username
    or password.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1738065600">- Update to 0.14.1:
  * Use prettier date format for error messages.
  * Update XEP-0474 to version 0.4.0 (requires go-xmpp &gt;= 0.2.10).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755604800">- Update to 0.15.0:
  Added:
  * Add flag --verbose to show debug information.
  * Add flag --recipients to specify recipients by file.
  * Add flag --retry-connect to try after a waiting time if the connection fails.
  * Add flag --retry-connect-max to specify the amount of retry attempts.
  * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys.
  * Add support for punycode domains.
  Changed:
  * Update gopenpgp library to v3.
  * Improve error detection for MUC joins.
  * Don't try to connect to other SRV record targets if error contains 'auth-failure'.
  * Remove support for old SSDP version (via go-xmpp v0.2.15).
  * Http-upload: Stop checking other disco items after finding upload component.
  * Increase default TLS version to 1.3.
- bsc#1241814 (CVE-2025-22872): This update includes golang.org/x/net/html 0.43.0</changelog>
</package>
<package pkgid="75cb3f0b63bd8144867e52f441028fca02aeae39dd1cdf49948075af692b8cff" name="go-sendxmpp" arch="x86_64">
  <version epoch="0" ver="0.15.0" rel="bp156.2.6.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696075200">- Update to 0.6.2:
  * Properly close connection to server if ^C is pressed in
    interactive mode.
  * Replace invalid characters by UTF8 replacement char.
  * Add warning that there is no Ox support for messages of type
    headline.
  * Suppress warnings about reading from closed connection if
    go-sendxmpp closes the connection before exiting.
  * Remove unnecessary newlines after stanzas.
  * Fix segfault when authentication fails due to invalid username
    or password.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1738065600">- Update to 0.14.1:
  * Use prettier date format for error messages.
  * Update XEP-0474 to version 0.4.0 (requires go-xmpp &gt;= 0.2.10).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755604800">- Update to 0.15.0:
  Added:
  * Add flag --verbose to show debug information.
  * Add flag --recipients to specify recipients by file.
  * Add flag --retry-connect to try after a waiting time if the connection fails.
  * Add flag --retry-connect-max to specify the amount of retry attempts.
  * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys.
  * Add support for punycode domains.
  Changed:
  * Update gopenpgp library to v3.
  * Improve error detection for MUC joins.
  * Don't try to connect to other SRV record targets if error contains 'auth-failure'.
  * Remove support for old SSDP version (via go-xmpp v0.2.15).
  * Http-upload: Stop checking other disco items after finding upload component.
  * Increase default TLS version to 1.3.
- bsc#1241814 (CVE-2025-22872): This update includes golang.org/x/net/html 0.43.0</changelog>
</package>
<package pkgid="f27bff52e7f29d2cc694b9172d573321e71cefdfacfe784871610be959a19355" name="go-sendxmpp" arch="aarch64">
  <version epoch="0" ver="0.15.1" rel="bp156.2.9.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1738065600">- Update to 0.14.1:
  * Use prettier date format for error messages.
  * Update XEP-0474 to version 0.4.0 (requires go-xmpp &gt;= 0.2.10).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755604800">- Update to 0.15.0:
  Added:
  * Add flag --verbose to show debug information.
  * Add flag --recipients to specify recipients by file.
  * Add flag --retry-connect to try after a waiting time if the connection fails.
  * Add flag --retry-connect-max to specify the amount of retry attempts.
  * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys.
  * Add support for punycode domains.
  Changed:
  * Update gopenpgp library to v3.
  * Improve error detection for MUC joins.
  * Don't try to connect to other SRV record targets if error contains 'auth-failure'.
  * Remove support for old SSDP version (via go-xmpp v0.2.15).
  * Http-upload: Stop checking other disco items after finding upload component.
  * Increase default TLS version to 1.3.
- bsc#1241814 (CVE-2025-22872): This update includes golang.org/x/net/html 0.43.0</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1762862400">- Update to 0.15.1:
  Added
  * Add XEP-0359 Origin-ID to messages (requires go-xmpp &gt;= v0.2.18).
  Changed
  * HTTP upload: Ignore timeouts on disco IQs as some components do
    not reply.
- Upgrades the embedded golang.org/x/net to 0.46.0
  * Fixes: bsc#1251461, CVE-2025-47911: various algorithms with
    quadratic complexity when parsing HTML documents
  * Fixes: bsc#1251677, CVE-2025-58190: excessive memory consumption
    by 'html.ParseFragment' when processing specially crafted input</changelog>
</package>
<package pkgid="cba8b8f12c53d91f6003081ac7f7a744b3ac1b0110bb1d7bc90d374f96d2ac10" name="go-sendxmpp" arch="i586">
  <version epoch="0" ver="0.15.1" rel="bp156.2.9.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1738065600">- Update to 0.14.1:
  * Use prettier date format for error messages.
  * Update XEP-0474 to version 0.4.0 (requires go-xmpp &gt;= 0.2.10).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755604800">- Update to 0.15.0:
  Added:
  * Add flag --verbose to show debug information.
  * Add flag --recipients to specify recipients by file.
  * Add flag --retry-connect to try after a waiting time if the connection fails.
  * Add flag --retry-connect-max to specify the amount of retry attempts.
  * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys.
  * Add support for punycode domains.
  Changed:
  * Update gopenpgp library to v3.
  * Improve error detection for MUC joins.
  * Don't try to connect to other SRV record targets if error contains 'auth-failure'.
  * Remove support for old SSDP version (via go-xmpp v0.2.15).
  * Http-upload: Stop checking other disco items after finding upload component.
  * Increase default TLS version to 1.3.
- bsc#1241814 (CVE-2025-22872): This update includes golang.org/x/net/html 0.43.0</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1762862400">- Update to 0.15.1:
  Added
  * Add XEP-0359 Origin-ID to messages (requires go-xmpp &gt;= v0.2.18).
  Changed
  * HTTP upload: Ignore timeouts on disco IQs as some components do
    not reply.
- Upgrades the embedded golang.org/x/net to 0.46.0
  * Fixes: bsc#1251461, CVE-2025-47911: various algorithms with
    quadratic complexity when parsing HTML documents
  * Fixes: bsc#1251677, CVE-2025-58190: excessive memory consumption
    by 'html.ParseFragment' when processing specially crafted input</changelog>
</package>
<package pkgid="3942cf90cbb3171777e8d60646aaf1bfe59096c5c7cb63f9ce4365dd2333cef6" name="go-sendxmpp" arch="ppc64le">
  <version epoch="0" ver="0.15.1" rel="bp156.2.9.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1738065600">- Update to 0.14.1:
  * Use prettier date format for error messages.
  * Update XEP-0474 to version 0.4.0 (requires go-xmpp &gt;= 0.2.10).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755604800">- Update to 0.15.0:
  Added:
  * Add flag --verbose to show debug information.
  * Add flag --recipients to specify recipients by file.
  * Add flag --retry-connect to try after a waiting time if the connection fails.
  * Add flag --retry-connect-max to specify the amount of retry attempts.
  * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys.
  * Add support for punycode domains.
  Changed:
  * Update gopenpgp library to v3.
  * Improve error detection for MUC joins.
  * Don't try to connect to other SRV record targets if error contains 'auth-failure'.
  * Remove support for old SSDP version (via go-xmpp v0.2.15).
  * Http-upload: Stop checking other disco items after finding upload component.
  * Increase default TLS version to 1.3.
- bsc#1241814 (CVE-2025-22872): This update includes golang.org/x/net/html 0.43.0</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1762862400">- Update to 0.15.1:
  Added
  * Add XEP-0359 Origin-ID to messages (requires go-xmpp &gt;= v0.2.18).
  Changed
  * HTTP upload: Ignore timeouts on disco IQs as some components do
    not reply.
- Upgrades the embedded golang.org/x/net to 0.46.0
  * Fixes: bsc#1251461, CVE-2025-47911: various algorithms with
    quadratic complexity when parsing HTML documents
  * Fixes: bsc#1251677, CVE-2025-58190: excessive memory consumption
    by 'html.ParseFragment' when processing specially crafted input</changelog>
</package>
<package pkgid="496244c23cecdd07a8141685a5142306c1f9b524a8891f4e3a0ffc4c6008971e" name="go-sendxmpp" arch="s390x">
  <version epoch="0" ver="0.15.1" rel="bp156.2.9.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1738065600">- Update to 0.14.1:
  * Use prettier date format for error messages.
  * Update XEP-0474 to version 0.4.0 (requires go-xmpp &gt;= 0.2.10).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755604800">- Update to 0.15.0:
  Added:
  * Add flag --verbose to show debug information.
  * Add flag --recipients to specify recipients by file.
  * Add flag --retry-connect to try after a waiting time if the connection fails.
  * Add flag --retry-connect-max to specify the amount of retry attempts.
  * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys.
  * Add support for punycode domains.
  Changed:
  * Update gopenpgp library to v3.
  * Improve error detection for MUC joins.
  * Don't try to connect to other SRV record targets if error contains 'auth-failure'.
  * Remove support for old SSDP version (via go-xmpp v0.2.15).
  * Http-upload: Stop checking other disco items after finding upload component.
  * Increase default TLS version to 1.3.
- bsc#1241814 (CVE-2025-22872): This update includes golang.org/x/net/html 0.43.0</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1762862400">- Update to 0.15.1:
  Added
  * Add XEP-0359 Origin-ID to messages (requires go-xmpp &gt;= v0.2.18).
  Changed
  * HTTP upload: Ignore timeouts on disco IQs as some components do
    not reply.
- Upgrades the embedded golang.org/x/net to 0.46.0
  * Fixes: bsc#1251461, CVE-2025-47911: various algorithms with
    quadratic complexity when parsing HTML documents
  * Fixes: bsc#1251677, CVE-2025-58190: excessive memory consumption
    by 'html.ParseFragment' when processing specially crafted input</changelog>
</package>
<package pkgid="04de4d613f6fdd78cf2677d734c5fd07fbd332a83724416e16020922429d4345" name="go-sendxmpp" arch="src">
  <version epoch="0" ver="0.15.1" rel="bp156.2.9.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1738065600">- Update to 0.14.1:
  * Use prettier date format for error messages.
  * Update XEP-0474 to version 0.4.0 (requires go-xmpp &gt;= 0.2.10).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755604800">- Update to 0.15.0:
  Added:
  * Add flag --verbose to show debug information.
  * Add flag --recipients to specify recipients by file.
  * Add flag --retry-connect to try after a waiting time if the connection fails.
  * Add flag --retry-connect-max to specify the amount of retry attempts.
  * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys.
  * Add support for punycode domains.
  Changed:
  * Update gopenpgp library to v3.
  * Improve error detection for MUC joins.
  * Don't try to connect to other SRV record targets if error contains 'auth-failure'.
  * Remove support for old SSDP version (via go-xmpp v0.2.15).
  * Http-upload: Stop checking other disco items after finding upload component.
  * Increase default TLS version to 1.3.
- bsc#1241814 (CVE-2025-22872): This update includes golang.org/x/net/html 0.43.0</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1762862400">- Update to 0.15.1:
  Added
  * Add XEP-0359 Origin-ID to messages (requires go-xmpp &gt;= v0.2.18).
  Changed
  * HTTP upload: Ignore timeouts on disco IQs as some components do
    not reply.
- Upgrades the embedded golang.org/x/net to 0.46.0
  * Fixes: bsc#1251461, CVE-2025-47911: various algorithms with
    quadratic complexity when parsing HTML documents
  * Fixes: bsc#1251677, CVE-2025-58190: excessive memory consumption
    by 'html.ParseFragment' when processing specially crafted input</changelog>
</package>
<package pkgid="61628f380ce7852a31cfb195095e870fae9b51f0df4a4772f3d30b5a93327a55" name="go-sendxmpp" arch="x86_64">
  <version epoch="0" ver="0.15.1" rel="bp156.2.9.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699963200">- Update to 0.7.0:
  * Reply to XEP-0092 software version requests.
  * Add support for PLUS variants of SCRAM authentification mechanisms
    (requires go-xmpp commit 4c385a334c606e8bc387f0a3d4d84975802b3984).
  * Add pinning of last used authentification mechanism if a SCRAM
    mechanism was used.
  * Print every stanza in a new line (requires go-xmpp commit
    31c7eb6919b67b18e901dc45a8e5681040ea7f31).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.8.0:
  Added:
  * Add no parameter --scram-mech-pinning.
  Changed:
  * Refuse to upload a file if upload slot doesn't provide https.
  * Use XEP-0474 instead of SCRAM mechanism pinning to prevent
    downgrade attacks</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705492800">- Update to 0.8.1:
  * Add support for tls-server-end-point channel binding
  * Add experimental support for SOCKS5 proxies using the HTTP_PROXY
    environment variable
  * http-upload: Improved error handling.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1705838400">- Update to 0.8.2:
  * Fix an issue in look up of SRV records (via xmppsrv v0.2.6)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708344000">- Update to 0.8.3:
  * Use a human readable file name for private Ox keys.
  * Fix specifying a message via command line flag -m.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 0.8.4:
  * Properly handle lost connection.
  * Better compatibility with perl sendxmpp config files.
  * Improve file name for private Ox keys.
  * Improve fallback behavior if no SRV records are provided.
  * Remove 100ms sleep before closing the connection. This should
    be no more needed since go-xmpp commit
    9684a8ff690f0d75e284f8845696c5057926d276.
  * Return an error if there is no answer to an IQ within 60s.
  * Check for errors after sending the auth message during
    SCRAM authentication (via go-xmpp v0.1.2).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1711713600">- Update to 0.9.0:
  Changed:
  * Properly close stream if Ctrl+C is pressed in interactive mode.
  * Properly close stream if Ctrl+C is pressed in listening mode.
  * Print OS, architecture and go version for flag --version.
  * Improve closing of connection (via go-xmpp v0.1.4).
  * Don't send stanzas that exceed the size limit provided by
    XEP-0478 (requires go-xmpp &gt;= v0.1.4).
  * Fixed hanging forever in stream close if the server doesn't
    reply with a closing stream element (via go-xmpp &gt;= v0.1.4).
  Added:
  * New command line flag ssdp-off to disable XEP-0474: SASL SCRAM
    Downgrade Protection (requires go-xmpp &gt;= v0.1.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1713182400">- Update to 0.10.0:
  * Fixed a race condition in receiving stanzas (requires go-xmpp &gt;= v0.1.5).
  * Add support for SASL2 and BIND2 (via go-xmpp &gt;= v0.2.0).
  * Add support for FAST authentication (via go-xmpp &gt;= v0.2.0).
  * Add a warning when run by the user root.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1717156800">- Update to 0.11.0:
  Changed:
  * Move private Ox key into JID folder in ~/.local/share/go-sendxmpp.
  * Use fmt.Errorf() instead of errors.New() to create new error messages.
  Added:
  * Add new parameter --subject.
  * Added flag --fast-off to disable XEP-0484: Fast Authentication
    Streamlining Tokens (requires go-xmpp &gt;= 0.2.1)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720785600">- Update to 0.11.1:
  * Fix Ox encryption in interactive mode (do not add the same
    recipient key to the keyring over and over again).
  * Exit with error code if Ox encryption for one recipient fails.
  * Improved handling of perl sendxmpp config files.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1726660800">- Update to 0.11.2:
  * Add Gopenpgp and Xmppsrv version to --version output.
  * Improve selection between StartTLS and DirectTLS.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944000">- Update to 0.11.3:
  * Add go-xmpp library version to --version output (requires go-xmpp &gt;= 0.2.2).
  * Fix XEP-0474: SASL SCRAM Downgrade Protection hash calculation bug (via go-xmpp &gt;= v0.2.3).
  * [gocritic]: Improve code quality.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729944001">- Update to 0.11.4:
  * Fix bug in SCRAM-SHA-256-PLUS (via go-xmpp &gt;= 0.2.4).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622400">- Update to 0.12.0:
  Added:
  * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv &gt;= 0.3.3).
  * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp &gt;= 0.2.5).
  Changed:
  * Disable PLAIN authentication per default.
  * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp &gt;= 0.2.5).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1732622401">- Update to 0.12.1:
  Changed:
  * Print error instead of quitting if a message of type error is received.
  * Allow upload of multiple files.
  Added:
  * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1734350400">- Update to 0.13.0:
  Added:
  * Add --anonymous to support anonymous authentication (requires go-xmpp &gt;= 0.2.8).
  * Add XEP-0480: SASL Upgrade Tasks support (requires go-xmpp &gt;= 0.2.8).
  * Add support for see-other-host stream error (requires go-xmpp &gt;= 0.2.8).
  Changed:
  * Don't automatically try other auth mechanisms if FAST authentication fails.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1735560000">- Update to 0.14.0:
  Added:
  * Add --fast-invalidate to allow invalidating the FAST token.
  Changed:
  * Don't create legacy Ox private key directory in ~/.local/share/go-sendxmpp/oxprivkeys.
  * Delete legacy Ox private key directory if it's empty.
  * Show proper error if saved FAST mechanism isn't usable with current TLS version (requires go-xmpp &gt;= 0.2.9).
  * Print debug output to stdout, not stderr (requires go-xmpp &gt;= 0.2.9).
  * Show RECV: and SEND: prefix for debug output (requires go-xmpp &gt;= 0.2.9).
  * Delete stored fast token if --fast-invalidate and --fast-off are set.
  * Show error when FAST creds are stored but non-FAST mechanism is requested.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1738065600">- Update to 0.14.1:
  * Use prettier date format for error messages.
  * Update XEP-0474 to version 0.4.0 (requires go-xmpp &gt;= 0.2.10).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755604800">- Update to 0.15.0:
  Added:
  * Add flag --verbose to show debug information.
  * Add flag --recipients to specify recipients by file.
  * Add flag --retry-connect to try after a waiting time if the connection fails.
  * Add flag --retry-connect-max to specify the amount of retry attempts.
  * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys.
  * Add support for punycode domains.
  Changed:
  * Update gopenpgp library to v3.
  * Improve error detection for MUC joins.
  * Don't try to connect to other SRV record targets if error contains 'auth-failure'.
  * Remove support for old SSDP version (via go-xmpp v0.2.15).
  * Http-upload: Stop checking other disco items after finding upload component.
  * Increase default TLS version to 1.3.
- bsc#1241814 (CVE-2025-22872): This update includes golang.org/x/net/html 0.43.0</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1762862400">- Update to 0.15.1:
  Added
  * Add XEP-0359 Origin-ID to messages (requires go-xmpp &gt;= v0.2.18).
  Changed
  * HTTP upload: Ignore timeouts on disco IQs as some components do
    not reply.
- Upgrades the embedded golang.org/x/net to 0.46.0
  * Fixes: bsc#1251461, CVE-2025-47911: various algorithms with
    quadratic complexity when parsing HTML documents
  * Fixes: bsc#1251677, CVE-2025-58190: excessive memory consumption
    by 'html.ParseFragment' when processing specially crafted input</changelog>
</package>
<package pkgid="6ac69e8d82de7bd459173c1239e3b5c009fcdec160b7f4f0aca8fe5412bd6801" name="golang-github-google-jsonnet" arch="aarch64">
  <version epoch="0" ver="0.20.0" rel="bp156.2.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1681128000">- Initial package (version 0.19.2-pre2).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1684238400">- Update to version v0.20.0:
  * Bump version to 0.20.0 (#688)
  * Update cpp version (#687)
  * increase go rules version to fix bazel build
  * fix newline issue breaking test
  * Add `std.round` function in standard library. (#683)
  * fix tests
  * Implement std.isEmpty for string (#678)
  * Fixing test cases
  * Add std.xor for 2 booleans
  * Add support to return int based value from native functions golang implementations
  * Updated test cases
  * Fixed test cases
  * Implement std.xor for booleans
  * feat: implement std.sum</changelog>
</package>
<package pkgid="1a37177d9a635086dcf3bfbb2ca0685f17807a9ba80df4e282ea8feb49927990" name="golang-github-google-jsonnet" arch="i586">
  <version epoch="0" ver="0.20.0" rel="bp156.2.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1681128000">- Initial package (version 0.19.2-pre2).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1684238400">- Update to version v0.20.0:
  * Bump version to 0.20.0 (#688)
  * Update cpp version (#687)
  * increase go rules version to fix bazel build
  * fix newline issue breaking test
  * Add `std.round` function in standard library. (#683)
  * fix tests
  * Implement std.isEmpty for string (#678)
  * Fixing test cases
  * Add std.xor for 2 booleans
  * Add support to return int based value from native functions golang implementations
  * Updated test cases
  * Fixed test cases
  * Implement std.xor for booleans
  * feat: implement std.sum</changelog>
</package>
<package pkgid="d1ba6cd043772b2e187c751bf78d6900215a57597f1e5c7c51128e173f05aba5" name="golang-github-google-jsonnet" arch="ppc64le">
  <version epoch="0" ver="0.20.0" rel="bp156.2.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1681128000">- Initial package (version 0.19.2-pre2).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1684238400">- Update to version v0.20.0:
  * Bump version to 0.20.0 (#688)
  * Update cpp version (#687)
  * increase go rules version to fix bazel build
  * fix newline issue breaking test
  * Add `std.round` function in standard library. (#683)
  * fix tests
  * Implement std.isEmpty for string (#678)
  * Fixing test cases
  * Add std.xor for 2 booleans
  * Add support to return int based value from native functions golang implementations
  * Updated test cases
  * Fixed test cases
  * Implement std.xor for booleans
  * feat: implement std.sum</changelog>
</package>
<package pkgid="91115970bc95aaaae001f06d9127042ab02654fd1d852a569380a64cff60a360" name="golang-github-google-jsonnet" arch="s390x">
  <version epoch="0" ver="0.20.0" rel="bp156.2.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1681128000">- Initial package (version 0.19.2-pre2).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1684238400">- Update to version v0.20.0:
  * Bump version to 0.20.0 (#688)
  * Update cpp version (#687)
  * increase go rules version to fix bazel build
  * fix newline issue breaking test
  * Add `std.round` function in standard library. (#683)
  * fix tests
  * Implement std.isEmpty for string (#678)
  * Fixing test cases
  * Add std.xor for 2 booleans
  * Add support to return int based value from native functions golang implementations
  * Updated test cases
  * Fixed test cases
  * Implement std.xor for booleans
  * feat: implement std.sum</changelog>
</package>
<package pkgid="c25044d28158cde6ea480efe5a6eaf8af9d2912b74a536100742c17426ea3ec1" name="golang-github-google-jsonnet" arch="src">
  <version epoch="0" ver="0.20.0" rel="bp156.2.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1681128000">- Initial package (version 0.19.2-pre2).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1684238400">- Update to version v0.20.0:
  * Bump version to 0.20.0 (#688)
  * Update cpp version (#687)
  * increase go rules version to fix bazel build
  * fix newline issue breaking test
  * Add `std.round` function in standard library. (#683)
  * fix tests
  * Implement std.isEmpty for string (#678)
  * Fixing test cases
  * Add std.xor for 2 booleans
  * Add support to return int based value from native functions golang implementations
  * Updated test cases
  * Fixed test cases
  * Implement std.xor for booleans
  * feat: implement std.sum</changelog>
</package>
<package pkgid="2508c26ec4895e4c208c46bc813200f365b01f1960732f85918cd225eb7adbcf" name="golang-github-google-jsonnet" arch="x86_64">
  <version epoch="0" ver="0.20.0" rel="bp156.2.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1681128000">- Initial package (version 0.19.2-pre2).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1684238400">- Update to version v0.20.0:
  * Bump version to 0.20.0 (#688)
  * Update cpp version (#687)
  * increase go rules version to fix bazel build
  * fix newline issue breaking test
  * Add `std.round` function in standard library. (#683)
  * fix tests
  * Implement std.isEmpty for string (#678)
  * Fixing test cases
  * Add std.xor for 2 booleans
  * Add support to return int based value from native functions golang implementations
  * Updated test cases
  * Fixed test cases
  * Implement std.xor for booleans
  * feat: implement std.sum</changelog>
</package>
<package pkgid="cf52ca05b008660600d2c9ab6b75dcdc8baf2f41080ff5bef0f39f11778afa60" name="golang-github-teddysun-v2ray-plugin" arch="noarch">
  <version epoch="0" ver="5.15.1" rel="bp156.2.3.1"/>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1591531200">- Initial package for version 1.3.1</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1609243200">- Switch to v2fly, add switch-to-v2fly.patch</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1615550400">- Update switch-to-v2fly.patch</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1620648000">- Update version to 1.3.1+git20210506.ddd7ab4
  * Support v2ray 4.38+
- Drop switch-to-v2fly.patch.</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1686571200">- Update version to 1.3.2
  * Added support for MIPS64 architecture
  * Update VPN flag
  * Update args.go</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1718452800">- Update version to 5.15.1
  * Change upstream
  * Use v2ray-core 5.15.1
  * Use go 1.22
  * Fix crash (boo#1226385)</changelog>
</package>
<package pkgid="9b0a9fe16d820563e30eee374d2e28da9280af427fc88ca2451be601b7b8a81d" name="golang-github-teddysun-v2ray-plugin" arch="noarch">
  <version epoch="0" ver="5.37.0" rel="bp156.2.6.1"/>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1591531200">- Initial package for version 1.3.1</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1609243200">- Switch to v2fly, add switch-to-v2fly.patch</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1615550400">- Update switch-to-v2fly.patch</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1620648000">- Update version to 1.3.1+git20210506.ddd7ab4
  * Support v2ray 4.38+
- Drop switch-to-v2fly.patch.</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1686571200">- Update version to 1.3.2
  * Added support for MIPS64 architecture
  * Update VPN flag
  * Update args.go</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1718452800">- Update version to 5.15.1
  * Change upstream
  * Use v2ray-core 5.15.1
  * Use go 1.22
  * Fix crash (boo#1226385)</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1748865600">- Update version to 5.25.0
  * Update v2ray-core to v5.25.0
- Add update-vendor.patch, update v2ray-core to v5.33.0 (boo#1243954 and CVE-2025-297850)</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1757592000">- Update version to 5.37.0
  * Update v2ray-core to 5.37.0
- Drop update-vendor.patch, fixed by upstream</changelog>
</package>
<package pkgid="c6ed3baf3d22dd8d25fa39a89e2c8911a7c48884b1dce9977156cc2cee12f407" name="golang-github-v2fly-v2ray-core" arch="noarch">
  <version epoch="0" ver="5.33.0" rel="bp156.2.3.1"/>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1615291200">- update version to 4.35.1
  * Add support for FakeDNS (#395 #406 #696) @yuhan6665
  * Add streamSetting / transport support for outbound front proxy
  * Add zero pseudo encryption for better performance VMess
  * Add support to disable compatibility for legacy VMess MD5 (#596) @dyhkwong
  * Add a faster and more memory-efficient routing rule matcher
    HybridDomainMatcher (#587 #639) @darsvador
  * Add support to disable DNS cache (#699 #705) @CalmLong
  * Fix test HTTP/2 dial timeout (#570) @kslr
  * Fix Trojan panic when UDP dispatcher fails to write response (#599) @maskedeken
  * Fix TCP default ALPN (#716) @AkinoKaede
  * Fix DNS rule index out of range (#727) @Loyalsoldier
  Check https://github.com/v2fly/v2ray-core/releases/tag/v4.35.1 for more info
- update import path to github.com/v2fly/v2ray-core/v4</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1618488000">- update version to 4.37.3
  * Add multiple address host support for DNS (#884 #886 #888)
  * Fix geoiop &amp; geosite load issue (#889)
- update in 4.37.2
  * Add browser forwarder support for Websocket (#818)
  * Add Websocket 0-RTT early data support (#818)
  * Add replay protection for Shadowsocks proxy (#777)
  * Add queryStrategy option for DNS (#794)
  * Add disableFallback &amp; skipFallback option for DNS client (#864)
  * Add inversed GeoIP matching (#860)
  * Add grpcSettings &amp; gunSettings to streamSettings (00879c4) @rprx
  * Fix vprotogen loop dependency (#797) @Loyalsoldier @U-v-U
  * Fix DNS tests timeout due to network instability (#805) @Loyalsoldier
  * Remove AA header flag in DNS query (#817) @Loyalsoldier
  * TProxy: cannot find IPv6 destination in redirect mode (#815) @mzz2017
  * Context: ctx initialization for core.functions (#841) @rurirei
  * Set FakeDNS FakeEnable option dynamically (#879) @sixg0000d @Loyalsoldier
  * Fix Websocket early data 404 bug (#859) @k79e
  * Fix QUIC: disconnect due to timeout (#850) @bhoppi
  * Log: remove package path prefix in logs (#840 0138017 78c1993) @kslr
- update in 4.36.2
  * Fix gRPC max delay unintentionally low (1eaec68) @xiaokangwang
  * Fix core panics when zero domain/full type of rule (#786) @darsvador
- update in 4.36.1
  * Add gRPC/gun transport (#757 #783)
  * Add loopback proxy (#770)
  * Add a new efficient routing rule matcher MphDomainMatcher (#743)
  * FakeDNS: use 198.18.0.0/15 as default FakeDNS IP pool (#779)
- update build needed golang version to 1.16
- keep go.sum go.mod to fix build issue with 'matched no packages'
- add geo files manually since upstream removed them from source</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1622635200">- Update version to 4.39.2
  * Websocket: support header based Websocket early data &amp; its partial browser
  forwarder support
  * GeoData: add a memory efficient geodata decoder called memconservative for
  memory-limited devices #934 #953 #964 #965 #967 #977 Thanks @Loyalsoldier @rurirei
  * HTTP/2 Transport: support to set method and headers for outgoing connections
  * TCP Socket Option: support to set keepalive interval on Linux operating system
  [#962] Thanks @therealak12
  * Fix BrowserForwarder panics with empty config (#954) Thanks @AkinoKaede
  @Loyalsoldier
  * Fix FakeDNS prints error with empty config (#955) Thanks @Loyalsoldier
  * Fix Dual stack FakeDNS Close method (#956) Thanks @Loyalsoldier
  * Fix Observatory starts with empty config &amp; fails to close (#957) Thanks
  @Loyalsoldier
  * Fix Null check on alternative system dialer (#959) Thanks @rurirei
  * Fixed the chain proxy support for gRPC and HTTP/2 transport
  * Fixed leastping logic (#1019) Thanks @fanyiguang
  * Fixed v2ctl unable to create geodata loaders (#1014) Thanks @ght99
- Update in 4.38.3
  - FakeDNS: Added fakedns+others sniffer , based on #697 . Thanks @yuhan6665
  - TLS: A SECURITY improvement that allow the remote peer's TLS certificate
  to be pinned to a known value. Document for TLS is updated
  - Observatory: A component that measure the connectivity of selected outbounds
  The document for Observatory is updated.
  - Routing : leastPing balancing strategy is added. This strategy will select
  a outbound that is alive and completed HTTPS GET request in the least time.
  The document for Routing is updated.
  - Fixed crashing in fake dns. #931 Thanks @IceCodeNew
  - Added IPv6 pool in fake dns by default. #925 Thanks @Loyalsoldier
  - Return ErrEmptyResponse for fakedns. #926 Thanks @sixg0000d
  - Fixed UDP DNS connection cause crash. Thanks @nekohasekai
  - Fixed two typo in comments. Thanks @U-v-U
  * Multi-json support for observatory, browser forwarder.
  [#944] Thanks @ha-ku @AkinoKaede
- Add browserforwarder related v2ray-extra.zip</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1632225600">- Update to 4.42.2
  * TLS: support client certificate authentication #1169 Thanks @qq906907952
  * Socks: support 4/4a version of the socks protocol (#1269 Thanks @nekohasekai)
  * DNS: add option disableFallbackIfMatch for DNS (#1270 Thanks @nekohasekai)
  * DoQ(DNS over QUIC) local mode supports IP destination
  (#1226 Thanks @AkinoKaede)
  * Observatory will now probe outbounds in a deterministic order
  (#1230 Thanks @digglife)
  * DNS response will respect request type(like AAAA, A)
  (#1235 Thanks @AkinoKaede)
  * Fix typo in DNS log output (#1183 Thanks @rurirei)
  * Fix typo in observatory log output (#1211 Thanks @ihotte)
  * Fix version string not updated to match release version
  * Fix IP length not deterministic (#1267 Thanks @Loyalsoldier)
  * Fix HTTP outbound not respect socket config (#1264 Thanks @Vigilans)
  * Fix sockopt.mark type (#1264 Thanks @Vigilans)
  * Fix typo in browser forwarder error message
- Update in 4.41.1
  * VMess: Added 2 VMess experiments AuthenticatedLength and NoTerminationSignal
  [#940] Thanks @RPRX
  * Hardening Draining connection at client side when receiving invalid data.
  [#940] Thanks @RPRX
  * Observatory Support custom probe interval and probe URL. Thanks @nekohasekai
  * Fixed connection stability issue when in h2, grpc transport.
  [#1059] #1058 #1056 Thanks @IRN-Kawakaze @architecturers @lijinglin3
  * Further fixed connection stability issue when in h2, grpc transport.
  check https://github.com/v2fly/v2ray-core/releases/tag/v4.41.1 for more info
- Update in 4.40.1
  * DNS: support DNS over TCP. #983 Thanks @AkinoKaede
  * Fix: new cert issuing is incorrectly delayed. #998 Thanks @bhoppi</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1636632000">- Update version to 4.43.0
  * Send Shadowsocks handshake with payload data if available
  * Custom TCP Fast Open queue length support
  * Fix Trojan fallback cannot get ALPN
  * Fix QueryStrategy ignored
  * Fix UDP connection transport connection terminated unnecessarily
  * refactor: move from io/ioutil to io and os package
  * Fix some tests to use udp.PickPort()
  * Fix flaky TestVMessDynamicPort</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1638360000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * v2ray.service
  * v2ray@.service</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1640433600">- Update version to 4.44.0
  * Fix DoS attack vulnerability in CommandSwitchAccountFactory. (@geeknik)
  * Apply timeout to DNS outbound. (#1330 @nekohasekai)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1672315200">- Update version to 5.2.0
  * New Features
    + uTLS New Security Type uTLS: TLS Client Hello imitation.
    Only client without transport, or with websocket transport is
    currently supported.
    + DNS Support per-client configuration
    + DNS Support specifying domain matcher
    + Replace default Health Ping URL to HTTPS
    + Implement Match and MatchAny for all MatcherGroup, IndexMatcher
  * Fixes
    + Fix typo in error message
    + Support domain string validation
    + Charset of ACAutomationMatcherGroup should accept all ASCII characters
    + Fix logic of domain override
    + Fix HTTP sniff
    + Fix config merger fixes
    + Fix selectLeastLoad() returns wrong number of nodes
    + Fix(freebsd): ReadUDPMsg nil pointer
    + fix: socks4/4a client handshake
    + Add transport original name to listen unix
    + fix Replace "math/rand" with "crypto/rand" in padding generation
    + Fix remove v2ctl from debian/rules
    + Fix getting shared flags for balance info command
    + Fix erroneous prefix checking
    + Fix json.Reader: fill output bytes as much as possible
    + Guard against nil pointer dereference of (*NetworkList)
  * Chores
    + Add tests for idn support
    + Refactor: replace netaddr package with netipx</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1672920000">- Fix service command: "run" is required in v2ray 5.x</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1686571200">- Update version to 5.7.0
  * meek: a new transport protocol meek is added.
  * HTTP Proxy Add h1SkipWaitForReply Option to HTTP Proxy Protocol
  * set v2ray binary as an entrypoint in container images
  * Add Integrated Container Image Building
  * Skip validating on empty http host config
  * Add PacketAddr support to Trojan
  * DomainStrategy support for all outbounds
  * Add an option to replace destination address in access log with sniffed domain
  * uTLS uTLS ALPN Control
  * uTLS New Security Type uTLS: TLS Client Hello imitation
  * DNS Support per-client configuration
  * DNS Support specifying domain matcher
  * Add bind to device to Windows and Darwin
  * Replace default Health Ping URL to HTTPS for burst observatory
  * Implement Match and MatchAny for all MatcherGroup
  * Fix bugs</changelog>
  <changelog author="opensuse-packaging &lt;opensuse-packaging@opensuse.org&gt;" date="1687694400">- Drop vendor in filelist</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1696766400">- Update version to 5.8.0
  * DNS over QUIC should not have "http/1.1" and "h2" ALPNs
  * Migrate to quic-go v0.36.0
  * Fix: parse for the CipherType of Shadowsocks in simplified config
  * Fix protocol matching in routing
  * Fix CI breakage in 5.7.0
- Build by golang 1.20, workaround build error on golang 1.21</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1701604800">- Update version to 5.12.1
  * Shadowsocks2022 Client Support
  * Apply DomainStrategy to outbound target
  * Add DomainStrategy to JSONv5 outbound
  * Add sniffing for TUN
  * Add HTTPUpgrade transport
  * It is a reduced version of WebSocket Transport that can pass many
    reverse proxies and CDNs without running a WebSocket protocol stack
  * TUN Support
  * Add uTLS support for h2 transport
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1713096000">- Update version to 5.15.1
  * feat: RandomStrategy AliveOnly
  * Improve container image tags and timestamp
  * Add delay_auth_write to Socks5 Client Advanced Config
  * Add MaxMin TLS version support in TLS Setting
  * feat: RandomStrategy AliveOnly
  * Improve container image tags and timestamp
  * Fixed an encrypted traffic's malleable vulnerability that allow
    integrity corruption by an attacker with a privileged network
    position to silently drop segments of traffic from an encrypted
    traffic stream.
  * Update documents
  * Fix bugs
- Update vendor, fix CVE-2024-22189 boo#1222488</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1718539200">- Update version to 5.16.1
  * Add Keep-Alive to removed headers</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1726228800">- Update version to 5.18.0
  * Add timeout for http request roundtripper
  * Fix ss2022 auth reader size overflow
  * Add pie build mode to all binary builds
  * Support "services" root config in cfgv4
  * packet_encoding for config v4
  * add MPTCP support
  * Add (Experimental) Meyka Building Blocks to request Transport
  * Add timeout for http request roundtripper
  * Hysteria2: Add Hysteria2 Protocol
  * Add AllowInsecureIfPinnedPeerCertificate option to tls security
  * Add tls certChainHash command
  * add support for socket activation
  * Add pprof flag for debugging
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1732276800">- Update version to 5.22.0
  * Add packetEncoding for Hysteria
  * Add ECH Client Support
  * Add support for parsing some shadowsocks links
  * Add Mekya Transport
  * Fix bugs</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1743940800">- Update version to 5.29.3
  * Enable restricted mode load for http protocol client
  * Correctly implement QUIC sniffer when handling multiple initial packets
  * Fix unreleased cache buffer in QUIC sniffing
  * A temporary testing fix for the buffer corruption issue
  * QUIC Sniffer Restructure</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1746360000">- Update version to 5.31.0
  * Add Dns Proxy Response TTL Control
  * Fix call newError Base with a nil value error
  * Update vendor (boo#1235164)</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1748865600">- Update version to 5.33.0
  * bump github.com/quic-go/quic-go from 0.51.0 to 0.52.0(boo#1243946 and CVE-2025-297850)
  * Update other vendor source</changelog>
</package>
<package pkgid="fdadfe2c0675f024034f38b9cc98fb8e08ba15ecdbdb319868e450265a0db379" name="gosec" arch="aarch64">
  <version epoch="0" ver="2.22.4" rel="bp156.2.3.2"/>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1670846400">- Switch OBS source service from tar_scm to obs_scm.
  * Embed version info with go build arg GIT_TAG="v%{version}"
  * _service obs_scm switch from tar_scm
  * _service obs_scm switch param revision (branch) to version (tag)
  * _service tar set to buildtime
  * _service recompress set to buildtime
  * _service recompress change tar compression from gz to xz</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1675684800">* Update to version 2.15.0
- Fix dependencies after renovate update
- chore(deps): update all dependencies (#922)
- Update to Go 1.20 and fix unit tests (#923)
- Update Go to latest version (#920)
- Update hardcoded_credentials.go fix: adaper equal expr which const value at left (#917)
- Fix github latest URL (#918)
- Fix github release url (#916)
- chore(deps): update module github.com/onsi/ginkgo/v2 to v2.7.0 (#914)
- Update Go version in CI script (#913)
- Track back when a file path was sanitized with filepath.Clean (#912)
- Fix the TLS config rule when parsing the settings from a variable (#911)
- Fix build after updating the dependencies (#910)
- chore(deps): update all dependencies (#909)
- Fix dependencies after renovate update (#907)
- chore(deps): update all dependencies (#906)
- Update slack badge and link (#905)
- Auto-detect TLS MinVersion integer base (#903)
- Adding s390x support (#902)
- chore(deps): update all dependencies (#904)
- chore(deps): update all dependencies (#898)
- Additional types for bad defer check (#897)
- chore(deps): update all dependencies (#894)
- chore(deps): update all dependencies (#892)
- Update Go version in CI scripts (#889)
- chore(deps): update all dependencies (#888)
- Allow to override build date with SOURCE_DATE_EPOCH (#887)
- chore(deps): update all dependencies (#886)
- chore(deps): update all dependencies (#884)
- fileperms: bitwise permission comparison (#883)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1684843200">- Update to version 2.16.0
  * Update cosign to latest version in release Github action
  * chore(deps): update all dependencies
  * Update go version in build and release scripts
  * chore(deps): update all dependencies
  * Update Go version to 1.20.3
  * chore(deps): update all dependencies
  * Fix for Dockerfile smell DL3059
  * README: upgrade GitHub action in examples
  * enable ginkgolinter linter
  * chore(deps): update all dependencies
  * correct gci linter
  * remove deprecated linters
  * increase timeout to 5m
  * chore(deps): update all dependencies
  * Use the latest version
  * Fix some linting warnings
  * Fix lint warning
  * Bump the go versions and golanci
  * chore(deps): update all dependencies
  * Check nil pointer when variable is declared in a different file
  * fix dead link to issue.go in README.md
  * Remove rule G307 which checks when an error is not handled when a file or socket connection is closed
  * Fix rule index reference into sarif report
  * Bump golang.org/x/net from 0.6.0 to 0.7.0
  * Format file
  * Use the gosec issue in the go analysers
  * Fix file formatting
  * Update Go version in CI builds
  * Fix method name in the comment
  * Extract the issue in its own package
  * Add support for Go analysis framework and SSA code representation
  * chore(deps): update all dependencies
  * Remove the version form ci github action
  * Pin github action to latest release version 2.15.0
  * Revert the image tag in github action until a working solution is found
  * Fix version interpolation in github action image
  * Add gosec version as an input parameter to GitHub action
  * Update release build script</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1691150400">- Require go 1.20</changelog>
  <changelog author="Felix Niederwanger felix.niederwanger@suse.com" date="1692273600">- Update to version 2.17.0:
  * Update cosign to version v2.1.1 (#1000)
  * Enable go 1.21.0 in the CI build (#998)
  * chore(deps): update all dependencies (#997)
  * Update to go version 1.20.7 and 1.19.12 (#993)
  * chore(deps): update all dependencies (#992)
  * chore(deps): update module github.com/onsi/gomega to v1.27.10 (#991)
  * fix: correctly identify infixed concats as potential SQL injections (#987)
  * chore(deps): update all dependencies (#989)
  * Add a new flag terse to show only the results and summary (#986)
  * Switch to a maintained fork of zxcvbn module (#984)</changelog>
  <changelog author="felix.niederwanger@suse.com" date="1696852800">- Update to version 2.18.0:
  * Update the action to use gosec version v2.18.0 (#1029)
  * Use a step ID in github release action to get the digest of the image (#1028)
  * Update to go version 1.21.2 and 1.20.9 (#1027)
  * chore(deps): update all dependencies (#1026)
  * Enable gochecknoinits; fix lint issues; use consts for some vars (#1022)
  * Fix typos in struct fields, comments, and docs (#1023)
  * chore(deps): update all dependencies
  * Fix lint warning
  * Add a new rule which detects when a file is created with os.Create but the configured permissions are less than 0666
  * Fix lint warnings
  * Update ginkgo to latest version
  * Redesign and reimplement the slice out of bounds check using SSA code representation
  * docs: add reMarkable to users list
  * chore(deps): update all dependencies
  * Drop support for go 1.19.x since go team doesn't ship anymore security fixes for it
  * Update to latest go version
  * chore(deps): update all dependencies (#1011)
  * Fix hardcoded_credentials rule to only match on more specific patterns (#1009)
  * chore(deps): update all dependencies (#1008)
  * Exclude maps from slince bounce check rule (#1006)
  * Ignore struct pointers in G601 (#1003)
  * Update gosec image version to 2.17.0 in the Github action (#1002)
- Packaging improvements:
  * Use BuildRequires: golang(API) &gt;= 1.20 instead of go &gt;= 1.20.
    The go metapackage points to a single go version that
    increments at a date TBD after each go1.x major release. The
    expression golang(API) is available immediately upon each go1.x
    major release and is stable for expressing the minimum version
    or a temporarily pinned version.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1696852801">- Packaging improvements:
  * Summary and Description clarify the purpose of this CLI tool
  * Use Group: Development/Languages/Go instead of Other
  * Drop BuildRequires: golang-packaging. The recommended Go
    toolchain dependency is BuildRequires: golang(API) &gt;= 1.x or
    optionally the metapackage BuildRequires: go
  * Drop Requires: golang-packaging. The original macros for file
    movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove %%{go_nostrip} macro which is no longer recommended</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1697544000">- Update to version 2.18.1:
  * chore(deps): update all dependencies
  * Update gosec to version 2.18.1 in the action
  * Update cosign version to v2.2.0
  * Refactor how ignored issues are tracked
  * Restrict the maximum depth when tracking the slice bounds
  * Handle empty ssa results
  * Handle gracefully any panic that occurs when building the SSA representation of a package
  * Fix typo
  * Handle new function when getting the call info in case is overriden
  * Bump golang.org/x/net from 0.16.0 to 0.17.0 (#1037)
  * Update to Go 1.21.3 and 1.20.10 (#1035)
  * Update the list of unsafe functions detected by the unsafe rule (#1033)</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- Update to version 2.18.2:
  * Added ppc64le support
  * chore(deps): update all dependencies
  * Ensure ignores are handled properly for multi-line issues
  * Update Go to version 1.21.4 and 1.20.11
  * chore(deps): update module golang.org/x/text to v0.14.0
  * chore(deps): update all dependencies
  * Remove the hardcoded GOOS value when building the Linux binary to enable support for container image for ARM
  * Avoid allocations with `(*regexp.Regexp).MatchString`
  * Fix some typos
  * Update local installation instructions by removing the details for Go 1.16</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913601">- update to 2.18.2:
  * Disable dot-imports in revive linter
  * Run the gosec with data race detector active during
    tests
  * Fix data race in the analyzer
  * Fix test that checks the overriden nosec directive
  * Clean global state in flgs tests
  * Format the file
  * Update README with details which describe the current
    of #nosec
  * Ensure the ignores are parsed before analysing the
    package</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1707825600">- Update to version 2.19.0:
  * Update gosec version to v2.19.0 in the Github action
  * Update CI to go version 1.22
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update dependency babel-standalone to v7.23.7
  * chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
  * chore(deps): update all dependencies
  * chore(deps): update actions/setup-go action to v5
  * Fix lint warnings by properly formatting the files
  * chore: Refactor Sample Code to Separate Files
  * Update go version to 1.21.5 and 1.20.12 (#1084)
  * chore(deps): update all dependencies (#1080)
  * Ignore the issues from generated files when using the analysis framework (#1079)
  * Update README with upload-sarif v2 (#1078)
  * chore(deps): update dependency babel-standalone to v7.23.4</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1715860800">- Update to version 2.20.0:
  * Update docker image in action to v2.20.0
  * Catch os.ModePerm permissions in os.WriteFile
  * Add a unit test to detect the false negative in rule G306 for os.ModePerm permissions
  * Add filepath.EvalSymlinks to clean functions in rule G304
  * chore(deps): update all dependencies
  * Update Go to version 2.22.3 in CI and release
  * chore(deps): update module golang.org/x/text to v0.15.0
  * chore(deps): update all dependencies
  * chore(deps): update module github.com/onsi/gomega to v1.33.0
  * Update to go 1.22.2
  * chore(deps): update all dependencies
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
  * chore(deps): update all dependencies
  * fix(helpers/goversion): get from go.mod
  * chore: fix function name
  * chore(deps): update all dependencies
  * Format the imports using the gci tool
  * Fixup: delete unused variable
  * Fix test: update test to comply with the spec of generated sources
  * Refactor: use standard function to check if a file is generated
  * Fix lint warnings
  * Add support for math/rand/v2 added in Go 1.22
  * Skip the G601 tests for Go version 1.22
  * Update go version to 1.22.1 and 1.21.8
  * Ignore 'implicit memory aliasing' rule for Go 1.22+
  * chore(deps): update all dependencies
  * chore(deps): update module golang.org/x/tools to v0.18.0
  * fix(hardcoded): remove duplicated `Stripe API Key`</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1725969600">- Update to version 2.21.2:
  * Update the github action to v2.21.2 (#1218)
  * Update the SARIF schema URL (#1217)
  * Update go version to 1.23.1 and 1.22.7 (#1216)
  * chore(deps): update all dependencies (#1215)
  * Update gosec version to v2.21.1 in github action (#1213)
  * Rollback the SARIF version to 2.1 since github doesn't support 2.2 (#1210)
  * Update gosec in github action to v2.21.0 (#1208)
  * Update cosign version to v2.4.0 in release github workflow (#1207)
  * Improvement the int conversion overflow logic to handle bound checks (#1194)
  * fix: G602 support for nested conditionals with bounds check (#1201)
  * Update go.mod to sue go 1.22.0 toolchain
  * chore(deps): update all dependencies
  * Make variable name more clear
  * Make variable names more explicity and reduce duplications
  * Fix formatting
  * Refactor to reduce some fuctions and variable names
  * Pass the value argument directly since is an interface
  * Added suggested changes
  * Added another test case in order to increase code coverage
  * Removed function parameter which is always the same
  * Formatting problems(CI was not passing)
  * Updated analyzer to use new way of initialization
  * Migrated the rule to the analyzers folder
  * Refractored code a little bit
  * Added new rule G407(hardcoded IV/nonce)
  * Fix conversion overflow false positive when using ParseUint
  * Add a build step to measure the scan perfomance
  * Fix conversion overflow false positives when they are checked or pre-determined
  * Update go.mod
  * chore(deps): update all dependencies
  * Fix false positive in conversion overflow check from uint8/int8 type
  * Disable staticcheck SA1019 rule
  * Update the golangci linters
  * Add more test to cover more use cases for G115 rule
  * Allow excluding analyzers globally (#1180)
  * Update to Go 1.23.0 (#1183)
  * chore(deps): update all dependencies (#1182)
  * Read the AI API key also from an environment variable (#1181)
  * Add support to generate auto fixes using LLM (AI) (#1177)
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update dependency babel-standalone to v7.24.10
  * Resolve underlying type to detect overflows in type aliases
  * chore(deps): update dependency babel-standalone to v7.24.8
  * Fix multifile ignores
  * Add -enable-audit cli flag
  * Update to go 1.22.5 and 1.21.12
  * chore(deps): update all dependencies
  * Added more rules
  * Fixed coverage workflow
  * Fixed CI workflow
  * Minor changes
  * Split the G401 rule into two separate ones
  * Updated G401 corresponding CWE
  * chore(deps): update docker/build-push-action action to v6
  * Update to go versions to 1.21.11 and 1.22.4
  * chore(deps): update all dependencies
  * Fix nosec when applied to a block
  * Add more types to templates rule
  * Map the G115 rule to an CWE ID
  * chore(deps): update all dependencies
  * Update README with G115 rule description
  * Remove deprecated megacheck linter from golangci
  * Format imports
  * Update .gitignore
  * Add a new rule to detect integer overflow on integer types conversion
  * feat: add env var to override the Go version detection
  * Use the proper logic when disabling the go module version
  * Update the README with some details related to Go version used by the rules
  * Add an environment varialbe which disables the parsing of Go version from module file
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1726660800">- Update to version 2.21.3:
  * Update gosec version to v2.21.3 in github action (#1227)
  * Populate the fixes only when autofix is not empty (#1226)
  * chore(deps): update all dependencies (#1223)
  * G115 Struct Attribute Checks (#1221)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1727352000">- Update to version 2.21.4:
  * Update the gosec to v2.21.4 in the Github action
  * Add the version into goreleaser config
  * chore(deps): update module google.golang.org/api to v0.198.0 (#1233)
  * Prevent panic: unexpected constant value: &lt;nil&gt; (#1232)
  * Fix running single analyzer which isn't a rule bug (#1231)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1736424000">- Update to version 2.22.0:
  * Update what message for G104 (#1282)
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.22.2 (#1281)
  * chore(deps): update all dependencies (#1280)
  * chore(deps): update all dependencies (#1279)
  * Simplify sortIssues implementation (#1277)
  * Enable testifylint and fix up lint issues (#1276)
  * Refactor AppendError to check for build.NoGoError (#1273)
  * chore(deps): update module golang.org/x/net to v0.33.0 [security] (#1275)
  * Update README.md (#1274)
  * Rule documentation updates (#1272)
  * Replace old golang.org links with new go.dev (#1271)
  * Refactor AppendError to use strings.Contains (#1270)
  * Simplify Analyzer.ignore by reducing nesting (#1269)
  * Improve capitalization in AI API flags descriptions (#1267)
  * Remove unused golint dependency (#1266)
  * Simplify tests by using GinkgoT().TempDir() (#1265)
  * Documentation on adding new rules and analyzers (#1262)
  * chore(deps): update all dependencies (#1268)
  * Update to go 1.22.10 and 1.23.4 versions (#1264)
  * chore(deps): update module golang.org/x/crypto to v0.31.0 [security] (#1263)
  * chore(deps): update all dependencies (#1261)
  * chore(deps): update module github.com/onsi/gomega to v1.36.0 (#1259)
  * fix: revive.redefines-builtin-id lint warnings (#1257)
  * Fix typos in comments and fields
  * Remove the decryption funtions/methods from G407 check
  * Upate go to version 1.23.3 and 1.22.9
  * Fix G115 false positive when going from parsed uint to larger int
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * Update go version to 1.23.2 and 1.22.8
  * chore(deps): update module google.golang.org/api to v0.201.0
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * Fix the cosign step to authenticate with the container registry
  * chore(deps): update module google.golang.org/api to v0.199.0</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1739448000">- Update to version 2.22.1:
  * Update cosign to v2.4.2 (#1303)
  * Add support for go 1.24 and phased out support for go 1.22 (#1302)
  * chore(deps): update all dependencies (#1300)
  * Update to go version 1.23.6 and 1.22.12 (#1299)
  * chore(deps): update module google.golang.org/api to v0.219.0 (#1296)
  * chore(deps): update module google.golang.org/api to v0.218.0 (#1294)
  * Add test to conver unit parssing for G115 rule (#1293)
  * Update to go version 1.23.5 and 1.22.11 (#1291)
  * chore(deps): update all dependencies (#1290)
  * Update gosec in github action to 2.22.0 (#1286)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1741262400">- Update to version 2.22.2:
  * Update to go version 1.24.1 and 1.23.7 (#1313)
  * chore(deps): update all dependencies (#1310)
  * chore(deps): update all dependencies (#1308)
  * Update gosec version in the GitHub action to v2.22.1 (#1307)
  * chore(deps): update module google.golang.org/api to v0.221.0 (#1305)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.de&gt;" date="1744027200">- Update to version 2.22.3:
  * Update version in 'action.yml' to 2.22.3 (anticipating next version (#1332)
  * Update go version to 1.24.2 and 1.23.8 (#1331)
  * remove G113. It only affects old/unsupported versions of Go (#1328)
  * chore(deps): update all dependencies (#1325)
  * Add SSOJet (#1320)
  * chore(deps): update all dependencies (#1319)
  * Update the integrity sha for babel dependency in html report (#1316)
  * Add support for `//gosec:disable` directive (#1314)
  * chore(deps): update all dependencies (#1315)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.de&gt;" date="1746705600">- Update to version 2.22.4:
  * Update to go version 1.24.3 and 1.23.9
  * update: updated the build command to include version metadata
  * chore(deps): update all dependencies
  * Update the AI provider API key value when provided as an argument
  * chore(deps): update module google.golang.org/api to v0.230.0
  * chore(deps): update module google.golang.org/api to v0.229.0
  * chore(deps): update all dependencies
  * Comment the reason why the file can be nil when an issue is created
  * Handle nil file when creating a new issue
  * chore(deps): update all dependencies (#1333)</changelog>
</package>
<package pkgid="ac7d2edf6a897ab72e1ab4ebca983912353d07c909a810c8228722d53b7b9707" name="gosec" arch="ppc64le">
  <version epoch="0" ver="2.22.4" rel="bp156.2.3.2"/>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1670846400">- Switch OBS source service from tar_scm to obs_scm.
  * Embed version info with go build arg GIT_TAG="v%{version}"
  * _service obs_scm switch from tar_scm
  * _service obs_scm switch param revision (branch) to version (tag)
  * _service tar set to buildtime
  * _service recompress set to buildtime
  * _service recompress change tar compression from gz to xz</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1675684800">* Update to version 2.15.0
- Fix dependencies after renovate update
- chore(deps): update all dependencies (#922)
- Update to Go 1.20 and fix unit tests (#923)
- Update Go to latest version (#920)
- Update hardcoded_credentials.go fix: adaper equal expr which const value at left (#917)
- Fix github latest URL (#918)
- Fix github release url (#916)
- chore(deps): update module github.com/onsi/ginkgo/v2 to v2.7.0 (#914)
- Update Go version in CI script (#913)
- Track back when a file path was sanitized with filepath.Clean (#912)
- Fix the TLS config rule when parsing the settings from a variable (#911)
- Fix build after updating the dependencies (#910)
- chore(deps): update all dependencies (#909)
- Fix dependencies after renovate update (#907)
- chore(deps): update all dependencies (#906)
- Update slack badge and link (#905)
- Auto-detect TLS MinVersion integer base (#903)
- Adding s390x support (#902)
- chore(deps): update all dependencies (#904)
- chore(deps): update all dependencies (#898)
- Additional types for bad defer check (#897)
- chore(deps): update all dependencies (#894)
- chore(deps): update all dependencies (#892)
- Update Go version in CI scripts (#889)
- chore(deps): update all dependencies (#888)
- Allow to override build date with SOURCE_DATE_EPOCH (#887)
- chore(deps): update all dependencies (#886)
- chore(deps): update all dependencies (#884)
- fileperms: bitwise permission comparison (#883)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1684843200">- Update to version 2.16.0
  * Update cosign to latest version in release Github action
  * chore(deps): update all dependencies
  * Update go version in build and release scripts
  * chore(deps): update all dependencies
  * Update Go version to 1.20.3
  * chore(deps): update all dependencies
  * Fix for Dockerfile smell DL3059
  * README: upgrade GitHub action in examples
  * enable ginkgolinter linter
  * chore(deps): update all dependencies
  * correct gci linter
  * remove deprecated linters
  * increase timeout to 5m
  * chore(deps): update all dependencies
  * Use the latest version
  * Fix some linting warnings
  * Fix lint warning
  * Bump the go versions and golanci
  * chore(deps): update all dependencies
  * Check nil pointer when variable is declared in a different file
  * fix dead link to issue.go in README.md
  * Remove rule G307 which checks when an error is not handled when a file or socket connection is closed
  * Fix rule index reference into sarif report
  * Bump golang.org/x/net from 0.6.0 to 0.7.0
  * Format file
  * Use the gosec issue in the go analysers
  * Fix file formatting
  * Update Go version in CI builds
  * Fix method name in the comment
  * Extract the issue in its own package
  * Add support for Go analysis framework and SSA code representation
  * chore(deps): update all dependencies
  * Remove the version form ci github action
  * Pin github action to latest release version 2.15.0
  * Revert the image tag in github action until a working solution is found
  * Fix version interpolation in github action image
  * Add gosec version as an input parameter to GitHub action
  * Update release build script</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1691150400">- Require go 1.20</changelog>
  <changelog author="Felix Niederwanger felix.niederwanger@suse.com" date="1692273600">- Update to version 2.17.0:
  * Update cosign to version v2.1.1 (#1000)
  * Enable go 1.21.0 in the CI build (#998)
  * chore(deps): update all dependencies (#997)
  * Update to go version 1.20.7 and 1.19.12 (#993)
  * chore(deps): update all dependencies (#992)
  * chore(deps): update module github.com/onsi/gomega to v1.27.10 (#991)
  * fix: correctly identify infixed concats as potential SQL injections (#987)
  * chore(deps): update all dependencies (#989)
  * Add a new flag terse to show only the results and summary (#986)
  * Switch to a maintained fork of zxcvbn module (#984)</changelog>
  <changelog author="felix.niederwanger@suse.com" date="1696852800">- Update to version 2.18.0:
  * Update the action to use gosec version v2.18.0 (#1029)
  * Use a step ID in github release action to get the digest of the image (#1028)
  * Update to go version 1.21.2 and 1.20.9 (#1027)
  * chore(deps): update all dependencies (#1026)
  * Enable gochecknoinits; fix lint issues; use consts for some vars (#1022)
  * Fix typos in struct fields, comments, and docs (#1023)
  * chore(deps): update all dependencies
  * Fix lint warning
  * Add a new rule which detects when a file is created with os.Create but the configured permissions are less than 0666
  * Fix lint warnings
  * Update ginkgo to latest version
  * Redesign and reimplement the slice out of bounds check using SSA code representation
  * docs: add reMarkable to users list
  * chore(deps): update all dependencies
  * Drop support for go 1.19.x since go team doesn't ship anymore security fixes for it
  * Update to latest go version
  * chore(deps): update all dependencies (#1011)
  * Fix hardcoded_credentials rule to only match on more specific patterns (#1009)
  * chore(deps): update all dependencies (#1008)
  * Exclude maps from slince bounce check rule (#1006)
  * Ignore struct pointers in G601 (#1003)
  * Update gosec image version to 2.17.0 in the Github action (#1002)
- Packaging improvements:
  * Use BuildRequires: golang(API) &gt;= 1.20 instead of go &gt;= 1.20.
    The go metapackage points to a single go version that
    increments at a date TBD after each go1.x major release. The
    expression golang(API) is available immediately upon each go1.x
    major release and is stable for expressing the minimum version
    or a temporarily pinned version.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1696852801">- Packaging improvements:
  * Summary and Description clarify the purpose of this CLI tool
  * Use Group: Development/Languages/Go instead of Other
  * Drop BuildRequires: golang-packaging. The recommended Go
    toolchain dependency is BuildRequires: golang(API) &gt;= 1.x or
    optionally the metapackage BuildRequires: go
  * Drop Requires: golang-packaging. The original macros for file
    movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove %%{go_nostrip} macro which is no longer recommended</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1697544000">- Update to version 2.18.1:
  * chore(deps): update all dependencies
  * Update gosec to version 2.18.1 in the action
  * Update cosign version to v2.2.0
  * Refactor how ignored issues are tracked
  * Restrict the maximum depth when tracking the slice bounds
  * Handle empty ssa results
  * Handle gracefully any panic that occurs when building the SSA representation of a package
  * Fix typo
  * Handle new function when getting the call info in case is overriden
  * Bump golang.org/x/net from 0.16.0 to 0.17.0 (#1037)
  * Update to Go 1.21.3 and 1.20.10 (#1035)
  * Update the list of unsafe functions detected by the unsafe rule (#1033)</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- Update to version 2.18.2:
  * Added ppc64le support
  * chore(deps): update all dependencies
  * Ensure ignores are handled properly for multi-line issues
  * Update Go to version 1.21.4 and 1.20.11
  * chore(deps): update module golang.org/x/text to v0.14.0
  * chore(deps): update all dependencies
  * Remove the hardcoded GOOS value when building the Linux binary to enable support for container image for ARM
  * Avoid allocations with `(*regexp.Regexp).MatchString`
  * Fix some typos
  * Update local installation instructions by removing the details for Go 1.16</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913601">- update to 2.18.2:
  * Disable dot-imports in revive linter
  * Run the gosec with data race detector active during
    tests
  * Fix data race in the analyzer
  * Fix test that checks the overriden nosec directive
  * Clean global state in flgs tests
  * Format the file
  * Update README with details which describe the current
    of #nosec
  * Ensure the ignores are parsed before analysing the
    package</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1707825600">- Update to version 2.19.0:
  * Update gosec version to v2.19.0 in the Github action
  * Update CI to go version 1.22
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update dependency babel-standalone to v7.23.7
  * chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
  * chore(deps): update all dependencies
  * chore(deps): update actions/setup-go action to v5
  * Fix lint warnings by properly formatting the files
  * chore: Refactor Sample Code to Separate Files
  * Update go version to 1.21.5 and 1.20.12 (#1084)
  * chore(deps): update all dependencies (#1080)
  * Ignore the issues from generated files when using the analysis framework (#1079)
  * Update README with upload-sarif v2 (#1078)
  * chore(deps): update dependency babel-standalone to v7.23.4</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1715860800">- Update to version 2.20.0:
  * Update docker image in action to v2.20.0
  * Catch os.ModePerm permissions in os.WriteFile
  * Add a unit test to detect the false negative in rule G306 for os.ModePerm permissions
  * Add filepath.EvalSymlinks to clean functions in rule G304
  * chore(deps): update all dependencies
  * Update Go to version 2.22.3 in CI and release
  * chore(deps): update module golang.org/x/text to v0.15.0
  * chore(deps): update all dependencies
  * chore(deps): update module github.com/onsi/gomega to v1.33.0
  * Update to go 1.22.2
  * chore(deps): update all dependencies
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
  * chore(deps): update all dependencies
  * fix(helpers/goversion): get from go.mod
  * chore: fix function name
  * chore(deps): update all dependencies
  * Format the imports using the gci tool
  * Fixup: delete unused variable
  * Fix test: update test to comply with the spec of generated sources
  * Refactor: use standard function to check if a file is generated
  * Fix lint warnings
  * Add support for math/rand/v2 added in Go 1.22
  * Skip the G601 tests for Go version 1.22
  * Update go version to 1.22.1 and 1.21.8
  * Ignore 'implicit memory aliasing' rule for Go 1.22+
  * chore(deps): update all dependencies
  * chore(deps): update module golang.org/x/tools to v0.18.0
  * fix(hardcoded): remove duplicated `Stripe API Key`</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1725969600">- Update to version 2.21.2:
  * Update the github action to v2.21.2 (#1218)
  * Update the SARIF schema URL (#1217)
  * Update go version to 1.23.1 and 1.22.7 (#1216)
  * chore(deps): update all dependencies (#1215)
  * Update gosec version to v2.21.1 in github action (#1213)
  * Rollback the SARIF version to 2.1 since github doesn't support 2.2 (#1210)
  * Update gosec in github action to v2.21.0 (#1208)
  * Update cosign version to v2.4.0 in release github workflow (#1207)
  * Improvement the int conversion overflow logic to handle bound checks (#1194)
  * fix: G602 support for nested conditionals with bounds check (#1201)
  * Update go.mod to sue go 1.22.0 toolchain
  * chore(deps): update all dependencies
  * Make variable name more clear
  * Make variable names more explicity and reduce duplications
  * Fix formatting
  * Refactor to reduce some fuctions and variable names
  * Pass the value argument directly since is an interface
  * Added suggested changes
  * Added another test case in order to increase code coverage
  * Removed function parameter which is always the same
  * Formatting problems(CI was not passing)
  * Updated analyzer to use new way of initialization
  * Migrated the rule to the analyzers folder
  * Refractored code a little bit
  * Added new rule G407(hardcoded IV/nonce)
  * Fix conversion overflow false positive when using ParseUint
  * Add a build step to measure the scan perfomance
  * Fix conversion overflow false positives when they are checked or pre-determined
  * Update go.mod
  * chore(deps): update all dependencies
  * Fix false positive in conversion overflow check from uint8/int8 type
  * Disable staticcheck SA1019 rule
  * Update the golangci linters
  * Add more test to cover more use cases for G115 rule
  * Allow excluding analyzers globally (#1180)
  * Update to Go 1.23.0 (#1183)
  * chore(deps): update all dependencies (#1182)
  * Read the AI API key also from an environment variable (#1181)
  * Add support to generate auto fixes using LLM (AI) (#1177)
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update dependency babel-standalone to v7.24.10
  * Resolve underlying type to detect overflows in type aliases
  * chore(deps): update dependency babel-standalone to v7.24.8
  * Fix multifile ignores
  * Add -enable-audit cli flag
  * Update to go 1.22.5 and 1.21.12
  * chore(deps): update all dependencies
  * Added more rules
  * Fixed coverage workflow
  * Fixed CI workflow
  * Minor changes
  * Split the G401 rule into two separate ones
  * Updated G401 corresponding CWE
  * chore(deps): update docker/build-push-action action to v6
  * Update to go versions to 1.21.11 and 1.22.4
  * chore(deps): update all dependencies
  * Fix nosec when applied to a block
  * Add more types to templates rule
  * Map the G115 rule to an CWE ID
  * chore(deps): update all dependencies
  * Update README with G115 rule description
  * Remove deprecated megacheck linter from golangci
  * Format imports
  * Update .gitignore
  * Add a new rule to detect integer overflow on integer types conversion
  * feat: add env var to override the Go version detection
  * Use the proper logic when disabling the go module version
  * Update the README with some details related to Go version used by the rules
  * Add an environment varialbe which disables the parsing of Go version from module file
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1726660800">- Update to version 2.21.3:
  * Update gosec version to v2.21.3 in github action (#1227)
  * Populate the fixes only when autofix is not empty (#1226)
  * chore(deps): update all dependencies (#1223)
  * G115 Struct Attribute Checks (#1221)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1727352000">- Update to version 2.21.4:
  * Update the gosec to v2.21.4 in the Github action
  * Add the version into goreleaser config
  * chore(deps): update module google.golang.org/api to v0.198.0 (#1233)
  * Prevent panic: unexpected constant value: &lt;nil&gt; (#1232)
  * Fix running single analyzer which isn't a rule bug (#1231)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1736424000">- Update to version 2.22.0:
  * Update what message for G104 (#1282)
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.22.2 (#1281)
  * chore(deps): update all dependencies (#1280)
  * chore(deps): update all dependencies (#1279)
  * Simplify sortIssues implementation (#1277)
  * Enable testifylint and fix up lint issues (#1276)
  * Refactor AppendError to check for build.NoGoError (#1273)
  * chore(deps): update module golang.org/x/net to v0.33.0 [security] (#1275)
  * Update README.md (#1274)
  * Rule documentation updates (#1272)
  * Replace old golang.org links with new go.dev (#1271)
  * Refactor AppendError to use strings.Contains (#1270)
  * Simplify Analyzer.ignore by reducing nesting (#1269)
  * Improve capitalization in AI API flags descriptions (#1267)
  * Remove unused golint dependency (#1266)
  * Simplify tests by using GinkgoT().TempDir() (#1265)
  * Documentation on adding new rules and analyzers (#1262)
  * chore(deps): update all dependencies (#1268)
  * Update to go 1.22.10 and 1.23.4 versions (#1264)
  * chore(deps): update module golang.org/x/crypto to v0.31.0 [security] (#1263)
  * chore(deps): update all dependencies (#1261)
  * chore(deps): update module github.com/onsi/gomega to v1.36.0 (#1259)
  * fix: revive.redefines-builtin-id lint warnings (#1257)
  * Fix typos in comments and fields
  * Remove the decryption funtions/methods from G407 check
  * Upate go to version 1.23.3 and 1.22.9
  * Fix G115 false positive when going from parsed uint to larger int
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * Update go version to 1.23.2 and 1.22.8
  * chore(deps): update module google.golang.org/api to v0.201.0
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * Fix the cosign step to authenticate with the container registry
  * chore(deps): update module google.golang.org/api to v0.199.0</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1739448000">- Update to version 2.22.1:
  * Update cosign to v2.4.2 (#1303)
  * Add support for go 1.24 and phased out support for go 1.22 (#1302)
  * chore(deps): update all dependencies (#1300)
  * Update to go version 1.23.6 and 1.22.12 (#1299)
  * chore(deps): update module google.golang.org/api to v0.219.0 (#1296)
  * chore(deps): update module google.golang.org/api to v0.218.0 (#1294)
  * Add test to conver unit parssing for G115 rule (#1293)
  * Update to go version 1.23.5 and 1.22.11 (#1291)
  * chore(deps): update all dependencies (#1290)
  * Update gosec in github action to 2.22.0 (#1286)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1741262400">- Update to version 2.22.2:
  * Update to go version 1.24.1 and 1.23.7 (#1313)
  * chore(deps): update all dependencies (#1310)
  * chore(deps): update all dependencies (#1308)
  * Update gosec version in the GitHub action to v2.22.1 (#1307)
  * chore(deps): update module google.golang.org/api to v0.221.0 (#1305)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.de&gt;" date="1744027200">- Update to version 2.22.3:
  * Update version in 'action.yml' to 2.22.3 (anticipating next version (#1332)
  * Update go version to 1.24.2 and 1.23.8 (#1331)
  * remove G113. It only affects old/unsupported versions of Go (#1328)
  * chore(deps): update all dependencies (#1325)
  * Add SSOJet (#1320)
  * chore(deps): update all dependencies (#1319)
  * Update the integrity sha for babel dependency in html report (#1316)
  * Add support for `//gosec:disable` directive (#1314)
  * chore(deps): update all dependencies (#1315)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.de&gt;" date="1746705600">- Update to version 2.22.4:
  * Update to go version 1.24.3 and 1.23.9
  * update: updated the build command to include version metadata
  * chore(deps): update all dependencies
  * Update the AI provider API key value when provided as an argument
  * chore(deps): update module google.golang.org/api to v0.230.0
  * chore(deps): update module google.golang.org/api to v0.229.0
  * chore(deps): update all dependencies
  * Comment the reason why the file can be nil when an issue is created
  * Handle nil file when creating a new issue
  * chore(deps): update all dependencies (#1333)</changelog>
</package>
<package pkgid="1389c76ee1f0a501924b01d3308da73fc42ae14abac8eb77ff7a2960a629dccd" name="gosec" arch="s390x">
  <version epoch="0" ver="2.22.4" rel="bp156.2.3.2"/>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1670846400">- Switch OBS source service from tar_scm to obs_scm.
  * Embed version info with go build arg GIT_TAG="v%{version}"
  * _service obs_scm switch from tar_scm
  * _service obs_scm switch param revision (branch) to version (tag)
  * _service tar set to buildtime
  * _service recompress set to buildtime
  * _service recompress change tar compression from gz to xz</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1675684800">* Update to version 2.15.0
- Fix dependencies after renovate update
- chore(deps): update all dependencies (#922)
- Update to Go 1.20 and fix unit tests (#923)
- Update Go to latest version (#920)
- Update hardcoded_credentials.go fix: adaper equal expr which const value at left (#917)
- Fix github latest URL (#918)
- Fix github release url (#916)
- chore(deps): update module github.com/onsi/ginkgo/v2 to v2.7.0 (#914)
- Update Go version in CI script (#913)
- Track back when a file path was sanitized with filepath.Clean (#912)
- Fix the TLS config rule when parsing the settings from a variable (#911)
- Fix build after updating the dependencies (#910)
- chore(deps): update all dependencies (#909)
- Fix dependencies after renovate update (#907)
- chore(deps): update all dependencies (#906)
- Update slack badge and link (#905)
- Auto-detect TLS MinVersion integer base (#903)
- Adding s390x support (#902)
- chore(deps): update all dependencies (#904)
- chore(deps): update all dependencies (#898)
- Additional types for bad defer check (#897)
- chore(deps): update all dependencies (#894)
- chore(deps): update all dependencies (#892)
- Update Go version in CI scripts (#889)
- chore(deps): update all dependencies (#888)
- Allow to override build date with SOURCE_DATE_EPOCH (#887)
- chore(deps): update all dependencies (#886)
- chore(deps): update all dependencies (#884)
- fileperms: bitwise permission comparison (#883)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1684843200">- Update to version 2.16.0
  * Update cosign to latest version in release Github action
  * chore(deps): update all dependencies
  * Update go version in build and release scripts
  * chore(deps): update all dependencies
  * Update Go version to 1.20.3
  * chore(deps): update all dependencies
  * Fix for Dockerfile smell DL3059
  * README: upgrade GitHub action in examples
  * enable ginkgolinter linter
  * chore(deps): update all dependencies
  * correct gci linter
  * remove deprecated linters
  * increase timeout to 5m
  * chore(deps): update all dependencies
  * Use the latest version
  * Fix some linting warnings
  * Fix lint warning
  * Bump the go versions and golanci
  * chore(deps): update all dependencies
  * Check nil pointer when variable is declared in a different file
  * fix dead link to issue.go in README.md
  * Remove rule G307 which checks when an error is not handled when a file or socket connection is closed
  * Fix rule index reference into sarif report
  * Bump golang.org/x/net from 0.6.0 to 0.7.0
  * Format file
  * Use the gosec issue in the go analysers
  * Fix file formatting
  * Update Go version in CI builds
  * Fix method name in the comment
  * Extract the issue in its own package
  * Add support for Go analysis framework and SSA code representation
  * chore(deps): update all dependencies
  * Remove the version form ci github action
  * Pin github action to latest release version 2.15.0
  * Revert the image tag in github action until a working solution is found
  * Fix version interpolation in github action image
  * Add gosec version as an input parameter to GitHub action
  * Update release build script</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1691150400">- Require go 1.20</changelog>
  <changelog author="Felix Niederwanger felix.niederwanger@suse.com" date="1692273600">- Update to version 2.17.0:
  * Update cosign to version v2.1.1 (#1000)
  * Enable go 1.21.0 in the CI build (#998)
  * chore(deps): update all dependencies (#997)
  * Update to go version 1.20.7 and 1.19.12 (#993)
  * chore(deps): update all dependencies (#992)
  * chore(deps): update module github.com/onsi/gomega to v1.27.10 (#991)
  * fix: correctly identify infixed concats as potential SQL injections (#987)
  * chore(deps): update all dependencies (#989)
  * Add a new flag terse to show only the results and summary (#986)
  * Switch to a maintained fork of zxcvbn module (#984)</changelog>
  <changelog author="felix.niederwanger@suse.com" date="1696852800">- Update to version 2.18.0:
  * Update the action to use gosec version v2.18.0 (#1029)
  * Use a step ID in github release action to get the digest of the image (#1028)
  * Update to go version 1.21.2 and 1.20.9 (#1027)
  * chore(deps): update all dependencies (#1026)
  * Enable gochecknoinits; fix lint issues; use consts for some vars (#1022)
  * Fix typos in struct fields, comments, and docs (#1023)
  * chore(deps): update all dependencies
  * Fix lint warning
  * Add a new rule which detects when a file is created with os.Create but the configured permissions are less than 0666
  * Fix lint warnings
  * Update ginkgo to latest version
  * Redesign and reimplement the slice out of bounds check using SSA code representation
  * docs: add reMarkable to users list
  * chore(deps): update all dependencies
  * Drop support for go 1.19.x since go team doesn't ship anymore security fixes for it
  * Update to latest go version
  * chore(deps): update all dependencies (#1011)
  * Fix hardcoded_credentials rule to only match on more specific patterns (#1009)
  * chore(deps): update all dependencies (#1008)
  * Exclude maps from slince bounce check rule (#1006)
  * Ignore struct pointers in G601 (#1003)
  * Update gosec image version to 2.17.0 in the Github action (#1002)
- Packaging improvements:
  * Use BuildRequires: golang(API) &gt;= 1.20 instead of go &gt;= 1.20.
    The go metapackage points to a single go version that
    increments at a date TBD after each go1.x major release. The
    expression golang(API) is available immediately upon each go1.x
    major release and is stable for expressing the minimum version
    or a temporarily pinned version.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1696852801">- Packaging improvements:
  * Summary and Description clarify the purpose of this CLI tool
  * Use Group: Development/Languages/Go instead of Other
  * Drop BuildRequires: golang-packaging. The recommended Go
    toolchain dependency is BuildRequires: golang(API) &gt;= 1.x or
    optionally the metapackage BuildRequires: go
  * Drop Requires: golang-packaging. The original macros for file
    movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove %%{go_nostrip} macro which is no longer recommended</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1697544000">- Update to version 2.18.1:
  * chore(deps): update all dependencies
  * Update gosec to version 2.18.1 in the action
  * Update cosign version to v2.2.0
  * Refactor how ignored issues are tracked
  * Restrict the maximum depth when tracking the slice bounds
  * Handle empty ssa results
  * Handle gracefully any panic that occurs when building the SSA representation of a package
  * Fix typo
  * Handle new function when getting the call info in case is overriden
  * Bump golang.org/x/net from 0.16.0 to 0.17.0 (#1037)
  * Update to Go 1.21.3 and 1.20.10 (#1035)
  * Update the list of unsafe functions detected by the unsafe rule (#1033)</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- Update to version 2.18.2:
  * Added ppc64le support
  * chore(deps): update all dependencies
  * Ensure ignores are handled properly for multi-line issues
  * Update Go to version 1.21.4 and 1.20.11
  * chore(deps): update module golang.org/x/text to v0.14.0
  * chore(deps): update all dependencies
  * Remove the hardcoded GOOS value when building the Linux binary to enable support for container image for ARM
  * Avoid allocations with `(*regexp.Regexp).MatchString`
  * Fix some typos
  * Update local installation instructions by removing the details for Go 1.16</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913601">- update to 2.18.2:
  * Disable dot-imports in revive linter
  * Run the gosec with data race detector active during
    tests
  * Fix data race in the analyzer
  * Fix test that checks the overriden nosec directive
  * Clean global state in flgs tests
  * Format the file
  * Update README with details which describe the current
    of #nosec
  * Ensure the ignores are parsed before analysing the
    package</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1707825600">- Update to version 2.19.0:
  * Update gosec version to v2.19.0 in the Github action
  * Update CI to go version 1.22
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update dependency babel-standalone to v7.23.7
  * chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
  * chore(deps): update all dependencies
  * chore(deps): update actions/setup-go action to v5
  * Fix lint warnings by properly formatting the files
  * chore: Refactor Sample Code to Separate Files
  * Update go version to 1.21.5 and 1.20.12 (#1084)
  * chore(deps): update all dependencies (#1080)
  * Ignore the issues from generated files when using the analysis framework (#1079)
  * Update README with upload-sarif v2 (#1078)
  * chore(deps): update dependency babel-standalone to v7.23.4</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1715860800">- Update to version 2.20.0:
  * Update docker image in action to v2.20.0
  * Catch os.ModePerm permissions in os.WriteFile
  * Add a unit test to detect the false negative in rule G306 for os.ModePerm permissions
  * Add filepath.EvalSymlinks to clean functions in rule G304
  * chore(deps): update all dependencies
  * Update Go to version 2.22.3 in CI and release
  * chore(deps): update module golang.org/x/text to v0.15.0
  * chore(deps): update all dependencies
  * chore(deps): update module github.com/onsi/gomega to v1.33.0
  * Update to go 1.22.2
  * chore(deps): update all dependencies
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
  * chore(deps): update all dependencies
  * fix(helpers/goversion): get from go.mod
  * chore: fix function name
  * chore(deps): update all dependencies
  * Format the imports using the gci tool
  * Fixup: delete unused variable
  * Fix test: update test to comply with the spec of generated sources
  * Refactor: use standard function to check if a file is generated
  * Fix lint warnings
  * Add support for math/rand/v2 added in Go 1.22
  * Skip the G601 tests for Go version 1.22
  * Update go version to 1.22.1 and 1.21.8
  * Ignore 'implicit memory aliasing' rule for Go 1.22+
  * chore(deps): update all dependencies
  * chore(deps): update module golang.org/x/tools to v0.18.0
  * fix(hardcoded): remove duplicated `Stripe API Key`</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1725969600">- Update to version 2.21.2:
  * Update the github action to v2.21.2 (#1218)
  * Update the SARIF schema URL (#1217)
  * Update go version to 1.23.1 and 1.22.7 (#1216)
  * chore(deps): update all dependencies (#1215)
  * Update gosec version to v2.21.1 in github action (#1213)
  * Rollback the SARIF version to 2.1 since github doesn't support 2.2 (#1210)
  * Update gosec in github action to v2.21.0 (#1208)
  * Update cosign version to v2.4.0 in release github workflow (#1207)
  * Improvement the int conversion overflow logic to handle bound checks (#1194)
  * fix: G602 support for nested conditionals with bounds check (#1201)
  * Update go.mod to sue go 1.22.0 toolchain
  * chore(deps): update all dependencies
  * Make variable name more clear
  * Make variable names more explicity and reduce duplications
  * Fix formatting
  * Refactor to reduce some fuctions and variable names
  * Pass the value argument directly since is an interface
  * Added suggested changes
  * Added another test case in order to increase code coverage
  * Removed function parameter which is always the same
  * Formatting problems(CI was not passing)
  * Updated analyzer to use new way of initialization
  * Migrated the rule to the analyzers folder
  * Refractored code a little bit
  * Added new rule G407(hardcoded IV/nonce)
  * Fix conversion overflow false positive when using ParseUint
  * Add a build step to measure the scan perfomance
  * Fix conversion overflow false positives when they are checked or pre-determined
  * Update go.mod
  * chore(deps): update all dependencies
  * Fix false positive in conversion overflow check from uint8/int8 type
  * Disable staticcheck SA1019 rule
  * Update the golangci linters
  * Add more test to cover more use cases for G115 rule
  * Allow excluding analyzers globally (#1180)
  * Update to Go 1.23.0 (#1183)
  * chore(deps): update all dependencies (#1182)
  * Read the AI API key also from an environment variable (#1181)
  * Add support to generate auto fixes using LLM (AI) (#1177)
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update dependency babel-standalone to v7.24.10
  * Resolve underlying type to detect overflows in type aliases
  * chore(deps): update dependency babel-standalone to v7.24.8
  * Fix multifile ignores
  * Add -enable-audit cli flag
  * Update to go 1.22.5 and 1.21.12
  * chore(deps): update all dependencies
  * Added more rules
  * Fixed coverage workflow
  * Fixed CI workflow
  * Minor changes
  * Split the G401 rule into two separate ones
  * Updated G401 corresponding CWE
  * chore(deps): update docker/build-push-action action to v6
  * Update to go versions to 1.21.11 and 1.22.4
  * chore(deps): update all dependencies
  * Fix nosec when applied to a block
  * Add more types to templates rule
  * Map the G115 rule to an CWE ID
  * chore(deps): update all dependencies
  * Update README with G115 rule description
  * Remove deprecated megacheck linter from golangci
  * Format imports
  * Update .gitignore
  * Add a new rule to detect integer overflow on integer types conversion
  * feat: add env var to override the Go version detection
  * Use the proper logic when disabling the go module version
  * Update the README with some details related to Go version used by the rules
  * Add an environment varialbe which disables the parsing of Go version from module file
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1726660800">- Update to version 2.21.3:
  * Update gosec version to v2.21.3 in github action (#1227)
  * Populate the fixes only when autofix is not empty (#1226)
  * chore(deps): update all dependencies (#1223)
  * G115 Struct Attribute Checks (#1221)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1727352000">- Update to version 2.21.4:
  * Update the gosec to v2.21.4 in the Github action
  * Add the version into goreleaser config
  * chore(deps): update module google.golang.org/api to v0.198.0 (#1233)
  * Prevent panic: unexpected constant value: &lt;nil&gt; (#1232)
  * Fix running single analyzer which isn't a rule bug (#1231)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1736424000">- Update to version 2.22.0:
  * Update what message for G104 (#1282)
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.22.2 (#1281)
  * chore(deps): update all dependencies (#1280)
  * chore(deps): update all dependencies (#1279)
  * Simplify sortIssues implementation (#1277)
  * Enable testifylint and fix up lint issues (#1276)
  * Refactor AppendError to check for build.NoGoError (#1273)
  * chore(deps): update module golang.org/x/net to v0.33.0 [security] (#1275)
  * Update README.md (#1274)
  * Rule documentation updates (#1272)
  * Replace old golang.org links with new go.dev (#1271)
  * Refactor AppendError to use strings.Contains (#1270)
  * Simplify Analyzer.ignore by reducing nesting (#1269)
  * Improve capitalization in AI API flags descriptions (#1267)
  * Remove unused golint dependency (#1266)
  * Simplify tests by using GinkgoT().TempDir() (#1265)
  * Documentation on adding new rules and analyzers (#1262)
  * chore(deps): update all dependencies (#1268)
  * Update to go 1.22.10 and 1.23.4 versions (#1264)
  * chore(deps): update module golang.org/x/crypto to v0.31.0 [security] (#1263)
  * chore(deps): update all dependencies (#1261)
  * chore(deps): update module github.com/onsi/gomega to v1.36.0 (#1259)
  * fix: revive.redefines-builtin-id lint warnings (#1257)
  * Fix typos in comments and fields
  * Remove the decryption funtions/methods from G407 check
  * Upate go to version 1.23.3 and 1.22.9
  * Fix G115 false positive when going from parsed uint to larger int
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * Update go version to 1.23.2 and 1.22.8
  * chore(deps): update module google.golang.org/api to v0.201.0
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * Fix the cosign step to authenticate with the container registry
  * chore(deps): update module google.golang.org/api to v0.199.0</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1739448000">- Update to version 2.22.1:
  * Update cosign to v2.4.2 (#1303)
  * Add support for go 1.24 and phased out support for go 1.22 (#1302)
  * chore(deps): update all dependencies (#1300)
  * Update to go version 1.23.6 and 1.22.12 (#1299)
  * chore(deps): update module google.golang.org/api to v0.219.0 (#1296)
  * chore(deps): update module google.golang.org/api to v0.218.0 (#1294)
  * Add test to conver unit parssing for G115 rule (#1293)
  * Update to go version 1.23.5 and 1.22.11 (#1291)
  * chore(deps): update all dependencies (#1290)
  * Update gosec in github action to 2.22.0 (#1286)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1741262400">- Update to version 2.22.2:
  * Update to go version 1.24.1 and 1.23.7 (#1313)
  * chore(deps): update all dependencies (#1310)
  * chore(deps): update all dependencies (#1308)
  * Update gosec version in the GitHub action to v2.22.1 (#1307)
  * chore(deps): update module google.golang.org/api to v0.221.0 (#1305)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.de&gt;" date="1744027200">- Update to version 2.22.3:
  * Update version in 'action.yml' to 2.22.3 (anticipating next version (#1332)
  * Update go version to 1.24.2 and 1.23.8 (#1331)
  * remove G113. It only affects old/unsupported versions of Go (#1328)
  * chore(deps): update all dependencies (#1325)
  * Add SSOJet (#1320)
  * chore(deps): update all dependencies (#1319)
  * Update the integrity sha for babel dependency in html report (#1316)
  * Add support for `//gosec:disable` directive (#1314)
  * chore(deps): update all dependencies (#1315)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.de&gt;" date="1746705600">- Update to version 2.22.4:
  * Update to go version 1.24.3 and 1.23.9
  * update: updated the build command to include version metadata
  * chore(deps): update all dependencies
  * Update the AI provider API key value when provided as an argument
  * chore(deps): update module google.golang.org/api to v0.230.0
  * chore(deps): update module google.golang.org/api to v0.229.0
  * chore(deps): update all dependencies
  * Comment the reason why the file can be nil when an issue is created
  * Handle nil file when creating a new issue
  * chore(deps): update all dependencies (#1333)</changelog>
</package>
<package pkgid="b7b5757aab9e9997f9a2e0c6f1049e499b02e27dbe9ea6c5bde052c8ad0f1d76" name="gosec" arch="src">
  <version epoch="0" ver="2.22.4" rel="bp156.2.3.2"/>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1670846400">- Switch OBS source service from tar_scm to obs_scm.
  * Embed version info with go build arg GIT_TAG="v%{version}"
  * _service obs_scm switch from tar_scm
  * _service obs_scm switch param revision (branch) to version (tag)
  * _service tar set to buildtime
  * _service recompress set to buildtime
  * _service recompress change tar compression from gz to xz</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1675684800">* Update to version 2.15.0
- Fix dependencies after renovate update
- chore(deps): update all dependencies (#922)
- Update to Go 1.20 and fix unit tests (#923)
- Update Go to latest version (#920)
- Update hardcoded_credentials.go fix: adaper equal expr which const value at left (#917)
- Fix github latest URL (#918)
- Fix github release url (#916)
- chore(deps): update module github.com/onsi/ginkgo/v2 to v2.7.0 (#914)
- Update Go version in CI script (#913)
- Track back when a file path was sanitized with filepath.Clean (#912)
- Fix the TLS config rule when parsing the settings from a variable (#911)
- Fix build after updating the dependencies (#910)
- chore(deps): update all dependencies (#909)
- Fix dependencies after renovate update (#907)
- chore(deps): update all dependencies (#906)
- Update slack badge and link (#905)
- Auto-detect TLS MinVersion integer base (#903)
- Adding s390x support (#902)
- chore(deps): update all dependencies (#904)
- chore(deps): update all dependencies (#898)
- Additional types for bad defer check (#897)
- chore(deps): update all dependencies (#894)
- chore(deps): update all dependencies (#892)
- Update Go version in CI scripts (#889)
- chore(deps): update all dependencies (#888)
- Allow to override build date with SOURCE_DATE_EPOCH (#887)
- chore(deps): update all dependencies (#886)
- chore(deps): update all dependencies (#884)
- fileperms: bitwise permission comparison (#883)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1684843200">- Update to version 2.16.0
  * Update cosign to latest version in release Github action
  * chore(deps): update all dependencies
  * Update go version in build and release scripts
  * chore(deps): update all dependencies
  * Update Go version to 1.20.3
  * chore(deps): update all dependencies
  * Fix for Dockerfile smell DL3059
  * README: upgrade GitHub action in examples
  * enable ginkgolinter linter
  * chore(deps): update all dependencies
  * correct gci linter
  * remove deprecated linters
  * increase timeout to 5m
  * chore(deps): update all dependencies
  * Use the latest version
  * Fix some linting warnings
  * Fix lint warning
  * Bump the go versions and golanci
  * chore(deps): update all dependencies
  * Check nil pointer when variable is declared in a different file
  * fix dead link to issue.go in README.md
  * Remove rule G307 which checks when an error is not handled when a file or socket connection is closed
  * Fix rule index reference into sarif report
  * Bump golang.org/x/net from 0.6.0 to 0.7.0
  * Format file
  * Use the gosec issue in the go analysers
  * Fix file formatting
  * Update Go version in CI builds
  * Fix method name in the comment
  * Extract the issue in its own package
  * Add support for Go analysis framework and SSA code representation
  * chore(deps): update all dependencies
  * Remove the version form ci github action
  * Pin github action to latest release version 2.15.0
  * Revert the image tag in github action until a working solution is found
  * Fix version interpolation in github action image
  * Add gosec version as an input parameter to GitHub action
  * Update release build script</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1691150400">- Require go 1.20</changelog>
  <changelog author="Felix Niederwanger felix.niederwanger@suse.com" date="1692273600">- Update to version 2.17.0:
  * Update cosign to version v2.1.1 (#1000)
  * Enable go 1.21.0 in the CI build (#998)
  * chore(deps): update all dependencies (#997)
  * Update to go version 1.20.7 and 1.19.12 (#993)
  * chore(deps): update all dependencies (#992)
  * chore(deps): update module github.com/onsi/gomega to v1.27.10 (#991)
  * fix: correctly identify infixed concats as potential SQL injections (#987)
  * chore(deps): update all dependencies (#989)
  * Add a new flag terse to show only the results and summary (#986)
  * Switch to a maintained fork of zxcvbn module (#984)</changelog>
  <changelog author="felix.niederwanger@suse.com" date="1696852800">- Update to version 2.18.0:
  * Update the action to use gosec version v2.18.0 (#1029)
  * Use a step ID in github release action to get the digest of the image (#1028)
  * Update to go version 1.21.2 and 1.20.9 (#1027)
  * chore(deps): update all dependencies (#1026)
  * Enable gochecknoinits; fix lint issues; use consts for some vars (#1022)
  * Fix typos in struct fields, comments, and docs (#1023)
  * chore(deps): update all dependencies
  * Fix lint warning
  * Add a new rule which detects when a file is created with os.Create but the configured permissions are less than 0666
  * Fix lint warnings
  * Update ginkgo to latest version
  * Redesign and reimplement the slice out of bounds check using SSA code representation
  * docs: add reMarkable to users list
  * chore(deps): update all dependencies
  * Drop support for go 1.19.x since go team doesn't ship anymore security fixes for it
  * Update to latest go version
  * chore(deps): update all dependencies (#1011)
  * Fix hardcoded_credentials rule to only match on more specific patterns (#1009)
  * chore(deps): update all dependencies (#1008)
  * Exclude maps from slince bounce check rule (#1006)
  * Ignore struct pointers in G601 (#1003)
  * Update gosec image version to 2.17.0 in the Github action (#1002)
- Packaging improvements:
  * Use BuildRequires: golang(API) &gt;= 1.20 instead of go &gt;= 1.20.
    The go metapackage points to a single go version that
    increments at a date TBD after each go1.x major release. The
    expression golang(API) is available immediately upon each go1.x
    major release and is stable for expressing the minimum version
    or a temporarily pinned version.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1696852801">- Packaging improvements:
  * Summary and Description clarify the purpose of this CLI tool
  * Use Group: Development/Languages/Go instead of Other
  * Drop BuildRequires: golang-packaging. The recommended Go
    toolchain dependency is BuildRequires: golang(API) &gt;= 1.x or
    optionally the metapackage BuildRequires: go
  * Drop Requires: golang-packaging. The original macros for file
    movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove %%{go_nostrip} macro which is no longer recommended</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1697544000">- Update to version 2.18.1:
  * chore(deps): update all dependencies
  * Update gosec to version 2.18.1 in the action
  * Update cosign version to v2.2.0
  * Refactor how ignored issues are tracked
  * Restrict the maximum depth when tracking the slice bounds
  * Handle empty ssa results
  * Handle gracefully any panic that occurs when building the SSA representation of a package
  * Fix typo
  * Handle new function when getting the call info in case is overriden
  * Bump golang.org/x/net from 0.16.0 to 0.17.0 (#1037)
  * Update to Go 1.21.3 and 1.20.10 (#1035)
  * Update the list of unsafe functions detected by the unsafe rule (#1033)</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- Update to version 2.18.2:
  * Added ppc64le support
  * chore(deps): update all dependencies
  * Ensure ignores are handled properly for multi-line issues
  * Update Go to version 1.21.4 and 1.20.11
  * chore(deps): update module golang.org/x/text to v0.14.0
  * chore(deps): update all dependencies
  * Remove the hardcoded GOOS value when building the Linux binary to enable support for container image for ARM
  * Avoid allocations with `(*regexp.Regexp).MatchString`
  * Fix some typos
  * Update local installation instructions by removing the details for Go 1.16</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913601">- update to 2.18.2:
  * Disable dot-imports in revive linter
  * Run the gosec with data race detector active during
    tests
  * Fix data race in the analyzer
  * Fix test that checks the overriden nosec directive
  * Clean global state in flgs tests
  * Format the file
  * Update README with details which describe the current
    of #nosec
  * Ensure the ignores are parsed before analysing the
    package</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1707825600">- Update to version 2.19.0:
  * Update gosec version to v2.19.0 in the Github action
  * Update CI to go version 1.22
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update dependency babel-standalone to v7.23.7
  * chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
  * chore(deps): update all dependencies
  * chore(deps): update actions/setup-go action to v5
  * Fix lint warnings by properly formatting the files
  * chore: Refactor Sample Code to Separate Files
  * Update go version to 1.21.5 and 1.20.12 (#1084)
  * chore(deps): update all dependencies (#1080)
  * Ignore the issues from generated files when using the analysis framework (#1079)
  * Update README with upload-sarif v2 (#1078)
  * chore(deps): update dependency babel-standalone to v7.23.4</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1715860800">- Update to version 2.20.0:
  * Update docker image in action to v2.20.0
  * Catch os.ModePerm permissions in os.WriteFile
  * Add a unit test to detect the false negative in rule G306 for os.ModePerm permissions
  * Add filepath.EvalSymlinks to clean functions in rule G304
  * chore(deps): update all dependencies
  * Update Go to version 2.22.3 in CI and release
  * chore(deps): update module golang.org/x/text to v0.15.0
  * chore(deps): update all dependencies
  * chore(deps): update module github.com/onsi/gomega to v1.33.0
  * Update to go 1.22.2
  * chore(deps): update all dependencies
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
  * chore(deps): update all dependencies
  * fix(helpers/goversion): get from go.mod
  * chore: fix function name
  * chore(deps): update all dependencies
  * Format the imports using the gci tool
  * Fixup: delete unused variable
  * Fix test: update test to comply with the spec of generated sources
  * Refactor: use standard function to check if a file is generated
  * Fix lint warnings
  * Add support for math/rand/v2 added in Go 1.22
  * Skip the G601 tests for Go version 1.22
  * Update go version to 1.22.1 and 1.21.8
  * Ignore 'implicit memory aliasing' rule for Go 1.22+
  * chore(deps): update all dependencies
  * chore(deps): update module golang.org/x/tools to v0.18.0
  * fix(hardcoded): remove duplicated `Stripe API Key`</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1725969600">- Update to version 2.21.2:
  * Update the github action to v2.21.2 (#1218)
  * Update the SARIF schema URL (#1217)
  * Update go version to 1.23.1 and 1.22.7 (#1216)
  * chore(deps): update all dependencies (#1215)
  * Update gosec version to v2.21.1 in github action (#1213)
  * Rollback the SARIF version to 2.1 since github doesn't support 2.2 (#1210)
  * Update gosec in github action to v2.21.0 (#1208)
  * Update cosign version to v2.4.0 in release github workflow (#1207)
  * Improvement the int conversion overflow logic to handle bound checks (#1194)
  * fix: G602 support for nested conditionals with bounds check (#1201)
  * Update go.mod to sue go 1.22.0 toolchain
  * chore(deps): update all dependencies
  * Make variable name more clear
  * Make variable names more explicity and reduce duplications
  * Fix formatting
  * Refactor to reduce some fuctions and variable names
  * Pass the value argument directly since is an interface
  * Added suggested changes
  * Added another test case in order to increase code coverage
  * Removed function parameter which is always the same
  * Formatting problems(CI was not passing)
  * Updated analyzer to use new way of initialization
  * Migrated the rule to the analyzers folder
  * Refractored code a little bit
  * Added new rule G407(hardcoded IV/nonce)
  * Fix conversion overflow false positive when using ParseUint
  * Add a build step to measure the scan perfomance
  * Fix conversion overflow false positives when they are checked or pre-determined
  * Update go.mod
  * chore(deps): update all dependencies
  * Fix false positive in conversion overflow check from uint8/int8 type
  * Disable staticcheck SA1019 rule
  * Update the golangci linters
  * Add more test to cover more use cases for G115 rule
  * Allow excluding analyzers globally (#1180)
  * Update to Go 1.23.0 (#1183)
  * chore(deps): update all dependencies (#1182)
  * Read the AI API key also from an environment variable (#1181)
  * Add support to generate auto fixes using LLM (AI) (#1177)
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update dependency babel-standalone to v7.24.10
  * Resolve underlying type to detect overflows in type aliases
  * chore(deps): update dependency babel-standalone to v7.24.8
  * Fix multifile ignores
  * Add -enable-audit cli flag
  * Update to go 1.22.5 and 1.21.12
  * chore(deps): update all dependencies
  * Added more rules
  * Fixed coverage workflow
  * Fixed CI workflow
  * Minor changes
  * Split the G401 rule into two separate ones
  * Updated G401 corresponding CWE
  * chore(deps): update docker/build-push-action action to v6
  * Update to go versions to 1.21.11 and 1.22.4
  * chore(deps): update all dependencies
  * Fix nosec when applied to a block
  * Add more types to templates rule
  * Map the G115 rule to an CWE ID
  * chore(deps): update all dependencies
  * Update README with G115 rule description
  * Remove deprecated megacheck linter from golangci
  * Format imports
  * Update .gitignore
  * Add a new rule to detect integer overflow on integer types conversion
  * feat: add env var to override the Go version detection
  * Use the proper logic when disabling the go module version
  * Update the README with some details related to Go version used by the rules
  * Add an environment varialbe which disables the parsing of Go version from module file
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1726660800">- Update to version 2.21.3:
  * Update gosec version to v2.21.3 in github action (#1227)
  * Populate the fixes only when autofix is not empty (#1226)
  * chore(deps): update all dependencies (#1223)
  * G115 Struct Attribute Checks (#1221)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1727352000">- Update to version 2.21.4:
  * Update the gosec to v2.21.4 in the Github action
  * Add the version into goreleaser config
  * chore(deps): update module google.golang.org/api to v0.198.0 (#1233)
  * Prevent panic: unexpected constant value: &lt;nil&gt; (#1232)
  * Fix running single analyzer which isn't a rule bug (#1231)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1736424000">- Update to version 2.22.0:
  * Update what message for G104 (#1282)
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.22.2 (#1281)
  * chore(deps): update all dependencies (#1280)
  * chore(deps): update all dependencies (#1279)
  * Simplify sortIssues implementation (#1277)
  * Enable testifylint and fix up lint issues (#1276)
  * Refactor AppendError to check for build.NoGoError (#1273)
  * chore(deps): update module golang.org/x/net to v0.33.0 [security] (#1275)
  * Update README.md (#1274)
  * Rule documentation updates (#1272)
  * Replace old golang.org links with new go.dev (#1271)
  * Refactor AppendError to use strings.Contains (#1270)
  * Simplify Analyzer.ignore by reducing nesting (#1269)
  * Improve capitalization in AI API flags descriptions (#1267)
  * Remove unused golint dependency (#1266)
  * Simplify tests by using GinkgoT().TempDir() (#1265)
  * Documentation on adding new rules and analyzers (#1262)
  * chore(deps): update all dependencies (#1268)
  * Update to go 1.22.10 and 1.23.4 versions (#1264)
  * chore(deps): update module golang.org/x/crypto to v0.31.0 [security] (#1263)
  * chore(deps): update all dependencies (#1261)
  * chore(deps): update module github.com/onsi/gomega to v1.36.0 (#1259)
  * fix: revive.redefines-builtin-id lint warnings (#1257)
  * Fix typos in comments and fields
  * Remove the decryption funtions/methods from G407 check
  * Upate go to version 1.23.3 and 1.22.9
  * Fix G115 false positive when going from parsed uint to larger int
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * Update go version to 1.23.2 and 1.22.8
  * chore(deps): update module google.golang.org/api to v0.201.0
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * Fix the cosign step to authenticate with the container registry
  * chore(deps): update module google.golang.org/api to v0.199.0</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1739448000">- Update to version 2.22.1:
  * Update cosign to v2.4.2 (#1303)
  * Add support for go 1.24 and phased out support for go 1.22 (#1302)
  * chore(deps): update all dependencies (#1300)
  * Update to go version 1.23.6 and 1.22.12 (#1299)
  * chore(deps): update module google.golang.org/api to v0.219.0 (#1296)
  * chore(deps): update module google.golang.org/api to v0.218.0 (#1294)
  * Add test to conver unit parssing for G115 rule (#1293)
  * Update to go version 1.23.5 and 1.22.11 (#1291)
  * chore(deps): update all dependencies (#1290)
  * Update gosec in github action to 2.22.0 (#1286)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1741262400">- Update to version 2.22.2:
  * Update to go version 1.24.1 and 1.23.7 (#1313)
  * chore(deps): update all dependencies (#1310)
  * chore(deps): update all dependencies (#1308)
  * Update gosec version in the GitHub action to v2.22.1 (#1307)
  * chore(deps): update module google.golang.org/api to v0.221.0 (#1305)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.de&gt;" date="1744027200">- Update to version 2.22.3:
  * Update version in 'action.yml' to 2.22.3 (anticipating next version (#1332)
  * Update go version to 1.24.2 and 1.23.8 (#1331)
  * remove G113. It only affects old/unsupported versions of Go (#1328)
  * chore(deps): update all dependencies (#1325)
  * Add SSOJet (#1320)
  * chore(deps): update all dependencies (#1319)
  * Update the integrity sha for babel dependency in html report (#1316)
  * Add support for `//gosec:disable` directive (#1314)
  * chore(deps): update all dependencies (#1315)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.de&gt;" date="1746705600">- Update to version 2.22.4:
  * Update to go version 1.24.3 and 1.23.9
  * update: updated the build command to include version metadata
  * chore(deps): update all dependencies
  * Update the AI provider API key value when provided as an argument
  * chore(deps): update module google.golang.org/api to v0.230.0
  * chore(deps): update module google.golang.org/api to v0.229.0
  * chore(deps): update all dependencies
  * Comment the reason why the file can be nil when an issue is created
  * Handle nil file when creating a new issue
  * chore(deps): update all dependencies (#1333)</changelog>
</package>
<package pkgid="961c26a300b5501f72adfbd20c1eeee93225621310d889d9b5d0666362ce4c17" name="gosec" arch="x86_64">
  <version epoch="0" ver="2.22.4" rel="bp156.2.3.2"/>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1670846400">- Switch OBS source service from tar_scm to obs_scm.
  * Embed version info with go build arg GIT_TAG="v%{version}"
  * _service obs_scm switch from tar_scm
  * _service obs_scm switch param revision (branch) to version (tag)
  * _service tar set to buildtime
  * _service recompress set to buildtime
  * _service recompress change tar compression from gz to xz</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1675684800">* Update to version 2.15.0
- Fix dependencies after renovate update
- chore(deps): update all dependencies (#922)
- Update to Go 1.20 and fix unit tests (#923)
- Update Go to latest version (#920)
- Update hardcoded_credentials.go fix: adaper equal expr which const value at left (#917)
- Fix github latest URL (#918)
- Fix github release url (#916)
- chore(deps): update module github.com/onsi/ginkgo/v2 to v2.7.0 (#914)
- Update Go version in CI script (#913)
- Track back when a file path was sanitized with filepath.Clean (#912)
- Fix the TLS config rule when parsing the settings from a variable (#911)
- Fix build after updating the dependencies (#910)
- chore(deps): update all dependencies (#909)
- Fix dependencies after renovate update (#907)
- chore(deps): update all dependencies (#906)
- Update slack badge and link (#905)
- Auto-detect TLS MinVersion integer base (#903)
- Adding s390x support (#902)
- chore(deps): update all dependencies (#904)
- chore(deps): update all dependencies (#898)
- Additional types for bad defer check (#897)
- chore(deps): update all dependencies (#894)
- chore(deps): update all dependencies (#892)
- Update Go version in CI scripts (#889)
- chore(deps): update all dependencies (#888)
- Allow to override build date with SOURCE_DATE_EPOCH (#887)
- chore(deps): update all dependencies (#886)
- chore(deps): update all dependencies (#884)
- fileperms: bitwise permission comparison (#883)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1684843200">- Update to version 2.16.0
  * Update cosign to latest version in release Github action
  * chore(deps): update all dependencies
  * Update go version in build and release scripts
  * chore(deps): update all dependencies
  * Update Go version to 1.20.3
  * chore(deps): update all dependencies
  * Fix for Dockerfile smell DL3059
  * README: upgrade GitHub action in examples
  * enable ginkgolinter linter
  * chore(deps): update all dependencies
  * correct gci linter
  * remove deprecated linters
  * increase timeout to 5m
  * chore(deps): update all dependencies
  * Use the latest version
  * Fix some linting warnings
  * Fix lint warning
  * Bump the go versions and golanci
  * chore(deps): update all dependencies
  * Check nil pointer when variable is declared in a different file
  * fix dead link to issue.go in README.md
  * Remove rule G307 which checks when an error is not handled when a file or socket connection is closed
  * Fix rule index reference into sarif report
  * Bump golang.org/x/net from 0.6.0 to 0.7.0
  * Format file
  * Use the gosec issue in the go analysers
  * Fix file formatting
  * Update Go version in CI builds
  * Fix method name in the comment
  * Extract the issue in its own package
  * Add support for Go analysis framework and SSA code representation
  * chore(deps): update all dependencies
  * Remove the version form ci github action
  * Pin github action to latest release version 2.15.0
  * Revert the image tag in github action until a working solution is found
  * Fix version interpolation in github action image
  * Add gosec version as an input parameter to GitHub action
  * Update release build script</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1691150400">- Require go 1.20</changelog>
  <changelog author="Felix Niederwanger felix.niederwanger@suse.com" date="1692273600">- Update to version 2.17.0:
  * Update cosign to version v2.1.1 (#1000)
  * Enable go 1.21.0 in the CI build (#998)
  * chore(deps): update all dependencies (#997)
  * Update to go version 1.20.7 and 1.19.12 (#993)
  * chore(deps): update all dependencies (#992)
  * chore(deps): update module github.com/onsi/gomega to v1.27.10 (#991)
  * fix: correctly identify infixed concats as potential SQL injections (#987)
  * chore(deps): update all dependencies (#989)
  * Add a new flag terse to show only the results and summary (#986)
  * Switch to a maintained fork of zxcvbn module (#984)</changelog>
  <changelog author="felix.niederwanger@suse.com" date="1696852800">- Update to version 2.18.0:
  * Update the action to use gosec version v2.18.0 (#1029)
  * Use a step ID in github release action to get the digest of the image (#1028)
  * Update to go version 1.21.2 and 1.20.9 (#1027)
  * chore(deps): update all dependencies (#1026)
  * Enable gochecknoinits; fix lint issues; use consts for some vars (#1022)
  * Fix typos in struct fields, comments, and docs (#1023)
  * chore(deps): update all dependencies
  * Fix lint warning
  * Add a new rule which detects when a file is created with os.Create but the configured permissions are less than 0666
  * Fix lint warnings
  * Update ginkgo to latest version
  * Redesign and reimplement the slice out of bounds check using SSA code representation
  * docs: add reMarkable to users list
  * chore(deps): update all dependencies
  * Drop support for go 1.19.x since go team doesn't ship anymore security fixes for it
  * Update to latest go version
  * chore(deps): update all dependencies (#1011)
  * Fix hardcoded_credentials rule to only match on more specific patterns (#1009)
  * chore(deps): update all dependencies (#1008)
  * Exclude maps from slince bounce check rule (#1006)
  * Ignore struct pointers in G601 (#1003)
  * Update gosec image version to 2.17.0 in the Github action (#1002)
- Packaging improvements:
  * Use BuildRequires: golang(API) &gt;= 1.20 instead of go &gt;= 1.20.
    The go metapackage points to a single go version that
    increments at a date TBD after each go1.x major release. The
    expression golang(API) is available immediately upon each go1.x
    major release and is stable for expressing the minimum version
    or a temporarily pinned version.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1696852801">- Packaging improvements:
  * Summary and Description clarify the purpose of this CLI tool
  * Use Group: Development/Languages/Go instead of Other
  * Drop BuildRequires: golang-packaging. The recommended Go
    toolchain dependency is BuildRequires: golang(API) &gt;= 1.x or
    optionally the metapackage BuildRequires: go
  * Drop Requires: golang-packaging. The original macros for file
    movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove %%{go_nostrip} macro which is no longer recommended</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1697544000">- Update to version 2.18.1:
  * chore(deps): update all dependencies
  * Update gosec to version 2.18.1 in the action
  * Update cosign version to v2.2.0
  * Refactor how ignored issues are tracked
  * Restrict the maximum depth when tracking the slice bounds
  * Handle empty ssa results
  * Handle gracefully any panic that occurs when building the SSA representation of a package
  * Fix typo
  * Handle new function when getting the call info in case is overriden
  * Bump golang.org/x/net from 0.16.0 to 0.17.0 (#1037)
  * Update to Go 1.21.3 and 1.20.10 (#1035)
  * Update the list of unsafe functions detected by the unsafe rule (#1033)</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- Update to version 2.18.2:
  * Added ppc64le support
  * chore(deps): update all dependencies
  * Ensure ignores are handled properly for multi-line issues
  * Update Go to version 1.21.4 and 1.20.11
  * chore(deps): update module golang.org/x/text to v0.14.0
  * chore(deps): update all dependencies
  * Remove the hardcoded GOOS value when building the Linux binary to enable support for container image for ARM
  * Avoid allocations with `(*regexp.Regexp).MatchString`
  * Fix some typos
  * Update local installation instructions by removing the details for Go 1.16</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913601">- update to 2.18.2:
  * Disable dot-imports in revive linter
  * Run the gosec with data race detector active during
    tests
  * Fix data race in the analyzer
  * Fix test that checks the overriden nosec directive
  * Clean global state in flgs tests
  * Format the file
  * Update README with details which describe the current
    of #nosec
  * Ensure the ignores are parsed before analysing the
    package</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1707825600">- Update to version 2.19.0:
  * Update gosec version to v2.19.0 in the Github action
  * Update CI to go version 1.22
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update dependency babel-standalone to v7.23.7
  * chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
  * chore(deps): update all dependencies
  * chore(deps): update actions/setup-go action to v5
  * Fix lint warnings by properly formatting the files
  * chore: Refactor Sample Code to Separate Files
  * Update go version to 1.21.5 and 1.20.12 (#1084)
  * chore(deps): update all dependencies (#1080)
  * Ignore the issues from generated files when using the analysis framework (#1079)
  * Update README with upload-sarif v2 (#1078)
  * chore(deps): update dependency babel-standalone to v7.23.4</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1715860800">- Update to version 2.20.0:
  * Update docker image in action to v2.20.0
  * Catch os.ModePerm permissions in os.WriteFile
  * Add a unit test to detect the false negative in rule G306 for os.ModePerm permissions
  * Add filepath.EvalSymlinks to clean functions in rule G304
  * chore(deps): update all dependencies
  * Update Go to version 2.22.3 in CI and release
  * chore(deps): update module golang.org/x/text to v0.15.0
  * chore(deps): update all dependencies
  * chore(deps): update module github.com/onsi/gomega to v1.33.0
  * Update to go 1.22.2
  * chore(deps): update all dependencies
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
  * chore(deps): update all dependencies
  * fix(helpers/goversion): get from go.mod
  * chore: fix function name
  * chore(deps): update all dependencies
  * Format the imports using the gci tool
  * Fixup: delete unused variable
  * Fix test: update test to comply with the spec of generated sources
  * Refactor: use standard function to check if a file is generated
  * Fix lint warnings
  * Add support for math/rand/v2 added in Go 1.22
  * Skip the G601 tests for Go version 1.22
  * Update go version to 1.22.1 and 1.21.8
  * Ignore 'implicit memory aliasing' rule for Go 1.22+
  * chore(deps): update all dependencies
  * chore(deps): update module golang.org/x/tools to v0.18.0
  * fix(hardcoded): remove duplicated `Stripe API Key`</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1725969600">- Update to version 2.21.2:
  * Update the github action to v2.21.2 (#1218)
  * Update the SARIF schema URL (#1217)
  * Update go version to 1.23.1 and 1.22.7 (#1216)
  * chore(deps): update all dependencies (#1215)
  * Update gosec version to v2.21.1 in github action (#1213)
  * Rollback the SARIF version to 2.1 since github doesn't support 2.2 (#1210)
  * Update gosec in github action to v2.21.0 (#1208)
  * Update cosign version to v2.4.0 in release github workflow (#1207)
  * Improvement the int conversion overflow logic to handle bound checks (#1194)
  * fix: G602 support for nested conditionals with bounds check (#1201)
  * Update go.mod to sue go 1.22.0 toolchain
  * chore(deps): update all dependencies
  * Make variable name more clear
  * Make variable names more explicity and reduce duplications
  * Fix formatting
  * Refactor to reduce some fuctions and variable names
  * Pass the value argument directly since is an interface
  * Added suggested changes
  * Added another test case in order to increase code coverage
  * Removed function parameter which is always the same
  * Formatting problems(CI was not passing)
  * Updated analyzer to use new way of initialization
  * Migrated the rule to the analyzers folder
  * Refractored code a little bit
  * Added new rule G407(hardcoded IV/nonce)
  * Fix conversion overflow false positive when using ParseUint
  * Add a build step to measure the scan perfomance
  * Fix conversion overflow false positives when they are checked or pre-determined
  * Update go.mod
  * chore(deps): update all dependencies
  * Fix false positive in conversion overflow check from uint8/int8 type
  * Disable staticcheck SA1019 rule
  * Update the golangci linters
  * Add more test to cover more use cases for G115 rule
  * Allow excluding analyzers globally (#1180)
  * Update to Go 1.23.0 (#1183)
  * chore(deps): update all dependencies (#1182)
  * Read the AI API key also from an environment variable (#1181)
  * Add support to generate auto fixes using LLM (AI) (#1177)
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update dependency babel-standalone to v7.24.10
  * Resolve underlying type to detect overflows in type aliases
  * chore(deps): update dependency babel-standalone to v7.24.8
  * Fix multifile ignores
  * Add -enable-audit cli flag
  * Update to go 1.22.5 and 1.21.12
  * chore(deps): update all dependencies
  * Added more rules
  * Fixed coverage workflow
  * Fixed CI workflow
  * Minor changes
  * Split the G401 rule into two separate ones
  * Updated G401 corresponding CWE
  * chore(deps): update docker/build-push-action action to v6
  * Update to go versions to 1.21.11 and 1.22.4
  * chore(deps): update all dependencies
  * Fix nosec when applied to a block
  * Add more types to templates rule
  * Map the G115 rule to an CWE ID
  * chore(deps): update all dependencies
  * Update README with G115 rule description
  * Remove deprecated megacheck linter from golangci
  * Format imports
  * Update .gitignore
  * Add a new rule to detect integer overflow on integer types conversion
  * feat: add env var to override the Go version detection
  * Use the proper logic when disabling the go module version
  * Update the README with some details related to Go version used by the rules
  * Add an environment varialbe which disables the parsing of Go version from module file
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1726660800">- Update to version 2.21.3:
  * Update gosec version to v2.21.3 in github action (#1227)
  * Populate the fixes only when autofix is not empty (#1226)
  * chore(deps): update all dependencies (#1223)
  * G115 Struct Attribute Checks (#1221)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1727352000">- Update to version 2.21.4:
  * Update the gosec to v2.21.4 in the Github action
  * Add the version into goreleaser config
  * chore(deps): update module google.golang.org/api to v0.198.0 (#1233)
  * Prevent panic: unexpected constant value: &lt;nil&gt; (#1232)
  * Fix running single analyzer which isn't a rule bug (#1231)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1736424000">- Update to version 2.22.0:
  * Update what message for G104 (#1282)
  * chore(deps): update module github.com/onsi/ginkgo/v2 to v2.22.2 (#1281)
  * chore(deps): update all dependencies (#1280)
  * chore(deps): update all dependencies (#1279)
  * Simplify sortIssues implementation (#1277)
  * Enable testifylint and fix up lint issues (#1276)
  * Refactor AppendError to check for build.NoGoError (#1273)
  * chore(deps): update module golang.org/x/net to v0.33.0 [security] (#1275)
  * Update README.md (#1274)
  * Rule documentation updates (#1272)
  * Replace old golang.org links with new go.dev (#1271)
  * Refactor AppendError to use strings.Contains (#1270)
  * Simplify Analyzer.ignore by reducing nesting (#1269)
  * Improve capitalization in AI API flags descriptions (#1267)
  * Remove unused golint dependency (#1266)
  * Simplify tests by using GinkgoT().TempDir() (#1265)
  * Documentation on adding new rules and analyzers (#1262)
  * chore(deps): update all dependencies (#1268)
  * Update to go 1.22.10 and 1.23.4 versions (#1264)
  * chore(deps): update module golang.org/x/crypto to v0.31.0 [security] (#1263)
  * chore(deps): update all dependencies (#1261)
  * chore(deps): update module github.com/onsi/gomega to v1.36.0 (#1259)
  * fix: revive.redefines-builtin-id lint warnings (#1257)
  * Fix typos in comments and fields
  * Remove the decryption funtions/methods from G407 check
  * Upate go to version 1.23.3 and 1.22.9
  * Fix G115 false positive when going from parsed uint to larger int
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * Update go version to 1.23.2 and 1.22.8
  * chore(deps): update module google.golang.org/api to v0.201.0
  * chore(deps): update all dependencies
  * chore(deps): update all dependencies
  * Fix the cosign step to authenticate with the container registry
  * chore(deps): update module google.golang.org/api to v0.199.0</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1739448000">- Update to version 2.22.1:
  * Update cosign to v2.4.2 (#1303)
  * Add support for go 1.24 and phased out support for go 1.22 (#1302)
  * chore(deps): update all dependencies (#1300)
  * Update to go version 1.23.6 and 1.22.12 (#1299)
  * chore(deps): update module google.golang.org/api to v0.219.0 (#1296)
  * chore(deps): update module google.golang.org/api to v0.218.0 (#1294)
  * Add test to conver unit parssing for G115 rule (#1293)
  * Update to go version 1.23.5 and 1.22.11 (#1291)
  * chore(deps): update all dependencies (#1290)
  * Update gosec in github action to 2.22.0 (#1286)</changelog>
  <changelog author="felix.niederwanger@suse.de" date="1741262400">- Update to version 2.22.2:
  * Update to go version 1.24.1 and 1.23.7 (#1313)
  * chore(deps): update all dependencies (#1310)
  * chore(deps): update all dependencies (#1308)
  * Update gosec version in the GitHub action to v2.22.1 (#1307)
  * chore(deps): update module google.golang.org/api to v0.221.0 (#1305)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.de&gt;" date="1744027200">- Update to version 2.22.3:
  * Update version in 'action.yml' to 2.22.3 (anticipating next version (#1332)
  * Update go version to 1.24.2 and 1.23.8 (#1331)
  * remove G113. It only affects old/unsupported versions of Go (#1328)
  * chore(deps): update all dependencies (#1325)
  * Add SSOJet (#1320)
  * chore(deps): update all dependencies (#1319)
  * Update the integrity sha for babel dependency in html report (#1316)
  * Add support for `//gosec:disable` directive (#1314)
  * chore(deps): update all dependencies (#1315)</changelog>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.de&gt;" date="1746705600">- Update to version 2.22.4:
  * Update to go version 1.24.3 and 1.23.9
  * update: updated the build command to include version metadata
  * chore(deps): update all dependencies
  * Update the AI provider API key value when provided as an argument
  * chore(deps): update module google.golang.org/api to v0.230.0
  * chore(deps): update module google.golang.org/api to v0.229.0
  * chore(deps): update all dependencies
  * Comment the reason why the file can be nil when an issue is created
  * Handle nil file when creating a new issue
  * chore(deps): update all dependencies (#1333)</changelog>
</package>
<package pkgid="d9298a165b2ae86ab3bc2af0c7229833d8268eaddb00f2acdbe1b31dd68750e5" name="greybird-geeko-theme" arch="src">
  <version epoch="0" ver="3.23.4+git0.c1d46c3" rel="bp156.3.3.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560859200">- Added license gpl-3.0-or-later for metacity theme
- Fixed _service file to follow naming guidelines ("+" replaced "~")</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1561118400">- Update to version 3.22.10.1+git5.316475b:
  * Tweak dark colors
  * Added theme-preview</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1562587200">- Update to version 3.22.10.1+git33.0c9d808:
  * Theme is now split in Light and Dark variants
  * Added xfwm dark theme
  * Improved xfwm inactive buttons contrast
  * Meson port
  * Update README.md to reflect meson
  * Remove unused themes
- Updated and optimized spec file to build with meson</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1563278400">- Update to version 3.22.10.1+git38.1a7574f:
  * Merge bright into lights notification theme, and drop darks bright theme
  * Install bright notification files to proper places
  * Add flags for flatpak usage</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1563364800">- Update to version 3.22.10.1+git39.ffde076:
  * Work around Meson bug that prevents Leap from building</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1576929600">- Update to version 3.22.10.1+git48.35f7cb8:
  * Make use of symlinks
  * Add single-user installation instructions
  * Added xfwm4 dark accessibility theme
  * Update to upstream master</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1582891200">- Update to version 3.22.10.1+git50.4465523:
  * Sync with Greybird upstream</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1582891201">- Update to version 3.22.10.1+git52.ef9302a:
  * Use correct theme path for notifyd</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1596456000">- Update to version v3.22.11+git1.968e3b5:
  * Improve contrast of gtk2 selection background color</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1596974400">- fix version number</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1606564800">- Update to version 3.22.11+git2.751e0f3:
  * Rebase parts of the %linked code</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1608292800">- Update to version 3.22.11+git10.2f4304a:
  * Reduce messagedialog buttonbox size
  * Make CSD titlebars slimmer
  * Improve dark xfwm4 tabwin contrast
  * More normal-sized inline-toolbar buttons
  * Add workaround for Gnome Builder
  * Fix progressbar in unfocused windows</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1656331200">- Update to version 3.23.1+git0.a96e825:
  * Sync with Greybird 3.23.1
  * Add initial support for Gtk4 and libhandy
  * Fix dark xfwm4-a11y install path
  * Fix xfwm4-a11y and xfwm4-compact install path
  * Fix: GtkLabel: Backdropped selection color adjusted
  * Fix: Backdropped selection: GtkListBoxes weren't grey
  * Hotfix: removed background color for non-bg items
  * Gtk3: Adjusted selected backdrop fg/bg colors: shades of grey.
  * Changes the xfwm4 border colors
  * build: refactor meson
  * Correct gradients for horizontal scrollbars
  * Reduce messagedialog buttonbox size
  * Make CSD titlebars slimmer
  * Correct gradients for horizontal scrollbars (shimmerproject/Greybird#288)
  * Greybird-Dark titlebar decorations now match their CSD counterparts (shimmerproject/Greybird#301)
  * Background selection colors are now grey instead of blue for better readability
  * Add initial support for Gtk4 and libhandy
  * Install index.theme</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1656331201">- Update to version 3.23.1+git1.77c0887:
  * Cleanup leftovers and correct emerald file mistakinly being renamed</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1656417600">- Prevent Unity desktop theme from being installed
  Added disable-unity_v3.23.1.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1673697600">- Make "*:link:selected" optional to work around too old gtk4 libs
  on Leap 15.4; add link-selected-is-optional.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1676980800">- Make "*:link:selected" optional to work around too old gtk4 libs
  on Leap 15.5, too.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734523200">- Add new patch
  git7e4507d7713b2aaf41f8cfef2a1a9e214a4d8b6f-fix-label-styles-for-xfdesktop-4.19.patch
- Refresh link-selected-is-optional.patch</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1734609600">- Update to version 3.23.4+git0.c1d46c3:
  * Sync with Greybird up to commit 7e4507d7713b2aaf41f8cfef2a1a9e214a4d8b6f
  * Fix label styles for xfdesktop 4.19
  * Stop forcing icon style for sidebars
  * Style hover/active undecorated buttons same as normal
  * Handle toolbar CSS class
  * Style item menubar nodes
  * xfwm4: Fix "Hide frame when maximized" ignoring top frame
  * xfwm4: Improve tabwin contrast
  * xfwm4: Bump tabwin preview to 128px
  * xfwm4: Remove dark line below titlebar
  * Decrease Gnome Software's headerbar height
- Patches removed as no longer needed:
  * git7e4507d7713b2aaf41f8cfef2a1a9e214a4d8b6f-fix-label-styles-for-xfdesktop-4.19.patch</changelog>
</package>
<package pkgid="0c50a7e6dab10a47061ce81793fd8e91e5eecbb1cf12b2f2d187206c1da31906" name="greybird-theme" arch="src">
  <version epoch="0" ver="3.23.4+git0.7e4507d" rel="bp156.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to the current release 3.22.0</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482753600">- clarify rubygem-sass BuildRequires version</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1506081600">- updated to current release 3.22.5
- added gnome-shell.css to package</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Remove bias from description.
- Update homepage URL. Remove idempotent %if..%endif guards.</changelog>
  <changelog author="cornelis@solcon.nl" date="1519473600">- Update to 3.22.6:
  * Improvements for Thunar-gtk3
  * Improvements for xfce4-panel 4.13
  * Implement Chrome/ium Gtk3 style
  * Include dark version of gnome app theming
  * Tweak lightdm-gtk-greeter's restart button"
  * Bugfixes
- Remove gtk3-engine-unico requirement, has not been needed for some
  time</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1542456000">- Update to 3.22.9:
  * Support for Xfwm4 4.13
  * Improve contrast in Xfwm4's alt-tab dialog (both 4.12 and 4.13)
  * Switch from ruby-sass to sassc
  * Fix height thunar's pathbar entry widget
  * Use correct colors for GtkNotebook
  * Fix Chromium's titlebar buttons
  * Make the Gtk3 xfce4-panel 80% transparent again
  * Improve hidpi support in CSD (gh#shimmerproject/greybird#100)
  * Fix Gtk2 radiobuttons (gh#shimmerproject/greybird#219)
  * Drop superfluous assets
  * Make radio and checkitems more consistent between Gtk2 and Gtk3
  * Improve lightdm-gtk-greeter theming
  * Include Gtk3 window decorations
  * Improve backdrop style of several widgets
- BuildRequires: remove ruby-sass and add  sassc</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1550491200">- Update to 3.22.10:
  * Improve the print dialog's style (gh#shimmerproject/Greybird#238)
  * Fix glitch in Xfdesktop 4.13 rubberband (gh#shimmerproject/Greybird#234)
  * Apply Xfce Panel Tasklist margin intelligently (gh#shimmerproject/Greybird#240)
  * Make Xfce Panel's Tasklist button's padding consistent
  * Handle carets in entry widgets in Xfce panel plugins (gh#shimmerproject/Greybird#241)
  * Fix xfce4-terminal's tab borders again (gh#shimmerproject/Greybird#184)
  * Re-apply Xfwm4 tabwin sizing improvement (gh#shimmerproject/Greybird#224)
  - Dropped obsolete macros and added minor improvements</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1556107200">- Update to version 3.22.10~git2.799485d:
  * Make error and warning entry text more readable
  * Also set backdrop color for print dialog
    (Fixes gh#shimmerproject/Greybird#243)
  * Re-apply xfwm4 tabwin sizing improvement
    (Issue gh#shimmerproject/Greybird#224)
- Switched sources to git master branch
- Spec file: switched to %autosetup for simplicity</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557489600">- Update to version 3.22.10~git3.c0b8881:
  * Improve button sizing
  * Make error and warning entry text more readable
  * Also set backdrop color for print dialog
    (Fixes gh#shimmerproject/Greybird#243)</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1571918400">- Update to version 3.22.10~git8.99f40ce:
  * Add minimal size to header bar button's label
  * Revert "Fix size of linked button with images in header bar"
  * xfdesktop: Highlight selected icons
  * Fix size of linked button with images in header bar
  * xfce4-panel: Add drop-target style
  * Improve button sizing
  * Make error and warning entry text more readable
  * Also set backdrop color for print dialog (Fixes #243)
  * Re-apply xfwm4 tabwin sizing improvement (Issue #224)
  * Improve the print dialog's style (Fixes #238)</changelog>
  <changelog author="tux93@opensuse.org" date="1572868800">- Update to version 3.22.10+git14.e467f4b:
  * Add single-user installation instructions
  * Fix notification theme paths
  * Include meson as dependency in README.md
  * various small fixes
  * Buildsystem ported to meson and added dark theme</changelog>
  <changelog author="tux93@opensuse.org" date="1573041600">- Update to version 3.22.10+git15.acede86:
  * Make use of symlinks cleanup unused files</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1573905600">- Update to version 3.22.10+git17.4d806cd:
  * Fixed xfwm4-a11y dark buttons padding and window borders
  * Added xfwm4 Greybird-accessibility-dark</changelog>
  <changelog author="tux93@opensuse.org" date="1582372800">- Update to version 3.22.11+git4.320a703:
  * Sync dark theme with light theme and use symlink
  * Rebase partly on Adwaita 3.24
  * Messagedialog: Reduce buttonbox button height
  * notifyd: Tweak the theme's appearance (button hover)
  * Hide i/o on GtkSwitches</changelog>
  <changelog author="tux93@opensuse.org" date="1606564800">- Update to version 3.22.12+git4.454f139:
  * Rebase parts of the %linked code (Fixes #265)
  * Fix Thunar CSD when not focused (Fixes #274)
  * Fix GTK3 dark colors</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1608379200">- Update to version 3.22.13+git2.ede9f55:
  * Reduce messagedialog buttonbox size
  * Make CSD titlebars slimmer
  * Improve dark xfwm4 tabwin contrast
  * Improve contrast of dark entry (Fixes #263)
  * More normal-sized inline-toolbar buttons
  * Add workaround for Gnome Builder (Fixes #264)
  * Fix progressbar in unfocused windows (Fixes #284)</changelog>
  <changelog author="maurizio.galli@suse.com" date="1673870400">- Update to version 3.23.2+git0.25f312f:
  * Fixes "Hide frame when maximized" ignoring top frame
  * xfwm4: Also bump tabwin preview size to 128px
  * xfwm4: Improve tabwin contrast
  * Bump xfwm4 tabwin preview to 128px (Fixes #324)
  * Remove dark line below Xfwm4 titlebar introduced by recent change.
  * Add openbox support
  * Decrease Gnome Software's headerbar height
  * Fix installation of a11y and compact themes (Fixes #316) (#318)
  * Install Greybird/index.theme (#317)
  * Add initial support for Gtk4 and libhandy
  * Fix dark xfwm4-a11y install path (Issue #307)
  * Fix xfwm4-a11y and xfwm4-compact install path (Issue #307)
  * Removed unnecessary newline
  * Removed trailing whitespaces
  * Moved `@extends` to the top of the rule
  * Fix: GtkLabel: `Backdrop`ped selection color adjusted.
  * Fix: Backdropped selection: `GtkListBox`es weren't grey
  * Hotfix: removed background color for non-bg items
  * Gtk3: Adjusted selected backdrop fg/bg colors: shades of grey.
  * Changes the xfwm4 border colors
  * build: refactor meson
  * Correct gradients for horizontal scrollbars
- Make "*:link:selected" optional to work around too old gtk4 libs
  Leap 15.4; add link-selected-is-optional.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1676980800">- Make "*:link:selected" optional to work around too old gtk4 libs
  on Leap 15.5, too.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734436800">- Update to version 3.23.4+git0.7e4507d:
  * Fix label styles for xfdesktop 4.19 (#338)
  * Stop forcing icon style for sidebars
  * Style hover/active undecorated buttons same as normal
  * Handle toolbar CSS class
  * Style item menubar nodes (#328)</changelog>
</package>
<package pkgid="38f2ceb9bd95663d9cf3759cda373792e4365ebfad91f4b1db28c710669a5503" name="gthumb" arch="aarch64">
  <version epoch="0" ver="3.12.2" rel="bp156.5.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574078400">- Update to version 3.8.2:
  + User visible changes:
  - Use menus instead of popovers for menu buttons on the header
    bar, to show icons and accelerators.
  - Header bar: align menus to the right for menu buttons on the
    right side.
  - Tools menu: show the accelerators.
  - Search: show the matching files during the search operation.
  - Rename dialog: activate on enter.
  + Bugs fixed:
  - Fixed filesize test for big files.
  - Overwrite dialog: do not show an error after cancelling the
    operation.
  - Fixed crash when moving files to the trash.
  - Install missing UI files.
  - Added image/webp support in .desktop file.
  - Fix callback signature for value-changed signal when setting
    zoom.
  - Help: corrected wiki link.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577102400">- Update to version 3.8.3:
  + App icons: name the app icons with the application id.
  + Jpeg loader: crash when the original size is too big for a
    cairo surface.
  + Fixed run-time errors if exiv2 is not used.
  + Fixed window size the first time gThumb is executed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587297600">- Update to version 3.10.0:
  + New features and user visible changes:
  - Edit metadata dialogs: moved the lock button on the header
    bar; show the navigation bar only when the lock button is
    active.
  - Open location dialog: allow to use tilde as a home folder
    shortcut.
  + Bugs fixed: Install missing .ui file.
  + Updated translations.
- Changes from version 3.9.1:
  + New features and user visible changes:
  - Added ability to customize the keyboard shortcuts.
  - Added a shortcuts window to show the available shortcuts.
  - Added option to change the mouse wheel action.
  - Image viewer: added ability to define the transparency style.
  - Video viewer: allow to view the video at the original size;
    show the zoom factor in the statusbar.
  - Edit comment/tags dialogs: use the header bar; allow to
    change the current image from the dialog.
  - Add to catalog: use the header bar; allow to change the
    current image from the dialog.
  - Search: added ability to search in multiple folders.
  - Scripts: added %T to insert a timestamp in the command.
  - Folder tree:
    . Better drag&amp;drop support: allow to move a catalog into a
    library, and a library into another library, show an error
    if the drop operation is not possible;
    . Added an 'Open in Terminal' command in the context menu.
  - Overwrite dialog: show video previews as well, fixed dialog
    size.
  - Preferences: allow to specify a catalog or any other location
    as startup location.
  - Trash/Delete files: show progress for long operations.
  - File properties:
    . Added the file size in bytes.
    . Added a context menu command to customize the visibile
    properties.
  - Toolbar: show edit comment/tags in browser mode as well.
  - Export tools: removed from the toolbar. Some tools moved to
    the tools menu, others as a submenu in the gears menu.
  - Fixed window size when started the first time.
  - Updated app icon to follow the new GNOME style.
  - Rewritten README in markdown, updated screenshots.
  - Appdata: added release and OARS tags for flathub
    compatibility.
  + Bugs fixed:
  - gThumb hangs when some mount point is unavailable.
  - Jpeg loader: crash when the original size is too big for a
    cairo surface.
  - PNG loader: correctly load images with transparency.
  - Fixed run-time errors if exiv2 is not used.
  - Catalog: preserve the list order after saving the properties.
  - Scripts: fixed task cancellation when using a shell script.
  + Source code:
  - Utility functions refactoring.
  - Added tests for the utility functions.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1600689600">- Update to version 3.10.1:
  + User visible changes:
  - Exit fullscreen when pressing Esc in fullscreen mode.
  - Search editor: focus the newly added filter selector.
  - File list: reset vertical scroll position after changing
    directory.
  - Preferences dialog: increase width for extensions and
    shortcuts lists.
  + Bugs fixed:
  - WebP loader: fixed an infinite loop when the operation is
    cancelled.
  - Jpeg loader: fixed crash in case of some malformed jpegs.
  - Fixed crash when selecting other images after deleting.
  - Fixed long UI freeze after cutting/pasting many files.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1612094400">- Update to version 3.10.2:
  + Continuously reloads image when it is only image in folder.
  + exiv2: remove the charset= prefix from strings.
  + Fixed jump to bottom when selecting thumbnails with mouse.
  + gThumb opens import tool if the import tool is already opened.
  + Image viewer: fixed bright line visual artifacts.
  + Search:
  - Fixed possible crash after cancelling a search.
  - Do not count duplicated files.
  - Stop the previous search before starting the new one.
  - Stop searching if the user changes location.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618315200">- Update to version 3.10.3:
  + Fix possible build error.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1629720000">- Update to version 3.10.4:
  + Install the gThumb import desktop file.
  + Contact sheet: fixed themes list always empty.
  + Thumbnailer: try with the system thumbnailer if the image is
    null
  + File chooser: correctly get the filename extension.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632139200">- Update to version 3.12.0:
  + New features and user visible changes:
  - Added ability to load AVIF/HEIF images using libheif.
  - Added ability to save images as AVIF.
  - Add JPEG XL (*.jxl) read support.
  - File manager: added file actions to the viewer
    context menu.
  - Extensions: removed facebook and picasaweb uploaders.
  - Image viewer: use a proportional zoom increment.
  - Read color profiles from png files as well.
  - Media viewer: use accurate seeking when clicking on
    the progress bar.
  - Media viewer: show the pointed time when hovering over
    the progress bar.
  - Preferences: added option to show/hide the statusbar.
  - Rename files: added a button to revert to the last
    used template.
  - Added configurable shortcuts for Save and Save As.
  - Media viewer: added keyboard shortcuts.
  - File list: always allow to use Control-A to select
    all files.
  - Allow to set shortcuts to activate filters.
  - Added a template editor to edit text values with
    special codes: script commands, rename templates,
    print header and footer, etc.
  - Faster navigation when a directory contains
    thousands of images.
  - File list: start more thumbnailers in parallel.
  - Allow to mount unmounted volumes.
  - Color picker: added other formats: rgb in % and hsl.
  - Allow to keep browsing while executing long-running
    external tools.
  - Status bar: added button to show the progress dialog.
  - File properties: do not reset the selection after showing
    another image.
  - Histogram: show the properties in a single column
    to save horizontal space.
  + Bugs fixed:
  - Install the gThumb import desktop file.
  - Fix memory leak when loading webp, jxl, avif images.
  - Check if image is null before using it.
  - Added a Flatpak manifest.
  - Contact sheet: fixed themes list always empty.
  - Raw: Make compatible with LibRaw 0.21
  - Folder context menu: do not allow to move if cannot delete.
  - Folder context menu: do not allow to copy not mounted
    volumes.
  - Terminal: enable only for local folders.
  - Lots of others small fixes.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1632139201">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139202">- Add pkgconfig(libheif) BuildRequires: Add support for heif/avif.
- Add pkgconfig(champlain-0.12) and pkgconfig(champlain-gtk-0.12)
  BuildRequires and pass libchamplain=true to meson: Use
  libchamplain to show the position the image refers to.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1636113600">- Stop passing tracing=false and documentation=true to meson, no
  longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644494400">- Add daef485dffd67319c114cf1bda453bf6157e11ff.patch: Remove
  duplicate lang entry.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647950400">- Update to version 3.12.1:
  + PNG loader ignores gAMA.
  + Transparent webp images are rendered incorrectly.
  + Crash when dropping files on an empty folder/catalog.
  + Fixed location loading after mounting volume.
  + JPEG image dimensions not displayed for files inside the
    trash.
  + Infinite Loop when viewing more than 50 thumbnails.
  + X11 window title is not set.
  + Copy release notes on build from NEWS to metainfo file.
  + Fixed build if appstream &gt;= 0.14.6 is not available.
  + Fix incorrect usage of shared_module in extensions.
  + cli: mention that user can open files and/or directories.
  + Updated translations.
- Drop daef485dffd67319c114cf1bda453bf6157e11ff.patch: Fixed
  upstream.
- Add pkgconfig(appstream) and AppStream BuildRequires: Needed to
  build and install appdata now.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1649246400">- Update to version 3.12.2:
  + Fixed possible crash when changing directory during
    thumbnails creation.
  + Added support for larger thumbnail sizes: 512, 768 and
    1024 pixels.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1651060800">- Add relevant version limit to pkgconfig(appstream) BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1673870400">- Add da0d3f22.patch: Fix build with libraw 0.21.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1688385600">- Add 3376550a.patch: exiv2: added support for version 0.28.
- Refresh da0d3f22.patch from upstream git.</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1689336000">- Add pkgconfig(libjxl) BuildRequires: enable JPEG XL image
  support.
- Add c97a8aaa.patch: desktop background: fixed when using the dark
  color scheme</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1740052800">- Disable libchamplain. It pulls in libsoup 3, while gthumb is
  still using libsoup 2 (boo#1237098).</changelog>
</package>
<package pkgid="487f194d82266d46f50dd2bfc1914507514124fa6555a312e07d01136df304d6" name="gthumb" arch="i586">
  <version epoch="0" ver="3.12.2" rel="bp156.5.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574078400">- Update to version 3.8.2:
  + User visible changes:
  - Use menus instead of popovers for menu buttons on the header
    bar, to show icons and accelerators.
  - Header bar: align menus to the right for menu buttons on the
    right side.
  - Tools menu: show the accelerators.
  - Search: show the matching files during the search operation.
  - Rename dialog: activate on enter.
  + Bugs fixed:
  - Fixed filesize test for big files.
  - Overwrite dialog: do not show an error after cancelling the
    operation.
  - Fixed crash when moving files to the trash.
  - Install missing UI files.
  - Added image/webp support in .desktop file.
  - Fix callback signature for value-changed signal when setting
    zoom.
  - Help: corrected wiki link.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577102400">- Update to version 3.8.3:
  + App icons: name the app icons with the application id.
  + Jpeg loader: crash when the original size is too big for a
    cairo surface.
  + Fixed run-time errors if exiv2 is not used.
  + Fixed window size the first time gThumb is executed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587297600">- Update to version 3.10.0:
  + New features and user visible changes:
  - Edit metadata dialogs: moved the lock button on the header
    bar; show the navigation bar only when the lock button is
    active.
  - Open location dialog: allow to use tilde as a home folder
    shortcut.
  + Bugs fixed: Install missing .ui file.
  + Updated translations.
- Changes from version 3.9.1:
  + New features and user visible changes:
  - Added ability to customize the keyboard shortcuts.
  - Added a shortcuts window to show the available shortcuts.
  - Added option to change the mouse wheel action.
  - Image viewer: added ability to define the transparency style.
  - Video viewer: allow to view the video at the original size;
    show the zoom factor in the statusbar.
  - Edit comment/tags dialogs: use the header bar; allow to
    change the current image from the dialog.
  - Add to catalog: use the header bar; allow to change the
    current image from the dialog.
  - Search: added ability to search in multiple folders.
  - Scripts: added %T to insert a timestamp in the command.
  - Folder tree:
    . Better drag&amp;drop support: allow to move a catalog into a
    library, and a library into another library, show an error
    if the drop operation is not possible;
    . Added an 'Open in Terminal' command in the context menu.
  - Overwrite dialog: show video previews as well, fixed dialog
    size.
  - Preferences: allow to specify a catalog or any other location
    as startup location.
  - Trash/Delete files: show progress for long operations.
  - File properties:
    . Added the file size in bytes.
    . Added a context menu command to customize the visibile
    properties.
  - Toolbar: show edit comment/tags in browser mode as well.
  - Export tools: removed from the toolbar. Some tools moved to
    the tools menu, others as a submenu in the gears menu.
  - Fixed window size when started the first time.
  - Updated app icon to follow the new GNOME style.
  - Rewritten README in markdown, updated screenshots.
  - Appdata: added release and OARS tags for flathub
    compatibility.
  + Bugs fixed:
  - gThumb hangs when some mount point is unavailable.
  - Jpeg loader: crash when the original size is too big for a
    cairo surface.
  - PNG loader: correctly load images with transparency.
  - Fixed run-time errors if exiv2 is not used.
  - Catalog: preserve the list order after saving the properties.
  - Scripts: fixed task cancellation when using a shell script.
  + Source code:
  - Utility functions refactoring.
  - Added tests for the utility functions.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1600689600">- Update to version 3.10.1:
  + User visible changes:
  - Exit fullscreen when pressing Esc in fullscreen mode.
  - Search editor: focus the newly added filter selector.
  - File list: reset vertical scroll position after changing
    directory.
  - Preferences dialog: increase width for extensions and
    shortcuts lists.
  + Bugs fixed:
  - WebP loader: fixed an infinite loop when the operation is
    cancelled.
  - Jpeg loader: fixed crash in case of some malformed jpegs.
  - Fixed crash when selecting other images after deleting.
  - Fixed long UI freeze after cutting/pasting many files.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1612094400">- Update to version 3.10.2:
  + Continuously reloads image when it is only image in folder.
  + exiv2: remove the charset= prefix from strings.
  + Fixed jump to bottom when selecting thumbnails with mouse.
  + gThumb opens import tool if the import tool is already opened.
  + Image viewer: fixed bright line visual artifacts.
  + Search:
  - Fixed possible crash after cancelling a search.
  - Do not count duplicated files.
  - Stop the previous search before starting the new one.
  - Stop searching if the user changes location.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618315200">- Update to version 3.10.3:
  + Fix possible build error.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1629720000">- Update to version 3.10.4:
  + Install the gThumb import desktop file.
  + Contact sheet: fixed themes list always empty.
  + Thumbnailer: try with the system thumbnailer if the image is
    null
  + File chooser: correctly get the filename extension.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632139200">- Update to version 3.12.0:
  + New features and user visible changes:
  - Added ability to load AVIF/HEIF images using libheif.
  - Added ability to save images as AVIF.
  - Add JPEG XL (*.jxl) read support.
  - File manager: added file actions to the viewer
    context menu.
  - Extensions: removed facebook and picasaweb uploaders.
  - Image viewer: use a proportional zoom increment.
  - Read color profiles from png files as well.
  - Media viewer: use accurate seeking when clicking on
    the progress bar.
  - Media viewer: show the pointed time when hovering over
    the progress bar.
  - Preferences: added option to show/hide the statusbar.
  - Rename files: added a button to revert to the last
    used template.
  - Added configurable shortcuts for Save and Save As.
  - Media viewer: added keyboard shortcuts.
  - File list: always allow to use Control-A to select
    all files.
  - Allow to set shortcuts to activate filters.
  - Added a template editor to edit text values with
    special codes: script commands, rename templates,
    print header and footer, etc.
  - Faster navigation when a directory contains
    thousands of images.
  - File list: start more thumbnailers in parallel.
  - Allow to mount unmounted volumes.
  - Color picker: added other formats: rgb in % and hsl.
  - Allow to keep browsing while executing long-running
    external tools.
  - Status bar: added button to show the progress dialog.
  - File properties: do not reset the selection after showing
    another image.
  - Histogram: show the properties in a single column
    to save horizontal space.
  + Bugs fixed:
  - Install the gThumb import desktop file.
  - Fix memory leak when loading webp, jxl, avif images.
  - Check if image is null before using it.
  - Added a Flatpak manifest.
  - Contact sheet: fixed themes list always empty.
  - Raw: Make compatible with LibRaw 0.21
  - Folder context menu: do not allow to move if cannot delete.
  - Folder context menu: do not allow to copy not mounted
    volumes.
  - Terminal: enable only for local folders.
  - Lots of others small fixes.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1632139201">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139202">- Add pkgconfig(libheif) BuildRequires: Add support for heif/avif.
- Add pkgconfig(champlain-0.12) and pkgconfig(champlain-gtk-0.12)
  BuildRequires and pass libchamplain=true to meson: Use
  libchamplain to show the position the image refers to.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1636113600">- Stop passing tracing=false and documentation=true to meson, no
  longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644494400">- Add daef485dffd67319c114cf1bda453bf6157e11ff.patch: Remove
  duplicate lang entry.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647950400">- Update to version 3.12.1:
  + PNG loader ignores gAMA.
  + Transparent webp images are rendered incorrectly.
  + Crash when dropping files on an empty folder/catalog.
  + Fixed location loading after mounting volume.
  + JPEG image dimensions not displayed for files inside the
    trash.
  + Infinite Loop when viewing more than 50 thumbnails.
  + X11 window title is not set.
  + Copy release notes on build from NEWS to metainfo file.
  + Fixed build if appstream &gt;= 0.14.6 is not available.
  + Fix incorrect usage of shared_module in extensions.
  + cli: mention that user can open files and/or directories.
  + Updated translations.
- Drop daef485dffd67319c114cf1bda453bf6157e11ff.patch: Fixed
  upstream.
- Add pkgconfig(appstream) and AppStream BuildRequires: Needed to
  build and install appdata now.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1649246400">- Update to version 3.12.2:
  + Fixed possible crash when changing directory during
    thumbnails creation.
  + Added support for larger thumbnail sizes: 512, 768 and
    1024 pixels.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1651060800">- Add relevant version limit to pkgconfig(appstream) BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1673870400">- Add da0d3f22.patch: Fix build with libraw 0.21.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1688385600">- Add 3376550a.patch: exiv2: added support for version 0.28.
- Refresh da0d3f22.patch from upstream git.</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1689336000">- Add pkgconfig(libjxl) BuildRequires: enable JPEG XL image
  support.
- Add c97a8aaa.patch: desktop background: fixed when using the dark
  color scheme</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1740052800">- Disable libchamplain. It pulls in libsoup 3, while gthumb is
  still using libsoup 2 (boo#1237098).</changelog>
</package>
<package pkgid="f64b11227121f59743da7de28807f9e9ccbfe9f7af0332dd89e0538275a99d42" name="gthumb" arch="s390x">
  <version epoch="0" ver="3.12.2" rel="bp156.5.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574078400">- Update to version 3.8.2:
  + User visible changes:
  - Use menus instead of popovers for menu buttons on the header
    bar, to show icons and accelerators.
  - Header bar: align menus to the right for menu buttons on the
    right side.
  - Tools menu: show the accelerators.
  - Search: show the matching files during the search operation.
  - Rename dialog: activate on enter.
  + Bugs fixed:
  - Fixed filesize test for big files.
  - Overwrite dialog: do not show an error after cancelling the
    operation.
  - Fixed crash when moving files to the trash.
  - Install missing UI files.
  - Added image/webp support in .desktop file.
  - Fix callback signature for value-changed signal when setting
    zoom.
  - Help: corrected wiki link.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577102400">- Update to version 3.8.3:
  + App icons: name the app icons with the application id.
  + Jpeg loader: crash when the original size is too big for a
    cairo surface.
  + Fixed run-time errors if exiv2 is not used.
  + Fixed window size the first time gThumb is executed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587297600">- Update to version 3.10.0:
  + New features and user visible changes:
  - Edit metadata dialogs: moved the lock button on the header
    bar; show the navigation bar only when the lock button is
    active.
  - Open location dialog: allow to use tilde as a home folder
    shortcut.
  + Bugs fixed: Install missing .ui file.
  + Updated translations.
- Changes from version 3.9.1:
  + New features and user visible changes:
  - Added ability to customize the keyboard shortcuts.
  - Added a shortcuts window to show the available shortcuts.
  - Added option to change the mouse wheel action.
  - Image viewer: added ability to define the transparency style.
  - Video viewer: allow to view the video at the original size;
    show the zoom factor in the statusbar.
  - Edit comment/tags dialogs: use the header bar; allow to
    change the current image from the dialog.
  - Add to catalog: use the header bar; allow to change the
    current image from the dialog.
  - Search: added ability to search in multiple folders.
  - Scripts: added %T to insert a timestamp in the command.
  - Folder tree:
    . Better drag&amp;drop support: allow to move a catalog into a
    library, and a library into another library, show an error
    if the drop operation is not possible;
    . Added an 'Open in Terminal' command in the context menu.
  - Overwrite dialog: show video previews as well, fixed dialog
    size.
  - Preferences: allow to specify a catalog or any other location
    as startup location.
  - Trash/Delete files: show progress for long operations.
  - File properties:
    . Added the file size in bytes.
    . Added a context menu command to customize the visibile
    properties.
  - Toolbar: show edit comment/tags in browser mode as well.
  - Export tools: removed from the toolbar. Some tools moved to
    the tools menu, others as a submenu in the gears menu.
  - Fixed window size when started the first time.
  - Updated app icon to follow the new GNOME style.
  - Rewritten README in markdown, updated screenshots.
  - Appdata: added release and OARS tags for flathub
    compatibility.
  + Bugs fixed:
  - gThumb hangs when some mount point is unavailable.
  - Jpeg loader: crash when the original size is too big for a
    cairo surface.
  - PNG loader: correctly load images with transparency.
  - Fixed run-time errors if exiv2 is not used.
  - Catalog: preserve the list order after saving the properties.
  - Scripts: fixed task cancellation when using a shell script.
  + Source code:
  - Utility functions refactoring.
  - Added tests for the utility functions.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1600689600">- Update to version 3.10.1:
  + User visible changes:
  - Exit fullscreen when pressing Esc in fullscreen mode.
  - Search editor: focus the newly added filter selector.
  - File list: reset vertical scroll position after changing
    directory.
  - Preferences dialog: increase width for extensions and
    shortcuts lists.
  + Bugs fixed:
  - WebP loader: fixed an infinite loop when the operation is
    cancelled.
  - Jpeg loader: fixed crash in case of some malformed jpegs.
  - Fixed crash when selecting other images after deleting.
  - Fixed long UI freeze after cutting/pasting many files.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1612094400">- Update to version 3.10.2:
  + Continuously reloads image when it is only image in folder.
  + exiv2: remove the charset= prefix from strings.
  + Fixed jump to bottom when selecting thumbnails with mouse.
  + gThumb opens import tool if the import tool is already opened.
  + Image viewer: fixed bright line visual artifacts.
  + Search:
  - Fixed possible crash after cancelling a search.
  - Do not count duplicated files.
  - Stop the previous search before starting the new one.
  - Stop searching if the user changes location.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618315200">- Update to version 3.10.3:
  + Fix possible build error.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1629720000">- Update to version 3.10.4:
  + Install the gThumb import desktop file.
  + Contact sheet: fixed themes list always empty.
  + Thumbnailer: try with the system thumbnailer if the image is
    null
  + File chooser: correctly get the filename extension.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632139200">- Update to version 3.12.0:
  + New features and user visible changes:
  - Added ability to load AVIF/HEIF images using libheif.
  - Added ability to save images as AVIF.
  - Add JPEG XL (*.jxl) read support.
  - File manager: added file actions to the viewer
    context menu.
  - Extensions: removed facebook and picasaweb uploaders.
  - Image viewer: use a proportional zoom increment.
  - Read color profiles from png files as well.
  - Media viewer: use accurate seeking when clicking on
    the progress bar.
  - Media viewer: show the pointed time when hovering over
    the progress bar.
  - Preferences: added option to show/hide the statusbar.
  - Rename files: added a button to revert to the last
    used template.
  - Added configurable shortcuts for Save and Save As.
  - Media viewer: added keyboard shortcuts.
  - File list: always allow to use Control-A to select
    all files.
  - Allow to set shortcuts to activate filters.
  - Added a template editor to edit text values with
    special codes: script commands, rename templates,
    print header and footer, etc.
  - Faster navigation when a directory contains
    thousands of images.
  - File list: start more thumbnailers in parallel.
  - Allow to mount unmounted volumes.
  - Color picker: added other formats: rgb in % and hsl.
  - Allow to keep browsing while executing long-running
    external tools.
  - Status bar: added button to show the progress dialog.
  - File properties: do not reset the selection after showing
    another image.
  - Histogram: show the properties in a single column
    to save horizontal space.
  + Bugs fixed:
  - Install the gThumb import desktop file.
  - Fix memory leak when loading webp, jxl, avif images.
  - Check if image is null before using it.
  - Added a Flatpak manifest.
  - Contact sheet: fixed themes list always empty.
  - Raw: Make compatible with LibRaw 0.21
  - Folder context menu: do not allow to move if cannot delete.
  - Folder context menu: do not allow to copy not mounted
    volumes.
  - Terminal: enable only for local folders.
  - Lots of others small fixes.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1632139201">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139202">- Add pkgconfig(libheif) BuildRequires: Add support for heif/avif.
- Add pkgconfig(champlain-0.12) and pkgconfig(champlain-gtk-0.12)
  BuildRequires and pass libchamplain=true to meson: Use
  libchamplain to show the position the image refers to.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1636113600">- Stop passing tracing=false and documentation=true to meson, no
  longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644494400">- Add daef485dffd67319c114cf1bda453bf6157e11ff.patch: Remove
  duplicate lang entry.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647950400">- Update to version 3.12.1:
  + PNG loader ignores gAMA.
  + Transparent webp images are rendered incorrectly.
  + Crash when dropping files on an empty folder/catalog.
  + Fixed location loading after mounting volume.
  + JPEG image dimensions not displayed for files inside the
    trash.
  + Infinite Loop when viewing more than 50 thumbnails.
  + X11 window title is not set.
  + Copy release notes on build from NEWS to metainfo file.
  + Fixed build if appstream &gt;= 0.14.6 is not available.
  + Fix incorrect usage of shared_module in extensions.
  + cli: mention that user can open files and/or directories.
  + Updated translations.
- Drop daef485dffd67319c114cf1bda453bf6157e11ff.patch: Fixed
  upstream.
- Add pkgconfig(appstream) and AppStream BuildRequires: Needed to
  build and install appdata now.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1649246400">- Update to version 3.12.2:
  + Fixed possible crash when changing directory during
    thumbnails creation.
  + Added support for larger thumbnail sizes: 512, 768 and
    1024 pixels.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1651060800">- Add relevant version limit to pkgconfig(appstream) BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1673870400">- Add da0d3f22.patch: Fix build with libraw 0.21.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1688385600">- Add 3376550a.patch: exiv2: added support for version 0.28.
- Refresh da0d3f22.patch from upstream git.</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1689336000">- Add pkgconfig(libjxl) BuildRequires: enable JPEG XL image
  support.
- Add c97a8aaa.patch: desktop background: fixed when using the dark
  color scheme</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1740052800">- Disable libchamplain. It pulls in libsoup 3, while gthumb is
  still using libsoup 2 (boo#1237098).</changelog>
</package>
<package pkgid="f889b30db11af4ca9c3f5bac7bb7ab2580cf020e0ee566fea3e7a6308aeb3b3b" name="gthumb" arch="src">
  <version epoch="0" ver="3.12.2" rel="bp156.5.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574078400">- Update to version 3.8.2:
  + User visible changes:
  - Use menus instead of popovers for menu buttons on the header
    bar, to show icons and accelerators.
  - Header bar: align menus to the right for menu buttons on the
    right side.
  - Tools menu: show the accelerators.
  - Search: show the matching files during the search operation.
  - Rename dialog: activate on enter.
  + Bugs fixed:
  - Fixed filesize test for big files.
  - Overwrite dialog: do not show an error after cancelling the
    operation.
  - Fixed crash when moving files to the trash.
  - Install missing UI files.
  - Added image/webp support in .desktop file.
  - Fix callback signature for value-changed signal when setting
    zoom.
  - Help: corrected wiki link.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577102400">- Update to version 3.8.3:
  + App icons: name the app icons with the application id.
  + Jpeg loader: crash when the original size is too big for a
    cairo surface.
  + Fixed run-time errors if exiv2 is not used.
  + Fixed window size the first time gThumb is executed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587297600">- Update to version 3.10.0:
  + New features and user visible changes:
  - Edit metadata dialogs: moved the lock button on the header
    bar; show the navigation bar only when the lock button is
    active.
  - Open location dialog: allow to use tilde as a home folder
    shortcut.
  + Bugs fixed: Install missing .ui file.
  + Updated translations.
- Changes from version 3.9.1:
  + New features and user visible changes:
  - Added ability to customize the keyboard shortcuts.
  - Added a shortcuts window to show the available shortcuts.
  - Added option to change the mouse wheel action.
  - Image viewer: added ability to define the transparency style.
  - Video viewer: allow to view the video at the original size;
    show the zoom factor in the statusbar.
  - Edit comment/tags dialogs: use the header bar; allow to
    change the current image from the dialog.
  - Add to catalog: use the header bar; allow to change the
    current image from the dialog.
  - Search: added ability to search in multiple folders.
  - Scripts: added %T to insert a timestamp in the command.
  - Folder tree:
    . Better drag&amp;drop support: allow to move a catalog into a
    library, and a library into another library, show an error
    if the drop operation is not possible;
    . Added an 'Open in Terminal' command in the context menu.
  - Overwrite dialog: show video previews as well, fixed dialog
    size.
  - Preferences: allow to specify a catalog or any other location
    as startup location.
  - Trash/Delete files: show progress for long operations.
  - File properties:
    . Added the file size in bytes.
    . Added a context menu command to customize the visibile
    properties.
  - Toolbar: show edit comment/tags in browser mode as well.
  - Export tools: removed from the toolbar. Some tools moved to
    the tools menu, others as a submenu in the gears menu.
  - Fixed window size when started the first time.
  - Updated app icon to follow the new GNOME style.
  - Rewritten README in markdown, updated screenshots.
  - Appdata: added release and OARS tags for flathub
    compatibility.
  + Bugs fixed:
  - gThumb hangs when some mount point is unavailable.
  - Jpeg loader: crash when the original size is too big for a
    cairo surface.
  - PNG loader: correctly load images with transparency.
  - Fixed run-time errors if exiv2 is not used.
  - Catalog: preserve the list order after saving the properties.
  - Scripts: fixed task cancellation when using a shell script.
  + Source code:
  - Utility functions refactoring.
  - Added tests for the utility functions.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1600689600">- Update to version 3.10.1:
  + User visible changes:
  - Exit fullscreen when pressing Esc in fullscreen mode.
  - Search editor: focus the newly added filter selector.
  - File list: reset vertical scroll position after changing
    directory.
  - Preferences dialog: increase width for extensions and
    shortcuts lists.
  + Bugs fixed:
  - WebP loader: fixed an infinite loop when the operation is
    cancelled.
  - Jpeg loader: fixed crash in case of some malformed jpegs.
  - Fixed crash when selecting other images after deleting.
  - Fixed long UI freeze after cutting/pasting many files.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1612094400">- Update to version 3.10.2:
  + Continuously reloads image when it is only image in folder.
  + exiv2: remove the charset= prefix from strings.
  + Fixed jump to bottom when selecting thumbnails with mouse.
  + gThumb opens import tool if the import tool is already opened.
  + Image viewer: fixed bright line visual artifacts.
  + Search:
  - Fixed possible crash after cancelling a search.
  - Do not count duplicated files.
  - Stop the previous search before starting the new one.
  - Stop searching if the user changes location.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618315200">- Update to version 3.10.3:
  + Fix possible build error.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1629720000">- Update to version 3.10.4:
  + Install the gThumb import desktop file.
  + Contact sheet: fixed themes list always empty.
  + Thumbnailer: try with the system thumbnailer if the image is
    null
  + File chooser: correctly get the filename extension.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632139200">- Update to version 3.12.0:
  + New features and user visible changes:
  - Added ability to load AVIF/HEIF images using libheif.
  - Added ability to save images as AVIF.
  - Add JPEG XL (*.jxl) read support.
  - File manager: added file actions to the viewer
    context menu.
  - Extensions: removed facebook and picasaweb uploaders.
  - Image viewer: use a proportional zoom increment.
  - Read color profiles from png files as well.
  - Media viewer: use accurate seeking when clicking on
    the progress bar.
  - Media viewer: show the pointed time when hovering over
    the progress bar.
  - Preferences: added option to show/hide the statusbar.
  - Rename files: added a button to revert to the last
    used template.
  - Added configurable shortcuts for Save and Save As.
  - Media viewer: added keyboard shortcuts.
  - File list: always allow to use Control-A to select
    all files.
  - Allow to set shortcuts to activate filters.
  - Added a template editor to edit text values with
    special codes: script commands, rename templates,
    print header and footer, etc.
  - Faster navigation when a directory contains
    thousands of images.
  - File list: start more thumbnailers in parallel.
  - Allow to mount unmounted volumes.
  - Color picker: added other formats: rgb in % and hsl.
  - Allow to keep browsing while executing long-running
    external tools.
  - Status bar: added button to show the progress dialog.
  - File properties: do not reset the selection after showing
    another image.
  - Histogram: show the properties in a single column
    to save horizontal space.
  + Bugs fixed:
  - Install the gThumb import desktop file.
  - Fix memory leak when loading webp, jxl, avif images.
  - Check if image is null before using it.
  - Added a Flatpak manifest.
  - Contact sheet: fixed themes list always empty.
  - Raw: Make compatible with LibRaw 0.21
  - Folder context menu: do not allow to move if cannot delete.
  - Folder context menu: do not allow to copy not mounted
    volumes.
  - Terminal: enable only for local folders.
  - Lots of others small fixes.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1632139201">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139202">- Add pkgconfig(libheif) BuildRequires: Add support for heif/avif.
- Add pkgconfig(champlain-0.12) and pkgconfig(champlain-gtk-0.12)
  BuildRequires and pass libchamplain=true to meson: Use
  libchamplain to show the position the image refers to.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1636113600">- Stop passing tracing=false and documentation=true to meson, no
  longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644494400">- Add daef485dffd67319c114cf1bda453bf6157e11ff.patch: Remove
  duplicate lang entry.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647950400">- Update to version 3.12.1:
  + PNG loader ignores gAMA.
  + Transparent webp images are rendered incorrectly.
  + Crash when dropping files on an empty folder/catalog.
  + Fixed location loading after mounting volume.
  + JPEG image dimensions not displayed for files inside the
    trash.
  + Infinite Loop when viewing more than 50 thumbnails.
  + X11 window title is not set.
  + Copy release notes on build from NEWS to metainfo file.
  + Fixed build if appstream &gt;= 0.14.6 is not available.
  + Fix incorrect usage of shared_module in extensions.
  + cli: mention that user can open files and/or directories.
  + Updated translations.
- Drop daef485dffd67319c114cf1bda453bf6157e11ff.patch: Fixed
  upstream.
- Add pkgconfig(appstream) and AppStream BuildRequires: Needed to
  build and install appdata now.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1649246400">- Update to version 3.12.2:
  + Fixed possible crash when changing directory during
    thumbnails creation.
  + Added support for larger thumbnail sizes: 512, 768 and
    1024 pixels.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1651060800">- Add relevant version limit to pkgconfig(appstream) BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1673870400">- Add da0d3f22.patch: Fix build with libraw 0.21.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1688385600">- Add 3376550a.patch: exiv2: added support for version 0.28.
- Refresh da0d3f22.patch from upstream git.</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1689336000">- Add pkgconfig(libjxl) BuildRequires: enable JPEG XL image
  support.
- Add c97a8aaa.patch: desktop background: fixed when using the dark
  color scheme</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1740052800">- Disable libchamplain. It pulls in libsoup 3, while gthumb is
  still using libsoup 2 (boo#1237098).</changelog>
</package>
<package pkgid="8ae4ce4e3016a59758bd909acc19cfb6b3aef03da4ae643ac8b9c57cd7eb66b0" name="gthumb" arch="x86_64">
  <version epoch="0" ver="3.12.2" rel="bp156.5.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574078400">- Update to version 3.8.2:
  + User visible changes:
  - Use menus instead of popovers for menu buttons on the header
    bar, to show icons and accelerators.
  - Header bar: align menus to the right for menu buttons on the
    right side.
  - Tools menu: show the accelerators.
  - Search: show the matching files during the search operation.
  - Rename dialog: activate on enter.
  + Bugs fixed:
  - Fixed filesize test for big files.
  - Overwrite dialog: do not show an error after cancelling the
    operation.
  - Fixed crash when moving files to the trash.
  - Install missing UI files.
  - Added image/webp support in .desktop file.
  - Fix callback signature for value-changed signal when setting
    zoom.
  - Help: corrected wiki link.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577102400">- Update to version 3.8.3:
  + App icons: name the app icons with the application id.
  + Jpeg loader: crash when the original size is too big for a
    cairo surface.
  + Fixed run-time errors if exiv2 is not used.
  + Fixed window size the first time gThumb is executed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587297600">- Update to version 3.10.0:
  + New features and user visible changes:
  - Edit metadata dialogs: moved the lock button on the header
    bar; show the navigation bar only when the lock button is
    active.
  - Open location dialog: allow to use tilde as a home folder
    shortcut.
  + Bugs fixed: Install missing .ui file.
  + Updated translations.
- Changes from version 3.9.1:
  + New features and user visible changes:
  - Added ability to customize the keyboard shortcuts.
  - Added a shortcuts window to show the available shortcuts.
  - Added option to change the mouse wheel action.
  - Image viewer: added ability to define the transparency style.
  - Video viewer: allow to view the video at the original size;
    show the zoom factor in the statusbar.
  - Edit comment/tags dialogs: use the header bar; allow to
    change the current image from the dialog.
  - Add to catalog: use the header bar; allow to change the
    current image from the dialog.
  - Search: added ability to search in multiple folders.
  - Scripts: added %T to insert a timestamp in the command.
  - Folder tree:
    . Better drag&amp;drop support: allow to move a catalog into a
    library, and a library into another library, show an error
    if the drop operation is not possible;
    . Added an 'Open in Terminal' command in the context menu.
  - Overwrite dialog: show video previews as well, fixed dialog
    size.
  - Preferences: allow to specify a catalog or any other location
    as startup location.
  - Trash/Delete files: show progress for long operations.
  - File properties:
    . Added the file size in bytes.
    . Added a context menu command to customize the visibile
    properties.
  - Toolbar: show edit comment/tags in browser mode as well.
  - Export tools: removed from the toolbar. Some tools moved to
    the tools menu, others as a submenu in the gears menu.
  - Fixed window size when started the first time.
  - Updated app icon to follow the new GNOME style.
  - Rewritten README in markdown, updated screenshots.
  - Appdata: added release and OARS tags for flathub
    compatibility.
  + Bugs fixed:
  - gThumb hangs when some mount point is unavailable.
  - Jpeg loader: crash when the original size is too big for a
    cairo surface.
  - PNG loader: correctly load images with transparency.
  - Fixed run-time errors if exiv2 is not used.
  - Catalog: preserve the list order after saving the properties.
  - Scripts: fixed task cancellation when using a shell script.
  + Source code:
  - Utility functions refactoring.
  - Added tests for the utility functions.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1600689600">- Update to version 3.10.1:
  + User visible changes:
  - Exit fullscreen when pressing Esc in fullscreen mode.
  - Search editor: focus the newly added filter selector.
  - File list: reset vertical scroll position after changing
    directory.
  - Preferences dialog: increase width for extensions and
    shortcuts lists.
  + Bugs fixed:
  - WebP loader: fixed an infinite loop when the operation is
    cancelled.
  - Jpeg loader: fixed crash in case of some malformed jpegs.
  - Fixed crash when selecting other images after deleting.
  - Fixed long UI freeze after cutting/pasting many files.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1612094400">- Update to version 3.10.2:
  + Continuously reloads image when it is only image in folder.
  + exiv2: remove the charset= prefix from strings.
  + Fixed jump to bottom when selecting thumbnails with mouse.
  + gThumb opens import tool if the import tool is already opened.
  + Image viewer: fixed bright line visual artifacts.
  + Search:
  - Fixed possible crash after cancelling a search.
  - Do not count duplicated files.
  - Stop the previous search before starting the new one.
  - Stop searching if the user changes location.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618315200">- Update to version 3.10.3:
  + Fix possible build error.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1629720000">- Update to version 3.10.4:
  + Install the gThumb import desktop file.
  + Contact sheet: fixed themes list always empty.
  + Thumbnailer: try with the system thumbnailer if the image is
    null
  + File chooser: correctly get the filename extension.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632139200">- Update to version 3.12.0:
  + New features and user visible changes:
  - Added ability to load AVIF/HEIF images using libheif.
  - Added ability to save images as AVIF.
  - Add JPEG XL (*.jxl) read support.
  - File manager: added file actions to the viewer
    context menu.
  - Extensions: removed facebook and picasaweb uploaders.
  - Image viewer: use a proportional zoom increment.
  - Read color profiles from png files as well.
  - Media viewer: use accurate seeking when clicking on
    the progress bar.
  - Media viewer: show the pointed time when hovering over
    the progress bar.
  - Preferences: added option to show/hide the statusbar.
  - Rename files: added a button to revert to the last
    used template.
  - Added configurable shortcuts for Save and Save As.
  - Media viewer: added keyboard shortcuts.
  - File list: always allow to use Control-A to select
    all files.
  - Allow to set shortcuts to activate filters.
  - Added a template editor to edit text values with
    special codes: script commands, rename templates,
    print header and footer, etc.
  - Faster navigation when a directory contains
    thousands of images.
  - File list: start more thumbnailers in parallel.
  - Allow to mount unmounted volumes.
  - Color picker: added other formats: rgb in % and hsl.
  - Allow to keep browsing while executing long-running
    external tools.
  - Status bar: added button to show the progress dialog.
  - File properties: do not reset the selection after showing
    another image.
  - Histogram: show the properties in a single column
    to save horizontal space.
  + Bugs fixed:
  - Install the gThumb import desktop file.
  - Fix memory leak when loading webp, jxl, avif images.
  - Check if image is null before using it.
  - Added a Flatpak manifest.
  - Contact sheet: fixed themes list always empty.
  - Raw: Make compatible with LibRaw 0.21
  - Folder context menu: do not allow to move if cannot delete.
  - Folder context menu: do not allow to copy not mounted
    volumes.
  - Terminal: enable only for local folders.
  - Lots of others small fixes.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1632139201">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139202">- Add pkgconfig(libheif) BuildRequires: Add support for heif/avif.
- Add pkgconfig(champlain-0.12) and pkgconfig(champlain-gtk-0.12)
  BuildRequires and pass libchamplain=true to meson: Use
  libchamplain to show the position the image refers to.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1636113600">- Stop passing tracing=false and documentation=true to meson, no
  longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644494400">- Add daef485dffd67319c114cf1bda453bf6157e11ff.patch: Remove
  duplicate lang entry.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647950400">- Update to version 3.12.1:
  + PNG loader ignores gAMA.
  + Transparent webp images are rendered incorrectly.
  + Crash when dropping files on an empty folder/catalog.
  + Fixed location loading after mounting volume.
  + JPEG image dimensions not displayed for files inside the
    trash.
  + Infinite Loop when viewing more than 50 thumbnails.
  + X11 window title is not set.
  + Copy release notes on build from NEWS to metainfo file.
  + Fixed build if appstream &gt;= 0.14.6 is not available.
  + Fix incorrect usage of shared_module in extensions.
  + cli: mention that user can open files and/or directories.
  + Updated translations.
- Drop daef485dffd67319c114cf1bda453bf6157e11ff.patch: Fixed
  upstream.
- Add pkgconfig(appstream) and AppStream BuildRequires: Needed to
  build and install appdata now.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1649246400">- Update to version 3.12.2:
  + Fixed possible crash when changing directory during
    thumbnails creation.
  + Added support for larger thumbnail sizes: 512, 768 and
    1024 pixels.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1651060800">- Add relevant version limit to pkgconfig(appstream) BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1673870400">- Add da0d3f22.patch: Fix build with libraw 0.21.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1688385600">- Add 3376550a.patch: exiv2: added support for version 0.28.
- Refresh da0d3f22.patch from upstream git.</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1689336000">- Add pkgconfig(libjxl) BuildRequires: enable JPEG XL image
  support.
- Add c97a8aaa.patch: desktop background: fixed when using the dark
  color scheme</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1740052800">- Disable libchamplain. It pulls in libsoup 3, while gthumb is
  still using libsoup 2 (boo#1237098).</changelog>
</package>
<package pkgid="1d017b1f53eccfd64dd9f2224e6ab9fcb8db23890c98fdafb1c9e08d774fc13a" name="gthumb-devel" arch="aarch64">
  <version epoch="0" ver="3.12.2" rel="bp156.5.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574078400">- Update to version 3.8.2:
  + User visible changes:
  - Use menus instead of popovers for menu buttons on the header
    bar, to show icons and accelerators.
  - Header bar: align menus to the right for menu buttons on the
    right side.
  - Tools menu: show the accelerators.
  - Search: show the matching files during the search operation.
  - Rename dialog: activate on enter.
  + Bugs fixed:
  - Fixed filesize test for big files.
  - Overwrite dialog: do not show an error after cancelling the
    operation.
  - Fixed crash when moving files to the trash.
  - Install missing UI files.
  - Added image/webp support in .desktop file.
  - Fix callback signature for value-changed signal when setting
    zoom.
  - Help: corrected wiki link.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577102400">- Update to version 3.8.3:
  + App icons: name the app icons with the application id.
  + Jpeg loader: crash when the original size is too big for a
    cairo surface.
  + Fixed run-time errors if exiv2 is not used.
  + Fixed window size the first time gThumb is executed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587297600">- Update to version 3.10.0:
  + New features and user visible changes:
  - Edit metadata dialogs: moved the lock button on the header
    bar; show the navigation bar only when the lock button is
    active.
  - Open location dialog: allow to use tilde as a home folder
    shortcut.
  + Bugs fixed: Install missing .ui file.
  + Updated translations.
- Changes from version 3.9.1:
  + New features and user visible changes:
  - Added ability to customize the keyboard shortcuts.
  - Added a shortcuts window to show the available shortcuts.
  - Added option to change the mouse wheel action.
  - Image viewer: added ability to define the transparency style.
  - Video viewer: allow to view the video at the original size;
    show the zoom factor in the statusbar.
  - Edit comment/tags dialogs: use the header bar; allow to
    change the current image from the dialog.
  - Add to catalog: use the header bar; allow to change the
    current image from the dialog.
  - Search: added ability to search in multiple folders.
  - Scripts: added %T to insert a timestamp in the command.
  - Folder tree:
    . Better drag&amp;drop support: allow to move a catalog into a
    library, and a library into another library, show an error
    if the drop operation is not possible;
    . Added an 'Open in Terminal' command in the context menu.
  - Overwrite dialog: show video previews as well, fixed dialog
    size.
  - Preferences: allow to specify a catalog or any other location
    as startup location.
  - Trash/Delete files: show progress for long operations.
  - File properties:
    . Added the file size in bytes.
    . Added a context menu command to customize the visibile
    properties.
  - Toolbar: show edit comment/tags in browser mode as well.
  - Export tools: removed from the toolbar. Some tools moved to
    the tools menu, others as a submenu in the gears menu.
  - Fixed window size when started the first time.
  - Updated app icon to follow the new GNOME style.
  - Rewritten README in markdown, updated screenshots.
  - Appdata: added release and OARS tags for flathub
    compatibility.
  + Bugs fixed:
  - gThumb hangs when some mount point is unavailable.
  - Jpeg loader: crash when the original size is too big for a
    cairo surface.
  - PNG loader: correctly load images with transparency.
  - Fixed run-time errors if exiv2 is not used.
  - Catalog: preserve the list order after saving the properties.
  - Scripts: fixed task cancellation when using a shell script.
  + Source code:
  - Utility functions refactoring.
  - Added tests for the utility functions.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1600689600">- Update to version 3.10.1:
  + User visible changes:
  - Exit fullscreen when pressing Esc in fullscreen mode.
  - Search editor: focus the newly added filter selector.
  - File list: reset vertical scroll position after changing
    directory.
  - Preferences dialog: increase width for extensions and
    shortcuts lists.
  + Bugs fixed:
  - WebP loader: fixed an infinite loop when the operation is
    cancelled.
  - Jpeg loader: fixed crash in case of some malformed jpegs.
  - Fixed crash when selecting other images after deleting.
  - Fixed long UI freeze after cutting/pasting many files.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1612094400">- Update to version 3.10.2:
  + Continuously reloads image when it is only image in folder.
  + exiv2: remove the charset= prefix from strings.
  + Fixed jump to bottom when selecting thumbnails with mouse.
  + gThumb opens import tool if the import tool is already opened.
  + Image viewer: fixed bright line visual artifacts.
  + Search:
  - Fixed possible crash after cancelling a search.
  - Do not count duplicated files.
  - Stop the previous search before starting the new one.
  - Stop searching if the user changes location.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618315200">- Update to version 3.10.3:
  + Fix possible build error.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1629720000">- Update to version 3.10.4:
  + Install the gThumb import desktop file.
  + Contact sheet: fixed themes list always empty.
  + Thumbnailer: try with the system thumbnailer if the image is
    null
  + File chooser: correctly get the filename extension.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632139200">- Update to version 3.12.0:
  + New features and user visible changes:
  - Added ability to load AVIF/HEIF images using libheif.
  - Added ability to save images as AVIF.
  - Add JPEG XL (*.jxl) read support.
  - File manager: added file actions to the viewer
    context menu.
  - Extensions: removed facebook and picasaweb uploaders.
  - Image viewer: use a proportional zoom increment.
  - Read color profiles from png files as well.
  - Media viewer: use accurate seeking when clicking on
    the progress bar.
  - Media viewer: show the pointed time when hovering over
    the progress bar.
  - Preferences: added option to show/hide the statusbar.
  - Rename files: added a button to revert to the last
    used template.
  - Added configurable shortcuts for Save and Save As.
  - Media viewer: added keyboard shortcuts.
  - File list: always allow to use Control-A to select
    all files.
  - Allow to set shortcuts to activate filters.
  - Added a template editor to edit text values with
    special codes: script commands, rename templates,
    print header and footer, etc.
  - Faster navigation when a directory contains
    thousands of images.
  - File list: start more thumbnailers in parallel.
  - Allow to mount unmounted volumes.
  - Color picker: added other formats: rgb in % and hsl.
  - Allow to keep browsing while executing long-running
    external tools.
  - Status bar: added button to show the progress dialog.
  - File properties: do not reset the selection after showing
    another image.
  - Histogram: show the properties in a single column
    to save horizontal space.
  + Bugs fixed:
  - Install the gThumb import desktop file.
  - Fix memory leak when loading webp, jxl, avif images.
  - Check if image is null before using it.
  - Added a Flatpak manifest.
  - Contact sheet: fixed themes list always empty.
  - Raw: Make compatible with LibRaw 0.21
  - Folder context menu: do not allow to move if cannot delete.
  - Folder context menu: do not allow to copy not mounted
    volumes.
  - Terminal: enable only for local folders.
  - Lots of others small fixes.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1632139201">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139202">- Add pkgconfig(libheif) BuildRequires: Add support for heif/avif.
- Add pkgconfig(champlain-0.12) and pkgconfig(champlain-gtk-0.12)
  BuildRequires and pass libchamplain=true to meson: Use
  libchamplain to show the position the image refers to.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1636113600">- Stop passing tracing=false and documentation=true to meson, no
  longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644494400">- Add daef485dffd67319c114cf1bda453bf6157e11ff.patch: Remove
  duplicate lang entry.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647950400">- Update to version 3.12.1:
  + PNG loader ignores gAMA.
  + Transparent webp images are rendered incorrectly.
  + Crash when dropping files on an empty folder/catalog.
  + Fixed location loading after mounting volume.
  + JPEG image dimensions not displayed for files inside the
    trash.
  + Infinite Loop when viewing more than 50 thumbnails.
  + X11 window title is not set.
  + Copy release notes on build from NEWS to metainfo file.
  + Fixed build if appstream &gt;= 0.14.6 is not available.
  + Fix incorrect usage of shared_module in extensions.
  + cli: mention that user can open files and/or directories.
  + Updated translations.
- Drop daef485dffd67319c114cf1bda453bf6157e11ff.patch: Fixed
  upstream.
- Add pkgconfig(appstream) and AppStream BuildRequires: Needed to
  build and install appdata now.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1649246400">- Update to version 3.12.2:
  + Fixed possible crash when changing directory during
    thumbnails creation.
  + Added support for larger thumbnail sizes: 512, 768 and
    1024 pixels.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1651060800">- Add relevant version limit to pkgconfig(appstream) BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1673870400">- Add da0d3f22.patch: Fix build with libraw 0.21.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1688385600">- Add 3376550a.patch: exiv2: added support for version 0.28.
- Refresh da0d3f22.patch from upstream git.</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1689336000">- Add pkgconfig(libjxl) BuildRequires: enable JPEG XL image
  support.
- Add c97a8aaa.patch: desktop background: fixed when using the dark
  color scheme</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1740052800">- Disable libchamplain. It pulls in libsoup 3, while gthumb is
  still using libsoup 2 (boo#1237098).</changelog>
</package>
<package pkgid="43c7fe211bb13b9e998657d566ff3851c88a3eaac7b19c0338b0b0d4c886ff7d" name="gthumb-devel" arch="i586">
  <version epoch="0" ver="3.12.2" rel="bp156.5.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574078400">- Update to version 3.8.2:
  + User visible changes:
  - Use menus instead of popovers for menu buttons on the header
    bar, to show icons and accelerators.
  - Header bar: align menus to the right for menu buttons on the
    right side.
  - Tools menu: show the accelerators.
  - Search: show the matching files during the search operation.
  - Rename dialog: activate on enter.
  + Bugs fixed:
  - Fixed filesize test for big files.
  - Overwrite dialog: do not show an error after cancelling the
    operation.
  - Fixed crash when moving files to the trash.
  - Install missing UI files.
  - Added image/webp support in .desktop file.
  - Fix callback signature for value-changed signal when setting
    zoom.
  - Help: corrected wiki link.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577102400">- Update to version 3.8.3:
  + App icons: name the app icons with the application id.
  + Jpeg loader: crash when the original size is too big for a
    cairo surface.
  + Fixed run-time errors if exiv2 is not used.
  + Fixed window size the first time gThumb is executed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587297600">- Update to version 3.10.0:
  + New features and user visible changes:
  - Edit metadata dialogs: moved the lock button on the header
    bar; show the navigation bar only when the lock button is
    active.
  - Open location dialog: allow to use tilde as a home folder
    shortcut.
  + Bugs fixed: Install missing .ui file.
  + Updated translations.
- Changes from version 3.9.1:
  + New features and user visible changes:
  - Added ability to customize the keyboard shortcuts.
  - Added a shortcuts window to show the available shortcuts.
  - Added option to change the mouse wheel action.
  - Image viewer: added ability to define the transparency style.
  - Video viewer: allow to view the video at the original size;
    show the zoom factor in the statusbar.
  - Edit comment/tags dialogs: use the header bar; allow to
    change the current image from the dialog.
  - Add to catalog: use the header bar; allow to change the
    current image from the dialog.
  - Search: added ability to search in multiple folders.
  - Scripts: added %T to insert a timestamp in the command.
  - Folder tree:
    . Better drag&amp;drop support: allow to move a catalog into a
    library, and a library into another library, show an error
    if the drop operation is not possible;
    . Added an 'Open in Terminal' command in the context menu.
  - Overwrite dialog: show video previews as well, fixed dialog
    size.
  - Preferences: allow to specify a catalog or any other location
    as startup location.
  - Trash/Delete files: show progress for long operations.
  - File properties:
    . Added the file size in bytes.
    . Added a context menu command to customize the visibile
    properties.
  - Toolbar: show edit comment/tags in browser mode as well.
  - Export tools: removed from the toolbar. Some tools moved to
    the tools menu, others as a submenu in the gears menu.
  - Fixed window size when started the first time.
  - Updated app icon to follow the new GNOME style.
  - Rewritten README in markdown, updated screenshots.
  - Appdata: added release and OARS tags for flathub
    compatibility.
  + Bugs fixed:
  - gThumb hangs when some mount point is unavailable.
  - Jpeg loader: crash when the original size is too big for a
    cairo surface.
  - PNG loader: correctly load images with transparency.
  - Fixed run-time errors if exiv2 is not used.
  - Catalog: preserve the list order after saving the properties.
  - Scripts: fixed task cancellation when using a shell script.
  + Source code:
  - Utility functions refactoring.
  - Added tests for the utility functions.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1600689600">- Update to version 3.10.1:
  + User visible changes:
  - Exit fullscreen when pressing Esc in fullscreen mode.
  - Search editor: focus the newly added filter selector.
  - File list: reset vertical scroll position after changing
    directory.
  - Preferences dialog: increase width for extensions and
    shortcuts lists.
  + Bugs fixed:
  - WebP loader: fixed an infinite loop when the operation is
    cancelled.
  - Jpeg loader: fixed crash in case of some malformed jpegs.
  - Fixed crash when selecting other images after deleting.
  - Fixed long UI freeze after cutting/pasting many files.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1612094400">- Update to version 3.10.2:
  + Continuously reloads image when it is only image in folder.
  + exiv2: remove the charset= prefix from strings.
  + Fixed jump to bottom when selecting thumbnails with mouse.
  + gThumb opens import tool if the import tool is already opened.
  + Image viewer: fixed bright line visual artifacts.
  + Search:
  - Fixed possible crash after cancelling a search.
  - Do not count duplicated files.
  - Stop the previous search before starting the new one.
  - Stop searching if the user changes location.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618315200">- Update to version 3.10.3:
  + Fix possible build error.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1629720000">- Update to version 3.10.4:
  + Install the gThumb import desktop file.
  + Contact sheet: fixed themes list always empty.
  + Thumbnailer: try with the system thumbnailer if the image is
    null
  + File chooser: correctly get the filename extension.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632139200">- Update to version 3.12.0:
  + New features and user visible changes:
  - Added ability to load AVIF/HEIF images using libheif.
  - Added ability to save images as AVIF.
  - Add JPEG XL (*.jxl) read support.
  - File manager: added file actions to the viewer
    context menu.
  - Extensions: removed facebook and picasaweb uploaders.
  - Image viewer: use a proportional zoom increment.
  - Read color profiles from png files as well.
  - Media viewer: use accurate seeking when clicking on
    the progress bar.
  - Media viewer: show the pointed time when hovering over
    the progress bar.
  - Preferences: added option to show/hide the statusbar.
  - Rename files: added a button to revert to the last
    used template.
  - Added configurable shortcuts for Save and Save As.
  - Media viewer: added keyboard shortcuts.
  - File list: always allow to use Control-A to select
    all files.
  - Allow to set shortcuts to activate filters.
  - Added a template editor to edit text values with
    special codes: script commands, rename templates,
    print header and footer, etc.
  - Faster navigation when a directory contains
    thousands of images.
  - File list: start more thumbnailers in parallel.
  - Allow to mount unmounted volumes.
  - Color picker: added other formats: rgb in % and hsl.
  - Allow to keep browsing while executing long-running
    external tools.
  - Status bar: added button to show the progress dialog.
  - File properties: do not reset the selection after showing
    another image.
  - Histogram: show the properties in a single column
    to save horizontal space.
  + Bugs fixed:
  - Install the gThumb import desktop file.
  - Fix memory leak when loading webp, jxl, avif images.
  - Check if image is null before using it.
  - Added a Flatpak manifest.
  - Contact sheet: fixed themes list always empty.
  - Raw: Make compatible with LibRaw 0.21
  - Folder context menu: do not allow to move if cannot delete.
  - Folder context menu: do not allow to copy not mounted
    volumes.
  - Terminal: enable only for local folders.
  - Lots of others small fixes.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1632139201">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139202">- Add pkgconfig(libheif) BuildRequires: Add support for heif/avif.
- Add pkgconfig(champlain-0.12) and pkgconfig(champlain-gtk-0.12)
  BuildRequires and pass libchamplain=true to meson: Use
  libchamplain to show the position the image refers to.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1636113600">- Stop passing tracing=false and documentation=true to meson, no
  longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644494400">- Add daef485dffd67319c114cf1bda453bf6157e11ff.patch: Remove
  duplicate lang entry.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647950400">- Update to version 3.12.1:
  + PNG loader ignores gAMA.
  + Transparent webp images are rendered incorrectly.
  + Crash when dropping files on an empty folder/catalog.
  + Fixed location loading after mounting volume.
  + JPEG image dimensions not displayed for files inside the
    trash.
  + Infinite Loop when viewing more than 50 thumbnails.
  + X11 window title is not set.
  + Copy release notes on build from NEWS to metainfo file.
  + Fixed build if appstream &gt;= 0.14.6 is not available.
  + Fix incorrect usage of shared_module in extensions.
  + cli: mention that user can open files and/or directories.
  + Updated translations.
- Drop daef485dffd67319c114cf1bda453bf6157e11ff.patch: Fixed
  upstream.
- Add pkgconfig(appstream) and AppStream BuildRequires: Needed to
  build and install appdata now.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1649246400">- Update to version 3.12.2:
  + Fixed possible crash when changing directory during
    thumbnails creation.
  + Added support for larger thumbnail sizes: 512, 768 and
    1024 pixels.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1651060800">- Add relevant version limit to pkgconfig(appstream) BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1673870400">- Add da0d3f22.patch: Fix build with libraw 0.21.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1688385600">- Add 3376550a.patch: exiv2: added support for version 0.28.
- Refresh da0d3f22.patch from upstream git.</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1689336000">- Add pkgconfig(libjxl) BuildRequires: enable JPEG XL image
  support.
- Add c97a8aaa.patch: desktop background: fixed when using the dark
  color scheme</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1740052800">- Disable libchamplain. It pulls in libsoup 3, while gthumb is
  still using libsoup 2 (boo#1237098).</changelog>
</package>
<package pkgid="4485882c288f16f30d29733c19539be2e2fc9fe880c30d24cd9631f6e3e4c989" name="gthumb-devel" arch="s390x">
  <version epoch="0" ver="3.12.2" rel="bp156.5.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574078400">- Update to version 3.8.2:
  + User visible changes:
  - Use menus instead of popovers for menu buttons on the header
    bar, to show icons and accelerators.
  - Header bar: align menus to the right for menu buttons on the
    right side.
  - Tools menu: show the accelerators.
  - Search: show the matching files during the search operation.
  - Rename dialog: activate on enter.
  + Bugs fixed:
  - Fixed filesize test for big files.
  - Overwrite dialog: do not show an error after cancelling the
    operation.
  - Fixed crash when moving files to the trash.
  - Install missing UI files.
  - Added image/webp support in .desktop file.
  - Fix callback signature for value-changed signal when setting
    zoom.
  - Help: corrected wiki link.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577102400">- Update to version 3.8.3:
  + App icons: name the app icons with the application id.
  + Jpeg loader: crash when the original size is too big for a
    cairo surface.
  + Fixed run-time errors if exiv2 is not used.
  + Fixed window size the first time gThumb is executed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587297600">- Update to version 3.10.0:
  + New features and user visible changes:
  - Edit metadata dialogs: moved the lock button on the header
    bar; show the navigation bar only when the lock button is
    active.
  - Open location dialog: allow to use tilde as a home folder
    shortcut.
  + Bugs fixed: Install missing .ui file.
  + Updated translations.
- Changes from version 3.9.1:
  + New features and user visible changes:
  - Added ability to customize the keyboard shortcuts.
  - Added a shortcuts window to show the available shortcuts.
  - Added option to change the mouse wheel action.
  - Image viewer: added ability to define the transparency style.
  - Video viewer: allow to view the video at the original size;
    show the zoom factor in the statusbar.
  - Edit comment/tags dialogs: use the header bar; allow to
    change the current image from the dialog.
  - Add to catalog: use the header bar; allow to change the
    current image from the dialog.
  - Search: added ability to search in multiple folders.
  - Scripts: added %T to insert a timestamp in the command.
  - Folder tree:
    . Better drag&amp;drop support: allow to move a catalog into a
    library, and a library into another library, show an error
    if the drop operation is not possible;
    . Added an 'Open in Terminal' command in the context menu.
  - Overwrite dialog: show video previews as well, fixed dialog
    size.
  - Preferences: allow to specify a catalog or any other location
    as startup location.
  - Trash/Delete files: show progress for long operations.
  - File properties:
    . Added the file size in bytes.
    . Added a context menu command to customize the visibile
    properties.
  - Toolbar: show edit comment/tags in browser mode as well.
  - Export tools: removed from the toolbar. Some tools moved to
    the tools menu, others as a submenu in the gears menu.
  - Fixed window size when started the first time.
  - Updated app icon to follow the new GNOME style.
  - Rewritten README in markdown, updated screenshots.
  - Appdata: added release and OARS tags for flathub
    compatibility.
  + Bugs fixed:
  - gThumb hangs when some mount point is unavailable.
  - Jpeg loader: crash when the original size is too big for a
    cairo surface.
  - PNG loader: correctly load images with transparency.
  - Fixed run-time errors if exiv2 is not used.
  - Catalog: preserve the list order after saving the properties.
  - Scripts: fixed task cancellation when using a shell script.
  + Source code:
  - Utility functions refactoring.
  - Added tests for the utility functions.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1600689600">- Update to version 3.10.1:
  + User visible changes:
  - Exit fullscreen when pressing Esc in fullscreen mode.
  - Search editor: focus the newly added filter selector.
  - File list: reset vertical scroll position after changing
    directory.
  - Preferences dialog: increase width for extensions and
    shortcuts lists.
  + Bugs fixed:
  - WebP loader: fixed an infinite loop when the operation is
    cancelled.
  - Jpeg loader: fixed crash in case of some malformed jpegs.
  - Fixed crash when selecting other images after deleting.
  - Fixed long UI freeze after cutting/pasting many files.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1612094400">- Update to version 3.10.2:
  + Continuously reloads image when it is only image in folder.
  + exiv2: remove the charset= prefix from strings.
  + Fixed jump to bottom when selecting thumbnails with mouse.
  + gThumb opens import tool if the import tool is already opened.
  + Image viewer: fixed bright line visual artifacts.
  + Search:
  - Fixed possible crash after cancelling a search.
  - Do not count duplicated files.
  - Stop the previous search before starting the new one.
  - Stop searching if the user changes location.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618315200">- Update to version 3.10.3:
  + Fix possible build error.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1629720000">- Update to version 3.10.4:
  + Install the gThumb import desktop file.
  + Contact sheet: fixed themes list always empty.
  + Thumbnailer: try with the system thumbnailer if the image is
    null
  + File chooser: correctly get the filename extension.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632139200">- Update to version 3.12.0:
  + New features and user visible changes:
  - Added ability to load AVIF/HEIF images using libheif.
  - Added ability to save images as AVIF.
  - Add JPEG XL (*.jxl) read support.
  - File manager: added file actions to the viewer
    context menu.
  - Extensions: removed facebook and picasaweb uploaders.
  - Image viewer: use a proportional zoom increment.
  - Read color profiles from png files as well.
  - Media viewer: use accurate seeking when clicking on
    the progress bar.
  - Media viewer: show the pointed time when hovering over
    the progress bar.
  - Preferences: added option to show/hide the statusbar.
  - Rename files: added a button to revert to the last
    used template.
  - Added configurable shortcuts for Save and Save As.
  - Media viewer: added keyboard shortcuts.
  - File list: always allow to use Control-A to select
    all files.
  - Allow to set shortcuts to activate filters.
  - Added a template editor to edit text values with
    special codes: script commands, rename templates,
    print header and footer, etc.
  - Faster navigation when a directory contains
    thousands of images.
  - File list: start more thumbnailers in parallel.
  - Allow to mount unmounted volumes.
  - Color picker: added other formats: rgb in % and hsl.
  - Allow to keep browsing while executing long-running
    external tools.
  - Status bar: added button to show the progress dialog.
  - File properties: do not reset the selection after showing
    another image.
  - Histogram: show the properties in a single column
    to save horizontal space.
  + Bugs fixed:
  - Install the gThumb import desktop file.
  - Fix memory leak when loading webp, jxl, avif images.
  - Check if image is null before using it.
  - Added a Flatpak manifest.
  - Contact sheet: fixed themes list always empty.
  - Raw: Make compatible with LibRaw 0.21
  - Folder context menu: do not allow to move if cannot delete.
  - Folder context menu: do not allow to copy not mounted
    volumes.
  - Terminal: enable only for local folders.
  - Lots of others small fixes.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1632139201">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139202">- Add pkgconfig(libheif) BuildRequires: Add support for heif/avif.
- Add pkgconfig(champlain-0.12) and pkgconfig(champlain-gtk-0.12)
  BuildRequires and pass libchamplain=true to meson: Use
  libchamplain to show the position the image refers to.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1636113600">- Stop passing tracing=false and documentation=true to meson, no
  longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644494400">- Add daef485dffd67319c114cf1bda453bf6157e11ff.patch: Remove
  duplicate lang entry.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647950400">- Update to version 3.12.1:
  + PNG loader ignores gAMA.
  + Transparent webp images are rendered incorrectly.
  + Crash when dropping files on an empty folder/catalog.
  + Fixed location loading after mounting volume.
  + JPEG image dimensions not displayed for files inside the
    trash.
  + Infinite Loop when viewing more than 50 thumbnails.
  + X11 window title is not set.
  + Copy release notes on build from NEWS to metainfo file.
  + Fixed build if appstream &gt;= 0.14.6 is not available.
  + Fix incorrect usage of shared_module in extensions.
  + cli: mention that user can open files and/or directories.
  + Updated translations.
- Drop daef485dffd67319c114cf1bda453bf6157e11ff.patch: Fixed
  upstream.
- Add pkgconfig(appstream) and AppStream BuildRequires: Needed to
  build and install appdata now.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1649246400">- Update to version 3.12.2:
  + Fixed possible crash when changing directory during
    thumbnails creation.
  + Added support for larger thumbnail sizes: 512, 768 and
    1024 pixels.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1651060800">- Add relevant version limit to pkgconfig(appstream) BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1673870400">- Add da0d3f22.patch: Fix build with libraw 0.21.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1688385600">- Add 3376550a.patch: exiv2: added support for version 0.28.
- Refresh da0d3f22.patch from upstream git.</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1689336000">- Add pkgconfig(libjxl) BuildRequires: enable JPEG XL image
  support.
- Add c97a8aaa.patch: desktop background: fixed when using the dark
  color scheme</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1740052800">- Disable libchamplain. It pulls in libsoup 3, while gthumb is
  still using libsoup 2 (boo#1237098).</changelog>
</package>
<package pkgid="d6593021a3d0d72bbf8cf32040ca326147846175402252caeaf1cca87fd41886" name="gthumb-devel" arch="x86_64">
  <version epoch="0" ver="3.12.2" rel="bp156.5.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574078400">- Update to version 3.8.2:
  + User visible changes:
  - Use menus instead of popovers for menu buttons on the header
    bar, to show icons and accelerators.
  - Header bar: align menus to the right for menu buttons on the
    right side.
  - Tools menu: show the accelerators.
  - Search: show the matching files during the search operation.
  - Rename dialog: activate on enter.
  + Bugs fixed:
  - Fixed filesize test for big files.
  - Overwrite dialog: do not show an error after cancelling the
    operation.
  - Fixed crash when moving files to the trash.
  - Install missing UI files.
  - Added image/webp support in .desktop file.
  - Fix callback signature for value-changed signal when setting
    zoom.
  - Help: corrected wiki link.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577102400">- Update to version 3.8.3:
  + App icons: name the app icons with the application id.
  + Jpeg loader: crash when the original size is too big for a
    cairo surface.
  + Fixed run-time errors if exiv2 is not used.
  + Fixed window size the first time gThumb is executed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587297600">- Update to version 3.10.0:
  + New features and user visible changes:
  - Edit metadata dialogs: moved the lock button on the header
    bar; show the navigation bar only when the lock button is
    active.
  - Open location dialog: allow to use tilde as a home folder
    shortcut.
  + Bugs fixed: Install missing .ui file.
  + Updated translations.
- Changes from version 3.9.1:
  + New features and user visible changes:
  - Added ability to customize the keyboard shortcuts.
  - Added a shortcuts window to show the available shortcuts.
  - Added option to change the mouse wheel action.
  - Image viewer: added ability to define the transparency style.
  - Video viewer: allow to view the video at the original size;
    show the zoom factor in the statusbar.
  - Edit comment/tags dialogs: use the header bar; allow to
    change the current image from the dialog.
  - Add to catalog: use the header bar; allow to change the
    current image from the dialog.
  - Search: added ability to search in multiple folders.
  - Scripts: added %T to insert a timestamp in the command.
  - Folder tree:
    . Better drag&amp;drop support: allow to move a catalog into a
    library, and a library into another library, show an error
    if the drop operation is not possible;
    . Added an 'Open in Terminal' command in the context menu.
  - Overwrite dialog: show video previews as well, fixed dialog
    size.
  - Preferences: allow to specify a catalog or any other location
    as startup location.
  - Trash/Delete files: show progress for long operations.
  - File properties:
    . Added the file size in bytes.
    . Added a context menu command to customize the visibile
    properties.
  - Toolbar: show edit comment/tags in browser mode as well.
  - Export tools: removed from the toolbar. Some tools moved to
    the tools menu, others as a submenu in the gears menu.
  - Fixed window size when started the first time.
  - Updated app icon to follow the new GNOME style.
  - Rewritten README in markdown, updated screenshots.
  - Appdata: added release and OARS tags for flathub
    compatibility.
  + Bugs fixed:
  - gThumb hangs when some mount point is unavailable.
  - Jpeg loader: crash when the original size is too big for a
    cairo surface.
  - PNG loader: correctly load images with transparency.
  - Fixed run-time errors if exiv2 is not used.
  - Catalog: preserve the list order after saving the properties.
  - Scripts: fixed task cancellation when using a shell script.
  + Source code:
  - Utility functions refactoring.
  - Added tests for the utility functions.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1600689600">- Update to version 3.10.1:
  + User visible changes:
  - Exit fullscreen when pressing Esc in fullscreen mode.
  - Search editor: focus the newly added filter selector.
  - File list: reset vertical scroll position after changing
    directory.
  - Preferences dialog: increase width for extensions and
    shortcuts lists.
  + Bugs fixed:
  - WebP loader: fixed an infinite loop when the operation is
    cancelled.
  - Jpeg loader: fixed crash in case of some malformed jpegs.
  - Fixed crash when selecting other images after deleting.
  - Fixed long UI freeze after cutting/pasting many files.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1612094400">- Update to version 3.10.2:
  + Continuously reloads image when it is only image in folder.
  + exiv2: remove the charset= prefix from strings.
  + Fixed jump to bottom when selecting thumbnails with mouse.
  + gThumb opens import tool if the import tool is already opened.
  + Image viewer: fixed bright line visual artifacts.
  + Search:
  - Fixed possible crash after cancelling a search.
  - Do not count duplicated files.
  - Stop the previous search before starting the new one.
  - Stop searching if the user changes location.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618315200">- Update to version 3.10.3:
  + Fix possible build error.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1629720000">- Update to version 3.10.4:
  + Install the gThumb import desktop file.
  + Contact sheet: fixed themes list always empty.
  + Thumbnailer: try with the system thumbnailer if the image is
    null
  + File chooser: correctly get the filename extension.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632139200">- Update to version 3.12.0:
  + New features and user visible changes:
  - Added ability to load AVIF/HEIF images using libheif.
  - Added ability to save images as AVIF.
  - Add JPEG XL (*.jxl) read support.
  - File manager: added file actions to the viewer
    context menu.
  - Extensions: removed facebook and picasaweb uploaders.
  - Image viewer: use a proportional zoom increment.
  - Read color profiles from png files as well.
  - Media viewer: use accurate seeking when clicking on
    the progress bar.
  - Media viewer: show the pointed time when hovering over
    the progress bar.
  - Preferences: added option to show/hide the statusbar.
  - Rename files: added a button to revert to the last
    used template.
  - Added configurable shortcuts for Save and Save As.
  - Media viewer: added keyboard shortcuts.
  - File list: always allow to use Control-A to select
    all files.
  - Allow to set shortcuts to activate filters.
  - Added a template editor to edit text values with
    special codes: script commands, rename templates,
    print header and footer, etc.
  - Faster navigation when a directory contains
    thousands of images.
  - File list: start more thumbnailers in parallel.
  - Allow to mount unmounted volumes.
  - Color picker: added other formats: rgb in % and hsl.
  - Allow to keep browsing while executing long-running
    external tools.
  - Status bar: added button to show the progress dialog.
  - File properties: do not reset the selection after showing
    another image.
  - Histogram: show the properties in a single column
    to save horizontal space.
  + Bugs fixed:
  - Install the gThumb import desktop file.
  - Fix memory leak when loading webp, jxl, avif images.
  - Check if image is null before using it.
  - Added a Flatpak manifest.
  - Contact sheet: fixed themes list always empty.
  - Raw: Make compatible with LibRaw 0.21
  - Folder context menu: do not allow to move if cannot delete.
  - Folder context menu: do not allow to copy not mounted
    volumes.
  - Terminal: enable only for local folders.
  - Lots of others small fixes.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1632139201">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139202">- Add pkgconfig(libheif) BuildRequires: Add support for heif/avif.
- Add pkgconfig(champlain-0.12) and pkgconfig(champlain-gtk-0.12)
  BuildRequires and pass libchamplain=true to meson: Use
  libchamplain to show the position the image refers to.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1636113600">- Stop passing tracing=false and documentation=true to meson, no
  longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644494400">- Add daef485dffd67319c114cf1bda453bf6157e11ff.patch: Remove
  duplicate lang entry.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647950400">- Update to version 3.12.1:
  + PNG loader ignores gAMA.
  + Transparent webp images are rendered incorrectly.
  + Crash when dropping files on an empty folder/catalog.
  + Fixed location loading after mounting volume.
  + JPEG image dimensions not displayed for files inside the
    trash.
  + Infinite Loop when viewing more than 50 thumbnails.
  + X11 window title is not set.
  + Copy release notes on build from NEWS to metainfo file.
  + Fixed build if appstream &gt;= 0.14.6 is not available.
  + Fix incorrect usage of shared_module in extensions.
  + cli: mention that user can open files and/or directories.
  + Updated translations.
- Drop daef485dffd67319c114cf1bda453bf6157e11ff.patch: Fixed
  upstream.
- Add pkgconfig(appstream) and AppStream BuildRequires: Needed to
  build and install appdata now.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1649246400">- Update to version 3.12.2:
  + Fixed possible crash when changing directory during
    thumbnails creation.
  + Added support for larger thumbnail sizes: 512, 768 and
    1024 pixels.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1651060800">- Add relevant version limit to pkgconfig(appstream) BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1673870400">- Add da0d3f22.patch: Fix build with libraw 0.21.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1688385600">- Add 3376550a.patch: exiv2: added support for version 0.28.
- Refresh da0d3f22.patch from upstream git.</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1689336000">- Add pkgconfig(libjxl) BuildRequires: enable JPEG XL image
  support.
- Add c97a8aaa.patch: desktop background: fixed when using the dark
  color scheme</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1740052800">- Disable libchamplain. It pulls in libsoup 3, while gthumb is
  still using libsoup 2 (boo#1237098).</changelog>
</package>
<package pkgid="5bc1b044560f689f7998c2f62265c67b6b446ee40f54b8493d08e406b2f7ba1a" name="gthumb-lang" arch="noarch">
  <version epoch="0" ver="3.12.2" rel="bp156.5.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574078400">- Update to version 3.8.2:
  + User visible changes:
  - Use menus instead of popovers for menu buttons on the header
    bar, to show icons and accelerators.
  - Header bar: align menus to the right for menu buttons on the
    right side.
  - Tools menu: show the accelerators.
  - Search: show the matching files during the search operation.
  - Rename dialog: activate on enter.
  + Bugs fixed:
  - Fixed filesize test for big files.
  - Overwrite dialog: do not show an error after cancelling the
    operation.
  - Fixed crash when moving files to the trash.
  - Install missing UI files.
  - Added image/webp support in .desktop file.
  - Fix callback signature for value-changed signal when setting
    zoom.
  - Help: corrected wiki link.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577102400">- Update to version 3.8.3:
  + App icons: name the app icons with the application id.
  + Jpeg loader: crash when the original size is too big for a
    cairo surface.
  + Fixed run-time errors if exiv2 is not used.
  + Fixed window size the first time gThumb is executed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587297600">- Update to version 3.10.0:
  + New features and user visible changes:
  - Edit metadata dialogs: moved the lock button on the header
    bar; show the navigation bar only when the lock button is
    active.
  - Open location dialog: allow to use tilde as a home folder
    shortcut.
  + Bugs fixed: Install missing .ui file.
  + Updated translations.
- Changes from version 3.9.1:
  + New features and user visible changes:
  - Added ability to customize the keyboard shortcuts.
  - Added a shortcuts window to show the available shortcuts.
  - Added option to change the mouse wheel action.
  - Image viewer: added ability to define the transparency style.
  - Video viewer: allow to view the video at the original size;
    show the zoom factor in the statusbar.
  - Edit comment/tags dialogs: use the header bar; allow to
    change the current image from the dialog.
  - Add to catalog: use the header bar; allow to change the
    current image from the dialog.
  - Search: added ability to search in multiple folders.
  - Scripts: added %T to insert a timestamp in the command.
  - Folder tree:
    . Better drag&amp;drop support: allow to move a catalog into a
    library, and a library into another library, show an error
    if the drop operation is not possible;
    . Added an 'Open in Terminal' command in the context menu.
  - Overwrite dialog: show video previews as well, fixed dialog
    size.
  - Preferences: allow to specify a catalog or any other location
    as startup location.
  - Trash/Delete files: show progress for long operations.
  - File properties:
    . Added the file size in bytes.
    . Added a context menu command to customize the visibile
    properties.
  - Toolbar: show edit comment/tags in browser mode as well.
  - Export tools: removed from the toolbar. Some tools moved to
    the tools menu, others as a submenu in the gears menu.
  - Fixed window size when started the first time.
  - Updated app icon to follow the new GNOME style.
  - Rewritten README in markdown, updated screenshots.
  - Appdata: added release and OARS tags for flathub
    compatibility.
  + Bugs fixed:
  - gThumb hangs when some mount point is unavailable.
  - Jpeg loader: crash when the original size is too big for a
    cairo surface.
  - PNG loader: correctly load images with transparency.
  - Fixed run-time errors if exiv2 is not used.
  - Catalog: preserve the list order after saving the properties.
  - Scripts: fixed task cancellation when using a shell script.
  + Source code:
  - Utility functions refactoring.
  - Added tests for the utility functions.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1600689600">- Update to version 3.10.1:
  + User visible changes:
  - Exit fullscreen when pressing Esc in fullscreen mode.
  - Search editor: focus the newly added filter selector.
  - File list: reset vertical scroll position after changing
    directory.
  - Preferences dialog: increase width for extensions and
    shortcuts lists.
  + Bugs fixed:
  - WebP loader: fixed an infinite loop when the operation is
    cancelled.
  - Jpeg loader: fixed crash in case of some malformed jpegs.
  - Fixed crash when selecting other images after deleting.
  - Fixed long UI freeze after cutting/pasting many files.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1612094400">- Update to version 3.10.2:
  + Continuously reloads image when it is only image in folder.
  + exiv2: remove the charset= prefix from strings.
  + Fixed jump to bottom when selecting thumbnails with mouse.
  + gThumb opens import tool if the import tool is already opened.
  + Image viewer: fixed bright line visual artifacts.
  + Search:
  - Fixed possible crash after cancelling a search.
  - Do not count duplicated files.
  - Stop the previous search before starting the new one.
  - Stop searching if the user changes location.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618315200">- Update to version 3.10.3:
  + Fix possible build error.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1629720000">- Update to version 3.10.4:
  + Install the gThumb import desktop file.
  + Contact sheet: fixed themes list always empty.
  + Thumbnailer: try with the system thumbnailer if the image is
    null
  + File chooser: correctly get the filename extension.
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632139200">- Update to version 3.12.0:
  + New features and user visible changes:
  - Added ability to load AVIF/HEIF images using libheif.
  - Added ability to save images as AVIF.
  - Add JPEG XL (*.jxl) read support.
  - File manager: added file actions to the viewer
    context menu.
  - Extensions: removed facebook and picasaweb uploaders.
  - Image viewer: use a proportional zoom increment.
  - Read color profiles from png files as well.
  - Media viewer: use accurate seeking when clicking on
    the progress bar.
  - Media viewer: show the pointed time when hovering over
    the progress bar.
  - Preferences: added option to show/hide the statusbar.
  - Rename files: added a button to revert to the last
    used template.
  - Added configurable shortcuts for Save and Save As.
  - Media viewer: added keyboard shortcuts.
  - File list: always allow to use Control-A to select
    all files.
  - Allow to set shortcuts to activate filters.
  - Added a template editor to edit text values with
    special codes: script commands, rename templates,
    print header and footer, etc.
  - Faster navigation when a directory contains
    thousands of images.
  - File list: start more thumbnailers in parallel.
  - Allow to mount unmounted volumes.
  - Color picker: added other formats: rgb in % and hsl.
  - Allow to keep browsing while executing long-running
    external tools.
  - Status bar: added button to show the progress dialog.
  - File properties: do not reset the selection after showing
    another image.
  - Histogram: show the properties in a single column
    to save horizontal space.
  + Bugs fixed:
  - Install the gThumb import desktop file.
  - Fix memory leak when loading webp, jxl, avif images.
  - Check if image is null before using it.
  - Added a Flatpak manifest.
  - Contact sheet: fixed themes list always empty.
  - Raw: Make compatible with LibRaw 0.21
  - Folder context menu: do not allow to move if cannot delete.
  - Folder context menu: do not allow to copy not mounted
    volumes.
  - Terminal: enable only for local folders.
  - Lots of others small fixes.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1632139201">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139202">- Add pkgconfig(libheif) BuildRequires: Add support for heif/avif.
- Add pkgconfig(champlain-0.12) and pkgconfig(champlain-gtk-0.12)
  BuildRequires and pass libchamplain=true to meson: Use
  libchamplain to show the position the image refers to.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1636113600">- Stop passing tracing=false and documentation=true to meson, no
  longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644494400">- Add daef485dffd67319c114cf1bda453bf6157e11ff.patch: Remove
  duplicate lang entry.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647950400">- Update to version 3.12.1:
  + PNG loader ignores gAMA.
  + Transparent webp images are rendered incorrectly.
  + Crash when dropping files on an empty folder/catalog.
  + Fixed location loading after mounting volume.
  + JPEG image dimensions not displayed for files inside the
    trash.
  + Infinite Loop when viewing more than 50 thumbnails.
  + X11 window title is not set.
  + Copy release notes on build from NEWS to metainfo file.
  + Fixed build if appstream &gt;= 0.14.6 is not available.
  + Fix incorrect usage of shared_module in extensions.
  + cli: mention that user can open files and/or directories.
  + Updated translations.
- Drop daef485dffd67319c114cf1bda453bf6157e11ff.patch: Fixed
  upstream.
- Add pkgconfig(appstream) and AppStream BuildRequires: Needed to
  build and install appdata now.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1649246400">- Update to version 3.12.2:
  + Fixed possible crash when changing directory during
    thumbnails creation.
  + Added support for larger thumbnail sizes: 512, 768 and
    1024 pixels.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1651060800">- Add relevant version limit to pkgconfig(appstream) BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1673870400">- Add da0d3f22.patch: Fix build with libraw 0.21.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1688385600">- Add 3376550a.patch: exiv2: added support for version 0.28.
- Refresh da0d3f22.patch from upstream git.</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1689336000">- Add pkgconfig(libjxl) BuildRequires: enable JPEG XL image
  support.
- Add c97a8aaa.patch: desktop background: fixed when using the dark
  color scheme</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1740052800">- Disable libchamplain. It pulls in libsoup 3, while gthumb is
  still using libsoup 2 (boo#1237098).</changelog>
</package>
<package pkgid="b93622b9ef4d11a8a122eddb67a40ee0c64295536df1ddebfa980d5bc00207e3" name="gtk-layer-shell" arch="src">
  <version epoch="0" ver="0.8.0" rel="bp156.3.2.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1577534400">- Initial package gtk-layer-shell 0.1.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1578052800">- Add typelib subpackage typelib-1_0-GtkLayerShell-0_1
- Rename gtk-layer-shell0 to libgtk-layer-shell0</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- BuildRequire gobject introspection devel files correctly</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596024000">- Update to 0.2.0:
  * Relicense to LGPL v3
  * Fix long standing issue with popup grabs
  * Fix potential compatibility issues between GTK versions with
    gtk-priv headers
  * Add GitHub Actions CI (just building and license check for now)
  * Add script to check that are files are licensed correctly
  * Use layer_surface-&gt;set_layer instead of remapping (when available)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- Update to 0.3.0:
  * Demo: Display GTK version
  * Demo: Add option for disabling gtk-layer-shell for testing
  * Fix intermittent crash relating to popovers (#51)
  * Clarify that our license is LGPL version 3 or any later version
  * Use system XDG Shell protocol when available
  * Allow accessing the underlying layer shell surface
    (EDIT: this change was accidentally omitted from the release)
  * Bump explicitly supported GTK version to 3.24.22</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597752000">- Add GPL3 to Licenses</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603368000">- Update to 0.4.0:
  * Demo: show GTK Layer Shell version
  * Demo: fix initially set auto-exclusive zone and fixed size
    properties (fixes #64)
  * API: expose GTK Layer Shell version
  * API: expose the underlying layer shell surface (fixes #41)
  * Tests: add mock server
  * Tests: add integration tests (fixes #60)
  * Diagnostics: remove "transient_for != window transient_for" warning
  * Diagnostics: improve warning when GTK version may not work by
    linking to a compatibility table (fixes #66)
  * Compat: bump supported GTK to v3.24.23</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603972800">- Update to 0.5.0:
  * API: add getters for all properties (fixes #56)
  * API: add gtk_layer_is_supported() (fixes #83)
  * API: add gtk_layer_is_layer_window(window)
  * Docs: add Since: annotations for functions added since the
    initial release (fixes #82)
  * Fix: accept non-1 true boolean values
  * Tests: fix license test for release tarball (fixes #73)
  * Tests: test popup with grab (the most likely thing to break
    on an incompatible GTK version) (fixes #68)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1604318400">- Update to 0.5.1:
  * Tests: fix integration test timeout on GTK v3.24.23 (#91)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1607860800">- Update to 0.5.2:
  * Fix: normalize keyboard interactivity boolean to TRUE or FALSE
  * Fix: Set layer windows to mapped (removes warning on tooltip
    creation and fixes subsurfaces created as a GTK_WINDOW_POPUP
    window, fixes #38)
  * Examples: Rename gtk-layer-example -&gt; simple-example-c
  * Examples: merge simple-example-c and gtk-layer-demo into
    examples directory
  * Examples: add Vala example (not built with rest of project,
    does not add dependency)
  * Examples: add Python example
  * Meson: change GTK dependency gtk+-wayland-3.0 -&gt; gtk+-3.0
  * Meson: drop .types file in docs
  * Tests: change "test client" terminology to "integration test"
  * Tests: colored output
  * Tests: check that all tests are added to meson
  * Compat: bump supported GTK to v3.24.24</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614772800">- Update to 0.6.0:
  * Layer Shell: support protocol version 4
  * API: support on-demand keyboard interactivity on protocol version 4
  * API: deprecate gtk_layer_set_keyboard_interactivity() in favor of
    gtk_layer_set_keyboard_mode()
  * API: add gtk_layer_get_protocol_version()
  * Compat bump supported GTK to v3.24.26</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1643371200">- Update to 0.7.0:
  * Meson: allow disabling building with gobject-introspection
  * Compat: bump supported GTK to v3.24.31</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666612800">- Update to 0.8.0:
  * Vala: support generating vapi files
  * Fix: memory leak, #128
  * Compat: stop warning when GTK version is not explicitly supported
  * Compat: bump supported GTK to 3.24.34</changelog>
</package>
<package pkgid="b47389dd46f4daef1d3a7945a8d895b5ded612b5a6013330731f8a15d7d188c1" name="gtk-layer-shell-devel" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="bp156.3.2.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1577534400">- Initial package gtk-layer-shell 0.1.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1578052800">- Add typelib subpackage typelib-1_0-GtkLayerShell-0_1
- Rename gtk-layer-shell0 to libgtk-layer-shell0</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- BuildRequire gobject introspection devel files correctly</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596024000">- Update to 0.2.0:
  * Relicense to LGPL v3
  * Fix long standing issue with popup grabs
  * Fix potential compatibility issues between GTK versions with
    gtk-priv headers
  * Add GitHub Actions CI (just building and license check for now)
  * Add script to check that are files are licensed correctly
  * Use layer_surface-&gt;set_layer instead of remapping (when available)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- Update to 0.3.0:
  * Demo: Display GTK version
  * Demo: Add option for disabling gtk-layer-shell for testing
  * Fix intermittent crash relating to popovers (#51)
  * Clarify that our license is LGPL version 3 or any later version
  * Use system XDG Shell protocol when available
  * Allow accessing the underlying layer shell surface
    (EDIT: this change was accidentally omitted from the release)
  * Bump explicitly supported GTK version to 3.24.22</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597752000">- Add GPL3 to Licenses</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603368000">- Update to 0.4.0:
  * Demo: show GTK Layer Shell version
  * Demo: fix initially set auto-exclusive zone and fixed size
    properties (fixes #64)
  * API: expose GTK Layer Shell version
  * API: expose the underlying layer shell surface (fixes #41)
  * Tests: add mock server
  * Tests: add integration tests (fixes #60)
  * Diagnostics: remove "transient_for != window transient_for" warning
  * Diagnostics: improve warning when GTK version may not work by
    linking to a compatibility table (fixes #66)
  * Compat: bump supported GTK to v3.24.23</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603972800">- Update to 0.5.0:
  * API: add getters for all properties (fixes #56)
  * API: add gtk_layer_is_supported() (fixes #83)
  * API: add gtk_layer_is_layer_window(window)
  * Docs: add Since: annotations for functions added since the
    initial release (fixes #82)
  * Fix: accept non-1 true boolean values
  * Tests: fix license test for release tarball (fixes #73)
  * Tests: test popup with grab (the most likely thing to break
    on an incompatible GTK version) (fixes #68)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1604318400">- Update to 0.5.1:
  * Tests: fix integration test timeout on GTK v3.24.23 (#91)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1607860800">- Update to 0.5.2:
  * Fix: normalize keyboard interactivity boolean to TRUE or FALSE
  * Fix: Set layer windows to mapped (removes warning on tooltip
    creation and fixes subsurfaces created as a GTK_WINDOW_POPUP
    window, fixes #38)
  * Examples: Rename gtk-layer-example -&gt; simple-example-c
  * Examples: merge simple-example-c and gtk-layer-demo into
    examples directory
  * Examples: add Vala example (not built with rest of project,
    does not add dependency)
  * Examples: add Python example
  * Meson: change GTK dependency gtk+-wayland-3.0 -&gt; gtk+-3.0
  * Meson: drop .types file in docs
  * Tests: change "test client" terminology to "integration test"
  * Tests: colored output
  * Tests: check that all tests are added to meson
  * Compat: bump supported GTK to v3.24.24</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614772800">- Update to 0.6.0:
  * Layer Shell: support protocol version 4
  * API: support on-demand keyboard interactivity on protocol version 4
  * API: deprecate gtk_layer_set_keyboard_interactivity() in favor of
    gtk_layer_set_keyboard_mode()
  * API: add gtk_layer_get_protocol_version()
  * Compat bump supported GTK to v3.24.26</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1643371200">- Update to 0.7.0:
  * Meson: allow disabling building with gobject-introspection
  * Compat: bump supported GTK to v3.24.31</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666612800">- Update to 0.8.0:
  * Vala: support generating vapi files
  * Fix: memory leak, #128
  * Compat: stop warning when GTK version is not explicitly supported
  * Compat: bump supported GTK to 3.24.34</changelog>
</package>
<package pkgid="987ffb6287eca8daf1b432a81d0063e285cf2da769077854961027e740e88a9e" name="gtk-layer-shell-devel" arch="i586">
  <version epoch="0" ver="0.8.0" rel="bp156.3.2.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1577534400">- Initial package gtk-layer-shell 0.1.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1578052800">- Add typelib subpackage typelib-1_0-GtkLayerShell-0_1
- Rename gtk-layer-shell0 to libgtk-layer-shell0</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- BuildRequire gobject introspection devel files correctly</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596024000">- Update to 0.2.0:
  * Relicense to LGPL v3
  * Fix long standing issue with popup grabs
  * Fix potential compatibility issues between GTK versions with
    gtk-priv headers
  * Add GitHub Actions CI (just building and license check for now)
  * Add script to check that are files are licensed correctly
  * Use layer_surface-&gt;set_layer instead of remapping (when available)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- Update to 0.3.0:
  * Demo: Display GTK version
  * Demo: Add option for disabling gtk-layer-shell for testing
  * Fix intermittent crash relating to popovers (#51)
  * Clarify that our license is LGPL version 3 or any later version
  * Use system XDG Shell protocol when available
  * Allow accessing the underlying layer shell surface
    (EDIT: this change was accidentally omitted from the release)
  * Bump explicitly supported GTK version to 3.24.22</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597752000">- Add GPL3 to Licenses</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603368000">- Update to 0.4.0:
  * Demo: show GTK Layer Shell version
  * Demo: fix initially set auto-exclusive zone and fixed size
    properties (fixes #64)
  * API: expose GTK Layer Shell version
  * API: expose the underlying layer shell surface (fixes #41)
  * Tests: add mock server
  * Tests: add integration tests (fixes #60)
  * Diagnostics: remove "transient_for != window transient_for" warning
  * Diagnostics: improve warning when GTK version may not work by
    linking to a compatibility table (fixes #66)
  * Compat: bump supported GTK to v3.24.23</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603972800">- Update to 0.5.0:
  * API: add getters for all properties (fixes #56)
  * API: add gtk_layer_is_supported() (fixes #83)
  * API: add gtk_layer_is_layer_window(window)
  * Docs: add Since: annotations for functions added since the
    initial release (fixes #82)
  * Fix: accept non-1 true boolean values
  * Tests: fix license test for release tarball (fixes #73)
  * Tests: test popup with grab (the most likely thing to break
    on an incompatible GTK version) (fixes #68)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1604318400">- Update to 0.5.1:
  * Tests: fix integration test timeout on GTK v3.24.23 (#91)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1607860800">- Update to 0.5.2:
  * Fix: normalize keyboard interactivity boolean to TRUE or FALSE
  * Fix: Set layer windows to mapped (removes warning on tooltip
    creation and fixes subsurfaces created as a GTK_WINDOW_POPUP
    window, fixes #38)
  * Examples: Rename gtk-layer-example -&gt; simple-example-c
  * Examples: merge simple-example-c and gtk-layer-demo into
    examples directory
  * Examples: add Vala example (not built with rest of project,
    does not add dependency)
  * Examples: add Python example
  * Meson: change GTK dependency gtk+-wayland-3.0 -&gt; gtk+-3.0
  * Meson: drop .types file in docs
  * Tests: change "test client" terminology to "integration test"
  * Tests: colored output
  * Tests: check that all tests are added to meson
  * Compat: bump supported GTK to v3.24.24</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614772800">- Update to 0.6.0:
  * Layer Shell: support protocol version 4
  * API: support on-demand keyboard interactivity on protocol version 4
  * API: deprecate gtk_layer_set_keyboard_interactivity() in favor of
    gtk_layer_set_keyboard_mode()
  * API: add gtk_layer_get_protocol_version()
  * Compat bump supported GTK to v3.24.26</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1643371200">- Update to 0.7.0:
  * Meson: allow disabling building with gobject-introspection
  * Compat: bump supported GTK to v3.24.31</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666612800">- Update to 0.8.0:
  * Vala: support generating vapi files
  * Fix: memory leak, #128
  * Compat: stop warning when GTK version is not explicitly supported
  * Compat: bump supported GTK to 3.24.34</changelog>
</package>
<package pkgid="b33a7f921af47718d022344785ccad3830156167804fd5e698ad3c0229b2519c" name="gtk-layer-shell-devel" arch="ppc64le">
  <version epoch="0" ver="0.8.0" rel="bp156.3.2.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1577534400">- Initial package gtk-layer-shell 0.1.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1578052800">- Add typelib subpackage typelib-1_0-GtkLayerShell-0_1
- Rename gtk-layer-shell0 to libgtk-layer-shell0</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- BuildRequire gobject introspection devel files correctly</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596024000">- Update to 0.2.0:
  * Relicense to LGPL v3
  * Fix long standing issue with popup grabs
  * Fix potential compatibility issues between GTK versions with
    gtk-priv headers
  * Add GitHub Actions CI (just building and license check for now)
  * Add script to check that are files are licensed correctly
  * Use layer_surface-&gt;set_layer instead of remapping (when available)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- Update to 0.3.0:
  * Demo: Display GTK version
  * Demo: Add option for disabling gtk-layer-shell for testing
  * Fix intermittent crash relating to popovers (#51)
  * Clarify that our license is LGPL version 3 or any later version
  * Use system XDG Shell protocol when available
  * Allow accessing the underlying layer shell surface
    (EDIT: this change was accidentally omitted from the release)
  * Bump explicitly supported GTK version to 3.24.22</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597752000">- Add GPL3 to Licenses</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603368000">- Update to 0.4.0:
  * Demo: show GTK Layer Shell version
  * Demo: fix initially set auto-exclusive zone and fixed size
    properties (fixes #64)
  * API: expose GTK Layer Shell version
  * API: expose the underlying layer shell surface (fixes #41)
  * Tests: add mock server
  * Tests: add integration tests (fixes #60)
  * Diagnostics: remove "transient_for != window transient_for" warning
  * Diagnostics: improve warning when GTK version may not work by
    linking to a compatibility table (fixes #66)
  * Compat: bump supported GTK to v3.24.23</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603972800">- Update to 0.5.0:
  * API: add getters for all properties (fixes #56)
  * API: add gtk_layer_is_supported() (fixes #83)
  * API: add gtk_layer_is_layer_window(window)
  * Docs: add Since: annotations for functions added since the
    initial release (fixes #82)
  * Fix: accept non-1 true boolean values
  * Tests: fix license test for release tarball (fixes #73)
  * Tests: test popup with grab (the most likely thing to break
    on an incompatible GTK version) (fixes #68)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1604318400">- Update to 0.5.1:
  * Tests: fix integration test timeout on GTK v3.24.23 (#91)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1607860800">- Update to 0.5.2:
  * Fix: normalize keyboard interactivity boolean to TRUE or FALSE
  * Fix: Set layer windows to mapped (removes warning on tooltip
    creation and fixes subsurfaces created as a GTK_WINDOW_POPUP
    window, fixes #38)
  * Examples: Rename gtk-layer-example -&gt; simple-example-c
  * Examples: merge simple-example-c and gtk-layer-demo into
    examples directory
  * Examples: add Vala example (not built with rest of project,
    does not add dependency)
  * Examples: add Python example
  * Meson: change GTK dependency gtk+-wayland-3.0 -&gt; gtk+-3.0
  * Meson: drop .types file in docs
  * Tests: change "test client" terminology to "integration test"
  * Tests: colored output
  * Tests: check that all tests are added to meson
  * Compat: bump supported GTK to v3.24.24</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614772800">- Update to 0.6.0:
  * Layer Shell: support protocol version 4
  * API: support on-demand keyboard interactivity on protocol version 4
  * API: deprecate gtk_layer_set_keyboard_interactivity() in favor of
    gtk_layer_set_keyboard_mode()
  * API: add gtk_layer_get_protocol_version()
  * Compat bump supported GTK to v3.24.26</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1643371200">- Update to 0.7.0:
  * Meson: allow disabling building with gobject-introspection
  * Compat: bump supported GTK to v3.24.31</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666612800">- Update to 0.8.0:
  * Vala: support generating vapi files
  * Fix: memory leak, #128
  * Compat: stop warning when GTK version is not explicitly supported
  * Compat: bump supported GTK to 3.24.34</changelog>
</package>
<package pkgid="aecdf79e9d2348189ed4dbcbb6e68923a322d7346f9d1ccc044a6cb682bc50b5" name="gtk-layer-shell-devel" arch="s390x">
  <version epoch="0" ver="0.8.0" rel="bp156.3.2.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1577534400">- Initial package gtk-layer-shell 0.1.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1578052800">- Add typelib subpackage typelib-1_0-GtkLayerShell-0_1
- Rename gtk-layer-shell0 to libgtk-layer-shell0</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- BuildRequire gobject introspection devel files correctly</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596024000">- Update to 0.2.0:
  * Relicense to LGPL v3
  * Fix long standing issue with popup grabs
  * Fix potential compatibility issues between GTK versions with
    gtk-priv headers
  * Add GitHub Actions CI (just building and license check for now)
  * Add script to check that are files are licensed correctly
  * Use layer_surface-&gt;set_layer instead of remapping (when available)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- Update to 0.3.0:
  * Demo: Display GTK version
  * Demo: Add option for disabling gtk-layer-shell for testing
  * Fix intermittent crash relating to popovers (#51)
  * Clarify that our license is LGPL version 3 or any later version
  * Use system XDG Shell protocol when available
  * Allow accessing the underlying layer shell surface
    (EDIT: this change was accidentally omitted from the release)
  * Bump explicitly supported GTK version to 3.24.22</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597752000">- Add GPL3 to Licenses</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603368000">- Update to 0.4.0:
  * Demo: show GTK Layer Shell version
  * Demo: fix initially set auto-exclusive zone and fixed size
    properties (fixes #64)
  * API: expose GTK Layer Shell version
  * API: expose the underlying layer shell surface (fixes #41)
  * Tests: add mock server
  * Tests: add integration tests (fixes #60)
  * Diagnostics: remove "transient_for != window transient_for" warning
  * Diagnostics: improve warning when GTK version may not work by
    linking to a compatibility table (fixes #66)
  * Compat: bump supported GTK to v3.24.23</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603972800">- Update to 0.5.0:
  * API: add getters for all properties (fixes #56)
  * API: add gtk_layer_is_supported() (fixes #83)
  * API: add gtk_layer_is_layer_window(window)
  * Docs: add Since: annotations for functions added since the
    initial release (fixes #82)
  * Fix: accept non-1 true boolean values
  * Tests: fix license test for release tarball (fixes #73)
  * Tests: test popup with grab (the most likely thing to break
    on an incompatible GTK version) (fixes #68)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1604318400">- Update to 0.5.1:
  * Tests: fix integration test timeout on GTK v3.24.23 (#91)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1607860800">- Update to 0.5.2:
  * Fix: normalize keyboard interactivity boolean to TRUE or FALSE
  * Fix: Set layer windows to mapped (removes warning on tooltip
    creation and fixes subsurfaces created as a GTK_WINDOW_POPUP
    window, fixes #38)
  * Examples: Rename gtk-layer-example -&gt; simple-example-c
  * Examples: merge simple-example-c and gtk-layer-demo into
    examples directory
  * Examples: add Vala example (not built with rest of project,
    does not add dependency)
  * Examples: add Python example
  * Meson: change GTK dependency gtk+-wayland-3.0 -&gt; gtk+-3.0
  * Meson: drop .types file in docs
  * Tests: change "test client" terminology to "integration test"
  * Tests: colored output
  * Tests: check that all tests are added to meson
  * Compat: bump supported GTK to v3.24.24</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614772800">- Update to 0.6.0:
  * Layer Shell: support protocol version 4
  * API: support on-demand keyboard interactivity on protocol version 4
  * API: deprecate gtk_layer_set_keyboard_interactivity() in favor of
    gtk_layer_set_keyboard_mode()
  * API: add gtk_layer_get_protocol_version()
  * Compat bump supported GTK to v3.24.26</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1643371200">- Update to 0.7.0:
  * Meson: allow disabling building with gobject-introspection
  * Compat: bump supported GTK to v3.24.31</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666612800">- Update to 0.8.0:
  * Vala: support generating vapi files
  * Fix: memory leak, #128
  * Compat: stop warning when GTK version is not explicitly supported
  * Compat: bump supported GTK to 3.24.34</changelog>
</package>
<package pkgid="aecd55c8fe89bee0d3a6263185aafd9794dc3bbff0ae61e48a407fc00011860b" name="gtk-layer-shell-devel" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="bp156.3.2.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1577534400">- Initial package gtk-layer-shell 0.1.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1578052800">- Add typelib subpackage typelib-1_0-GtkLayerShell-0_1
- Rename gtk-layer-shell0 to libgtk-layer-shell0</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- BuildRequire gobject introspection devel files correctly</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596024000">- Update to 0.2.0:
  * Relicense to LGPL v3
  * Fix long standing issue with popup grabs
  * Fix potential compatibility issues between GTK versions with
    gtk-priv headers
  * Add GitHub Actions CI (just building and license check for now)
  * Add script to check that are files are licensed correctly
  * Use layer_surface-&gt;set_layer instead of remapping (when available)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- Update to 0.3.0:
  * Demo: Display GTK version
  * Demo: Add option for disabling gtk-layer-shell for testing
  * Fix intermittent crash relating to popovers (#51)
  * Clarify that our license is LGPL version 3 or any later version
  * Use system XDG Shell protocol when available
  * Allow accessing the underlying layer shell surface
    (EDIT: this change was accidentally omitted from the release)
  * Bump explicitly supported GTK version to 3.24.22</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597752000">- Add GPL3 to Licenses</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603368000">- Update to 0.4.0:
  * Demo: show GTK Layer Shell version
  * Demo: fix initially set auto-exclusive zone and fixed size
    properties (fixes #64)
  * API: expose GTK Layer Shell version
  * API: expose the underlying layer shell surface (fixes #41)
  * Tests: add mock server
  * Tests: add integration tests (fixes #60)
  * Diagnostics: remove "transient_for != window transient_for" warning
  * Diagnostics: improve warning when GTK version may not work by
    linking to a compatibility table (fixes #66)
  * Compat: bump supported GTK to v3.24.23</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603972800">- Update to 0.5.0:
  * API: add getters for all properties (fixes #56)
  * API: add gtk_layer_is_supported() (fixes #83)
  * API: add gtk_layer_is_layer_window(window)
  * Docs: add Since: annotations for functions added since the
    initial release (fixes #82)
  * Fix: accept non-1 true boolean values
  * Tests: fix license test for release tarball (fixes #73)
  * Tests: test popup with grab (the most likely thing to break
    on an incompatible GTK version) (fixes #68)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1604318400">- Update to 0.5.1:
  * Tests: fix integration test timeout on GTK v3.24.23 (#91)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1607860800">- Update to 0.5.2:
  * Fix: normalize keyboard interactivity boolean to TRUE or FALSE
  * Fix: Set layer windows to mapped (removes warning on tooltip
    creation and fixes subsurfaces created as a GTK_WINDOW_POPUP
    window, fixes #38)
  * Examples: Rename gtk-layer-example -&gt; simple-example-c
  * Examples: merge simple-example-c and gtk-layer-demo into
    examples directory
  * Examples: add Vala example (not built with rest of project,
    does not add dependency)
  * Examples: add Python example
  * Meson: change GTK dependency gtk+-wayland-3.0 -&gt; gtk+-3.0
  * Meson: drop .types file in docs
  * Tests: change "test client" terminology to "integration test"
  * Tests: colored output
  * Tests: check that all tests are added to meson
  * Compat: bump supported GTK to v3.24.24</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614772800">- Update to 0.6.0:
  * Layer Shell: support protocol version 4
  * API: support on-demand keyboard interactivity on protocol version 4
  * API: deprecate gtk_layer_set_keyboard_interactivity() in favor of
    gtk_layer_set_keyboard_mode()
  * API: add gtk_layer_get_protocol_version()
  * Compat bump supported GTK to v3.24.26</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1643371200">- Update to 0.7.0:
  * Meson: allow disabling building with gobject-introspection
  * Compat: bump supported GTK to v3.24.31</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666612800">- Update to 0.8.0:
  * Vala: support generating vapi files
  * Fix: memory leak, #128
  * Compat: stop warning when GTK version is not explicitly supported
  * Compat: bump supported GTK to 3.24.34</changelog>
</package>
<package pkgid="67dfeeee023eb565d81023d690034adbfb88a41937ea8d401c474ea8d402890e" name="gtk2-metatheme-bluebird" arch="noarch">
  <version epoch="0" ver="1.3" rel="bp156.4.3.1"/>
  <changelog author="seiler@b1-systems.de" date="1372766400">- initial commit</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to v1.2 (latest release)
  mostly minor tweaks and GTK3 fixes</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543060800">- update to v1.3
  * New version of the gtk3 theme based on the latest version of Greybird
  * Fixing broken compatibility with the latest versions of GTK+ 3
  * New index.theme file
- added %license macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607774400">- Updated upstream URL</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1738411200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  features.
- Don't pass any arguments to %build and %install; rpm-4.20 does
  not like it!</changelog>
</package>
<package pkgid="940da0ce76e29981aac3c578c26cdd7a0a194e8575d453f51ac30c1e545dd8c7" name="gtk2-metatheme-greybird" arch="noarch">
  <version epoch="0" ver="3.23.4+git0.7e4507d" rel="bp156.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to the current release 3.22.0</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482753600">- clarify rubygem-sass BuildRequires version</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1506081600">- updated to current release 3.22.5
- added gnome-shell.css to package</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Remove bias from description.
- Update homepage URL. Remove idempotent %if..%endif guards.</changelog>
  <changelog author="cornelis@solcon.nl" date="1519473600">- Update to 3.22.6:
  * Improvements for Thunar-gtk3
  * Improvements for xfce4-panel 4.13
  * Implement Chrome/ium Gtk3 style
  * Include dark version of gnome app theming
  * Tweak lightdm-gtk-greeter's restart button"
  * Bugfixes
- Remove gtk3-engine-unico requirement, has not been needed for some
  time</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1542456000">- Update to 3.22.9:
  * Support for Xfwm4 4.13
  * Improve contrast in Xfwm4's alt-tab dialog (both 4.12 and 4.13)
  * Switch from ruby-sass to sassc
  * Fix height thunar's pathbar entry widget
  * Use correct colors for GtkNotebook
  * Fix Chromium's titlebar buttons
  * Make the Gtk3 xfce4-panel 80% transparent again
  * Improve hidpi support in CSD (gh#shimmerproject/greybird#100)
  * Fix Gtk2 radiobuttons (gh#shimmerproject/greybird#219)
  * Drop superfluous assets
  * Make radio and checkitems more consistent between Gtk2 and Gtk3
  * Improve lightdm-gtk-greeter theming
  * Include Gtk3 window decorations
  * Improve backdrop style of several widgets
- BuildRequires: remove ruby-sass and add  sassc</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1550491200">- Update to 3.22.10:
  * Improve the print dialog's style (gh#shimmerproject/Greybird#238)
  * Fix glitch in Xfdesktop 4.13 rubberband (gh#shimmerproject/Greybird#234)
  * Apply Xfce Panel Tasklist margin intelligently (gh#shimmerproject/Greybird#240)
  * Make Xfce Panel's Tasklist button's padding consistent
  * Handle carets in entry widgets in Xfce panel plugins (gh#shimmerproject/Greybird#241)
  * Fix xfce4-terminal's tab borders again (gh#shimmerproject/Greybird#184)
  * Re-apply Xfwm4 tabwin sizing improvement (gh#shimmerproject/Greybird#224)
  - Dropped obsolete macros and added minor improvements</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1556107200">- Update to version 3.22.10~git2.799485d:
  * Make error and warning entry text more readable
  * Also set backdrop color for print dialog
    (Fixes gh#shimmerproject/Greybird#243)
  * Re-apply xfwm4 tabwin sizing improvement
    (Issue gh#shimmerproject/Greybird#224)
- Switched sources to git master branch
- Spec file: switched to %autosetup for simplicity</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557489600">- Update to version 3.22.10~git3.c0b8881:
  * Improve button sizing
  * Make error and warning entry text more readable
  * Also set backdrop color for print dialog
    (Fixes gh#shimmerproject/Greybird#243)</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1571918400">- Update to version 3.22.10~git8.99f40ce:
  * Add minimal size to header bar button's label
  * Revert "Fix size of linked button with images in header bar"
  * xfdesktop: Highlight selected icons
  * Fix size of linked button with images in header bar
  * xfce4-panel: Add drop-target style
  * Improve button sizing
  * Make error and warning entry text more readable
  * Also set backdrop color for print dialog (Fixes #243)
  * Re-apply xfwm4 tabwin sizing improvement (Issue #224)
  * Improve the print dialog's style (Fixes #238)</changelog>
  <changelog author="tux93@opensuse.org" date="1572868800">- Update to version 3.22.10+git14.e467f4b:
  * Add single-user installation instructions
  * Fix notification theme paths
  * Include meson as dependency in README.md
  * various small fixes
  * Buildsystem ported to meson and added dark theme</changelog>
  <changelog author="tux93@opensuse.org" date="1573041600">- Update to version 3.22.10+git15.acede86:
  * Make use of symlinks cleanup unused files</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1573905600">- Update to version 3.22.10+git17.4d806cd:
  * Fixed xfwm4-a11y dark buttons padding and window borders
  * Added xfwm4 Greybird-accessibility-dark</changelog>
  <changelog author="tux93@opensuse.org" date="1582372800">- Update to version 3.22.11+git4.320a703:
  * Sync dark theme with light theme and use symlink
  * Rebase partly on Adwaita 3.24
  * Messagedialog: Reduce buttonbox button height
  * notifyd: Tweak the theme's appearance (button hover)
  * Hide i/o on GtkSwitches</changelog>
  <changelog author="tux93@opensuse.org" date="1606564800">- Update to version 3.22.12+git4.454f139:
  * Rebase parts of the %linked code (Fixes #265)
  * Fix Thunar CSD when not focused (Fixes #274)
  * Fix GTK3 dark colors</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1608379200">- Update to version 3.22.13+git2.ede9f55:
  * Reduce messagedialog buttonbox size
  * Make CSD titlebars slimmer
  * Improve dark xfwm4 tabwin contrast
  * Improve contrast of dark entry (Fixes #263)
  * More normal-sized inline-toolbar buttons
  * Add workaround for Gnome Builder (Fixes #264)
  * Fix progressbar in unfocused windows (Fixes #284)</changelog>
  <changelog author="maurizio.galli@suse.com" date="1673870400">- Update to version 3.23.2+git0.25f312f:
  * Fixes "Hide frame when maximized" ignoring top frame
  * xfwm4: Also bump tabwin preview size to 128px
  * xfwm4: Improve tabwin contrast
  * Bump xfwm4 tabwin preview to 128px (Fixes #324)
  * Remove dark line below Xfwm4 titlebar introduced by recent change.
  * Add openbox support
  * Decrease Gnome Software's headerbar height
  * Fix installation of a11y and compact themes (Fixes #316) (#318)
  * Install Greybird/index.theme (#317)
  * Add initial support for Gtk4 and libhandy
  * Fix dark xfwm4-a11y install path (Issue #307)
  * Fix xfwm4-a11y and xfwm4-compact install path (Issue #307)
  * Removed unnecessary newline
  * Removed trailing whitespaces
  * Moved `@extends` to the top of the rule
  * Fix: GtkLabel: `Backdrop`ped selection color adjusted.
  * Fix: Backdropped selection: `GtkListBox`es weren't grey
  * Hotfix: removed background color for non-bg items
  * Gtk3: Adjusted selected backdrop fg/bg colors: shades of grey.
  * Changes the xfwm4 border colors
  * build: refactor meson
  * Correct gradients for horizontal scrollbars
- Make "*:link:selected" optional to work around too old gtk4 libs
  Leap 15.4; add link-selected-is-optional.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1676980800">- Make "*:link:selected" optional to work around too old gtk4 libs
  on Leap 15.5, too.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734436800">- Update to version 3.23.4+git0.7e4507d:
  * Fix label styles for xfdesktop 4.19 (#338)
  * Stop forcing icon style for sidebars
  * Style hover/active undecorated buttons same as normal
  * Handle toolbar CSS class
  * Style item menubar nodes (#328)</changelog>
</package>
<package pkgid="1478009d75385b11c4eff8154ebfda3140cd8786825dd80b1af1f7b0f5a170b5" name="gtk2-metatheme-greybird-geeko" arch="noarch">
  <version epoch="0" ver="3.23.4+git0.c1d46c3" rel="bp156.3.3.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560859200">- Added license gpl-3.0-or-later for metacity theme
- Fixed _service file to follow naming guidelines ("+" replaced "~")</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1561118400">- Update to version 3.22.10.1+git5.316475b:
  * Tweak dark colors
  * Added theme-preview</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1562587200">- Update to version 3.22.10.1+git33.0c9d808:
  * Theme is now split in Light and Dark variants
  * Added xfwm dark theme
  * Improved xfwm inactive buttons contrast
  * Meson port
  * Update README.md to reflect meson
  * Remove unused themes
- Updated and optimized spec file to build with meson</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1563278400">- Update to version 3.22.10.1+git38.1a7574f:
  * Merge bright into lights notification theme, and drop darks bright theme
  * Install bright notification files to proper places
  * Add flags for flatpak usage</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1563364800">- Update to version 3.22.10.1+git39.ffde076:
  * Work around Meson bug that prevents Leap from building</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1576929600">- Update to version 3.22.10.1+git48.35f7cb8:
  * Make use of symlinks
  * Add single-user installation instructions
  * Added xfwm4 dark accessibility theme
  * Update to upstream master</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1582891200">- Update to version 3.22.10.1+git50.4465523:
  * Sync with Greybird upstream</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1582891201">- Update to version 3.22.10.1+git52.ef9302a:
  * Use correct theme path for notifyd</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1596456000">- Update to version v3.22.11+git1.968e3b5:
  * Improve contrast of gtk2 selection background color</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1596974400">- fix version number</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1606564800">- Update to version 3.22.11+git2.751e0f3:
  * Rebase parts of the %linked code</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1608292800">- Update to version 3.22.11+git10.2f4304a:
  * Reduce messagedialog buttonbox size
  * Make CSD titlebars slimmer
  * Improve dark xfwm4 tabwin contrast
  * More normal-sized inline-toolbar buttons
  * Add workaround for Gnome Builder
  * Fix progressbar in unfocused windows</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1656331200">- Update to version 3.23.1+git0.a96e825:
  * Sync with Greybird 3.23.1
  * Add initial support for Gtk4 and libhandy
  * Fix dark xfwm4-a11y install path
  * Fix xfwm4-a11y and xfwm4-compact install path
  * Fix: GtkLabel: Backdropped selection color adjusted
  * Fix: Backdropped selection: GtkListBoxes weren't grey
  * Hotfix: removed background color for non-bg items
  * Gtk3: Adjusted selected backdrop fg/bg colors: shades of grey.
  * Changes the xfwm4 border colors
  * build: refactor meson
  * Correct gradients for horizontal scrollbars
  * Reduce messagedialog buttonbox size
  * Make CSD titlebars slimmer
  * Correct gradients for horizontal scrollbars (shimmerproject/Greybird#288)
  * Greybird-Dark titlebar decorations now match their CSD counterparts (shimmerproject/Greybird#301)
  * Background selection colors are now grey instead of blue for better readability
  * Add initial support for Gtk4 and libhandy
  * Install index.theme</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1656331201">- Update to version 3.23.1+git1.77c0887:
  * Cleanup leftovers and correct emerald file mistakinly being renamed</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1656417600">- Prevent Unity desktop theme from being installed
  Added disable-unity_v3.23.1.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1673697600">- Make "*:link:selected" optional to work around too old gtk4 libs
  on Leap 15.4; add link-selected-is-optional.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1676980800">- Make "*:link:selected" optional to work around too old gtk4 libs
  on Leap 15.5, too.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734523200">- Add new patch
  git7e4507d7713b2aaf41f8cfef2a1a9e214a4d8b6f-fix-label-styles-for-xfdesktop-4.19.patch
- Refresh link-selected-is-optional.patch</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1734609600">- Update to version 3.23.4+git0.c1d46c3:
  * Sync with Greybird up to commit 7e4507d7713b2aaf41f8cfef2a1a9e214a4d8b6f
  * Fix label styles for xfdesktop 4.19
  * Stop forcing icon style for sidebars
  * Style hover/active undecorated buttons same as normal
  * Handle toolbar CSS class
  * Style item menubar nodes
  * xfwm4: Fix "Hide frame when maximized" ignoring top frame
  * xfwm4: Improve tabwin contrast
  * xfwm4: Bump tabwin preview to 128px
  * xfwm4: Remove dark line below titlebar
  * Decrease Gnome Software's headerbar height
- Patches removed as no longer needed:
  * git7e4507d7713b2aaf41f8cfef2a1a9e214a4d8b6f-fix-label-styles-for-xfdesktop-4.19.patch</changelog>
</package>
<package pkgid="27116df4f1242c63a77d85e01b7832b8f7a54ba811a80845dada324880b75838" name="gtk3-metatheme-bluebird" arch="noarch">
  <version epoch="0" ver="1.3" rel="bp156.4.3.1"/>
  <changelog author="seiler@b1-systems.de" date="1372766400">- initial commit</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to v1.2 (latest release)
  mostly minor tweaks and GTK3 fixes</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1543060800">- update to v1.3
  * New version of the gtk3 theme based on the latest version of Greybird
  * Fixing broken compatibility with the latest versions of GTK+ 3
  * New index.theme file
- added %license macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607774400">- Updated upstream URL</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1738411200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  features.
- Don't pass any arguments to %build and %install; rpm-4.20 does
  not like it!</changelog>
</package>
<package pkgid="7d7db70b3f720b3c8c0b65380f1ec2e625e0161df26065447d4305befc51e9a7" name="gtk3-metatheme-greybird" arch="noarch">
  <version epoch="0" ver="3.23.4+git0.7e4507d" rel="bp156.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to the current release 3.22.0</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482753600">- clarify rubygem-sass BuildRequires version</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1506081600">- updated to current release 3.22.5
- added gnome-shell.css to package</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Remove bias from description.
- Update homepage URL. Remove idempotent %if..%endif guards.</changelog>
  <changelog author="cornelis@solcon.nl" date="1519473600">- Update to 3.22.6:
  * Improvements for Thunar-gtk3
  * Improvements for xfce4-panel 4.13
  * Implement Chrome/ium Gtk3 style
  * Include dark version of gnome app theming
  * Tweak lightdm-gtk-greeter's restart button"
  * Bugfixes
- Remove gtk3-engine-unico requirement, has not been needed for some
  time</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1542456000">- Update to 3.22.9:
  * Support for Xfwm4 4.13
  * Improve contrast in Xfwm4's alt-tab dialog (both 4.12 and 4.13)
  * Switch from ruby-sass to sassc
  * Fix height thunar's pathbar entry widget
  * Use correct colors for GtkNotebook
  * Fix Chromium's titlebar buttons
  * Make the Gtk3 xfce4-panel 80% transparent again
  * Improve hidpi support in CSD (gh#shimmerproject/greybird#100)
  * Fix Gtk2 radiobuttons (gh#shimmerproject/greybird#219)
  * Drop superfluous assets
  * Make radio and checkitems more consistent between Gtk2 and Gtk3
  * Improve lightdm-gtk-greeter theming
  * Include Gtk3 window decorations
  * Improve backdrop style of several widgets
- BuildRequires: remove ruby-sass and add  sassc</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1550491200">- Update to 3.22.10:
  * Improve the print dialog's style (gh#shimmerproject/Greybird#238)
  * Fix glitch in Xfdesktop 4.13 rubberband (gh#shimmerproject/Greybird#234)
  * Apply Xfce Panel Tasklist margin intelligently (gh#shimmerproject/Greybird#240)
  * Make Xfce Panel's Tasklist button's padding consistent
  * Handle carets in entry widgets in Xfce panel plugins (gh#shimmerproject/Greybird#241)
  * Fix xfce4-terminal's tab borders again (gh#shimmerproject/Greybird#184)
  * Re-apply Xfwm4 tabwin sizing improvement (gh#shimmerproject/Greybird#224)
  - Dropped obsolete macros and added minor improvements</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1556107200">- Update to version 3.22.10~git2.799485d:
  * Make error and warning entry text more readable
  * Also set backdrop color for print dialog
    (Fixes gh#shimmerproject/Greybird#243)
  * Re-apply xfwm4 tabwin sizing improvement
    (Issue gh#shimmerproject/Greybird#224)
- Switched sources to git master branch
- Spec file: switched to %autosetup for simplicity</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557489600">- Update to version 3.22.10~git3.c0b8881:
  * Improve button sizing
  * Make error and warning entry text more readable
  * Also set backdrop color for print dialog
    (Fixes gh#shimmerproject/Greybird#243)</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1571918400">- Update to version 3.22.10~git8.99f40ce:
  * Add minimal size to header bar button's label
  * Revert "Fix size of linked button with images in header bar"
  * xfdesktop: Highlight selected icons
  * Fix size of linked button with images in header bar
  * xfce4-panel: Add drop-target style
  * Improve button sizing
  * Make error and warning entry text more readable
  * Also set backdrop color for print dialog (Fixes #243)
  * Re-apply xfwm4 tabwin sizing improvement (Issue #224)
  * Improve the print dialog's style (Fixes #238)</changelog>
  <changelog author="tux93@opensuse.org" date="1572868800">- Update to version 3.22.10+git14.e467f4b:
  * Add single-user installation instructions
  * Fix notification theme paths
  * Include meson as dependency in README.md
  * various small fixes
  * Buildsystem ported to meson and added dark theme</changelog>
  <changelog author="tux93@opensuse.org" date="1573041600">- Update to version 3.22.10+git15.acede86:
  * Make use of symlinks cleanup unused files</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1573905600">- Update to version 3.22.10+git17.4d806cd:
  * Fixed xfwm4-a11y dark buttons padding and window borders
  * Added xfwm4 Greybird-accessibility-dark</changelog>
  <changelog author="tux93@opensuse.org" date="1582372800">- Update to version 3.22.11+git4.320a703:
  * Sync dark theme with light theme and use symlink
  * Rebase partly on Adwaita 3.24
  * Messagedialog: Reduce buttonbox button height
  * notifyd: Tweak the theme's appearance (button hover)
  * Hide i/o on GtkSwitches</changelog>
  <changelog author="tux93@opensuse.org" date="1606564800">- Update to version 3.22.12+git4.454f139:
  * Rebase parts of the %linked code (Fixes #265)
  * Fix Thunar CSD when not focused (Fixes #274)
  * Fix GTK3 dark colors</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1608379200">- Update to version 3.22.13+git2.ede9f55:
  * Reduce messagedialog buttonbox size
  * Make CSD titlebars slimmer
  * Improve dark xfwm4 tabwin contrast
  * Improve contrast of dark entry (Fixes #263)
  * More normal-sized inline-toolbar buttons
  * Add workaround for Gnome Builder (Fixes #264)
  * Fix progressbar in unfocused windows (Fixes #284)</changelog>
  <changelog author="maurizio.galli@suse.com" date="1673870400">- Update to version 3.23.2+git0.25f312f:
  * Fixes "Hide frame when maximized" ignoring top frame
  * xfwm4: Also bump tabwin preview size to 128px
  * xfwm4: Improve tabwin contrast
  * Bump xfwm4 tabwin preview to 128px (Fixes #324)
  * Remove dark line below Xfwm4 titlebar introduced by recent change.
  * Add openbox support
  * Decrease Gnome Software's headerbar height
  * Fix installation of a11y and compact themes (Fixes #316) (#318)
  * Install Greybird/index.theme (#317)
  * Add initial support for Gtk4 and libhandy
  * Fix dark xfwm4-a11y install path (Issue #307)
  * Fix xfwm4-a11y and xfwm4-compact install path (Issue #307)
  * Removed unnecessary newline
  * Removed trailing whitespaces
  * Moved `@extends` to the top of the rule
  * Fix: GtkLabel: `Backdrop`ped selection color adjusted.
  * Fix: Backdropped selection: `GtkListBox`es weren't grey
  * Hotfix: removed background color for non-bg items
  * Gtk3: Adjusted selected backdrop fg/bg colors: shades of grey.
  * Changes the xfwm4 border colors
  * build: refactor meson
  * Correct gradients for horizontal scrollbars
- Make "*:link:selected" optional to work around too old gtk4 libs
  Leap 15.4; add link-selected-is-optional.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1676980800">- Make "*:link:selected" optional to work around too old gtk4 libs
  on Leap 15.5, too.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734436800">- Update to version 3.23.4+git0.7e4507d:
  * Fix label styles for xfdesktop 4.19 (#338)
  * Stop forcing icon style for sidebars
  * Style hover/active undecorated buttons same as normal
  * Handle toolbar CSS class
  * Style item menubar nodes (#328)</changelog>
</package>
<package pkgid="5bffc5b473bfaaaa2a3712424c7e121bea8bdff55cdd01f95925b2eb6edb612c" name="gtk3-metatheme-greybird-geeko" arch="noarch">
  <version epoch="0" ver="3.23.4+git0.c1d46c3" rel="bp156.3.3.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560859200">- Added license gpl-3.0-or-later for metacity theme
- Fixed _service file to follow naming guidelines ("+" replaced "~")</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1561118400">- Update to version 3.22.10.1+git5.316475b:
  * Tweak dark colors
  * Added theme-preview</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1562587200">- Update to version 3.22.10.1+git33.0c9d808:
  * Theme is now split in Light and Dark variants
  * Added xfwm dark theme
  * Improved xfwm inactive buttons contrast
  * Meson port
  * Update README.md to reflect meson
  * Remove unused themes
- Updated and optimized spec file to build with meson</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1563278400">- Update to version 3.22.10.1+git38.1a7574f:
  * Merge bright into lights notification theme, and drop darks bright theme
  * Install bright notification files to proper places
  * Add flags for flatpak usage</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1563364800">- Update to version 3.22.10.1+git39.ffde076:
  * Work around Meson bug that prevents Leap from building</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1576929600">- Update to version 3.22.10.1+git48.35f7cb8:
  * Make use of symlinks
  * Add single-user installation instructions
  * Added xfwm4 dark accessibility theme
  * Update to upstream master</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1582891200">- Update to version 3.22.10.1+git50.4465523:
  * Sync with Greybird upstream</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1582891201">- Update to version 3.22.10.1+git52.ef9302a:
  * Use correct theme path for notifyd</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1596456000">- Update to version v3.22.11+git1.968e3b5:
  * Improve contrast of gtk2 selection background color</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1596974400">- fix version number</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1606564800">- Update to version 3.22.11+git2.751e0f3:
  * Rebase parts of the %linked code</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1608292800">- Update to version 3.22.11+git10.2f4304a:
  * Reduce messagedialog buttonbox size
  * Make CSD titlebars slimmer
  * Improve dark xfwm4 tabwin contrast
  * More normal-sized inline-toolbar buttons
  * Add workaround for Gnome Builder
  * Fix progressbar in unfocused windows</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1656331200">- Update to version 3.23.1+git0.a96e825:
  * Sync with Greybird 3.23.1
  * Add initial support for Gtk4 and libhandy
  * Fix dark xfwm4-a11y install path
  * Fix xfwm4-a11y and xfwm4-compact install path
  * Fix: GtkLabel: Backdropped selection color adjusted
  * Fix: Backdropped selection: GtkListBoxes weren't grey
  * Hotfix: removed background color for non-bg items
  * Gtk3: Adjusted selected backdrop fg/bg colors: shades of grey.
  * Changes the xfwm4 border colors
  * build: refactor meson
  * Correct gradients for horizontal scrollbars
  * Reduce messagedialog buttonbox size
  * Make CSD titlebars slimmer
  * Correct gradients for horizontal scrollbars (shimmerproject/Greybird#288)
  * Greybird-Dark titlebar decorations now match their CSD counterparts (shimmerproject/Greybird#301)
  * Background selection colors are now grey instead of blue for better readability
  * Add initial support for Gtk4 and libhandy
  * Install index.theme</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1656331201">- Update to version 3.23.1+git1.77c0887:
  * Cleanup leftovers and correct emerald file mistakinly being renamed</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1656417600">- Prevent Unity desktop theme from being installed
  Added disable-unity_v3.23.1.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1673697600">- Make "*:link:selected" optional to work around too old gtk4 libs
  on Leap 15.4; add link-selected-is-optional.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1676980800">- Make "*:link:selected" optional to work around too old gtk4 libs
  on Leap 15.5, too.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734523200">- Add new patch
  git7e4507d7713b2aaf41f8cfef2a1a9e214a4d8b6f-fix-label-styles-for-xfdesktop-4.19.patch
- Refresh link-selected-is-optional.patch</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1734609600">- Update to version 3.23.4+git0.c1d46c3:
  * Sync with Greybird up to commit 7e4507d7713b2aaf41f8cfef2a1a9e214a4d8b6f
  * Fix label styles for xfdesktop 4.19
  * Stop forcing icon style for sidebars
  * Style hover/active undecorated buttons same as normal
  * Handle toolbar CSS class
  * Style item menubar nodes
  * xfwm4: Fix "Hide frame when maximized" ignoring top frame
  * xfwm4: Improve tabwin contrast
  * xfwm4: Bump tabwin preview to 128px
  * xfwm4: Remove dark line below titlebar
  * Decrease Gnome Software's headerbar height
- Patches removed as no longer needed:
  * git7e4507d7713b2aaf41f8cfef2a1a9e214a4d8b6f-fix-label-styles-for-xfdesktop-4.19.patch</changelog>
</package>
<package pkgid="b0d8c7483f7da5f38db1b94a0ec67cee64e18333eecb4769aaf0c41e6f053aad" name="gtk4-metatheme-greybird" arch="noarch">
  <version epoch="0" ver="3.23.4+git0.7e4507d" rel="bp156.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to the current release 3.22.0</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482753600">- clarify rubygem-sass BuildRequires version</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1506081600">- updated to current release 3.22.5
- added gnome-shell.css to package</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Remove bias from description.
- Update homepage URL. Remove idempotent %if..%endif guards.</changelog>
  <changelog author="cornelis@solcon.nl" date="1519473600">- Update to 3.22.6:
  * Improvements for Thunar-gtk3
  * Improvements for xfce4-panel 4.13
  * Implement Chrome/ium Gtk3 style
  * Include dark version of gnome app theming
  * Tweak lightdm-gtk-greeter's restart button"
  * Bugfixes
- Remove gtk3-engine-unico requirement, has not been needed for some
  time</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1542456000">- Update to 3.22.9:
  * Support for Xfwm4 4.13
  * Improve contrast in Xfwm4's alt-tab dialog (both 4.12 and 4.13)
  * Switch from ruby-sass to sassc
  * Fix height thunar's pathbar entry widget
  * Use correct colors for GtkNotebook
  * Fix Chromium's titlebar buttons
  * Make the Gtk3 xfce4-panel 80% transparent again
  * Improve hidpi support in CSD (gh#shimmerproject/greybird#100)
  * Fix Gtk2 radiobuttons (gh#shimmerproject/greybird#219)
  * Drop superfluous assets
  * Make radio and checkitems more consistent between Gtk2 and Gtk3
  * Improve lightdm-gtk-greeter theming
  * Include Gtk3 window decorations
  * Improve backdrop style of several widgets
- BuildRequires: remove ruby-sass and add  sassc</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1550491200">- Update to 3.22.10:
  * Improve the print dialog's style (gh#shimmerproject/Greybird#238)
  * Fix glitch in Xfdesktop 4.13 rubberband (gh#shimmerproject/Greybird#234)
  * Apply Xfce Panel Tasklist margin intelligently (gh#shimmerproject/Greybird#240)
  * Make Xfce Panel's Tasklist button's padding consistent
  * Handle carets in entry widgets in Xfce panel plugins (gh#shimmerproject/Greybird#241)
  * Fix xfce4-terminal's tab borders again (gh#shimmerproject/Greybird#184)
  * Re-apply Xfwm4 tabwin sizing improvement (gh#shimmerproject/Greybird#224)
  - Dropped obsolete macros and added minor improvements</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1556107200">- Update to version 3.22.10~git2.799485d:
  * Make error and warning entry text more readable
  * Also set backdrop color for print dialog
    (Fixes gh#shimmerproject/Greybird#243)
  * Re-apply xfwm4 tabwin sizing improvement
    (Issue gh#shimmerproject/Greybird#224)
- Switched sources to git master branch
- Spec file: switched to %autosetup for simplicity</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557489600">- Update to version 3.22.10~git3.c0b8881:
  * Improve button sizing
  * Make error and warning entry text more readable
  * Also set backdrop color for print dialog
    (Fixes gh#shimmerproject/Greybird#243)</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1571918400">- Update to version 3.22.10~git8.99f40ce:
  * Add minimal size to header bar button's label
  * Revert "Fix size of linked button with images in header bar"
  * xfdesktop: Highlight selected icons
  * Fix size of linked button with images in header bar
  * xfce4-panel: Add drop-target style
  * Improve button sizing
  * Make error and warning entry text more readable
  * Also set backdrop color for print dialog (Fixes #243)
  * Re-apply xfwm4 tabwin sizing improvement (Issue #224)
  * Improve the print dialog's style (Fixes #238)</changelog>
  <changelog author="tux93@opensuse.org" date="1572868800">- Update to version 3.22.10+git14.e467f4b:
  * Add single-user installation instructions
  * Fix notification theme paths
  * Include meson as dependency in README.md
  * various small fixes
  * Buildsystem ported to meson and added dark theme</changelog>
  <changelog author="tux93@opensuse.org" date="1573041600">- Update to version 3.22.10+git15.acede86:
  * Make use of symlinks cleanup unused files</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1573905600">- Update to version 3.22.10+git17.4d806cd:
  * Fixed xfwm4-a11y dark buttons padding and window borders
  * Added xfwm4 Greybird-accessibility-dark</changelog>
  <changelog author="tux93@opensuse.org" date="1582372800">- Update to version 3.22.11+git4.320a703:
  * Sync dark theme with light theme and use symlink
  * Rebase partly on Adwaita 3.24
  * Messagedialog: Reduce buttonbox button height
  * notifyd: Tweak the theme's appearance (button hover)
  * Hide i/o on GtkSwitches</changelog>
  <changelog author="tux93@opensuse.org" date="1606564800">- Update to version 3.22.12+git4.454f139:
  * Rebase parts of the %linked code (Fixes #265)
  * Fix Thunar CSD when not focused (Fixes #274)
  * Fix GTK3 dark colors</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1608379200">- Update to version 3.22.13+git2.ede9f55:
  * Reduce messagedialog buttonbox size
  * Make CSD titlebars slimmer
  * Improve dark xfwm4 tabwin contrast
  * Improve contrast of dark entry (Fixes #263)
  * More normal-sized inline-toolbar buttons
  * Add workaround for Gnome Builder (Fixes #264)
  * Fix progressbar in unfocused windows (Fixes #284)</changelog>
  <changelog author="maurizio.galli@suse.com" date="1673870400">- Update to version 3.23.2+git0.25f312f:
  * Fixes "Hide frame when maximized" ignoring top frame
  * xfwm4: Also bump tabwin preview size to 128px
  * xfwm4: Improve tabwin contrast
  * Bump xfwm4 tabwin preview to 128px (Fixes #324)
  * Remove dark line below Xfwm4 titlebar introduced by recent change.
  * Add openbox support
  * Decrease Gnome Software's headerbar height
  * Fix installation of a11y and compact themes (Fixes #316) (#318)
  * Install Greybird/index.theme (#317)
  * Add initial support for Gtk4 and libhandy
  * Fix dark xfwm4-a11y install path (Issue #307)
  * Fix xfwm4-a11y and xfwm4-compact install path (Issue #307)
  * Removed unnecessary newline
  * Removed trailing whitespaces
  * Moved `@extends` to the top of the rule
  * Fix: GtkLabel: `Backdrop`ped selection color adjusted.
  * Fix: Backdropped selection: `GtkListBox`es weren't grey
  * Hotfix: removed background color for non-bg items
  * Gtk3: Adjusted selected backdrop fg/bg colors: shades of grey.
  * Changes the xfwm4 border colors
  * build: refactor meson
  * Correct gradients for horizontal scrollbars
- Make "*:link:selected" optional to work around too old gtk4 libs
  Leap 15.4; add link-selected-is-optional.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1676980800">- Make "*:link:selected" optional to work around too old gtk4 libs
  on Leap 15.5, too.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734436800">- Update to version 3.23.4+git0.7e4507d:
  * Fix label styles for xfdesktop 4.19 (#338)
  * Stop forcing icon style for sidebars
  * Style hover/active undecorated buttons same as normal
  * Handle toolbar CSS class
  * Style item menubar nodes (#328)</changelog>
</package>
<package pkgid="5283c753dcaa545f66184939b2d50b078fdc8a9c3097acfe80b1785fc80ad24e" name="gtk4-metatheme-greybird-geeko" arch="noarch">
  <version epoch="0" ver="3.23.4+git0.c1d46c3" rel="bp156.3.3.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560859200">- Added license gpl-3.0-or-later for metacity theme
- Fixed _service file to follow naming guidelines ("+" replaced "~")</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1561118400">- Update to version 3.22.10.1+git5.316475b:
  * Tweak dark colors
  * Added theme-preview</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1562587200">- Update to version 3.22.10.1+git33.0c9d808:
  * Theme is now split in Light and Dark variants
  * Added xfwm dark theme
  * Improved xfwm inactive buttons contrast
  * Meson port
  * Update README.md to reflect meson
  * Remove unused themes
- Updated and optimized spec file to build with meson</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1563278400">- Update to version 3.22.10.1+git38.1a7574f:
  * Merge bright into lights notification theme, and drop darks bright theme
  * Install bright notification files to proper places
  * Add flags for flatpak usage</changelog>
  <changelog author="Carson Black &lt;uhhadd@gmail.com&gt;" date="1563364800">- Update to version 3.22.10.1+git39.ffde076:
  * Work around Meson bug that prevents Leap from building</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1576929600">- Update to version 3.22.10.1+git48.35f7cb8:
  * Make use of symlinks
  * Add single-user installation instructions
  * Added xfwm4 dark accessibility theme
  * Update to upstream master</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1582891200">- Update to version 3.22.10.1+git50.4465523:
  * Sync with Greybird upstream</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1582891201">- Update to version 3.22.10.1+git52.ef9302a:
  * Use correct theme path for notifyd</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1596456000">- Update to version v3.22.11+git1.968e3b5:
  * Improve contrast of gtk2 selection background color</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1596974400">- fix version number</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1606564800">- Update to version 3.22.11+git2.751e0f3:
  * Rebase parts of the %linked code</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1608292800">- Update to version 3.22.11+git10.2f4304a:
  * Reduce messagedialog buttonbox size
  * Make CSD titlebars slimmer
  * Improve dark xfwm4 tabwin contrast
  * More normal-sized inline-toolbar buttons
  * Add workaround for Gnome Builder
  * Fix progressbar in unfocused windows</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1656331200">- Update to version 3.23.1+git0.a96e825:
  * Sync with Greybird 3.23.1
  * Add initial support for Gtk4 and libhandy
  * Fix dark xfwm4-a11y install path
  * Fix xfwm4-a11y and xfwm4-compact install path
  * Fix: GtkLabel: Backdropped selection color adjusted
  * Fix: Backdropped selection: GtkListBoxes weren't grey
  * Hotfix: removed background color for non-bg items
  * Gtk3: Adjusted selected backdrop fg/bg colors: shades of grey.
  * Changes the xfwm4 border colors
  * build: refactor meson
  * Correct gradients for horizontal scrollbars
  * Reduce messagedialog buttonbox size
  * Make CSD titlebars slimmer
  * Correct gradients for horizontal scrollbars (shimmerproject/Greybird#288)
  * Greybird-Dark titlebar decorations now match their CSD counterparts (shimmerproject/Greybird#301)
  * Background selection colors are now grey instead of blue for better readability
  * Add initial support for Gtk4 and libhandy
  * Install index.theme</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1656331201">- Update to version 3.23.1+git1.77c0887:
  * Cleanup leftovers and correct emerald file mistakinly being renamed</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1656417600">- Prevent Unity desktop theme from being installed
  Added disable-unity_v3.23.1.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1673697600">- Make "*:link:selected" optional to work around too old gtk4 libs
  on Leap 15.4; add link-selected-is-optional.patch</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1676980800">- Make "*:link:selected" optional to work around too old gtk4 libs
  on Leap 15.5, too.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734523200">- Add new patch
  git7e4507d7713b2aaf41f8cfef2a1a9e214a4d8b6f-fix-label-styles-for-xfdesktop-4.19.patch
- Refresh link-selected-is-optional.patch</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1734609600">- Update to version 3.23.4+git0.c1d46c3:
  * Sync with Greybird up to commit 7e4507d7713b2aaf41f8cfef2a1a9e214a4d8b6f
  * Fix label styles for xfdesktop 4.19
  * Stop forcing icon style for sidebars
  * Style hover/active undecorated buttons same as normal
  * Handle toolbar CSS class
  * Style item menubar nodes
  * xfwm4: Fix "Hide frame when maximized" ignoring top frame
  * xfwm4: Improve tabwin contrast
  * xfwm4: Bump tabwin preview to 128px
  * xfwm4: Remove dark line below titlebar
  * Decrease Gnome Software's headerbar height
- Patches removed as no longer needed:
  * git7e4507d7713b2aaf41f8cfef2a1a9e214a4d8b6f-fix-label-styles-for-xfdesktop-4.19.patch</changelog>
</package>
<package pkgid="05cf9f62d0f417858799d77bdc90f849a55252d271d1415c24d19ab240a05dec" name="gtkhash" arch="aarch64">
  <version epoch="0" ver="1.5" rel="bp156.4.3.1"/>
  <changelog author="lazy.kent@opensuse.org" date="1455364800">- Initial package created - 0.7.0.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 1.0
- build with gtk3
- do not run autoconf
- package appdata stuff
- verbose build to allow rpmlint checks to work</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667201">- only enable gcrypt on distributions that have new enough packages</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482753600">- 13.2 also has too old gcrypt</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1523361600">- Update to 1.1.1.
  * Fixed bug in loading user preferences.
- Changes in 1.1.
  * Removed internal BLAKE2 code and added option to use libb2
    instead.
  * Removed PolarSSL support (replaced by mbed TLS).
- Changes in 1.0.1.
  * Fixed crash when certain Linux kernel crypto modules aren't
    loaded.
  * Fixed plugin crash when viewing file properties in Thunar.
  * Other bug fixes.
- Correct the source URL.
- Remove the gtkhash.svg icon (included in tarball).
- Remove BuildRequires: pkgconfig(libcrypto) (no need).
- Correct the list of supported hash functions in description.
- Disable BLAKE2 function (nothing provides libb2).
- Use the original desktop file.</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1535889600">- add specfile hack to fix build with thunarx-3</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1546776000">- Update to 1.2.
  * Added compatibility for Thunar 1.7.
- Remove hack and use the "--with-thunarx=3" configure option for
  Leap 15 and newer.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1633608000">- Update to 1.4
  * Fixed crash when program is closed (gh#tristanheaven/gtkhash#47)
  * Added vertical scrolling to File/Text view
    (gh#tristanheaven/gtkhash#35)
  * Added clipboard paste button to Check input
  * Added Windows compatibility
  * Removed support for GTK 2
  * Added CRC32C
  * Replaced the word "Digest" with "Checksum" in some places
    (gh#tristanheaven/gtkhash#40)
  * Added a separate hash button for each function
    (gh#tristanheaven/gtkhash#50)
  * Added preference to show/hide HMAC feature
  * Fixed translations not showing on Windows and Snap package
  * Reduced Windows install size</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1664193600">- Update to 1.5
  * Added xxHash XXH64
  * Added HMAC-BLAKE2s and HMAC-BLAKE2b (gh#tristanheaven/gtkhash#86)
  * Made hashing start automatically in file manager extensions
    (gh#tristanheaven/gtkhash#103)
  * Added Meson build system (gh#tristanheaven/gtkhash#116,
    gh#tristanheaven/gtkhash#140)
  * Removed dependency on intltool
  * Removed Peony extension as Peony 2+ is incompatible</changelog>
</package>
<package pkgid="0212ec13f673d915f129f1e0c900b073d0fa2c9c5dee104282511551ee7a8b4c" name="gtkhash" arch="i586">
  <version epoch="0" ver="1.5" rel="bp156.4.3.1"/>
  <changelog author="lazy.kent@opensuse.org" date="1455364800">- Initial package created - 0.7.0.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 1.0
- build with gtk3
- do not run autoconf
- package appdata stuff
- verbose build to allow rpmlint checks to work</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667201">- only enable gcrypt on distributions that have new enough packages</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482753600">- 13.2 also has too old gcrypt</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1523361600">- Update to 1.1.1.
  * Fixed bug in loading user preferences.
- Changes in 1.1.
  * Removed internal BLAKE2 code and added option to use libb2
    instead.
  * Removed PolarSSL support (replaced by mbed TLS).
- Changes in 1.0.1.
  * Fixed crash when certain Linux kernel crypto modules aren't
    loaded.
  * Fixed plugin crash when viewing file properties in Thunar.
  * Other bug fixes.
- Correct the source URL.
- Remove the gtkhash.svg icon (included in tarball).
- Remove BuildRequires: pkgconfig(libcrypto) (no need).
- Correct the list of supported hash functions in description.
- Disable BLAKE2 function (nothing provides libb2).
- Use the original desktop file.</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1535889600">- add specfile hack to fix build with thunarx-3</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1546776000">- Update to 1.2.
  * Added compatibility for Thunar 1.7.
- Remove hack and use the "--with-thunarx=3" configure option for
  Leap 15 and newer.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1633608000">- Update to 1.4
  * Fixed crash when program is closed (gh#tristanheaven/gtkhash#47)
  * Added vertical scrolling to File/Text view
    (gh#tristanheaven/gtkhash#35)
  * Added clipboard paste button to Check input
  * Added Windows compatibility
  * Removed support for GTK 2
  * Added CRC32C
  * Replaced the word "Digest" with "Checksum" in some places
    (gh#tristanheaven/gtkhash#40)
  * Added a separate hash button for each function
    (gh#tristanheaven/gtkhash#50)
  * Added preference to show/hide HMAC feature
  * Fixed translations not showing on Windows and Snap package
  * Reduced Windows install size</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1664193600">- Update to 1.5
  * Added xxHash XXH64
  * Added HMAC-BLAKE2s and HMAC-BLAKE2b (gh#tristanheaven/gtkhash#86)
  * Made hashing start automatically in file manager extensions
    (gh#tristanheaven/gtkhash#103)
  * Added Meson build system (gh#tristanheaven/gtkhash#116,
    gh#tristanheaven/gtkhash#140)
  * Removed dependency on intltool
  * Removed Peony extension as Peony 2+ is incompatible</changelog>
</package>
<package pkgid="7c804f5109fa66f2b1937e3d20e18ad48abc5f4d2cab9b8197f98055ae1ee3ec" name="gtkhash" arch="ppc64le">
  <version epoch="0" ver="1.5" rel="bp156.4.3.1"/>
  <changelog author="lazy.kent@opensuse.org" date="1455364800">- Initial package created - 0.7.0.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 1.0
- build with gtk3
- do not run autoconf
- package appdata stuff
- verbose build to allow rpmlint checks to work</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667201">- only enable gcrypt on distributions that have new enough packages</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482753600">- 13.2 also has too old gcrypt</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1523361600">- Update to 1.1.1.
  * Fixed bug in loading user preferences.
- Changes in 1.1.
  * Removed internal BLAKE2 code and added option to use libb2
    instead.
  * Removed PolarSSL support (replaced by mbed TLS).
- Changes in 1.0.1.
  * Fixed crash when certain Linux kernel crypto modules aren't
    loaded.
  * Fixed plugin crash when viewing file properties in Thunar.
  * Other bug fixes.
- Correct the source URL.
- Remove the gtkhash.svg icon (included in tarball).
- Remove BuildRequires: pkgconfig(libcrypto) (no need).
- Correct the list of supported hash functions in description.
- Disable BLAKE2 function (nothing provides libb2).
- Use the original desktop file.</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1535889600">- add specfile hack to fix build with thunarx-3</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1546776000">- Update to 1.2.
  * Added compatibility for Thunar 1.7.
- Remove hack and use the "--with-thunarx=3" configure option for
  Leap 15 and newer.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1633608000">- Update to 1.4
  * Fixed crash when program is closed (gh#tristanheaven/gtkhash#47)
  * Added vertical scrolling to File/Text view
    (gh#tristanheaven/gtkhash#35)
  * Added clipboard paste button to Check input
  * Added Windows compatibility
  * Removed support for GTK 2
  * Added CRC32C
  * Replaced the word "Digest" with "Checksum" in some places
    (gh#tristanheaven/gtkhash#40)
  * Added a separate hash button for each function
    (gh#tristanheaven/gtkhash#50)
  * Added preference to show/hide HMAC feature
  * Fixed translations not showing on Windows and Snap package
  * Reduced Windows install size</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1664193600">- Update to 1.5
  * Added xxHash XXH64
  * Added HMAC-BLAKE2s and HMAC-BLAKE2b (gh#tristanheaven/gtkhash#86)
  * Made hashing start automatically in file manager extensions
    (gh#tristanheaven/gtkhash#103)
  * Added Meson build system (gh#tristanheaven/gtkhash#116,
    gh#tristanheaven/gtkhash#140)
  * Removed dependency on intltool
  * Removed Peony extension as Peony 2+ is incompatible</changelog>
</package>
<package pkgid="d8c55a0959535cfd68551a9ef8ceb2bba446e79769d3af9a287440b94ccde9cd" name="gtkhash" arch="s390x">
  <version epoch="0" ver="1.5" rel="bp156.4.3.1"/>
  <changelog author="lazy.kent@opensuse.org" date="1455364800">- Initial package created - 0.7.0.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 1.0
- build with gtk3
- do not run autoconf
- package appdata stuff
- verbose build to allow rpmlint checks to work</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667201">- only enable gcrypt on distributions that have new enough packages</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482753600">- 13.2 also has too old gcrypt</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1523361600">- Update to 1.1.1.
  * Fixed bug in loading user preferences.
- Changes in 1.1.
  * Removed internal BLAKE2 code and added option to use libb2
    instead.
  * Removed PolarSSL support (replaced by mbed TLS).
- Changes in 1.0.1.
  * Fixed crash when certain Linux kernel crypto modules aren't
    loaded.
  * Fixed plugin crash when viewing file properties in Thunar.
  * Other bug fixes.
- Correct the source URL.
- Remove the gtkhash.svg icon (included in tarball).
- Remove BuildRequires: pkgconfig(libcrypto) (no need).
- Correct the list of supported hash functions in description.
- Disable BLAKE2 function (nothing provides libb2).
- Use the original desktop file.</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1535889600">- add specfile hack to fix build with thunarx-3</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1546776000">- Update to 1.2.
  * Added compatibility for Thunar 1.7.
- Remove hack and use the "--with-thunarx=3" configure option for
  Leap 15 and newer.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1633608000">- Update to 1.4
  * Fixed crash when program is closed (gh#tristanheaven/gtkhash#47)
  * Added vertical scrolling to File/Text view
    (gh#tristanheaven/gtkhash#35)
  * Added clipboard paste button to Check input
  * Added Windows compatibility
  * Removed support for GTK 2
  * Added CRC32C
  * Replaced the word "Digest" with "Checksum" in some places
    (gh#tristanheaven/gtkhash#40)
  * Added a separate hash button for each function
    (gh#tristanheaven/gtkhash#50)
  * Added preference to show/hide HMAC feature
  * Fixed translations not showing on Windows and Snap package
  * Reduced Windows install size</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1664193600">- Update to 1.5
  * Added xxHash XXH64
  * Added HMAC-BLAKE2s and HMAC-BLAKE2b (gh#tristanheaven/gtkhash#86)
  * Made hashing start automatically in file manager extensions
    (gh#tristanheaven/gtkhash#103)
  * Added Meson build system (gh#tristanheaven/gtkhash#116,
    gh#tristanheaven/gtkhash#140)
  * Removed dependency on intltool
  * Removed Peony extension as Peony 2+ is incompatible</changelog>
</package>
<package pkgid="6cf9e5741e99174357138051b990ac408933b7344e4d11c22300075f15b0ebe8" name="gtkhash" arch="src">
  <version epoch="0" ver="1.5" rel="bp156.4.3.1"/>
  <changelog author="lazy.kent@opensuse.org" date="1455364800">- Initial package created - 0.7.0.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 1.0
- build with gtk3
- do not run autoconf
- package appdata stuff
- verbose build to allow rpmlint checks to work</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667201">- only enable gcrypt on distributions that have new enough packages</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482753600">- 13.2 also has too old gcrypt</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1523361600">- Update to 1.1.1.
  * Fixed bug in loading user preferences.
- Changes in 1.1.
  * Removed internal BLAKE2 code and added option to use libb2
    instead.
  * Removed PolarSSL support (replaced by mbed TLS).
- Changes in 1.0.1.
  * Fixed crash when certain Linux kernel crypto modules aren't
    loaded.
  * Fixed plugin crash when viewing file properties in Thunar.
  * Other bug fixes.
- Correct the source URL.
- Remove the gtkhash.svg icon (included in tarball).
- Remove BuildRequires: pkgconfig(libcrypto) (no need).
- Correct the list of supported hash functions in description.
- Disable BLAKE2 function (nothing provides libb2).
- Use the original desktop file.</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1535889600">- add specfile hack to fix build with thunarx-3</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1546776000">- Update to 1.2.
  * Added compatibility for Thunar 1.7.
- Remove hack and use the "--with-thunarx=3" configure option for
  Leap 15 and newer.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1633608000">- Update to 1.4
  * Fixed crash when program is closed (gh#tristanheaven/gtkhash#47)
  * Added vertical scrolling to File/Text view
    (gh#tristanheaven/gtkhash#35)
  * Added clipboard paste button to Check input
  * Added Windows compatibility
  * Removed support for GTK 2
  * Added CRC32C
  * Replaced the word "Digest" with "Checksum" in some places
    (gh#tristanheaven/gtkhash#40)
  * Added a separate hash button for each function
    (gh#tristanheaven/gtkhash#50)
  * Added preference to show/hide HMAC feature
  * Fixed translations not showing on Windows and Snap package
  * Reduced Windows install size</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1664193600">- Update to 1.5
  * Added xxHash XXH64
  * Added HMAC-BLAKE2s and HMAC-BLAKE2b (gh#tristanheaven/gtkhash#86)
  * Made hashing start automatically in file manager extensions
    (gh#tristanheaven/gtkhash#103)
  * Added Meson build system (gh#tristanheaven/gtkhash#116,
    gh#tristanheaven/gtkhash#140)
  * Removed dependency on intltool
  * Removed Peony extension as Peony 2+ is incompatible</changelog>
</package>
<package pkgid="7083c857e70ac0e5caced3adccaf5ecee24e0db59dab5fd3760126997c1cb2ae" name="gtkhash" arch="x86_64">
  <version epoch="0" ver="1.5" rel="bp156.4.3.1"/>
  <changelog author="lazy.kent@opensuse.org" date="1455364800">- Initial package created - 0.7.0.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 1.0
- build with gtk3
- do not run autoconf
- package appdata stuff
- verbose build to allow rpmlint checks to work</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667201">- only enable gcrypt on distributions that have new enough packages</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482753600">- 13.2 also has too old gcrypt</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1523361600">- Update to 1.1.1.
  * Fixed bug in loading user preferences.
- Changes in 1.1.
  * Removed internal BLAKE2 code and added option to use libb2
    instead.
  * Removed PolarSSL support (replaced by mbed TLS).
- Changes in 1.0.1.
  * Fixed crash when certain Linux kernel crypto modules aren't
    loaded.
  * Fixed plugin crash when viewing file properties in Thunar.
  * Other bug fixes.
- Correct the source URL.
- Remove the gtkhash.svg icon (included in tarball).
- Remove BuildRequires: pkgconfig(libcrypto) (no need).
- Correct the list of supported hash functions in description.
- Disable BLAKE2 function (nothing provides libb2).
- Use the original desktop file.</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1535889600">- add specfile hack to fix build with thunarx-3</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1546776000">- Update to 1.2.
  * Added compatibility for Thunar 1.7.
- Remove hack and use the "--with-thunarx=3" configure option for
  Leap 15 and newer.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1633608000">- Update to 1.4
  * Fixed crash when program is closed (gh#tristanheaven/gtkhash#47)
  * Added vertical scrolling to File/Text view
    (gh#tristanheaven/gtkhash#35)
  * Added clipboard paste button to Check input
  * Added Windows compatibility
  * Removed support for GTK 2
  * Added CRC32C
  * Replaced the word "Digest" with "Checksum" in some places
    (gh#tristanheaven/gtkhash#40)
  * Added a separate hash button for each function
    (gh#tristanheaven/gtkhash#50)
  * Added preference to show/hide HMAC feature
  * Fixed translations not showing on Windows and Snap package
  * Reduced Windows install size</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1664193600">- Update to 1.5
  * Added xxHash XXH64
  * Added HMAC-BLAKE2s and HMAC-BLAKE2b (gh#tristanheaven/gtkhash#86)
  * Made hashing start automatically in file manager extensions
    (gh#tristanheaven/gtkhash#103)
  * Added Meson build system (gh#tristanheaven/gtkhash#116,
    gh#tristanheaven/gtkhash#140)
  * Removed dependency on intltool
  * Removed Peony extension as Peony 2+ is incompatible</changelog>
</package>
<package pkgid="f21471bccf48004c3e698787106b37cca4f65841b9d5d0f7dc9eb74cae1689a6" name="gtkhash-lang" arch="noarch">
  <version epoch="0" ver="1.5" rel="bp156.4.3.1"/>
  <changelog author="lazy.kent@opensuse.org" date="1455364800">- Initial package created - 0.7.0.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 1.0
- build with gtk3
- do not run autoconf
- package appdata stuff
- verbose build to allow rpmlint checks to work</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667201">- only enable gcrypt on distributions that have new enough packages</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482753600">- 13.2 also has too old gcrypt</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1523361600">- Update to 1.1.1.
  * Fixed bug in loading user preferences.
- Changes in 1.1.
  * Removed internal BLAKE2 code and added option to use libb2
    instead.
  * Removed PolarSSL support (replaced by mbed TLS).
- Changes in 1.0.1.
  * Fixed crash when certain Linux kernel crypto modules aren't
    loaded.
  * Fixed plugin crash when viewing file properties in Thunar.
  * Other bug fixes.
- Correct the source URL.
- Remove the gtkhash.svg icon (included in tarball).
- Remove BuildRequires: pkgconfig(libcrypto) (no need).
- Correct the list of supported hash functions in description.
- Disable BLAKE2 function (nothing provides libb2).
- Use the original desktop file.</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1535889600">- add specfile hack to fix build with thunarx-3</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1546776000">- Update to 1.2.
  * Added compatibility for Thunar 1.7.
- Remove hack and use the "--with-thunarx=3" configure option for
  Leap 15 and newer.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1633608000">- Update to 1.4
  * Fixed crash when program is closed (gh#tristanheaven/gtkhash#47)
  * Added vertical scrolling to File/Text view
    (gh#tristanheaven/gtkhash#35)
  * Added clipboard paste button to Check input
  * Added Windows compatibility
  * Removed support for GTK 2
  * Added CRC32C
  * Replaced the word "Digest" with "Checksum" in some places
    (gh#tristanheaven/gtkhash#40)
  * Added a separate hash button for each function
    (gh#tristanheaven/gtkhash#50)
  * Added preference to show/hide HMAC feature
  * Fixed translations not showing on Windows and Snap package
  * Reduced Windows install size</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1664193600">- Update to 1.5
  * Added xxHash XXH64
  * Added HMAC-BLAKE2s and HMAC-BLAKE2b (gh#tristanheaven/gtkhash#86)
  * Made hashing start automatically in file manager extensions
    (gh#tristanheaven/gtkhash#103)
  * Added Meson build system (gh#tristanheaven/gtkhash#116,
    gh#tristanheaven/gtkhash#140)
  * Removed dependency on intltool
  * Removed Peony extension as Peony 2+ is incompatible</changelog>
</package>
<package pkgid="1507f0b0ee37bf5b7d3313cc959b78e36977b9e5f7bc74f3d5033e3bca263b89" name="gvisor-tap-vsock" arch="aarch64">
  <version epoch="0" ver="0.8.5" rel="bp156.2.3.1"/>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1690459200">- First version of the gvisor-tap-vsock package</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Use .obscpio archive format with obs_scm svc
- Update to version 0.7.0:
  * build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.10
  * build(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0
  * go.mod: gvisor.dev/gvisor v0.0.0-20230715022000-fd277b20b8db
  * go.mod: gvisor.dev/gvisor v0.0.0-20230518002134-99c295d3b367
  * build: Update go version to 1.20
  * Update packit targets
  * build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Remove unnecessary allocations and Write calls.</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1742817600">- Update to version 0.8.5:
  * build(deps): bump golang.org/x/net from 0.33.0 to 0.36.0
  * build(deps): bump golang.org/x/mod from 0.22.0 to 0.24.0
  * build(deps): bump golang.org/x/crypto from 0.32.0 to 0.36.0
  * Fix lit error
  * Upgrade to go '1.23.0'
  * fix vfkit socket disposal
  * Trim 'search' list field on macOS
  * Remove filewatcher package
  * build: Run go mod tidy
  * gvproxy: command: Add AddServiceEndpoint
  * Delete unused files and dependencies.
  * Revert "Replace multiple "resolver.*" fn cals with single "dns.Exchange()" fn."
  * OWNERS: Add Yevhen and Luca as approvers
  * Add make target to enable debugger during test run
  * build(deps): bump github.com/miekg/dns from 1.1.62 to 1.1.63
  * test: upload and download tests against vfkit
  * Use poll based file watcher
  * doc: update doc with new services option
  * Add --services flag to start API without using --listen flag
  * Revert "Update ubuntu runner to 'ubuntu-24.04'"
  * Watch /etc/resolv.conf changes
  * Migrate HostFile to use the common filewatcher utility
  * Extract out filewatcher functionality
  * add back the generic test command and use it on gh workflow
  * add build tag to vfkit test files
  * Allow empty list of nameservers
  * test: Add a test to check an already exposed port cannot be exposed again
  * forwarder: Use distinct type for `proxies` map key
  * Fix `PortsForwarder.Expose()` proxy check
  * Update ubuntu runner to 'ubuntu-24.04'
  * test: add basic tests for vfkit
  * test: move test utils files to the test-utils folder
  * Warn user and keep executing if Event Log Service is stopped
  * build(deps): bump golang.org/x/crypto from 0.31.0 to 0.32.0
  * build(deps): bump github.com/onsi/gomega from 1.36.0 to 1.36.2
  * ghactions: Run `apt update` before installing packages
  * build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0
  * Fix error "-forward-sock" -&gt; "--forward-sock"
  * build(deps): bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * build(deps): bump github.com/onsi/gomega from 1.35.1 to 1.36.0
  * win-sshproxy.tid created before thread id is available
  * build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
  * Avoid crash with empty resolv.conf
  * Use all configured ipv4 dns services
  * build(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0
  * build(deps): bump github.com/coreos/stream-metadata-go
  * build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0
  * build(deps): bump github.com/onsi/gomega from 1.34.2 to 1.35.1
  * Update to gvisor release-20240916.0
  * tcpproxy: remove unused functions
  * tcpproxy: add `nolint:errcheck`
  * go.mod: remove `replace inet.af/tcpproxy =&gt; github.com/inetaf/tcpproxy`
  * Move several log messages to the debug level
  * build(deps): bump github.com/fsnotify/fsnotify from 1.4.9 to 1.7.0
  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0
  * Disable ssh port forwarding when value of -ssh-port is -1
  * Check 'hosts' file records, during handling DNS requests
  * Update to gvisor release-20240826.0
  * Bump gvisor.dev/gvisor to 20240729.0
  * gha: Update go versions
  * packit: Don't attempt to build on f39
  * build(deps): bump github.com/onsi/gomega from 1.34.1 to 1.34.2
  * Fix consistent udp packet loss after the proxy read loop stopped
  * OWNERS: Add Yevhen to 'reviewers'
  * dns: Fix UDP and TCP request handling
  * Replace multiple "resolver.*" fn cals with single "dns.Exchange()" fn.
  * build(deps): bump golang.org/x/crypto from 0.26.0 to 0.27.0
  * Add dependency on "github.com/qdm12/dns/v2"
  * Add 'addLocalAnswers' helper
  * Add DNS server test
  * Add "IdentitiesOnly" SSH option to fix running tests when known_hosts has multiple records
  * build(deps): bump github.com/vishvananda/netlink from 1.2.1 to 1.3.0
  * build(deps): bump github.com/vishvananda/netlink
  * test: Use crc.dev records for DNS tests
  * lint: Fix non-constant format string error
  * deps: Update golangci-lint to v1.60.1
  * gha: Use 'make lint' instead of golangci-lint-action
  * deps: Revert inetaf/tcpproxy commit 2862066
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0
  * build(deps): bump github.com/miekg/dns from 1.1.61 to 1.1.62
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.24.0
  * build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.1
  * ghactions: Automatically create gh releases
  * build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0
  * go.mod: Update go to 1.21
  * go.mod: Update github.com/insomniacslk/dhcp to latest git main
  * Fix OS specific url handling for unix:// scheme in transport
  * test: fix broken dns TXT lookup test
  * handle ENOBUFS when writing to VM socket
  * build(deps): bump github.com/miekg/dns from 1.1.59 to 1.1.61
  * build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0
  * test: Specify path to EFI firmware for aarch64
  * test: Use 'virt' machine type on aarch64
  * test: Pick correct qemu-system-$arch binary
  * test: Make getFCOSDownload less arch-dependent
  * test: Fix expected wikipedia.org TXT record
  * build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0
  * Packit: remove EL8 and enable C10S downstream update
  * ghactions: Use ubuntu runner for tests
  * ghactions: setup-go: Use go version from go.mod
  * test: Always set QEMU machine type and accel
  * test: Rework qemuExecutable
  * ghactions: Don't use pre-release golang 1.22
  * build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.1
  * build(deps): bump github.com/miekg/dns from 1.1.58 to 1.1.59
  * build(deps): bump golangci/golangci-lint-action from 4 to 6
  * build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * README: Clarify that the host HTTP API is not always there
  * build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0
  * build: Build arm64 Windows binaries
  * go.mod: Change inet.af/tcpproxy to github.com/inetaf/tcpproxy
  * build(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0
  * build(deps): bump google.golang.org/protobuf in /tools
  * build(deps): bump golang.org/x/crypto from 0.19.0 to 0.21.0
  * build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  * build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0
  * build(deps): bump golangci/golangci-lint-action from 3 to 4
  * Add DNS '8.8.8.8' server to use in test
  * Fix lint errors
  * build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0
  * OWNERS: Add jakecorrenti to reviewers
  * gh: Fix 'if:' statement to avoid multiple uploads
  * build(deps): bump actions/setup-go from 3 to 5
  * build(deps): bump actions/checkout from 3 to 4
  * build(deps): bump actions/upload-artifact from 3 to 4
  * build(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.1
  * test: Increase `go test` timeout
  * ghactions: Don't upload artifacts multiple times
  * Add log-file to proxy builder
  * ghactions: Fix version generation for ghactions builds
  * Improve versioning from shallow git clones
  * gvproxy: Add more context to errors
  * build(deps): bump github.com/miekg/dns from 1.1.57 to 1.1.58
  * ghactions: Build release artifacts on tag push
  * dependabot: Enable automatic github actions updates
  * Add --log-file to gvproxy
  * ssh: Recreate connection on retries in setupProxy
  * build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0
  * build(deps): bump golang.org/x/crypto from 0.17.0 to 0.18.0
  * ghactions: add Go 1.22rc1
  * go.mod: gvisor.dev/gvisor v0.0.0-20231023213702-2691a8f9b1cf
  * ssh: Add when to setupProxy
  * ssh: Introduce 'retry' helper
  * [CI:BUILD] packit: simplify config after F37 EOL
  * version: Add versioning for github tarballs
  * version: Add moduleVersionFromBuildInfo
  * cmd/*: Add -version flag to executables
  * build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * build: Use ldflags in win-{gvproxy,sshproxy} targets
  * build(deps): bump github.com/coreos/stream-metadata-go
  * build(deps): bump github.com/miekg/dns from 1.1.56 to 1.1.57
  * build(deps): bump github.com/onsi/gomega from 1.28.0 to 1.30.0
  * build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.15.0
  * lint: Stop using dot imports
  * tools: Update golangci-lint to latest version
  * transport: Support passing CID for linux vsock
  * Packit: enable f39 downstream tasks
  * build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0
  * build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
  * build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0
  * build(deps): bump github.com/onsi/gomega from 1.27.10 to 1.28.0
  * Packit: add ppc64le and s390x targets for podman-next copr
  * build(deps): bump github.com/miekg/dns from 1.1.55 to 1.1.56
  * Add graceful shutdown support for gvproxy on Win
  * ghactions: Add comment explaining why we stay on ubuntu-20.04
  * ghactions: Use macos-latest instead of macos-11
  * ghactions: Use `make win-sshproxy`
  * ghactions: build: Add win-gvproxy and win-sshproxy
  * Packit: enable f39 targets
  * rpm: correctly obsolete older rpm builds
  * rpm: gvforwarder subpackage
  * Packit: reuse copr targets for podman-next
  * Rename Command type to GvproxyCommand
  * Fixes the generated commandline for the Command type
  * README: More vfkit updates
  * build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0
  * build: Add freebsd build to make cross
  * transport: Refactor 'Listen' code
  * transport: Only build unixgram on darwin
  * build: Use golangci-lint from tools/
  * tools: go.mod: Switch to golang 1.20
  * tools: Rename go module
  * build: Remove -arm64/-amd64 darwin binaries after makefat
  * build: Build arm64 linux binary
  * ghactions: Build on ubuntu 20.04
  * Fix golangci-lint errors
  * build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0
  * Add `Command` type
  * packit: Build PRs into default packit COPRs
  * build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0
  * gvproxy: add docker.internal dns entries
  * Packit: switch to rpm/gvisor-tap-vsock.spec
  * README.md: Replace hyperkit with vfkit
  * README.md: Fix QEMU spelling</changelog>
</package>
<package pkgid="f2fda592838bfa3f73996a2c97de1da0e32a5b75a3f0545c87c093f765be8c6a" name="gvisor-tap-vsock" arch="i586">
  <version epoch="0" ver="0.8.5" rel="bp156.2.3.1"/>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1690459200">- First version of the gvisor-tap-vsock package</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Use .obscpio archive format with obs_scm svc
- Update to version 0.7.0:
  * build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.10
  * build(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0
  * go.mod: gvisor.dev/gvisor v0.0.0-20230715022000-fd277b20b8db
  * go.mod: gvisor.dev/gvisor v0.0.0-20230518002134-99c295d3b367
  * build: Update go version to 1.20
  * Update packit targets
  * build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Remove unnecessary allocations and Write calls.</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1742817600">- Update to version 0.8.5:
  * build(deps): bump golang.org/x/net from 0.33.0 to 0.36.0
  * build(deps): bump golang.org/x/mod from 0.22.0 to 0.24.0
  * build(deps): bump golang.org/x/crypto from 0.32.0 to 0.36.0
  * Fix lit error
  * Upgrade to go '1.23.0'
  * fix vfkit socket disposal
  * Trim 'search' list field on macOS
  * Remove filewatcher package
  * build: Run go mod tidy
  * gvproxy: command: Add AddServiceEndpoint
  * Delete unused files and dependencies.
  * Revert "Replace multiple "resolver.*" fn cals with single "dns.Exchange()" fn."
  * OWNERS: Add Yevhen and Luca as approvers
  * Add make target to enable debugger during test run
  * build(deps): bump github.com/miekg/dns from 1.1.62 to 1.1.63
  * test: upload and download tests against vfkit
  * Use poll based file watcher
  * doc: update doc with new services option
  * Add --services flag to start API without using --listen flag
  * Revert "Update ubuntu runner to 'ubuntu-24.04'"
  * Watch /etc/resolv.conf changes
  * Migrate HostFile to use the common filewatcher utility
  * Extract out filewatcher functionality
  * add back the generic test command and use it on gh workflow
  * add build tag to vfkit test files
  * Allow empty list of nameservers
  * test: Add a test to check an already exposed port cannot be exposed again
  * forwarder: Use distinct type for `proxies` map key
  * Fix `PortsForwarder.Expose()` proxy check
  * Update ubuntu runner to 'ubuntu-24.04'
  * test: add basic tests for vfkit
  * test: move test utils files to the test-utils folder
  * Warn user and keep executing if Event Log Service is stopped
  * build(deps): bump golang.org/x/crypto from 0.31.0 to 0.32.0
  * build(deps): bump github.com/onsi/gomega from 1.36.0 to 1.36.2
  * ghactions: Run `apt update` before installing packages
  * build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0
  * Fix error "-forward-sock" -&gt; "--forward-sock"
  * build(deps): bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * build(deps): bump github.com/onsi/gomega from 1.35.1 to 1.36.0
  * win-sshproxy.tid created before thread id is available
  * build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
  * Avoid crash with empty resolv.conf
  * Use all configured ipv4 dns services
  * build(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0
  * build(deps): bump github.com/coreos/stream-metadata-go
  * build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0
  * build(deps): bump github.com/onsi/gomega from 1.34.2 to 1.35.1
  * Update to gvisor release-20240916.0
  * tcpproxy: remove unused functions
  * tcpproxy: add `nolint:errcheck`
  * go.mod: remove `replace inet.af/tcpproxy =&gt; github.com/inetaf/tcpproxy`
  * Move several log messages to the debug level
  * build(deps): bump github.com/fsnotify/fsnotify from 1.4.9 to 1.7.0
  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0
  * Disable ssh port forwarding when value of -ssh-port is -1
  * Check 'hosts' file records, during handling DNS requests
  * Update to gvisor release-20240826.0
  * Bump gvisor.dev/gvisor to 20240729.0
  * gha: Update go versions
  * packit: Don't attempt to build on f39
  * build(deps): bump github.com/onsi/gomega from 1.34.1 to 1.34.2
  * Fix consistent udp packet loss after the proxy read loop stopped
  * OWNERS: Add Yevhen to 'reviewers'
  * dns: Fix UDP and TCP request handling
  * Replace multiple "resolver.*" fn cals with single "dns.Exchange()" fn.
  * build(deps): bump golang.org/x/crypto from 0.26.0 to 0.27.0
  * Add dependency on "github.com/qdm12/dns/v2"
  * Add 'addLocalAnswers' helper
  * Add DNS server test
  * Add "IdentitiesOnly" SSH option to fix running tests when known_hosts has multiple records
  * build(deps): bump github.com/vishvananda/netlink from 1.2.1 to 1.3.0
  * build(deps): bump github.com/vishvananda/netlink
  * test: Use crc.dev records for DNS tests
  * lint: Fix non-constant format string error
  * deps: Update golangci-lint to v1.60.1
  * gha: Use 'make lint' instead of golangci-lint-action
  * deps: Revert inetaf/tcpproxy commit 2862066
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0
  * build(deps): bump github.com/miekg/dns from 1.1.61 to 1.1.62
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.24.0
  * build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.1
  * ghactions: Automatically create gh releases
  * build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0
  * go.mod: Update go to 1.21
  * go.mod: Update github.com/insomniacslk/dhcp to latest git main
  * Fix OS specific url handling for unix:// scheme in transport
  * test: fix broken dns TXT lookup test
  * handle ENOBUFS when writing to VM socket
  * build(deps): bump github.com/miekg/dns from 1.1.59 to 1.1.61
  * build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0
  * test: Specify path to EFI firmware for aarch64
  * test: Use 'virt' machine type on aarch64
  * test: Pick correct qemu-system-$arch binary
  * test: Make getFCOSDownload less arch-dependent
  * test: Fix expected wikipedia.org TXT record
  * build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0
  * Packit: remove EL8 and enable C10S downstream update
  * ghactions: Use ubuntu runner for tests
  * ghactions: setup-go: Use go version from go.mod
  * test: Always set QEMU machine type and accel
  * test: Rework qemuExecutable
  * ghactions: Don't use pre-release golang 1.22
  * build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.1
  * build(deps): bump github.com/miekg/dns from 1.1.58 to 1.1.59
  * build(deps): bump golangci/golangci-lint-action from 4 to 6
  * build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * README: Clarify that the host HTTP API is not always there
  * build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0
  * build: Build arm64 Windows binaries
  * go.mod: Change inet.af/tcpproxy to github.com/inetaf/tcpproxy
  * build(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0
  * build(deps): bump google.golang.org/protobuf in /tools
  * build(deps): bump golang.org/x/crypto from 0.19.0 to 0.21.0
  * build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  * build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0
  * build(deps): bump golangci/golangci-lint-action from 3 to 4
  * Add DNS '8.8.8.8' server to use in test
  * Fix lint errors
  * build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0
  * OWNERS: Add jakecorrenti to reviewers
  * gh: Fix 'if:' statement to avoid multiple uploads
  * build(deps): bump actions/setup-go from 3 to 5
  * build(deps): bump actions/checkout from 3 to 4
  * build(deps): bump actions/upload-artifact from 3 to 4
  * build(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.1
  * test: Increase `go test` timeout
  * ghactions: Don't upload artifacts multiple times
  * Add log-file to proxy builder
  * ghactions: Fix version generation for ghactions builds
  * Improve versioning from shallow git clones
  * gvproxy: Add more context to errors
  * build(deps): bump github.com/miekg/dns from 1.1.57 to 1.1.58
  * ghactions: Build release artifacts on tag push
  * dependabot: Enable automatic github actions updates
  * Add --log-file to gvproxy
  * ssh: Recreate connection on retries in setupProxy
  * build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0
  * build(deps): bump golang.org/x/crypto from 0.17.0 to 0.18.0
  * ghactions: add Go 1.22rc1
  * go.mod: gvisor.dev/gvisor v0.0.0-20231023213702-2691a8f9b1cf
  * ssh: Add when to setupProxy
  * ssh: Introduce 'retry' helper
  * [CI:BUILD] packit: simplify config after F37 EOL
  * version: Add versioning for github tarballs
  * version: Add moduleVersionFromBuildInfo
  * cmd/*: Add -version flag to executables
  * build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * build: Use ldflags in win-{gvproxy,sshproxy} targets
  * build(deps): bump github.com/coreos/stream-metadata-go
  * build(deps): bump github.com/miekg/dns from 1.1.56 to 1.1.57
  * build(deps): bump github.com/onsi/gomega from 1.28.0 to 1.30.0
  * build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.15.0
  * lint: Stop using dot imports
  * tools: Update golangci-lint to latest version
  * transport: Support passing CID for linux vsock
  * Packit: enable f39 downstream tasks
  * build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0
  * build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
  * build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0
  * build(deps): bump github.com/onsi/gomega from 1.27.10 to 1.28.0
  * Packit: add ppc64le and s390x targets for podman-next copr
  * build(deps): bump github.com/miekg/dns from 1.1.55 to 1.1.56
  * Add graceful shutdown support for gvproxy on Win
  * ghactions: Add comment explaining why we stay on ubuntu-20.04
  * ghactions: Use macos-latest instead of macos-11
  * ghactions: Use `make win-sshproxy`
  * ghactions: build: Add win-gvproxy and win-sshproxy
  * Packit: enable f39 targets
  * rpm: correctly obsolete older rpm builds
  * rpm: gvforwarder subpackage
  * Packit: reuse copr targets for podman-next
  * Rename Command type to GvproxyCommand
  * Fixes the generated commandline for the Command type
  * README: More vfkit updates
  * build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0
  * build: Add freebsd build to make cross
  * transport: Refactor 'Listen' code
  * transport: Only build unixgram on darwin
  * build: Use golangci-lint from tools/
  * tools: go.mod: Switch to golang 1.20
  * tools: Rename go module
  * build: Remove -arm64/-amd64 darwin binaries after makefat
  * build: Build arm64 linux binary
  * ghactions: Build on ubuntu 20.04
  * Fix golangci-lint errors
  * build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0
  * Add `Command` type
  * packit: Build PRs into default packit COPRs
  * build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0
  * gvproxy: add docker.internal dns entries
  * Packit: switch to rpm/gvisor-tap-vsock.spec
  * README.md: Replace hyperkit with vfkit
  * README.md: Fix QEMU spelling</changelog>
</package>
<package pkgid="2ead5bf4411b6e893092a9c91252273d73ef686b58546a996e09c6425d4f8ebf" name="gvisor-tap-vsock" arch="ppc64le">
  <version epoch="0" ver="0.8.5" rel="bp156.2.3.1"/>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1690459200">- First version of the gvisor-tap-vsock package</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Use .obscpio archive format with obs_scm svc
- Update to version 0.7.0:
  * build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.10
  * build(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0
  * go.mod: gvisor.dev/gvisor v0.0.0-20230715022000-fd277b20b8db
  * go.mod: gvisor.dev/gvisor v0.0.0-20230518002134-99c295d3b367
  * build: Update go version to 1.20
  * Update packit targets
  * build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Remove unnecessary allocations and Write calls.</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1742817600">- Update to version 0.8.5:
  * build(deps): bump golang.org/x/net from 0.33.0 to 0.36.0
  * build(deps): bump golang.org/x/mod from 0.22.0 to 0.24.0
  * build(deps): bump golang.org/x/crypto from 0.32.0 to 0.36.0
  * Fix lit error
  * Upgrade to go '1.23.0'
  * fix vfkit socket disposal
  * Trim 'search' list field on macOS
  * Remove filewatcher package
  * build: Run go mod tidy
  * gvproxy: command: Add AddServiceEndpoint
  * Delete unused files and dependencies.
  * Revert "Replace multiple "resolver.*" fn cals with single "dns.Exchange()" fn."
  * OWNERS: Add Yevhen and Luca as approvers
  * Add make target to enable debugger during test run
  * build(deps): bump github.com/miekg/dns from 1.1.62 to 1.1.63
  * test: upload and download tests against vfkit
  * Use poll based file watcher
  * doc: update doc with new services option
  * Add --services flag to start API without using --listen flag
  * Revert "Update ubuntu runner to 'ubuntu-24.04'"
  * Watch /etc/resolv.conf changes
  * Migrate HostFile to use the common filewatcher utility
  * Extract out filewatcher functionality
  * add back the generic test command and use it on gh workflow
  * add build tag to vfkit test files
  * Allow empty list of nameservers
  * test: Add a test to check an already exposed port cannot be exposed again
  * forwarder: Use distinct type for `proxies` map key
  * Fix `PortsForwarder.Expose()` proxy check
  * Update ubuntu runner to 'ubuntu-24.04'
  * test: add basic tests for vfkit
  * test: move test utils files to the test-utils folder
  * Warn user and keep executing if Event Log Service is stopped
  * build(deps): bump golang.org/x/crypto from 0.31.0 to 0.32.0
  * build(deps): bump github.com/onsi/gomega from 1.36.0 to 1.36.2
  * ghactions: Run `apt update` before installing packages
  * build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0
  * Fix error "-forward-sock" -&gt; "--forward-sock"
  * build(deps): bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * build(deps): bump github.com/onsi/gomega from 1.35.1 to 1.36.0
  * win-sshproxy.tid created before thread id is available
  * build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
  * Avoid crash with empty resolv.conf
  * Use all configured ipv4 dns services
  * build(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0
  * build(deps): bump github.com/coreos/stream-metadata-go
  * build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0
  * build(deps): bump github.com/onsi/gomega from 1.34.2 to 1.35.1
  * Update to gvisor release-20240916.0
  * tcpproxy: remove unused functions
  * tcpproxy: add `nolint:errcheck`
  * go.mod: remove `replace inet.af/tcpproxy =&gt; github.com/inetaf/tcpproxy`
  * Move several log messages to the debug level
  * build(deps): bump github.com/fsnotify/fsnotify from 1.4.9 to 1.7.0
  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0
  * Disable ssh port forwarding when value of -ssh-port is -1
  * Check 'hosts' file records, during handling DNS requests
  * Update to gvisor release-20240826.0
  * Bump gvisor.dev/gvisor to 20240729.0
  * gha: Update go versions
  * packit: Don't attempt to build on f39
  * build(deps): bump github.com/onsi/gomega from 1.34.1 to 1.34.2
  * Fix consistent udp packet loss after the proxy read loop stopped
  * OWNERS: Add Yevhen to 'reviewers'
  * dns: Fix UDP and TCP request handling
  * Replace multiple "resolver.*" fn cals with single "dns.Exchange()" fn.
  * build(deps): bump golang.org/x/crypto from 0.26.0 to 0.27.0
  * Add dependency on "github.com/qdm12/dns/v2"
  * Add 'addLocalAnswers' helper
  * Add DNS server test
  * Add "IdentitiesOnly" SSH option to fix running tests when known_hosts has multiple records
  * build(deps): bump github.com/vishvananda/netlink from 1.2.1 to 1.3.0
  * build(deps): bump github.com/vishvananda/netlink
  * test: Use crc.dev records for DNS tests
  * lint: Fix non-constant format string error
  * deps: Update golangci-lint to v1.60.1
  * gha: Use 'make lint' instead of golangci-lint-action
  * deps: Revert inetaf/tcpproxy commit 2862066
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0
  * build(deps): bump github.com/miekg/dns from 1.1.61 to 1.1.62
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.24.0
  * build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.1
  * ghactions: Automatically create gh releases
  * build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0
  * go.mod: Update go to 1.21
  * go.mod: Update github.com/insomniacslk/dhcp to latest git main
  * Fix OS specific url handling for unix:// scheme in transport
  * test: fix broken dns TXT lookup test
  * handle ENOBUFS when writing to VM socket
  * build(deps): bump github.com/miekg/dns from 1.1.59 to 1.1.61
  * build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0
  * test: Specify path to EFI firmware for aarch64
  * test: Use 'virt' machine type on aarch64
  * test: Pick correct qemu-system-$arch binary
  * test: Make getFCOSDownload less arch-dependent
  * test: Fix expected wikipedia.org TXT record
  * build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0
  * Packit: remove EL8 and enable C10S downstream update
  * ghactions: Use ubuntu runner for tests
  * ghactions: setup-go: Use go version from go.mod
  * test: Always set QEMU machine type and accel
  * test: Rework qemuExecutable
  * ghactions: Don't use pre-release golang 1.22
  * build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.1
  * build(deps): bump github.com/miekg/dns from 1.1.58 to 1.1.59
  * build(deps): bump golangci/golangci-lint-action from 4 to 6
  * build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * README: Clarify that the host HTTP API is not always there
  * build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0
  * build: Build arm64 Windows binaries
  * go.mod: Change inet.af/tcpproxy to github.com/inetaf/tcpproxy
  * build(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0
  * build(deps): bump google.golang.org/protobuf in /tools
  * build(deps): bump golang.org/x/crypto from 0.19.0 to 0.21.0
  * build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  * build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0
  * build(deps): bump golangci/golangci-lint-action from 3 to 4
  * Add DNS '8.8.8.8' server to use in test
  * Fix lint errors
  * build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0
  * OWNERS: Add jakecorrenti to reviewers
  * gh: Fix 'if:' statement to avoid multiple uploads
  * build(deps): bump actions/setup-go from 3 to 5
  * build(deps): bump actions/checkout from 3 to 4
  * build(deps): bump actions/upload-artifact from 3 to 4
  * build(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.1
  * test: Increase `go test` timeout
  * ghactions: Don't upload artifacts multiple times
  * Add log-file to proxy builder
  * ghactions: Fix version generation for ghactions builds
  * Improve versioning from shallow git clones
  * gvproxy: Add more context to errors
  * build(deps): bump github.com/miekg/dns from 1.1.57 to 1.1.58
  * ghactions: Build release artifacts on tag push
  * dependabot: Enable automatic github actions updates
  * Add --log-file to gvproxy
  * ssh: Recreate connection on retries in setupProxy
  * build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0
  * build(deps): bump golang.org/x/crypto from 0.17.0 to 0.18.0
  * ghactions: add Go 1.22rc1
  * go.mod: gvisor.dev/gvisor v0.0.0-20231023213702-2691a8f9b1cf
  * ssh: Add when to setupProxy
  * ssh: Introduce 'retry' helper
  * [CI:BUILD] packit: simplify config after F37 EOL
  * version: Add versioning for github tarballs
  * version: Add moduleVersionFromBuildInfo
  * cmd/*: Add -version flag to executables
  * build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * build: Use ldflags in win-{gvproxy,sshproxy} targets
  * build(deps): bump github.com/coreos/stream-metadata-go
  * build(deps): bump github.com/miekg/dns from 1.1.56 to 1.1.57
  * build(deps): bump github.com/onsi/gomega from 1.28.0 to 1.30.0
  * build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.15.0
  * lint: Stop using dot imports
  * tools: Update golangci-lint to latest version
  * transport: Support passing CID for linux vsock
  * Packit: enable f39 downstream tasks
  * build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0
  * build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
  * build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0
  * build(deps): bump github.com/onsi/gomega from 1.27.10 to 1.28.0
  * Packit: add ppc64le and s390x targets for podman-next copr
  * build(deps): bump github.com/miekg/dns from 1.1.55 to 1.1.56
  * Add graceful shutdown support for gvproxy on Win
  * ghactions: Add comment explaining why we stay on ubuntu-20.04
  * ghactions: Use macos-latest instead of macos-11
  * ghactions: Use `make win-sshproxy`
  * ghactions: build: Add win-gvproxy and win-sshproxy
  * Packit: enable f39 targets
  * rpm: correctly obsolete older rpm builds
  * rpm: gvforwarder subpackage
  * Packit: reuse copr targets for podman-next
  * Rename Command type to GvproxyCommand
  * Fixes the generated commandline for the Command type
  * README: More vfkit updates
  * build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0
  * build: Add freebsd build to make cross
  * transport: Refactor 'Listen' code
  * transport: Only build unixgram on darwin
  * build: Use golangci-lint from tools/
  * tools: go.mod: Switch to golang 1.20
  * tools: Rename go module
  * build: Remove -arm64/-amd64 darwin binaries after makefat
  * build: Build arm64 linux binary
  * ghactions: Build on ubuntu 20.04
  * Fix golangci-lint errors
  * build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0
  * Add `Command` type
  * packit: Build PRs into default packit COPRs
  * build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0
  * gvproxy: add docker.internal dns entries
  * Packit: switch to rpm/gvisor-tap-vsock.spec
  * README.md: Replace hyperkit with vfkit
  * README.md: Fix QEMU spelling</changelog>
</package>
<package pkgid="ff1bfded2ec70f7ac53cc1ab51b0f0051c2a25769a16ca2dd448a3d06c59a4d6" name="gvisor-tap-vsock" arch="s390x">
  <version epoch="0" ver="0.8.5" rel="bp156.2.3.1"/>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1690459200">- First version of the gvisor-tap-vsock package</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Use .obscpio archive format with obs_scm svc
- Update to version 0.7.0:
  * build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.10
  * build(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0
  * go.mod: gvisor.dev/gvisor v0.0.0-20230715022000-fd277b20b8db
  * go.mod: gvisor.dev/gvisor v0.0.0-20230518002134-99c295d3b367
  * build: Update go version to 1.20
  * Update packit targets
  * build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Remove unnecessary allocations and Write calls.</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1742817600">- Update to version 0.8.5:
  * build(deps): bump golang.org/x/net from 0.33.0 to 0.36.0
  * build(deps): bump golang.org/x/mod from 0.22.0 to 0.24.0
  * build(deps): bump golang.org/x/crypto from 0.32.0 to 0.36.0
  * Fix lit error
  * Upgrade to go '1.23.0'
  * fix vfkit socket disposal
  * Trim 'search' list field on macOS
  * Remove filewatcher package
  * build: Run go mod tidy
  * gvproxy: command: Add AddServiceEndpoint
  * Delete unused files and dependencies.
  * Revert "Replace multiple "resolver.*" fn cals with single "dns.Exchange()" fn."
  * OWNERS: Add Yevhen and Luca as approvers
  * Add make target to enable debugger during test run
  * build(deps): bump github.com/miekg/dns from 1.1.62 to 1.1.63
  * test: upload and download tests against vfkit
  * Use poll based file watcher
  * doc: update doc with new services option
  * Add --services flag to start API without using --listen flag
  * Revert "Update ubuntu runner to 'ubuntu-24.04'"
  * Watch /etc/resolv.conf changes
  * Migrate HostFile to use the common filewatcher utility
  * Extract out filewatcher functionality
  * add back the generic test command and use it on gh workflow
  * add build tag to vfkit test files
  * Allow empty list of nameservers
  * test: Add a test to check an already exposed port cannot be exposed again
  * forwarder: Use distinct type for `proxies` map key
  * Fix `PortsForwarder.Expose()` proxy check
  * Update ubuntu runner to 'ubuntu-24.04'
  * test: add basic tests for vfkit
  * test: move test utils files to the test-utils folder
  * Warn user and keep executing if Event Log Service is stopped
  * build(deps): bump golang.org/x/crypto from 0.31.0 to 0.32.0
  * build(deps): bump github.com/onsi/gomega from 1.36.0 to 1.36.2
  * ghactions: Run `apt update` before installing packages
  * build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0
  * Fix error "-forward-sock" -&gt; "--forward-sock"
  * build(deps): bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * build(deps): bump github.com/onsi/gomega from 1.35.1 to 1.36.0
  * win-sshproxy.tid created before thread id is available
  * build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
  * Avoid crash with empty resolv.conf
  * Use all configured ipv4 dns services
  * build(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0
  * build(deps): bump github.com/coreos/stream-metadata-go
  * build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0
  * build(deps): bump github.com/onsi/gomega from 1.34.2 to 1.35.1
  * Update to gvisor release-20240916.0
  * tcpproxy: remove unused functions
  * tcpproxy: add `nolint:errcheck`
  * go.mod: remove `replace inet.af/tcpproxy =&gt; github.com/inetaf/tcpproxy`
  * Move several log messages to the debug level
  * build(deps): bump github.com/fsnotify/fsnotify from 1.4.9 to 1.7.0
  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0
  * Disable ssh port forwarding when value of -ssh-port is -1
  * Check 'hosts' file records, during handling DNS requests
  * Update to gvisor release-20240826.0
  * Bump gvisor.dev/gvisor to 20240729.0
  * gha: Update go versions
  * packit: Don't attempt to build on f39
  * build(deps): bump github.com/onsi/gomega from 1.34.1 to 1.34.2
  * Fix consistent udp packet loss after the proxy read loop stopped
  * OWNERS: Add Yevhen to 'reviewers'
  * dns: Fix UDP and TCP request handling
  * Replace multiple "resolver.*" fn cals with single "dns.Exchange()" fn.
  * build(deps): bump golang.org/x/crypto from 0.26.0 to 0.27.0
  * Add dependency on "github.com/qdm12/dns/v2"
  * Add 'addLocalAnswers' helper
  * Add DNS server test
  * Add "IdentitiesOnly" SSH option to fix running tests when known_hosts has multiple records
  * build(deps): bump github.com/vishvananda/netlink from 1.2.1 to 1.3.0
  * build(deps): bump github.com/vishvananda/netlink
  * test: Use crc.dev records for DNS tests
  * lint: Fix non-constant format string error
  * deps: Update golangci-lint to v1.60.1
  * gha: Use 'make lint' instead of golangci-lint-action
  * deps: Revert inetaf/tcpproxy commit 2862066
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0
  * build(deps): bump github.com/miekg/dns from 1.1.61 to 1.1.62
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.24.0
  * build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.1
  * ghactions: Automatically create gh releases
  * build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0
  * go.mod: Update go to 1.21
  * go.mod: Update github.com/insomniacslk/dhcp to latest git main
  * Fix OS specific url handling for unix:// scheme in transport
  * test: fix broken dns TXT lookup test
  * handle ENOBUFS when writing to VM socket
  * build(deps): bump github.com/miekg/dns from 1.1.59 to 1.1.61
  * build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0
  * test: Specify path to EFI firmware for aarch64
  * test: Use 'virt' machine type on aarch64
  * test: Pick correct qemu-system-$arch binary
  * test: Make getFCOSDownload less arch-dependent
  * test: Fix expected wikipedia.org TXT record
  * build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0
  * Packit: remove EL8 and enable C10S downstream update
  * ghactions: Use ubuntu runner for tests
  * ghactions: setup-go: Use go version from go.mod
  * test: Always set QEMU machine type and accel
  * test: Rework qemuExecutable
  * ghactions: Don't use pre-release golang 1.22
  * build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.1
  * build(deps): bump github.com/miekg/dns from 1.1.58 to 1.1.59
  * build(deps): bump golangci/golangci-lint-action from 4 to 6
  * build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * README: Clarify that the host HTTP API is not always there
  * build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0
  * build: Build arm64 Windows binaries
  * go.mod: Change inet.af/tcpproxy to github.com/inetaf/tcpproxy
  * build(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0
  * build(deps): bump google.golang.org/protobuf in /tools
  * build(deps): bump golang.org/x/crypto from 0.19.0 to 0.21.0
  * build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  * build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0
  * build(deps): bump golangci/golangci-lint-action from 3 to 4
  * Add DNS '8.8.8.8' server to use in test
  * Fix lint errors
  * build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0
  * OWNERS: Add jakecorrenti to reviewers
  * gh: Fix 'if:' statement to avoid multiple uploads
  * build(deps): bump actions/setup-go from 3 to 5
  * build(deps): bump actions/checkout from 3 to 4
  * build(deps): bump actions/upload-artifact from 3 to 4
  * build(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.1
  * test: Increase `go test` timeout
  * ghactions: Don't upload artifacts multiple times
  * Add log-file to proxy builder
  * ghactions: Fix version generation for ghactions builds
  * Improve versioning from shallow git clones
  * gvproxy: Add more context to errors
  * build(deps): bump github.com/miekg/dns from 1.1.57 to 1.1.58
  * ghactions: Build release artifacts on tag push
  * dependabot: Enable automatic github actions updates
  * Add --log-file to gvproxy
  * ssh: Recreate connection on retries in setupProxy
  * build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0
  * build(deps): bump golang.org/x/crypto from 0.17.0 to 0.18.0
  * ghactions: add Go 1.22rc1
  * go.mod: gvisor.dev/gvisor v0.0.0-20231023213702-2691a8f9b1cf
  * ssh: Add when to setupProxy
  * ssh: Introduce 'retry' helper
  * [CI:BUILD] packit: simplify config after F37 EOL
  * version: Add versioning for github tarballs
  * version: Add moduleVersionFromBuildInfo
  * cmd/*: Add -version flag to executables
  * build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * build: Use ldflags in win-{gvproxy,sshproxy} targets
  * build(deps): bump github.com/coreos/stream-metadata-go
  * build(deps): bump github.com/miekg/dns from 1.1.56 to 1.1.57
  * build(deps): bump github.com/onsi/gomega from 1.28.0 to 1.30.0
  * build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.15.0
  * lint: Stop using dot imports
  * tools: Update golangci-lint to latest version
  * transport: Support passing CID for linux vsock
  * Packit: enable f39 downstream tasks
  * build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0
  * build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
  * build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0
  * build(deps): bump github.com/onsi/gomega from 1.27.10 to 1.28.0
  * Packit: add ppc64le and s390x targets for podman-next copr
  * build(deps): bump github.com/miekg/dns from 1.1.55 to 1.1.56
  * Add graceful shutdown support for gvproxy on Win
  * ghactions: Add comment explaining why we stay on ubuntu-20.04
  * ghactions: Use macos-latest instead of macos-11
  * ghactions: Use `make win-sshproxy`
  * ghactions: build: Add win-gvproxy and win-sshproxy
  * Packit: enable f39 targets
  * rpm: correctly obsolete older rpm builds
  * rpm: gvforwarder subpackage
  * Packit: reuse copr targets for podman-next
  * Rename Command type to GvproxyCommand
  * Fixes the generated commandline for the Command type
  * README: More vfkit updates
  * build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0
  * build: Add freebsd build to make cross
  * transport: Refactor 'Listen' code
  * transport: Only build unixgram on darwin
  * build: Use golangci-lint from tools/
  * tools: go.mod: Switch to golang 1.20
  * tools: Rename go module
  * build: Remove -arm64/-amd64 darwin binaries after makefat
  * build: Build arm64 linux binary
  * ghactions: Build on ubuntu 20.04
  * Fix golangci-lint errors
  * build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0
  * Add `Command` type
  * packit: Build PRs into default packit COPRs
  * build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0
  * gvproxy: add docker.internal dns entries
  * Packit: switch to rpm/gvisor-tap-vsock.spec
  * README.md: Replace hyperkit with vfkit
  * README.md: Fix QEMU spelling</changelog>
</package>
<package pkgid="814efb0757c6b7b9186484a252c89239f82b9d33056d338f0fbfde27ee1d3f13" name="gvisor-tap-vsock" arch="src">
  <version epoch="0" ver="0.8.5" rel="bp156.2.3.1"/>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1690459200">- First version of the gvisor-tap-vsock package</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Use .obscpio archive format with obs_scm svc
- Update to version 0.7.0:
  * build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.10
  * build(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0
  * go.mod: gvisor.dev/gvisor v0.0.0-20230715022000-fd277b20b8db
  * go.mod: gvisor.dev/gvisor v0.0.0-20230518002134-99c295d3b367
  * build: Update go version to 1.20
  * Update packit targets
  * build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Remove unnecessary allocations and Write calls.</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1742817600">- Update to version 0.8.5:
  * build(deps): bump golang.org/x/net from 0.33.0 to 0.36.0
  * build(deps): bump golang.org/x/mod from 0.22.0 to 0.24.0
  * build(deps): bump golang.org/x/crypto from 0.32.0 to 0.36.0
  * Fix lit error
  * Upgrade to go '1.23.0'
  * fix vfkit socket disposal
  * Trim 'search' list field on macOS
  * Remove filewatcher package
  * build: Run go mod tidy
  * gvproxy: command: Add AddServiceEndpoint
  * Delete unused files and dependencies.
  * Revert "Replace multiple "resolver.*" fn cals with single "dns.Exchange()" fn."
  * OWNERS: Add Yevhen and Luca as approvers
  * Add make target to enable debugger during test run
  * build(deps): bump github.com/miekg/dns from 1.1.62 to 1.1.63
  * test: upload and download tests against vfkit
  * Use poll based file watcher
  * doc: update doc with new services option
  * Add --services flag to start API without using --listen flag
  * Revert "Update ubuntu runner to 'ubuntu-24.04'"
  * Watch /etc/resolv.conf changes
  * Migrate HostFile to use the common filewatcher utility
  * Extract out filewatcher functionality
  * add back the generic test command and use it on gh workflow
  * add build tag to vfkit test files
  * Allow empty list of nameservers
  * test: Add a test to check an already exposed port cannot be exposed again
  * forwarder: Use distinct type for `proxies` map key
  * Fix `PortsForwarder.Expose()` proxy check
  * Update ubuntu runner to 'ubuntu-24.04'
  * test: add basic tests for vfkit
  * test: move test utils files to the test-utils folder
  * Warn user and keep executing if Event Log Service is stopped
  * build(deps): bump golang.org/x/crypto from 0.31.0 to 0.32.0
  * build(deps): bump github.com/onsi/gomega from 1.36.0 to 1.36.2
  * ghactions: Run `apt update` before installing packages
  * build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0
  * Fix error "-forward-sock" -&gt; "--forward-sock"
  * build(deps): bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * build(deps): bump github.com/onsi/gomega from 1.35.1 to 1.36.0
  * win-sshproxy.tid created before thread id is available
  * build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
  * Avoid crash with empty resolv.conf
  * Use all configured ipv4 dns services
  * build(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0
  * build(deps): bump github.com/coreos/stream-metadata-go
  * build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0
  * build(deps): bump github.com/onsi/gomega from 1.34.2 to 1.35.1
  * Update to gvisor release-20240916.0
  * tcpproxy: remove unused functions
  * tcpproxy: add `nolint:errcheck`
  * go.mod: remove `replace inet.af/tcpproxy =&gt; github.com/inetaf/tcpproxy`
  * Move several log messages to the debug level
  * build(deps): bump github.com/fsnotify/fsnotify from 1.4.9 to 1.7.0
  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0
  * Disable ssh port forwarding when value of -ssh-port is -1
  * Check 'hosts' file records, during handling DNS requests
  * Update to gvisor release-20240826.0
  * Bump gvisor.dev/gvisor to 20240729.0
  * gha: Update go versions
  * packit: Don't attempt to build on f39
  * build(deps): bump github.com/onsi/gomega from 1.34.1 to 1.34.2
  * Fix consistent udp packet loss after the proxy read loop stopped
  * OWNERS: Add Yevhen to 'reviewers'
  * dns: Fix UDP and TCP request handling
  * Replace multiple "resolver.*" fn cals with single "dns.Exchange()" fn.
  * build(deps): bump golang.org/x/crypto from 0.26.0 to 0.27.0
  * Add dependency on "github.com/qdm12/dns/v2"
  * Add 'addLocalAnswers' helper
  * Add DNS server test
  * Add "IdentitiesOnly" SSH option to fix running tests when known_hosts has multiple records
  * build(deps): bump github.com/vishvananda/netlink from 1.2.1 to 1.3.0
  * build(deps): bump github.com/vishvananda/netlink
  * test: Use crc.dev records for DNS tests
  * lint: Fix non-constant format string error
  * deps: Update golangci-lint to v1.60.1
  * gha: Use 'make lint' instead of golangci-lint-action
  * deps: Revert inetaf/tcpproxy commit 2862066
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0
  * build(deps): bump github.com/miekg/dns from 1.1.61 to 1.1.62
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.24.0
  * build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.1
  * ghactions: Automatically create gh releases
  * build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0
  * go.mod: Update go to 1.21
  * go.mod: Update github.com/insomniacslk/dhcp to latest git main
  * Fix OS specific url handling for unix:// scheme in transport
  * test: fix broken dns TXT lookup test
  * handle ENOBUFS when writing to VM socket
  * build(deps): bump github.com/miekg/dns from 1.1.59 to 1.1.61
  * build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0
  * test: Specify path to EFI firmware for aarch64
  * test: Use 'virt' machine type on aarch64
  * test: Pick correct qemu-system-$arch binary
  * test: Make getFCOSDownload less arch-dependent
  * test: Fix expected wikipedia.org TXT record
  * build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0
  * Packit: remove EL8 and enable C10S downstream update
  * ghactions: Use ubuntu runner for tests
  * ghactions: setup-go: Use go version from go.mod
  * test: Always set QEMU machine type and accel
  * test: Rework qemuExecutable
  * ghactions: Don't use pre-release golang 1.22
  * build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.1
  * build(deps): bump github.com/miekg/dns from 1.1.58 to 1.1.59
  * build(deps): bump golangci/golangci-lint-action from 4 to 6
  * build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * README: Clarify that the host HTTP API is not always there
  * build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0
  * build: Build arm64 Windows binaries
  * go.mod: Change inet.af/tcpproxy to github.com/inetaf/tcpproxy
  * build(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0
  * build(deps): bump google.golang.org/protobuf in /tools
  * build(deps): bump golang.org/x/crypto from 0.19.0 to 0.21.0
  * build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  * build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0
  * build(deps): bump golangci/golangci-lint-action from 3 to 4
  * Add DNS '8.8.8.8' server to use in test
  * Fix lint errors
  * build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0
  * OWNERS: Add jakecorrenti to reviewers
  * gh: Fix 'if:' statement to avoid multiple uploads
  * build(deps): bump actions/setup-go from 3 to 5
  * build(deps): bump actions/checkout from 3 to 4
  * build(deps): bump actions/upload-artifact from 3 to 4
  * build(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.1
  * test: Increase `go test` timeout
  * ghactions: Don't upload artifacts multiple times
  * Add log-file to proxy builder
  * ghactions: Fix version generation for ghactions builds
  * Improve versioning from shallow git clones
  * gvproxy: Add more context to errors
  * build(deps): bump github.com/miekg/dns from 1.1.57 to 1.1.58
  * ghactions: Build release artifacts on tag push
  * dependabot: Enable automatic github actions updates
  * Add --log-file to gvproxy
  * ssh: Recreate connection on retries in setupProxy
  * build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0
  * build(deps): bump golang.org/x/crypto from 0.17.0 to 0.18.0
  * ghactions: add Go 1.22rc1
  * go.mod: gvisor.dev/gvisor v0.0.0-20231023213702-2691a8f9b1cf
  * ssh: Add when to setupProxy
  * ssh: Introduce 'retry' helper
  * [CI:BUILD] packit: simplify config after F37 EOL
  * version: Add versioning for github tarballs
  * version: Add moduleVersionFromBuildInfo
  * cmd/*: Add -version flag to executables
  * build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * build: Use ldflags in win-{gvproxy,sshproxy} targets
  * build(deps): bump github.com/coreos/stream-metadata-go
  * build(deps): bump github.com/miekg/dns from 1.1.56 to 1.1.57
  * build(deps): bump github.com/onsi/gomega from 1.28.0 to 1.30.0
  * build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.15.0
  * lint: Stop using dot imports
  * tools: Update golangci-lint to latest version
  * transport: Support passing CID for linux vsock
  * Packit: enable f39 downstream tasks
  * build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0
  * build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
  * build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0
  * build(deps): bump github.com/onsi/gomega from 1.27.10 to 1.28.0
  * Packit: add ppc64le and s390x targets for podman-next copr
  * build(deps): bump github.com/miekg/dns from 1.1.55 to 1.1.56
  * Add graceful shutdown support for gvproxy on Win
  * ghactions: Add comment explaining why we stay on ubuntu-20.04
  * ghactions: Use macos-latest instead of macos-11
  * ghactions: Use `make win-sshproxy`
  * ghactions: build: Add win-gvproxy and win-sshproxy
  * Packit: enable f39 targets
  * rpm: correctly obsolete older rpm builds
  * rpm: gvforwarder subpackage
  * Packit: reuse copr targets for podman-next
  * Rename Command type to GvproxyCommand
  * Fixes the generated commandline for the Command type
  * README: More vfkit updates
  * build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0
  * build: Add freebsd build to make cross
  * transport: Refactor 'Listen' code
  * transport: Only build unixgram on darwin
  * build: Use golangci-lint from tools/
  * tools: go.mod: Switch to golang 1.20
  * tools: Rename go module
  * build: Remove -arm64/-amd64 darwin binaries after makefat
  * build: Build arm64 linux binary
  * ghactions: Build on ubuntu 20.04
  * Fix golangci-lint errors
  * build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0
  * Add `Command` type
  * packit: Build PRs into default packit COPRs
  * build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0
  * gvproxy: add docker.internal dns entries
  * Packit: switch to rpm/gvisor-tap-vsock.spec
  * README.md: Replace hyperkit with vfkit
  * README.md: Fix QEMU spelling</changelog>
</package>
<package pkgid="8f33fc137bb40493e082a3ccd5d180b3763ea3c87aa32d7b79d08c1bc1643288" name="gvisor-tap-vsock" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="bp156.2.3.1"/>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1690459200">- First version of the gvisor-tap-vsock package</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Use .obscpio archive format with obs_scm svc
- Update to version 0.7.0:
  * build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.10
  * build(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0
  * go.mod: gvisor.dev/gvisor v0.0.0-20230715022000-fd277b20b8db
  * go.mod: gvisor.dev/gvisor v0.0.0-20230518002134-99c295d3b367
  * build: Update go version to 1.20
  * Update packit targets
  * build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Remove unnecessary allocations and Write calls.</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1742817600">- Update to version 0.8.5:
  * build(deps): bump golang.org/x/net from 0.33.0 to 0.36.0
  * build(deps): bump golang.org/x/mod from 0.22.0 to 0.24.0
  * build(deps): bump golang.org/x/crypto from 0.32.0 to 0.36.0
  * Fix lit error
  * Upgrade to go '1.23.0'
  * fix vfkit socket disposal
  * Trim 'search' list field on macOS
  * Remove filewatcher package
  * build: Run go mod tidy
  * gvproxy: command: Add AddServiceEndpoint
  * Delete unused files and dependencies.
  * Revert "Replace multiple "resolver.*" fn cals with single "dns.Exchange()" fn."
  * OWNERS: Add Yevhen and Luca as approvers
  * Add make target to enable debugger during test run
  * build(deps): bump github.com/miekg/dns from 1.1.62 to 1.1.63
  * test: upload and download tests against vfkit
  * Use poll based file watcher
  * doc: update doc with new services option
  * Add --services flag to start API without using --listen flag
  * Revert "Update ubuntu runner to 'ubuntu-24.04'"
  * Watch /etc/resolv.conf changes
  * Migrate HostFile to use the common filewatcher utility
  * Extract out filewatcher functionality
  * add back the generic test command and use it on gh workflow
  * add build tag to vfkit test files
  * Allow empty list of nameservers
  * test: Add a test to check an already exposed port cannot be exposed again
  * forwarder: Use distinct type for `proxies` map key
  * Fix `PortsForwarder.Expose()` proxy check
  * Update ubuntu runner to 'ubuntu-24.04'
  * test: add basic tests for vfkit
  * test: move test utils files to the test-utils folder
  * Warn user and keep executing if Event Log Service is stopped
  * build(deps): bump golang.org/x/crypto from 0.31.0 to 0.32.0
  * build(deps): bump github.com/onsi/gomega from 1.36.0 to 1.36.2
  * ghactions: Run `apt update` before installing packages
  * build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0
  * Fix error "-forward-sock" -&gt; "--forward-sock"
  * build(deps): bump golang.org/x/crypto from 0.29.0 to 0.31.0
  * build(deps): bump github.com/onsi/gomega from 1.35.1 to 1.36.0
  * win-sshproxy.tid created before thread id is available
  * build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
  * Avoid crash with empty resolv.conf
  * Use all configured ipv4 dns services
  * build(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0
  * build(deps): bump github.com/coreos/stream-metadata-go
  * build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0
  * build(deps): bump github.com/onsi/gomega from 1.34.2 to 1.35.1
  * Update to gvisor release-20240916.0
  * tcpproxy: remove unused functions
  * tcpproxy: add `nolint:errcheck`
  * go.mod: remove `replace inet.af/tcpproxy =&gt; github.com/inetaf/tcpproxy`
  * Move several log messages to the debug level
  * build(deps): bump github.com/fsnotify/fsnotify from 1.4.9 to 1.7.0
  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0
  * Disable ssh port forwarding when value of -ssh-port is -1
  * Check 'hosts' file records, during handling DNS requests
  * Update to gvisor release-20240826.0
  * Bump gvisor.dev/gvisor to 20240729.0
  * gha: Update go versions
  * packit: Don't attempt to build on f39
  * build(deps): bump github.com/onsi/gomega from 1.34.1 to 1.34.2
  * Fix consistent udp packet loss after the proxy read loop stopped
  * OWNERS: Add Yevhen to 'reviewers'
  * dns: Fix UDP and TCP request handling
  * Replace multiple "resolver.*" fn cals with single "dns.Exchange()" fn.
  * build(deps): bump golang.org/x/crypto from 0.26.0 to 0.27.0
  * Add dependency on "github.com/qdm12/dns/v2"
  * Add 'addLocalAnswers' helper
  * Add DNS server test
  * Add "IdentitiesOnly" SSH option to fix running tests when known_hosts has multiple records
  * build(deps): bump github.com/vishvananda/netlink from 1.2.1 to 1.3.0
  * build(deps): bump github.com/vishvananda/netlink
  * test: Use crc.dev records for DNS tests
  * lint: Fix non-constant format string error
  * deps: Update golangci-lint to v1.60.1
  * gha: Use 'make lint' instead of golangci-lint-action
  * deps: Revert inetaf/tcpproxy commit 2862066
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0
  * build(deps): bump github.com/miekg/dns from 1.1.61 to 1.1.62
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.24.0
  * build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.1
  * ghactions: Automatically create gh releases
  * build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0
  * go.mod: Update go to 1.21
  * go.mod: Update github.com/insomniacslk/dhcp to latest git main
  * Fix OS specific url handling for unix:// scheme in transport
  * test: fix broken dns TXT lookup test
  * handle ENOBUFS when writing to VM socket
  * build(deps): bump github.com/miekg/dns from 1.1.59 to 1.1.61
  * build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0
  * test: Specify path to EFI firmware for aarch64
  * test: Use 'virt' machine type on aarch64
  * test: Pick correct qemu-system-$arch binary
  * test: Make getFCOSDownload less arch-dependent
  * test: Fix expected wikipedia.org TXT record
  * build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0
  * Packit: remove EL8 and enable C10S downstream update
  * ghactions: Use ubuntu runner for tests
  * ghactions: setup-go: Use go version from go.mod
  * test: Always set QEMU machine type and accel
  * test: Rework qemuExecutable
  * ghactions: Don't use pre-release golang 1.22
  * build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.1
  * build(deps): bump github.com/miekg/dns from 1.1.58 to 1.1.59
  * build(deps): bump golangci/golangci-lint-action from 4 to 6
  * build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0
  * README: Clarify that the host HTTP API is not always there
  * build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0
  * build: Build arm64 Windows binaries
  * go.mod: Change inet.af/tcpproxy to github.com/inetaf/tcpproxy
  * build(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0
  * build(deps): bump google.golang.org/protobuf in /tools
  * build(deps): bump golang.org/x/crypto from 0.19.0 to 0.21.0
  * build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  * build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0
  * build(deps): bump golangci/golangci-lint-action from 3 to 4
  * Add DNS '8.8.8.8' server to use in test
  * Fix lint errors
  * build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0
  * OWNERS: Add jakecorrenti to reviewers
  * gh: Fix 'if:' statement to avoid multiple uploads
  * build(deps): bump actions/setup-go from 3 to 5
  * build(deps): bump actions/checkout from 3 to 4
  * build(deps): bump actions/upload-artifact from 3 to 4
  * build(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.1
  * test: Increase `go test` timeout
  * ghactions: Don't upload artifacts multiple times
  * Add log-file to proxy builder
  * ghactions: Fix version generation for ghactions builds
  * Improve versioning from shallow git clones
  * gvproxy: Add more context to errors
  * build(deps): bump github.com/miekg/dns from 1.1.57 to 1.1.58
  * ghactions: Build release artifacts on tag push
  * dependabot: Enable automatic github actions updates
  * Add --log-file to gvproxy
  * ssh: Recreate connection on retries in setupProxy
  * build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0
  * build(deps): bump golang.org/x/crypto from 0.17.0 to 0.18.0
  * ghactions: add Go 1.22rc1
  * go.mod: gvisor.dev/gvisor v0.0.0-20231023213702-2691a8f9b1cf
  * ssh: Add when to setupProxy
  * ssh: Introduce 'retry' helper
  * [CI:BUILD] packit: simplify config after F37 EOL
  * version: Add versioning for github tarballs
  * version: Add moduleVersionFromBuildInfo
  * cmd/*: Add -version flag to executables
  * build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0
  * build: Use ldflags in win-{gvproxy,sshproxy} targets
  * build(deps): bump github.com/coreos/stream-metadata-go
  * build(deps): bump github.com/miekg/dns from 1.1.56 to 1.1.57
  * build(deps): bump github.com/onsi/gomega from 1.28.0 to 1.30.0
  * build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.15.0
  * lint: Stop using dot imports
  * tools: Update golangci-lint to latest version
  * transport: Support passing CID for linux vsock
  * Packit: enable f39 downstream tasks
  * build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0
  * build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
  * build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0
  * build(deps): bump github.com/onsi/gomega from 1.27.10 to 1.28.0
  * Packit: add ppc64le and s390x targets for podman-next copr
  * build(deps): bump github.com/miekg/dns from 1.1.55 to 1.1.56
  * Add graceful shutdown support for gvproxy on Win
  * ghactions: Add comment explaining why we stay on ubuntu-20.04
  * ghactions: Use macos-latest instead of macos-11
  * ghactions: Use `make win-sshproxy`
  * ghactions: build: Add win-gvproxy and win-sshproxy
  * Packit: enable f39 targets
  * rpm: correctly obsolete older rpm builds
  * rpm: gvforwarder subpackage
  * Packit: reuse copr targets for podman-next
  * Rename Command type to GvproxyCommand
  * Fixes the generated commandline for the Command type
  * README: More vfkit updates
  * build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0
  * build: Add freebsd build to make cross
  * transport: Refactor 'Listen' code
  * transport: Only build unixgram on darwin
  * build: Use golangci-lint from tools/
  * tools: go.mod: Switch to golang 1.20
  * tools: Rename go module
  * build: Remove -arm64/-amd64 darwin binaries after makefat
  * build: Build arm64 linux binary
  * ghactions: Build on ubuntu 20.04
  * Fix golangci-lint errors
  * build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0
  * Add `Command` type
  * packit: Build PRs into default packit COPRs
  * build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0
  * gvproxy: add docker.internal dns entries
  * Packit: switch to rpm/gvisor-tap-vsock.spec
  * README.md: Replace hyperkit with vfkit
  * README.md: Fix QEMU spelling</changelog>
</package>
<package pkgid="5f9992298774a8d95303ac482cca0ad1ae089184b6adfad68a6f6eff2d912f74" name="hello" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="bp156.2.2.1"/>
  <changelog author="puzel@suse.com" date="1335096000">- update to version 2.8
  - use newer autotools and friends
  - update translations</changelog>
  <changelog author="meissner@suse.com" date="1343304000">- buildrequire makeinfo</changelog>
  <changelog author="abergmann@novell.com" date="1361188800">- Added GPG Offline checking.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- update to version 2.9:
  * modernized and improved build system
  * added the possibility of user-defined new-style greetings
  * added support for unicode
  * various translations have been updated</changelog>
  <changelog author="meissner@suse.com" date="1416139200">- removed gpg-offline usage as its checked by source services.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421496000">- Updateto version 2.10
  * The 'Hello, World' message is now part of translations.  The
    translation bug was introduced in release 2.9.
  * Make use of none-recursive build.
  * Removal of user-defined new-style.
  * Include an example how to add a section to a manual page, such as BUGS.
  * Rather than 'fprintf (stderr' use libc 'error()' reporting facility.
  * Start using 'make update-copyright' facility.
  * Generate ChangeLog from git commit logs.
  * Avoid manual page generation errors when cross-compiling.
- Split out translation files into a lang subpackage
- Make main package recommend hello-lang</changelog>
  <changelog author="meissner@suse.com" date="1484568000">- new keyring fetched from savannah homepage, for new maintainer.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1571140800">- don't recommend -lang package as the lang packages uses a
  supplements already
- remove install-info macros (boo#1152105)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648468800">- GNU Hello 2.12:
  * Remove -h and -v short options
  * Developer visible changes
- all-round spec update showcasing updated packaging
- drop hello-1.3.dif
- make build reproducible boo#1197575 hello-2.12-reproducible.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653912000">- GNU Hello 2.12.1:
  * Fix a minor documentation typo and update the translations</changelog>
</package>
<package pkgid="b6eb02a54d33f3a454420985a3af2e462cac3b9af052fde752beac2550420520" name="hello" arch="i586">
  <version epoch="0" ver="2.12.1" rel="bp156.2.2.1"/>
  <changelog author="puzel@suse.com" date="1335096000">- update to version 2.8
  - use newer autotools and friends
  - update translations</changelog>
  <changelog author="meissner@suse.com" date="1343304000">- buildrequire makeinfo</changelog>
  <changelog author="abergmann@novell.com" date="1361188800">- Added GPG Offline checking.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- update to version 2.9:
  * modernized and improved build system
  * added the possibility of user-defined new-style greetings
  * added support for unicode
  * various translations have been updated</changelog>
  <changelog author="meissner@suse.com" date="1416139200">- removed gpg-offline usage as its checked by source services.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421496000">- Updateto version 2.10
  * The 'Hello, World' message is now part of translations.  The
    translation bug was introduced in release 2.9.
  * Make use of none-recursive build.
  * Removal of user-defined new-style.
  * Include an example how to add a section to a manual page, such as BUGS.
  * Rather than 'fprintf (stderr' use libc 'error()' reporting facility.
  * Start using 'make update-copyright' facility.
  * Generate ChangeLog from git commit logs.
  * Avoid manual page generation errors when cross-compiling.
- Split out translation files into a lang subpackage
- Make main package recommend hello-lang</changelog>
  <changelog author="meissner@suse.com" date="1484568000">- new keyring fetched from savannah homepage, for new maintainer.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1571140800">- don't recommend -lang package as the lang packages uses a
  supplements already
- remove install-info macros (boo#1152105)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648468800">- GNU Hello 2.12:
  * Remove -h and -v short options
  * Developer visible changes
- all-round spec update showcasing updated packaging
- drop hello-1.3.dif
- make build reproducible boo#1197575 hello-2.12-reproducible.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653912000">- GNU Hello 2.12.1:
  * Fix a minor documentation typo and update the translations</changelog>
</package>
<package pkgid="dade866ef5cc62ca15574bb87fa1e5c8ee36280254b0539e1ac3e33b27f75b09" name="hello" arch="ppc64le">
  <version epoch="0" ver="2.12.1" rel="bp156.2.2.1"/>
  <changelog author="puzel@suse.com" date="1335096000">- update to version 2.8
  - use newer autotools and friends
  - update translations</changelog>
  <changelog author="meissner@suse.com" date="1343304000">- buildrequire makeinfo</changelog>
  <changelog author="abergmann@novell.com" date="1361188800">- Added GPG Offline checking.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- update to version 2.9:
  * modernized and improved build system
  * added the possibility of user-defined new-style greetings
  * added support for unicode
  * various translations have been updated</changelog>
  <changelog author="meissner@suse.com" date="1416139200">- removed gpg-offline usage as its checked by source services.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421496000">- Updateto version 2.10
  * The 'Hello, World' message is now part of translations.  The
    translation bug was introduced in release 2.9.
  * Make use of none-recursive build.
  * Removal of user-defined new-style.
  * Include an example how to add a section to a manual page, such as BUGS.
  * Rather than 'fprintf (stderr' use libc 'error()' reporting facility.
  * Start using 'make update-copyright' facility.
  * Generate ChangeLog from git commit logs.
  * Avoid manual page generation errors when cross-compiling.
- Split out translation files into a lang subpackage
- Make main package recommend hello-lang</changelog>
  <changelog author="meissner@suse.com" date="1484568000">- new keyring fetched from savannah homepage, for new maintainer.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1571140800">- don't recommend -lang package as the lang packages uses a
  supplements already
- remove install-info macros (boo#1152105)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648468800">- GNU Hello 2.12:
  * Remove -h and -v short options
  * Developer visible changes
- all-round spec update showcasing updated packaging
- drop hello-1.3.dif
- make build reproducible boo#1197575 hello-2.12-reproducible.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653912000">- GNU Hello 2.12.1:
  * Fix a minor documentation typo and update the translations</changelog>
</package>
<package pkgid="38116ea8ea48bfdc096928f3df0c2f020f7f972c7cfe29b42f6e0439cad7ece0" name="hello" arch="s390x">
  <version epoch="0" ver="2.12.1" rel="bp156.2.2.1"/>
  <changelog author="puzel@suse.com" date="1335096000">- update to version 2.8
  - use newer autotools and friends
  - update translations</changelog>
  <changelog author="meissner@suse.com" date="1343304000">- buildrequire makeinfo</changelog>
  <changelog author="abergmann@novell.com" date="1361188800">- Added GPG Offline checking.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- update to version 2.9:
  * modernized and improved build system
  * added the possibility of user-defined new-style greetings
  * added support for unicode
  * various translations have been updated</changelog>
  <changelog author="meissner@suse.com" date="1416139200">- removed gpg-offline usage as its checked by source services.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421496000">- Updateto version 2.10
  * The 'Hello, World' message is now part of translations.  The
    translation bug was introduced in release 2.9.
  * Make use of none-recursive build.
  * Removal of user-defined new-style.
  * Include an example how to add a section to a manual page, such as BUGS.
  * Rather than 'fprintf (stderr' use libc 'error()' reporting facility.
  * Start using 'make update-copyright' facility.
  * Generate ChangeLog from git commit logs.
  * Avoid manual page generation errors when cross-compiling.
- Split out translation files into a lang subpackage
- Make main package recommend hello-lang</changelog>
  <changelog author="meissner@suse.com" date="1484568000">- new keyring fetched from savannah homepage, for new maintainer.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1571140800">- don't recommend -lang package as the lang packages uses a
  supplements already
- remove install-info macros (boo#1152105)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648468800">- GNU Hello 2.12:
  * Remove -h and -v short options
  * Developer visible changes
- all-round spec update showcasing updated packaging
- drop hello-1.3.dif
- make build reproducible boo#1197575 hello-2.12-reproducible.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653912000">- GNU Hello 2.12.1:
  * Fix a minor documentation typo and update the translations</changelog>
</package>
<package pkgid="d06ad3d98ed12d4848e013ae074dbc04f614c3fb75233991ae10096b63f64821" name="hello" arch="src">
  <version epoch="0" ver="2.12.1" rel="bp156.2.2.1"/>
  <changelog author="ke@suse.de" date="1044619200">- Use install_info macro [# 23424].</changelog>
  <changelog author="ro@suse.de" date="1051185600">- fix install_info --delete call and move from preun to postun</changelog>
  <changelog author="adrian@suse.de" date="1073822400">- build as user</changelog>
  <changelog author="meissner@suse.de" date="1078920000">- run make check
- added feedback based profiling optimization.</changelog>
  <changelog author="cthiel@suse.de" date="1126699200">- specfile cleanup</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="meissner@suse.de" date="1183982400">- upgraded to version 2.3
  - bugfixes, updates to buildsystem
- now GPLv3 licensed.</changelog>
  <changelog author="crrodriguez@suse.de" date="1205668800">- fix file-not-in-lang errors</changelog>
  <changelog author="schwab@suse.de" date="1234008000">- Rebuild broken info file.</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to version 2.8
  - use newer autotools and friends
  - update translations</changelog>
  <changelog author="meissner@suse.com" date="1343304000">- buildrequire makeinfo</changelog>
  <changelog author="abergmann@novell.com" date="1361188800">- Added GPG Offline checking.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- update to version 2.9:
  * modernized and improved build system
  * added the possibility of user-defined new-style greetings
  * added support for unicode
  * various translations have been updated</changelog>
  <changelog author="meissner@suse.com" date="1416139200">- removed gpg-offline usage as its checked by source services.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421496000">- Updateto version 2.10
  * The 'Hello, World' message is now part of translations.  The
    translation bug was introduced in release 2.9.
  * Make use of none-recursive build.
  * Removal of user-defined new-style.
  * Include an example how to add a section to a manual page, such as BUGS.
  * Rather than 'fprintf (stderr' use libc 'error()' reporting facility.
  * Start using 'make update-copyright' facility.
  * Generate ChangeLog from git commit logs.
  * Avoid manual page generation errors when cross-compiling.
- Split out translation files into a lang subpackage
- Make main package recommend hello-lang</changelog>
  <changelog author="meissner@suse.com" date="1484568000">- new keyring fetched from savannah homepage, for new maintainer.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1571140800">- don't recommend -lang package as the lang packages uses a
  supplements already
- remove install-info macros (boo#1152105)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648468800">- GNU Hello 2.12:
  * Remove -h and -v short options
  * Developer visible changes
- all-round spec update showcasing updated packaging
- drop hello-1.3.dif
- make build reproducible boo#1197575 hello-2.12-reproducible.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653912000">- GNU Hello 2.12.1:
  * Fix a minor documentation typo and update the translations</changelog>
</package>
<package pkgid="6f6a5dbf7632af152c30f325be0d825d3d2c8fe35a79149e1c96c1c27c8ea452" name="hello" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="bp156.2.2.1"/>
  <changelog author="puzel@suse.com" date="1335096000">- update to version 2.8
  - use newer autotools and friends
  - update translations</changelog>
  <changelog author="meissner@suse.com" date="1343304000">- buildrequire makeinfo</changelog>
  <changelog author="abergmann@novell.com" date="1361188800">- Added GPG Offline checking.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- update to version 2.9:
  * modernized and improved build system
  * added the possibility of user-defined new-style greetings
  * added support for unicode
  * various translations have been updated</changelog>
  <changelog author="meissner@suse.com" date="1416139200">- removed gpg-offline usage as its checked by source services.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421496000">- Updateto version 2.10
  * The 'Hello, World' message is now part of translations.  The
    translation bug was introduced in release 2.9.
  * Make use of none-recursive build.
  * Removal of user-defined new-style.
  * Include an example how to add a section to a manual page, such as BUGS.
  * Rather than 'fprintf (stderr' use libc 'error()' reporting facility.
  * Start using 'make update-copyright' facility.
  * Generate ChangeLog from git commit logs.
  * Avoid manual page generation errors when cross-compiling.
- Split out translation files into a lang subpackage
- Make main package recommend hello-lang</changelog>
  <changelog author="meissner@suse.com" date="1484568000">- new keyring fetched from savannah homepage, for new maintainer.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1571140800">- don't recommend -lang package as the lang packages uses a
  supplements already
- remove install-info macros (boo#1152105)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648468800">- GNU Hello 2.12:
  * Remove -h and -v short options
  * Developer visible changes
- all-round spec update showcasing updated packaging
- drop hello-1.3.dif
- make build reproducible boo#1197575 hello-2.12-reproducible.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653912000">- GNU Hello 2.12.1:
  * Fix a minor documentation typo and update the translations</changelog>
</package>
<package pkgid="0eb7085ca45b04110b458389e69a9d63ab69b9fb0a3f392696d59327081bd14e" name="hello-lang" arch="noarch">
  <version epoch="0" ver="2.12.1" rel="bp156.2.2.1"/>
  <changelog author="puzel@suse.com" date="1335096000">- update to version 2.8
  - use newer autotools and friends
  - update translations</changelog>
  <changelog author="meissner@suse.com" date="1343304000">- buildrequire makeinfo</changelog>
  <changelog author="abergmann@novell.com" date="1361188800">- Added GPG Offline checking.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- update to version 2.9:
  * modernized and improved build system
  * added the possibility of user-defined new-style greetings
  * added support for unicode
  * various translations have been updated</changelog>
  <changelog author="meissner@suse.com" date="1416139200">- removed gpg-offline usage as its checked by source services.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421496000">- Updateto version 2.10
  * The 'Hello, World' message is now part of translations.  The
    translation bug was introduced in release 2.9.
  * Make use of none-recursive build.
  * Removal of user-defined new-style.
  * Include an example how to add a section to a manual page, such as BUGS.
  * Rather than 'fprintf (stderr' use libc 'error()' reporting facility.
  * Start using 'make update-copyright' facility.
  * Generate ChangeLog from git commit logs.
  * Avoid manual page generation errors when cross-compiling.
- Split out translation files into a lang subpackage
- Make main package recommend hello-lang</changelog>
  <changelog author="meissner@suse.com" date="1484568000">- new keyring fetched from savannah homepage, for new maintainer.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1571140800">- don't recommend -lang package as the lang packages uses a
  supplements already
- remove install-info macros (boo#1152105)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648468800">- GNU Hello 2.12:
  * Remove -h and -v short options
  * Developer visible changes
- all-round spec update showcasing updated packaging
- drop hello-1.3.dif
- make build reproducible boo#1197575 hello-2.12-reproducible.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653912000">- GNU Hello 2.12.1:
  * Fix a minor documentation typo and update the translations</changelog>
</package>
<package pkgid="ba54d17eee335d5d7954bdfb918f815e67497ffcc73c41641da4888a7affb7ba" name="hostapd" arch="aarch64">
  <version epoch="0" ver="2.11" rel="bp156.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539950400">- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
  Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).</changelog>
  <changelog author="mardnh@gmx.de" date="1544184000">- Update to version 2.7
  * fixed WPA packet number reuse with replayed messages and key
    reinstallation
    [http://w1.fi/security/2017-1/] (CVE-2017-13082) (bsc#1056061)
  * added support for FILS (IEEE 802.11ai) shared key authentication
  * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;
    and transition mode defined by WFA)
  * added support for DPP (Wi-Fi Device Provisioning Protocol)
  * FT:
  - added local generation of PMK-R0/PMK-R1 for FT-PSK
    (ft_psk_generate_local=1)
  - replaced inter-AP protocol with a cleaner design that is more
    easily extensible; this breaks backward compatibility and requires
    all APs in the ESS to be updated at the same time to maintain FT
    functionality
  - added support for wildcard R0KH/R1KH
  - replaced r0_key_lifetime (minutes) parameter with
    ft_r0_key_lifetime (seconds)
  - fixed wpa_psk_file use for FT-PSK
  - fixed FT-SAE PMKID matching
  - added expiration to PMK-R0 and PMK-R1 cache
  - added IEEE VLAN support (including tagged VLANs)
  - added support for SHA384 based AKM
  * SAE
  - fixed some PMKSA caching cases with SAE
  - added support for configuring SAE password separately of the
    WPA2 PSK/passphrase
  - added option to require MFP for SAE associations
    (sae_require_pmf=1)
  - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection
    for SAE;
    note: this is not backwards compatible, i.e., both the AP and
    station side implementations will need to be update at the same
    time to maintain interoperability
  - added support for Password Identifier
  * hostapd_cli: added support for command history and completion
  * added support for requesting beacon report
  * large number of other fixes, cleanup, and extensions
  * added option to configure EAPOL-Key retry limits
    (wpa_group_update_count and wpa_pairwise_update_count)
  * removed all PeerKey functionality
  * fixed nl80211 AP mode configuration regression with Linux 4.15 and
    newer
  * added support for using wolfSSL cryptographic library
  * fixed some 20/40 MHz coexistence cases where the BSS could drop to
    20 MHz even when 40 MHz would be allowed
  * Hotspot 2.0
  - added support for setting Venue URL ANQP-element (venue_url)
  - added support for advertising Hotspot 2.0 operator icons
  - added support for Roaming Consortium Selection element
  - added support for Terms and Conditions
  - added support for OSEN connection in a shared RSN BSS
  * added support for using OpenSSL 1.1.1
  * added EAP-pwd server support for salted passwords
- Remove not longer needed patches (fixed upstream)
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch
  * rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
- Verify source signature</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545048000">- Applied spec-cleaner
- Added bug reference
- Use defconfig file as template for configuration instead of patching it
  during build. This is easier to maintain in the long run. This removes the
  patch hostapd-2.6-defconfig.patch in favor of a simple config file, which is
  copied over from the source directory.
- Enabled CLI editing and history support.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545998400">- Use noun phrase in summary.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1556107200">- Update to version 2.8
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only group 19
    (i.e., disable groups 20, 21, 25, 26 from default configuration) and
    disable all unsuitable groups completely based on REVmd changes
  - improved anti-clogging token mechanism and SAE authentication
    frame processing during heavy CPU load; this mitigates some issues
    with potential DoS attacks trying to flood an AP with large number
    of SAE messages
  - added Finite Cyclic Group field in status code 77 responses
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  - fixed confirm message validation in error cases
    [https://w1.fi/security/2019-3/] (CVE-2019-9496)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify peer scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9497 and CVE-2019-9498)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * Hotspot 2.0 changes
  - added support for release number 3
  - reject release 2 or newer association without PMF
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and configuration parameter ocv=1)
  * added Multi-AP protocol support
  * added FTM responder configuration
  * fixed build with LibreSSL
  * added FT/RRB workaround for short Ethernet frame padding
  * fixed KEK2 derivation for FILS+FT
  * added RSSI-based association rejection from OCE
  * extended beacon reporting functionality
  * VLAN changes
  - allow local VLAN management with remote RADIUS authentication
  - add WPA/WPA2 passphrase/PSK -based VLAN assignment
  * OpenSSL: allow systemwide policies to be overridden
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * fixed FT and SA Query Action frame with AP-MLME-in-driver cases
  * OWE: allow Diffie-Hellman Parameter element to be included with DPP
    in preparation for DPP protocol extension
  * RADIUS server: started to accept ERP keyName-NAI as user identity
    automatically without matching EAP database entry
  * fixed PTK rekeying with FILS and FT
  wpa_supplicant:
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only groups 19, 20, 21
    (i.e., disable groups 25 and 26) and disable all unsuitable groups
    completely based on REVmd changes
  - do not regenerate PWE unnecessarily when the AP uses the
    anti-clogging token mechanisms
  - fixed some association cases where both SAE and FT-SAE were enabled
    on both the station and the selected AP
  - started to prefer FT-SAE over SAE AKM if both are enabled
  - started to prefer FT-SAE over FT-PSK if both are enabled
  - fixed FT-SAE when SAE PMKSA caching is used
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify server scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9499)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y
  * Hotspot 2.0 changes
  - do not indicate release number that is higher than the one
    AP supports
  - added support for release number 3
  - enable PMF automatically for network profiles created from
    credentials
  * fixed OWE network profile saving
  * fixed DPP network profile saving
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and network profile parameter ocv=1)
  * added Multi-AP backhaul STA support
  * fixed build with LibreSSL
  * number of MKA/MACsec fixes and extensions
  * extended domain_match and domain_suffix_match to allow list of values
  * fixed dNSName matching in domain_match and domain_suffix_match when
    using wolfSSL
  * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both
    are enabled
  * extended nl80211 Connect and external authentication to support
    SAE, FT-SAE, FT-EAP-SHA384
  * fixed KEK2 derivation for FILS+FT
  * extended client_cert file to allow loading of a chain of PEM
    encoded certificates
  * extended beacon reporting functionality
  * extended D-Bus interface with number of new properties
  * fixed a regression in FT-over-DS with mac80211-based drivers
  * OpenSSL: allow systemwide policies to be overridden
  * extended driver flags indication for separate 802.1X and PSK
    4-way handshake offload capability
  * added support for random P2P Device/Interface Address use
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)
  * extended domain_match and domain_suffix_match to allow list of values
  * added a RSN workaround for misbehaving PMF APs that advertise
    IGTK/BIP KeyID using incorrect byte order
  * fixed PTK rekeying with FILS and FT</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1567684800">- Update to version 2.9
  * SAE changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * EAP-pwd changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * fixed FT-EAP initial mobility domain association using PMKSA caching
  * added configuration of airtime policy
  * fixed FILS to and RSNE into (Re)Association Response frames
  * fixed DPP bootstrapping URI parser of channel list
  * added support for regulatory WMM limitation (for ETSI)
  * added support for MACsec Key Agreement using IEEE 802.1X/PSK
  * added experimental support for EAP-TEAP server (RFC 7170)
  * added experimental support for EAP-TLS server with TLS v1.3
  * added support for two server certificates/keys (RSA/ECC)
  * added AKMSuiteSelector into "STA &lt;addr&gt;" control interface data to
    determine with AKM was used for an association
  * added eap_sim_id parameter to allow EAP-SIM/AKA server pseudonym and
    fast reauthentication use to be disabled
  * fixed an ECDH operation corner case with OpenSSL</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1587643200">- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass
  (bsc#1150934)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1601380800">- Add CVE-2020-12695.patch -- UPnP SUBSCRIBE misbehavior in hostapd WPS AP
  (bsc#1172700)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1614081600">- added AppArmor profile (source apparmor-usr.sbin.hostapd)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1617710400">- Add CVE-2021-30004.patch -- forging attacks may occur because
  AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c
  (bsc#1184348)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1626264000">- fixed AppArmor profile</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hostapd.service</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1637928000">- Fix AppArmor profile -- allow access to /etc/ssl/openssl.cnf
  (bsc#1192959)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1642420800">- Removed obsolete patches:
  * CVE-2019-16275.patch
  * CVE-2020-12695.patch
  * CVE-2021-30004.patch
- Update to version 2.10
  * SAE changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  - added option send SAE Confirm immediately (sae_config_immediate=1)
    after SAE Commit
  - added support for the hash-to-element mechanism (sae_pwe=1 or
    sae_pwe=2)
  - fixed PMKSA caching with OKC
  - added support for SAE-PK
  * EAP-pwd changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  * fixed WPS UPnP SUBSCRIBE handling of invalid operations
    [https://w1.fi/security/2020-1/]
  * fixed PMF disconnection protection bypass
    [https://w1.fi/security/2019-7/]
  * added support for using OpenSSL 3.0
  * fixed various issues in experimental support for EAP-TEAP server
  * added configuration (max_auth_rounds, max_auth_rounds_short) to
    increase the maximum number of EAP message exchanges (mainly to
    support cases with very large certificates) for the EAP server
  * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol)
  * extended HE (IEEE 802.11ax) support, including 6 GHz support
  * removed obsolete IAPP functionality
  * fixed EAP-FAST server with TLS GCM/CCM ciphers
  * dropped support for libnl 1.1
  * added support for nl80211 control port for EAPOL frame TX/RX
  * fixed OWE key derivation with groups 20 and 21; this breaks backwards
    compatibility for these groups while the default group 19 remains
    backwards compatible; owe_ptk_workaround=1 can be used to enabled a
    a workaround for the group 20/21 backwards compatibility
  * added support for Beacon protection
  * added support for Extended Key ID for pairwise keys
  * removed WEP support from the default build (CONFIG_WEP=y can be used
    to enable it, if really needed)
  * added a build option to remove TKIP support (CONFIG_NO_TKIP=y)
  * added support for Transition Disable mechanism to allow the AP to
    automatically disable transition mode to improve security
  * added support for PASN
  * added EAP-TLS server support for TLS 1.3 (disabled by default for now)
  * a large number of other fixes, cleanup, and extensions</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1647000000">- Adjust config
  * Enable SAE
  * Enable DPP
  * Enable wired driver
  * Enable Airtime policy support
  * Enable Fast Initial Link Setup (FILS) (IEEE 802.11ai)</changelog>
  <changelog author="chris@computersalat.de" date="1723118400">- 2024-07-20 - v2.11
  * Wi-Fi Easy Connect
  - add support for DPP release 3
  - allow Configurator parameters to be provided during config
    exchange
  * HE/IEEE 802.11ax/Wi-Fi 6
  - various fixes
  * EHT/IEEE 802.11be/Wi-Fi 7
  - add preliminary support
  * SAE: add support for fetching the password from a RADIUS server
  * support OpenSSL 3.0 API changes
  * support background radar detection and CAC with some additional
    drivers
  * support RADIUS ACL/PSK check during 4-way handshake (wpa_psk_radius=3)
  * EAP-SIM/AKA: support IMSI privacy
  * improve 4-way handshake operations
  - use Secure=1 in message 3 during PTK rekeying
  * OCV: do not check Frequency Segment 1 Channel Number for 160 MHz cases
    to avoid interoperability issues
  * support new SAE AKM suites with variable length keys
  * support new AKM for 802.1X/EAP with SHA384
  * extend PASN support for secure ranging
  * FT: Use SHA256 to derive PMKID for AKM 00-0F-AC:3 (FT-EAP)
  - this is based on additional details being added in the IEEE 802.11
    standard
  - the new implementation is not backwards compatible
  * improved ACS to cover additional channel types/bandwidths
  * extended Multiple BSSID support
  * fix beacon protection with FT protocol (incorrect BIGTK was provided)
  * support unsynchronized service discovery (USD)
  * add preliminary support for RADIUS/TLS
  * add support for explicit SSID protection in 4-way handshake
    (a mitigation for CVE-2023-52424; disabled by default for now, can be
    enabled with ssid_protection=1)
  * fix SAE H2E rejected groups validation to avoid downgrade attacks
  * use stricter validation for some RADIUS messages
  * a large number of other fixes, cleanup, and extensions</changelog>
</package>
<package pkgid="9215d496bfa44676a087d1b22864bdd11a99391c4ca2c978ff44f87f97ce9a40" name="hostapd" arch="i586">
  <version epoch="0" ver="2.11" rel="bp156.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539950400">- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
  Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).</changelog>
  <changelog author="mardnh@gmx.de" date="1544184000">- Update to version 2.7
  * fixed WPA packet number reuse with replayed messages and key
    reinstallation
    [http://w1.fi/security/2017-1/] (CVE-2017-13082) (bsc#1056061)
  * added support for FILS (IEEE 802.11ai) shared key authentication
  * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;
    and transition mode defined by WFA)
  * added support for DPP (Wi-Fi Device Provisioning Protocol)
  * FT:
  - added local generation of PMK-R0/PMK-R1 for FT-PSK
    (ft_psk_generate_local=1)
  - replaced inter-AP protocol with a cleaner design that is more
    easily extensible; this breaks backward compatibility and requires
    all APs in the ESS to be updated at the same time to maintain FT
    functionality
  - added support for wildcard R0KH/R1KH
  - replaced r0_key_lifetime (minutes) parameter with
    ft_r0_key_lifetime (seconds)
  - fixed wpa_psk_file use for FT-PSK
  - fixed FT-SAE PMKID matching
  - added expiration to PMK-R0 and PMK-R1 cache
  - added IEEE VLAN support (including tagged VLANs)
  - added support for SHA384 based AKM
  * SAE
  - fixed some PMKSA caching cases with SAE
  - added support for configuring SAE password separately of the
    WPA2 PSK/passphrase
  - added option to require MFP for SAE associations
    (sae_require_pmf=1)
  - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection
    for SAE;
    note: this is not backwards compatible, i.e., both the AP and
    station side implementations will need to be update at the same
    time to maintain interoperability
  - added support for Password Identifier
  * hostapd_cli: added support for command history and completion
  * added support for requesting beacon report
  * large number of other fixes, cleanup, and extensions
  * added option to configure EAPOL-Key retry limits
    (wpa_group_update_count and wpa_pairwise_update_count)
  * removed all PeerKey functionality
  * fixed nl80211 AP mode configuration regression with Linux 4.15 and
    newer
  * added support for using wolfSSL cryptographic library
  * fixed some 20/40 MHz coexistence cases where the BSS could drop to
    20 MHz even when 40 MHz would be allowed
  * Hotspot 2.0
  - added support for setting Venue URL ANQP-element (venue_url)
  - added support for advertising Hotspot 2.0 operator icons
  - added support for Roaming Consortium Selection element
  - added support for Terms and Conditions
  - added support for OSEN connection in a shared RSN BSS
  * added support for using OpenSSL 1.1.1
  * added EAP-pwd server support for salted passwords
- Remove not longer needed patches (fixed upstream)
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch
  * rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
- Verify source signature</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545048000">- Applied spec-cleaner
- Added bug reference
- Use defconfig file as template for configuration instead of patching it
  during build. This is easier to maintain in the long run. This removes the
  patch hostapd-2.6-defconfig.patch in favor of a simple config file, which is
  copied over from the source directory.
- Enabled CLI editing and history support.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545998400">- Use noun phrase in summary.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1556107200">- Update to version 2.8
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only group 19
    (i.e., disable groups 20, 21, 25, 26 from default configuration) and
    disable all unsuitable groups completely based on REVmd changes
  - improved anti-clogging token mechanism and SAE authentication
    frame processing during heavy CPU load; this mitigates some issues
    with potential DoS attacks trying to flood an AP with large number
    of SAE messages
  - added Finite Cyclic Group field in status code 77 responses
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  - fixed confirm message validation in error cases
    [https://w1.fi/security/2019-3/] (CVE-2019-9496)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify peer scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9497 and CVE-2019-9498)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * Hotspot 2.0 changes
  - added support for release number 3
  - reject release 2 or newer association without PMF
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and configuration parameter ocv=1)
  * added Multi-AP protocol support
  * added FTM responder configuration
  * fixed build with LibreSSL
  * added FT/RRB workaround for short Ethernet frame padding
  * fixed KEK2 derivation for FILS+FT
  * added RSSI-based association rejection from OCE
  * extended beacon reporting functionality
  * VLAN changes
  - allow local VLAN management with remote RADIUS authentication
  - add WPA/WPA2 passphrase/PSK -based VLAN assignment
  * OpenSSL: allow systemwide policies to be overridden
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * fixed FT and SA Query Action frame with AP-MLME-in-driver cases
  * OWE: allow Diffie-Hellman Parameter element to be included with DPP
    in preparation for DPP protocol extension
  * RADIUS server: started to accept ERP keyName-NAI as user identity
    automatically without matching EAP database entry
  * fixed PTK rekeying with FILS and FT
  wpa_supplicant:
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only groups 19, 20, 21
    (i.e., disable groups 25 and 26) and disable all unsuitable groups
    completely based on REVmd changes
  - do not regenerate PWE unnecessarily when the AP uses the
    anti-clogging token mechanisms
  - fixed some association cases where both SAE and FT-SAE were enabled
    on both the station and the selected AP
  - started to prefer FT-SAE over SAE AKM if both are enabled
  - started to prefer FT-SAE over FT-PSK if both are enabled
  - fixed FT-SAE when SAE PMKSA caching is used
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify server scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9499)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y
  * Hotspot 2.0 changes
  - do not indicate release number that is higher than the one
    AP supports
  - added support for release number 3
  - enable PMF automatically for network profiles created from
    credentials
  * fixed OWE network profile saving
  * fixed DPP network profile saving
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and network profile parameter ocv=1)
  * added Multi-AP backhaul STA support
  * fixed build with LibreSSL
  * number of MKA/MACsec fixes and extensions
  * extended domain_match and domain_suffix_match to allow list of values
  * fixed dNSName matching in domain_match and domain_suffix_match when
    using wolfSSL
  * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both
    are enabled
  * extended nl80211 Connect and external authentication to support
    SAE, FT-SAE, FT-EAP-SHA384
  * fixed KEK2 derivation for FILS+FT
  * extended client_cert file to allow loading of a chain of PEM
    encoded certificates
  * extended beacon reporting functionality
  * extended D-Bus interface with number of new properties
  * fixed a regression in FT-over-DS with mac80211-based drivers
  * OpenSSL: allow systemwide policies to be overridden
  * extended driver flags indication for separate 802.1X and PSK
    4-way handshake offload capability
  * added support for random P2P Device/Interface Address use
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)
  * extended domain_match and domain_suffix_match to allow list of values
  * added a RSN workaround for misbehaving PMF APs that advertise
    IGTK/BIP KeyID using incorrect byte order
  * fixed PTK rekeying with FILS and FT</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1567684800">- Update to version 2.9
  * SAE changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * EAP-pwd changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * fixed FT-EAP initial mobility domain association using PMKSA caching
  * added configuration of airtime policy
  * fixed FILS to and RSNE into (Re)Association Response frames
  * fixed DPP bootstrapping URI parser of channel list
  * added support for regulatory WMM limitation (for ETSI)
  * added support for MACsec Key Agreement using IEEE 802.1X/PSK
  * added experimental support for EAP-TEAP server (RFC 7170)
  * added experimental support for EAP-TLS server with TLS v1.3
  * added support for two server certificates/keys (RSA/ECC)
  * added AKMSuiteSelector into "STA &lt;addr&gt;" control interface data to
    determine with AKM was used for an association
  * added eap_sim_id parameter to allow EAP-SIM/AKA server pseudonym and
    fast reauthentication use to be disabled
  * fixed an ECDH operation corner case with OpenSSL</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1587643200">- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass
  (bsc#1150934)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1601380800">- Add CVE-2020-12695.patch -- UPnP SUBSCRIBE misbehavior in hostapd WPS AP
  (bsc#1172700)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1614081600">- added AppArmor profile (source apparmor-usr.sbin.hostapd)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1617710400">- Add CVE-2021-30004.patch -- forging attacks may occur because
  AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c
  (bsc#1184348)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1626264000">- fixed AppArmor profile</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hostapd.service</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1637928000">- Fix AppArmor profile -- allow access to /etc/ssl/openssl.cnf
  (bsc#1192959)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1642420800">- Removed obsolete patches:
  * CVE-2019-16275.patch
  * CVE-2020-12695.patch
  * CVE-2021-30004.patch
- Update to version 2.10
  * SAE changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  - added option send SAE Confirm immediately (sae_config_immediate=1)
    after SAE Commit
  - added support for the hash-to-element mechanism (sae_pwe=1 or
    sae_pwe=2)
  - fixed PMKSA caching with OKC
  - added support for SAE-PK
  * EAP-pwd changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  * fixed WPS UPnP SUBSCRIBE handling of invalid operations
    [https://w1.fi/security/2020-1/]
  * fixed PMF disconnection protection bypass
    [https://w1.fi/security/2019-7/]
  * added support for using OpenSSL 3.0
  * fixed various issues in experimental support for EAP-TEAP server
  * added configuration (max_auth_rounds, max_auth_rounds_short) to
    increase the maximum number of EAP message exchanges (mainly to
    support cases with very large certificates) for the EAP server
  * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol)
  * extended HE (IEEE 802.11ax) support, including 6 GHz support
  * removed obsolete IAPP functionality
  * fixed EAP-FAST server with TLS GCM/CCM ciphers
  * dropped support for libnl 1.1
  * added support for nl80211 control port for EAPOL frame TX/RX
  * fixed OWE key derivation with groups 20 and 21; this breaks backwards
    compatibility for these groups while the default group 19 remains
    backwards compatible; owe_ptk_workaround=1 can be used to enabled a
    a workaround for the group 20/21 backwards compatibility
  * added support for Beacon protection
  * added support for Extended Key ID for pairwise keys
  * removed WEP support from the default build (CONFIG_WEP=y can be used
    to enable it, if really needed)
  * added a build option to remove TKIP support (CONFIG_NO_TKIP=y)
  * added support for Transition Disable mechanism to allow the AP to
    automatically disable transition mode to improve security
  * added support for PASN
  * added EAP-TLS server support for TLS 1.3 (disabled by default for now)
  * a large number of other fixes, cleanup, and extensions</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1647000000">- Adjust config
  * Enable SAE
  * Enable DPP
  * Enable wired driver
  * Enable Airtime policy support
  * Enable Fast Initial Link Setup (FILS) (IEEE 802.11ai)</changelog>
  <changelog author="chris@computersalat.de" date="1723118400">- 2024-07-20 - v2.11
  * Wi-Fi Easy Connect
  - add support for DPP release 3
  - allow Configurator parameters to be provided during config
    exchange
  * HE/IEEE 802.11ax/Wi-Fi 6
  - various fixes
  * EHT/IEEE 802.11be/Wi-Fi 7
  - add preliminary support
  * SAE: add support for fetching the password from a RADIUS server
  * support OpenSSL 3.0 API changes
  * support background radar detection and CAC with some additional
    drivers
  * support RADIUS ACL/PSK check during 4-way handshake (wpa_psk_radius=3)
  * EAP-SIM/AKA: support IMSI privacy
  * improve 4-way handshake operations
  - use Secure=1 in message 3 during PTK rekeying
  * OCV: do not check Frequency Segment 1 Channel Number for 160 MHz cases
    to avoid interoperability issues
  * support new SAE AKM suites with variable length keys
  * support new AKM for 802.1X/EAP with SHA384
  * extend PASN support for secure ranging
  * FT: Use SHA256 to derive PMKID for AKM 00-0F-AC:3 (FT-EAP)
  - this is based on additional details being added in the IEEE 802.11
    standard
  - the new implementation is not backwards compatible
  * improved ACS to cover additional channel types/bandwidths
  * extended Multiple BSSID support
  * fix beacon protection with FT protocol (incorrect BIGTK was provided)
  * support unsynchronized service discovery (USD)
  * add preliminary support for RADIUS/TLS
  * add support for explicit SSID protection in 4-way handshake
    (a mitigation for CVE-2023-52424; disabled by default for now, can be
    enabled with ssid_protection=1)
  * fix SAE H2E rejected groups validation to avoid downgrade attacks
  * use stricter validation for some RADIUS messages
  * a large number of other fixes, cleanup, and extensions</changelog>
</package>
<package pkgid="8e6299a1b02097e872486bfa1fb59d6e4588644b7ffbcc748ec7e83068233eac" name="hostapd" arch="ppc64le">
  <version epoch="0" ver="2.11" rel="bp156.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539950400">- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
  Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).</changelog>
  <changelog author="mardnh@gmx.de" date="1544184000">- Update to version 2.7
  * fixed WPA packet number reuse with replayed messages and key
    reinstallation
    [http://w1.fi/security/2017-1/] (CVE-2017-13082) (bsc#1056061)
  * added support for FILS (IEEE 802.11ai) shared key authentication
  * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;
    and transition mode defined by WFA)
  * added support for DPP (Wi-Fi Device Provisioning Protocol)
  * FT:
  - added local generation of PMK-R0/PMK-R1 for FT-PSK
    (ft_psk_generate_local=1)
  - replaced inter-AP protocol with a cleaner design that is more
    easily extensible; this breaks backward compatibility and requires
    all APs in the ESS to be updated at the same time to maintain FT
    functionality
  - added support for wildcard R0KH/R1KH
  - replaced r0_key_lifetime (minutes) parameter with
    ft_r0_key_lifetime (seconds)
  - fixed wpa_psk_file use for FT-PSK
  - fixed FT-SAE PMKID matching
  - added expiration to PMK-R0 and PMK-R1 cache
  - added IEEE VLAN support (including tagged VLANs)
  - added support for SHA384 based AKM
  * SAE
  - fixed some PMKSA caching cases with SAE
  - added support for configuring SAE password separately of the
    WPA2 PSK/passphrase
  - added option to require MFP for SAE associations
    (sae_require_pmf=1)
  - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection
    for SAE;
    note: this is not backwards compatible, i.e., both the AP and
    station side implementations will need to be update at the same
    time to maintain interoperability
  - added support for Password Identifier
  * hostapd_cli: added support for command history and completion
  * added support for requesting beacon report
  * large number of other fixes, cleanup, and extensions
  * added option to configure EAPOL-Key retry limits
    (wpa_group_update_count and wpa_pairwise_update_count)
  * removed all PeerKey functionality
  * fixed nl80211 AP mode configuration regression with Linux 4.15 and
    newer
  * added support for using wolfSSL cryptographic library
  * fixed some 20/40 MHz coexistence cases where the BSS could drop to
    20 MHz even when 40 MHz would be allowed
  * Hotspot 2.0
  - added support for setting Venue URL ANQP-element (venue_url)
  - added support for advertising Hotspot 2.0 operator icons
  - added support for Roaming Consortium Selection element
  - added support for Terms and Conditions
  - added support for OSEN connection in a shared RSN BSS
  * added support for using OpenSSL 1.1.1
  * added EAP-pwd server support for salted passwords
- Remove not longer needed patches (fixed upstream)
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch
  * rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
- Verify source signature</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545048000">- Applied spec-cleaner
- Added bug reference
- Use defconfig file as template for configuration instead of patching it
  during build. This is easier to maintain in the long run. This removes the
  patch hostapd-2.6-defconfig.patch in favor of a simple config file, which is
  copied over from the source directory.
- Enabled CLI editing and history support.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545998400">- Use noun phrase in summary.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1556107200">- Update to version 2.8
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only group 19
    (i.e., disable groups 20, 21, 25, 26 from default configuration) and
    disable all unsuitable groups completely based on REVmd changes
  - improved anti-clogging token mechanism and SAE authentication
    frame processing during heavy CPU load; this mitigates some issues
    with potential DoS attacks trying to flood an AP with large number
    of SAE messages
  - added Finite Cyclic Group field in status code 77 responses
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  - fixed confirm message validation in error cases
    [https://w1.fi/security/2019-3/] (CVE-2019-9496)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify peer scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9497 and CVE-2019-9498)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * Hotspot 2.0 changes
  - added support for release number 3
  - reject release 2 or newer association without PMF
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and configuration parameter ocv=1)
  * added Multi-AP protocol support
  * added FTM responder configuration
  * fixed build with LibreSSL
  * added FT/RRB workaround for short Ethernet frame padding
  * fixed KEK2 derivation for FILS+FT
  * added RSSI-based association rejection from OCE
  * extended beacon reporting functionality
  * VLAN changes
  - allow local VLAN management with remote RADIUS authentication
  - add WPA/WPA2 passphrase/PSK -based VLAN assignment
  * OpenSSL: allow systemwide policies to be overridden
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * fixed FT and SA Query Action frame with AP-MLME-in-driver cases
  * OWE: allow Diffie-Hellman Parameter element to be included with DPP
    in preparation for DPP protocol extension
  * RADIUS server: started to accept ERP keyName-NAI as user identity
    automatically without matching EAP database entry
  * fixed PTK rekeying with FILS and FT
  wpa_supplicant:
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only groups 19, 20, 21
    (i.e., disable groups 25 and 26) and disable all unsuitable groups
    completely based on REVmd changes
  - do not regenerate PWE unnecessarily when the AP uses the
    anti-clogging token mechanisms
  - fixed some association cases where both SAE and FT-SAE were enabled
    on both the station and the selected AP
  - started to prefer FT-SAE over SAE AKM if both are enabled
  - started to prefer FT-SAE over FT-PSK if both are enabled
  - fixed FT-SAE when SAE PMKSA caching is used
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify server scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9499)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y
  * Hotspot 2.0 changes
  - do not indicate release number that is higher than the one
    AP supports
  - added support for release number 3
  - enable PMF automatically for network profiles created from
    credentials
  * fixed OWE network profile saving
  * fixed DPP network profile saving
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and network profile parameter ocv=1)
  * added Multi-AP backhaul STA support
  * fixed build with LibreSSL
  * number of MKA/MACsec fixes and extensions
  * extended domain_match and domain_suffix_match to allow list of values
  * fixed dNSName matching in domain_match and domain_suffix_match when
    using wolfSSL
  * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both
    are enabled
  * extended nl80211 Connect and external authentication to support
    SAE, FT-SAE, FT-EAP-SHA384
  * fixed KEK2 derivation for FILS+FT
  * extended client_cert file to allow loading of a chain of PEM
    encoded certificates
  * extended beacon reporting functionality
  * extended D-Bus interface with number of new properties
  * fixed a regression in FT-over-DS with mac80211-based drivers
  * OpenSSL: allow systemwide policies to be overridden
  * extended driver flags indication for separate 802.1X and PSK
    4-way handshake offload capability
  * added support for random P2P Device/Interface Address use
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)
  * extended domain_match and domain_suffix_match to allow list of values
  * added a RSN workaround for misbehaving PMF APs that advertise
    IGTK/BIP KeyID using incorrect byte order
  * fixed PTK rekeying with FILS and FT</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1567684800">- Update to version 2.9
  * SAE changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * EAP-pwd changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * fixed FT-EAP initial mobility domain association using PMKSA caching
  * added configuration of airtime policy
  * fixed FILS to and RSNE into (Re)Association Response frames
  * fixed DPP bootstrapping URI parser of channel list
  * added support for regulatory WMM limitation (for ETSI)
  * added support for MACsec Key Agreement using IEEE 802.1X/PSK
  * added experimental support for EAP-TEAP server (RFC 7170)
  * added experimental support for EAP-TLS server with TLS v1.3
  * added support for two server certificates/keys (RSA/ECC)
  * added AKMSuiteSelector into "STA &lt;addr&gt;" control interface data to
    determine with AKM was used for an association
  * added eap_sim_id parameter to allow EAP-SIM/AKA server pseudonym and
    fast reauthentication use to be disabled
  * fixed an ECDH operation corner case with OpenSSL</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1587643200">- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass
  (bsc#1150934)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1601380800">- Add CVE-2020-12695.patch -- UPnP SUBSCRIBE misbehavior in hostapd WPS AP
  (bsc#1172700)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1614081600">- added AppArmor profile (source apparmor-usr.sbin.hostapd)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1617710400">- Add CVE-2021-30004.patch -- forging attacks may occur because
  AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c
  (bsc#1184348)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1626264000">- fixed AppArmor profile</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hostapd.service</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1637928000">- Fix AppArmor profile -- allow access to /etc/ssl/openssl.cnf
  (bsc#1192959)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1642420800">- Removed obsolete patches:
  * CVE-2019-16275.patch
  * CVE-2020-12695.patch
  * CVE-2021-30004.patch
- Update to version 2.10
  * SAE changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  - added option send SAE Confirm immediately (sae_config_immediate=1)
    after SAE Commit
  - added support for the hash-to-element mechanism (sae_pwe=1 or
    sae_pwe=2)
  - fixed PMKSA caching with OKC
  - added support for SAE-PK
  * EAP-pwd changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  * fixed WPS UPnP SUBSCRIBE handling of invalid operations
    [https://w1.fi/security/2020-1/]
  * fixed PMF disconnection protection bypass
    [https://w1.fi/security/2019-7/]
  * added support for using OpenSSL 3.0
  * fixed various issues in experimental support for EAP-TEAP server
  * added configuration (max_auth_rounds, max_auth_rounds_short) to
    increase the maximum number of EAP message exchanges (mainly to
    support cases with very large certificates) for the EAP server
  * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol)
  * extended HE (IEEE 802.11ax) support, including 6 GHz support
  * removed obsolete IAPP functionality
  * fixed EAP-FAST server with TLS GCM/CCM ciphers
  * dropped support for libnl 1.1
  * added support for nl80211 control port for EAPOL frame TX/RX
  * fixed OWE key derivation with groups 20 and 21; this breaks backwards
    compatibility for these groups while the default group 19 remains
    backwards compatible; owe_ptk_workaround=1 can be used to enabled a
    a workaround for the group 20/21 backwards compatibility
  * added support for Beacon protection
  * added support for Extended Key ID for pairwise keys
  * removed WEP support from the default build (CONFIG_WEP=y can be used
    to enable it, if really needed)
  * added a build option to remove TKIP support (CONFIG_NO_TKIP=y)
  * added support for Transition Disable mechanism to allow the AP to
    automatically disable transition mode to improve security
  * added support for PASN
  * added EAP-TLS server support for TLS 1.3 (disabled by default for now)
  * a large number of other fixes, cleanup, and extensions</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1647000000">- Adjust config
  * Enable SAE
  * Enable DPP
  * Enable wired driver
  * Enable Airtime policy support
  * Enable Fast Initial Link Setup (FILS) (IEEE 802.11ai)</changelog>
  <changelog author="chris@computersalat.de" date="1723118400">- 2024-07-20 - v2.11
  * Wi-Fi Easy Connect
  - add support for DPP release 3
  - allow Configurator parameters to be provided during config
    exchange
  * HE/IEEE 802.11ax/Wi-Fi 6
  - various fixes
  * EHT/IEEE 802.11be/Wi-Fi 7
  - add preliminary support
  * SAE: add support for fetching the password from a RADIUS server
  * support OpenSSL 3.0 API changes
  * support background radar detection and CAC with some additional
    drivers
  * support RADIUS ACL/PSK check during 4-way handshake (wpa_psk_radius=3)
  * EAP-SIM/AKA: support IMSI privacy
  * improve 4-way handshake operations
  - use Secure=1 in message 3 during PTK rekeying
  * OCV: do not check Frequency Segment 1 Channel Number for 160 MHz cases
    to avoid interoperability issues
  * support new SAE AKM suites with variable length keys
  * support new AKM for 802.1X/EAP with SHA384
  * extend PASN support for secure ranging
  * FT: Use SHA256 to derive PMKID for AKM 00-0F-AC:3 (FT-EAP)
  - this is based on additional details being added in the IEEE 802.11
    standard
  - the new implementation is not backwards compatible
  * improved ACS to cover additional channel types/bandwidths
  * extended Multiple BSSID support
  * fix beacon protection with FT protocol (incorrect BIGTK was provided)
  * support unsynchronized service discovery (USD)
  * add preliminary support for RADIUS/TLS
  * add support for explicit SSID protection in 4-way handshake
    (a mitigation for CVE-2023-52424; disabled by default for now, can be
    enabled with ssid_protection=1)
  * fix SAE H2E rejected groups validation to avoid downgrade attacks
  * use stricter validation for some RADIUS messages
  * a large number of other fixes, cleanup, and extensions</changelog>
</package>
<package pkgid="1187c46562716671ff34904ef8eb0cc41e257d7ba1d2279f47d9ec44f61f2497" name="hostapd" arch="s390x">
  <version epoch="0" ver="2.11" rel="bp156.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539950400">- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
  Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).</changelog>
  <changelog author="mardnh@gmx.de" date="1544184000">- Update to version 2.7
  * fixed WPA packet number reuse with replayed messages and key
    reinstallation
    [http://w1.fi/security/2017-1/] (CVE-2017-13082) (bsc#1056061)
  * added support for FILS (IEEE 802.11ai) shared key authentication
  * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;
    and transition mode defined by WFA)
  * added support for DPP (Wi-Fi Device Provisioning Protocol)
  * FT:
  - added local generation of PMK-R0/PMK-R1 for FT-PSK
    (ft_psk_generate_local=1)
  - replaced inter-AP protocol with a cleaner design that is more
    easily extensible; this breaks backward compatibility and requires
    all APs in the ESS to be updated at the same time to maintain FT
    functionality
  - added support for wildcard R0KH/R1KH
  - replaced r0_key_lifetime (minutes) parameter with
    ft_r0_key_lifetime (seconds)
  - fixed wpa_psk_file use for FT-PSK
  - fixed FT-SAE PMKID matching
  - added expiration to PMK-R0 and PMK-R1 cache
  - added IEEE VLAN support (including tagged VLANs)
  - added support for SHA384 based AKM
  * SAE
  - fixed some PMKSA caching cases with SAE
  - added support for configuring SAE password separately of the
    WPA2 PSK/passphrase
  - added option to require MFP for SAE associations
    (sae_require_pmf=1)
  - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection
    for SAE;
    note: this is not backwards compatible, i.e., both the AP and
    station side implementations will need to be update at the same
    time to maintain interoperability
  - added support for Password Identifier
  * hostapd_cli: added support for command history and completion
  * added support for requesting beacon report
  * large number of other fixes, cleanup, and extensions
  * added option to configure EAPOL-Key retry limits
    (wpa_group_update_count and wpa_pairwise_update_count)
  * removed all PeerKey functionality
  * fixed nl80211 AP mode configuration regression with Linux 4.15 and
    newer
  * added support for using wolfSSL cryptographic library
  * fixed some 20/40 MHz coexistence cases where the BSS could drop to
    20 MHz even when 40 MHz would be allowed
  * Hotspot 2.0
  - added support for setting Venue URL ANQP-element (venue_url)
  - added support for advertising Hotspot 2.0 operator icons
  - added support for Roaming Consortium Selection element
  - added support for Terms and Conditions
  - added support for OSEN connection in a shared RSN BSS
  * added support for using OpenSSL 1.1.1
  * added EAP-pwd server support for salted passwords
- Remove not longer needed patches (fixed upstream)
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch
  * rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
- Verify source signature</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545048000">- Applied spec-cleaner
- Added bug reference
- Use defconfig file as template for configuration instead of patching it
  during build. This is easier to maintain in the long run. This removes the
  patch hostapd-2.6-defconfig.patch in favor of a simple config file, which is
  copied over from the source directory.
- Enabled CLI editing and history support.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545998400">- Use noun phrase in summary.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1556107200">- Update to version 2.8
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only group 19
    (i.e., disable groups 20, 21, 25, 26 from default configuration) and
    disable all unsuitable groups completely based on REVmd changes
  - improved anti-clogging token mechanism and SAE authentication
    frame processing during heavy CPU load; this mitigates some issues
    with potential DoS attacks trying to flood an AP with large number
    of SAE messages
  - added Finite Cyclic Group field in status code 77 responses
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  - fixed confirm message validation in error cases
    [https://w1.fi/security/2019-3/] (CVE-2019-9496)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify peer scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9497 and CVE-2019-9498)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * Hotspot 2.0 changes
  - added support for release number 3
  - reject release 2 or newer association without PMF
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and configuration parameter ocv=1)
  * added Multi-AP protocol support
  * added FTM responder configuration
  * fixed build with LibreSSL
  * added FT/RRB workaround for short Ethernet frame padding
  * fixed KEK2 derivation for FILS+FT
  * added RSSI-based association rejection from OCE
  * extended beacon reporting functionality
  * VLAN changes
  - allow local VLAN management with remote RADIUS authentication
  - add WPA/WPA2 passphrase/PSK -based VLAN assignment
  * OpenSSL: allow systemwide policies to be overridden
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * fixed FT and SA Query Action frame with AP-MLME-in-driver cases
  * OWE: allow Diffie-Hellman Parameter element to be included with DPP
    in preparation for DPP protocol extension
  * RADIUS server: started to accept ERP keyName-NAI as user identity
    automatically without matching EAP database entry
  * fixed PTK rekeying with FILS and FT
  wpa_supplicant:
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only groups 19, 20, 21
    (i.e., disable groups 25 and 26) and disable all unsuitable groups
    completely based on REVmd changes
  - do not regenerate PWE unnecessarily when the AP uses the
    anti-clogging token mechanisms
  - fixed some association cases where both SAE and FT-SAE were enabled
    on both the station and the selected AP
  - started to prefer FT-SAE over SAE AKM if both are enabled
  - started to prefer FT-SAE over FT-PSK if both are enabled
  - fixed FT-SAE when SAE PMKSA caching is used
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify server scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9499)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y
  * Hotspot 2.0 changes
  - do not indicate release number that is higher than the one
    AP supports
  - added support for release number 3
  - enable PMF automatically for network profiles created from
    credentials
  * fixed OWE network profile saving
  * fixed DPP network profile saving
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and network profile parameter ocv=1)
  * added Multi-AP backhaul STA support
  * fixed build with LibreSSL
  * number of MKA/MACsec fixes and extensions
  * extended domain_match and domain_suffix_match to allow list of values
  * fixed dNSName matching in domain_match and domain_suffix_match when
    using wolfSSL
  * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both
    are enabled
  * extended nl80211 Connect and external authentication to support
    SAE, FT-SAE, FT-EAP-SHA384
  * fixed KEK2 derivation for FILS+FT
  * extended client_cert file to allow loading of a chain of PEM
    encoded certificates
  * extended beacon reporting functionality
  * extended D-Bus interface with number of new properties
  * fixed a regression in FT-over-DS with mac80211-based drivers
  * OpenSSL: allow systemwide policies to be overridden
  * extended driver flags indication for separate 802.1X and PSK
    4-way handshake offload capability
  * added support for random P2P Device/Interface Address use
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)
  * extended domain_match and domain_suffix_match to allow list of values
  * added a RSN workaround for misbehaving PMF APs that advertise
    IGTK/BIP KeyID using incorrect byte order
  * fixed PTK rekeying with FILS and FT</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1567684800">- Update to version 2.9
  * SAE changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * EAP-pwd changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * fixed FT-EAP initial mobility domain association using PMKSA caching
  * added configuration of airtime policy
  * fixed FILS to and RSNE into (Re)Association Response frames
  * fixed DPP bootstrapping URI parser of channel list
  * added support for regulatory WMM limitation (for ETSI)
  * added support for MACsec Key Agreement using IEEE 802.1X/PSK
  * added experimental support for EAP-TEAP server (RFC 7170)
  * added experimental support for EAP-TLS server with TLS v1.3
  * added support for two server certificates/keys (RSA/ECC)
  * added AKMSuiteSelector into "STA &lt;addr&gt;" control interface data to
    determine with AKM was used for an association
  * added eap_sim_id parameter to allow EAP-SIM/AKA server pseudonym and
    fast reauthentication use to be disabled
  * fixed an ECDH operation corner case with OpenSSL</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1587643200">- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass
  (bsc#1150934)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1601380800">- Add CVE-2020-12695.patch -- UPnP SUBSCRIBE misbehavior in hostapd WPS AP
  (bsc#1172700)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1614081600">- added AppArmor profile (source apparmor-usr.sbin.hostapd)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1617710400">- Add CVE-2021-30004.patch -- forging attacks may occur because
  AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c
  (bsc#1184348)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1626264000">- fixed AppArmor profile</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hostapd.service</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1637928000">- Fix AppArmor profile -- allow access to /etc/ssl/openssl.cnf
  (bsc#1192959)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1642420800">- Removed obsolete patches:
  * CVE-2019-16275.patch
  * CVE-2020-12695.patch
  * CVE-2021-30004.patch
- Update to version 2.10
  * SAE changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  - added option send SAE Confirm immediately (sae_config_immediate=1)
    after SAE Commit
  - added support for the hash-to-element mechanism (sae_pwe=1 or
    sae_pwe=2)
  - fixed PMKSA caching with OKC
  - added support for SAE-PK
  * EAP-pwd changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  * fixed WPS UPnP SUBSCRIBE handling of invalid operations
    [https://w1.fi/security/2020-1/]
  * fixed PMF disconnection protection bypass
    [https://w1.fi/security/2019-7/]
  * added support for using OpenSSL 3.0
  * fixed various issues in experimental support for EAP-TEAP server
  * added configuration (max_auth_rounds, max_auth_rounds_short) to
    increase the maximum number of EAP message exchanges (mainly to
    support cases with very large certificates) for the EAP server
  * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol)
  * extended HE (IEEE 802.11ax) support, including 6 GHz support
  * removed obsolete IAPP functionality
  * fixed EAP-FAST server with TLS GCM/CCM ciphers
  * dropped support for libnl 1.1
  * added support for nl80211 control port for EAPOL frame TX/RX
  * fixed OWE key derivation with groups 20 and 21; this breaks backwards
    compatibility for these groups while the default group 19 remains
    backwards compatible; owe_ptk_workaround=1 can be used to enabled a
    a workaround for the group 20/21 backwards compatibility
  * added support for Beacon protection
  * added support for Extended Key ID for pairwise keys
  * removed WEP support from the default build (CONFIG_WEP=y can be used
    to enable it, if really needed)
  * added a build option to remove TKIP support (CONFIG_NO_TKIP=y)
  * added support for Transition Disable mechanism to allow the AP to
    automatically disable transition mode to improve security
  * added support for PASN
  * added EAP-TLS server support for TLS 1.3 (disabled by default for now)
  * a large number of other fixes, cleanup, and extensions</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1647000000">- Adjust config
  * Enable SAE
  * Enable DPP
  * Enable wired driver
  * Enable Airtime policy support
  * Enable Fast Initial Link Setup (FILS) (IEEE 802.11ai)</changelog>
  <changelog author="chris@computersalat.de" date="1723118400">- 2024-07-20 - v2.11
  * Wi-Fi Easy Connect
  - add support for DPP release 3
  - allow Configurator parameters to be provided during config
    exchange
  * HE/IEEE 802.11ax/Wi-Fi 6
  - various fixes
  * EHT/IEEE 802.11be/Wi-Fi 7
  - add preliminary support
  * SAE: add support for fetching the password from a RADIUS server
  * support OpenSSL 3.0 API changes
  * support background radar detection and CAC with some additional
    drivers
  * support RADIUS ACL/PSK check during 4-way handshake (wpa_psk_radius=3)
  * EAP-SIM/AKA: support IMSI privacy
  * improve 4-way handshake operations
  - use Secure=1 in message 3 during PTK rekeying
  * OCV: do not check Frequency Segment 1 Channel Number for 160 MHz cases
    to avoid interoperability issues
  * support new SAE AKM suites with variable length keys
  * support new AKM for 802.1X/EAP with SHA384
  * extend PASN support for secure ranging
  * FT: Use SHA256 to derive PMKID for AKM 00-0F-AC:3 (FT-EAP)
  - this is based on additional details being added in the IEEE 802.11
    standard
  - the new implementation is not backwards compatible
  * improved ACS to cover additional channel types/bandwidths
  * extended Multiple BSSID support
  * fix beacon protection with FT protocol (incorrect BIGTK was provided)
  * support unsynchronized service discovery (USD)
  * add preliminary support for RADIUS/TLS
  * add support for explicit SSID protection in 4-way handshake
    (a mitigation for CVE-2023-52424; disabled by default for now, can be
    enabled with ssid_protection=1)
  * fix SAE H2E rejected groups validation to avoid downgrade attacks
  * use stricter validation for some RADIUS messages
  * a large number of other fixes, cleanup, and extensions</changelog>
</package>
<package pkgid="9f5c5f6d512255cdeeaa3fc4078d58059e633d83edc72ef4a5d485c4886a6c8a" name="hostapd" arch="src">
  <version epoch="0" ver="2.11" rel="bp156.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539950400">- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
  Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).</changelog>
  <changelog author="mardnh@gmx.de" date="1544184000">- Update to version 2.7
  * fixed WPA packet number reuse with replayed messages and key
    reinstallation
    [http://w1.fi/security/2017-1/] (CVE-2017-13082) (bsc#1056061)
  * added support for FILS (IEEE 802.11ai) shared key authentication
  * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;
    and transition mode defined by WFA)
  * added support for DPP (Wi-Fi Device Provisioning Protocol)
  * FT:
  - added local generation of PMK-R0/PMK-R1 for FT-PSK
    (ft_psk_generate_local=1)
  - replaced inter-AP protocol with a cleaner design that is more
    easily extensible; this breaks backward compatibility and requires
    all APs in the ESS to be updated at the same time to maintain FT
    functionality
  - added support for wildcard R0KH/R1KH
  - replaced r0_key_lifetime (minutes) parameter with
    ft_r0_key_lifetime (seconds)
  - fixed wpa_psk_file use for FT-PSK
  - fixed FT-SAE PMKID matching
  - added expiration to PMK-R0 and PMK-R1 cache
  - added IEEE VLAN support (including tagged VLANs)
  - added support for SHA384 based AKM
  * SAE
  - fixed some PMKSA caching cases with SAE
  - added support for configuring SAE password separately of the
    WPA2 PSK/passphrase
  - added option to require MFP for SAE associations
    (sae_require_pmf=1)
  - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection
    for SAE;
    note: this is not backwards compatible, i.e., both the AP and
    station side implementations will need to be update at the same
    time to maintain interoperability
  - added support for Password Identifier
  * hostapd_cli: added support for command history and completion
  * added support for requesting beacon report
  * large number of other fixes, cleanup, and extensions
  * added option to configure EAPOL-Key retry limits
    (wpa_group_update_count and wpa_pairwise_update_count)
  * removed all PeerKey functionality
  * fixed nl80211 AP mode configuration regression with Linux 4.15 and
    newer
  * added support for using wolfSSL cryptographic library
  * fixed some 20/40 MHz coexistence cases where the BSS could drop to
    20 MHz even when 40 MHz would be allowed
  * Hotspot 2.0
  - added support for setting Venue URL ANQP-element (venue_url)
  - added support for advertising Hotspot 2.0 operator icons
  - added support for Roaming Consortium Selection element
  - added support for Terms and Conditions
  - added support for OSEN connection in a shared RSN BSS
  * added support for using OpenSSL 1.1.1
  * added EAP-pwd server support for salted passwords
- Remove not longer needed patches (fixed upstream)
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch
  * rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
- Verify source signature</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545048000">- Applied spec-cleaner
- Added bug reference
- Use defconfig file as template for configuration instead of patching it
  during build. This is easier to maintain in the long run. This removes the
  patch hostapd-2.6-defconfig.patch in favor of a simple config file, which is
  copied over from the source directory.
- Enabled CLI editing and history support.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545998400">- Use noun phrase in summary.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1556107200">- Update to version 2.8
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only group 19
    (i.e., disable groups 20, 21, 25, 26 from default configuration) and
    disable all unsuitable groups completely based on REVmd changes
  - improved anti-clogging token mechanism and SAE authentication
    frame processing during heavy CPU load; this mitigates some issues
    with potential DoS attacks trying to flood an AP with large number
    of SAE messages
  - added Finite Cyclic Group field in status code 77 responses
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  - fixed confirm message validation in error cases
    [https://w1.fi/security/2019-3/] (CVE-2019-9496)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify peer scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9497 and CVE-2019-9498)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * Hotspot 2.0 changes
  - added support for release number 3
  - reject release 2 or newer association without PMF
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and configuration parameter ocv=1)
  * added Multi-AP protocol support
  * added FTM responder configuration
  * fixed build with LibreSSL
  * added FT/RRB workaround for short Ethernet frame padding
  * fixed KEK2 derivation for FILS+FT
  * added RSSI-based association rejection from OCE
  * extended beacon reporting functionality
  * VLAN changes
  - allow local VLAN management with remote RADIUS authentication
  - add WPA/WPA2 passphrase/PSK -based VLAN assignment
  * OpenSSL: allow systemwide policies to be overridden
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * fixed FT and SA Query Action frame with AP-MLME-in-driver cases
  * OWE: allow Diffie-Hellman Parameter element to be included with DPP
    in preparation for DPP protocol extension
  * RADIUS server: started to accept ERP keyName-NAI as user identity
    automatically without matching EAP database entry
  * fixed PTK rekeying with FILS and FT
  wpa_supplicant:
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only groups 19, 20, 21
    (i.e., disable groups 25 and 26) and disable all unsuitable groups
    completely based on REVmd changes
  - do not regenerate PWE unnecessarily when the AP uses the
    anti-clogging token mechanisms
  - fixed some association cases where both SAE and FT-SAE were enabled
    on both the station and the selected AP
  - started to prefer FT-SAE over SAE AKM if both are enabled
  - started to prefer FT-SAE over FT-PSK if both are enabled
  - fixed FT-SAE when SAE PMKSA caching is used
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify server scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9499)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y
  * Hotspot 2.0 changes
  - do not indicate release number that is higher than the one
    AP supports
  - added support for release number 3
  - enable PMF automatically for network profiles created from
    credentials
  * fixed OWE network profile saving
  * fixed DPP network profile saving
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and network profile parameter ocv=1)
  * added Multi-AP backhaul STA support
  * fixed build with LibreSSL
  * number of MKA/MACsec fixes and extensions
  * extended domain_match and domain_suffix_match to allow list of values
  * fixed dNSName matching in domain_match and domain_suffix_match when
    using wolfSSL
  * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both
    are enabled
  * extended nl80211 Connect and external authentication to support
    SAE, FT-SAE, FT-EAP-SHA384
  * fixed KEK2 derivation for FILS+FT
  * extended client_cert file to allow loading of a chain of PEM
    encoded certificates
  * extended beacon reporting functionality
  * extended D-Bus interface with number of new properties
  * fixed a regression in FT-over-DS with mac80211-based drivers
  * OpenSSL: allow systemwide policies to be overridden
  * extended driver flags indication for separate 802.1X and PSK
    4-way handshake offload capability
  * added support for random P2P Device/Interface Address use
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)
  * extended domain_match and domain_suffix_match to allow list of values
  * added a RSN workaround for misbehaving PMF APs that advertise
    IGTK/BIP KeyID using incorrect byte order
  * fixed PTK rekeying with FILS and FT</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1567684800">- Update to version 2.9
  * SAE changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * EAP-pwd changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * fixed FT-EAP initial mobility domain association using PMKSA caching
  * added configuration of airtime policy
  * fixed FILS to and RSNE into (Re)Association Response frames
  * fixed DPP bootstrapping URI parser of channel list
  * added support for regulatory WMM limitation (for ETSI)
  * added support for MACsec Key Agreement using IEEE 802.1X/PSK
  * added experimental support for EAP-TEAP server (RFC 7170)
  * added experimental support for EAP-TLS server with TLS v1.3
  * added support for two server certificates/keys (RSA/ECC)
  * added AKMSuiteSelector into "STA &lt;addr&gt;" control interface data to
    determine with AKM was used for an association
  * added eap_sim_id parameter to allow EAP-SIM/AKA server pseudonym and
    fast reauthentication use to be disabled
  * fixed an ECDH operation corner case with OpenSSL</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1587643200">- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass
  (bsc#1150934)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1601380800">- Add CVE-2020-12695.patch -- UPnP SUBSCRIBE misbehavior in hostapd WPS AP
  (bsc#1172700)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1614081600">- added AppArmor profile (source apparmor-usr.sbin.hostapd)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1617710400">- Add CVE-2021-30004.patch -- forging attacks may occur because
  AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c
  (bsc#1184348)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1626264000">- fixed AppArmor profile</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hostapd.service</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1637928000">- Fix AppArmor profile -- allow access to /etc/ssl/openssl.cnf
  (bsc#1192959)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1642420800">- Removed obsolete patches:
  * CVE-2019-16275.patch
  * CVE-2020-12695.patch
  * CVE-2021-30004.patch
- Update to version 2.10
  * SAE changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  - added option send SAE Confirm immediately (sae_config_immediate=1)
    after SAE Commit
  - added support for the hash-to-element mechanism (sae_pwe=1 or
    sae_pwe=2)
  - fixed PMKSA caching with OKC
  - added support for SAE-PK
  * EAP-pwd changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  * fixed WPS UPnP SUBSCRIBE handling of invalid operations
    [https://w1.fi/security/2020-1/]
  * fixed PMF disconnection protection bypass
    [https://w1.fi/security/2019-7/]
  * added support for using OpenSSL 3.0
  * fixed various issues in experimental support for EAP-TEAP server
  * added configuration (max_auth_rounds, max_auth_rounds_short) to
    increase the maximum number of EAP message exchanges (mainly to
    support cases with very large certificates) for the EAP server
  * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol)
  * extended HE (IEEE 802.11ax) support, including 6 GHz support
  * removed obsolete IAPP functionality
  * fixed EAP-FAST server with TLS GCM/CCM ciphers
  * dropped support for libnl 1.1
  * added support for nl80211 control port for EAPOL frame TX/RX
  * fixed OWE key derivation with groups 20 and 21; this breaks backwards
    compatibility for these groups while the default group 19 remains
    backwards compatible; owe_ptk_workaround=1 can be used to enabled a
    a workaround for the group 20/21 backwards compatibility
  * added support for Beacon protection
  * added support for Extended Key ID for pairwise keys
  * removed WEP support from the default build (CONFIG_WEP=y can be used
    to enable it, if really needed)
  * added a build option to remove TKIP support (CONFIG_NO_TKIP=y)
  * added support for Transition Disable mechanism to allow the AP to
    automatically disable transition mode to improve security
  * added support for PASN
  * added EAP-TLS server support for TLS 1.3 (disabled by default for now)
  * a large number of other fixes, cleanup, and extensions</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1647000000">- Adjust config
  * Enable SAE
  * Enable DPP
  * Enable wired driver
  * Enable Airtime policy support
  * Enable Fast Initial Link Setup (FILS) (IEEE 802.11ai)</changelog>
  <changelog author="chris@computersalat.de" date="1723118400">- 2024-07-20 - v2.11
  * Wi-Fi Easy Connect
  - add support for DPP release 3
  - allow Configurator parameters to be provided during config
    exchange
  * HE/IEEE 802.11ax/Wi-Fi 6
  - various fixes
  * EHT/IEEE 802.11be/Wi-Fi 7
  - add preliminary support
  * SAE: add support for fetching the password from a RADIUS server
  * support OpenSSL 3.0 API changes
  * support background radar detection and CAC with some additional
    drivers
  * support RADIUS ACL/PSK check during 4-way handshake (wpa_psk_radius=3)
  * EAP-SIM/AKA: support IMSI privacy
  * improve 4-way handshake operations
  - use Secure=1 in message 3 during PTK rekeying
  * OCV: do not check Frequency Segment 1 Channel Number for 160 MHz cases
    to avoid interoperability issues
  * support new SAE AKM suites with variable length keys
  * support new AKM for 802.1X/EAP with SHA384
  * extend PASN support for secure ranging
  * FT: Use SHA256 to derive PMKID for AKM 00-0F-AC:3 (FT-EAP)
  - this is based on additional details being added in the IEEE 802.11
    standard
  - the new implementation is not backwards compatible
  * improved ACS to cover additional channel types/bandwidths
  * extended Multiple BSSID support
  * fix beacon protection with FT protocol (incorrect BIGTK was provided)
  * support unsynchronized service discovery (USD)
  * add preliminary support for RADIUS/TLS
  * add support for explicit SSID protection in 4-way handshake
    (a mitigation for CVE-2023-52424; disabled by default for now, can be
    enabled with ssid_protection=1)
  * fix SAE H2E rejected groups validation to avoid downgrade attacks
  * use stricter validation for some RADIUS messages
  * a large number of other fixes, cleanup, and extensions</changelog>
</package>
<package pkgid="af4e2105ecc0cf35c96ae8eab17069d1714b2b808e80ba16bacb8c1883098f9c" name="hostapd" arch="x86_64">
  <version epoch="0" ver="2.11" rel="bp156.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539950400">- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
  Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).</changelog>
  <changelog author="mardnh@gmx.de" date="1544184000">- Update to version 2.7
  * fixed WPA packet number reuse with replayed messages and key
    reinstallation
    [http://w1.fi/security/2017-1/] (CVE-2017-13082) (bsc#1056061)
  * added support for FILS (IEEE 802.11ai) shared key authentication
  * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;
    and transition mode defined by WFA)
  * added support for DPP (Wi-Fi Device Provisioning Protocol)
  * FT:
  - added local generation of PMK-R0/PMK-R1 for FT-PSK
    (ft_psk_generate_local=1)
  - replaced inter-AP protocol with a cleaner design that is more
    easily extensible; this breaks backward compatibility and requires
    all APs in the ESS to be updated at the same time to maintain FT
    functionality
  - added support for wildcard R0KH/R1KH
  - replaced r0_key_lifetime (minutes) parameter with
    ft_r0_key_lifetime (seconds)
  - fixed wpa_psk_file use for FT-PSK
  - fixed FT-SAE PMKID matching
  - added expiration to PMK-R0 and PMK-R1 cache
  - added IEEE VLAN support (including tagged VLANs)
  - added support for SHA384 based AKM
  * SAE
  - fixed some PMKSA caching cases with SAE
  - added support for configuring SAE password separately of the
    WPA2 PSK/passphrase
  - added option to require MFP for SAE associations
    (sae_require_pmf=1)
  - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection
    for SAE;
    note: this is not backwards compatible, i.e., both the AP and
    station side implementations will need to be update at the same
    time to maintain interoperability
  - added support for Password Identifier
  * hostapd_cli: added support for command history and completion
  * added support for requesting beacon report
  * large number of other fixes, cleanup, and extensions
  * added option to configure EAPOL-Key retry limits
    (wpa_group_update_count and wpa_pairwise_update_count)
  * removed all PeerKey functionality
  * fixed nl80211 AP mode configuration regression with Linux 4.15 and
    newer
  * added support for using wolfSSL cryptographic library
  * fixed some 20/40 MHz coexistence cases where the BSS could drop to
    20 MHz even when 40 MHz would be allowed
  * Hotspot 2.0
  - added support for setting Venue URL ANQP-element (venue_url)
  - added support for advertising Hotspot 2.0 operator icons
  - added support for Roaming Consortium Selection element
  - added support for Terms and Conditions
  - added support for OSEN connection in a shared RSN BSS
  * added support for using OpenSSL 1.1.1
  * added EAP-pwd server support for salted passwords
- Remove not longer needed patches (fixed upstream)
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch
  * rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
- Verify source signature</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545048000">- Applied spec-cleaner
- Added bug reference
- Use defconfig file as template for configuration instead of patching it
  during build. This is easier to maintain in the long run. This removes the
  patch hostapd-2.6-defconfig.patch in favor of a simple config file, which is
  copied over from the source directory.
- Enabled CLI editing and history support.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545998400">- Use noun phrase in summary.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1556107200">- Update to version 2.8
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only group 19
    (i.e., disable groups 20, 21, 25, 26 from default configuration) and
    disable all unsuitable groups completely based on REVmd changes
  - improved anti-clogging token mechanism and SAE authentication
    frame processing during heavy CPU load; this mitigates some issues
    with potential DoS attacks trying to flood an AP with large number
    of SAE messages
  - added Finite Cyclic Group field in status code 77 responses
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  - fixed confirm message validation in error cases
    [https://w1.fi/security/2019-3/] (CVE-2019-9496)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify peer scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9497 and CVE-2019-9498)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * Hotspot 2.0 changes
  - added support for release number 3
  - reject release 2 or newer association without PMF
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and configuration parameter ocv=1)
  * added Multi-AP protocol support
  * added FTM responder configuration
  * fixed build with LibreSSL
  * added FT/RRB workaround for short Ethernet frame padding
  * fixed KEK2 derivation for FILS+FT
  * added RSSI-based association rejection from OCE
  * extended beacon reporting functionality
  * VLAN changes
  - allow local VLAN management with remote RADIUS authentication
  - add WPA/WPA2 passphrase/PSK -based VLAN assignment
  * OpenSSL: allow systemwide policies to be overridden
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * fixed FT and SA Query Action frame with AP-MLME-in-driver cases
  * OWE: allow Diffie-Hellman Parameter element to be included with DPP
    in preparation for DPP protocol extension
  * RADIUS server: started to accept ERP keyName-NAI as user identity
    automatically without matching EAP database entry
  * fixed PTK rekeying with FILS and FT
  wpa_supplicant:
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only groups 19, 20, 21
    (i.e., disable groups 25 and 26) and disable all unsuitable groups
    completely based on REVmd changes
  - do not regenerate PWE unnecessarily when the AP uses the
    anti-clogging token mechanisms
  - fixed some association cases where both SAE and FT-SAE were enabled
    on both the station and the selected AP
  - started to prefer FT-SAE over SAE AKM if both are enabled
  - started to prefer FT-SAE over FT-PSK if both are enabled
  - fixed FT-SAE when SAE PMKSA caching is used
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify server scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9499)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y
  * Hotspot 2.0 changes
  - do not indicate release number that is higher than the one
    AP supports
  - added support for release number 3
  - enable PMF automatically for network profiles created from
    credentials
  * fixed OWE network profile saving
  * fixed DPP network profile saving
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and network profile parameter ocv=1)
  * added Multi-AP backhaul STA support
  * fixed build with LibreSSL
  * number of MKA/MACsec fixes and extensions
  * extended domain_match and domain_suffix_match to allow list of values
  * fixed dNSName matching in domain_match and domain_suffix_match when
    using wolfSSL
  * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both
    are enabled
  * extended nl80211 Connect and external authentication to support
    SAE, FT-SAE, FT-EAP-SHA384
  * fixed KEK2 derivation for FILS+FT
  * extended client_cert file to allow loading of a chain of PEM
    encoded certificates
  * extended beacon reporting functionality
  * extended D-Bus interface with number of new properties
  * fixed a regression in FT-over-DS with mac80211-based drivers
  * OpenSSL: allow systemwide policies to be overridden
  * extended driver flags indication for separate 802.1X and PSK
    4-way handshake offload capability
  * added support for random P2P Device/Interface Address use
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)
  * extended domain_match and domain_suffix_match to allow list of values
  * added a RSN workaround for misbehaving PMF APs that advertise
    IGTK/BIP KeyID using incorrect byte order
  * fixed PTK rekeying with FILS and FT</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1567684800">- Update to version 2.9
  * SAE changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * EAP-pwd changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * fixed FT-EAP initial mobility domain association using PMKSA caching
  * added configuration of airtime policy
  * fixed FILS to and RSNE into (Re)Association Response frames
  * fixed DPP bootstrapping URI parser of channel list
  * added support for regulatory WMM limitation (for ETSI)
  * added support for MACsec Key Agreement using IEEE 802.1X/PSK
  * added experimental support for EAP-TEAP server (RFC 7170)
  * added experimental support for EAP-TLS server with TLS v1.3
  * added support for two server certificates/keys (RSA/ECC)
  * added AKMSuiteSelector into "STA &lt;addr&gt;" control interface data to
    determine with AKM was used for an association
  * added eap_sim_id parameter to allow EAP-SIM/AKA server pseudonym and
    fast reauthentication use to be disabled
  * fixed an ECDH operation corner case with OpenSSL</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1587643200">- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass
  (bsc#1150934)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1601380800">- Add CVE-2020-12695.patch -- UPnP SUBSCRIBE misbehavior in hostapd WPS AP
  (bsc#1172700)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1614081600">- added AppArmor profile (source apparmor-usr.sbin.hostapd)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1617710400">- Add CVE-2021-30004.patch -- forging attacks may occur because
  AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c
  (bsc#1184348)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1626264000">- fixed AppArmor profile</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hostapd.service</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1637928000">- Fix AppArmor profile -- allow access to /etc/ssl/openssl.cnf
  (bsc#1192959)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1642420800">- Removed obsolete patches:
  * CVE-2019-16275.patch
  * CVE-2020-12695.patch
  * CVE-2021-30004.patch
- Update to version 2.10
  * SAE changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  - added option send SAE Confirm immediately (sae_config_immediate=1)
    after SAE Commit
  - added support for the hash-to-element mechanism (sae_pwe=1 or
    sae_pwe=2)
  - fixed PMKSA caching with OKC
  - added support for SAE-PK
  * EAP-pwd changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  * fixed WPS UPnP SUBSCRIBE handling of invalid operations
    [https://w1.fi/security/2020-1/]
  * fixed PMF disconnection protection bypass
    [https://w1.fi/security/2019-7/]
  * added support for using OpenSSL 3.0
  * fixed various issues in experimental support for EAP-TEAP server
  * added configuration (max_auth_rounds, max_auth_rounds_short) to
    increase the maximum number of EAP message exchanges (mainly to
    support cases with very large certificates) for the EAP server
  * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol)
  * extended HE (IEEE 802.11ax) support, including 6 GHz support
  * removed obsolete IAPP functionality
  * fixed EAP-FAST server with TLS GCM/CCM ciphers
  * dropped support for libnl 1.1
  * added support for nl80211 control port for EAPOL frame TX/RX
  * fixed OWE key derivation with groups 20 and 21; this breaks backwards
    compatibility for these groups while the default group 19 remains
    backwards compatible; owe_ptk_workaround=1 can be used to enabled a
    a workaround for the group 20/21 backwards compatibility
  * added support for Beacon protection
  * added support for Extended Key ID for pairwise keys
  * removed WEP support from the default build (CONFIG_WEP=y can be used
    to enable it, if really needed)
  * added a build option to remove TKIP support (CONFIG_NO_TKIP=y)
  * added support for Transition Disable mechanism to allow the AP to
    automatically disable transition mode to improve security
  * added support for PASN
  * added EAP-TLS server support for TLS 1.3 (disabled by default for now)
  * a large number of other fixes, cleanup, and extensions</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1647000000">- Adjust config
  * Enable SAE
  * Enable DPP
  * Enable wired driver
  * Enable Airtime policy support
  * Enable Fast Initial Link Setup (FILS) (IEEE 802.11ai)</changelog>
  <changelog author="chris@computersalat.de" date="1723118400">- 2024-07-20 - v2.11
  * Wi-Fi Easy Connect
  - add support for DPP release 3
  - allow Configurator parameters to be provided during config
    exchange
  * HE/IEEE 802.11ax/Wi-Fi 6
  - various fixes
  * EHT/IEEE 802.11be/Wi-Fi 7
  - add preliminary support
  * SAE: add support for fetching the password from a RADIUS server
  * support OpenSSL 3.0 API changes
  * support background radar detection and CAC with some additional
    drivers
  * support RADIUS ACL/PSK check during 4-way handshake (wpa_psk_radius=3)
  * EAP-SIM/AKA: support IMSI privacy
  * improve 4-way handshake operations
  - use Secure=1 in message 3 during PTK rekeying
  * OCV: do not check Frequency Segment 1 Channel Number for 160 MHz cases
    to avoid interoperability issues
  * support new SAE AKM suites with variable length keys
  * support new AKM for 802.1X/EAP with SHA384
  * extend PASN support for secure ranging
  * FT: Use SHA256 to derive PMKID for AKM 00-0F-AC:3 (FT-EAP)
  - this is based on additional details being added in the IEEE 802.11
    standard
  - the new implementation is not backwards compatible
  * improved ACS to cover additional channel types/bandwidths
  * extended Multiple BSSID support
  * fix beacon protection with FT protocol (incorrect BIGTK was provided)
  * support unsynchronized service discovery (USD)
  * add preliminary support for RADIUS/TLS
  * add support for explicit SSID protection in 4-way handshake
    (a mitigation for CVE-2023-52424; disabled by default for now, can be
    enabled with ssid_protection=1)
  * fix SAE H2E rejected groups validation to avoid downgrade attacks
  * use stricter validation for some RADIUS messages
  * a large number of other fixes, cleanup, and extensions</changelog>
</package>
<package pkgid="c7c37202ada86f1c53bc8cd2b7a60f9742237157ea86fe5408a2cfe1c449c5d9" name="htmldoc" arch="aarch64">
  <version epoch="0" ver="1.9.16" rel="bp156.3.3.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1424865600">- update to version 1.8.28:
  * Updated default PDF version to 1.4.
  * SECURITY: Fixed three buffer overflow issues when reading AFM
    files and parsing page sizes.
  * Fixed incompatibility with Fortify's version of strcpy, which
    does not work properly with variable-length arrays (STR #235)
  * Fixed compilation against PNG library 1.5 or later (STR #243)
  * Fixed documentation errors (PR #6593, PR #6595)
  * Marked Zapf-Dingbats as a standard font (STR #198)
  * Fixed GPL license text in GUI (STR #222)
  * Fixed a table formatting problem when a column has multiple
    colspan values (PR #6709)
  * Fixed parsing of HTML comments (STR #181)
  * Fixed potential out-of-bounds read in table-of-contents
    rendering code (STR #183)
  * Fixed handling of image URLs with ampersands in them (STR #186)
  * Fixed top/bottom margins for logo and header/footer images
    (STR #174)
  * Fixed image alignment bug (Bug #231)
  * Fixed X11 build problem (Bug #243)
- add source url
- drop the following patches after upstream fix:
  * htmldoc_CVE-2009-3050_535943.diff
  * htmldoc-fortify.diff
  * htmldoc-libpng15.diff
  * htmldoc-link-x11.patch
- refresh patch htmldoc-docpath.diff
- add patch htmldoc-cups_rand.patch to work around a build error
  (upstream bug #510)
- remove now unused --with-fltk configure options
- set datadir for make install
- do not package doc/ source directory: documentation is already
  provided by htmldoc.pdf
- remove COMPILE.txt from doc: useless in a rpm
- add -q to %setup to avoid spamming the build log</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Cleanup spec file with spec-cleaner
- Use macro for configure</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to new version 1.9.1:
  * Fixed monospace font size issue
  * Added support for reproducible builds
  * Added limited support for the HTML 4.0 SPAN element
  * Added (extremely limited) UTF-8 support for input files
  * Fixed buffer underflow for (invalid) short HTML comments
  * Now indent PRE text, by popular request.
  * EPUB output now makes sure that &lt;element property&gt; is written
    as &lt;element property="property"&gt;.
  * Now support both NAME and ID for table-of-contents targets.
  * Added support for repeating a single header row for tables that
    span multiple pages
  * Added support for embedding the current filename/URL in the
    header or footer
  * Added EPUB support
  * Added Markdown support
  * Fixed a regression in header/footer image scaling
  * Documentation updates
  * Compiler fixes
  * Fixed a bug when running HTMLDOC as a macOS application.
  * Updated the bundled libpng to v1.6.29.
  * And many more
- Drop upstreamed htmldoc-cups_rand.patch and no longer needed
  htmldoc-docpath.diff
- Lots of spec file cleaning
- Use gnutls/gcrypt for crypto support as openssl support is gone</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 1.9.9:
  - Added support for a `HTMLDOC.filename` META keyword that controls the filename
    reported in CGI mode; the default remains "htmldoc.pdf" (Issue #367)
  - Fixed a paragraph formatting issue with large inline images (Issue #369)
  - Fixed a buffer underflow issue (Issue #370)
  - Fixed PDF page numbers (Issue #371)
  - Added support for a new `L` header/footer format (`$LETTERHEAD`), which
    inserts a letterhead image at its full size (Issue #372, Issue #373,
    Issue #375)
  - Updated the build documentation (Issue #374)
  - Refactored the PRE rendering code to work around compiler optimization bugs
  - Added support for links with targets (Issue #351)
  - Fixed a table rowspan + valign bug (Issue #360)
  - Added support for data URIs (Issue #340)
  - HTMLDOC no longer includes a PDF table of contents when converting a single
    web page (Issue #344)
  - Updated the markdown support with external links, additional inline markup,
    and hard line breaks.
  - Links in markdown text no longer render with a leading space as part of the
    link (Issue #346)
  - Fixed a buffer underflow bug discovered by AddressSanitizer.
  - Fixed a bug in UTF-8 support (Issue #348)
  - PDF output now includes the base language of the input document(s)
  - Optimized the loading of font widths (Issue #354)
  - Optimized PDF page resources (Issue #356)
  - Optimized the base memory used for font widths (Issue #357)
  - Added proper `&amp;shy;` support (Issue #361)
  - Title files can now be markdown.
  - The GUI did not support EPUB output.
  - Empty markdown table cells were not rendered in PDF or PostScript output.
  - The automatically-generated title page now supports both "docnumber" and
    "version" metadata.
  - Added support for dc:subject and dc:language metadata in EPUB output from the
    HTML keywords and lang values.
  - Added support for the subject and language metadata in markdown input.
  - Fixed a buffer underflow bug (Issue #338)
  - `htmldoc --help` now reports whether HTTPS URLs are supported (Issue #339)
  - Fixed an issue with HTML title pages and EPUB output.
  - Inline fixed-width text is no longer reduced in size automatically
  - Optimized initialization of font width data (Issue #334)
  - Fixed formatting bugs with aligned images (Issue #322, Issue #324)
  - Fixed support for three digit "#RGB" color values (Issue #323)
  - Fixed character set support for markdown metadata.
  - Updated libpng to v1.6.34 (Issue #326)
  - The makefiles did not use the CPPFLAGS value (Issue #328)
  - Added Markdown table support.
  - Fixed parsing of TBODY, TFOOT, and THEAD elements in HTML files.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611921600">- update to 1.9.11:
  - Added high-resolution desktop icons for Linux.
  - Updated the internal HTTP library to fix truncation of redirection URLs
  - Fixed a regression in the handling of character entities for UTF-8 input
  - The `--numbered` option did not work when the table-of-contents was disabled
  - Updated local zlib to v1.2.11.
  - Updated local libpng to v1.6.37.
  - Fixed packaging issues on macOS and Windows
  - Now ignore sRGB profile errors in PNG files
  - The GUI would crash when saving
  - Page comments are now allowed in `pre` text</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.9.12
  * Fixed buffer-overflow CVE-2021-20308 ( boo#1184424 )
  * Fixed a crash bug with "data:" URIs and EPUB output
  * Fixed several other crash bugs
  * Fixed JPEG error handling
  * Fixed some minor issues
  * Removed the bundled libjpeg, libpng, and zlib.</changelog>
  <changelog author="pgajdos@suse.com" date="1636113600">- security update
- added patches
  fix CVE-2021-40985 [bsc#1192357], buffer overflow may lead to DoS via a crafted BMP image
  + htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1641988800">- Update to version 1.9.14:
  * BMP image support is now deprecated and will be removed in a future
    release of HTMLDOC.
  * Fixed a potential stack overflow bug with GIF images.
  * Fixed the PDF creation date (Issue #455)
  * Fixed a potential stack overflow bug with BMP images (Issue #456)
  * Fixed a compile issue when libpng was not available (Issue #458)
- Update to version 1.9.13:
  * Now install a 32x32 icon for Linux (Issue #432)
  * Fixed an issue with large values for roman numerals and letters in headings (Issue #433)
  * Fixed a crash bug when a HTML comment contains an invalid nul character (Issue #439)
  * Fixed a crash bug with bogus BMP images (Issue #444)
  * Fixed a potential heap overflow bug with bogus GIF images (Issue #451)
  * Fixed a potential stack overflow bug with bogus BMP images (Issue #453)
- Fix CVE-2021-43579 stack-based buffer overflow in image_load_bmp() results in remote code
  execution if the victim converts an HTML document linking to a crafted BMP file.
  (CVE-2021-43579, bsc#1194487)
- Remove upstreamed patch htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644494400">- version update to 1.9.15
  * Fixed a potential heap overflow bug with GIF images (Issue #461)
  * Fixed a potential double-free bug with PNG images (Issue #462)
  * Fixed a potential stack overflow bug with GIF images (Issue #463)
  * Fixed a potential heap underflow bug with empty attributes (Issue #464)
  * Fixed a potential stack overflow bug with BMP images (Issue #466)
  * Fixed a potential heap overflow bug with the table-of-contents (Issue #467)
  * Fixed a potential heap overflow bug with headings (Issue #468)
  * Fixed a potential stack overflow bug with GIF images (Issue #470)</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- security update
- added patches
  fix CVE-2022-28085 [bsc#1198933], Heap buffer overflow in function pdf_write_names in ps-pdf.cxx
  + htmldoc-CVE-2022-28085.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652270400">- security update
- added patches
  fix CVE-2022-27114 [bsc#1199370], image_load_jpeg can cause integer overflow
  + htmldoc-CVE-2022-27114.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- update to 1.9.16:
  * Added support for $DATE(format) and $TIME(format) header/footer strings
  * (Issue #472)
  * Fixed a potential image overflow bug with JPEG and PNG images (htmldoc-CVE-2022-27114.patch)
  * Fixed potential heap overflow bugs with pages (CVE-2022-28085)
  * Fixed potential use-after-free in blocks (Issue #484)
  * Updated the GNU TLS HTTPS support code to use a faster connection shutdown
  * mode (Issue #487)
  * Fixed some minor Coverity warnings.
- drop htmldoc-CVE-2022-27114.patch, htmldoc-CVE-2022-28085.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1725278400">- security update
- added patches
  fix CVE-2024-45508 [bsc#1230022], HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
  + htmldoc-CVE-2024-45508.patch</changelog>
</package>
<package pkgid="18b19a8c5409e2e7a1a58fccff13a57080b67a7bea1733bc23741f5ccca910c9" name="htmldoc" arch="i586">
  <version epoch="0" ver="1.9.16" rel="bp156.3.3.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1424865600">- update to version 1.8.28:
  * Updated default PDF version to 1.4.
  * SECURITY: Fixed three buffer overflow issues when reading AFM
    files and parsing page sizes.
  * Fixed incompatibility with Fortify's version of strcpy, which
    does not work properly with variable-length arrays (STR #235)
  * Fixed compilation against PNG library 1.5 or later (STR #243)
  * Fixed documentation errors (PR #6593, PR #6595)
  * Marked Zapf-Dingbats as a standard font (STR #198)
  * Fixed GPL license text in GUI (STR #222)
  * Fixed a table formatting problem when a column has multiple
    colspan values (PR #6709)
  * Fixed parsing of HTML comments (STR #181)
  * Fixed potential out-of-bounds read in table-of-contents
    rendering code (STR #183)
  * Fixed handling of image URLs with ampersands in them (STR #186)
  * Fixed top/bottom margins for logo and header/footer images
    (STR #174)
  * Fixed image alignment bug (Bug #231)
  * Fixed X11 build problem (Bug #243)
- add source url
- drop the following patches after upstream fix:
  * htmldoc_CVE-2009-3050_535943.diff
  * htmldoc-fortify.diff
  * htmldoc-libpng15.diff
  * htmldoc-link-x11.patch
- refresh patch htmldoc-docpath.diff
- add patch htmldoc-cups_rand.patch to work around a build error
  (upstream bug #510)
- remove now unused --with-fltk configure options
- set datadir for make install
- do not package doc/ source directory: documentation is already
  provided by htmldoc.pdf
- remove COMPILE.txt from doc: useless in a rpm
- add -q to %setup to avoid spamming the build log</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Cleanup spec file with spec-cleaner
- Use macro for configure</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to new version 1.9.1:
  * Fixed monospace font size issue
  * Added support for reproducible builds
  * Added limited support for the HTML 4.0 SPAN element
  * Added (extremely limited) UTF-8 support for input files
  * Fixed buffer underflow for (invalid) short HTML comments
  * Now indent PRE text, by popular request.
  * EPUB output now makes sure that &lt;element property&gt; is written
    as &lt;element property="property"&gt;.
  * Now support both NAME and ID for table-of-contents targets.
  * Added support for repeating a single header row for tables that
    span multiple pages
  * Added support for embedding the current filename/URL in the
    header or footer
  * Added EPUB support
  * Added Markdown support
  * Fixed a regression in header/footer image scaling
  * Documentation updates
  * Compiler fixes
  * Fixed a bug when running HTMLDOC as a macOS application.
  * Updated the bundled libpng to v1.6.29.
  * And many more
- Drop upstreamed htmldoc-cups_rand.patch and no longer needed
  htmldoc-docpath.diff
- Lots of spec file cleaning
- Use gnutls/gcrypt for crypto support as openssl support is gone</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 1.9.9:
  - Added support for a `HTMLDOC.filename` META keyword that controls the filename
    reported in CGI mode; the default remains "htmldoc.pdf" (Issue #367)
  - Fixed a paragraph formatting issue with large inline images (Issue #369)
  - Fixed a buffer underflow issue (Issue #370)
  - Fixed PDF page numbers (Issue #371)
  - Added support for a new `L` header/footer format (`$LETTERHEAD`), which
    inserts a letterhead image at its full size (Issue #372, Issue #373,
    Issue #375)
  - Updated the build documentation (Issue #374)
  - Refactored the PRE rendering code to work around compiler optimization bugs
  - Added support for links with targets (Issue #351)
  - Fixed a table rowspan + valign bug (Issue #360)
  - Added support for data URIs (Issue #340)
  - HTMLDOC no longer includes a PDF table of contents when converting a single
    web page (Issue #344)
  - Updated the markdown support with external links, additional inline markup,
    and hard line breaks.
  - Links in markdown text no longer render with a leading space as part of the
    link (Issue #346)
  - Fixed a buffer underflow bug discovered by AddressSanitizer.
  - Fixed a bug in UTF-8 support (Issue #348)
  - PDF output now includes the base language of the input document(s)
  - Optimized the loading of font widths (Issue #354)
  - Optimized PDF page resources (Issue #356)
  - Optimized the base memory used for font widths (Issue #357)
  - Added proper `&amp;shy;` support (Issue #361)
  - Title files can now be markdown.
  - The GUI did not support EPUB output.
  - Empty markdown table cells were not rendered in PDF or PostScript output.
  - The automatically-generated title page now supports both "docnumber" and
    "version" metadata.
  - Added support for dc:subject and dc:language metadata in EPUB output from the
    HTML keywords and lang values.
  - Added support for the subject and language metadata in markdown input.
  - Fixed a buffer underflow bug (Issue #338)
  - `htmldoc --help` now reports whether HTTPS URLs are supported (Issue #339)
  - Fixed an issue with HTML title pages and EPUB output.
  - Inline fixed-width text is no longer reduced in size automatically
  - Optimized initialization of font width data (Issue #334)
  - Fixed formatting bugs with aligned images (Issue #322, Issue #324)
  - Fixed support for three digit "#RGB" color values (Issue #323)
  - Fixed character set support for markdown metadata.
  - Updated libpng to v1.6.34 (Issue #326)
  - The makefiles did not use the CPPFLAGS value (Issue #328)
  - Added Markdown table support.
  - Fixed parsing of TBODY, TFOOT, and THEAD elements in HTML files.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611921600">- update to 1.9.11:
  - Added high-resolution desktop icons for Linux.
  - Updated the internal HTTP library to fix truncation of redirection URLs
  - Fixed a regression in the handling of character entities for UTF-8 input
  - The `--numbered` option did not work when the table-of-contents was disabled
  - Updated local zlib to v1.2.11.
  - Updated local libpng to v1.6.37.
  - Fixed packaging issues on macOS and Windows
  - Now ignore sRGB profile errors in PNG files
  - The GUI would crash when saving
  - Page comments are now allowed in `pre` text</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.9.12
  * Fixed buffer-overflow CVE-2021-20308 ( boo#1184424 )
  * Fixed a crash bug with "data:" URIs and EPUB output
  * Fixed several other crash bugs
  * Fixed JPEG error handling
  * Fixed some minor issues
  * Removed the bundled libjpeg, libpng, and zlib.</changelog>
  <changelog author="pgajdos@suse.com" date="1636113600">- security update
- added patches
  fix CVE-2021-40985 [bsc#1192357], buffer overflow may lead to DoS via a crafted BMP image
  + htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1641988800">- Update to version 1.9.14:
  * BMP image support is now deprecated and will be removed in a future
    release of HTMLDOC.
  * Fixed a potential stack overflow bug with GIF images.
  * Fixed the PDF creation date (Issue #455)
  * Fixed a potential stack overflow bug with BMP images (Issue #456)
  * Fixed a compile issue when libpng was not available (Issue #458)
- Update to version 1.9.13:
  * Now install a 32x32 icon for Linux (Issue #432)
  * Fixed an issue with large values for roman numerals and letters in headings (Issue #433)
  * Fixed a crash bug when a HTML comment contains an invalid nul character (Issue #439)
  * Fixed a crash bug with bogus BMP images (Issue #444)
  * Fixed a potential heap overflow bug with bogus GIF images (Issue #451)
  * Fixed a potential stack overflow bug with bogus BMP images (Issue #453)
- Fix CVE-2021-43579 stack-based buffer overflow in image_load_bmp() results in remote code
  execution if the victim converts an HTML document linking to a crafted BMP file.
  (CVE-2021-43579, bsc#1194487)
- Remove upstreamed patch htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644494400">- version update to 1.9.15
  * Fixed a potential heap overflow bug with GIF images (Issue #461)
  * Fixed a potential double-free bug with PNG images (Issue #462)
  * Fixed a potential stack overflow bug with GIF images (Issue #463)
  * Fixed a potential heap underflow bug with empty attributes (Issue #464)
  * Fixed a potential stack overflow bug with BMP images (Issue #466)
  * Fixed a potential heap overflow bug with the table-of-contents (Issue #467)
  * Fixed a potential heap overflow bug with headings (Issue #468)
  * Fixed a potential stack overflow bug with GIF images (Issue #470)</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- security update
- added patches
  fix CVE-2022-28085 [bsc#1198933], Heap buffer overflow in function pdf_write_names in ps-pdf.cxx
  + htmldoc-CVE-2022-28085.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652270400">- security update
- added patches
  fix CVE-2022-27114 [bsc#1199370], image_load_jpeg can cause integer overflow
  + htmldoc-CVE-2022-27114.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- update to 1.9.16:
  * Added support for $DATE(format) and $TIME(format) header/footer strings
  * (Issue #472)
  * Fixed a potential image overflow bug with JPEG and PNG images (htmldoc-CVE-2022-27114.patch)
  * Fixed potential heap overflow bugs with pages (CVE-2022-28085)
  * Fixed potential use-after-free in blocks (Issue #484)
  * Updated the GNU TLS HTTPS support code to use a faster connection shutdown
  * mode (Issue #487)
  * Fixed some minor Coverity warnings.
- drop htmldoc-CVE-2022-27114.patch, htmldoc-CVE-2022-28085.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1725278400">- security update
- added patches
  fix CVE-2024-45508 [bsc#1230022], HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
  + htmldoc-CVE-2024-45508.patch</changelog>
</package>
<package pkgid="a7df4d340e8f2eb7f16aa5facd0bf18e57966c2750a862d8b6ee9dae982f6587" name="htmldoc" arch="ppc64le">
  <version epoch="0" ver="1.9.16" rel="bp156.3.3.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1424865600">- update to version 1.8.28:
  * Updated default PDF version to 1.4.
  * SECURITY: Fixed three buffer overflow issues when reading AFM
    files and parsing page sizes.
  * Fixed incompatibility with Fortify's version of strcpy, which
    does not work properly with variable-length arrays (STR #235)
  * Fixed compilation against PNG library 1.5 or later (STR #243)
  * Fixed documentation errors (PR #6593, PR #6595)
  * Marked Zapf-Dingbats as a standard font (STR #198)
  * Fixed GPL license text in GUI (STR #222)
  * Fixed a table formatting problem when a column has multiple
    colspan values (PR #6709)
  * Fixed parsing of HTML comments (STR #181)
  * Fixed potential out-of-bounds read in table-of-contents
    rendering code (STR #183)
  * Fixed handling of image URLs with ampersands in them (STR #186)
  * Fixed top/bottom margins for logo and header/footer images
    (STR #174)
  * Fixed image alignment bug (Bug #231)
  * Fixed X11 build problem (Bug #243)
- add source url
- drop the following patches after upstream fix:
  * htmldoc_CVE-2009-3050_535943.diff
  * htmldoc-fortify.diff
  * htmldoc-libpng15.diff
  * htmldoc-link-x11.patch
- refresh patch htmldoc-docpath.diff
- add patch htmldoc-cups_rand.patch to work around a build error
  (upstream bug #510)
- remove now unused --with-fltk configure options
- set datadir for make install
- do not package doc/ source directory: documentation is already
  provided by htmldoc.pdf
- remove COMPILE.txt from doc: useless in a rpm
- add -q to %setup to avoid spamming the build log</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Cleanup spec file with spec-cleaner
- Use macro for configure</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to new version 1.9.1:
  * Fixed monospace font size issue
  * Added support for reproducible builds
  * Added limited support for the HTML 4.0 SPAN element
  * Added (extremely limited) UTF-8 support for input files
  * Fixed buffer underflow for (invalid) short HTML comments
  * Now indent PRE text, by popular request.
  * EPUB output now makes sure that &lt;element property&gt; is written
    as &lt;element property="property"&gt;.
  * Now support both NAME and ID for table-of-contents targets.
  * Added support for repeating a single header row for tables that
    span multiple pages
  * Added support for embedding the current filename/URL in the
    header or footer
  * Added EPUB support
  * Added Markdown support
  * Fixed a regression in header/footer image scaling
  * Documentation updates
  * Compiler fixes
  * Fixed a bug when running HTMLDOC as a macOS application.
  * Updated the bundled libpng to v1.6.29.
  * And many more
- Drop upstreamed htmldoc-cups_rand.patch and no longer needed
  htmldoc-docpath.diff
- Lots of spec file cleaning
- Use gnutls/gcrypt for crypto support as openssl support is gone</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 1.9.9:
  - Added support for a `HTMLDOC.filename` META keyword that controls the filename
    reported in CGI mode; the default remains "htmldoc.pdf" (Issue #367)
  - Fixed a paragraph formatting issue with large inline images (Issue #369)
  - Fixed a buffer underflow issue (Issue #370)
  - Fixed PDF page numbers (Issue #371)
  - Added support for a new `L` header/footer format (`$LETTERHEAD`), which
    inserts a letterhead image at its full size (Issue #372, Issue #373,
    Issue #375)
  - Updated the build documentation (Issue #374)
  - Refactored the PRE rendering code to work around compiler optimization bugs
  - Added support for links with targets (Issue #351)
  - Fixed a table rowspan + valign bug (Issue #360)
  - Added support for data URIs (Issue #340)
  - HTMLDOC no longer includes a PDF table of contents when converting a single
    web page (Issue #344)
  - Updated the markdown support with external links, additional inline markup,
    and hard line breaks.
  - Links in markdown text no longer render with a leading space as part of the
    link (Issue #346)
  - Fixed a buffer underflow bug discovered by AddressSanitizer.
  - Fixed a bug in UTF-8 support (Issue #348)
  - PDF output now includes the base language of the input document(s)
  - Optimized the loading of font widths (Issue #354)
  - Optimized PDF page resources (Issue #356)
  - Optimized the base memory used for font widths (Issue #357)
  - Added proper `&amp;shy;` support (Issue #361)
  - Title files can now be markdown.
  - The GUI did not support EPUB output.
  - Empty markdown table cells were not rendered in PDF or PostScript output.
  - The automatically-generated title page now supports both "docnumber" and
    "version" metadata.
  - Added support for dc:subject and dc:language metadata in EPUB output from the
    HTML keywords and lang values.
  - Added support for the subject and language metadata in markdown input.
  - Fixed a buffer underflow bug (Issue #338)
  - `htmldoc --help` now reports whether HTTPS URLs are supported (Issue #339)
  - Fixed an issue with HTML title pages and EPUB output.
  - Inline fixed-width text is no longer reduced in size automatically
  - Optimized initialization of font width data (Issue #334)
  - Fixed formatting bugs with aligned images (Issue #322, Issue #324)
  - Fixed support for three digit "#RGB" color values (Issue #323)
  - Fixed character set support for markdown metadata.
  - Updated libpng to v1.6.34 (Issue #326)
  - The makefiles did not use the CPPFLAGS value (Issue #328)
  - Added Markdown table support.
  - Fixed parsing of TBODY, TFOOT, and THEAD elements in HTML files.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611921600">- update to 1.9.11:
  - Added high-resolution desktop icons for Linux.
  - Updated the internal HTTP library to fix truncation of redirection URLs
  - Fixed a regression in the handling of character entities for UTF-8 input
  - The `--numbered` option did not work when the table-of-contents was disabled
  - Updated local zlib to v1.2.11.
  - Updated local libpng to v1.6.37.
  - Fixed packaging issues on macOS and Windows
  - Now ignore sRGB profile errors in PNG files
  - The GUI would crash when saving
  - Page comments are now allowed in `pre` text</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.9.12
  * Fixed buffer-overflow CVE-2021-20308 ( boo#1184424 )
  * Fixed a crash bug with "data:" URIs and EPUB output
  * Fixed several other crash bugs
  * Fixed JPEG error handling
  * Fixed some minor issues
  * Removed the bundled libjpeg, libpng, and zlib.</changelog>
  <changelog author="pgajdos@suse.com" date="1636113600">- security update
- added patches
  fix CVE-2021-40985 [bsc#1192357], buffer overflow may lead to DoS via a crafted BMP image
  + htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1641988800">- Update to version 1.9.14:
  * BMP image support is now deprecated and will be removed in a future
    release of HTMLDOC.
  * Fixed a potential stack overflow bug with GIF images.
  * Fixed the PDF creation date (Issue #455)
  * Fixed a potential stack overflow bug with BMP images (Issue #456)
  * Fixed a compile issue when libpng was not available (Issue #458)
- Update to version 1.9.13:
  * Now install a 32x32 icon for Linux (Issue #432)
  * Fixed an issue with large values for roman numerals and letters in headings (Issue #433)
  * Fixed a crash bug when a HTML comment contains an invalid nul character (Issue #439)
  * Fixed a crash bug with bogus BMP images (Issue #444)
  * Fixed a potential heap overflow bug with bogus GIF images (Issue #451)
  * Fixed a potential stack overflow bug with bogus BMP images (Issue #453)
- Fix CVE-2021-43579 stack-based buffer overflow in image_load_bmp() results in remote code
  execution if the victim converts an HTML document linking to a crafted BMP file.
  (CVE-2021-43579, bsc#1194487)
- Remove upstreamed patch htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644494400">- version update to 1.9.15
  * Fixed a potential heap overflow bug with GIF images (Issue #461)
  * Fixed a potential double-free bug with PNG images (Issue #462)
  * Fixed a potential stack overflow bug with GIF images (Issue #463)
  * Fixed a potential heap underflow bug with empty attributes (Issue #464)
  * Fixed a potential stack overflow bug with BMP images (Issue #466)
  * Fixed a potential heap overflow bug with the table-of-contents (Issue #467)
  * Fixed a potential heap overflow bug with headings (Issue #468)
  * Fixed a potential stack overflow bug with GIF images (Issue #470)</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- security update
- added patches
  fix CVE-2022-28085 [bsc#1198933], Heap buffer overflow in function pdf_write_names in ps-pdf.cxx
  + htmldoc-CVE-2022-28085.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652270400">- security update
- added patches
  fix CVE-2022-27114 [bsc#1199370], image_load_jpeg can cause integer overflow
  + htmldoc-CVE-2022-27114.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- update to 1.9.16:
  * Added support for $DATE(format) and $TIME(format) header/footer strings
  * (Issue #472)
  * Fixed a potential image overflow bug with JPEG and PNG images (htmldoc-CVE-2022-27114.patch)
  * Fixed potential heap overflow bugs with pages (CVE-2022-28085)
  * Fixed potential use-after-free in blocks (Issue #484)
  * Updated the GNU TLS HTTPS support code to use a faster connection shutdown
  * mode (Issue #487)
  * Fixed some minor Coverity warnings.
- drop htmldoc-CVE-2022-27114.patch, htmldoc-CVE-2022-28085.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1725278400">- security update
- added patches
  fix CVE-2024-45508 [bsc#1230022], HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
  + htmldoc-CVE-2024-45508.patch</changelog>
</package>
<package pkgid="dedf3606c24dccb0bd4f343c2bbf25a60560537399a4c30e268ab265f08d78f6" name="htmldoc" arch="s390x">
  <version epoch="0" ver="1.9.16" rel="bp156.3.3.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1424865600">- update to version 1.8.28:
  * Updated default PDF version to 1.4.
  * SECURITY: Fixed three buffer overflow issues when reading AFM
    files and parsing page sizes.
  * Fixed incompatibility with Fortify's version of strcpy, which
    does not work properly with variable-length arrays (STR #235)
  * Fixed compilation against PNG library 1.5 or later (STR #243)
  * Fixed documentation errors (PR #6593, PR #6595)
  * Marked Zapf-Dingbats as a standard font (STR #198)
  * Fixed GPL license text in GUI (STR #222)
  * Fixed a table formatting problem when a column has multiple
    colspan values (PR #6709)
  * Fixed parsing of HTML comments (STR #181)
  * Fixed potential out-of-bounds read in table-of-contents
    rendering code (STR #183)
  * Fixed handling of image URLs with ampersands in them (STR #186)
  * Fixed top/bottom margins for logo and header/footer images
    (STR #174)
  * Fixed image alignment bug (Bug #231)
  * Fixed X11 build problem (Bug #243)
- add source url
- drop the following patches after upstream fix:
  * htmldoc_CVE-2009-3050_535943.diff
  * htmldoc-fortify.diff
  * htmldoc-libpng15.diff
  * htmldoc-link-x11.patch
- refresh patch htmldoc-docpath.diff
- add patch htmldoc-cups_rand.patch to work around a build error
  (upstream bug #510)
- remove now unused --with-fltk configure options
- set datadir for make install
- do not package doc/ source directory: documentation is already
  provided by htmldoc.pdf
- remove COMPILE.txt from doc: useless in a rpm
- add -q to %setup to avoid spamming the build log</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Cleanup spec file with spec-cleaner
- Use macro for configure</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to new version 1.9.1:
  * Fixed monospace font size issue
  * Added support for reproducible builds
  * Added limited support for the HTML 4.0 SPAN element
  * Added (extremely limited) UTF-8 support for input files
  * Fixed buffer underflow for (invalid) short HTML comments
  * Now indent PRE text, by popular request.
  * EPUB output now makes sure that &lt;element property&gt; is written
    as &lt;element property="property"&gt;.
  * Now support both NAME and ID for table-of-contents targets.
  * Added support for repeating a single header row for tables that
    span multiple pages
  * Added support for embedding the current filename/URL in the
    header or footer
  * Added EPUB support
  * Added Markdown support
  * Fixed a regression in header/footer image scaling
  * Documentation updates
  * Compiler fixes
  * Fixed a bug when running HTMLDOC as a macOS application.
  * Updated the bundled libpng to v1.6.29.
  * And many more
- Drop upstreamed htmldoc-cups_rand.patch and no longer needed
  htmldoc-docpath.diff
- Lots of spec file cleaning
- Use gnutls/gcrypt for crypto support as openssl support is gone</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 1.9.9:
  - Added support for a `HTMLDOC.filename` META keyword that controls the filename
    reported in CGI mode; the default remains "htmldoc.pdf" (Issue #367)
  - Fixed a paragraph formatting issue with large inline images (Issue #369)
  - Fixed a buffer underflow issue (Issue #370)
  - Fixed PDF page numbers (Issue #371)
  - Added support for a new `L` header/footer format (`$LETTERHEAD`), which
    inserts a letterhead image at its full size (Issue #372, Issue #373,
    Issue #375)
  - Updated the build documentation (Issue #374)
  - Refactored the PRE rendering code to work around compiler optimization bugs
  - Added support for links with targets (Issue #351)
  - Fixed a table rowspan + valign bug (Issue #360)
  - Added support for data URIs (Issue #340)
  - HTMLDOC no longer includes a PDF table of contents when converting a single
    web page (Issue #344)
  - Updated the markdown support with external links, additional inline markup,
    and hard line breaks.
  - Links in markdown text no longer render with a leading space as part of the
    link (Issue #346)
  - Fixed a buffer underflow bug discovered by AddressSanitizer.
  - Fixed a bug in UTF-8 support (Issue #348)
  - PDF output now includes the base language of the input document(s)
  - Optimized the loading of font widths (Issue #354)
  - Optimized PDF page resources (Issue #356)
  - Optimized the base memory used for font widths (Issue #357)
  - Added proper `&amp;shy;` support (Issue #361)
  - Title files can now be markdown.
  - The GUI did not support EPUB output.
  - Empty markdown table cells were not rendered in PDF or PostScript output.
  - The automatically-generated title page now supports both "docnumber" and
    "version" metadata.
  - Added support for dc:subject and dc:language metadata in EPUB output from the
    HTML keywords and lang values.
  - Added support for the subject and language metadata in markdown input.
  - Fixed a buffer underflow bug (Issue #338)
  - `htmldoc --help` now reports whether HTTPS URLs are supported (Issue #339)
  - Fixed an issue with HTML title pages and EPUB output.
  - Inline fixed-width text is no longer reduced in size automatically
  - Optimized initialization of font width data (Issue #334)
  - Fixed formatting bugs with aligned images (Issue #322, Issue #324)
  - Fixed support for three digit "#RGB" color values (Issue #323)
  - Fixed character set support for markdown metadata.
  - Updated libpng to v1.6.34 (Issue #326)
  - The makefiles did not use the CPPFLAGS value (Issue #328)
  - Added Markdown table support.
  - Fixed parsing of TBODY, TFOOT, and THEAD elements in HTML files.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611921600">- update to 1.9.11:
  - Added high-resolution desktop icons for Linux.
  - Updated the internal HTTP library to fix truncation of redirection URLs
  - Fixed a regression in the handling of character entities for UTF-8 input
  - The `--numbered` option did not work when the table-of-contents was disabled
  - Updated local zlib to v1.2.11.
  - Updated local libpng to v1.6.37.
  - Fixed packaging issues on macOS and Windows
  - Now ignore sRGB profile errors in PNG files
  - The GUI would crash when saving
  - Page comments are now allowed in `pre` text</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.9.12
  * Fixed buffer-overflow CVE-2021-20308 ( boo#1184424 )
  * Fixed a crash bug with "data:" URIs and EPUB output
  * Fixed several other crash bugs
  * Fixed JPEG error handling
  * Fixed some minor issues
  * Removed the bundled libjpeg, libpng, and zlib.</changelog>
  <changelog author="pgajdos@suse.com" date="1636113600">- security update
- added patches
  fix CVE-2021-40985 [bsc#1192357], buffer overflow may lead to DoS via a crafted BMP image
  + htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1641988800">- Update to version 1.9.14:
  * BMP image support is now deprecated and will be removed in a future
    release of HTMLDOC.
  * Fixed a potential stack overflow bug with GIF images.
  * Fixed the PDF creation date (Issue #455)
  * Fixed a potential stack overflow bug with BMP images (Issue #456)
  * Fixed a compile issue when libpng was not available (Issue #458)
- Update to version 1.9.13:
  * Now install a 32x32 icon for Linux (Issue #432)
  * Fixed an issue with large values for roman numerals and letters in headings (Issue #433)
  * Fixed a crash bug when a HTML comment contains an invalid nul character (Issue #439)
  * Fixed a crash bug with bogus BMP images (Issue #444)
  * Fixed a potential heap overflow bug with bogus GIF images (Issue #451)
  * Fixed a potential stack overflow bug with bogus BMP images (Issue #453)
- Fix CVE-2021-43579 stack-based buffer overflow in image_load_bmp() results in remote code
  execution if the victim converts an HTML document linking to a crafted BMP file.
  (CVE-2021-43579, bsc#1194487)
- Remove upstreamed patch htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644494400">- version update to 1.9.15
  * Fixed a potential heap overflow bug with GIF images (Issue #461)
  * Fixed a potential double-free bug with PNG images (Issue #462)
  * Fixed a potential stack overflow bug with GIF images (Issue #463)
  * Fixed a potential heap underflow bug with empty attributes (Issue #464)
  * Fixed a potential stack overflow bug with BMP images (Issue #466)
  * Fixed a potential heap overflow bug with the table-of-contents (Issue #467)
  * Fixed a potential heap overflow bug with headings (Issue #468)
  * Fixed a potential stack overflow bug with GIF images (Issue #470)</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- security update
- added patches
  fix CVE-2022-28085 [bsc#1198933], Heap buffer overflow in function pdf_write_names in ps-pdf.cxx
  + htmldoc-CVE-2022-28085.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652270400">- security update
- added patches
  fix CVE-2022-27114 [bsc#1199370], image_load_jpeg can cause integer overflow
  + htmldoc-CVE-2022-27114.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- update to 1.9.16:
  * Added support for $DATE(format) and $TIME(format) header/footer strings
  * (Issue #472)
  * Fixed a potential image overflow bug with JPEG and PNG images (htmldoc-CVE-2022-27114.patch)
  * Fixed potential heap overflow bugs with pages (CVE-2022-28085)
  * Fixed potential use-after-free in blocks (Issue #484)
  * Updated the GNU TLS HTTPS support code to use a faster connection shutdown
  * mode (Issue #487)
  * Fixed some minor Coverity warnings.
- drop htmldoc-CVE-2022-27114.patch, htmldoc-CVE-2022-28085.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1725278400">- security update
- added patches
  fix CVE-2024-45508 [bsc#1230022], HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
  + htmldoc-CVE-2024-45508.patch</changelog>
</package>
<package pkgid="324ad6e35d131d6737e662c38c7b84c326e03f8bca90b88f82dc91a1a2d87bdb" name="htmldoc" arch="src">
  <version epoch="0" ver="1.9.16" rel="bp156.3.3.1"/>
  <changelog author="lmuelle@suse.de" date="1260532800">- Fix buffer overflow in the set_page_size function; CVE-2009-3050;
  (bnc#535943).</changelog>
  <changelog author="rguenther@suse.de" date="1266235200">- Fix stricter fortification fallout with GCC 4.5.</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1324382401">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1346760000">- builds also against libpng15
  * libpng15.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1366372800">- Add htmldoc-link-x11.patch: link the GUI app against libX11.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1424865600">- update to version 1.8.28:
  * Updated default PDF version to 1.4.
  * SECURITY: Fixed three buffer overflow issues when reading AFM
    files and parsing page sizes.
  * Fixed incompatibility with Fortify's version of strcpy, which
    does not work properly with variable-length arrays (STR #235)
  * Fixed compilation against PNG library 1.5 or later (STR #243)
  * Fixed documentation errors (PR #6593, PR #6595)
  * Marked Zapf-Dingbats as a standard font (STR #198)
  * Fixed GPL license text in GUI (STR #222)
  * Fixed a table formatting problem when a column has multiple
    colspan values (PR #6709)
  * Fixed parsing of HTML comments (STR #181)
  * Fixed potential out-of-bounds read in table-of-contents
    rendering code (STR #183)
  * Fixed handling of image URLs with ampersands in them (STR #186)
  * Fixed top/bottom margins for logo and header/footer images
    (STR #174)
  * Fixed image alignment bug (Bug #231)
  * Fixed X11 build problem (Bug #243)
- add source url
- drop the following patches after upstream fix:
  * htmldoc_CVE-2009-3050_535943.diff
  * htmldoc-fortify.diff
  * htmldoc-libpng15.diff
  * htmldoc-link-x11.patch
- refresh patch htmldoc-docpath.diff
- add patch htmldoc-cups_rand.patch to work around a build error
  (upstream bug #510)
- remove now unused --with-fltk configure options
- set datadir for make install
- do not package doc/ source directory: documentation is already
  provided by htmldoc.pdf
- remove COMPILE.txt from doc: useless in a rpm
- add -q to %setup to avoid spamming the build log</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Cleanup spec file with spec-cleaner
- Use macro for configure</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to new version 1.9.1:
  * Fixed monospace font size issue
  * Added support for reproducible builds
  * Added limited support for the HTML 4.0 SPAN element
  * Added (extremely limited) UTF-8 support for input files
  * Fixed buffer underflow for (invalid) short HTML comments
  * Now indent PRE text, by popular request.
  * EPUB output now makes sure that &lt;element property&gt; is written
    as &lt;element property="property"&gt;.
  * Now support both NAME and ID for table-of-contents targets.
  * Added support for repeating a single header row for tables that
    span multiple pages
  * Added support for embedding the current filename/URL in the
    header or footer
  * Added EPUB support
  * Added Markdown support
  * Fixed a regression in header/footer image scaling
  * Documentation updates
  * Compiler fixes
  * Fixed a bug when running HTMLDOC as a macOS application.
  * Updated the bundled libpng to v1.6.29.
  * And many more
- Drop upstreamed htmldoc-cups_rand.patch and no longer needed
  htmldoc-docpath.diff
- Lots of spec file cleaning
- Use gnutls/gcrypt for crypto support as openssl support is gone</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 1.9.9:
  - Added support for a `HTMLDOC.filename` META keyword that controls the filename
    reported in CGI mode; the default remains "htmldoc.pdf" (Issue #367)
  - Fixed a paragraph formatting issue with large inline images (Issue #369)
  - Fixed a buffer underflow issue (Issue #370)
  - Fixed PDF page numbers (Issue #371)
  - Added support for a new `L` header/footer format (`$LETTERHEAD`), which
    inserts a letterhead image at its full size (Issue #372, Issue #373,
    Issue #375)
  - Updated the build documentation (Issue #374)
  - Refactored the PRE rendering code to work around compiler optimization bugs
  - Added support for links with targets (Issue #351)
  - Fixed a table rowspan + valign bug (Issue #360)
  - Added support for data URIs (Issue #340)
  - HTMLDOC no longer includes a PDF table of contents when converting a single
    web page (Issue #344)
  - Updated the markdown support with external links, additional inline markup,
    and hard line breaks.
  - Links in markdown text no longer render with a leading space as part of the
    link (Issue #346)
  - Fixed a buffer underflow bug discovered by AddressSanitizer.
  - Fixed a bug in UTF-8 support (Issue #348)
  - PDF output now includes the base language of the input document(s)
  - Optimized the loading of font widths (Issue #354)
  - Optimized PDF page resources (Issue #356)
  - Optimized the base memory used for font widths (Issue #357)
  - Added proper `&amp;shy;` support (Issue #361)
  - Title files can now be markdown.
  - The GUI did not support EPUB output.
  - Empty markdown table cells were not rendered in PDF or PostScript output.
  - The automatically-generated title page now supports both "docnumber" and
    "version" metadata.
  - Added support for dc:subject and dc:language metadata in EPUB output from the
    HTML keywords and lang values.
  - Added support for the subject and language metadata in markdown input.
  - Fixed a buffer underflow bug (Issue #338)
  - `htmldoc --help` now reports whether HTTPS URLs are supported (Issue #339)
  - Fixed an issue with HTML title pages and EPUB output.
  - Inline fixed-width text is no longer reduced in size automatically
  - Optimized initialization of font width data (Issue #334)
  - Fixed formatting bugs with aligned images (Issue #322, Issue #324)
  - Fixed support for three digit "#RGB" color values (Issue #323)
  - Fixed character set support for markdown metadata.
  - Updated libpng to v1.6.34 (Issue #326)
  - The makefiles did not use the CPPFLAGS value (Issue #328)
  - Added Markdown table support.
  - Fixed parsing of TBODY, TFOOT, and THEAD elements in HTML files.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611921600">- update to 1.9.11:
  - Added high-resolution desktop icons for Linux.
  - Updated the internal HTTP library to fix truncation of redirection URLs
  - Fixed a regression in the handling of character entities for UTF-8 input
  - The `--numbered` option did not work when the table-of-contents was disabled
  - Updated local zlib to v1.2.11.
  - Updated local libpng to v1.6.37.
  - Fixed packaging issues on macOS and Windows
  - Now ignore sRGB profile errors in PNG files
  - The GUI would crash when saving
  - Page comments are now allowed in `pre` text</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.9.12
  * Fixed buffer-overflow CVE-2021-20308 ( boo#1184424 )
  * Fixed a crash bug with "data:" URIs and EPUB output
  * Fixed several other crash bugs
  * Fixed JPEG error handling
  * Fixed some minor issues
  * Removed the bundled libjpeg, libpng, and zlib.</changelog>
  <changelog author="pgajdos@suse.com" date="1636113600">- security update
- added patches
  fix CVE-2021-40985 [bsc#1192357], buffer overflow may lead to DoS via a crafted BMP image
  + htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1641988800">- Update to version 1.9.14:
  * BMP image support is now deprecated and will be removed in a future
    release of HTMLDOC.
  * Fixed a potential stack overflow bug with GIF images.
  * Fixed the PDF creation date (Issue #455)
  * Fixed a potential stack overflow bug with BMP images (Issue #456)
  * Fixed a compile issue when libpng was not available (Issue #458)
- Update to version 1.9.13:
  * Now install a 32x32 icon for Linux (Issue #432)
  * Fixed an issue with large values for roman numerals and letters in headings (Issue #433)
  * Fixed a crash bug when a HTML comment contains an invalid nul character (Issue #439)
  * Fixed a crash bug with bogus BMP images (Issue #444)
  * Fixed a potential heap overflow bug with bogus GIF images (Issue #451)
  * Fixed a potential stack overflow bug with bogus BMP images (Issue #453)
- Fix CVE-2021-43579 stack-based buffer overflow in image_load_bmp() results in remote code
  execution if the victim converts an HTML document linking to a crafted BMP file.
  (CVE-2021-43579, bsc#1194487)
- Remove upstreamed patch htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644494400">- version update to 1.9.15
  * Fixed a potential heap overflow bug with GIF images (Issue #461)
  * Fixed a potential double-free bug with PNG images (Issue #462)
  * Fixed a potential stack overflow bug with GIF images (Issue #463)
  * Fixed a potential heap underflow bug with empty attributes (Issue #464)
  * Fixed a potential stack overflow bug with BMP images (Issue #466)
  * Fixed a potential heap overflow bug with the table-of-contents (Issue #467)
  * Fixed a potential heap overflow bug with headings (Issue #468)
  * Fixed a potential stack overflow bug with GIF images (Issue #470)</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- security update
- added patches
  fix CVE-2022-28085 [bsc#1198933], Heap buffer overflow in function pdf_write_names in ps-pdf.cxx
  + htmldoc-CVE-2022-28085.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652270400">- security update
- added patches
  fix CVE-2022-27114 [bsc#1199370], image_load_jpeg can cause integer overflow
  + htmldoc-CVE-2022-27114.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- update to 1.9.16:
  * Added support for $DATE(format) and $TIME(format) header/footer strings
  * (Issue #472)
  * Fixed a potential image overflow bug with JPEG and PNG images (htmldoc-CVE-2022-27114.patch)
  * Fixed potential heap overflow bugs with pages (CVE-2022-28085)
  * Fixed potential use-after-free in blocks (Issue #484)
  * Updated the GNU TLS HTTPS support code to use a faster connection shutdown
  * mode (Issue #487)
  * Fixed some minor Coverity warnings.
- drop htmldoc-CVE-2022-27114.patch, htmldoc-CVE-2022-28085.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1725278400">- security update
- added patches
  fix CVE-2024-45508 [bsc#1230022], HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
  + htmldoc-CVE-2024-45508.patch</changelog>
</package>
<package pkgid="bc2c49666cb9cf6b94b455f1974562f036b0dff150ab9ce7035b01d5f49aa343" name="htmldoc" arch="x86_64">
  <version epoch="0" ver="1.9.16" rel="bp156.3.3.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1424865600">- update to version 1.8.28:
  * Updated default PDF version to 1.4.
  * SECURITY: Fixed three buffer overflow issues when reading AFM
    files and parsing page sizes.
  * Fixed incompatibility with Fortify's version of strcpy, which
    does not work properly with variable-length arrays (STR #235)
  * Fixed compilation against PNG library 1.5 or later (STR #243)
  * Fixed documentation errors (PR #6593, PR #6595)
  * Marked Zapf-Dingbats as a standard font (STR #198)
  * Fixed GPL license text in GUI (STR #222)
  * Fixed a table formatting problem when a column has multiple
    colspan values (PR #6709)
  * Fixed parsing of HTML comments (STR #181)
  * Fixed potential out-of-bounds read in table-of-contents
    rendering code (STR #183)
  * Fixed handling of image URLs with ampersands in them (STR #186)
  * Fixed top/bottom margins for logo and header/footer images
    (STR #174)
  * Fixed image alignment bug (Bug #231)
  * Fixed X11 build problem (Bug #243)
- add source url
- drop the following patches after upstream fix:
  * htmldoc_CVE-2009-3050_535943.diff
  * htmldoc-fortify.diff
  * htmldoc-libpng15.diff
  * htmldoc-link-x11.patch
- refresh patch htmldoc-docpath.diff
- add patch htmldoc-cups_rand.patch to work around a build error
  (upstream bug #510)
- remove now unused --with-fltk configure options
- set datadir for make install
- do not package doc/ source directory: documentation is already
  provided by htmldoc.pdf
- remove COMPILE.txt from doc: useless in a rpm
- add -q to %setup to avoid spamming the build log</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Cleanup spec file with spec-cleaner
- Use macro for configure</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to new version 1.9.1:
  * Fixed monospace font size issue
  * Added support for reproducible builds
  * Added limited support for the HTML 4.0 SPAN element
  * Added (extremely limited) UTF-8 support for input files
  * Fixed buffer underflow for (invalid) short HTML comments
  * Now indent PRE text, by popular request.
  * EPUB output now makes sure that &lt;element property&gt; is written
    as &lt;element property="property"&gt;.
  * Now support both NAME and ID for table-of-contents targets.
  * Added support for repeating a single header row for tables that
    span multiple pages
  * Added support for embedding the current filename/URL in the
    header or footer
  * Added EPUB support
  * Added Markdown support
  * Fixed a regression in header/footer image scaling
  * Documentation updates
  * Compiler fixes
  * Fixed a bug when running HTMLDOC as a macOS application.
  * Updated the bundled libpng to v1.6.29.
  * And many more
- Drop upstreamed htmldoc-cups_rand.patch and no longer needed
  htmldoc-docpath.diff
- Lots of spec file cleaning
- Use gnutls/gcrypt for crypto support as openssl support is gone</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 1.9.9:
  - Added support for a `HTMLDOC.filename` META keyword that controls the filename
    reported in CGI mode; the default remains "htmldoc.pdf" (Issue #367)
  - Fixed a paragraph formatting issue with large inline images (Issue #369)
  - Fixed a buffer underflow issue (Issue #370)
  - Fixed PDF page numbers (Issue #371)
  - Added support for a new `L` header/footer format (`$LETTERHEAD`), which
    inserts a letterhead image at its full size (Issue #372, Issue #373,
    Issue #375)
  - Updated the build documentation (Issue #374)
  - Refactored the PRE rendering code to work around compiler optimization bugs
  - Added support for links with targets (Issue #351)
  - Fixed a table rowspan + valign bug (Issue #360)
  - Added support for data URIs (Issue #340)
  - HTMLDOC no longer includes a PDF table of contents when converting a single
    web page (Issue #344)
  - Updated the markdown support with external links, additional inline markup,
    and hard line breaks.
  - Links in markdown text no longer render with a leading space as part of the
    link (Issue #346)
  - Fixed a buffer underflow bug discovered by AddressSanitizer.
  - Fixed a bug in UTF-8 support (Issue #348)
  - PDF output now includes the base language of the input document(s)
  - Optimized the loading of font widths (Issue #354)
  - Optimized PDF page resources (Issue #356)
  - Optimized the base memory used for font widths (Issue #357)
  - Added proper `&amp;shy;` support (Issue #361)
  - Title files can now be markdown.
  - The GUI did not support EPUB output.
  - Empty markdown table cells were not rendered in PDF or PostScript output.
  - The automatically-generated title page now supports both "docnumber" and
    "version" metadata.
  - Added support for dc:subject and dc:language metadata in EPUB output from the
    HTML keywords and lang values.
  - Added support for the subject and language metadata in markdown input.
  - Fixed a buffer underflow bug (Issue #338)
  - `htmldoc --help` now reports whether HTTPS URLs are supported (Issue #339)
  - Fixed an issue with HTML title pages and EPUB output.
  - Inline fixed-width text is no longer reduced in size automatically
  - Optimized initialization of font width data (Issue #334)
  - Fixed formatting bugs with aligned images (Issue #322, Issue #324)
  - Fixed support for three digit "#RGB" color values (Issue #323)
  - Fixed character set support for markdown metadata.
  - Updated libpng to v1.6.34 (Issue #326)
  - The makefiles did not use the CPPFLAGS value (Issue #328)
  - Added Markdown table support.
  - Fixed parsing of TBODY, TFOOT, and THEAD elements in HTML files.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611921600">- update to 1.9.11:
  - Added high-resolution desktop icons for Linux.
  - Updated the internal HTTP library to fix truncation of redirection URLs
  - Fixed a regression in the handling of character entities for UTF-8 input
  - The `--numbered` option did not work when the table-of-contents was disabled
  - Updated local zlib to v1.2.11.
  - Updated local libpng to v1.6.37.
  - Fixed packaging issues on macOS and Windows
  - Now ignore sRGB profile errors in PNG files
  - The GUI would crash when saving
  - Page comments are now allowed in `pre` text</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.9.12
  * Fixed buffer-overflow CVE-2021-20308 ( boo#1184424 )
  * Fixed a crash bug with "data:" URIs and EPUB output
  * Fixed several other crash bugs
  * Fixed JPEG error handling
  * Fixed some minor issues
  * Removed the bundled libjpeg, libpng, and zlib.</changelog>
  <changelog author="pgajdos@suse.com" date="1636113600">- security update
- added patches
  fix CVE-2021-40985 [bsc#1192357], buffer overflow may lead to DoS via a crafted BMP image
  + htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1641988800">- Update to version 1.9.14:
  * BMP image support is now deprecated and will be removed in a future
    release of HTMLDOC.
  * Fixed a potential stack overflow bug with GIF images.
  * Fixed the PDF creation date (Issue #455)
  * Fixed a potential stack overflow bug with BMP images (Issue #456)
  * Fixed a compile issue when libpng was not available (Issue #458)
- Update to version 1.9.13:
  * Now install a 32x32 icon for Linux (Issue #432)
  * Fixed an issue with large values for roman numerals and letters in headings (Issue #433)
  * Fixed a crash bug when a HTML comment contains an invalid nul character (Issue #439)
  * Fixed a crash bug with bogus BMP images (Issue #444)
  * Fixed a potential heap overflow bug with bogus GIF images (Issue #451)
  * Fixed a potential stack overflow bug with bogus BMP images (Issue #453)
- Fix CVE-2021-43579 stack-based buffer overflow in image_load_bmp() results in remote code
  execution if the victim converts an HTML document linking to a crafted BMP file.
  (CVE-2021-43579, bsc#1194487)
- Remove upstreamed patch htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644494400">- version update to 1.9.15
  * Fixed a potential heap overflow bug with GIF images (Issue #461)
  * Fixed a potential double-free bug with PNG images (Issue #462)
  * Fixed a potential stack overflow bug with GIF images (Issue #463)
  * Fixed a potential heap underflow bug with empty attributes (Issue #464)
  * Fixed a potential stack overflow bug with BMP images (Issue #466)
  * Fixed a potential heap overflow bug with the table-of-contents (Issue #467)
  * Fixed a potential heap overflow bug with headings (Issue #468)
  * Fixed a potential stack overflow bug with GIF images (Issue #470)</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- security update
- added patches
  fix CVE-2022-28085 [bsc#1198933], Heap buffer overflow in function pdf_write_names in ps-pdf.cxx
  + htmldoc-CVE-2022-28085.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652270400">- security update
- added patches
  fix CVE-2022-27114 [bsc#1199370], image_load_jpeg can cause integer overflow
  + htmldoc-CVE-2022-27114.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- update to 1.9.16:
  * Added support for $DATE(format) and $TIME(format) header/footer strings
  * (Issue #472)
  * Fixed a potential image overflow bug with JPEG and PNG images (htmldoc-CVE-2022-27114.patch)
  * Fixed potential heap overflow bugs with pages (CVE-2022-28085)
  * Fixed potential use-after-free in blocks (Issue #484)
  * Updated the GNU TLS HTTPS support code to use a faster connection shutdown
  * mode (Issue #487)
  * Fixed some minor Coverity warnings.
- drop htmldoc-CVE-2022-27114.patch, htmldoc-CVE-2022-28085.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1725278400">- security update
- added patches
  fix CVE-2024-45508 [bsc#1230022], HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
  + htmldoc-CVE-2024-45508.patch</changelog>
</package>
<package pkgid="70be8d01637c2ae25d40d7c5f9b56e715026c6d913034e351e86f3e245e0f9b1" name="htmldoc" arch="aarch64">
  <version epoch="0" ver="1.9.16" rel="bp156.3.6.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1424865600">- update to version 1.8.28:
  * Updated default PDF version to 1.4.
  * SECURITY: Fixed three buffer overflow issues when reading AFM
    files and parsing page sizes.
  * Fixed incompatibility with Fortify's version of strcpy, which
    does not work properly with variable-length arrays (STR #235)
  * Fixed compilation against PNG library 1.5 or later (STR #243)
  * Fixed documentation errors (PR #6593, PR #6595)
  * Marked Zapf-Dingbats as a standard font (STR #198)
  * Fixed GPL license text in GUI (STR #222)
  * Fixed a table formatting problem when a column has multiple
    colspan values (PR #6709)
  * Fixed parsing of HTML comments (STR #181)
  * Fixed potential out-of-bounds read in table-of-contents
    rendering code (STR #183)
  * Fixed handling of image URLs with ampersands in them (STR #186)
  * Fixed top/bottom margins for logo and header/footer images
    (STR #174)
  * Fixed image alignment bug (Bug #231)
  * Fixed X11 build problem (Bug #243)
- add source url
- drop the following patches after upstream fix:
  * htmldoc_CVE-2009-3050_535943.diff
  * htmldoc-fortify.diff
  * htmldoc-libpng15.diff
  * htmldoc-link-x11.patch
- refresh patch htmldoc-docpath.diff
- add patch htmldoc-cups_rand.patch to work around a build error
  (upstream bug #510)
- remove now unused --with-fltk configure options
- set datadir for make install
- do not package doc/ source directory: documentation is already
  provided by htmldoc.pdf
- remove COMPILE.txt from doc: useless in a rpm
- add -q to %setup to avoid spamming the build log</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Cleanup spec file with spec-cleaner
- Use macro for configure</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to new version 1.9.1:
  * Fixed monospace font size issue
  * Added support for reproducible builds
  * Added limited support for the HTML 4.0 SPAN element
  * Added (extremely limited) UTF-8 support for input files
  * Fixed buffer underflow for (invalid) short HTML comments
  * Now indent PRE text, by popular request.
  * EPUB output now makes sure that &lt;element property&gt; is written
    as &lt;element property="property"&gt;.
  * Now support both NAME and ID for table-of-contents targets.
  * Added support for repeating a single header row for tables that
    span multiple pages
  * Added support for embedding the current filename/URL in the
    header or footer
  * Added EPUB support
  * Added Markdown support
  * Fixed a regression in header/footer image scaling
  * Documentation updates
  * Compiler fixes
  * Fixed a bug when running HTMLDOC as a macOS application.
  * Updated the bundled libpng to v1.6.29.
  * And many more
- Drop upstreamed htmldoc-cups_rand.patch and no longer needed
  htmldoc-docpath.diff
- Lots of spec file cleaning
- Use gnutls/gcrypt for crypto support as openssl support is gone</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 1.9.9:
  - Added support for a `HTMLDOC.filename` META keyword that controls the filename
    reported in CGI mode; the default remains "htmldoc.pdf" (Issue #367)
  - Fixed a paragraph formatting issue with large inline images (Issue #369)
  - Fixed a buffer underflow issue (Issue #370)
  - Fixed PDF page numbers (Issue #371)
  - Added support for a new `L` header/footer format (`$LETTERHEAD`), which
    inserts a letterhead image at its full size (Issue #372, Issue #373,
    Issue #375)
  - Updated the build documentation (Issue #374)
  - Refactored the PRE rendering code to work around compiler optimization bugs
  - Added support for links with targets (Issue #351)
  - Fixed a table rowspan + valign bug (Issue #360)
  - Added support for data URIs (Issue #340)
  - HTMLDOC no longer includes a PDF table of contents when converting a single
    web page (Issue #344)
  - Updated the markdown support with external links, additional inline markup,
    and hard line breaks.
  - Links in markdown text no longer render with a leading space as part of the
    link (Issue #346)
  - Fixed a buffer underflow bug discovered by AddressSanitizer.
  - Fixed a bug in UTF-8 support (Issue #348)
  - PDF output now includes the base language of the input document(s)
  - Optimized the loading of font widths (Issue #354)
  - Optimized PDF page resources (Issue #356)
  - Optimized the base memory used for font widths (Issue #357)
  - Added proper `&amp;shy;` support (Issue #361)
  - Title files can now be markdown.
  - The GUI did not support EPUB output.
  - Empty markdown table cells were not rendered in PDF or PostScript output.
  - The automatically-generated title page now supports both "docnumber" and
    "version" metadata.
  - Added support for dc:subject and dc:language metadata in EPUB output from the
    HTML keywords and lang values.
  - Added support for the subject and language metadata in markdown input.
  - Fixed a buffer underflow bug (Issue #338)
  - `htmldoc --help` now reports whether HTTPS URLs are supported (Issue #339)
  - Fixed an issue with HTML title pages and EPUB output.
  - Inline fixed-width text is no longer reduced in size automatically
  - Optimized initialization of font width data (Issue #334)
  - Fixed formatting bugs with aligned images (Issue #322, Issue #324)
  - Fixed support for three digit "#RGB" color values (Issue #323)
  - Fixed character set support for markdown metadata.
  - Updated libpng to v1.6.34 (Issue #326)
  - The makefiles did not use the CPPFLAGS value (Issue #328)
  - Added Markdown table support.
  - Fixed parsing of TBODY, TFOOT, and THEAD elements in HTML files.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611921600">- update to 1.9.11:
  - Added high-resolution desktop icons for Linux.
  - Updated the internal HTTP library to fix truncation of redirection URLs
  - Fixed a regression in the handling of character entities for UTF-8 input
  - The `--numbered` option did not work when the table-of-contents was disabled
  - Updated local zlib to v1.2.11.
  - Updated local libpng to v1.6.37.
  - Fixed packaging issues on macOS and Windows
  - Now ignore sRGB profile errors in PNG files
  - The GUI would crash when saving
  - Page comments are now allowed in `pre` text</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.9.12
  * Fixed buffer-overflow CVE-2021-20308 ( boo#1184424 )
  * Fixed a crash bug with "data:" URIs and EPUB output
  * Fixed several other crash bugs
  * Fixed JPEG error handling
  * Fixed some minor issues
  * Removed the bundled libjpeg, libpng, and zlib.</changelog>
  <changelog author="pgajdos@suse.com" date="1636113600">- security update
- added patches
  fix CVE-2021-40985 [bsc#1192357], buffer overflow may lead to DoS via a crafted BMP image
  + htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1641988800">- Update to version 1.9.14:
  * BMP image support is now deprecated and will be removed in a future
    release of HTMLDOC.
  * Fixed a potential stack overflow bug with GIF images.
  * Fixed the PDF creation date (Issue #455)
  * Fixed a potential stack overflow bug with BMP images (Issue #456)
  * Fixed a compile issue when libpng was not available (Issue #458)
- Update to version 1.9.13:
  * Now install a 32x32 icon for Linux (Issue #432)
  * Fixed an issue with large values for roman numerals and letters in headings (Issue #433)
  * Fixed a crash bug when a HTML comment contains an invalid nul character (Issue #439)
  * Fixed a crash bug with bogus BMP images (Issue #444)
  * Fixed a potential heap overflow bug with bogus GIF images (Issue #451)
  * Fixed a potential stack overflow bug with bogus BMP images (Issue #453)
- Fix CVE-2021-43579 stack-based buffer overflow in image_load_bmp() results in remote code
  execution if the victim converts an HTML document linking to a crafted BMP file.
  (CVE-2021-43579, bsc#1194487)
- Remove upstreamed patch htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644494400">- version update to 1.9.15
  * Fixed a potential heap overflow bug with GIF images (Issue #461)
  * Fixed a potential double-free bug with PNG images (Issue #462)
  * Fixed a potential stack overflow bug with GIF images (Issue #463)
  * Fixed a potential heap underflow bug with empty attributes (Issue #464)
  * Fixed a potential stack overflow bug with BMP images (Issue #466)
  * Fixed a potential heap overflow bug with the table-of-contents (Issue #467)
  * Fixed a potential heap overflow bug with headings (Issue #468)
  * Fixed a potential stack overflow bug with GIF images (Issue #470)</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- security update
- added patches
  fix CVE-2022-28085 [bsc#1198933], Heap buffer overflow in function pdf_write_names in ps-pdf.cxx
  + htmldoc-CVE-2022-28085.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652270400">- security update
- added patches
  fix CVE-2022-27114 [bsc#1199370], image_load_jpeg can cause integer overflow
  + htmldoc-CVE-2022-27114.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- update to 1.9.16:
  * Added support for $DATE(format) and $TIME(format) header/footer strings
  * (Issue #472)
  * Fixed a potential image overflow bug with JPEG and PNG images (htmldoc-CVE-2022-27114.patch)
  * Fixed potential heap overflow bugs with pages (CVE-2022-28085)
  * Fixed potential use-after-free in blocks (Issue #484)
  * Updated the GNU TLS HTTPS support code to use a faster connection shutdown
  * mode (Issue #487)
  * Fixed some minor Coverity warnings.
- drop htmldoc-CVE-2022-27114.patch, htmldoc-CVE-2022-28085.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1725278400">- security update
- added patches
  fix CVE-2024-45508 [bsc#1230022], HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
  + htmldoc-CVE-2024-45508.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1770120000">- security update
- added patches
  fix CVE-2024-46478 [bsc#1232380], buffer overflow when handling tabs through the parse_pre function (ps-pdf.cxx)
  + htmldoc-CVE-2024-46478.patch</changelog>
</package>
<package pkgid="b6292327dd598efbd663f66ebf6724d493e1fe9622b7ab2fa841e2b5f6ae0b61" name="htmldoc" arch="i586">
  <version epoch="0" ver="1.9.16" rel="bp156.3.6.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1424865600">- update to version 1.8.28:
  * Updated default PDF version to 1.4.
  * SECURITY: Fixed three buffer overflow issues when reading AFM
    files and parsing page sizes.
  * Fixed incompatibility with Fortify's version of strcpy, which
    does not work properly with variable-length arrays (STR #235)
  * Fixed compilation against PNG library 1.5 or later (STR #243)
  * Fixed documentation errors (PR #6593, PR #6595)
  * Marked Zapf-Dingbats as a standard font (STR #198)
  * Fixed GPL license text in GUI (STR #222)
  * Fixed a table formatting problem when a column has multiple
    colspan values (PR #6709)
  * Fixed parsing of HTML comments (STR #181)
  * Fixed potential out-of-bounds read in table-of-contents
    rendering code (STR #183)
  * Fixed handling of image URLs with ampersands in them (STR #186)
  * Fixed top/bottom margins for logo and header/footer images
    (STR #174)
  * Fixed image alignment bug (Bug #231)
  * Fixed X11 build problem (Bug #243)
- add source url
- drop the following patches after upstream fix:
  * htmldoc_CVE-2009-3050_535943.diff
  * htmldoc-fortify.diff
  * htmldoc-libpng15.diff
  * htmldoc-link-x11.patch
- refresh patch htmldoc-docpath.diff
- add patch htmldoc-cups_rand.patch to work around a build error
  (upstream bug #510)
- remove now unused --with-fltk configure options
- set datadir for make install
- do not package doc/ source directory: documentation is already
  provided by htmldoc.pdf
- remove COMPILE.txt from doc: useless in a rpm
- add -q to %setup to avoid spamming the build log</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Cleanup spec file with spec-cleaner
- Use macro for configure</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to new version 1.9.1:
  * Fixed monospace font size issue
  * Added support for reproducible builds
  * Added limited support for the HTML 4.0 SPAN element
  * Added (extremely limited) UTF-8 support for input files
  * Fixed buffer underflow for (invalid) short HTML comments
  * Now indent PRE text, by popular request.
  * EPUB output now makes sure that &lt;element property&gt; is written
    as &lt;element property="property"&gt;.
  * Now support both NAME and ID for table-of-contents targets.
  * Added support for repeating a single header row for tables that
    span multiple pages
  * Added support for embedding the current filename/URL in the
    header or footer
  * Added EPUB support
  * Added Markdown support
  * Fixed a regression in header/footer image scaling
  * Documentation updates
  * Compiler fixes
  * Fixed a bug when running HTMLDOC as a macOS application.
  * Updated the bundled libpng to v1.6.29.
  * And many more
- Drop upstreamed htmldoc-cups_rand.patch and no longer needed
  htmldoc-docpath.diff
- Lots of spec file cleaning
- Use gnutls/gcrypt for crypto support as openssl support is gone</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 1.9.9:
  - Added support for a `HTMLDOC.filename` META keyword that controls the filename
    reported in CGI mode; the default remains "htmldoc.pdf" (Issue #367)
  - Fixed a paragraph formatting issue with large inline images (Issue #369)
  - Fixed a buffer underflow issue (Issue #370)
  - Fixed PDF page numbers (Issue #371)
  - Added support for a new `L` header/footer format (`$LETTERHEAD`), which
    inserts a letterhead image at its full size (Issue #372, Issue #373,
    Issue #375)
  - Updated the build documentation (Issue #374)
  - Refactored the PRE rendering code to work around compiler optimization bugs
  - Added support for links with targets (Issue #351)
  - Fixed a table rowspan + valign bug (Issue #360)
  - Added support for data URIs (Issue #340)
  - HTMLDOC no longer includes a PDF table of contents when converting a single
    web page (Issue #344)
  - Updated the markdown support with external links, additional inline markup,
    and hard line breaks.
  - Links in markdown text no longer render with a leading space as part of the
    link (Issue #346)
  - Fixed a buffer underflow bug discovered by AddressSanitizer.
  - Fixed a bug in UTF-8 support (Issue #348)
  - PDF output now includes the base language of the input document(s)
  - Optimized the loading of font widths (Issue #354)
  - Optimized PDF page resources (Issue #356)
  - Optimized the base memory used for font widths (Issue #357)
  - Added proper `&amp;shy;` support (Issue #361)
  - Title files can now be markdown.
  - The GUI did not support EPUB output.
  - Empty markdown table cells were not rendered in PDF or PostScript output.
  - The automatically-generated title page now supports both "docnumber" and
    "version" metadata.
  - Added support for dc:subject and dc:language metadata in EPUB output from the
    HTML keywords and lang values.
  - Added support for the subject and language metadata in markdown input.
  - Fixed a buffer underflow bug (Issue #338)
  - `htmldoc --help` now reports whether HTTPS URLs are supported (Issue #339)
  - Fixed an issue with HTML title pages and EPUB output.
  - Inline fixed-width text is no longer reduced in size automatically
  - Optimized initialization of font width data (Issue #334)
  - Fixed formatting bugs with aligned images (Issue #322, Issue #324)
  - Fixed support for three digit "#RGB" color values (Issue #323)
  - Fixed character set support for markdown metadata.
  - Updated libpng to v1.6.34 (Issue #326)
  - The makefiles did not use the CPPFLAGS value (Issue #328)
  - Added Markdown table support.
  - Fixed parsing of TBODY, TFOOT, and THEAD elements in HTML files.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611921600">- update to 1.9.11:
  - Added high-resolution desktop icons for Linux.
  - Updated the internal HTTP library to fix truncation of redirection URLs
  - Fixed a regression in the handling of character entities for UTF-8 input
  - The `--numbered` option did not work when the table-of-contents was disabled
  - Updated local zlib to v1.2.11.
  - Updated local libpng to v1.6.37.
  - Fixed packaging issues on macOS and Windows
  - Now ignore sRGB profile errors in PNG files
  - The GUI would crash when saving
  - Page comments are now allowed in `pre` text</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.9.12
  * Fixed buffer-overflow CVE-2021-20308 ( boo#1184424 )
  * Fixed a crash bug with "data:" URIs and EPUB output
  * Fixed several other crash bugs
  * Fixed JPEG error handling
  * Fixed some minor issues
  * Removed the bundled libjpeg, libpng, and zlib.</changelog>
  <changelog author="pgajdos@suse.com" date="1636113600">- security update
- added patches
  fix CVE-2021-40985 [bsc#1192357], buffer overflow may lead to DoS via a crafted BMP image
  + htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1641988800">- Update to version 1.9.14:
  * BMP image support is now deprecated and will be removed in a future
    release of HTMLDOC.
  * Fixed a potential stack overflow bug with GIF images.
  * Fixed the PDF creation date (Issue #455)
  * Fixed a potential stack overflow bug with BMP images (Issue #456)
  * Fixed a compile issue when libpng was not available (Issue #458)
- Update to version 1.9.13:
  * Now install a 32x32 icon for Linux (Issue #432)
  * Fixed an issue with large values for roman numerals and letters in headings (Issue #433)
  * Fixed a crash bug when a HTML comment contains an invalid nul character (Issue #439)
  * Fixed a crash bug with bogus BMP images (Issue #444)
  * Fixed a potential heap overflow bug with bogus GIF images (Issue #451)
  * Fixed a potential stack overflow bug with bogus BMP images (Issue #453)
- Fix CVE-2021-43579 stack-based buffer overflow in image_load_bmp() results in remote code
  execution if the victim converts an HTML document linking to a crafted BMP file.
  (CVE-2021-43579, bsc#1194487)
- Remove upstreamed patch htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644494400">- version update to 1.9.15
  * Fixed a potential heap overflow bug with GIF images (Issue #461)
  * Fixed a potential double-free bug with PNG images (Issue #462)
  * Fixed a potential stack overflow bug with GIF images (Issue #463)
  * Fixed a potential heap underflow bug with empty attributes (Issue #464)
  * Fixed a potential stack overflow bug with BMP images (Issue #466)
  * Fixed a potential heap overflow bug with the table-of-contents (Issue #467)
  * Fixed a potential heap overflow bug with headings (Issue #468)
  * Fixed a potential stack overflow bug with GIF images (Issue #470)</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- security update
- added patches
  fix CVE-2022-28085 [bsc#1198933], Heap buffer overflow in function pdf_write_names in ps-pdf.cxx
  + htmldoc-CVE-2022-28085.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652270400">- security update
- added patches
  fix CVE-2022-27114 [bsc#1199370], image_load_jpeg can cause integer overflow
  + htmldoc-CVE-2022-27114.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- update to 1.9.16:
  * Added support for $DATE(format) and $TIME(format) header/footer strings
  * (Issue #472)
  * Fixed a potential image overflow bug with JPEG and PNG images (htmldoc-CVE-2022-27114.patch)
  * Fixed potential heap overflow bugs with pages (CVE-2022-28085)
  * Fixed potential use-after-free in blocks (Issue #484)
  * Updated the GNU TLS HTTPS support code to use a faster connection shutdown
  * mode (Issue #487)
  * Fixed some minor Coverity warnings.
- drop htmldoc-CVE-2022-27114.patch, htmldoc-CVE-2022-28085.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1725278400">- security update
- added patches
  fix CVE-2024-45508 [bsc#1230022], HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
  + htmldoc-CVE-2024-45508.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1770120000">- security update
- added patches
  fix CVE-2024-46478 [bsc#1232380], buffer overflow when handling tabs through the parse_pre function (ps-pdf.cxx)
  + htmldoc-CVE-2024-46478.patch</changelog>
</package>
<package pkgid="2e64b5b6b22c816e70ab09ea2077db9c933bade8502ddafe46f96a76e698dc44" name="htmldoc" arch="ppc64le">
  <version epoch="0" ver="1.9.16" rel="bp156.3.6.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1424865600">- update to version 1.8.28:
  * Updated default PDF version to 1.4.
  * SECURITY: Fixed three buffer overflow issues when reading AFM
    files and parsing page sizes.
  * Fixed incompatibility with Fortify's version of strcpy, which
    does not work properly with variable-length arrays (STR #235)
  * Fixed compilation against PNG library 1.5 or later (STR #243)
  * Fixed documentation errors (PR #6593, PR #6595)
  * Marked Zapf-Dingbats as a standard font (STR #198)
  * Fixed GPL license text in GUI (STR #222)
  * Fixed a table formatting problem when a column has multiple
    colspan values (PR #6709)
  * Fixed parsing of HTML comments (STR #181)
  * Fixed potential out-of-bounds read in table-of-contents
    rendering code (STR #183)
  * Fixed handling of image URLs with ampersands in them (STR #186)
  * Fixed top/bottom margins for logo and header/footer images
    (STR #174)
  * Fixed image alignment bug (Bug #231)
  * Fixed X11 build problem (Bug #243)
- add source url
- drop the following patches after upstream fix:
  * htmldoc_CVE-2009-3050_535943.diff
  * htmldoc-fortify.diff
  * htmldoc-libpng15.diff
  * htmldoc-link-x11.patch
- refresh patch htmldoc-docpath.diff
- add patch htmldoc-cups_rand.patch to work around a build error
  (upstream bug #510)
- remove now unused --with-fltk configure options
- set datadir for make install
- do not package doc/ source directory: documentation is already
  provided by htmldoc.pdf
- remove COMPILE.txt from doc: useless in a rpm
- add -q to %setup to avoid spamming the build log</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Cleanup spec file with spec-cleaner
- Use macro for configure</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to new version 1.9.1:
  * Fixed monospace font size issue
  * Added support for reproducible builds
  * Added limited support for the HTML 4.0 SPAN element
  * Added (extremely limited) UTF-8 support for input files
  * Fixed buffer underflow for (invalid) short HTML comments
  * Now indent PRE text, by popular request.
  * EPUB output now makes sure that &lt;element property&gt; is written
    as &lt;element property="property"&gt;.
  * Now support both NAME and ID for table-of-contents targets.
  * Added support for repeating a single header row for tables that
    span multiple pages
  * Added support for embedding the current filename/URL in the
    header or footer
  * Added EPUB support
  * Added Markdown support
  * Fixed a regression in header/footer image scaling
  * Documentation updates
  * Compiler fixes
  * Fixed a bug when running HTMLDOC as a macOS application.
  * Updated the bundled libpng to v1.6.29.
  * And many more
- Drop upstreamed htmldoc-cups_rand.patch and no longer needed
  htmldoc-docpath.diff
- Lots of spec file cleaning
- Use gnutls/gcrypt for crypto support as openssl support is gone</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 1.9.9:
  - Added support for a `HTMLDOC.filename` META keyword that controls the filename
    reported in CGI mode; the default remains "htmldoc.pdf" (Issue #367)
  - Fixed a paragraph formatting issue with large inline images (Issue #369)
  - Fixed a buffer underflow issue (Issue #370)
  - Fixed PDF page numbers (Issue #371)
  - Added support for a new `L` header/footer format (`$LETTERHEAD`), which
    inserts a letterhead image at its full size (Issue #372, Issue #373,
    Issue #375)
  - Updated the build documentation (Issue #374)
  - Refactored the PRE rendering code to work around compiler optimization bugs
  - Added support for links with targets (Issue #351)
  - Fixed a table rowspan + valign bug (Issue #360)
  - Added support for data URIs (Issue #340)
  - HTMLDOC no longer includes a PDF table of contents when converting a single
    web page (Issue #344)
  - Updated the markdown support with external links, additional inline markup,
    and hard line breaks.
  - Links in markdown text no longer render with a leading space as part of the
    link (Issue #346)
  - Fixed a buffer underflow bug discovered by AddressSanitizer.
  - Fixed a bug in UTF-8 support (Issue #348)
  - PDF output now includes the base language of the input document(s)
  - Optimized the loading of font widths (Issue #354)
  - Optimized PDF page resources (Issue #356)
  - Optimized the base memory used for font widths (Issue #357)
  - Added proper `&amp;shy;` support (Issue #361)
  - Title files can now be markdown.
  - The GUI did not support EPUB output.
  - Empty markdown table cells were not rendered in PDF or PostScript output.
  - The automatically-generated title page now supports both "docnumber" and
    "version" metadata.
  - Added support for dc:subject and dc:language metadata in EPUB output from the
    HTML keywords and lang values.
  - Added support for the subject and language metadata in markdown input.
  - Fixed a buffer underflow bug (Issue #338)
  - `htmldoc --help` now reports whether HTTPS URLs are supported (Issue #339)
  - Fixed an issue with HTML title pages and EPUB output.
  - Inline fixed-width text is no longer reduced in size automatically
  - Optimized initialization of font width data (Issue #334)
  - Fixed formatting bugs with aligned images (Issue #322, Issue #324)
  - Fixed support for three digit "#RGB" color values (Issue #323)
  - Fixed character set support for markdown metadata.
  - Updated libpng to v1.6.34 (Issue #326)
  - The makefiles did not use the CPPFLAGS value (Issue #328)
  - Added Markdown table support.
  - Fixed parsing of TBODY, TFOOT, and THEAD elements in HTML files.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611921600">- update to 1.9.11:
  - Added high-resolution desktop icons for Linux.
  - Updated the internal HTTP library to fix truncation of redirection URLs
  - Fixed a regression in the handling of character entities for UTF-8 input
  - The `--numbered` option did not work when the table-of-contents was disabled
  - Updated local zlib to v1.2.11.
  - Updated local libpng to v1.6.37.
  - Fixed packaging issues on macOS and Windows
  - Now ignore sRGB profile errors in PNG files
  - The GUI would crash when saving
  - Page comments are now allowed in `pre` text</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.9.12
  * Fixed buffer-overflow CVE-2021-20308 ( boo#1184424 )
  * Fixed a crash bug with "data:" URIs and EPUB output
  * Fixed several other crash bugs
  * Fixed JPEG error handling
  * Fixed some minor issues
  * Removed the bundled libjpeg, libpng, and zlib.</changelog>
  <changelog author="pgajdos@suse.com" date="1636113600">- security update
- added patches
  fix CVE-2021-40985 [bsc#1192357], buffer overflow may lead to DoS via a crafted BMP image
  + htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1641988800">- Update to version 1.9.14:
  * BMP image support is now deprecated and will be removed in a future
    release of HTMLDOC.
  * Fixed a potential stack overflow bug with GIF images.
  * Fixed the PDF creation date (Issue #455)
  * Fixed a potential stack overflow bug with BMP images (Issue #456)
  * Fixed a compile issue when libpng was not available (Issue #458)
- Update to version 1.9.13:
  * Now install a 32x32 icon for Linux (Issue #432)
  * Fixed an issue with large values for roman numerals and letters in headings (Issue #433)
  * Fixed a crash bug when a HTML comment contains an invalid nul character (Issue #439)
  * Fixed a crash bug with bogus BMP images (Issue #444)
  * Fixed a potential heap overflow bug with bogus GIF images (Issue #451)
  * Fixed a potential stack overflow bug with bogus BMP images (Issue #453)
- Fix CVE-2021-43579 stack-based buffer overflow in image_load_bmp() results in remote code
  execution if the victim converts an HTML document linking to a crafted BMP file.
  (CVE-2021-43579, bsc#1194487)
- Remove upstreamed patch htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644494400">- version update to 1.9.15
  * Fixed a potential heap overflow bug with GIF images (Issue #461)
  * Fixed a potential double-free bug with PNG images (Issue #462)
  * Fixed a potential stack overflow bug with GIF images (Issue #463)
  * Fixed a potential heap underflow bug with empty attributes (Issue #464)
  * Fixed a potential stack overflow bug with BMP images (Issue #466)
  * Fixed a potential heap overflow bug with the table-of-contents (Issue #467)
  * Fixed a potential heap overflow bug with headings (Issue #468)
  * Fixed a potential stack overflow bug with GIF images (Issue #470)</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- security update
- added patches
  fix CVE-2022-28085 [bsc#1198933], Heap buffer overflow in function pdf_write_names in ps-pdf.cxx
  + htmldoc-CVE-2022-28085.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652270400">- security update
- added patches
  fix CVE-2022-27114 [bsc#1199370], image_load_jpeg can cause integer overflow
  + htmldoc-CVE-2022-27114.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- update to 1.9.16:
  * Added support for $DATE(format) and $TIME(format) header/footer strings
  * (Issue #472)
  * Fixed a potential image overflow bug with JPEG and PNG images (htmldoc-CVE-2022-27114.patch)
  * Fixed potential heap overflow bugs with pages (CVE-2022-28085)
  * Fixed potential use-after-free in blocks (Issue #484)
  * Updated the GNU TLS HTTPS support code to use a faster connection shutdown
  * mode (Issue #487)
  * Fixed some minor Coverity warnings.
- drop htmldoc-CVE-2022-27114.patch, htmldoc-CVE-2022-28085.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1725278400">- security update
- added patches
  fix CVE-2024-45508 [bsc#1230022], HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
  + htmldoc-CVE-2024-45508.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1770120000">- security update
- added patches
  fix CVE-2024-46478 [bsc#1232380], buffer overflow when handling tabs through the parse_pre function (ps-pdf.cxx)
  + htmldoc-CVE-2024-46478.patch</changelog>
</package>
<package pkgid="ee86d21673893a843d43c25b6ac32ebd3361ecd734ce3a60f9aa55454e3906e9" name="htmldoc" arch="s390x">
  <version epoch="0" ver="1.9.16" rel="bp156.3.6.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1424865600">- update to version 1.8.28:
  * Updated default PDF version to 1.4.
  * SECURITY: Fixed three buffer overflow issues when reading AFM
    files and parsing page sizes.
  * Fixed incompatibility with Fortify's version of strcpy, which
    does not work properly with variable-length arrays (STR #235)
  * Fixed compilation against PNG library 1.5 or later (STR #243)
  * Fixed documentation errors (PR #6593, PR #6595)
  * Marked Zapf-Dingbats as a standard font (STR #198)
  * Fixed GPL license text in GUI (STR #222)
  * Fixed a table formatting problem when a column has multiple
    colspan values (PR #6709)
  * Fixed parsing of HTML comments (STR #181)
  * Fixed potential out-of-bounds read in table-of-contents
    rendering code (STR #183)
  * Fixed handling of image URLs with ampersands in them (STR #186)
  * Fixed top/bottom margins for logo and header/footer images
    (STR #174)
  * Fixed image alignment bug (Bug #231)
  * Fixed X11 build problem (Bug #243)
- add source url
- drop the following patches after upstream fix:
  * htmldoc_CVE-2009-3050_535943.diff
  * htmldoc-fortify.diff
  * htmldoc-libpng15.diff
  * htmldoc-link-x11.patch
- refresh patch htmldoc-docpath.diff
- add patch htmldoc-cups_rand.patch to work around a build error
  (upstream bug #510)
- remove now unused --with-fltk configure options
- set datadir for make install
- do not package doc/ source directory: documentation is already
  provided by htmldoc.pdf
- remove COMPILE.txt from doc: useless in a rpm
- add -q to %setup to avoid spamming the build log</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Cleanup spec file with spec-cleaner
- Use macro for configure</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to new version 1.9.1:
  * Fixed monospace font size issue
  * Added support for reproducible builds
  * Added limited support for the HTML 4.0 SPAN element
  * Added (extremely limited) UTF-8 support for input files
  * Fixed buffer underflow for (invalid) short HTML comments
  * Now indent PRE text, by popular request.
  * EPUB output now makes sure that &lt;element property&gt; is written
    as &lt;element property="property"&gt;.
  * Now support both NAME and ID for table-of-contents targets.
  * Added support for repeating a single header row for tables that
    span multiple pages
  * Added support for embedding the current filename/URL in the
    header or footer
  * Added EPUB support
  * Added Markdown support
  * Fixed a regression in header/footer image scaling
  * Documentation updates
  * Compiler fixes
  * Fixed a bug when running HTMLDOC as a macOS application.
  * Updated the bundled libpng to v1.6.29.
  * And many more
- Drop upstreamed htmldoc-cups_rand.patch and no longer needed
  htmldoc-docpath.diff
- Lots of spec file cleaning
- Use gnutls/gcrypt for crypto support as openssl support is gone</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 1.9.9:
  - Added support for a `HTMLDOC.filename` META keyword that controls the filename
    reported in CGI mode; the default remains "htmldoc.pdf" (Issue #367)
  - Fixed a paragraph formatting issue with large inline images (Issue #369)
  - Fixed a buffer underflow issue (Issue #370)
  - Fixed PDF page numbers (Issue #371)
  - Added support for a new `L` header/footer format (`$LETTERHEAD`), which
    inserts a letterhead image at its full size (Issue #372, Issue #373,
    Issue #375)
  - Updated the build documentation (Issue #374)
  - Refactored the PRE rendering code to work around compiler optimization bugs
  - Added support for links with targets (Issue #351)
  - Fixed a table rowspan + valign bug (Issue #360)
  - Added support for data URIs (Issue #340)
  - HTMLDOC no longer includes a PDF table of contents when converting a single
    web page (Issue #344)
  - Updated the markdown support with external links, additional inline markup,
    and hard line breaks.
  - Links in markdown text no longer render with a leading space as part of the
    link (Issue #346)
  - Fixed a buffer underflow bug discovered by AddressSanitizer.
  - Fixed a bug in UTF-8 support (Issue #348)
  - PDF output now includes the base language of the input document(s)
  - Optimized the loading of font widths (Issue #354)
  - Optimized PDF page resources (Issue #356)
  - Optimized the base memory used for font widths (Issue #357)
  - Added proper `&amp;shy;` support (Issue #361)
  - Title files can now be markdown.
  - The GUI did not support EPUB output.
  - Empty markdown table cells were not rendered in PDF or PostScript output.
  - The automatically-generated title page now supports both "docnumber" and
    "version" metadata.
  - Added support for dc:subject and dc:language metadata in EPUB output from the
    HTML keywords and lang values.
  - Added support for the subject and language metadata in markdown input.
  - Fixed a buffer underflow bug (Issue #338)
  - `htmldoc --help` now reports whether HTTPS URLs are supported (Issue #339)
  - Fixed an issue with HTML title pages and EPUB output.
  - Inline fixed-width text is no longer reduced in size automatically
  - Optimized initialization of font width data (Issue #334)
  - Fixed formatting bugs with aligned images (Issue #322, Issue #324)
  - Fixed support for three digit "#RGB" color values (Issue #323)
  - Fixed character set support for markdown metadata.
  - Updated libpng to v1.6.34 (Issue #326)
  - The makefiles did not use the CPPFLAGS value (Issue #328)
  - Added Markdown table support.
  - Fixed parsing of TBODY, TFOOT, and THEAD elements in HTML files.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611921600">- update to 1.9.11:
  - Added high-resolution desktop icons for Linux.
  - Updated the internal HTTP library to fix truncation of redirection URLs
  - Fixed a regression in the handling of character entities for UTF-8 input
  - The `--numbered` option did not work when the table-of-contents was disabled
  - Updated local zlib to v1.2.11.
  - Updated local libpng to v1.6.37.
  - Fixed packaging issues on macOS and Windows
  - Now ignore sRGB profile errors in PNG files
  - The GUI would crash when saving
  - Page comments are now allowed in `pre` text</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.9.12
  * Fixed buffer-overflow CVE-2021-20308 ( boo#1184424 )
  * Fixed a crash bug with "data:" URIs and EPUB output
  * Fixed several other crash bugs
  * Fixed JPEG error handling
  * Fixed some minor issues
  * Removed the bundled libjpeg, libpng, and zlib.</changelog>
  <changelog author="pgajdos@suse.com" date="1636113600">- security update
- added patches
  fix CVE-2021-40985 [bsc#1192357], buffer overflow may lead to DoS via a crafted BMP image
  + htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1641988800">- Update to version 1.9.14:
  * BMP image support is now deprecated and will be removed in a future
    release of HTMLDOC.
  * Fixed a potential stack overflow bug with GIF images.
  * Fixed the PDF creation date (Issue #455)
  * Fixed a potential stack overflow bug with BMP images (Issue #456)
  * Fixed a compile issue when libpng was not available (Issue #458)
- Update to version 1.9.13:
  * Now install a 32x32 icon for Linux (Issue #432)
  * Fixed an issue with large values for roman numerals and letters in headings (Issue #433)
  * Fixed a crash bug when a HTML comment contains an invalid nul character (Issue #439)
  * Fixed a crash bug with bogus BMP images (Issue #444)
  * Fixed a potential heap overflow bug with bogus GIF images (Issue #451)
  * Fixed a potential stack overflow bug with bogus BMP images (Issue #453)
- Fix CVE-2021-43579 stack-based buffer overflow in image_load_bmp() results in remote code
  execution if the victim converts an HTML document linking to a crafted BMP file.
  (CVE-2021-43579, bsc#1194487)
- Remove upstreamed patch htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644494400">- version update to 1.9.15
  * Fixed a potential heap overflow bug with GIF images (Issue #461)
  * Fixed a potential double-free bug with PNG images (Issue #462)
  * Fixed a potential stack overflow bug with GIF images (Issue #463)
  * Fixed a potential heap underflow bug with empty attributes (Issue #464)
  * Fixed a potential stack overflow bug with BMP images (Issue #466)
  * Fixed a potential heap overflow bug with the table-of-contents (Issue #467)
  * Fixed a potential heap overflow bug with headings (Issue #468)
  * Fixed a potential stack overflow bug with GIF images (Issue #470)</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- security update
- added patches
  fix CVE-2022-28085 [bsc#1198933], Heap buffer overflow in function pdf_write_names in ps-pdf.cxx
  + htmldoc-CVE-2022-28085.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652270400">- security update
- added patches
  fix CVE-2022-27114 [bsc#1199370], image_load_jpeg can cause integer overflow
  + htmldoc-CVE-2022-27114.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- update to 1.9.16:
  * Added support for $DATE(format) and $TIME(format) header/footer strings
  * (Issue #472)
  * Fixed a potential image overflow bug with JPEG and PNG images (htmldoc-CVE-2022-27114.patch)
  * Fixed potential heap overflow bugs with pages (CVE-2022-28085)
  * Fixed potential use-after-free in blocks (Issue #484)
  * Updated the GNU TLS HTTPS support code to use a faster connection shutdown
  * mode (Issue #487)
  * Fixed some minor Coverity warnings.
- drop htmldoc-CVE-2022-27114.patch, htmldoc-CVE-2022-28085.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1725278400">- security update
- added patches
  fix CVE-2024-45508 [bsc#1230022], HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
  + htmldoc-CVE-2024-45508.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1770120000">- security update
- added patches
  fix CVE-2024-46478 [bsc#1232380], buffer overflow when handling tabs through the parse_pre function (ps-pdf.cxx)
  + htmldoc-CVE-2024-46478.patch</changelog>
</package>
<package pkgid="3026ba96cbff3d0fb13a25b04d3919ac101b8cb8696a8826280cbe1e73bcd8b7" name="htmldoc" arch="src">
  <version epoch="0" ver="1.9.16" rel="bp156.3.6.1"/>
  <changelog author="rguenther@suse.de" date="1266235200">- Fix stricter fortification fallout with GCC 4.5.</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1324382401">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="pgajdos@suse.com" date="1346760000">- builds also against libpng15
  * libpng15.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1366372800">- Add htmldoc-link-x11.patch: link the GUI app against libX11.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1424865600">- update to version 1.8.28:
  * Updated default PDF version to 1.4.
  * SECURITY: Fixed three buffer overflow issues when reading AFM
    files and parsing page sizes.
  * Fixed incompatibility with Fortify's version of strcpy, which
    does not work properly with variable-length arrays (STR #235)
  * Fixed compilation against PNG library 1.5 or later (STR #243)
  * Fixed documentation errors (PR #6593, PR #6595)
  * Marked Zapf-Dingbats as a standard font (STR #198)
  * Fixed GPL license text in GUI (STR #222)
  * Fixed a table formatting problem when a column has multiple
    colspan values (PR #6709)
  * Fixed parsing of HTML comments (STR #181)
  * Fixed potential out-of-bounds read in table-of-contents
    rendering code (STR #183)
  * Fixed handling of image URLs with ampersands in them (STR #186)
  * Fixed top/bottom margins for logo and header/footer images
    (STR #174)
  * Fixed image alignment bug (Bug #231)
  * Fixed X11 build problem (Bug #243)
- add source url
- drop the following patches after upstream fix:
  * htmldoc_CVE-2009-3050_535943.diff
  * htmldoc-fortify.diff
  * htmldoc-libpng15.diff
  * htmldoc-link-x11.patch
- refresh patch htmldoc-docpath.diff
- add patch htmldoc-cups_rand.patch to work around a build error
  (upstream bug #510)
- remove now unused --with-fltk configure options
- set datadir for make install
- do not package doc/ source directory: documentation is already
  provided by htmldoc.pdf
- remove COMPILE.txt from doc: useless in a rpm
- add -q to %setup to avoid spamming the build log</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Cleanup spec file with spec-cleaner
- Use macro for configure</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to new version 1.9.1:
  * Fixed monospace font size issue
  * Added support for reproducible builds
  * Added limited support for the HTML 4.0 SPAN element
  * Added (extremely limited) UTF-8 support for input files
  * Fixed buffer underflow for (invalid) short HTML comments
  * Now indent PRE text, by popular request.
  * EPUB output now makes sure that &lt;element property&gt; is written
    as &lt;element property="property"&gt;.
  * Now support both NAME and ID for table-of-contents targets.
  * Added support for repeating a single header row for tables that
    span multiple pages
  * Added support for embedding the current filename/URL in the
    header or footer
  * Added EPUB support
  * Added Markdown support
  * Fixed a regression in header/footer image scaling
  * Documentation updates
  * Compiler fixes
  * Fixed a bug when running HTMLDOC as a macOS application.
  * Updated the bundled libpng to v1.6.29.
  * And many more
- Drop upstreamed htmldoc-cups_rand.patch and no longer needed
  htmldoc-docpath.diff
- Lots of spec file cleaning
- Use gnutls/gcrypt for crypto support as openssl support is gone</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 1.9.9:
  - Added support for a `HTMLDOC.filename` META keyword that controls the filename
    reported in CGI mode; the default remains "htmldoc.pdf" (Issue #367)
  - Fixed a paragraph formatting issue with large inline images (Issue #369)
  - Fixed a buffer underflow issue (Issue #370)
  - Fixed PDF page numbers (Issue #371)
  - Added support for a new `L` header/footer format (`$LETTERHEAD`), which
    inserts a letterhead image at its full size (Issue #372, Issue #373,
    Issue #375)
  - Updated the build documentation (Issue #374)
  - Refactored the PRE rendering code to work around compiler optimization bugs
  - Added support for links with targets (Issue #351)
  - Fixed a table rowspan + valign bug (Issue #360)
  - Added support for data URIs (Issue #340)
  - HTMLDOC no longer includes a PDF table of contents when converting a single
    web page (Issue #344)
  - Updated the markdown support with external links, additional inline markup,
    and hard line breaks.
  - Links in markdown text no longer render with a leading space as part of the
    link (Issue #346)
  - Fixed a buffer underflow bug discovered by AddressSanitizer.
  - Fixed a bug in UTF-8 support (Issue #348)
  - PDF output now includes the base language of the input document(s)
  - Optimized the loading of font widths (Issue #354)
  - Optimized PDF page resources (Issue #356)
  - Optimized the base memory used for font widths (Issue #357)
  - Added proper `&amp;shy;` support (Issue #361)
  - Title files can now be markdown.
  - The GUI did not support EPUB output.
  - Empty markdown table cells were not rendered in PDF or PostScript output.
  - The automatically-generated title page now supports both "docnumber" and
    "version" metadata.
  - Added support for dc:subject and dc:language metadata in EPUB output from the
    HTML keywords and lang values.
  - Added support for the subject and language metadata in markdown input.
  - Fixed a buffer underflow bug (Issue #338)
  - `htmldoc --help` now reports whether HTTPS URLs are supported (Issue #339)
  - Fixed an issue with HTML title pages and EPUB output.
  - Inline fixed-width text is no longer reduced in size automatically
  - Optimized initialization of font width data (Issue #334)
  - Fixed formatting bugs with aligned images (Issue #322, Issue #324)
  - Fixed support for three digit "#RGB" color values (Issue #323)
  - Fixed character set support for markdown metadata.
  - Updated libpng to v1.6.34 (Issue #326)
  - The makefiles did not use the CPPFLAGS value (Issue #328)
  - Added Markdown table support.
  - Fixed parsing of TBODY, TFOOT, and THEAD elements in HTML files.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611921600">- update to 1.9.11:
  - Added high-resolution desktop icons for Linux.
  - Updated the internal HTTP library to fix truncation of redirection URLs
  - Fixed a regression in the handling of character entities for UTF-8 input
  - The `--numbered` option did not work when the table-of-contents was disabled
  - Updated local zlib to v1.2.11.
  - Updated local libpng to v1.6.37.
  - Fixed packaging issues on macOS and Windows
  - Now ignore sRGB profile errors in PNG files
  - The GUI would crash when saving
  - Page comments are now allowed in `pre` text</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.9.12
  * Fixed buffer-overflow CVE-2021-20308 ( boo#1184424 )
  * Fixed a crash bug with "data:" URIs and EPUB output
  * Fixed several other crash bugs
  * Fixed JPEG error handling
  * Fixed some minor issues
  * Removed the bundled libjpeg, libpng, and zlib.</changelog>
  <changelog author="pgajdos@suse.com" date="1636113600">- security update
- added patches
  fix CVE-2021-40985 [bsc#1192357], buffer overflow may lead to DoS via a crafted BMP image
  + htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1641988800">- Update to version 1.9.14:
  * BMP image support is now deprecated and will be removed in a future
    release of HTMLDOC.
  * Fixed a potential stack overflow bug with GIF images.
  * Fixed the PDF creation date (Issue #455)
  * Fixed a potential stack overflow bug with BMP images (Issue #456)
  * Fixed a compile issue when libpng was not available (Issue #458)
- Update to version 1.9.13:
  * Now install a 32x32 icon for Linux (Issue #432)
  * Fixed an issue with large values for roman numerals and letters in headings (Issue #433)
  * Fixed a crash bug when a HTML comment contains an invalid nul character (Issue #439)
  * Fixed a crash bug with bogus BMP images (Issue #444)
  * Fixed a potential heap overflow bug with bogus GIF images (Issue #451)
  * Fixed a potential stack overflow bug with bogus BMP images (Issue #453)
- Fix CVE-2021-43579 stack-based buffer overflow in image_load_bmp() results in remote code
  execution if the victim converts an HTML document linking to a crafted BMP file.
  (CVE-2021-43579, bsc#1194487)
- Remove upstreamed patch htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644494400">- version update to 1.9.15
  * Fixed a potential heap overflow bug with GIF images (Issue #461)
  * Fixed a potential double-free bug with PNG images (Issue #462)
  * Fixed a potential stack overflow bug with GIF images (Issue #463)
  * Fixed a potential heap underflow bug with empty attributes (Issue #464)
  * Fixed a potential stack overflow bug with BMP images (Issue #466)
  * Fixed a potential heap overflow bug with the table-of-contents (Issue #467)
  * Fixed a potential heap overflow bug with headings (Issue #468)
  * Fixed a potential stack overflow bug with GIF images (Issue #470)</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- security update
- added patches
  fix CVE-2022-28085 [bsc#1198933], Heap buffer overflow in function pdf_write_names in ps-pdf.cxx
  + htmldoc-CVE-2022-28085.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652270400">- security update
- added patches
  fix CVE-2022-27114 [bsc#1199370], image_load_jpeg can cause integer overflow
  + htmldoc-CVE-2022-27114.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- update to 1.9.16:
  * Added support for $DATE(format) and $TIME(format) header/footer strings
  * (Issue #472)
  * Fixed a potential image overflow bug with JPEG and PNG images (htmldoc-CVE-2022-27114.patch)
  * Fixed potential heap overflow bugs with pages (CVE-2022-28085)
  * Fixed potential use-after-free in blocks (Issue #484)
  * Updated the GNU TLS HTTPS support code to use a faster connection shutdown
  * mode (Issue #487)
  * Fixed some minor Coverity warnings.
- drop htmldoc-CVE-2022-27114.patch, htmldoc-CVE-2022-28085.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1725278400">- security update
- added patches
  fix CVE-2024-45508 [bsc#1230022], HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
  + htmldoc-CVE-2024-45508.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1770120000">- security update
- added patches
  fix CVE-2024-46478 [bsc#1232380], buffer overflow when handling tabs through the parse_pre function (ps-pdf.cxx)
  + htmldoc-CVE-2024-46478.patch</changelog>
</package>
<package pkgid="ed5812ba7193cb4c2b47e968a759c1b4fdcf88c7f0d5eebba06738a6ba84c112" name="htmldoc" arch="x86_64">
  <version epoch="0" ver="1.9.16" rel="bp156.3.6.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1424865600">- update to version 1.8.28:
  * Updated default PDF version to 1.4.
  * SECURITY: Fixed three buffer overflow issues when reading AFM
    files and parsing page sizes.
  * Fixed incompatibility with Fortify's version of strcpy, which
    does not work properly with variable-length arrays (STR #235)
  * Fixed compilation against PNG library 1.5 or later (STR #243)
  * Fixed documentation errors (PR #6593, PR #6595)
  * Marked Zapf-Dingbats as a standard font (STR #198)
  * Fixed GPL license text in GUI (STR #222)
  * Fixed a table formatting problem when a column has multiple
    colspan values (PR #6709)
  * Fixed parsing of HTML comments (STR #181)
  * Fixed potential out-of-bounds read in table-of-contents
    rendering code (STR #183)
  * Fixed handling of image URLs with ampersands in them (STR #186)
  * Fixed top/bottom margins for logo and header/footer images
    (STR #174)
  * Fixed image alignment bug (Bug #231)
  * Fixed X11 build problem (Bug #243)
- add source url
- drop the following patches after upstream fix:
  * htmldoc_CVE-2009-3050_535943.diff
  * htmldoc-fortify.diff
  * htmldoc-libpng15.diff
  * htmldoc-link-x11.patch
- refresh patch htmldoc-docpath.diff
- add patch htmldoc-cups_rand.patch to work around a build error
  (upstream bug #510)
- remove now unused --with-fltk configure options
- set datadir for make install
- do not package doc/ source directory: documentation is already
  provided by htmldoc.pdf
- remove COMPILE.txt from doc: useless in a rpm
- add -q to %setup to avoid spamming the build log</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Cleanup spec file with spec-cleaner
- Use macro for configure</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to new version 1.9.1:
  * Fixed monospace font size issue
  * Added support for reproducible builds
  * Added limited support for the HTML 4.0 SPAN element
  * Added (extremely limited) UTF-8 support for input files
  * Fixed buffer underflow for (invalid) short HTML comments
  * Now indent PRE text, by popular request.
  * EPUB output now makes sure that &lt;element property&gt; is written
    as &lt;element property="property"&gt;.
  * Now support both NAME and ID for table-of-contents targets.
  * Added support for repeating a single header row for tables that
    span multiple pages
  * Added support for embedding the current filename/URL in the
    header or footer
  * Added EPUB support
  * Added Markdown support
  * Fixed a regression in header/footer image scaling
  * Documentation updates
  * Compiler fixes
  * Fixed a bug when running HTMLDOC as a macOS application.
  * Updated the bundled libpng to v1.6.29.
  * And many more
- Drop upstreamed htmldoc-cups_rand.patch and no longer needed
  htmldoc-docpath.diff
- Lots of spec file cleaning
- Use gnutls/gcrypt for crypto support as openssl support is gone</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 1.9.9:
  - Added support for a `HTMLDOC.filename` META keyword that controls the filename
    reported in CGI mode; the default remains "htmldoc.pdf" (Issue #367)
  - Fixed a paragraph formatting issue with large inline images (Issue #369)
  - Fixed a buffer underflow issue (Issue #370)
  - Fixed PDF page numbers (Issue #371)
  - Added support for a new `L` header/footer format (`$LETTERHEAD`), which
    inserts a letterhead image at its full size (Issue #372, Issue #373,
    Issue #375)
  - Updated the build documentation (Issue #374)
  - Refactored the PRE rendering code to work around compiler optimization bugs
  - Added support for links with targets (Issue #351)
  - Fixed a table rowspan + valign bug (Issue #360)
  - Added support for data URIs (Issue #340)
  - HTMLDOC no longer includes a PDF table of contents when converting a single
    web page (Issue #344)
  - Updated the markdown support with external links, additional inline markup,
    and hard line breaks.
  - Links in markdown text no longer render with a leading space as part of the
    link (Issue #346)
  - Fixed a buffer underflow bug discovered by AddressSanitizer.
  - Fixed a bug in UTF-8 support (Issue #348)
  - PDF output now includes the base language of the input document(s)
  - Optimized the loading of font widths (Issue #354)
  - Optimized PDF page resources (Issue #356)
  - Optimized the base memory used for font widths (Issue #357)
  - Added proper `&amp;shy;` support (Issue #361)
  - Title files can now be markdown.
  - The GUI did not support EPUB output.
  - Empty markdown table cells were not rendered in PDF or PostScript output.
  - The automatically-generated title page now supports both "docnumber" and
    "version" metadata.
  - Added support for dc:subject and dc:language metadata in EPUB output from the
    HTML keywords and lang values.
  - Added support for the subject and language metadata in markdown input.
  - Fixed a buffer underflow bug (Issue #338)
  - `htmldoc --help` now reports whether HTTPS URLs are supported (Issue #339)
  - Fixed an issue with HTML title pages and EPUB output.
  - Inline fixed-width text is no longer reduced in size automatically
  - Optimized initialization of font width data (Issue #334)
  - Fixed formatting bugs with aligned images (Issue #322, Issue #324)
  - Fixed support for three digit "#RGB" color values (Issue #323)
  - Fixed character set support for markdown metadata.
  - Updated libpng to v1.6.34 (Issue #326)
  - The makefiles did not use the CPPFLAGS value (Issue #328)
  - Added Markdown table support.
  - Fixed parsing of TBODY, TFOOT, and THEAD elements in HTML files.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611921600">- update to 1.9.11:
  - Added high-resolution desktop icons for Linux.
  - Updated the internal HTTP library to fix truncation of redirection URLs
  - Fixed a regression in the handling of character entities for UTF-8 input
  - The `--numbered` option did not work when the table-of-contents was disabled
  - Updated local zlib to v1.2.11.
  - Updated local libpng to v1.6.37.
  - Fixed packaging issues on macOS and Windows
  - Now ignore sRGB profile errors in PNG files
  - The GUI would crash when saving
  - Page comments are now allowed in `pre` text</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622548800">- Update to version 1.9.12
  * Fixed buffer-overflow CVE-2021-20308 ( boo#1184424 )
  * Fixed a crash bug with "data:" URIs and EPUB output
  * Fixed several other crash bugs
  * Fixed JPEG error handling
  * Fixed some minor issues
  * Removed the bundled libjpeg, libpng, and zlib.</changelog>
  <changelog author="pgajdos@suse.com" date="1636113600">- security update
- added patches
  fix CVE-2021-40985 [bsc#1192357], buffer overflow may lead to DoS via a crafted BMP image
  + htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1641988800">- Update to version 1.9.14:
  * BMP image support is now deprecated and will be removed in a future
    release of HTMLDOC.
  * Fixed a potential stack overflow bug with GIF images.
  * Fixed the PDF creation date (Issue #455)
  * Fixed a potential stack overflow bug with BMP images (Issue #456)
  * Fixed a compile issue when libpng was not available (Issue #458)
- Update to version 1.9.13:
  * Now install a 32x32 icon for Linux (Issue #432)
  * Fixed an issue with large values for roman numerals and letters in headings (Issue #433)
  * Fixed a crash bug when a HTML comment contains an invalid nul character (Issue #439)
  * Fixed a crash bug with bogus BMP images (Issue #444)
  * Fixed a potential heap overflow bug with bogus GIF images (Issue #451)
  * Fixed a potential stack overflow bug with bogus BMP images (Issue #453)
- Fix CVE-2021-43579 stack-based buffer overflow in image_load_bmp() results in remote code
  execution if the victim converts an HTML document linking to a crafted BMP file.
  (CVE-2021-43579, bsc#1194487)
- Remove upstreamed patch htmldoc-CVE-2021-40985.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644494400">- version update to 1.9.15
  * Fixed a potential heap overflow bug with GIF images (Issue #461)
  * Fixed a potential double-free bug with PNG images (Issue #462)
  * Fixed a potential stack overflow bug with GIF images (Issue #463)
  * Fixed a potential heap underflow bug with empty attributes (Issue #464)
  * Fixed a potential stack overflow bug with BMP images (Issue #466)
  * Fixed a potential heap overflow bug with the table-of-contents (Issue #467)
  * Fixed a potential heap overflow bug with headings (Issue #468)
  * Fixed a potential stack overflow bug with GIF images (Issue #470)</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- security update
- added patches
  fix CVE-2022-28085 [bsc#1198933], Heap buffer overflow in function pdf_write_names in ps-pdf.cxx
  + htmldoc-CVE-2022-28085.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652270400">- security update
- added patches
  fix CVE-2022-27114 [bsc#1199370], image_load_jpeg can cause integer overflow
  + htmldoc-CVE-2022-27114.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657540800">- update to 1.9.16:
  * Added support for $DATE(format) and $TIME(format) header/footer strings
  * (Issue #472)
  * Fixed a potential image overflow bug with JPEG and PNG images (htmldoc-CVE-2022-27114.patch)
  * Fixed potential heap overflow bugs with pages (CVE-2022-28085)
  * Fixed potential use-after-free in blocks (Issue #484)
  * Updated the GNU TLS HTTPS support code to use a faster connection shutdown
  * mode (Issue #487)
  * Fixed some minor Coverity warnings.
- drop htmldoc-CVE-2022-27114.patch, htmldoc-CVE-2022-28085.patch (upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1725278400">- security update
- added patches
  fix CVE-2024-45508 [bsc#1230022], HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
  + htmldoc-CVE-2024-45508.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1770120000">- security update
- added patches
  fix CVE-2024-46478 [bsc#1232380], buffer overflow when handling tabs through the parse_pre function (ps-pdf.cxx)
  + htmldoc-CVE-2024-46478.patch</changelog>
</package>
<package pkgid="df17f13018fec9fc7e37372ea6b09c32e2e648bb08ed905197f2f58a1936ce7a" name="htop" arch="aarch64">
  <version epoch="0" ver="3.4.0" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1523534400">- Simplify spec file
  * Drop support for building on older distros
  * Trim describtion
- Enable delayacct</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1587643200">- Add patches:
  * htop-2.2.0-fix-linux-process-ordering.patch
  * htop-2.2.0-fix-option-string.patch (fixes boo#1165352)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Fix building with gcc10:
  * htop-2.2.0-gcc10.patch</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1598702400">- Update to version 3.0.0
  * Add simple, optional vim key mapping mode
  * Support more than 2 smaller CPU meter columns
  * Support Linux proportional set size metrics
  * Support Linux pressure stall information metrics
  * New display option to show CPU frequency in CPU meters
  * Update Linux sysfs battery discovery for recent kernels
  * Add hardware topology information in the affinity panel
  * Add timestamp reporting to the strace screen
  * Added an option to disable the mouse
  * Without an argument -u uses $USER value automatically
  * Support less(1) search navigation shortcuts
  * Support ZFS ARC statistics
  * Report values larger than 100 terabytes
  * Widen ST_UID (UID) column to allow for UIDs &gt; 9999
  * BUGFIX: fix makefiles for building with clang
  * BUGFIX: fix &lt;sys/sysmacros.h&gt; major() usage
  * BUGFIX: correctly identify other types of zombie process
  * BUGFIX: improve follow-process handling in some situations
  * BUGFIX: fix custom meters reverting to unexpected setting
  * BUGFIX: close pipe after running lsof(1)
  * BUGFIX: meters honour setting of counting CPUs from 0/1
- Drop htop-2.2.0.tar.gz.asc - no sig provided
- Upstreamed patches removed:
  * Drop htop-2.2.0-fix-linux-process-ordering.patch
  * Drop htop-2.2.0-fix-option-string.patch
  * Drop htop-2.2.0-gcc10.patch
  * Drop htop-desktop-file-fix-thoenig-01.patch
  * Drop htop-script-python3.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599393600">- Update to version 3.0.1
  * BUGFIX: Fix early exit with longer sysfs battery paths
  * BUGFIX: Improve OOM output, fix sorting
  * Rework check buttons and tree open/closed
  * Add -U/--no-unicode option to disable unicode
  * Improvements to the affinity panel</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1600171200">- Update to version 3.0.2
  * BUGFIX: Drop 'vim_mode' - several issues, needs rethink
  * BUGFIX: fix regression in -u optional-argument handling
  * Build system rework to remove python, header generation
  * CI, code quality improvements
- Switch to new official bintray tarball to remove automake deps</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1607342400">- Update to version 3.0.3
  * Process sorting in 'tree' mode
  * Improved command display/sort functionality
  * Add screen for active file locks
  * Calculate library size (M_LRS column) from maps file
  * Add a Zram meter
  * Add Linux cwd process column
  * Dynamically load libsensors at runtime
  * Improve PressureStall Meter display strings
  * Hide process selection on ESC
  * Fully support non-ascii characters in Meter-Bar
  * Add support to change numeric options in settings screen
  * Rename virtual memory column from M_SIZE to M_VIRT
  * Add process column for normalized CPU usage
  * Show CPU temperature in CPU meter
  * Drop hideThreads Setting
  * Add a systemd meter
  * Add a network IO meter
  * Add a SELinux meter
  * Compress size of default FunctionBar
  * Updates to the OpenFiles screen
  * Continue updating header data in paused mode
  * BUGFIX: Handle data wraparounds in IO meters
  * BUGFIX: Update InfoScreen content on resize
  * Add security attribute process column
  * Add DiskIOMeter for IO read/write usage
  * Read CPU frequency from sysfs by default
  * Add Linux process column for context switches
  * Several FreeBSD and Mac OS X platform updates
  * Add process environment for FreeBSD
  * Parse POWER_SUPPLY_CAPACITY for Linux Battery meter
  * Add octuple-column CPU meters.
  * BUGFIX: On Linux consider ZFS ARC to be cache
  * BUGFIX: Limit screen title length to window width
  * Show selected command wrapped in a separate window
  * Allow to pass '/' for item search
  * Document implicit incremental search
  * Handle 'q' as quit if first character
  * Avoid expensive build of process tree when not using it
  * Include documentation for COMM and EXE
  * Distinguish display of no permissions for reading M_LRS
  * Only calculate M_LRS size every 2 seconds
  * Improvements to comm / cmdline display functionality
  * Merged view for COMM, EXE and cmdline
    (thanks to Narendran Gopalakrishnan and Benny Baumann)
  * Consistent kernel thread display for COMM/EXE columns
  * Central fault handling for all platforms
  * Handle parsing envID &amp; VPid from process status file
  * Use threshold for display of guest/steal/irq meters
  * Enhance highlighting of semi-large and large numbers
  * Documentation on the repository style guide
  * Align processor identifier to the right
  * Document M_PSS, M_PSSWP, M_SWAP in man page
  * Add Date and DateTime meters
  * BUGFIX: Fix Solaris 11.4 due to missing ZFS ARC kstats
  * Code hardening, speedups, fd and memory leak fixes
  * Number CPUs from zero by default
  * Remove residual python checks during the build process</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- htop 3.0.4:
  * Separate tree and list sort orders
  * PSI Meter: constant width and only print ten-duration as bar
  * Sort in paused mode after inverting sort order
  * Handle absence of package CPU temperature
  * Document dynamic bindings and assumed external configuration
  * Update key mapping documentation for sorting</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610452800">- Update to version 3.0.5:
  * InfoScreen: fix uncontrolled format string
  * Improve white text in the Light Terminal colour scheme
  * Enable the function bar on the main screen to be hidden (see Setup -&gt; Display options)
  * Reduce layout issues esp. around printing wide characters (not complete yet)
  * Make the follow function exit cleanly after followed process died
  * Update help and man page for improved -t / -s options
  * Drop usage of formatted error messages from &lt;err.h&gt;
  * Show arrow indicating order of sorted process column
  * Lots of plumbing around the internal Hashtable, hardening and code cleanups
  * LibSensors: add support for Ryzen CPUs
  * Fix CPU percentage on M1 silicon Macs
  * LoadMeter: dynamically adjust color and total of bar
  * Find libsensors.so.4 for Fedora and friends
  * Enable going back to previous search matches (Shift-F3)
  * Added keybind 'N' for sorting by PID (drops 'n'/'N' as not used before much)</changelog>
  <changelog author="kh Lai &lt;dlshcbmuipmam@hotmail.com&gt;" date="1632312000">- Add autoconf and automake as dependencies
- Switch the url to the Github release page
- Update to 3.1.0:
  * Updated COPYING file to remove the PLPA exemption (appendix 2)
    With this change the license is now GPLv2 without any additional wording.
  * Improved default sort ordering
    Note for users: This may lead to an inverted sort order on startup of
    htop 3.1.0 compared to previous versions.
    This is due to what is stored in your htoprc file. Solution: Press I
    (to invert sort order).
    This changed setting will be saved by htop on exit as long as it can
    write to your htoprc file.
  * The compile-time option to cater specifically for running htop as
    setuid has been removed
  * Add read-only option
    This allows htop to be run in an non-intrusive fashion where it acts only
    as a process viewer disabling all functions to manipulate system state.
    Note: This is not a security feature!
  * Move the code for handling the command line formatting related tasks
    to be shared across all platforms
    This means important features like stale binary/library highlighting
    can now be available on all supported platforms.
  * Make the EXE and COMM columns available on all platforms
    All supported platforms have the name of the executable (EXE) and a
    self-chosen thread/command name (COMM) available one way or the other.
    Moving this column to be handled as a platform-independently available
    information simplifies the markup of the command line.
  * Introduce configuration file versioning and config_reader_min_version
    Starting with this version the configuration file contains a version
    identifying the minimum version of the configuration parser needed to
    fully understand the configuration file format.
    Old configuration file formats are automatically upgraded when
    saving the config file (htoprc).
  * Make the configuration parser friendlier to users (thanks to Bart Bakker)
    With this change only settings that cannot be parsed properly are
    reset to their defaults.
  * Improve default display for systems with many CPUs
  * Add the process ELAPSED time column
  * Improve the process STATE column sorting
  * Reworked handling resize and redrawing of the UI
  * Fixed an issue where the LED meter mode could overflow allotted space
  * Allow text mode Meters to span empty neighbors to the right
  * Rescale graph meters when value of total changes
    (thanks to Michael Schönitzer)
  * Update generic process field display
    Usually "uninteresting" values in columns like 1 thread, nice value
    of 0, CPU and memory of 0%, idle/sleeping state, etc. are shown with
    reduced intensity (dark grey)
  * Option and key ("*") to collapse / expand all branches under PID 1
    (and PID 2 if kernel threads are shown) (thanks to Krishna Chaitanya)
  * Keep following a process when inverting the sort order, displaying
    the help screen or hiding/unhiding userland threads.
    If a thread is currently selected the selection is updated to point
    to the thread's parent process. (thanks to Gonzalo, et.al.)
  * Reorder process scanning to be performed before updating the display
    of the meters in the header
  * Always check the user for a process for any changes.
    This affects multiple platforms that previously didn't correctly handle
    the user field for a process to change at runtime (e.g. due to seteuid
    or similar syscalls).
  * Disable mouse option when support is unavailable
  * Support curses libraries without ncurses mouse support
    (thanks to Santhosh Raju)
  * Support offline and hot-swapping of CPUs on all platforms
  * Fix the CPU Meter for machines with more than 256 CPUs
  * Supplemented the "show updated/deleted executables" feature (red basename)
    to indicate when linked libraries were updated (yellow basename)
  * Apply the stale binary highlighting for the EXE column in addition to
    the command line field
  * Add new combined Memory and Swap meter
  * Implement bar and graph mode for NetworkIO Meter
    (thanks to Michael F. Schönitzer)
  * Rework TTY column to be more consistent across platforms
  * Make the CWD column generally available on all platforms
    (thanks to Santhosh Raju et. al.)
  * Add Performance Co-Pilot (PCP) platform support
    This is added via a separate pcp-htop(1) binary which provides remote host
    analysis, new Meters for any PCP metric and new Columns for any PCP process
    metric - see the pcp-htop(5) man page for further details.
    (thanks to Sohaib Mohamed)
  * Add Linux columns and key bindings for process autogroup identifier
    and nice value
  * Change available and used memory reporting on Linux to be based on
    MemAvailable (Kernel 3.14+) (thanks to Chris Cheney and Tomas Wido)
  * Add a new SysArchMeter showing kernel and platform information
    (thanks to ahgamut)
  * Linux memory usage explicitly treats tmpfs memory usage as shared memory
    This is to make memory used by tmpfs visible as this cannot be freed
    unlike normal filesystem cache data.
  * Exclude zram devices when calculating DiskIO on Linux
  * Use PATH lookup for systemctl in systemd meter (thanks to Scott Olson)
  * Add native platform support for NetBSD
    This allows htop to run on NetBSD without the need for active Linux
    emulation of the procfs filesystem.
    (thanks to Santhosh Raju and Nia Alarie)
  * Add NetworkIO, DiskIO, CPU frequency, and battery meter support on NetBSD
    (thanks to Nia Alarie)
  * Fix NetBSD display of in-use and cached memory (thanks to Nia Alarie)
  * Rework NetBSD CPU and memory accounting (thanks to Santhosh Raju)
  * Fix NetBSD accounting of user and kernel threads (thanks to Santhosh Raju)
  * Initial work to allow building with default libcurses on NetBSD
    (thanks to Santhosh Raju)
  * FreeBSD updates - implement process majflt and processor column values
  * Add FreeBSD support for CPU frequency and temperature
  * Fixes and cleanups for ZFS Meters and metrics
  * Correctly color the ZFS ARC ratio (thanks to Ross Williams)
  * Bugfixes related to CPU time display/calculations for darwin on M1 systems
    (thanks to Alexander Momchilov)
  * Harmonize the handling of multiple batteries across different platforms.
    The system is now considered to run on AC if at least one power supply
    marked as AC is found in the system.
    Battery capacity is summed up over all batteries found.
    This also changes the old behavior that batteries reported by the
    system after the first AC adapter where sometimes ignored.
  * Correctly handle multiple batteries on Darwin.
    Resolves a possible memory leak on systems with multiple batteries.
  * Handle Linux Shmem being part of Cached in the MemoryMeter
  * Add SwapCached to the Linux swap meter (thanks to David Zarzycki)
  * Convert process time to days if applicable (thanks to David Zarzycki)
  * Always show the number of threads in the TaskMeter, even when threads
    are not shown in the process list
  * Fix Linux --drop-capabilities option handling
  * Correctly detect failure to initialize Linux boottime
  * Overhaul the Linux memory fields to partition them like free(1) now does
  * Improve the Linux process I/O column values
  * Rework the libsensors parsing on Linux
  * Update the MemoryMeter to display shared memory
  * Update OpenBSD platform - implement additional columns, scan LWP,
    proper markup for STATE, show CPU frequency
  * Fix the tree view on OpenBSD when hiding kernel threads
  * Remove old InfoScreen lines before re-scanning (thanks to Øystein Hiåsen)
  * Document historic naming of Light-Weight Processes column aka threads
  * Improve user interaction when the last process entry is selected
  * Draw the panel header on the TraceScreen (thanks to Youngjae Lee)
  * Add mouse wheel scroll and fix mouse selection on the InfoScreen
    (thanks to Youngjae Lee)
  * Add a HugepageMeter and subtract hugepages from normal memory
  * Display wide characters in LED meters and restore non-wide ncurses support
  * Add command line option to drop Linux capabilities
  * Support scheduler affinity on platforms beyond Linux
  * Report on any failure to write the configuration file
  * Cache stderr to be able to print assert messages.
    These messages are shown in case htop terminates unexpectedly.
  * Print current settings on crash
  * Reset signal handlers on program exit
  * Add configure script option to create a static htop binary
  * Resolved longer-standing compilation issues on Solaris/Illumos
  * Check for availability of set_escdelay in configure
    (thanks to Stefan Polluks)
  * Build system updates for autotools 2.70</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632398400">- Enable linux capabilities
- Drop unsupported configure options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1635768000">-  Update to version 3.1.1 (boo#1192144):
  * See https://github.com/htop-dev/htop/compare/3.1.0...3.1.1</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1638273600">- Update to version 3.1.2
  * Bugfix for crash when storing modified settings at exit
  * Generate xz-compressed source tarball (with configure) using github actions
  * Allow -u UID with numerical value as argument
  * Added documentation for obsolete/state libraries/program files highlighting
  * Some obsolete/stale library highlighting refinements
  * Column width issues resolved
  * Dynamic UID column sizing improved
  * Discard stale information from Disk and Network I/O meters
  * Refined Linux kernel thread detection
  * Reworked process state handling
  * New CCGROUP column showing abbreviated cgroup name
  * New OFFSET column in the list of open files screen</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1651492800">- Update to 3.2.0:
  * Support for displaying multiple tabs in the user interface
  * Allow multiple filter and search terms (logical OR, separate by "|")
  * Set correct default sorting direction (defaultSortDesc)
  * Improve performance for process lookup and update
  * Rework the IOMeters initial display
  * Removed duplicate sections on COMM and EXE
  * Highlight process UNINTERRUPTIBLE_WAIT state (D)
  * Show only integer value when CPU% more than 99.9%
  * Handle rounding ambiguity between 99.9 and 100.0%
  * No longer leaves empty the last column in header
  * Fix header layout and meters reset if a header column is empty
  * Fix PID and UID column widths off-by-one error
  * On Linux, read generic sysfs batteries
  * On Linux, do not collect LRS per thread (it is process-wide)
  * On Linux, dynamically adjust the SECATTR and CGROUP column widths
  * On Linux, fix a crash in LXD
  * On FreeBSD, add support for showing process emulation
  * On Darwin, lazily set process TTY name
  * Always set SIGCHLD to default handling
  * Avoid zombie processes on signal races
  * Ensure last line is cleared when SIGINT is received
  * Instead of SIGTERM, pre-select the last sent signal
  * Internal Hashtable performance and sizing improvements
  * Add heuristics for guessing LXC or Docker from /proc/1/mounts
  * Force elapsed time display to zero if process started in the future
  * Avoid extremely large year values when printing time
  * Fix division by zero when calculating IO rates
  * Fix out of boundary writes in XUtils
  * Fix custom thread name display issue
  * Use AC_CANONICAL_HOST, not AC_CANONICAL_TARGET in configure.ac
  * Support libunwind of LLVM</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1654257600">- Update to 3.2.1
  * Fix setting to show all branches collapsed by default
  * Restore functionality of stripExeFromCmdline setting
  * Fix some command line display settings not being honored without restart
  * Display single digit precision for CPU% greater than 99.9%
  * On Linux, FreeBSD and PCP consider only shrinkable ZFS ARC as cache
  * On Linux, increase field width of CPUD% and SWAPD% columns
  * Colorize process state characters in help screen
  * Use mousemask(3X) to enable and disable mouse control
  * Fix heap buffer overflow in Vector_compact
  * On Solaris, fix a process time scaling error
  * On Solaris, fix the build
  * On NetBSD, OpenBSD and Solaris ensure env buffer size is sufficient
  * On Linux, resolve processes exiting interfering with sampling
  * Fix ProcessList quadratic removal when scanning processes
  * Under LXC, limit CPU count to that given by /proc/cpuinfo
  * Improve container detection for LXC
  * Some minor documentation fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675684800">- Update to 3.2.2:
  * CPUMeter now can show frequency in text mode
  * Add option to render distribution path prefixes shadowed
  * DiskIOMeter converts to bytes per second (not per interval)
  * DiskIOMeter uses complete units, including missing "iB/s"
  * DiskIOMeter indicates read and write in meter mode
  * NetworkIOMeter converts to packets per second, shows packet rate
  * Allow continued process following when changing display settings
  * Update the panel header when changing to another tab
  * Drop margin around the header if there are no meters
  * Use Unicode replacement character for non-printable characters
  * Default color preset uses bold blue for better visibility
  * Update the Panel header on sort order inversions ('I')
  * Toggle the header meters with pound key
  * Fix ScreenPanel to handle quitting the panel while renaming
  * Add fallback for HOME environment variable using passwd database
  * Replace meaningless ID column with FD column in lock screen
  * Use device format in the lock screen matching the files screen
  * On Linux, improvements to file-descriptor lock detection
  * On Linux, further distinguish systemd states in the SystemdMeter
  * On Linux, improvements to cgroup and container identification
  * On Linux, support openat(2) without readlinkat(2) platforms
  * On Darwin, fix current process buffer handling for busy systems
  * On DragonFly BSD, fix incorrect processor time of processes
  * On FreeBSD, fix an issue with the memory graph not showing correctly
  * On FreeBSD, add support for displaying shared memory usage
  * On PCP, use pmLookupDescs(3) if available for efficiency
  * On PCP, normalize generic columns values for consistent display
  * On PCP, changes preparing for configurable, dynamic screens
  * Handle invalid process columns from the configuration file
  * Avoid undefined behaviour with deeply nested processes
  * Fix crash when removing the currently active screen
  * Prevent possible crash on a very early error path
  * Include automake for Debian/Ubuntu
  * Restore non-mouse support
  * Reject unsupported command line arguments
  * Document idle process state
  * Clarify M_TRS/M_DRS columns</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686571200">- Drop no longer available configure option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1701172800">- Switch to xz compressed sources</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704974400">- Update to version 3.3.0:
  * Multiple refactorings and code improvements
  * Shorten docker container IDs to 12 characters
  * Settings: preserve empty header
  * Fix execlp() argument without pointer cast
  * OpenFilesScreen: Make column sizing dynamic for file size, offset and inode
  * Add support for "truss" (FreeBSD equivalent of "strace")
  * Darwin: add NetworkIOMeter support
  * HeaderLayout: add "3 columns - 40/30/30", "... 30/40/30" &amp; "... 30/30/40"
  * Meter: use correct unicode characters for digit '9'
  * Note in manual re default memory units of KiB
  * Add column for process container name
  * Add logic to filter the container name (+type) from the CGroup name
  * Change NetworkIOMeter value unit from KiB/s to bytes/second
  * Cap DiskIOMeter "utilisation" percentage at 100%
  * PCP platform implementation of frontswap and zswap accounting
  * Shorten podman/libpod container IDs to 12 characters
  * Write configuration to temporary file first
  * Incorporate shared memory in bar text
  * Move shared memory next to used memory
  * Correct order of memory meter in help
  * Add recalculate to Ctrl-L refresh
  * Update process list on thread visibility toggling
  * Support dynamic screens with 'top-most' entities beyond processes
  * Introduce Row and Table classes for screens beyond top-processes
  * Rework ZramMeter and remove MeterClass.comprisedValues
  * More robust logic for CPU process percentages (Linux &amp; PCP)
  * Show year as start time for processes older than a year
  * Short-term fix for docker container detection
  * default color preset: use bold blue for better visibility
  * Document 'O' keyboard shortcut
  * Implement logic for '--max-iterations'
  * Update F5 key label on tab switch (Tree &lt;-&gt; List)
  * Force re-sorting of the process list view after switching between list/treeview mode
  * Linux: (hack) work around the fact that Zswapped pages may be SwapCached
  * Linux: implement zswap support
  * {Memory,Swap}Meter: add "compressed memory" metrics
  * Darwin: add DiskIOMeter support
  * Fix scroll relative to followed process
  * ZramMeter: update bar mode
  * Use shared real memory on FreeBSD
  * Increase Search and Filter max string length to 128
  * Improve CPU computation code
  * Remove LXC special handling for the CPU count
  * Create new File Descriptor meter
  * PCP: add IRQ PSI meter
  * Linux: add IRQ PSI meter
  * Linux: highlight username if process has elevated privileges
  * Add support for scheduling policies
  * Add a systemd user meter to monitor user units.
  * FreeBSD: remove duplicate zfs ARC size subtraction</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1742990400">- Update to version 3.4.0:
  * Improve Darwin support for ARM-based systems
  * Fix static linking with libsystemd
  * Various build fixes for DragonFlyBSD, Darwin, NetBSD, OpenBSD &amp; Solaris
  * Fix running task display (count)
  * Fix sort order handling in tree mode
  * Add warning when exiting with a signal (not saving .htoprc)
  * Add Disk I/O and Network I/O meter for DragonFlyBSD
  * Improve handling of invalid Unicode strings
  * Disable basename checking for kernel tasks
  * Updated documentation for pcp-htop
  * Disable FOCUS_IN/FOCUS_OUT event handling
  * Add GPU meter for Linux and PCP
  * Add colum for GPU time per process on Linux and PCP
  * Avoid glibc FILE API voodoo
  * Ignore previously unhandled signals USR1 and USR2
  * Force locating the config file to only use absolute paths
  * Prefer reading htoprc from ~/.config/htop/htoprc over legacy ~/.htoprc
  * Force writing the configuration to a regular file
  * Use distinct config files for htop and pcp-htop
  * Link libnl3 at runtime
  * Gather permitted capabilities via capget(2)
  * Avoid fetching certain process information for each thread on Linux (speed up)
  * Improved handling for invalid data in /proc/tty/drivers on Linux
  * Various changes to avoid memory allocations inside signal handlers
  * Add single column header layout
  * Fix DivByZero bug on startup on Darwin
  * Include thread information on Darwin
  * Show process state on Darwin
  * Update compat check for C23 compilers
  * Improved detail in help screen
  * Unicode support for CGROUP, CCGROUP, CONTAINER and SECATTR columns
  * Mark newline characters in the process command line display
  * Resolve nested derived metrics for PCP
  * Make supported modes/styles specific to each meter
  * Refined checks for terminals supporting to redefine keys
  * Fix handling of the NICE value on FreeBSD
  * Fix display of CPU utilization on FreeBSD
  * Honour update interval adjustments properly without restart
  * Force rebuild of display table after item removals
  * Reworked handling for various temperature sensors
  * Fix high CPU load when the strace'd process exits prematurely
  * Document --drop-capabilities to require a compile time support
  * Always call PKG_PROG_PKG_CONFIG in configure
  * Make configure warn when pkg.m4 is absent
  * Rewrite curses/terminfo detection code in configure
  * Keep following a process when resuming process updates (Z key)
  * Normalize Disk I/O usage and allow utilization above 100%
  * Plug several memory leaks and improve performance for information parsing
  * Allow to show or hide cache and buffers in memory usage meter
  * Visibility hint and UX improvements in status bar of display options panel
  * Remove IOKit / IOMainPort / IOMMasterPort logic for Darwin builds
  * Replace BCC with metrics from BPF for pcp-htop</changelog>
</package>
<package pkgid="38cace43c220246396744643a750114000e0b65efab3b83afd20ef5b2c146592" name="htop" arch="i586">
  <version epoch="0" ver="3.4.0" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1523534400">- Simplify spec file
  * Drop support for building on older distros
  * Trim describtion
- Enable delayacct</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1587643200">- Add patches:
  * htop-2.2.0-fix-linux-process-ordering.patch
  * htop-2.2.0-fix-option-string.patch (fixes boo#1165352)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Fix building with gcc10:
  * htop-2.2.0-gcc10.patch</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1598702400">- Update to version 3.0.0
  * Add simple, optional vim key mapping mode
  * Support more than 2 smaller CPU meter columns
  * Support Linux proportional set size metrics
  * Support Linux pressure stall information metrics
  * New display option to show CPU frequency in CPU meters
  * Update Linux sysfs battery discovery for recent kernels
  * Add hardware topology information in the affinity panel
  * Add timestamp reporting to the strace screen
  * Added an option to disable the mouse
  * Without an argument -u uses $USER value automatically
  * Support less(1) search navigation shortcuts
  * Support ZFS ARC statistics
  * Report values larger than 100 terabytes
  * Widen ST_UID (UID) column to allow for UIDs &gt; 9999
  * BUGFIX: fix makefiles for building with clang
  * BUGFIX: fix &lt;sys/sysmacros.h&gt; major() usage
  * BUGFIX: correctly identify other types of zombie process
  * BUGFIX: improve follow-process handling in some situations
  * BUGFIX: fix custom meters reverting to unexpected setting
  * BUGFIX: close pipe after running lsof(1)
  * BUGFIX: meters honour setting of counting CPUs from 0/1
- Drop htop-2.2.0.tar.gz.asc - no sig provided
- Upstreamed patches removed:
  * Drop htop-2.2.0-fix-linux-process-ordering.patch
  * Drop htop-2.2.0-fix-option-string.patch
  * Drop htop-2.2.0-gcc10.patch
  * Drop htop-desktop-file-fix-thoenig-01.patch
  * Drop htop-script-python3.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599393600">- Update to version 3.0.1
  * BUGFIX: Fix early exit with longer sysfs battery paths
  * BUGFIX: Improve OOM output, fix sorting
  * Rework check buttons and tree open/closed
  * Add -U/--no-unicode option to disable unicode
  * Improvements to the affinity panel</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1600171200">- Update to version 3.0.2
  * BUGFIX: Drop 'vim_mode' - several issues, needs rethink
  * BUGFIX: fix regression in -u optional-argument handling
  * Build system rework to remove python, header generation
  * CI, code quality improvements
- Switch to new official bintray tarball to remove automake deps</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1607342400">- Update to version 3.0.3
  * Process sorting in 'tree' mode
  * Improved command display/sort functionality
  * Add screen for active file locks
  * Calculate library size (M_LRS column) from maps file
  * Add a Zram meter
  * Add Linux cwd process column
  * Dynamically load libsensors at runtime
  * Improve PressureStall Meter display strings
  * Hide process selection on ESC
  * Fully support non-ascii characters in Meter-Bar
  * Add support to change numeric options in settings screen
  * Rename virtual memory column from M_SIZE to M_VIRT
  * Add process column for normalized CPU usage
  * Show CPU temperature in CPU meter
  * Drop hideThreads Setting
  * Add a systemd meter
  * Add a network IO meter
  * Add a SELinux meter
  * Compress size of default FunctionBar
  * Updates to the OpenFiles screen
  * Continue updating header data in paused mode
  * BUGFIX: Handle data wraparounds in IO meters
  * BUGFIX: Update InfoScreen content on resize
  * Add security attribute process column
  * Add DiskIOMeter for IO read/write usage
  * Read CPU frequency from sysfs by default
  * Add Linux process column for context switches
  * Several FreeBSD and Mac OS X platform updates
  * Add process environment for FreeBSD
  * Parse POWER_SUPPLY_CAPACITY for Linux Battery meter
  * Add octuple-column CPU meters.
  * BUGFIX: On Linux consider ZFS ARC to be cache
  * BUGFIX: Limit screen title length to window width
  * Show selected command wrapped in a separate window
  * Allow to pass '/' for item search
  * Document implicit incremental search
  * Handle 'q' as quit if first character
  * Avoid expensive build of process tree when not using it
  * Include documentation for COMM and EXE
  * Distinguish display of no permissions for reading M_LRS
  * Only calculate M_LRS size every 2 seconds
  * Improvements to comm / cmdline display functionality
  * Merged view for COMM, EXE and cmdline
    (thanks to Narendran Gopalakrishnan and Benny Baumann)
  * Consistent kernel thread display for COMM/EXE columns
  * Central fault handling for all platforms
  * Handle parsing envID &amp; VPid from process status file
  * Use threshold for display of guest/steal/irq meters
  * Enhance highlighting of semi-large and large numbers
  * Documentation on the repository style guide
  * Align processor identifier to the right
  * Document M_PSS, M_PSSWP, M_SWAP in man page
  * Add Date and DateTime meters
  * BUGFIX: Fix Solaris 11.4 due to missing ZFS ARC kstats
  * Code hardening, speedups, fd and memory leak fixes
  * Number CPUs from zero by default
  * Remove residual python checks during the build process</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- htop 3.0.4:
  * Separate tree and list sort orders
  * PSI Meter: constant width and only print ten-duration as bar
  * Sort in paused mode after inverting sort order
  * Handle absence of package CPU temperature
  * Document dynamic bindings and assumed external configuration
  * Update key mapping documentation for sorting</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610452800">- Update to version 3.0.5:
  * InfoScreen: fix uncontrolled format string
  * Improve white text in the Light Terminal colour scheme
  * Enable the function bar on the main screen to be hidden (see Setup -&gt; Display options)
  * Reduce layout issues esp. around printing wide characters (not complete yet)
  * Make the follow function exit cleanly after followed process died
  * Update help and man page for improved -t / -s options
  * Drop usage of formatted error messages from &lt;err.h&gt;
  * Show arrow indicating order of sorted process column
  * Lots of plumbing around the internal Hashtable, hardening and code cleanups
  * LibSensors: add support for Ryzen CPUs
  * Fix CPU percentage on M1 silicon Macs
  * LoadMeter: dynamically adjust color and total of bar
  * Find libsensors.so.4 for Fedora and friends
  * Enable going back to previous search matches (Shift-F3)
  * Added keybind 'N' for sorting by PID (drops 'n'/'N' as not used before much)</changelog>
  <changelog author="kh Lai &lt;dlshcbmuipmam@hotmail.com&gt;" date="1632312000">- Add autoconf and automake as dependencies
- Switch the url to the Github release page
- Update to 3.1.0:
  * Updated COPYING file to remove the PLPA exemption (appendix 2)
    With this change the license is now GPLv2 without any additional wording.
  * Improved default sort ordering
    Note for users: This may lead to an inverted sort order on startup of
    htop 3.1.0 compared to previous versions.
    This is due to what is stored in your htoprc file. Solution: Press I
    (to invert sort order).
    This changed setting will be saved by htop on exit as long as it can
    write to your htoprc file.
  * The compile-time option to cater specifically for running htop as
    setuid has been removed
  * Add read-only option
    This allows htop to be run in an non-intrusive fashion where it acts only
    as a process viewer disabling all functions to manipulate system state.
    Note: This is not a security feature!
  * Move the code for handling the command line formatting related tasks
    to be shared across all platforms
    This means important features like stale binary/library highlighting
    can now be available on all supported platforms.
  * Make the EXE and COMM columns available on all platforms
    All supported platforms have the name of the executable (EXE) and a
    self-chosen thread/command name (COMM) available one way or the other.
    Moving this column to be handled as a platform-independently available
    information simplifies the markup of the command line.
  * Introduce configuration file versioning and config_reader_min_version
    Starting with this version the configuration file contains a version
    identifying the minimum version of the configuration parser needed to
    fully understand the configuration file format.
    Old configuration file formats are automatically upgraded when
    saving the config file (htoprc).
  * Make the configuration parser friendlier to users (thanks to Bart Bakker)
    With this change only settings that cannot be parsed properly are
    reset to their defaults.
  * Improve default display for systems with many CPUs
  * Add the process ELAPSED time column
  * Improve the process STATE column sorting
  * Reworked handling resize and redrawing of the UI
  * Fixed an issue where the LED meter mode could overflow allotted space
  * Allow text mode Meters to span empty neighbors to the right
  * Rescale graph meters when value of total changes
    (thanks to Michael Schönitzer)
  * Update generic process field display
    Usually "uninteresting" values in columns like 1 thread, nice value
    of 0, CPU and memory of 0%, idle/sleeping state, etc. are shown with
    reduced intensity (dark grey)
  * Option and key ("*") to collapse / expand all branches under PID 1
    (and PID 2 if kernel threads are shown) (thanks to Krishna Chaitanya)
  * Keep following a process when inverting the sort order, displaying
    the help screen or hiding/unhiding userland threads.
    If a thread is currently selected the selection is updated to point
    to the thread's parent process. (thanks to Gonzalo, et.al.)
  * Reorder process scanning to be performed before updating the display
    of the meters in the header
  * Always check the user for a process for any changes.
    This affects multiple platforms that previously didn't correctly handle
    the user field for a process to change at runtime (e.g. due to seteuid
    or similar syscalls).
  * Disable mouse option when support is unavailable
  * Support curses libraries without ncurses mouse support
    (thanks to Santhosh Raju)
  * Support offline and hot-swapping of CPUs on all platforms
  * Fix the CPU Meter for machines with more than 256 CPUs
  * Supplemented the "show updated/deleted executables" feature (red basename)
    to indicate when linked libraries were updated (yellow basename)
  * Apply the stale binary highlighting for the EXE column in addition to
    the command line field
  * Add new combined Memory and Swap meter
  * Implement bar and graph mode for NetworkIO Meter
    (thanks to Michael F. Schönitzer)
  * Rework TTY column to be more consistent across platforms
  * Make the CWD column generally available on all platforms
    (thanks to Santhosh Raju et. al.)
  * Add Performance Co-Pilot (PCP) platform support
    This is added via a separate pcp-htop(1) binary which provides remote host
    analysis, new Meters for any PCP metric and new Columns for any PCP process
    metric - see the pcp-htop(5) man page for further details.
    (thanks to Sohaib Mohamed)
  * Add Linux columns and key bindings for process autogroup identifier
    and nice value
  * Change available and used memory reporting on Linux to be based on
    MemAvailable (Kernel 3.14+) (thanks to Chris Cheney and Tomas Wido)
  * Add a new SysArchMeter showing kernel and platform information
    (thanks to ahgamut)
  * Linux memory usage explicitly treats tmpfs memory usage as shared memory
    This is to make memory used by tmpfs visible as this cannot be freed
    unlike normal filesystem cache data.
  * Exclude zram devices when calculating DiskIO on Linux
  * Use PATH lookup for systemctl in systemd meter (thanks to Scott Olson)
  * Add native platform support for NetBSD
    This allows htop to run on NetBSD without the need for active Linux
    emulation of the procfs filesystem.
    (thanks to Santhosh Raju and Nia Alarie)
  * Add NetworkIO, DiskIO, CPU frequency, and battery meter support on NetBSD
    (thanks to Nia Alarie)
  * Fix NetBSD display of in-use and cached memory (thanks to Nia Alarie)
  * Rework NetBSD CPU and memory accounting (thanks to Santhosh Raju)
  * Fix NetBSD accounting of user and kernel threads (thanks to Santhosh Raju)
  * Initial work to allow building with default libcurses on NetBSD
    (thanks to Santhosh Raju)
  * FreeBSD updates - implement process majflt and processor column values
  * Add FreeBSD support for CPU frequency and temperature
  * Fixes and cleanups for ZFS Meters and metrics
  * Correctly color the ZFS ARC ratio (thanks to Ross Williams)
  * Bugfixes related to CPU time display/calculations for darwin on M1 systems
    (thanks to Alexander Momchilov)
  * Harmonize the handling of multiple batteries across different platforms.
    The system is now considered to run on AC if at least one power supply
    marked as AC is found in the system.
    Battery capacity is summed up over all batteries found.
    This also changes the old behavior that batteries reported by the
    system after the first AC adapter where sometimes ignored.
  * Correctly handle multiple batteries on Darwin.
    Resolves a possible memory leak on systems with multiple batteries.
  * Handle Linux Shmem being part of Cached in the MemoryMeter
  * Add SwapCached to the Linux swap meter (thanks to David Zarzycki)
  * Convert process time to days if applicable (thanks to David Zarzycki)
  * Always show the number of threads in the TaskMeter, even when threads
    are not shown in the process list
  * Fix Linux --drop-capabilities option handling
  * Correctly detect failure to initialize Linux boottime
  * Overhaul the Linux memory fields to partition them like free(1) now does
  * Improve the Linux process I/O column values
  * Rework the libsensors parsing on Linux
  * Update the MemoryMeter to display shared memory
  * Update OpenBSD platform - implement additional columns, scan LWP,
    proper markup for STATE, show CPU frequency
  * Fix the tree view on OpenBSD when hiding kernel threads
  * Remove old InfoScreen lines before re-scanning (thanks to Øystein Hiåsen)
  * Document historic naming of Light-Weight Processes column aka threads
  * Improve user interaction when the last process entry is selected
  * Draw the panel header on the TraceScreen (thanks to Youngjae Lee)
  * Add mouse wheel scroll and fix mouse selection on the InfoScreen
    (thanks to Youngjae Lee)
  * Add a HugepageMeter and subtract hugepages from normal memory
  * Display wide characters in LED meters and restore non-wide ncurses support
  * Add command line option to drop Linux capabilities
  * Support scheduler affinity on platforms beyond Linux
  * Report on any failure to write the configuration file
  * Cache stderr to be able to print assert messages.
    These messages are shown in case htop terminates unexpectedly.
  * Print current settings on crash
  * Reset signal handlers on program exit
  * Add configure script option to create a static htop binary
  * Resolved longer-standing compilation issues on Solaris/Illumos
  * Check for availability of set_escdelay in configure
    (thanks to Stefan Polluks)
  * Build system updates for autotools 2.70</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632398400">- Enable linux capabilities
- Drop unsupported configure options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1635768000">-  Update to version 3.1.1 (boo#1192144):
  * See https://github.com/htop-dev/htop/compare/3.1.0...3.1.1</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1638273600">- Update to version 3.1.2
  * Bugfix for crash when storing modified settings at exit
  * Generate xz-compressed source tarball (with configure) using github actions
  * Allow -u UID with numerical value as argument
  * Added documentation for obsolete/state libraries/program files highlighting
  * Some obsolete/stale library highlighting refinements
  * Column width issues resolved
  * Dynamic UID column sizing improved
  * Discard stale information from Disk and Network I/O meters
  * Refined Linux kernel thread detection
  * Reworked process state handling
  * New CCGROUP column showing abbreviated cgroup name
  * New OFFSET column in the list of open files screen</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1651492800">- Update to 3.2.0:
  * Support for displaying multiple tabs in the user interface
  * Allow multiple filter and search terms (logical OR, separate by "|")
  * Set correct default sorting direction (defaultSortDesc)
  * Improve performance for process lookup and update
  * Rework the IOMeters initial display
  * Removed duplicate sections on COMM and EXE
  * Highlight process UNINTERRUPTIBLE_WAIT state (D)
  * Show only integer value when CPU% more than 99.9%
  * Handle rounding ambiguity between 99.9 and 100.0%
  * No longer leaves empty the last column in header
  * Fix header layout and meters reset if a header column is empty
  * Fix PID and UID column widths off-by-one error
  * On Linux, read generic sysfs batteries
  * On Linux, do not collect LRS per thread (it is process-wide)
  * On Linux, dynamically adjust the SECATTR and CGROUP column widths
  * On Linux, fix a crash in LXD
  * On FreeBSD, add support for showing process emulation
  * On Darwin, lazily set process TTY name
  * Always set SIGCHLD to default handling
  * Avoid zombie processes on signal races
  * Ensure last line is cleared when SIGINT is received
  * Instead of SIGTERM, pre-select the last sent signal
  * Internal Hashtable performance and sizing improvements
  * Add heuristics for guessing LXC or Docker from /proc/1/mounts
  * Force elapsed time display to zero if process started in the future
  * Avoid extremely large year values when printing time
  * Fix division by zero when calculating IO rates
  * Fix out of boundary writes in XUtils
  * Fix custom thread name display issue
  * Use AC_CANONICAL_HOST, not AC_CANONICAL_TARGET in configure.ac
  * Support libunwind of LLVM</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1654257600">- Update to 3.2.1
  * Fix setting to show all branches collapsed by default
  * Restore functionality of stripExeFromCmdline setting
  * Fix some command line display settings not being honored without restart
  * Display single digit precision for CPU% greater than 99.9%
  * On Linux, FreeBSD and PCP consider only shrinkable ZFS ARC as cache
  * On Linux, increase field width of CPUD% and SWAPD% columns
  * Colorize process state characters in help screen
  * Use mousemask(3X) to enable and disable mouse control
  * Fix heap buffer overflow in Vector_compact
  * On Solaris, fix a process time scaling error
  * On Solaris, fix the build
  * On NetBSD, OpenBSD and Solaris ensure env buffer size is sufficient
  * On Linux, resolve processes exiting interfering with sampling
  * Fix ProcessList quadratic removal when scanning processes
  * Under LXC, limit CPU count to that given by /proc/cpuinfo
  * Improve container detection for LXC
  * Some minor documentation fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675684800">- Update to 3.2.2:
  * CPUMeter now can show frequency in text mode
  * Add option to render distribution path prefixes shadowed
  * DiskIOMeter converts to bytes per second (not per interval)
  * DiskIOMeter uses complete units, including missing "iB/s"
  * DiskIOMeter indicates read and write in meter mode
  * NetworkIOMeter converts to packets per second, shows packet rate
  * Allow continued process following when changing display settings
  * Update the panel header when changing to another tab
  * Drop margin around the header if there are no meters
  * Use Unicode replacement character for non-printable characters
  * Default color preset uses bold blue for better visibility
  * Update the Panel header on sort order inversions ('I')
  * Toggle the header meters with pound key
  * Fix ScreenPanel to handle quitting the panel while renaming
  * Add fallback for HOME environment variable using passwd database
  * Replace meaningless ID column with FD column in lock screen
  * Use device format in the lock screen matching the files screen
  * On Linux, improvements to file-descriptor lock detection
  * On Linux, further distinguish systemd states in the SystemdMeter
  * On Linux, improvements to cgroup and container identification
  * On Linux, support openat(2) without readlinkat(2) platforms
  * On Darwin, fix current process buffer handling for busy systems
  * On DragonFly BSD, fix incorrect processor time of processes
  * On FreeBSD, fix an issue with the memory graph not showing correctly
  * On FreeBSD, add support for displaying shared memory usage
  * On PCP, use pmLookupDescs(3) if available for efficiency
  * On PCP, normalize generic columns values for consistent display
  * On PCP, changes preparing for configurable, dynamic screens
  * Handle invalid process columns from the configuration file
  * Avoid undefined behaviour with deeply nested processes
  * Fix crash when removing the currently active screen
  * Prevent possible crash on a very early error path
  * Include automake for Debian/Ubuntu
  * Restore non-mouse support
  * Reject unsupported command line arguments
  * Document idle process state
  * Clarify M_TRS/M_DRS columns</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686571200">- Drop no longer available configure option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1701172800">- Switch to xz compressed sources</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704974400">- Update to version 3.3.0:
  * Multiple refactorings and code improvements
  * Shorten docker container IDs to 12 characters
  * Settings: preserve empty header
  * Fix execlp() argument without pointer cast
  * OpenFilesScreen: Make column sizing dynamic for file size, offset and inode
  * Add support for "truss" (FreeBSD equivalent of "strace")
  * Darwin: add NetworkIOMeter support
  * HeaderLayout: add "3 columns - 40/30/30", "... 30/40/30" &amp; "... 30/30/40"
  * Meter: use correct unicode characters for digit '9'
  * Note in manual re default memory units of KiB
  * Add column for process container name
  * Add logic to filter the container name (+type) from the CGroup name
  * Change NetworkIOMeter value unit from KiB/s to bytes/second
  * Cap DiskIOMeter "utilisation" percentage at 100%
  * PCP platform implementation of frontswap and zswap accounting
  * Shorten podman/libpod container IDs to 12 characters
  * Write configuration to temporary file first
  * Incorporate shared memory in bar text
  * Move shared memory next to used memory
  * Correct order of memory meter in help
  * Add recalculate to Ctrl-L refresh
  * Update process list on thread visibility toggling
  * Support dynamic screens with 'top-most' entities beyond processes
  * Introduce Row and Table classes for screens beyond top-processes
  * Rework ZramMeter and remove MeterClass.comprisedValues
  * More robust logic for CPU process percentages (Linux &amp; PCP)
  * Show year as start time for processes older than a year
  * Short-term fix for docker container detection
  * default color preset: use bold blue for better visibility
  * Document 'O' keyboard shortcut
  * Implement logic for '--max-iterations'
  * Update F5 key label on tab switch (Tree &lt;-&gt; List)
  * Force re-sorting of the process list view after switching between list/treeview mode
  * Linux: (hack) work around the fact that Zswapped pages may be SwapCached
  * Linux: implement zswap support
  * {Memory,Swap}Meter: add "compressed memory" metrics
  * Darwin: add DiskIOMeter support
  * Fix scroll relative to followed process
  * ZramMeter: update bar mode
  * Use shared real memory on FreeBSD
  * Increase Search and Filter max string length to 128
  * Improve CPU computation code
  * Remove LXC special handling for the CPU count
  * Create new File Descriptor meter
  * PCP: add IRQ PSI meter
  * Linux: add IRQ PSI meter
  * Linux: highlight username if process has elevated privileges
  * Add support for scheduling policies
  * Add a systemd user meter to monitor user units.
  * FreeBSD: remove duplicate zfs ARC size subtraction</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1742990400">- Update to version 3.4.0:
  * Improve Darwin support for ARM-based systems
  * Fix static linking with libsystemd
  * Various build fixes for DragonFlyBSD, Darwin, NetBSD, OpenBSD &amp; Solaris
  * Fix running task display (count)
  * Fix sort order handling in tree mode
  * Add warning when exiting with a signal (not saving .htoprc)
  * Add Disk I/O and Network I/O meter for DragonFlyBSD
  * Improve handling of invalid Unicode strings
  * Disable basename checking for kernel tasks
  * Updated documentation for pcp-htop
  * Disable FOCUS_IN/FOCUS_OUT event handling
  * Add GPU meter for Linux and PCP
  * Add colum for GPU time per process on Linux and PCP
  * Avoid glibc FILE API voodoo
  * Ignore previously unhandled signals USR1 and USR2
  * Force locating the config file to only use absolute paths
  * Prefer reading htoprc from ~/.config/htop/htoprc over legacy ~/.htoprc
  * Force writing the configuration to a regular file
  * Use distinct config files for htop and pcp-htop
  * Link libnl3 at runtime
  * Gather permitted capabilities via capget(2)
  * Avoid fetching certain process information for each thread on Linux (speed up)
  * Improved handling for invalid data in /proc/tty/drivers on Linux
  * Various changes to avoid memory allocations inside signal handlers
  * Add single column header layout
  * Fix DivByZero bug on startup on Darwin
  * Include thread information on Darwin
  * Show process state on Darwin
  * Update compat check for C23 compilers
  * Improved detail in help screen
  * Unicode support for CGROUP, CCGROUP, CONTAINER and SECATTR columns
  * Mark newline characters in the process command line display
  * Resolve nested derived metrics for PCP
  * Make supported modes/styles specific to each meter
  * Refined checks for terminals supporting to redefine keys
  * Fix handling of the NICE value on FreeBSD
  * Fix display of CPU utilization on FreeBSD
  * Honour update interval adjustments properly without restart
  * Force rebuild of display table after item removals
  * Reworked handling for various temperature sensors
  * Fix high CPU load when the strace'd process exits prematurely
  * Document --drop-capabilities to require a compile time support
  * Always call PKG_PROG_PKG_CONFIG in configure
  * Make configure warn when pkg.m4 is absent
  * Rewrite curses/terminfo detection code in configure
  * Keep following a process when resuming process updates (Z key)
  * Normalize Disk I/O usage and allow utilization above 100%
  * Plug several memory leaks and improve performance for information parsing
  * Allow to show or hide cache and buffers in memory usage meter
  * Visibility hint and UX improvements in status bar of display options panel
  * Remove IOKit / IOMainPort / IOMMasterPort logic for Darwin builds
  * Replace BCC with metrics from BPF for pcp-htop</changelog>
</package>
<package pkgid="844402fc9ba102edc27e749ac774d1cdc00417f7bb3bd82c74cddda9efef937b" name="htop" arch="ppc64le">
  <version epoch="0" ver="3.4.0" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1523534400">- Simplify spec file
  * Drop support for building on older distros
  * Trim describtion
- Enable delayacct</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1587643200">- Add patches:
  * htop-2.2.0-fix-linux-process-ordering.patch
  * htop-2.2.0-fix-option-string.patch (fixes boo#1165352)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Fix building with gcc10:
  * htop-2.2.0-gcc10.patch</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1598702400">- Update to version 3.0.0
  * Add simple, optional vim key mapping mode
  * Support more than 2 smaller CPU meter columns
  * Support Linux proportional set size metrics
  * Support Linux pressure stall information metrics
  * New display option to show CPU frequency in CPU meters
  * Update Linux sysfs battery discovery for recent kernels
  * Add hardware topology information in the affinity panel
  * Add timestamp reporting to the strace screen
  * Added an option to disable the mouse
  * Without an argument -u uses $USER value automatically
  * Support less(1) search navigation shortcuts
  * Support ZFS ARC statistics
  * Report values larger than 100 terabytes
  * Widen ST_UID (UID) column to allow for UIDs &gt; 9999
  * BUGFIX: fix makefiles for building with clang
  * BUGFIX: fix &lt;sys/sysmacros.h&gt; major() usage
  * BUGFIX: correctly identify other types of zombie process
  * BUGFIX: improve follow-process handling in some situations
  * BUGFIX: fix custom meters reverting to unexpected setting
  * BUGFIX: close pipe after running lsof(1)
  * BUGFIX: meters honour setting of counting CPUs from 0/1
- Drop htop-2.2.0.tar.gz.asc - no sig provided
- Upstreamed patches removed:
  * Drop htop-2.2.0-fix-linux-process-ordering.patch
  * Drop htop-2.2.0-fix-option-string.patch
  * Drop htop-2.2.0-gcc10.patch
  * Drop htop-desktop-file-fix-thoenig-01.patch
  * Drop htop-script-python3.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599393600">- Update to version 3.0.1
  * BUGFIX: Fix early exit with longer sysfs battery paths
  * BUGFIX: Improve OOM output, fix sorting
  * Rework check buttons and tree open/closed
  * Add -U/--no-unicode option to disable unicode
  * Improvements to the affinity panel</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1600171200">- Update to version 3.0.2
  * BUGFIX: Drop 'vim_mode' - several issues, needs rethink
  * BUGFIX: fix regression in -u optional-argument handling
  * Build system rework to remove python, header generation
  * CI, code quality improvements
- Switch to new official bintray tarball to remove automake deps</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1607342400">- Update to version 3.0.3
  * Process sorting in 'tree' mode
  * Improved command display/sort functionality
  * Add screen for active file locks
  * Calculate library size (M_LRS column) from maps file
  * Add a Zram meter
  * Add Linux cwd process column
  * Dynamically load libsensors at runtime
  * Improve PressureStall Meter display strings
  * Hide process selection on ESC
  * Fully support non-ascii characters in Meter-Bar
  * Add support to change numeric options in settings screen
  * Rename virtual memory column from M_SIZE to M_VIRT
  * Add process column for normalized CPU usage
  * Show CPU temperature in CPU meter
  * Drop hideThreads Setting
  * Add a systemd meter
  * Add a network IO meter
  * Add a SELinux meter
  * Compress size of default FunctionBar
  * Updates to the OpenFiles screen
  * Continue updating header data in paused mode
  * BUGFIX: Handle data wraparounds in IO meters
  * BUGFIX: Update InfoScreen content on resize
  * Add security attribute process column
  * Add DiskIOMeter for IO read/write usage
  * Read CPU frequency from sysfs by default
  * Add Linux process column for context switches
  * Several FreeBSD and Mac OS X platform updates
  * Add process environment for FreeBSD
  * Parse POWER_SUPPLY_CAPACITY for Linux Battery meter
  * Add octuple-column CPU meters.
  * BUGFIX: On Linux consider ZFS ARC to be cache
  * BUGFIX: Limit screen title length to window width
  * Show selected command wrapped in a separate window
  * Allow to pass '/' for item search
  * Document implicit incremental search
  * Handle 'q' as quit if first character
  * Avoid expensive build of process tree when not using it
  * Include documentation for COMM and EXE
  * Distinguish display of no permissions for reading M_LRS
  * Only calculate M_LRS size every 2 seconds
  * Improvements to comm / cmdline display functionality
  * Merged view for COMM, EXE and cmdline
    (thanks to Narendran Gopalakrishnan and Benny Baumann)
  * Consistent kernel thread display for COMM/EXE columns
  * Central fault handling for all platforms
  * Handle parsing envID &amp; VPid from process status file
  * Use threshold for display of guest/steal/irq meters
  * Enhance highlighting of semi-large and large numbers
  * Documentation on the repository style guide
  * Align processor identifier to the right
  * Document M_PSS, M_PSSWP, M_SWAP in man page
  * Add Date and DateTime meters
  * BUGFIX: Fix Solaris 11.4 due to missing ZFS ARC kstats
  * Code hardening, speedups, fd and memory leak fixes
  * Number CPUs from zero by default
  * Remove residual python checks during the build process</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- htop 3.0.4:
  * Separate tree and list sort orders
  * PSI Meter: constant width and only print ten-duration as bar
  * Sort in paused mode after inverting sort order
  * Handle absence of package CPU temperature
  * Document dynamic bindings and assumed external configuration
  * Update key mapping documentation for sorting</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610452800">- Update to version 3.0.5:
  * InfoScreen: fix uncontrolled format string
  * Improve white text in the Light Terminal colour scheme
  * Enable the function bar on the main screen to be hidden (see Setup -&gt; Display options)
  * Reduce layout issues esp. around printing wide characters (not complete yet)
  * Make the follow function exit cleanly after followed process died
  * Update help and man page for improved -t / -s options
  * Drop usage of formatted error messages from &lt;err.h&gt;
  * Show arrow indicating order of sorted process column
  * Lots of plumbing around the internal Hashtable, hardening and code cleanups
  * LibSensors: add support for Ryzen CPUs
  * Fix CPU percentage on M1 silicon Macs
  * LoadMeter: dynamically adjust color and total of bar
  * Find libsensors.so.4 for Fedora and friends
  * Enable going back to previous search matches (Shift-F3)
  * Added keybind 'N' for sorting by PID (drops 'n'/'N' as not used before much)</changelog>
  <changelog author="kh Lai &lt;dlshcbmuipmam@hotmail.com&gt;" date="1632312000">- Add autoconf and automake as dependencies
- Switch the url to the Github release page
- Update to 3.1.0:
  * Updated COPYING file to remove the PLPA exemption (appendix 2)
    With this change the license is now GPLv2 without any additional wording.
  * Improved default sort ordering
    Note for users: This may lead to an inverted sort order on startup of
    htop 3.1.0 compared to previous versions.
    This is due to what is stored in your htoprc file. Solution: Press I
    (to invert sort order).
    This changed setting will be saved by htop on exit as long as it can
    write to your htoprc file.
  * The compile-time option to cater specifically for running htop as
    setuid has been removed
  * Add read-only option
    This allows htop to be run in an non-intrusive fashion where it acts only
    as a process viewer disabling all functions to manipulate system state.
    Note: This is not a security feature!
  * Move the code for handling the command line formatting related tasks
    to be shared across all platforms
    This means important features like stale binary/library highlighting
    can now be available on all supported platforms.
  * Make the EXE and COMM columns available on all platforms
    All supported platforms have the name of the executable (EXE) and a
    self-chosen thread/command name (COMM) available one way or the other.
    Moving this column to be handled as a platform-independently available
    information simplifies the markup of the command line.
  * Introduce configuration file versioning and config_reader_min_version
    Starting with this version the configuration file contains a version
    identifying the minimum version of the configuration parser needed to
    fully understand the configuration file format.
    Old configuration file formats are automatically upgraded when
    saving the config file (htoprc).
  * Make the configuration parser friendlier to users (thanks to Bart Bakker)
    With this change only settings that cannot be parsed properly are
    reset to their defaults.
  * Improve default display for systems with many CPUs
  * Add the process ELAPSED time column
  * Improve the process STATE column sorting
  * Reworked handling resize and redrawing of the UI
  * Fixed an issue where the LED meter mode could overflow allotted space
  * Allow text mode Meters to span empty neighbors to the right
  * Rescale graph meters when value of total changes
    (thanks to Michael Schönitzer)
  * Update generic process field display
    Usually "uninteresting" values in columns like 1 thread, nice value
    of 0, CPU and memory of 0%, idle/sleeping state, etc. are shown with
    reduced intensity (dark grey)
  * Option and key ("*") to collapse / expand all branches under PID 1
    (and PID 2 if kernel threads are shown) (thanks to Krishna Chaitanya)
  * Keep following a process when inverting the sort order, displaying
    the help screen or hiding/unhiding userland threads.
    If a thread is currently selected the selection is updated to point
    to the thread's parent process. (thanks to Gonzalo, et.al.)
  * Reorder process scanning to be performed before updating the display
    of the meters in the header
  * Always check the user for a process for any changes.
    This affects multiple platforms that previously didn't correctly handle
    the user field for a process to change at runtime (e.g. due to seteuid
    or similar syscalls).
  * Disable mouse option when support is unavailable
  * Support curses libraries without ncurses mouse support
    (thanks to Santhosh Raju)
  * Support offline and hot-swapping of CPUs on all platforms
  * Fix the CPU Meter for machines with more than 256 CPUs
  * Supplemented the "show updated/deleted executables" feature (red basename)
    to indicate when linked libraries were updated (yellow basename)
  * Apply the stale binary highlighting for the EXE column in addition to
    the command line field
  * Add new combined Memory and Swap meter
  * Implement bar and graph mode for NetworkIO Meter
    (thanks to Michael F. Schönitzer)
  * Rework TTY column to be more consistent across platforms
  * Make the CWD column generally available on all platforms
    (thanks to Santhosh Raju et. al.)
  * Add Performance Co-Pilot (PCP) platform support
    This is added via a separate pcp-htop(1) binary which provides remote host
    analysis, new Meters for any PCP metric and new Columns for any PCP process
    metric - see the pcp-htop(5) man page for further details.
    (thanks to Sohaib Mohamed)
  * Add Linux columns and key bindings for process autogroup identifier
    and nice value
  * Change available and used memory reporting on Linux to be based on
    MemAvailable (Kernel 3.14+) (thanks to Chris Cheney and Tomas Wido)
  * Add a new SysArchMeter showing kernel and platform information
    (thanks to ahgamut)
  * Linux memory usage explicitly treats tmpfs memory usage as shared memory
    This is to make memory used by tmpfs visible as this cannot be freed
    unlike normal filesystem cache data.
  * Exclude zram devices when calculating DiskIO on Linux
  * Use PATH lookup for systemctl in systemd meter (thanks to Scott Olson)
  * Add native platform support for NetBSD
    This allows htop to run on NetBSD without the need for active Linux
    emulation of the procfs filesystem.
    (thanks to Santhosh Raju and Nia Alarie)
  * Add NetworkIO, DiskIO, CPU frequency, and battery meter support on NetBSD
    (thanks to Nia Alarie)
  * Fix NetBSD display of in-use and cached memory (thanks to Nia Alarie)
  * Rework NetBSD CPU and memory accounting (thanks to Santhosh Raju)
  * Fix NetBSD accounting of user and kernel threads (thanks to Santhosh Raju)
  * Initial work to allow building with default libcurses on NetBSD
    (thanks to Santhosh Raju)
  * FreeBSD updates - implement process majflt and processor column values
  * Add FreeBSD support for CPU frequency and temperature
  * Fixes and cleanups for ZFS Meters and metrics
  * Correctly color the ZFS ARC ratio (thanks to Ross Williams)
  * Bugfixes related to CPU time display/calculations for darwin on M1 systems
    (thanks to Alexander Momchilov)
  * Harmonize the handling of multiple batteries across different platforms.
    The system is now considered to run on AC if at least one power supply
    marked as AC is found in the system.
    Battery capacity is summed up over all batteries found.
    This also changes the old behavior that batteries reported by the
    system after the first AC adapter where sometimes ignored.
  * Correctly handle multiple batteries on Darwin.
    Resolves a possible memory leak on systems with multiple batteries.
  * Handle Linux Shmem being part of Cached in the MemoryMeter
  * Add SwapCached to the Linux swap meter (thanks to David Zarzycki)
  * Convert process time to days if applicable (thanks to David Zarzycki)
  * Always show the number of threads in the TaskMeter, even when threads
    are not shown in the process list
  * Fix Linux --drop-capabilities option handling
  * Correctly detect failure to initialize Linux boottime
  * Overhaul the Linux memory fields to partition them like free(1) now does
  * Improve the Linux process I/O column values
  * Rework the libsensors parsing on Linux
  * Update the MemoryMeter to display shared memory
  * Update OpenBSD platform - implement additional columns, scan LWP,
    proper markup for STATE, show CPU frequency
  * Fix the tree view on OpenBSD when hiding kernel threads
  * Remove old InfoScreen lines before re-scanning (thanks to Øystein Hiåsen)
  * Document historic naming of Light-Weight Processes column aka threads
  * Improve user interaction when the last process entry is selected
  * Draw the panel header on the TraceScreen (thanks to Youngjae Lee)
  * Add mouse wheel scroll and fix mouse selection on the InfoScreen
    (thanks to Youngjae Lee)
  * Add a HugepageMeter and subtract hugepages from normal memory
  * Display wide characters in LED meters and restore non-wide ncurses support
  * Add command line option to drop Linux capabilities
  * Support scheduler affinity on platforms beyond Linux
  * Report on any failure to write the configuration file
  * Cache stderr to be able to print assert messages.
    These messages are shown in case htop terminates unexpectedly.
  * Print current settings on crash
  * Reset signal handlers on program exit
  * Add configure script option to create a static htop binary
  * Resolved longer-standing compilation issues on Solaris/Illumos
  * Check for availability of set_escdelay in configure
    (thanks to Stefan Polluks)
  * Build system updates for autotools 2.70</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632398400">- Enable linux capabilities
- Drop unsupported configure options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1635768000">-  Update to version 3.1.1 (boo#1192144):
  * See https://github.com/htop-dev/htop/compare/3.1.0...3.1.1</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1638273600">- Update to version 3.1.2
  * Bugfix for crash when storing modified settings at exit
  * Generate xz-compressed source tarball (with configure) using github actions
  * Allow -u UID with numerical value as argument
  * Added documentation for obsolete/state libraries/program files highlighting
  * Some obsolete/stale library highlighting refinements
  * Column width issues resolved
  * Dynamic UID column sizing improved
  * Discard stale information from Disk and Network I/O meters
  * Refined Linux kernel thread detection
  * Reworked process state handling
  * New CCGROUP column showing abbreviated cgroup name
  * New OFFSET column in the list of open files screen</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1651492800">- Update to 3.2.0:
  * Support for displaying multiple tabs in the user interface
  * Allow multiple filter and search terms (logical OR, separate by "|")
  * Set correct default sorting direction (defaultSortDesc)
  * Improve performance for process lookup and update
  * Rework the IOMeters initial display
  * Removed duplicate sections on COMM and EXE
  * Highlight process UNINTERRUPTIBLE_WAIT state (D)
  * Show only integer value when CPU% more than 99.9%
  * Handle rounding ambiguity between 99.9 and 100.0%
  * No longer leaves empty the last column in header
  * Fix header layout and meters reset if a header column is empty
  * Fix PID and UID column widths off-by-one error
  * On Linux, read generic sysfs batteries
  * On Linux, do not collect LRS per thread (it is process-wide)
  * On Linux, dynamically adjust the SECATTR and CGROUP column widths
  * On Linux, fix a crash in LXD
  * On FreeBSD, add support for showing process emulation
  * On Darwin, lazily set process TTY name
  * Always set SIGCHLD to default handling
  * Avoid zombie processes on signal races
  * Ensure last line is cleared when SIGINT is received
  * Instead of SIGTERM, pre-select the last sent signal
  * Internal Hashtable performance and sizing improvements
  * Add heuristics for guessing LXC or Docker from /proc/1/mounts
  * Force elapsed time display to zero if process started in the future
  * Avoid extremely large year values when printing time
  * Fix division by zero when calculating IO rates
  * Fix out of boundary writes in XUtils
  * Fix custom thread name display issue
  * Use AC_CANONICAL_HOST, not AC_CANONICAL_TARGET in configure.ac
  * Support libunwind of LLVM</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1654257600">- Update to 3.2.1
  * Fix setting to show all branches collapsed by default
  * Restore functionality of stripExeFromCmdline setting
  * Fix some command line display settings not being honored without restart
  * Display single digit precision for CPU% greater than 99.9%
  * On Linux, FreeBSD and PCP consider only shrinkable ZFS ARC as cache
  * On Linux, increase field width of CPUD% and SWAPD% columns
  * Colorize process state characters in help screen
  * Use mousemask(3X) to enable and disable mouse control
  * Fix heap buffer overflow in Vector_compact
  * On Solaris, fix a process time scaling error
  * On Solaris, fix the build
  * On NetBSD, OpenBSD and Solaris ensure env buffer size is sufficient
  * On Linux, resolve processes exiting interfering with sampling
  * Fix ProcessList quadratic removal when scanning processes
  * Under LXC, limit CPU count to that given by /proc/cpuinfo
  * Improve container detection for LXC
  * Some minor documentation fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675684800">- Update to 3.2.2:
  * CPUMeter now can show frequency in text mode
  * Add option to render distribution path prefixes shadowed
  * DiskIOMeter converts to bytes per second (not per interval)
  * DiskIOMeter uses complete units, including missing "iB/s"
  * DiskIOMeter indicates read and write in meter mode
  * NetworkIOMeter converts to packets per second, shows packet rate
  * Allow continued process following when changing display settings
  * Update the panel header when changing to another tab
  * Drop margin around the header if there are no meters
  * Use Unicode replacement character for non-printable characters
  * Default color preset uses bold blue for better visibility
  * Update the Panel header on sort order inversions ('I')
  * Toggle the header meters with pound key
  * Fix ScreenPanel to handle quitting the panel while renaming
  * Add fallback for HOME environment variable using passwd database
  * Replace meaningless ID column with FD column in lock screen
  * Use device format in the lock screen matching the files screen
  * On Linux, improvements to file-descriptor lock detection
  * On Linux, further distinguish systemd states in the SystemdMeter
  * On Linux, improvements to cgroup and container identification
  * On Linux, support openat(2) without readlinkat(2) platforms
  * On Darwin, fix current process buffer handling for busy systems
  * On DragonFly BSD, fix incorrect processor time of processes
  * On FreeBSD, fix an issue with the memory graph not showing correctly
  * On FreeBSD, add support for displaying shared memory usage
  * On PCP, use pmLookupDescs(3) if available for efficiency
  * On PCP, normalize generic columns values for consistent display
  * On PCP, changes preparing for configurable, dynamic screens
  * Handle invalid process columns from the configuration file
  * Avoid undefined behaviour with deeply nested processes
  * Fix crash when removing the currently active screen
  * Prevent possible crash on a very early error path
  * Include automake for Debian/Ubuntu
  * Restore non-mouse support
  * Reject unsupported command line arguments
  * Document idle process state
  * Clarify M_TRS/M_DRS columns</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686571200">- Drop no longer available configure option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1701172800">- Switch to xz compressed sources</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704974400">- Update to version 3.3.0:
  * Multiple refactorings and code improvements
  * Shorten docker container IDs to 12 characters
  * Settings: preserve empty header
  * Fix execlp() argument without pointer cast
  * OpenFilesScreen: Make column sizing dynamic for file size, offset and inode
  * Add support for "truss" (FreeBSD equivalent of "strace")
  * Darwin: add NetworkIOMeter support
  * HeaderLayout: add "3 columns - 40/30/30", "... 30/40/30" &amp; "... 30/30/40"
  * Meter: use correct unicode characters for digit '9'
  * Note in manual re default memory units of KiB
  * Add column for process container name
  * Add logic to filter the container name (+type) from the CGroup name
  * Change NetworkIOMeter value unit from KiB/s to bytes/second
  * Cap DiskIOMeter "utilisation" percentage at 100%
  * PCP platform implementation of frontswap and zswap accounting
  * Shorten podman/libpod container IDs to 12 characters
  * Write configuration to temporary file first
  * Incorporate shared memory in bar text
  * Move shared memory next to used memory
  * Correct order of memory meter in help
  * Add recalculate to Ctrl-L refresh
  * Update process list on thread visibility toggling
  * Support dynamic screens with 'top-most' entities beyond processes
  * Introduce Row and Table classes for screens beyond top-processes
  * Rework ZramMeter and remove MeterClass.comprisedValues
  * More robust logic for CPU process percentages (Linux &amp; PCP)
  * Show year as start time for processes older than a year
  * Short-term fix for docker container detection
  * default color preset: use bold blue for better visibility
  * Document 'O' keyboard shortcut
  * Implement logic for '--max-iterations'
  * Update F5 key label on tab switch (Tree &lt;-&gt; List)
  * Force re-sorting of the process list view after switching between list/treeview mode
  * Linux: (hack) work around the fact that Zswapped pages may be SwapCached
  * Linux: implement zswap support
  * {Memory,Swap}Meter: add "compressed memory" metrics
  * Darwin: add DiskIOMeter support
  * Fix scroll relative to followed process
  * ZramMeter: update bar mode
  * Use shared real memory on FreeBSD
  * Increase Search and Filter max string length to 128
  * Improve CPU computation code
  * Remove LXC special handling for the CPU count
  * Create new File Descriptor meter
  * PCP: add IRQ PSI meter
  * Linux: add IRQ PSI meter
  * Linux: highlight username if process has elevated privileges
  * Add support for scheduling policies
  * Add a systemd user meter to monitor user units.
  * FreeBSD: remove duplicate zfs ARC size subtraction</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1742990400">- Update to version 3.4.0:
  * Improve Darwin support for ARM-based systems
  * Fix static linking with libsystemd
  * Various build fixes for DragonFlyBSD, Darwin, NetBSD, OpenBSD &amp; Solaris
  * Fix running task display (count)
  * Fix sort order handling in tree mode
  * Add warning when exiting with a signal (not saving .htoprc)
  * Add Disk I/O and Network I/O meter for DragonFlyBSD
  * Improve handling of invalid Unicode strings
  * Disable basename checking for kernel tasks
  * Updated documentation for pcp-htop
  * Disable FOCUS_IN/FOCUS_OUT event handling
  * Add GPU meter for Linux and PCP
  * Add colum for GPU time per process on Linux and PCP
  * Avoid glibc FILE API voodoo
  * Ignore previously unhandled signals USR1 and USR2
  * Force locating the config file to only use absolute paths
  * Prefer reading htoprc from ~/.config/htop/htoprc over legacy ~/.htoprc
  * Force writing the configuration to a regular file
  * Use distinct config files for htop and pcp-htop
  * Link libnl3 at runtime
  * Gather permitted capabilities via capget(2)
  * Avoid fetching certain process information for each thread on Linux (speed up)
  * Improved handling for invalid data in /proc/tty/drivers on Linux
  * Various changes to avoid memory allocations inside signal handlers
  * Add single column header layout
  * Fix DivByZero bug on startup on Darwin
  * Include thread information on Darwin
  * Show process state on Darwin
  * Update compat check for C23 compilers
  * Improved detail in help screen
  * Unicode support for CGROUP, CCGROUP, CONTAINER and SECATTR columns
  * Mark newline characters in the process command line display
  * Resolve nested derived metrics for PCP
  * Make supported modes/styles specific to each meter
  * Refined checks for terminals supporting to redefine keys
  * Fix handling of the NICE value on FreeBSD
  * Fix display of CPU utilization on FreeBSD
  * Honour update interval adjustments properly without restart
  * Force rebuild of display table after item removals
  * Reworked handling for various temperature sensors
  * Fix high CPU load when the strace'd process exits prematurely
  * Document --drop-capabilities to require a compile time support
  * Always call PKG_PROG_PKG_CONFIG in configure
  * Make configure warn when pkg.m4 is absent
  * Rewrite curses/terminfo detection code in configure
  * Keep following a process when resuming process updates (Z key)
  * Normalize Disk I/O usage and allow utilization above 100%
  * Plug several memory leaks and improve performance for information parsing
  * Allow to show or hide cache and buffers in memory usage meter
  * Visibility hint and UX improvements in status bar of display options panel
  * Remove IOKit / IOMainPort / IOMMasterPort logic for Darwin builds
  * Replace BCC with metrics from BPF for pcp-htop</changelog>
</package>
<package pkgid="de4bc72ef633979d6a3923e0d1a2e7802f6188d92eb174b51767320071e485d5" name="htop" arch="src">
  <version epoch="0" ver="3.4.0" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1523534400">- Simplify spec file
  * Drop support for building on older distros
  * Trim describtion
- Enable delayacct</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1587643200">- Add patches:
  * htop-2.2.0-fix-linux-process-ordering.patch
  * htop-2.2.0-fix-option-string.patch (fixes boo#1165352)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Fix building with gcc10:
  * htop-2.2.0-gcc10.patch</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1598702400">- Update to version 3.0.0
  * Add simple, optional vim key mapping mode
  * Support more than 2 smaller CPU meter columns
  * Support Linux proportional set size metrics
  * Support Linux pressure stall information metrics
  * New display option to show CPU frequency in CPU meters
  * Update Linux sysfs battery discovery for recent kernels
  * Add hardware topology information in the affinity panel
  * Add timestamp reporting to the strace screen
  * Added an option to disable the mouse
  * Without an argument -u uses $USER value automatically
  * Support less(1) search navigation shortcuts
  * Support ZFS ARC statistics
  * Report values larger than 100 terabytes
  * Widen ST_UID (UID) column to allow for UIDs &gt; 9999
  * BUGFIX: fix makefiles for building with clang
  * BUGFIX: fix &lt;sys/sysmacros.h&gt; major() usage
  * BUGFIX: correctly identify other types of zombie process
  * BUGFIX: improve follow-process handling in some situations
  * BUGFIX: fix custom meters reverting to unexpected setting
  * BUGFIX: close pipe after running lsof(1)
  * BUGFIX: meters honour setting of counting CPUs from 0/1
- Drop htop-2.2.0.tar.gz.asc - no sig provided
- Upstreamed patches removed:
  * Drop htop-2.2.0-fix-linux-process-ordering.patch
  * Drop htop-2.2.0-fix-option-string.patch
  * Drop htop-2.2.0-gcc10.patch
  * Drop htop-desktop-file-fix-thoenig-01.patch
  * Drop htop-script-python3.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599393600">- Update to version 3.0.1
  * BUGFIX: Fix early exit with longer sysfs battery paths
  * BUGFIX: Improve OOM output, fix sorting
  * Rework check buttons and tree open/closed
  * Add -U/--no-unicode option to disable unicode
  * Improvements to the affinity panel</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1600171200">- Update to version 3.0.2
  * BUGFIX: Drop 'vim_mode' - several issues, needs rethink
  * BUGFIX: fix regression in -u optional-argument handling
  * Build system rework to remove python, header generation
  * CI, code quality improvements
- Switch to new official bintray tarball to remove automake deps</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1607342400">- Update to version 3.0.3
  * Process sorting in 'tree' mode
  * Improved command display/sort functionality
  * Add screen for active file locks
  * Calculate library size (M_LRS column) from maps file
  * Add a Zram meter
  * Add Linux cwd process column
  * Dynamically load libsensors at runtime
  * Improve PressureStall Meter display strings
  * Hide process selection on ESC
  * Fully support non-ascii characters in Meter-Bar
  * Add support to change numeric options in settings screen
  * Rename virtual memory column from M_SIZE to M_VIRT
  * Add process column for normalized CPU usage
  * Show CPU temperature in CPU meter
  * Drop hideThreads Setting
  * Add a systemd meter
  * Add a network IO meter
  * Add a SELinux meter
  * Compress size of default FunctionBar
  * Updates to the OpenFiles screen
  * Continue updating header data in paused mode
  * BUGFIX: Handle data wraparounds in IO meters
  * BUGFIX: Update InfoScreen content on resize
  * Add security attribute process column
  * Add DiskIOMeter for IO read/write usage
  * Read CPU frequency from sysfs by default
  * Add Linux process column for context switches
  * Several FreeBSD and Mac OS X platform updates
  * Add process environment for FreeBSD
  * Parse POWER_SUPPLY_CAPACITY for Linux Battery meter
  * Add octuple-column CPU meters.
  * BUGFIX: On Linux consider ZFS ARC to be cache
  * BUGFIX: Limit screen title length to window width
  * Show selected command wrapped in a separate window
  * Allow to pass '/' for item search
  * Document implicit incremental search
  * Handle 'q' as quit if first character
  * Avoid expensive build of process tree when not using it
  * Include documentation for COMM and EXE
  * Distinguish display of no permissions for reading M_LRS
  * Only calculate M_LRS size every 2 seconds
  * Improvements to comm / cmdline display functionality
  * Merged view for COMM, EXE and cmdline
    (thanks to Narendran Gopalakrishnan and Benny Baumann)
  * Consistent kernel thread display for COMM/EXE columns
  * Central fault handling for all platforms
  * Handle parsing envID &amp; VPid from process status file
  * Use threshold for display of guest/steal/irq meters
  * Enhance highlighting of semi-large and large numbers
  * Documentation on the repository style guide
  * Align processor identifier to the right
  * Document M_PSS, M_PSSWP, M_SWAP in man page
  * Add Date and DateTime meters
  * BUGFIX: Fix Solaris 11.4 due to missing ZFS ARC kstats
  * Code hardening, speedups, fd and memory leak fixes
  * Number CPUs from zero by default
  * Remove residual python checks during the build process</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- htop 3.0.4:
  * Separate tree and list sort orders
  * PSI Meter: constant width and only print ten-duration as bar
  * Sort in paused mode after inverting sort order
  * Handle absence of package CPU temperature
  * Document dynamic bindings and assumed external configuration
  * Update key mapping documentation for sorting</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610452800">- Update to version 3.0.5:
  * InfoScreen: fix uncontrolled format string
  * Improve white text in the Light Terminal colour scheme
  * Enable the function bar on the main screen to be hidden (see Setup -&gt; Display options)
  * Reduce layout issues esp. around printing wide characters (not complete yet)
  * Make the follow function exit cleanly after followed process died
  * Update help and man page for improved -t / -s options
  * Drop usage of formatted error messages from &lt;err.h&gt;
  * Show arrow indicating order of sorted process column
  * Lots of plumbing around the internal Hashtable, hardening and code cleanups
  * LibSensors: add support for Ryzen CPUs
  * Fix CPU percentage on M1 silicon Macs
  * LoadMeter: dynamically adjust color and total of bar
  * Find libsensors.so.4 for Fedora and friends
  * Enable going back to previous search matches (Shift-F3)
  * Added keybind 'N' for sorting by PID (drops 'n'/'N' as not used before much)</changelog>
  <changelog author="kh Lai &lt;dlshcbmuipmam@hotmail.com&gt;" date="1632312000">- Add autoconf and automake as dependencies
- Switch the url to the Github release page
- Update to 3.1.0:
  * Updated COPYING file to remove the PLPA exemption (appendix 2)
    With this change the license is now GPLv2 without any additional wording.
  * Improved default sort ordering
    Note for users: This may lead to an inverted sort order on startup of
    htop 3.1.0 compared to previous versions.
    This is due to what is stored in your htoprc file. Solution: Press I
    (to invert sort order).
    This changed setting will be saved by htop on exit as long as it can
    write to your htoprc file.
  * The compile-time option to cater specifically for running htop as
    setuid has been removed
  * Add read-only option
    This allows htop to be run in an non-intrusive fashion where it acts only
    as a process viewer disabling all functions to manipulate system state.
    Note: This is not a security feature!
  * Move the code for handling the command line formatting related tasks
    to be shared across all platforms
    This means important features like stale binary/library highlighting
    can now be available on all supported platforms.
  * Make the EXE and COMM columns available on all platforms
    All supported platforms have the name of the executable (EXE) and a
    self-chosen thread/command name (COMM) available one way or the other.
    Moving this column to be handled as a platform-independently available
    information simplifies the markup of the command line.
  * Introduce configuration file versioning and config_reader_min_version
    Starting with this version the configuration file contains a version
    identifying the minimum version of the configuration parser needed to
    fully understand the configuration file format.
    Old configuration file formats are automatically upgraded when
    saving the config file (htoprc).
  * Make the configuration parser friendlier to users (thanks to Bart Bakker)
    With this change only settings that cannot be parsed properly are
    reset to their defaults.
  * Improve default display for systems with many CPUs
  * Add the process ELAPSED time column
  * Improve the process STATE column sorting
  * Reworked handling resize and redrawing of the UI
  * Fixed an issue where the LED meter mode could overflow allotted space
  * Allow text mode Meters to span empty neighbors to the right
  * Rescale graph meters when value of total changes
    (thanks to Michael Schönitzer)
  * Update generic process field display
    Usually "uninteresting" values in columns like 1 thread, nice value
    of 0, CPU and memory of 0%, idle/sleeping state, etc. are shown with
    reduced intensity (dark grey)
  * Option and key ("*") to collapse / expand all branches under PID 1
    (and PID 2 if kernel threads are shown) (thanks to Krishna Chaitanya)
  * Keep following a process when inverting the sort order, displaying
    the help screen or hiding/unhiding userland threads.
    If a thread is currently selected the selection is updated to point
    to the thread's parent process. (thanks to Gonzalo, et.al.)
  * Reorder process scanning to be performed before updating the display
    of the meters in the header
  * Always check the user for a process for any changes.
    This affects multiple platforms that previously didn't correctly handle
    the user field for a process to change at runtime (e.g. due to seteuid
    or similar syscalls).
  * Disable mouse option when support is unavailable
  * Support curses libraries without ncurses mouse support
    (thanks to Santhosh Raju)
  * Support offline and hot-swapping of CPUs on all platforms
  * Fix the CPU Meter for machines with more than 256 CPUs
  * Supplemented the "show updated/deleted executables" feature (red basename)
    to indicate when linked libraries were updated (yellow basename)
  * Apply the stale binary highlighting for the EXE column in addition to
    the command line field
  * Add new combined Memory and Swap meter
  * Implement bar and graph mode for NetworkIO Meter
    (thanks to Michael F. Schönitzer)
  * Rework TTY column to be more consistent across platforms
  * Make the CWD column generally available on all platforms
    (thanks to Santhosh Raju et. al.)
  * Add Performance Co-Pilot (PCP) platform support
    This is added via a separate pcp-htop(1) binary which provides remote host
    analysis, new Meters for any PCP metric and new Columns for any PCP process
    metric - see the pcp-htop(5) man page for further details.
    (thanks to Sohaib Mohamed)
  * Add Linux columns and key bindings for process autogroup identifier
    and nice value
  * Change available and used memory reporting on Linux to be based on
    MemAvailable (Kernel 3.14+) (thanks to Chris Cheney and Tomas Wido)
  * Add a new SysArchMeter showing kernel and platform information
    (thanks to ahgamut)
  * Linux memory usage explicitly treats tmpfs memory usage as shared memory
    This is to make memory used by tmpfs visible as this cannot be freed
    unlike normal filesystem cache data.
  * Exclude zram devices when calculating DiskIO on Linux
  * Use PATH lookup for systemctl in systemd meter (thanks to Scott Olson)
  * Add native platform support for NetBSD
    This allows htop to run on NetBSD without the need for active Linux
    emulation of the procfs filesystem.
    (thanks to Santhosh Raju and Nia Alarie)
  * Add NetworkIO, DiskIO, CPU frequency, and battery meter support on NetBSD
    (thanks to Nia Alarie)
  * Fix NetBSD display of in-use and cached memory (thanks to Nia Alarie)
  * Rework NetBSD CPU and memory accounting (thanks to Santhosh Raju)
  * Fix NetBSD accounting of user and kernel threads (thanks to Santhosh Raju)
  * Initial work to allow building with default libcurses on NetBSD
    (thanks to Santhosh Raju)
  * FreeBSD updates - implement process majflt and processor column values
  * Add FreeBSD support for CPU frequency and temperature
  * Fixes and cleanups for ZFS Meters and metrics
  * Correctly color the ZFS ARC ratio (thanks to Ross Williams)
  * Bugfixes related to CPU time display/calculations for darwin on M1 systems
    (thanks to Alexander Momchilov)
  * Harmonize the handling of multiple batteries across different platforms.
    The system is now considered to run on AC if at least one power supply
    marked as AC is found in the system.
    Battery capacity is summed up over all batteries found.
    This also changes the old behavior that batteries reported by the
    system after the first AC adapter where sometimes ignored.
  * Correctly handle multiple batteries on Darwin.
    Resolves a possible memory leak on systems with multiple batteries.
  * Handle Linux Shmem being part of Cached in the MemoryMeter
  * Add SwapCached to the Linux swap meter (thanks to David Zarzycki)
  * Convert process time to days if applicable (thanks to David Zarzycki)
  * Always show the number of threads in the TaskMeter, even when threads
    are not shown in the process list
  * Fix Linux --drop-capabilities option handling
  * Correctly detect failure to initialize Linux boottime
  * Overhaul the Linux memory fields to partition them like free(1) now does
  * Improve the Linux process I/O column values
  * Rework the libsensors parsing on Linux
  * Update the MemoryMeter to display shared memory
  * Update OpenBSD platform - implement additional columns, scan LWP,
    proper markup for STATE, show CPU frequency
  * Fix the tree view on OpenBSD when hiding kernel threads
  * Remove old InfoScreen lines before re-scanning (thanks to Øystein Hiåsen)
  * Document historic naming of Light-Weight Processes column aka threads
  * Improve user interaction when the last process entry is selected
  * Draw the panel header on the TraceScreen (thanks to Youngjae Lee)
  * Add mouse wheel scroll and fix mouse selection on the InfoScreen
    (thanks to Youngjae Lee)
  * Add a HugepageMeter and subtract hugepages from normal memory
  * Display wide characters in LED meters and restore non-wide ncurses support
  * Add command line option to drop Linux capabilities
  * Support scheduler affinity on platforms beyond Linux
  * Report on any failure to write the configuration file
  * Cache stderr to be able to print assert messages.
    These messages are shown in case htop terminates unexpectedly.
  * Print current settings on crash
  * Reset signal handlers on program exit
  * Add configure script option to create a static htop binary
  * Resolved longer-standing compilation issues on Solaris/Illumos
  * Check for availability of set_escdelay in configure
    (thanks to Stefan Polluks)
  * Build system updates for autotools 2.70</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632398400">- Enable linux capabilities
- Drop unsupported configure options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1635768000">-  Update to version 3.1.1 (boo#1192144):
  * See https://github.com/htop-dev/htop/compare/3.1.0...3.1.1</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1638273600">- Update to version 3.1.2
  * Bugfix for crash when storing modified settings at exit
  * Generate xz-compressed source tarball (with configure) using github actions
  * Allow -u UID with numerical value as argument
  * Added documentation for obsolete/state libraries/program files highlighting
  * Some obsolete/stale library highlighting refinements
  * Column width issues resolved
  * Dynamic UID column sizing improved
  * Discard stale information from Disk and Network I/O meters
  * Refined Linux kernel thread detection
  * Reworked process state handling
  * New CCGROUP column showing abbreviated cgroup name
  * New OFFSET column in the list of open files screen</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1651492800">- Update to 3.2.0:
  * Support for displaying multiple tabs in the user interface
  * Allow multiple filter and search terms (logical OR, separate by "|")
  * Set correct default sorting direction (defaultSortDesc)
  * Improve performance for process lookup and update
  * Rework the IOMeters initial display
  * Removed duplicate sections on COMM and EXE
  * Highlight process UNINTERRUPTIBLE_WAIT state (D)
  * Show only integer value when CPU% more than 99.9%
  * Handle rounding ambiguity between 99.9 and 100.0%
  * No longer leaves empty the last column in header
  * Fix header layout and meters reset if a header column is empty
  * Fix PID and UID column widths off-by-one error
  * On Linux, read generic sysfs batteries
  * On Linux, do not collect LRS per thread (it is process-wide)
  * On Linux, dynamically adjust the SECATTR and CGROUP column widths
  * On Linux, fix a crash in LXD
  * On FreeBSD, add support for showing process emulation
  * On Darwin, lazily set process TTY name
  * Always set SIGCHLD to default handling
  * Avoid zombie processes on signal races
  * Ensure last line is cleared when SIGINT is received
  * Instead of SIGTERM, pre-select the last sent signal
  * Internal Hashtable performance and sizing improvements
  * Add heuristics for guessing LXC or Docker from /proc/1/mounts
  * Force elapsed time display to zero if process started in the future
  * Avoid extremely large year values when printing time
  * Fix division by zero when calculating IO rates
  * Fix out of boundary writes in XUtils
  * Fix custom thread name display issue
  * Use AC_CANONICAL_HOST, not AC_CANONICAL_TARGET in configure.ac
  * Support libunwind of LLVM</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1654257600">- Update to 3.2.1
  * Fix setting to show all branches collapsed by default
  * Restore functionality of stripExeFromCmdline setting
  * Fix some command line display settings not being honored without restart
  * Display single digit precision for CPU% greater than 99.9%
  * On Linux, FreeBSD and PCP consider only shrinkable ZFS ARC as cache
  * On Linux, increase field width of CPUD% and SWAPD% columns
  * Colorize process state characters in help screen
  * Use mousemask(3X) to enable and disable mouse control
  * Fix heap buffer overflow in Vector_compact
  * On Solaris, fix a process time scaling error
  * On Solaris, fix the build
  * On NetBSD, OpenBSD and Solaris ensure env buffer size is sufficient
  * On Linux, resolve processes exiting interfering with sampling
  * Fix ProcessList quadratic removal when scanning processes
  * Under LXC, limit CPU count to that given by /proc/cpuinfo
  * Improve container detection for LXC
  * Some minor documentation fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675684800">- Update to 3.2.2:
  * CPUMeter now can show frequency in text mode
  * Add option to render distribution path prefixes shadowed
  * DiskIOMeter converts to bytes per second (not per interval)
  * DiskIOMeter uses complete units, including missing "iB/s"
  * DiskIOMeter indicates read and write in meter mode
  * NetworkIOMeter converts to packets per second, shows packet rate
  * Allow continued process following when changing display settings
  * Update the panel header when changing to another tab
  * Drop margin around the header if there are no meters
  * Use Unicode replacement character for non-printable characters
  * Default color preset uses bold blue for better visibility
  * Update the Panel header on sort order inversions ('I')
  * Toggle the header meters with pound key
  * Fix ScreenPanel to handle quitting the panel while renaming
  * Add fallback for HOME environment variable using passwd database
  * Replace meaningless ID column with FD column in lock screen
  * Use device format in the lock screen matching the files screen
  * On Linux, improvements to file-descriptor lock detection
  * On Linux, further distinguish systemd states in the SystemdMeter
  * On Linux, improvements to cgroup and container identification
  * On Linux, support openat(2) without readlinkat(2) platforms
  * On Darwin, fix current process buffer handling for busy systems
  * On DragonFly BSD, fix incorrect processor time of processes
  * On FreeBSD, fix an issue with the memory graph not showing correctly
  * On FreeBSD, add support for displaying shared memory usage
  * On PCP, use pmLookupDescs(3) if available for efficiency
  * On PCP, normalize generic columns values for consistent display
  * On PCP, changes preparing for configurable, dynamic screens
  * Handle invalid process columns from the configuration file
  * Avoid undefined behaviour with deeply nested processes
  * Fix crash when removing the currently active screen
  * Prevent possible crash on a very early error path
  * Include automake for Debian/Ubuntu
  * Restore non-mouse support
  * Reject unsupported command line arguments
  * Document idle process state
  * Clarify M_TRS/M_DRS columns</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686571200">- Drop no longer available configure option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1701172800">- Switch to xz compressed sources</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704974400">- Update to version 3.3.0:
  * Multiple refactorings and code improvements
  * Shorten docker container IDs to 12 characters
  * Settings: preserve empty header
  * Fix execlp() argument without pointer cast
  * OpenFilesScreen: Make column sizing dynamic for file size, offset and inode
  * Add support for "truss" (FreeBSD equivalent of "strace")
  * Darwin: add NetworkIOMeter support
  * HeaderLayout: add "3 columns - 40/30/30", "... 30/40/30" &amp; "... 30/30/40"
  * Meter: use correct unicode characters for digit '9'
  * Note in manual re default memory units of KiB
  * Add column for process container name
  * Add logic to filter the container name (+type) from the CGroup name
  * Change NetworkIOMeter value unit from KiB/s to bytes/second
  * Cap DiskIOMeter "utilisation" percentage at 100%
  * PCP platform implementation of frontswap and zswap accounting
  * Shorten podman/libpod container IDs to 12 characters
  * Write configuration to temporary file first
  * Incorporate shared memory in bar text
  * Move shared memory next to used memory
  * Correct order of memory meter in help
  * Add recalculate to Ctrl-L refresh
  * Update process list on thread visibility toggling
  * Support dynamic screens with 'top-most' entities beyond processes
  * Introduce Row and Table classes for screens beyond top-processes
  * Rework ZramMeter and remove MeterClass.comprisedValues
  * More robust logic for CPU process percentages (Linux &amp; PCP)
  * Show year as start time for processes older than a year
  * Short-term fix for docker container detection
  * default color preset: use bold blue for better visibility
  * Document 'O' keyboard shortcut
  * Implement logic for '--max-iterations'
  * Update F5 key label on tab switch (Tree &lt;-&gt; List)
  * Force re-sorting of the process list view after switching between list/treeview mode
  * Linux: (hack) work around the fact that Zswapped pages may be SwapCached
  * Linux: implement zswap support
  * {Memory,Swap}Meter: add "compressed memory" metrics
  * Darwin: add DiskIOMeter support
  * Fix scroll relative to followed process
  * ZramMeter: update bar mode
  * Use shared real memory on FreeBSD
  * Increase Search and Filter max string length to 128
  * Improve CPU computation code
  * Remove LXC special handling for the CPU count
  * Create new File Descriptor meter
  * PCP: add IRQ PSI meter
  * Linux: add IRQ PSI meter
  * Linux: highlight username if process has elevated privileges
  * Add support for scheduling policies
  * Add a systemd user meter to monitor user units.
  * FreeBSD: remove duplicate zfs ARC size subtraction</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1742990400">- Update to version 3.4.0:
  * Improve Darwin support for ARM-based systems
  * Fix static linking with libsystemd
  * Various build fixes for DragonFlyBSD, Darwin, NetBSD, OpenBSD &amp; Solaris
  * Fix running task display (count)
  * Fix sort order handling in tree mode
  * Add warning when exiting with a signal (not saving .htoprc)
  * Add Disk I/O and Network I/O meter for DragonFlyBSD
  * Improve handling of invalid Unicode strings
  * Disable basename checking for kernel tasks
  * Updated documentation for pcp-htop
  * Disable FOCUS_IN/FOCUS_OUT event handling
  * Add GPU meter for Linux and PCP
  * Add colum for GPU time per process on Linux and PCP
  * Avoid glibc FILE API voodoo
  * Ignore previously unhandled signals USR1 and USR2
  * Force locating the config file to only use absolute paths
  * Prefer reading htoprc from ~/.config/htop/htoprc over legacy ~/.htoprc
  * Force writing the configuration to a regular file
  * Use distinct config files for htop and pcp-htop
  * Link libnl3 at runtime
  * Gather permitted capabilities via capget(2)
  * Avoid fetching certain process information for each thread on Linux (speed up)
  * Improved handling for invalid data in /proc/tty/drivers on Linux
  * Various changes to avoid memory allocations inside signal handlers
  * Add single column header layout
  * Fix DivByZero bug on startup on Darwin
  * Include thread information on Darwin
  * Show process state on Darwin
  * Update compat check for C23 compilers
  * Improved detail in help screen
  * Unicode support for CGROUP, CCGROUP, CONTAINER and SECATTR columns
  * Mark newline characters in the process command line display
  * Resolve nested derived metrics for PCP
  * Make supported modes/styles specific to each meter
  * Refined checks for terminals supporting to redefine keys
  * Fix handling of the NICE value on FreeBSD
  * Fix display of CPU utilization on FreeBSD
  * Honour update interval adjustments properly without restart
  * Force rebuild of display table after item removals
  * Reworked handling for various temperature sensors
  * Fix high CPU load when the strace'd process exits prematurely
  * Document --drop-capabilities to require a compile time support
  * Always call PKG_PROG_PKG_CONFIG in configure
  * Make configure warn when pkg.m4 is absent
  * Rewrite curses/terminfo detection code in configure
  * Keep following a process when resuming process updates (Z key)
  * Normalize Disk I/O usage and allow utilization above 100%
  * Plug several memory leaks and improve performance for information parsing
  * Allow to show or hide cache and buffers in memory usage meter
  * Visibility hint and UX improvements in status bar of display options panel
  * Remove IOKit / IOMainPort / IOMMasterPort logic for Darwin builds
  * Replace BCC with metrics from BPF for pcp-htop</changelog>
</package>
<package pkgid="f8d55b9dd04c9ed31ed871b51831599e1bd77765b4b0ff02c117dbbbb171170e" name="htop" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1523534400">- Simplify spec file
  * Drop support for building on older distros
  * Trim describtion
- Enable delayacct</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1587643200">- Add patches:
  * htop-2.2.0-fix-linux-process-ordering.patch
  * htop-2.2.0-fix-option-string.patch (fixes boo#1165352)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Fix building with gcc10:
  * htop-2.2.0-gcc10.patch</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1598702400">- Update to version 3.0.0
  * Add simple, optional vim key mapping mode
  * Support more than 2 smaller CPU meter columns
  * Support Linux proportional set size metrics
  * Support Linux pressure stall information metrics
  * New display option to show CPU frequency in CPU meters
  * Update Linux sysfs battery discovery for recent kernels
  * Add hardware topology information in the affinity panel
  * Add timestamp reporting to the strace screen
  * Added an option to disable the mouse
  * Without an argument -u uses $USER value automatically
  * Support less(1) search navigation shortcuts
  * Support ZFS ARC statistics
  * Report values larger than 100 terabytes
  * Widen ST_UID (UID) column to allow for UIDs &gt; 9999
  * BUGFIX: fix makefiles for building with clang
  * BUGFIX: fix &lt;sys/sysmacros.h&gt; major() usage
  * BUGFIX: correctly identify other types of zombie process
  * BUGFIX: improve follow-process handling in some situations
  * BUGFIX: fix custom meters reverting to unexpected setting
  * BUGFIX: close pipe after running lsof(1)
  * BUGFIX: meters honour setting of counting CPUs from 0/1
- Drop htop-2.2.0.tar.gz.asc - no sig provided
- Upstreamed patches removed:
  * Drop htop-2.2.0-fix-linux-process-ordering.patch
  * Drop htop-2.2.0-fix-option-string.patch
  * Drop htop-2.2.0-gcc10.patch
  * Drop htop-desktop-file-fix-thoenig-01.patch
  * Drop htop-script-python3.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599393600">- Update to version 3.0.1
  * BUGFIX: Fix early exit with longer sysfs battery paths
  * BUGFIX: Improve OOM output, fix sorting
  * Rework check buttons and tree open/closed
  * Add -U/--no-unicode option to disable unicode
  * Improvements to the affinity panel</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1600171200">- Update to version 3.0.2
  * BUGFIX: Drop 'vim_mode' - several issues, needs rethink
  * BUGFIX: fix regression in -u optional-argument handling
  * Build system rework to remove python, header generation
  * CI, code quality improvements
- Switch to new official bintray tarball to remove automake deps</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1607342400">- Update to version 3.0.3
  * Process sorting in 'tree' mode
  * Improved command display/sort functionality
  * Add screen for active file locks
  * Calculate library size (M_LRS column) from maps file
  * Add a Zram meter
  * Add Linux cwd process column
  * Dynamically load libsensors at runtime
  * Improve PressureStall Meter display strings
  * Hide process selection on ESC
  * Fully support non-ascii characters in Meter-Bar
  * Add support to change numeric options in settings screen
  * Rename virtual memory column from M_SIZE to M_VIRT
  * Add process column for normalized CPU usage
  * Show CPU temperature in CPU meter
  * Drop hideThreads Setting
  * Add a systemd meter
  * Add a network IO meter
  * Add a SELinux meter
  * Compress size of default FunctionBar
  * Updates to the OpenFiles screen
  * Continue updating header data in paused mode
  * BUGFIX: Handle data wraparounds in IO meters
  * BUGFIX: Update InfoScreen content on resize
  * Add security attribute process column
  * Add DiskIOMeter for IO read/write usage
  * Read CPU frequency from sysfs by default
  * Add Linux process column for context switches
  * Several FreeBSD and Mac OS X platform updates
  * Add process environment for FreeBSD
  * Parse POWER_SUPPLY_CAPACITY for Linux Battery meter
  * Add octuple-column CPU meters.
  * BUGFIX: On Linux consider ZFS ARC to be cache
  * BUGFIX: Limit screen title length to window width
  * Show selected command wrapped in a separate window
  * Allow to pass '/' for item search
  * Document implicit incremental search
  * Handle 'q' as quit if first character
  * Avoid expensive build of process tree when not using it
  * Include documentation for COMM and EXE
  * Distinguish display of no permissions for reading M_LRS
  * Only calculate M_LRS size every 2 seconds
  * Improvements to comm / cmdline display functionality
  * Merged view for COMM, EXE and cmdline
    (thanks to Narendran Gopalakrishnan and Benny Baumann)
  * Consistent kernel thread display for COMM/EXE columns
  * Central fault handling for all platforms
  * Handle parsing envID &amp; VPid from process status file
  * Use threshold for display of guest/steal/irq meters
  * Enhance highlighting of semi-large and large numbers
  * Documentation on the repository style guide
  * Align processor identifier to the right
  * Document M_PSS, M_PSSWP, M_SWAP in man page
  * Add Date and DateTime meters
  * BUGFIX: Fix Solaris 11.4 due to missing ZFS ARC kstats
  * Code hardening, speedups, fd and memory leak fixes
  * Number CPUs from zero by default
  * Remove residual python checks during the build process</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- htop 3.0.4:
  * Separate tree and list sort orders
  * PSI Meter: constant width and only print ten-duration as bar
  * Sort in paused mode after inverting sort order
  * Handle absence of package CPU temperature
  * Document dynamic bindings and assumed external configuration
  * Update key mapping documentation for sorting</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610452800">- Update to version 3.0.5:
  * InfoScreen: fix uncontrolled format string
  * Improve white text in the Light Terminal colour scheme
  * Enable the function bar on the main screen to be hidden (see Setup -&gt; Display options)
  * Reduce layout issues esp. around printing wide characters (not complete yet)
  * Make the follow function exit cleanly after followed process died
  * Update help and man page for improved -t / -s options
  * Drop usage of formatted error messages from &lt;err.h&gt;
  * Show arrow indicating order of sorted process column
  * Lots of plumbing around the internal Hashtable, hardening and code cleanups
  * LibSensors: add support for Ryzen CPUs
  * Fix CPU percentage on M1 silicon Macs
  * LoadMeter: dynamically adjust color and total of bar
  * Find libsensors.so.4 for Fedora and friends
  * Enable going back to previous search matches (Shift-F3)
  * Added keybind 'N' for sorting by PID (drops 'n'/'N' as not used before much)</changelog>
  <changelog author="kh Lai &lt;dlshcbmuipmam@hotmail.com&gt;" date="1632312000">- Add autoconf and automake as dependencies
- Switch the url to the Github release page
- Update to 3.1.0:
  * Updated COPYING file to remove the PLPA exemption (appendix 2)
    With this change the license is now GPLv2 without any additional wording.
  * Improved default sort ordering
    Note for users: This may lead to an inverted sort order on startup of
    htop 3.1.0 compared to previous versions.
    This is due to what is stored in your htoprc file. Solution: Press I
    (to invert sort order).
    This changed setting will be saved by htop on exit as long as it can
    write to your htoprc file.
  * The compile-time option to cater specifically for running htop as
    setuid has been removed
  * Add read-only option
    This allows htop to be run in an non-intrusive fashion where it acts only
    as a process viewer disabling all functions to manipulate system state.
    Note: This is not a security feature!
  * Move the code for handling the command line formatting related tasks
    to be shared across all platforms
    This means important features like stale binary/library highlighting
    can now be available on all supported platforms.
  * Make the EXE and COMM columns available on all platforms
    All supported platforms have the name of the executable (EXE) and a
    self-chosen thread/command name (COMM) available one way or the other.
    Moving this column to be handled as a platform-independently available
    information simplifies the markup of the command line.
  * Introduce configuration file versioning and config_reader_min_version
    Starting with this version the configuration file contains a version
    identifying the minimum version of the configuration parser needed to
    fully understand the configuration file format.
    Old configuration file formats are automatically upgraded when
    saving the config file (htoprc).
  * Make the configuration parser friendlier to users (thanks to Bart Bakker)
    With this change only settings that cannot be parsed properly are
    reset to their defaults.
  * Improve default display for systems with many CPUs
  * Add the process ELAPSED time column
  * Improve the process STATE column sorting
  * Reworked handling resize and redrawing of the UI
  * Fixed an issue where the LED meter mode could overflow allotted space
  * Allow text mode Meters to span empty neighbors to the right
  * Rescale graph meters when value of total changes
    (thanks to Michael Schönitzer)
  * Update generic process field display
    Usually "uninteresting" values in columns like 1 thread, nice value
    of 0, CPU and memory of 0%, idle/sleeping state, etc. are shown with
    reduced intensity (dark grey)
  * Option and key ("*") to collapse / expand all branches under PID 1
    (and PID 2 if kernel threads are shown) (thanks to Krishna Chaitanya)
  * Keep following a process when inverting the sort order, displaying
    the help screen or hiding/unhiding userland threads.
    If a thread is currently selected the selection is updated to point
    to the thread's parent process. (thanks to Gonzalo, et.al.)
  * Reorder process scanning to be performed before updating the display
    of the meters in the header
  * Always check the user for a process for any changes.
    This affects multiple platforms that previously didn't correctly handle
    the user field for a process to change at runtime (e.g. due to seteuid
    or similar syscalls).
  * Disable mouse option when support is unavailable
  * Support curses libraries without ncurses mouse support
    (thanks to Santhosh Raju)
  * Support offline and hot-swapping of CPUs on all platforms
  * Fix the CPU Meter for machines with more than 256 CPUs
  * Supplemented the "show updated/deleted executables" feature (red basename)
    to indicate when linked libraries were updated (yellow basename)
  * Apply the stale binary highlighting for the EXE column in addition to
    the command line field
  * Add new combined Memory and Swap meter
  * Implement bar and graph mode for NetworkIO Meter
    (thanks to Michael F. Schönitzer)
  * Rework TTY column to be more consistent across platforms
  * Make the CWD column generally available on all platforms
    (thanks to Santhosh Raju et. al.)
  * Add Performance Co-Pilot (PCP) platform support
    This is added via a separate pcp-htop(1) binary which provides remote host
    analysis, new Meters for any PCP metric and new Columns for any PCP process
    metric - see the pcp-htop(5) man page for further details.
    (thanks to Sohaib Mohamed)
  * Add Linux columns and key bindings for process autogroup identifier
    and nice value
  * Change available and used memory reporting on Linux to be based on
    MemAvailable (Kernel 3.14+) (thanks to Chris Cheney and Tomas Wido)
  * Add a new SysArchMeter showing kernel and platform information
    (thanks to ahgamut)
  * Linux memory usage explicitly treats tmpfs memory usage as shared memory
    This is to make memory used by tmpfs visible as this cannot be freed
    unlike normal filesystem cache data.
  * Exclude zram devices when calculating DiskIO on Linux
  * Use PATH lookup for systemctl in systemd meter (thanks to Scott Olson)
  * Add native platform support for NetBSD
    This allows htop to run on NetBSD without the need for active Linux
    emulation of the procfs filesystem.
    (thanks to Santhosh Raju and Nia Alarie)
  * Add NetworkIO, DiskIO, CPU frequency, and battery meter support on NetBSD
    (thanks to Nia Alarie)
  * Fix NetBSD display of in-use and cached memory (thanks to Nia Alarie)
  * Rework NetBSD CPU and memory accounting (thanks to Santhosh Raju)
  * Fix NetBSD accounting of user and kernel threads (thanks to Santhosh Raju)
  * Initial work to allow building with default libcurses on NetBSD
    (thanks to Santhosh Raju)
  * FreeBSD updates - implement process majflt and processor column values
  * Add FreeBSD support for CPU frequency and temperature
  * Fixes and cleanups for ZFS Meters and metrics
  * Correctly color the ZFS ARC ratio (thanks to Ross Williams)
  * Bugfixes related to CPU time display/calculations for darwin on M1 systems
    (thanks to Alexander Momchilov)
  * Harmonize the handling of multiple batteries across different platforms.
    The system is now considered to run on AC if at least one power supply
    marked as AC is found in the system.
    Battery capacity is summed up over all batteries found.
    This also changes the old behavior that batteries reported by the
    system after the first AC adapter where sometimes ignored.
  * Correctly handle multiple batteries on Darwin.
    Resolves a possible memory leak on systems with multiple batteries.
  * Handle Linux Shmem being part of Cached in the MemoryMeter
  * Add SwapCached to the Linux swap meter (thanks to David Zarzycki)
  * Convert process time to days if applicable (thanks to David Zarzycki)
  * Always show the number of threads in the TaskMeter, even when threads
    are not shown in the process list
  * Fix Linux --drop-capabilities option handling
  * Correctly detect failure to initialize Linux boottime
  * Overhaul the Linux memory fields to partition them like free(1) now does
  * Improve the Linux process I/O column values
  * Rework the libsensors parsing on Linux
  * Update the MemoryMeter to display shared memory
  * Update OpenBSD platform - implement additional columns, scan LWP,
    proper markup for STATE, show CPU frequency
  * Fix the tree view on OpenBSD when hiding kernel threads
  * Remove old InfoScreen lines before re-scanning (thanks to Øystein Hiåsen)
  * Document historic naming of Light-Weight Processes column aka threads
  * Improve user interaction when the last process entry is selected
  * Draw the panel header on the TraceScreen (thanks to Youngjae Lee)
  * Add mouse wheel scroll and fix mouse selection on the InfoScreen
    (thanks to Youngjae Lee)
  * Add a HugepageMeter and subtract hugepages from normal memory
  * Display wide characters in LED meters and restore non-wide ncurses support
  * Add command line option to drop Linux capabilities
  * Support scheduler affinity on platforms beyond Linux
  * Report on any failure to write the configuration file
  * Cache stderr to be able to print assert messages.
    These messages are shown in case htop terminates unexpectedly.
  * Print current settings on crash
  * Reset signal handlers on program exit
  * Add configure script option to create a static htop binary
  * Resolved longer-standing compilation issues on Solaris/Illumos
  * Check for availability of set_escdelay in configure
    (thanks to Stefan Polluks)
  * Build system updates for autotools 2.70</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632398400">- Enable linux capabilities
- Drop unsupported configure options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1635768000">-  Update to version 3.1.1 (boo#1192144):
  * See https://github.com/htop-dev/htop/compare/3.1.0...3.1.1</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1638273600">- Update to version 3.1.2
  * Bugfix for crash when storing modified settings at exit
  * Generate xz-compressed source tarball (with configure) using github actions
  * Allow -u UID with numerical value as argument
  * Added documentation for obsolete/state libraries/program files highlighting
  * Some obsolete/stale library highlighting refinements
  * Column width issues resolved
  * Dynamic UID column sizing improved
  * Discard stale information from Disk and Network I/O meters
  * Refined Linux kernel thread detection
  * Reworked process state handling
  * New CCGROUP column showing abbreviated cgroup name
  * New OFFSET column in the list of open files screen</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1651492800">- Update to 3.2.0:
  * Support for displaying multiple tabs in the user interface
  * Allow multiple filter and search terms (logical OR, separate by "|")
  * Set correct default sorting direction (defaultSortDesc)
  * Improve performance for process lookup and update
  * Rework the IOMeters initial display
  * Removed duplicate sections on COMM and EXE
  * Highlight process UNINTERRUPTIBLE_WAIT state (D)
  * Show only integer value when CPU% more than 99.9%
  * Handle rounding ambiguity between 99.9 and 100.0%
  * No longer leaves empty the last column in header
  * Fix header layout and meters reset if a header column is empty
  * Fix PID and UID column widths off-by-one error
  * On Linux, read generic sysfs batteries
  * On Linux, do not collect LRS per thread (it is process-wide)
  * On Linux, dynamically adjust the SECATTR and CGROUP column widths
  * On Linux, fix a crash in LXD
  * On FreeBSD, add support for showing process emulation
  * On Darwin, lazily set process TTY name
  * Always set SIGCHLD to default handling
  * Avoid zombie processes on signal races
  * Ensure last line is cleared when SIGINT is received
  * Instead of SIGTERM, pre-select the last sent signal
  * Internal Hashtable performance and sizing improvements
  * Add heuristics for guessing LXC or Docker from /proc/1/mounts
  * Force elapsed time display to zero if process started in the future
  * Avoid extremely large year values when printing time
  * Fix division by zero when calculating IO rates
  * Fix out of boundary writes in XUtils
  * Fix custom thread name display issue
  * Use AC_CANONICAL_HOST, not AC_CANONICAL_TARGET in configure.ac
  * Support libunwind of LLVM</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1654257600">- Update to 3.2.1
  * Fix setting to show all branches collapsed by default
  * Restore functionality of stripExeFromCmdline setting
  * Fix some command line display settings not being honored without restart
  * Display single digit precision for CPU% greater than 99.9%
  * On Linux, FreeBSD and PCP consider only shrinkable ZFS ARC as cache
  * On Linux, increase field width of CPUD% and SWAPD% columns
  * Colorize process state characters in help screen
  * Use mousemask(3X) to enable and disable mouse control
  * Fix heap buffer overflow in Vector_compact
  * On Solaris, fix a process time scaling error
  * On Solaris, fix the build
  * On NetBSD, OpenBSD and Solaris ensure env buffer size is sufficient
  * On Linux, resolve processes exiting interfering with sampling
  * Fix ProcessList quadratic removal when scanning processes
  * Under LXC, limit CPU count to that given by /proc/cpuinfo
  * Improve container detection for LXC
  * Some minor documentation fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675684800">- Update to 3.2.2:
  * CPUMeter now can show frequency in text mode
  * Add option to render distribution path prefixes shadowed
  * DiskIOMeter converts to bytes per second (not per interval)
  * DiskIOMeter uses complete units, including missing "iB/s"
  * DiskIOMeter indicates read and write in meter mode
  * NetworkIOMeter converts to packets per second, shows packet rate
  * Allow continued process following when changing display settings
  * Update the panel header when changing to another tab
  * Drop margin around the header if there are no meters
  * Use Unicode replacement character for non-printable characters
  * Default color preset uses bold blue for better visibility
  * Update the Panel header on sort order inversions ('I')
  * Toggle the header meters with pound key
  * Fix ScreenPanel to handle quitting the panel while renaming
  * Add fallback for HOME environment variable using passwd database
  * Replace meaningless ID column with FD column in lock screen
  * Use device format in the lock screen matching the files screen
  * On Linux, improvements to file-descriptor lock detection
  * On Linux, further distinguish systemd states in the SystemdMeter
  * On Linux, improvements to cgroup and container identification
  * On Linux, support openat(2) without readlinkat(2) platforms
  * On Darwin, fix current process buffer handling for busy systems
  * On DragonFly BSD, fix incorrect processor time of processes
  * On FreeBSD, fix an issue with the memory graph not showing correctly
  * On FreeBSD, add support for displaying shared memory usage
  * On PCP, use pmLookupDescs(3) if available for efficiency
  * On PCP, normalize generic columns values for consistent display
  * On PCP, changes preparing for configurable, dynamic screens
  * Handle invalid process columns from the configuration file
  * Avoid undefined behaviour with deeply nested processes
  * Fix crash when removing the currently active screen
  * Prevent possible crash on a very early error path
  * Include automake for Debian/Ubuntu
  * Restore non-mouse support
  * Reject unsupported command line arguments
  * Document idle process state
  * Clarify M_TRS/M_DRS columns</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686571200">- Drop no longer available configure option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1701172800">- Switch to xz compressed sources</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704974400">- Update to version 3.3.0:
  * Multiple refactorings and code improvements
  * Shorten docker container IDs to 12 characters
  * Settings: preserve empty header
  * Fix execlp() argument without pointer cast
  * OpenFilesScreen: Make column sizing dynamic for file size, offset and inode
  * Add support for "truss" (FreeBSD equivalent of "strace")
  * Darwin: add NetworkIOMeter support
  * HeaderLayout: add "3 columns - 40/30/30", "... 30/40/30" &amp; "... 30/30/40"
  * Meter: use correct unicode characters for digit '9'
  * Note in manual re default memory units of KiB
  * Add column for process container name
  * Add logic to filter the container name (+type) from the CGroup name
  * Change NetworkIOMeter value unit from KiB/s to bytes/second
  * Cap DiskIOMeter "utilisation" percentage at 100%
  * PCP platform implementation of frontswap and zswap accounting
  * Shorten podman/libpod container IDs to 12 characters
  * Write configuration to temporary file first
  * Incorporate shared memory in bar text
  * Move shared memory next to used memory
  * Correct order of memory meter in help
  * Add recalculate to Ctrl-L refresh
  * Update process list on thread visibility toggling
  * Support dynamic screens with 'top-most' entities beyond processes
  * Introduce Row and Table classes for screens beyond top-processes
  * Rework ZramMeter and remove MeterClass.comprisedValues
  * More robust logic for CPU process percentages (Linux &amp; PCP)
  * Show year as start time for processes older than a year
  * Short-term fix for docker container detection
  * default color preset: use bold blue for better visibility
  * Document 'O' keyboard shortcut
  * Implement logic for '--max-iterations'
  * Update F5 key label on tab switch (Tree &lt;-&gt; List)
  * Force re-sorting of the process list view after switching between list/treeview mode
  * Linux: (hack) work around the fact that Zswapped pages may be SwapCached
  * Linux: implement zswap support
  * {Memory,Swap}Meter: add "compressed memory" metrics
  * Darwin: add DiskIOMeter support
  * Fix scroll relative to followed process
  * ZramMeter: update bar mode
  * Use shared real memory on FreeBSD
  * Increase Search and Filter max string length to 128
  * Improve CPU computation code
  * Remove LXC special handling for the CPU count
  * Create new File Descriptor meter
  * PCP: add IRQ PSI meter
  * Linux: add IRQ PSI meter
  * Linux: highlight username if process has elevated privileges
  * Add support for scheduling policies
  * Add a systemd user meter to monitor user units.
  * FreeBSD: remove duplicate zfs ARC size subtraction</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1742990400">- Update to version 3.4.0:
  * Improve Darwin support for ARM-based systems
  * Fix static linking with libsystemd
  * Various build fixes for DragonFlyBSD, Darwin, NetBSD, OpenBSD &amp; Solaris
  * Fix running task display (count)
  * Fix sort order handling in tree mode
  * Add warning when exiting with a signal (not saving .htoprc)
  * Add Disk I/O and Network I/O meter for DragonFlyBSD
  * Improve handling of invalid Unicode strings
  * Disable basename checking for kernel tasks
  * Updated documentation for pcp-htop
  * Disable FOCUS_IN/FOCUS_OUT event handling
  * Add GPU meter for Linux and PCP
  * Add colum for GPU time per process on Linux and PCP
  * Avoid glibc FILE API voodoo
  * Ignore previously unhandled signals USR1 and USR2
  * Force locating the config file to only use absolute paths
  * Prefer reading htoprc from ~/.config/htop/htoprc over legacy ~/.htoprc
  * Force writing the configuration to a regular file
  * Use distinct config files for htop and pcp-htop
  * Link libnl3 at runtime
  * Gather permitted capabilities via capget(2)
  * Avoid fetching certain process information for each thread on Linux (speed up)
  * Improved handling for invalid data in /proc/tty/drivers on Linux
  * Various changes to avoid memory allocations inside signal handlers
  * Add single column header layout
  * Fix DivByZero bug on startup on Darwin
  * Include thread information on Darwin
  * Show process state on Darwin
  * Update compat check for C23 compilers
  * Improved detail in help screen
  * Unicode support for CGROUP, CCGROUP, CONTAINER and SECATTR columns
  * Mark newline characters in the process command line display
  * Resolve nested derived metrics for PCP
  * Make supported modes/styles specific to each meter
  * Refined checks for terminals supporting to redefine keys
  * Fix handling of the NICE value on FreeBSD
  * Fix display of CPU utilization on FreeBSD
  * Honour update interval adjustments properly without restart
  * Force rebuild of display table after item removals
  * Reworked handling for various temperature sensors
  * Fix high CPU load when the strace'd process exits prematurely
  * Document --drop-capabilities to require a compile time support
  * Always call PKG_PROG_PKG_CONFIG in configure
  * Make configure warn when pkg.m4 is absent
  * Rewrite curses/terminfo detection code in configure
  * Keep following a process when resuming process updates (Z key)
  * Normalize Disk I/O usage and allow utilization above 100%
  * Plug several memory leaks and improve performance for information parsing
  * Allow to show or hide cache and buffers in memory usage meter
  * Visibility hint and UX improvements in status bar of display options panel
  * Remove IOKit / IOMainPort / IOMMasterPort logic for Darwin builds
  * Replace BCC with metrics from BPF for pcp-htop</changelog>
</package>
<package pkgid="482fa3071c3424182a60ff5cc78c5938e8d32e17dc85ebd4cba8f65ba29875c1" name="htop" arch="aarch64">
  <version epoch="0" ver="3.4.1" rel="bp156.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1587643200">- Add patches:
  * htop-2.2.0-fix-linux-process-ordering.patch
  * htop-2.2.0-fix-option-string.patch (fixes boo#1165352)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Fix building with gcc10:
  * htop-2.2.0-gcc10.patch</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1598702400">- Update to version 3.0.0
  * Add simple, optional vim key mapping mode
  * Support more than 2 smaller CPU meter columns
  * Support Linux proportional set size metrics
  * Support Linux pressure stall information metrics
  * New display option to show CPU frequency in CPU meters
  * Update Linux sysfs battery discovery for recent kernels
  * Add hardware topology information in the affinity panel
  * Add timestamp reporting to the strace screen
  * Added an option to disable the mouse
  * Without an argument -u uses $USER value automatically
  * Support less(1) search navigation shortcuts
  * Support ZFS ARC statistics
  * Report values larger than 100 terabytes
  * Widen ST_UID (UID) column to allow for UIDs &gt; 9999
  * BUGFIX: fix makefiles for building with clang
  * BUGFIX: fix &lt;sys/sysmacros.h&gt; major() usage
  * BUGFIX: correctly identify other types of zombie process
  * BUGFIX: improve follow-process handling in some situations
  * BUGFIX: fix custom meters reverting to unexpected setting
  * BUGFIX: close pipe after running lsof(1)
  * BUGFIX: meters honour setting of counting CPUs from 0/1
- Drop htop-2.2.0.tar.gz.asc - no sig provided
- Upstreamed patches removed:
  * Drop htop-2.2.0-fix-linux-process-ordering.patch
  * Drop htop-2.2.0-fix-option-string.patch
  * Drop htop-2.2.0-gcc10.patch
  * Drop htop-desktop-file-fix-thoenig-01.patch
  * Drop htop-script-python3.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599393600">- Update to version 3.0.1
  * BUGFIX: Fix early exit with longer sysfs battery paths
  * BUGFIX: Improve OOM output, fix sorting
  * Rework check buttons and tree open/closed
  * Add -U/--no-unicode option to disable unicode
  * Improvements to the affinity panel</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1600171200">- Update to version 3.0.2
  * BUGFIX: Drop 'vim_mode' - several issues, needs rethink
  * BUGFIX: fix regression in -u optional-argument handling
  * Build system rework to remove python, header generation
  * CI, code quality improvements
- Switch to new official bintray tarball to remove automake deps</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1607342400">- Update to version 3.0.3
  * Process sorting in 'tree' mode
  * Improved command display/sort functionality
  * Add screen for active file locks
  * Calculate library size (M_LRS column) from maps file
  * Add a Zram meter
  * Add Linux cwd process column
  * Dynamically load libsensors at runtime
  * Improve PressureStall Meter display strings
  * Hide process selection on ESC
  * Fully support non-ascii characters in Meter-Bar
  * Add support to change numeric options in settings screen
  * Rename virtual memory column from M_SIZE to M_VIRT
  * Add process column for normalized CPU usage
  * Show CPU temperature in CPU meter
  * Drop hideThreads Setting
  * Add a systemd meter
  * Add a network IO meter
  * Add a SELinux meter
  * Compress size of default FunctionBar
  * Updates to the OpenFiles screen
  * Continue updating header data in paused mode
  * BUGFIX: Handle data wraparounds in IO meters
  * BUGFIX: Update InfoScreen content on resize
  * Add security attribute process column
  * Add DiskIOMeter for IO read/write usage
  * Read CPU frequency from sysfs by default
  * Add Linux process column for context switches
  * Several FreeBSD and Mac OS X platform updates
  * Add process environment for FreeBSD
  * Parse POWER_SUPPLY_CAPACITY for Linux Battery meter
  * Add octuple-column CPU meters.
  * BUGFIX: On Linux consider ZFS ARC to be cache
  * BUGFIX: Limit screen title length to window width
  * Show selected command wrapped in a separate window
  * Allow to pass '/' for item search
  * Document implicit incremental search
  * Handle 'q' as quit if first character
  * Avoid expensive build of process tree when not using it
  * Include documentation for COMM and EXE
  * Distinguish display of no permissions for reading M_LRS
  * Only calculate M_LRS size every 2 seconds
  * Improvements to comm / cmdline display functionality
  * Merged view for COMM, EXE and cmdline
    (thanks to Narendran Gopalakrishnan and Benny Baumann)
  * Consistent kernel thread display for COMM/EXE columns
  * Central fault handling for all platforms
  * Handle parsing envID &amp; VPid from process status file
  * Use threshold for display of guest/steal/irq meters
  * Enhance highlighting of semi-large and large numbers
  * Documentation on the repository style guide
  * Align processor identifier to the right
  * Document M_PSS, M_PSSWP, M_SWAP in man page
  * Add Date and DateTime meters
  * BUGFIX: Fix Solaris 11.4 due to missing ZFS ARC kstats
  * Code hardening, speedups, fd and memory leak fixes
  * Number CPUs from zero by default
  * Remove residual python checks during the build process</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- htop 3.0.4:
  * Separate tree and list sort orders
  * PSI Meter: constant width and only print ten-duration as bar
  * Sort in paused mode after inverting sort order
  * Handle absence of package CPU temperature
  * Document dynamic bindings and assumed external configuration
  * Update key mapping documentation for sorting</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610452800">- Update to version 3.0.5:
  * InfoScreen: fix uncontrolled format string
  * Improve white text in the Light Terminal colour scheme
  * Enable the function bar on the main screen to be hidden (see Setup -&gt; Display options)
  * Reduce layout issues esp. around printing wide characters (not complete yet)
  * Make the follow function exit cleanly after followed process died
  * Update help and man page for improved -t / -s options
  * Drop usage of formatted error messages from &lt;err.h&gt;
  * Show arrow indicating order of sorted process column
  * Lots of plumbing around the internal Hashtable, hardening and code cleanups
  * LibSensors: add support for Ryzen CPUs
  * Fix CPU percentage on M1 silicon Macs
  * LoadMeter: dynamically adjust color and total of bar
  * Find libsensors.so.4 for Fedora and friends
  * Enable going back to previous search matches (Shift-F3)
  * Added keybind 'N' for sorting by PID (drops 'n'/'N' as not used before much)</changelog>
  <changelog author="kh Lai &lt;dlshcbmuipmam@hotmail.com&gt;" date="1632312000">- Add autoconf and automake as dependencies
- Switch the url to the Github release page
- Update to 3.1.0:
  * Updated COPYING file to remove the PLPA exemption (appendix 2)
    With this change the license is now GPLv2 without any additional wording.
  * Improved default sort ordering
    Note for users: This may lead to an inverted sort order on startup of
    htop 3.1.0 compared to previous versions.
    This is due to what is stored in your htoprc file. Solution: Press I
    (to invert sort order).
    This changed setting will be saved by htop on exit as long as it can
    write to your htoprc file.
  * The compile-time option to cater specifically for running htop as
    setuid has been removed
  * Add read-only option
    This allows htop to be run in an non-intrusive fashion where it acts only
    as a process viewer disabling all functions to manipulate system state.
    Note: This is not a security feature!
  * Move the code for handling the command line formatting related tasks
    to be shared across all platforms
    This means important features like stale binary/library highlighting
    can now be available on all supported platforms.
  * Make the EXE and COMM columns available on all platforms
    All supported platforms have the name of the executable (EXE) and a
    self-chosen thread/command name (COMM) available one way or the other.
    Moving this column to be handled as a platform-independently available
    information simplifies the markup of the command line.
  * Introduce configuration file versioning and config_reader_min_version
    Starting with this version the configuration file contains a version
    identifying the minimum version of the configuration parser needed to
    fully understand the configuration file format.
    Old configuration file formats are automatically upgraded when
    saving the config file (htoprc).
  * Make the configuration parser friendlier to users (thanks to Bart Bakker)
    With this change only settings that cannot be parsed properly are
    reset to their defaults.
  * Improve default display for systems with many CPUs
  * Add the process ELAPSED time column
  * Improve the process STATE column sorting
  * Reworked handling resize and redrawing of the UI
  * Fixed an issue where the LED meter mode could overflow allotted space
  * Allow text mode Meters to span empty neighbors to the right
  * Rescale graph meters when value of total changes
    (thanks to Michael Schönitzer)
  * Update generic process field display
    Usually "uninteresting" values in columns like 1 thread, nice value
    of 0, CPU and memory of 0%, idle/sleeping state, etc. are shown with
    reduced intensity (dark grey)
  * Option and key ("*") to collapse / expand all branches under PID 1
    (and PID 2 if kernel threads are shown) (thanks to Krishna Chaitanya)
  * Keep following a process when inverting the sort order, displaying
    the help screen or hiding/unhiding userland threads.
    If a thread is currently selected the selection is updated to point
    to the thread's parent process. (thanks to Gonzalo, et.al.)
  * Reorder process scanning to be performed before updating the display
    of the meters in the header
  * Always check the user for a process for any changes.
    This affects multiple platforms that previously didn't correctly handle
    the user field for a process to change at runtime (e.g. due to seteuid
    or similar syscalls).
  * Disable mouse option when support is unavailable
  * Support curses libraries without ncurses mouse support
    (thanks to Santhosh Raju)
  * Support offline and hot-swapping of CPUs on all platforms
  * Fix the CPU Meter for machines with more than 256 CPUs
  * Supplemented the "show updated/deleted executables" feature (red basename)
    to indicate when linked libraries were updated (yellow basename)
  * Apply the stale binary highlighting for the EXE column in addition to
    the command line field
  * Add new combined Memory and Swap meter
  * Implement bar and graph mode for NetworkIO Meter
    (thanks to Michael F. Schönitzer)
  * Rework TTY column to be more consistent across platforms
  * Make the CWD column generally available on all platforms
    (thanks to Santhosh Raju et. al.)
  * Add Performance Co-Pilot (PCP) platform support
    This is added via a separate pcp-htop(1) binary which provides remote host
    analysis, new Meters for any PCP metric and new Columns for any PCP process
    metric - see the pcp-htop(5) man page for further details.
    (thanks to Sohaib Mohamed)
  * Add Linux columns and key bindings for process autogroup identifier
    and nice value
  * Change available and used memory reporting on Linux to be based on
    MemAvailable (Kernel 3.14+) (thanks to Chris Cheney and Tomas Wido)
  * Add a new SysArchMeter showing kernel and platform information
    (thanks to ahgamut)
  * Linux memory usage explicitly treats tmpfs memory usage as shared memory
    This is to make memory used by tmpfs visible as this cannot be freed
    unlike normal filesystem cache data.
  * Exclude zram devices when calculating DiskIO on Linux
  * Use PATH lookup for systemctl in systemd meter (thanks to Scott Olson)
  * Add native platform support for NetBSD
    This allows htop to run on NetBSD without the need for active Linux
    emulation of the procfs filesystem.
    (thanks to Santhosh Raju and Nia Alarie)
  * Add NetworkIO, DiskIO, CPU frequency, and battery meter support on NetBSD
    (thanks to Nia Alarie)
  * Fix NetBSD display of in-use and cached memory (thanks to Nia Alarie)
  * Rework NetBSD CPU and memory accounting (thanks to Santhosh Raju)
  * Fix NetBSD accounting of user and kernel threads (thanks to Santhosh Raju)
  * Initial work to allow building with default libcurses on NetBSD
    (thanks to Santhosh Raju)
  * FreeBSD updates - implement process majflt and processor column values
  * Add FreeBSD support for CPU frequency and temperature
  * Fixes and cleanups for ZFS Meters and metrics
  * Correctly color the ZFS ARC ratio (thanks to Ross Williams)
  * Bugfixes related to CPU time display/calculations for darwin on M1 systems
    (thanks to Alexander Momchilov)
  * Harmonize the handling of multiple batteries across different platforms.
    The system is now considered to run on AC if at least one power supply
    marked as AC is found in the system.
    Battery capacity is summed up over all batteries found.
    This also changes the old behavior that batteries reported by the
    system after the first AC adapter where sometimes ignored.
  * Correctly handle multiple batteries on Darwin.
    Resolves a possible memory leak on systems with multiple batteries.
  * Handle Linux Shmem being part of Cached in the MemoryMeter
  * Add SwapCached to the Linux swap meter (thanks to David Zarzycki)
  * Convert process time to days if applicable (thanks to David Zarzycki)
  * Always show the number of threads in the TaskMeter, even when threads
    are not shown in the process list
  * Fix Linux --drop-capabilities option handling
  * Correctly detect failure to initialize Linux boottime
  * Overhaul the Linux memory fields to partition them like free(1) now does
  * Improve the Linux process I/O column values
  * Rework the libsensors parsing on Linux
  * Update the MemoryMeter to display shared memory
  * Update OpenBSD platform - implement additional columns, scan LWP,
    proper markup for STATE, show CPU frequency
  * Fix the tree view on OpenBSD when hiding kernel threads
  * Remove old InfoScreen lines before re-scanning (thanks to Øystein Hiåsen)
  * Document historic naming of Light-Weight Processes column aka threads
  * Improve user interaction when the last process entry is selected
  * Draw the panel header on the TraceScreen (thanks to Youngjae Lee)
  * Add mouse wheel scroll and fix mouse selection on the InfoScreen
    (thanks to Youngjae Lee)
  * Add a HugepageMeter and subtract hugepages from normal memory
  * Display wide characters in LED meters and restore non-wide ncurses support
  * Add command line option to drop Linux capabilities
  * Support scheduler affinity on platforms beyond Linux
  * Report on any failure to write the configuration file
  * Cache stderr to be able to print assert messages.
    These messages are shown in case htop terminates unexpectedly.
  * Print current settings on crash
  * Reset signal handlers on program exit
  * Add configure script option to create a static htop binary
  * Resolved longer-standing compilation issues on Solaris/Illumos
  * Check for availability of set_escdelay in configure
    (thanks to Stefan Polluks)
  * Build system updates for autotools 2.70</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632398400">- Enable linux capabilities
- Drop unsupported configure options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1635768000">-  Update to version 3.1.1 (boo#1192144):
  * See https://github.com/htop-dev/htop/compare/3.1.0...3.1.1</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1638273600">- Update to version 3.1.2
  * Bugfix for crash when storing modified settings at exit
  * Generate xz-compressed source tarball (with configure) using github actions
  * Allow -u UID with numerical value as argument
  * Added documentation for obsolete/state libraries/program files highlighting
  * Some obsolete/stale library highlighting refinements
  * Column width issues resolved
  * Dynamic UID column sizing improved
  * Discard stale information from Disk and Network I/O meters
  * Refined Linux kernel thread detection
  * Reworked process state handling
  * New CCGROUP column showing abbreviated cgroup name
  * New OFFSET column in the list of open files screen</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1651492800">- Update to 3.2.0:
  * Support for displaying multiple tabs in the user interface
  * Allow multiple filter and search terms (logical OR, separate by "|")
  * Set correct default sorting direction (defaultSortDesc)
  * Improve performance for process lookup and update
  * Rework the IOMeters initial display
  * Removed duplicate sections on COMM and EXE
  * Highlight process UNINTERRUPTIBLE_WAIT state (D)
  * Show only integer value when CPU% more than 99.9%
  * Handle rounding ambiguity between 99.9 and 100.0%
  * No longer leaves empty the last column in header
  * Fix header layout and meters reset if a header column is empty
  * Fix PID and UID column widths off-by-one error
  * On Linux, read generic sysfs batteries
  * On Linux, do not collect LRS per thread (it is process-wide)
  * On Linux, dynamically adjust the SECATTR and CGROUP column widths
  * On Linux, fix a crash in LXD
  * On FreeBSD, add support for showing process emulation
  * On Darwin, lazily set process TTY name
  * Always set SIGCHLD to default handling
  * Avoid zombie processes on signal races
  * Ensure last line is cleared when SIGINT is received
  * Instead of SIGTERM, pre-select the last sent signal
  * Internal Hashtable performance and sizing improvements
  * Add heuristics for guessing LXC or Docker from /proc/1/mounts
  * Force elapsed time display to zero if process started in the future
  * Avoid extremely large year values when printing time
  * Fix division by zero when calculating IO rates
  * Fix out of boundary writes in XUtils
  * Fix custom thread name display issue
  * Use AC_CANONICAL_HOST, not AC_CANONICAL_TARGET in configure.ac
  * Support libunwind of LLVM</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1654257600">- Update to 3.2.1
  * Fix setting to show all branches collapsed by default
  * Restore functionality of stripExeFromCmdline setting
  * Fix some command line display settings not being honored without restart
  * Display single digit precision for CPU% greater than 99.9%
  * On Linux, FreeBSD and PCP consider only shrinkable ZFS ARC as cache
  * On Linux, increase field width of CPUD% and SWAPD% columns
  * Colorize process state characters in help screen
  * Use mousemask(3X) to enable and disable mouse control
  * Fix heap buffer overflow in Vector_compact
  * On Solaris, fix a process time scaling error
  * On Solaris, fix the build
  * On NetBSD, OpenBSD and Solaris ensure env buffer size is sufficient
  * On Linux, resolve processes exiting interfering with sampling
  * Fix ProcessList quadratic removal when scanning processes
  * Under LXC, limit CPU count to that given by /proc/cpuinfo
  * Improve container detection for LXC
  * Some minor documentation fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675684800">- Update to 3.2.2:
  * CPUMeter now can show frequency in text mode
  * Add option to render distribution path prefixes shadowed
  * DiskIOMeter converts to bytes per second (not per interval)
  * DiskIOMeter uses complete units, including missing "iB/s"
  * DiskIOMeter indicates read and write in meter mode
  * NetworkIOMeter converts to packets per second, shows packet rate
  * Allow continued process following when changing display settings
  * Update the panel header when changing to another tab
  * Drop margin around the header if there are no meters
  * Use Unicode replacement character for non-printable characters
  * Default color preset uses bold blue for better visibility
  * Update the Panel header on sort order inversions ('I')
  * Toggle the header meters with pound key
  * Fix ScreenPanel to handle quitting the panel while renaming
  * Add fallback for HOME environment variable using passwd database
  * Replace meaningless ID column with FD column in lock screen
  * Use device format in the lock screen matching the files screen
  * On Linux, improvements to file-descriptor lock detection
  * On Linux, further distinguish systemd states in the SystemdMeter
  * On Linux, improvements to cgroup and container identification
  * On Linux, support openat(2) without readlinkat(2) platforms
  * On Darwin, fix current process buffer handling for busy systems
  * On DragonFly BSD, fix incorrect processor time of processes
  * On FreeBSD, fix an issue with the memory graph not showing correctly
  * On FreeBSD, add support for displaying shared memory usage
  * On PCP, use pmLookupDescs(3) if available for efficiency
  * On PCP, normalize generic columns values for consistent display
  * On PCP, changes preparing for configurable, dynamic screens
  * Handle invalid process columns from the configuration file
  * Avoid undefined behaviour with deeply nested processes
  * Fix crash when removing the currently active screen
  * Prevent possible crash on a very early error path
  * Include automake for Debian/Ubuntu
  * Restore non-mouse support
  * Reject unsupported command line arguments
  * Document idle process state
  * Clarify M_TRS/M_DRS columns</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686571200">- Drop no longer available configure option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1701172800">- Switch to xz compressed sources</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704974400">- Update to version 3.3.0:
  * Multiple refactorings and code improvements
  * Shorten docker container IDs to 12 characters
  * Settings: preserve empty header
  * Fix execlp() argument without pointer cast
  * OpenFilesScreen: Make column sizing dynamic for file size, offset and inode
  * Add support for "truss" (FreeBSD equivalent of "strace")
  * Darwin: add NetworkIOMeter support
  * HeaderLayout: add "3 columns - 40/30/30", "... 30/40/30" &amp; "... 30/30/40"
  * Meter: use correct unicode characters for digit '9'
  * Note in manual re default memory units of KiB
  * Add column for process container name
  * Add logic to filter the container name (+type) from the CGroup name
  * Change NetworkIOMeter value unit from KiB/s to bytes/second
  * Cap DiskIOMeter "utilisation" percentage at 100%
  * PCP platform implementation of frontswap and zswap accounting
  * Shorten podman/libpod container IDs to 12 characters
  * Write configuration to temporary file first
  * Incorporate shared memory in bar text
  * Move shared memory next to used memory
  * Correct order of memory meter in help
  * Add recalculate to Ctrl-L refresh
  * Update process list on thread visibility toggling
  * Support dynamic screens with 'top-most' entities beyond processes
  * Introduce Row and Table classes for screens beyond top-processes
  * Rework ZramMeter and remove MeterClass.comprisedValues
  * More robust logic for CPU process percentages (Linux &amp; PCP)
  * Show year as start time for processes older than a year
  * Short-term fix for docker container detection
  * default color preset: use bold blue for better visibility
  * Document 'O' keyboard shortcut
  * Implement logic for '--max-iterations'
  * Update F5 key label on tab switch (Tree &lt;-&gt; List)
  * Force re-sorting of the process list view after switching between list/treeview mode
  * Linux: (hack) work around the fact that Zswapped pages may be SwapCached
  * Linux: implement zswap support
  * {Memory,Swap}Meter: add "compressed memory" metrics
  * Darwin: add DiskIOMeter support
  * Fix scroll relative to followed process
  * ZramMeter: update bar mode
  * Use shared real memory on FreeBSD
  * Increase Search and Filter max string length to 128
  * Improve CPU computation code
  * Remove LXC special handling for the CPU count
  * Create new File Descriptor meter
  * PCP: add IRQ PSI meter
  * Linux: add IRQ PSI meter
  * Linux: highlight username if process has elevated privileges
  * Add support for scheduling policies
  * Add a systemd user meter to monitor user units.
  * FreeBSD: remove duplicate zfs ARC size subtraction</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1742990400">- Update to version 3.4.0:
  * Improve Darwin support for ARM-based systems
  * Fix static linking with libsystemd
  * Various build fixes for DragonFlyBSD, Darwin, NetBSD, OpenBSD &amp; Solaris
  * Fix running task display (count)
  * Fix sort order handling in tree mode
  * Add warning when exiting with a signal (not saving .htoprc)
  * Add Disk I/O and Network I/O meter for DragonFlyBSD
  * Improve handling of invalid Unicode strings
  * Disable basename checking for kernel tasks
  * Updated documentation for pcp-htop
  * Disable FOCUS_IN/FOCUS_OUT event handling
  * Add GPU meter for Linux and PCP
  * Add colum for GPU time per process on Linux and PCP
  * Avoid glibc FILE API voodoo
  * Ignore previously unhandled signals USR1 and USR2
  * Force locating the config file to only use absolute paths
  * Prefer reading htoprc from ~/.config/htop/htoprc over legacy ~/.htoprc
  * Force writing the configuration to a regular file
  * Use distinct config files for htop and pcp-htop
  * Link libnl3 at runtime
  * Gather permitted capabilities via capget(2)
  * Avoid fetching certain process information for each thread on Linux (speed up)
  * Improved handling for invalid data in /proc/tty/drivers on Linux
  * Various changes to avoid memory allocations inside signal handlers
  * Add single column header layout
  * Fix DivByZero bug on startup on Darwin
  * Include thread information on Darwin
  * Show process state on Darwin
  * Update compat check for C23 compilers
  * Improved detail in help screen
  * Unicode support for CGROUP, CCGROUP, CONTAINER and SECATTR columns
  * Mark newline characters in the process command line display
  * Resolve nested derived metrics for PCP
  * Make supported modes/styles specific to each meter
  * Refined checks for terminals supporting to redefine keys
  * Fix handling of the NICE value on FreeBSD
  * Fix display of CPU utilization on FreeBSD
  * Honour update interval adjustments properly without restart
  * Force rebuild of display table after item removals
  * Reworked handling for various temperature sensors
  * Fix high CPU load when the strace'd process exits prematurely
  * Document --drop-capabilities to require a compile time support
  * Always call PKG_PROG_PKG_CONFIG in configure
  * Make configure warn when pkg.m4 is absent
  * Rewrite curses/terminfo detection code in configure
  * Keep following a process when resuming process updates (Z key)
  * Normalize Disk I/O usage and allow utilization above 100%
  * Plug several memory leaks and improve performance for information parsing
  * Allow to show or hide cache and buffers in memory usage meter
  * Visibility hint and UX improvements in status bar of display options panel
  * Remove IOKit / IOMainPort / IOMMasterPort logic for Darwin builds
  * Replace BCC with metrics from BPF for pcp-htop</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1744372800">- Update to version 3.4.1:
  * Support for PMAPI v3 for PCP
  * PCP code cleanups
  * Proper checks for strchrnul
  * Code cleanup in the NetworkIOMeter
  * Improved documentation for the --user option
  * Display stuck processes on Darwin
  * Handle issues when the monotonic clock runs backwards
  * Fix builds using native curses on NetBSD</changelog>
</package>
<package pkgid="65096c37914354b58f76bc199c41c021d058484927891f73a5c281f05f8e1de2" name="htop" arch="i586">
  <version epoch="0" ver="3.4.1" rel="bp156.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1587643200">- Add patches:
  * htop-2.2.0-fix-linux-process-ordering.patch
  * htop-2.2.0-fix-option-string.patch (fixes boo#1165352)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Fix building with gcc10:
  * htop-2.2.0-gcc10.patch</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1598702400">- Update to version 3.0.0
  * Add simple, optional vim key mapping mode
  * Support more than 2 smaller CPU meter columns
  * Support Linux proportional set size metrics
  * Support Linux pressure stall information metrics
  * New display option to show CPU frequency in CPU meters
  * Update Linux sysfs battery discovery for recent kernels
  * Add hardware topology information in the affinity panel
  * Add timestamp reporting to the strace screen
  * Added an option to disable the mouse
  * Without an argument -u uses $USER value automatically
  * Support less(1) search navigation shortcuts
  * Support ZFS ARC statistics
  * Report values larger than 100 terabytes
  * Widen ST_UID (UID) column to allow for UIDs &gt; 9999
  * BUGFIX: fix makefiles for building with clang
  * BUGFIX: fix &lt;sys/sysmacros.h&gt; major() usage
  * BUGFIX: correctly identify other types of zombie process
  * BUGFIX: improve follow-process handling in some situations
  * BUGFIX: fix custom meters reverting to unexpected setting
  * BUGFIX: close pipe after running lsof(1)
  * BUGFIX: meters honour setting of counting CPUs from 0/1
- Drop htop-2.2.0.tar.gz.asc - no sig provided
- Upstreamed patches removed:
  * Drop htop-2.2.0-fix-linux-process-ordering.patch
  * Drop htop-2.2.0-fix-option-string.patch
  * Drop htop-2.2.0-gcc10.patch
  * Drop htop-desktop-file-fix-thoenig-01.patch
  * Drop htop-script-python3.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599393600">- Update to version 3.0.1
  * BUGFIX: Fix early exit with longer sysfs battery paths
  * BUGFIX: Improve OOM output, fix sorting
  * Rework check buttons and tree open/closed
  * Add -U/--no-unicode option to disable unicode
  * Improvements to the affinity panel</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1600171200">- Update to version 3.0.2
  * BUGFIX: Drop 'vim_mode' - several issues, needs rethink
  * BUGFIX: fix regression in -u optional-argument handling
  * Build system rework to remove python, header generation
  * CI, code quality improvements
- Switch to new official bintray tarball to remove automake deps</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1607342400">- Update to version 3.0.3
  * Process sorting in 'tree' mode
  * Improved command display/sort functionality
  * Add screen for active file locks
  * Calculate library size (M_LRS column) from maps file
  * Add a Zram meter
  * Add Linux cwd process column
  * Dynamically load libsensors at runtime
  * Improve PressureStall Meter display strings
  * Hide process selection on ESC
  * Fully support non-ascii characters in Meter-Bar
  * Add support to change numeric options in settings screen
  * Rename virtual memory column from M_SIZE to M_VIRT
  * Add process column for normalized CPU usage
  * Show CPU temperature in CPU meter
  * Drop hideThreads Setting
  * Add a systemd meter
  * Add a network IO meter
  * Add a SELinux meter
  * Compress size of default FunctionBar
  * Updates to the OpenFiles screen
  * Continue updating header data in paused mode
  * BUGFIX: Handle data wraparounds in IO meters
  * BUGFIX: Update InfoScreen content on resize
  * Add security attribute process column
  * Add DiskIOMeter for IO read/write usage
  * Read CPU frequency from sysfs by default
  * Add Linux process column for context switches
  * Several FreeBSD and Mac OS X platform updates
  * Add process environment for FreeBSD
  * Parse POWER_SUPPLY_CAPACITY for Linux Battery meter
  * Add octuple-column CPU meters.
  * BUGFIX: On Linux consider ZFS ARC to be cache
  * BUGFIX: Limit screen title length to window width
  * Show selected command wrapped in a separate window
  * Allow to pass '/' for item search
  * Document implicit incremental search
  * Handle 'q' as quit if first character
  * Avoid expensive build of process tree when not using it
  * Include documentation for COMM and EXE
  * Distinguish display of no permissions for reading M_LRS
  * Only calculate M_LRS size every 2 seconds
  * Improvements to comm / cmdline display functionality
  * Merged view for COMM, EXE and cmdline
    (thanks to Narendran Gopalakrishnan and Benny Baumann)
  * Consistent kernel thread display for COMM/EXE columns
  * Central fault handling for all platforms
  * Handle parsing envID &amp; VPid from process status file
  * Use threshold for display of guest/steal/irq meters
  * Enhance highlighting of semi-large and large numbers
  * Documentation on the repository style guide
  * Align processor identifier to the right
  * Document M_PSS, M_PSSWP, M_SWAP in man page
  * Add Date and DateTime meters
  * BUGFIX: Fix Solaris 11.4 due to missing ZFS ARC kstats
  * Code hardening, speedups, fd and memory leak fixes
  * Number CPUs from zero by default
  * Remove residual python checks during the build process</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- htop 3.0.4:
  * Separate tree and list sort orders
  * PSI Meter: constant width and only print ten-duration as bar
  * Sort in paused mode after inverting sort order
  * Handle absence of package CPU temperature
  * Document dynamic bindings and assumed external configuration
  * Update key mapping documentation for sorting</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610452800">- Update to version 3.0.5:
  * InfoScreen: fix uncontrolled format string
  * Improve white text in the Light Terminal colour scheme
  * Enable the function bar on the main screen to be hidden (see Setup -&gt; Display options)
  * Reduce layout issues esp. around printing wide characters (not complete yet)
  * Make the follow function exit cleanly after followed process died
  * Update help and man page for improved -t / -s options
  * Drop usage of formatted error messages from &lt;err.h&gt;
  * Show arrow indicating order of sorted process column
  * Lots of plumbing around the internal Hashtable, hardening and code cleanups
  * LibSensors: add support for Ryzen CPUs
  * Fix CPU percentage on M1 silicon Macs
  * LoadMeter: dynamically adjust color and total of bar
  * Find libsensors.so.4 for Fedora and friends
  * Enable going back to previous search matches (Shift-F3)
  * Added keybind 'N' for sorting by PID (drops 'n'/'N' as not used before much)</changelog>
  <changelog author="kh Lai &lt;dlshcbmuipmam@hotmail.com&gt;" date="1632312000">- Add autoconf and automake as dependencies
- Switch the url to the Github release page
- Update to 3.1.0:
  * Updated COPYING file to remove the PLPA exemption (appendix 2)
    With this change the license is now GPLv2 without any additional wording.
  * Improved default sort ordering
    Note for users: This may lead to an inverted sort order on startup of
    htop 3.1.0 compared to previous versions.
    This is due to what is stored in your htoprc file. Solution: Press I
    (to invert sort order).
    This changed setting will be saved by htop on exit as long as it can
    write to your htoprc file.
  * The compile-time option to cater specifically for running htop as
    setuid has been removed
  * Add read-only option
    This allows htop to be run in an non-intrusive fashion where it acts only
    as a process viewer disabling all functions to manipulate system state.
    Note: This is not a security feature!
  * Move the code for handling the command line formatting related tasks
    to be shared across all platforms
    This means important features like stale binary/library highlighting
    can now be available on all supported platforms.
  * Make the EXE and COMM columns available on all platforms
    All supported platforms have the name of the executable (EXE) and a
    self-chosen thread/command name (COMM) available one way or the other.
    Moving this column to be handled as a platform-independently available
    information simplifies the markup of the command line.
  * Introduce configuration file versioning and config_reader_min_version
    Starting with this version the configuration file contains a version
    identifying the minimum version of the configuration parser needed to
    fully understand the configuration file format.
    Old configuration file formats are automatically upgraded when
    saving the config file (htoprc).
  * Make the configuration parser friendlier to users (thanks to Bart Bakker)
    With this change only settings that cannot be parsed properly are
    reset to their defaults.
  * Improve default display for systems with many CPUs
  * Add the process ELAPSED time column
  * Improve the process STATE column sorting
  * Reworked handling resize and redrawing of the UI
  * Fixed an issue where the LED meter mode could overflow allotted space
  * Allow text mode Meters to span empty neighbors to the right
  * Rescale graph meters when value of total changes
    (thanks to Michael Schönitzer)
  * Update generic process field display
    Usually "uninteresting" values in columns like 1 thread, nice value
    of 0, CPU and memory of 0%, idle/sleeping state, etc. are shown with
    reduced intensity (dark grey)
  * Option and key ("*") to collapse / expand all branches under PID 1
    (and PID 2 if kernel threads are shown) (thanks to Krishna Chaitanya)
  * Keep following a process when inverting the sort order, displaying
    the help screen or hiding/unhiding userland threads.
    If a thread is currently selected the selection is updated to point
    to the thread's parent process. (thanks to Gonzalo, et.al.)
  * Reorder process scanning to be performed before updating the display
    of the meters in the header
  * Always check the user for a process for any changes.
    This affects multiple platforms that previously didn't correctly handle
    the user field for a process to change at runtime (e.g. due to seteuid
    or similar syscalls).
  * Disable mouse option when support is unavailable
  * Support curses libraries without ncurses mouse support
    (thanks to Santhosh Raju)
  * Support offline and hot-swapping of CPUs on all platforms
  * Fix the CPU Meter for machines with more than 256 CPUs
  * Supplemented the "show updated/deleted executables" feature (red basename)
    to indicate when linked libraries were updated (yellow basename)
  * Apply the stale binary highlighting for the EXE column in addition to
    the command line field
  * Add new combined Memory and Swap meter
  * Implement bar and graph mode for NetworkIO Meter
    (thanks to Michael F. Schönitzer)
  * Rework TTY column to be more consistent across platforms
  * Make the CWD column generally available on all platforms
    (thanks to Santhosh Raju et. al.)
  * Add Performance Co-Pilot (PCP) platform support
    This is added via a separate pcp-htop(1) binary which provides remote host
    analysis, new Meters for any PCP metric and new Columns for any PCP process
    metric - see the pcp-htop(5) man page for further details.
    (thanks to Sohaib Mohamed)
  * Add Linux columns and key bindings for process autogroup identifier
    and nice value
  * Change available and used memory reporting on Linux to be based on
    MemAvailable (Kernel 3.14+) (thanks to Chris Cheney and Tomas Wido)
  * Add a new SysArchMeter showing kernel and platform information
    (thanks to ahgamut)
  * Linux memory usage explicitly treats tmpfs memory usage as shared memory
    This is to make memory used by tmpfs visible as this cannot be freed
    unlike normal filesystem cache data.
  * Exclude zram devices when calculating DiskIO on Linux
  * Use PATH lookup for systemctl in systemd meter (thanks to Scott Olson)
  * Add native platform support for NetBSD
    This allows htop to run on NetBSD without the need for active Linux
    emulation of the procfs filesystem.
    (thanks to Santhosh Raju and Nia Alarie)
  * Add NetworkIO, DiskIO, CPU frequency, and battery meter support on NetBSD
    (thanks to Nia Alarie)
  * Fix NetBSD display of in-use and cached memory (thanks to Nia Alarie)
  * Rework NetBSD CPU and memory accounting (thanks to Santhosh Raju)
  * Fix NetBSD accounting of user and kernel threads (thanks to Santhosh Raju)
  * Initial work to allow building with default libcurses on NetBSD
    (thanks to Santhosh Raju)
  * FreeBSD updates - implement process majflt and processor column values
  * Add FreeBSD support for CPU frequency and temperature
  * Fixes and cleanups for ZFS Meters and metrics
  * Correctly color the ZFS ARC ratio (thanks to Ross Williams)
  * Bugfixes related to CPU time display/calculations for darwin on M1 systems
    (thanks to Alexander Momchilov)
  * Harmonize the handling of multiple batteries across different platforms.
    The system is now considered to run on AC if at least one power supply
    marked as AC is found in the system.
    Battery capacity is summed up over all batteries found.
    This also changes the old behavior that batteries reported by the
    system after the first AC adapter where sometimes ignored.
  * Correctly handle multiple batteries on Darwin.
    Resolves a possible memory leak on systems with multiple batteries.
  * Handle Linux Shmem being part of Cached in the MemoryMeter
  * Add SwapCached to the Linux swap meter (thanks to David Zarzycki)
  * Convert process time to days if applicable (thanks to David Zarzycki)
  * Always show the number of threads in the TaskMeter, even when threads
    are not shown in the process list
  * Fix Linux --drop-capabilities option handling
  * Correctly detect failure to initialize Linux boottime
  * Overhaul the Linux memory fields to partition them like free(1) now does
  * Improve the Linux process I/O column values
  * Rework the libsensors parsing on Linux
  * Update the MemoryMeter to display shared memory
  * Update OpenBSD platform - implement additional columns, scan LWP,
    proper markup for STATE, show CPU frequency
  * Fix the tree view on OpenBSD when hiding kernel threads
  * Remove old InfoScreen lines before re-scanning (thanks to Øystein Hiåsen)
  * Document historic naming of Light-Weight Processes column aka threads
  * Improve user interaction when the last process entry is selected
  * Draw the panel header on the TraceScreen (thanks to Youngjae Lee)
  * Add mouse wheel scroll and fix mouse selection on the InfoScreen
    (thanks to Youngjae Lee)
  * Add a HugepageMeter and subtract hugepages from normal memory
  * Display wide characters in LED meters and restore non-wide ncurses support
  * Add command line option to drop Linux capabilities
  * Support scheduler affinity on platforms beyond Linux
  * Report on any failure to write the configuration file
  * Cache stderr to be able to print assert messages.
    These messages are shown in case htop terminates unexpectedly.
  * Print current settings on crash
  * Reset signal handlers on program exit
  * Add configure script option to create a static htop binary
  * Resolved longer-standing compilation issues on Solaris/Illumos
  * Check for availability of set_escdelay in configure
    (thanks to Stefan Polluks)
  * Build system updates for autotools 2.70</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632398400">- Enable linux capabilities
- Drop unsupported configure options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1635768000">-  Update to version 3.1.1 (boo#1192144):
  * See https://github.com/htop-dev/htop/compare/3.1.0...3.1.1</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1638273600">- Update to version 3.1.2
  * Bugfix for crash when storing modified settings at exit
  * Generate xz-compressed source tarball (with configure) using github actions
  * Allow -u UID with numerical value as argument
  * Added documentation for obsolete/state libraries/program files highlighting
  * Some obsolete/stale library highlighting refinements
  * Column width issues resolved
  * Dynamic UID column sizing improved
  * Discard stale information from Disk and Network I/O meters
  * Refined Linux kernel thread detection
  * Reworked process state handling
  * New CCGROUP column showing abbreviated cgroup name
  * New OFFSET column in the list of open files screen</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1651492800">- Update to 3.2.0:
  * Support for displaying multiple tabs in the user interface
  * Allow multiple filter and search terms (logical OR, separate by "|")
  * Set correct default sorting direction (defaultSortDesc)
  * Improve performance for process lookup and update
  * Rework the IOMeters initial display
  * Removed duplicate sections on COMM and EXE
  * Highlight process UNINTERRUPTIBLE_WAIT state (D)
  * Show only integer value when CPU% more than 99.9%
  * Handle rounding ambiguity between 99.9 and 100.0%
  * No longer leaves empty the last column in header
  * Fix header layout and meters reset if a header column is empty
  * Fix PID and UID column widths off-by-one error
  * On Linux, read generic sysfs batteries
  * On Linux, do not collect LRS per thread (it is process-wide)
  * On Linux, dynamically adjust the SECATTR and CGROUP column widths
  * On Linux, fix a crash in LXD
  * On FreeBSD, add support for showing process emulation
  * On Darwin, lazily set process TTY name
  * Always set SIGCHLD to default handling
  * Avoid zombie processes on signal races
  * Ensure last line is cleared when SIGINT is received
  * Instead of SIGTERM, pre-select the last sent signal
  * Internal Hashtable performance and sizing improvements
  * Add heuristics for guessing LXC or Docker from /proc/1/mounts
  * Force elapsed time display to zero if process started in the future
  * Avoid extremely large year values when printing time
  * Fix division by zero when calculating IO rates
  * Fix out of boundary writes in XUtils
  * Fix custom thread name display issue
  * Use AC_CANONICAL_HOST, not AC_CANONICAL_TARGET in configure.ac
  * Support libunwind of LLVM</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1654257600">- Update to 3.2.1
  * Fix setting to show all branches collapsed by default
  * Restore functionality of stripExeFromCmdline setting
  * Fix some command line display settings not being honored without restart
  * Display single digit precision for CPU% greater than 99.9%
  * On Linux, FreeBSD and PCP consider only shrinkable ZFS ARC as cache
  * On Linux, increase field width of CPUD% and SWAPD% columns
  * Colorize process state characters in help screen
  * Use mousemask(3X) to enable and disable mouse control
  * Fix heap buffer overflow in Vector_compact
  * On Solaris, fix a process time scaling error
  * On Solaris, fix the build
  * On NetBSD, OpenBSD and Solaris ensure env buffer size is sufficient
  * On Linux, resolve processes exiting interfering with sampling
  * Fix ProcessList quadratic removal when scanning processes
  * Under LXC, limit CPU count to that given by /proc/cpuinfo
  * Improve container detection for LXC
  * Some minor documentation fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675684800">- Update to 3.2.2:
  * CPUMeter now can show frequency in text mode
  * Add option to render distribution path prefixes shadowed
  * DiskIOMeter converts to bytes per second (not per interval)
  * DiskIOMeter uses complete units, including missing "iB/s"
  * DiskIOMeter indicates read and write in meter mode
  * NetworkIOMeter converts to packets per second, shows packet rate
  * Allow continued process following when changing display settings
  * Update the panel header when changing to another tab
  * Drop margin around the header if there are no meters
  * Use Unicode replacement character for non-printable characters
  * Default color preset uses bold blue for better visibility
  * Update the Panel header on sort order inversions ('I')
  * Toggle the header meters with pound key
  * Fix ScreenPanel to handle quitting the panel while renaming
  * Add fallback for HOME environment variable using passwd database
  * Replace meaningless ID column with FD column in lock screen
  * Use device format in the lock screen matching the files screen
  * On Linux, improvements to file-descriptor lock detection
  * On Linux, further distinguish systemd states in the SystemdMeter
  * On Linux, improvements to cgroup and container identification
  * On Linux, support openat(2) without readlinkat(2) platforms
  * On Darwin, fix current process buffer handling for busy systems
  * On DragonFly BSD, fix incorrect processor time of processes
  * On FreeBSD, fix an issue with the memory graph not showing correctly
  * On FreeBSD, add support for displaying shared memory usage
  * On PCP, use pmLookupDescs(3) if available for efficiency
  * On PCP, normalize generic columns values for consistent display
  * On PCP, changes preparing for configurable, dynamic screens
  * Handle invalid process columns from the configuration file
  * Avoid undefined behaviour with deeply nested processes
  * Fix crash when removing the currently active screen
  * Prevent possible crash on a very early error path
  * Include automake for Debian/Ubuntu
  * Restore non-mouse support
  * Reject unsupported command line arguments
  * Document idle process state
  * Clarify M_TRS/M_DRS columns</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686571200">- Drop no longer available configure option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1701172800">- Switch to xz compressed sources</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704974400">- Update to version 3.3.0:
  * Multiple refactorings and code improvements
  * Shorten docker container IDs to 12 characters
  * Settings: preserve empty header
  * Fix execlp() argument without pointer cast
  * OpenFilesScreen: Make column sizing dynamic for file size, offset and inode
  * Add support for "truss" (FreeBSD equivalent of "strace")
  * Darwin: add NetworkIOMeter support
  * HeaderLayout: add "3 columns - 40/30/30", "... 30/40/30" &amp; "... 30/30/40"
  * Meter: use correct unicode characters for digit '9'
  * Note in manual re default memory units of KiB
  * Add column for process container name
  * Add logic to filter the container name (+type) from the CGroup name
  * Change NetworkIOMeter value unit from KiB/s to bytes/second
  * Cap DiskIOMeter "utilisation" percentage at 100%
  * PCP platform implementation of frontswap and zswap accounting
  * Shorten podman/libpod container IDs to 12 characters
  * Write configuration to temporary file first
  * Incorporate shared memory in bar text
  * Move shared memory next to used memory
  * Correct order of memory meter in help
  * Add recalculate to Ctrl-L refresh
  * Update process list on thread visibility toggling
  * Support dynamic screens with 'top-most' entities beyond processes
  * Introduce Row and Table classes for screens beyond top-processes
  * Rework ZramMeter and remove MeterClass.comprisedValues
  * More robust logic for CPU process percentages (Linux &amp; PCP)
  * Show year as start time for processes older than a year
  * Short-term fix for docker container detection
  * default color preset: use bold blue for better visibility
  * Document 'O' keyboard shortcut
  * Implement logic for '--max-iterations'
  * Update F5 key label on tab switch (Tree &lt;-&gt; List)
  * Force re-sorting of the process list view after switching between list/treeview mode
  * Linux: (hack) work around the fact that Zswapped pages may be SwapCached
  * Linux: implement zswap support
  * {Memory,Swap}Meter: add "compressed memory" metrics
  * Darwin: add DiskIOMeter support
  * Fix scroll relative to followed process
  * ZramMeter: update bar mode
  * Use shared real memory on FreeBSD
  * Increase Search and Filter max string length to 128
  * Improve CPU computation code
  * Remove LXC special handling for the CPU count
  * Create new File Descriptor meter
  * PCP: add IRQ PSI meter
  * Linux: add IRQ PSI meter
  * Linux: highlight username if process has elevated privileges
  * Add support for scheduling policies
  * Add a systemd user meter to monitor user units.
  * FreeBSD: remove duplicate zfs ARC size subtraction</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1742990400">- Update to version 3.4.0:
  * Improve Darwin support for ARM-based systems
  * Fix static linking with libsystemd
  * Various build fixes for DragonFlyBSD, Darwin, NetBSD, OpenBSD &amp; Solaris
  * Fix running task display (count)
  * Fix sort order handling in tree mode
  * Add warning when exiting with a signal (not saving .htoprc)
  * Add Disk I/O and Network I/O meter for DragonFlyBSD
  * Improve handling of invalid Unicode strings
  * Disable basename checking for kernel tasks
  * Updated documentation for pcp-htop
  * Disable FOCUS_IN/FOCUS_OUT event handling
  * Add GPU meter for Linux and PCP
  * Add colum for GPU time per process on Linux and PCP
  * Avoid glibc FILE API voodoo
  * Ignore previously unhandled signals USR1 and USR2
  * Force locating the config file to only use absolute paths
  * Prefer reading htoprc from ~/.config/htop/htoprc over legacy ~/.htoprc
  * Force writing the configuration to a regular file
  * Use distinct config files for htop and pcp-htop
  * Link libnl3 at runtime
  * Gather permitted capabilities via capget(2)
  * Avoid fetching certain process information for each thread on Linux (speed up)
  * Improved handling for invalid data in /proc/tty/drivers on Linux
  * Various changes to avoid memory allocations inside signal handlers
  * Add single column header layout
  * Fix DivByZero bug on startup on Darwin
  * Include thread information on Darwin
  * Show process state on Darwin
  * Update compat check for C23 compilers
  * Improved detail in help screen
  * Unicode support for CGROUP, CCGROUP, CONTAINER and SECATTR columns
  * Mark newline characters in the process command line display
  * Resolve nested derived metrics for PCP
  * Make supported modes/styles specific to each meter
  * Refined checks for terminals supporting to redefine keys
  * Fix handling of the NICE value on FreeBSD
  * Fix display of CPU utilization on FreeBSD
  * Honour update interval adjustments properly without restart
  * Force rebuild of display table after item removals
  * Reworked handling for various temperature sensors
  * Fix high CPU load when the strace'd process exits prematurely
  * Document --drop-capabilities to require a compile time support
  * Always call PKG_PROG_PKG_CONFIG in configure
  * Make configure warn when pkg.m4 is absent
  * Rewrite curses/terminfo detection code in configure
  * Keep following a process when resuming process updates (Z key)
  * Normalize Disk I/O usage and allow utilization above 100%
  * Plug several memory leaks and improve performance for information parsing
  * Allow to show or hide cache and buffers in memory usage meter
  * Visibility hint and UX improvements in status bar of display options panel
  * Remove IOKit / IOMainPort / IOMMasterPort logic for Darwin builds
  * Replace BCC with metrics from BPF for pcp-htop</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1744372800">- Update to version 3.4.1:
  * Support for PMAPI v3 for PCP
  * PCP code cleanups
  * Proper checks for strchrnul
  * Code cleanup in the NetworkIOMeter
  * Improved documentation for the --user option
  * Display stuck processes on Darwin
  * Handle issues when the monotonic clock runs backwards
  * Fix builds using native curses on NetBSD</changelog>
</package>
<package pkgid="89f049eb23a4f4d355f156c564151a0b324ad04840ca28d344c29a39375d3e9d" name="htop" arch="ppc64le">
  <version epoch="0" ver="3.4.1" rel="bp156.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1587643200">- Add patches:
  * htop-2.2.0-fix-linux-process-ordering.patch
  * htop-2.2.0-fix-option-string.patch (fixes boo#1165352)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Fix building with gcc10:
  * htop-2.2.0-gcc10.patch</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1598702400">- Update to version 3.0.0
  * Add simple, optional vim key mapping mode
  * Support more than 2 smaller CPU meter columns
  * Support Linux proportional set size metrics
  * Support Linux pressure stall information metrics
  * New display option to show CPU frequency in CPU meters
  * Update Linux sysfs battery discovery for recent kernels
  * Add hardware topology information in the affinity panel
  * Add timestamp reporting to the strace screen
  * Added an option to disable the mouse
  * Without an argument -u uses $USER value automatically
  * Support less(1) search navigation shortcuts
  * Support ZFS ARC statistics
  * Report values larger than 100 terabytes
  * Widen ST_UID (UID) column to allow for UIDs &gt; 9999
  * BUGFIX: fix makefiles for building with clang
  * BUGFIX: fix &lt;sys/sysmacros.h&gt; major() usage
  * BUGFIX: correctly identify other types of zombie process
  * BUGFIX: improve follow-process handling in some situations
  * BUGFIX: fix custom meters reverting to unexpected setting
  * BUGFIX: close pipe after running lsof(1)
  * BUGFIX: meters honour setting of counting CPUs from 0/1
- Drop htop-2.2.0.tar.gz.asc - no sig provided
- Upstreamed patches removed:
  * Drop htop-2.2.0-fix-linux-process-ordering.patch
  * Drop htop-2.2.0-fix-option-string.patch
  * Drop htop-2.2.0-gcc10.patch
  * Drop htop-desktop-file-fix-thoenig-01.patch
  * Drop htop-script-python3.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599393600">- Update to version 3.0.1
  * BUGFIX: Fix early exit with longer sysfs battery paths
  * BUGFIX: Improve OOM output, fix sorting
  * Rework check buttons and tree open/closed
  * Add -U/--no-unicode option to disable unicode
  * Improvements to the affinity panel</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1600171200">- Update to version 3.0.2
  * BUGFIX: Drop 'vim_mode' - several issues, needs rethink
  * BUGFIX: fix regression in -u optional-argument handling
  * Build system rework to remove python, header generation
  * CI, code quality improvements
- Switch to new official bintray tarball to remove automake deps</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1607342400">- Update to version 3.0.3
  * Process sorting in 'tree' mode
  * Improved command display/sort functionality
  * Add screen for active file locks
  * Calculate library size (M_LRS column) from maps file
  * Add a Zram meter
  * Add Linux cwd process column
  * Dynamically load libsensors at runtime
  * Improve PressureStall Meter display strings
  * Hide process selection on ESC
  * Fully support non-ascii characters in Meter-Bar
  * Add support to change numeric options in settings screen
  * Rename virtual memory column from M_SIZE to M_VIRT
  * Add process column for normalized CPU usage
  * Show CPU temperature in CPU meter
  * Drop hideThreads Setting
  * Add a systemd meter
  * Add a network IO meter
  * Add a SELinux meter
  * Compress size of default FunctionBar
  * Updates to the OpenFiles screen
  * Continue updating header data in paused mode
  * BUGFIX: Handle data wraparounds in IO meters
  * BUGFIX: Update InfoScreen content on resize
  * Add security attribute process column
  * Add DiskIOMeter for IO read/write usage
  * Read CPU frequency from sysfs by default
  * Add Linux process column for context switches
  * Several FreeBSD and Mac OS X platform updates
  * Add process environment for FreeBSD
  * Parse POWER_SUPPLY_CAPACITY for Linux Battery meter
  * Add octuple-column CPU meters.
  * BUGFIX: On Linux consider ZFS ARC to be cache
  * BUGFIX: Limit screen title length to window width
  * Show selected command wrapped in a separate window
  * Allow to pass '/' for item search
  * Document implicit incremental search
  * Handle 'q' as quit if first character
  * Avoid expensive build of process tree when not using it
  * Include documentation for COMM and EXE
  * Distinguish display of no permissions for reading M_LRS
  * Only calculate M_LRS size every 2 seconds
  * Improvements to comm / cmdline display functionality
  * Merged view for COMM, EXE and cmdline
    (thanks to Narendran Gopalakrishnan and Benny Baumann)
  * Consistent kernel thread display for COMM/EXE columns
  * Central fault handling for all platforms
  * Handle parsing envID &amp; VPid from process status file
  * Use threshold for display of guest/steal/irq meters
  * Enhance highlighting of semi-large and large numbers
  * Documentation on the repository style guide
  * Align processor identifier to the right
  * Document M_PSS, M_PSSWP, M_SWAP in man page
  * Add Date and DateTime meters
  * BUGFIX: Fix Solaris 11.4 due to missing ZFS ARC kstats
  * Code hardening, speedups, fd and memory leak fixes
  * Number CPUs from zero by default
  * Remove residual python checks during the build process</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- htop 3.0.4:
  * Separate tree and list sort orders
  * PSI Meter: constant width and only print ten-duration as bar
  * Sort in paused mode after inverting sort order
  * Handle absence of package CPU temperature
  * Document dynamic bindings and assumed external configuration
  * Update key mapping documentation for sorting</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610452800">- Update to version 3.0.5:
  * InfoScreen: fix uncontrolled format string
  * Improve white text in the Light Terminal colour scheme
  * Enable the function bar on the main screen to be hidden (see Setup -&gt; Display options)
  * Reduce layout issues esp. around printing wide characters (not complete yet)
  * Make the follow function exit cleanly after followed process died
  * Update help and man page for improved -t / -s options
  * Drop usage of formatted error messages from &lt;err.h&gt;
  * Show arrow indicating order of sorted process column
  * Lots of plumbing around the internal Hashtable, hardening and code cleanups
  * LibSensors: add support for Ryzen CPUs
  * Fix CPU percentage on M1 silicon Macs
  * LoadMeter: dynamically adjust color and total of bar
  * Find libsensors.so.4 for Fedora and friends
  * Enable going back to previous search matches (Shift-F3)
  * Added keybind 'N' for sorting by PID (drops 'n'/'N' as not used before much)</changelog>
  <changelog author="kh Lai &lt;dlshcbmuipmam@hotmail.com&gt;" date="1632312000">- Add autoconf and automake as dependencies
- Switch the url to the Github release page
- Update to 3.1.0:
  * Updated COPYING file to remove the PLPA exemption (appendix 2)
    With this change the license is now GPLv2 without any additional wording.
  * Improved default sort ordering
    Note for users: This may lead to an inverted sort order on startup of
    htop 3.1.0 compared to previous versions.
    This is due to what is stored in your htoprc file. Solution: Press I
    (to invert sort order).
    This changed setting will be saved by htop on exit as long as it can
    write to your htoprc file.
  * The compile-time option to cater specifically for running htop as
    setuid has been removed
  * Add read-only option
    This allows htop to be run in an non-intrusive fashion where it acts only
    as a process viewer disabling all functions to manipulate system state.
    Note: This is not a security feature!
  * Move the code for handling the command line formatting related tasks
    to be shared across all platforms
    This means important features like stale binary/library highlighting
    can now be available on all supported platforms.
  * Make the EXE and COMM columns available on all platforms
    All supported platforms have the name of the executable (EXE) and a
    self-chosen thread/command name (COMM) available one way or the other.
    Moving this column to be handled as a platform-independently available
    information simplifies the markup of the command line.
  * Introduce configuration file versioning and config_reader_min_version
    Starting with this version the configuration file contains a version
    identifying the minimum version of the configuration parser needed to
    fully understand the configuration file format.
    Old configuration file formats are automatically upgraded when
    saving the config file (htoprc).
  * Make the configuration parser friendlier to users (thanks to Bart Bakker)
    With this change only settings that cannot be parsed properly are
    reset to their defaults.
  * Improve default display for systems with many CPUs
  * Add the process ELAPSED time column
  * Improve the process STATE column sorting
  * Reworked handling resize and redrawing of the UI
  * Fixed an issue where the LED meter mode could overflow allotted space
  * Allow text mode Meters to span empty neighbors to the right
  * Rescale graph meters when value of total changes
    (thanks to Michael Schönitzer)
  * Update generic process field display
    Usually "uninteresting" values in columns like 1 thread, nice value
    of 0, CPU and memory of 0%, idle/sleeping state, etc. are shown with
    reduced intensity (dark grey)
  * Option and key ("*") to collapse / expand all branches under PID 1
    (and PID 2 if kernel threads are shown) (thanks to Krishna Chaitanya)
  * Keep following a process when inverting the sort order, displaying
    the help screen or hiding/unhiding userland threads.
    If a thread is currently selected the selection is updated to point
    to the thread's parent process. (thanks to Gonzalo, et.al.)
  * Reorder process scanning to be performed before updating the display
    of the meters in the header
  * Always check the user for a process for any changes.
    This affects multiple platforms that previously didn't correctly handle
    the user field for a process to change at runtime (e.g. due to seteuid
    or similar syscalls).
  * Disable mouse option when support is unavailable
  * Support curses libraries without ncurses mouse support
    (thanks to Santhosh Raju)
  * Support offline and hot-swapping of CPUs on all platforms
  * Fix the CPU Meter for machines with more than 256 CPUs
  * Supplemented the "show updated/deleted executables" feature (red basename)
    to indicate when linked libraries were updated (yellow basename)
  * Apply the stale binary highlighting for the EXE column in addition to
    the command line field
  * Add new combined Memory and Swap meter
  * Implement bar and graph mode for NetworkIO Meter
    (thanks to Michael F. Schönitzer)
  * Rework TTY column to be more consistent across platforms
  * Make the CWD column generally available on all platforms
    (thanks to Santhosh Raju et. al.)
  * Add Performance Co-Pilot (PCP) platform support
    This is added via a separate pcp-htop(1) binary which provides remote host
    analysis, new Meters for any PCP metric and new Columns for any PCP process
    metric - see the pcp-htop(5) man page for further details.
    (thanks to Sohaib Mohamed)
  * Add Linux columns and key bindings for process autogroup identifier
    and nice value
  * Change available and used memory reporting on Linux to be based on
    MemAvailable (Kernel 3.14+) (thanks to Chris Cheney and Tomas Wido)
  * Add a new SysArchMeter showing kernel and platform information
    (thanks to ahgamut)
  * Linux memory usage explicitly treats tmpfs memory usage as shared memory
    This is to make memory used by tmpfs visible as this cannot be freed
    unlike normal filesystem cache data.
  * Exclude zram devices when calculating DiskIO on Linux
  * Use PATH lookup for systemctl in systemd meter (thanks to Scott Olson)
  * Add native platform support for NetBSD
    This allows htop to run on NetBSD without the need for active Linux
    emulation of the procfs filesystem.
    (thanks to Santhosh Raju and Nia Alarie)
  * Add NetworkIO, DiskIO, CPU frequency, and battery meter support on NetBSD
    (thanks to Nia Alarie)
  * Fix NetBSD display of in-use and cached memory (thanks to Nia Alarie)
  * Rework NetBSD CPU and memory accounting (thanks to Santhosh Raju)
  * Fix NetBSD accounting of user and kernel threads (thanks to Santhosh Raju)
  * Initial work to allow building with default libcurses on NetBSD
    (thanks to Santhosh Raju)
  * FreeBSD updates - implement process majflt and processor column values
  * Add FreeBSD support for CPU frequency and temperature
  * Fixes and cleanups for ZFS Meters and metrics
  * Correctly color the ZFS ARC ratio (thanks to Ross Williams)
  * Bugfixes related to CPU time display/calculations for darwin on M1 systems
    (thanks to Alexander Momchilov)
  * Harmonize the handling of multiple batteries across different platforms.
    The system is now considered to run on AC if at least one power supply
    marked as AC is found in the system.
    Battery capacity is summed up over all batteries found.
    This also changes the old behavior that batteries reported by the
    system after the first AC adapter where sometimes ignored.
  * Correctly handle multiple batteries on Darwin.
    Resolves a possible memory leak on systems with multiple batteries.
  * Handle Linux Shmem being part of Cached in the MemoryMeter
  * Add SwapCached to the Linux swap meter (thanks to David Zarzycki)
  * Convert process time to days if applicable (thanks to David Zarzycki)
  * Always show the number of threads in the TaskMeter, even when threads
    are not shown in the process list
  * Fix Linux --drop-capabilities option handling
  * Correctly detect failure to initialize Linux boottime
  * Overhaul the Linux memory fields to partition them like free(1) now does
  * Improve the Linux process I/O column values
  * Rework the libsensors parsing on Linux
  * Update the MemoryMeter to display shared memory
  * Update OpenBSD platform - implement additional columns, scan LWP,
    proper markup for STATE, show CPU frequency
  * Fix the tree view on OpenBSD when hiding kernel threads
  * Remove old InfoScreen lines before re-scanning (thanks to Øystein Hiåsen)
  * Document historic naming of Light-Weight Processes column aka threads
  * Improve user interaction when the last process entry is selected
  * Draw the panel header on the TraceScreen (thanks to Youngjae Lee)
  * Add mouse wheel scroll and fix mouse selection on the InfoScreen
    (thanks to Youngjae Lee)
  * Add a HugepageMeter and subtract hugepages from normal memory
  * Display wide characters in LED meters and restore non-wide ncurses support
  * Add command line option to drop Linux capabilities
  * Support scheduler affinity on platforms beyond Linux
  * Report on any failure to write the configuration file
  * Cache stderr to be able to print assert messages.
    These messages are shown in case htop terminates unexpectedly.
  * Print current settings on crash
  * Reset signal handlers on program exit
  * Add configure script option to create a static htop binary
  * Resolved longer-standing compilation issues on Solaris/Illumos
  * Check for availability of set_escdelay in configure
    (thanks to Stefan Polluks)
  * Build system updates for autotools 2.70</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632398400">- Enable linux capabilities
- Drop unsupported configure options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1635768000">-  Update to version 3.1.1 (boo#1192144):
  * See https://github.com/htop-dev/htop/compare/3.1.0...3.1.1</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1638273600">- Update to version 3.1.2
  * Bugfix for crash when storing modified settings at exit
  * Generate xz-compressed source tarball (with configure) using github actions
  * Allow -u UID with numerical value as argument
  * Added documentation for obsolete/state libraries/program files highlighting
  * Some obsolete/stale library highlighting refinements
  * Column width issues resolved
  * Dynamic UID column sizing improved
  * Discard stale information from Disk and Network I/O meters
  * Refined Linux kernel thread detection
  * Reworked process state handling
  * New CCGROUP column showing abbreviated cgroup name
  * New OFFSET column in the list of open files screen</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1651492800">- Update to 3.2.0:
  * Support for displaying multiple tabs in the user interface
  * Allow multiple filter and search terms (logical OR, separate by "|")
  * Set correct default sorting direction (defaultSortDesc)
  * Improve performance for process lookup and update
  * Rework the IOMeters initial display
  * Removed duplicate sections on COMM and EXE
  * Highlight process UNINTERRUPTIBLE_WAIT state (D)
  * Show only integer value when CPU% more than 99.9%
  * Handle rounding ambiguity between 99.9 and 100.0%
  * No longer leaves empty the last column in header
  * Fix header layout and meters reset if a header column is empty
  * Fix PID and UID column widths off-by-one error
  * On Linux, read generic sysfs batteries
  * On Linux, do not collect LRS per thread (it is process-wide)
  * On Linux, dynamically adjust the SECATTR and CGROUP column widths
  * On Linux, fix a crash in LXD
  * On FreeBSD, add support for showing process emulation
  * On Darwin, lazily set process TTY name
  * Always set SIGCHLD to default handling
  * Avoid zombie processes on signal races
  * Ensure last line is cleared when SIGINT is received
  * Instead of SIGTERM, pre-select the last sent signal
  * Internal Hashtable performance and sizing improvements
  * Add heuristics for guessing LXC or Docker from /proc/1/mounts
  * Force elapsed time display to zero if process started in the future
  * Avoid extremely large year values when printing time
  * Fix division by zero when calculating IO rates
  * Fix out of boundary writes in XUtils
  * Fix custom thread name display issue
  * Use AC_CANONICAL_HOST, not AC_CANONICAL_TARGET in configure.ac
  * Support libunwind of LLVM</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1654257600">- Update to 3.2.1
  * Fix setting to show all branches collapsed by default
  * Restore functionality of stripExeFromCmdline setting
  * Fix some command line display settings not being honored without restart
  * Display single digit precision for CPU% greater than 99.9%
  * On Linux, FreeBSD and PCP consider only shrinkable ZFS ARC as cache
  * On Linux, increase field width of CPUD% and SWAPD% columns
  * Colorize process state characters in help screen
  * Use mousemask(3X) to enable and disable mouse control
  * Fix heap buffer overflow in Vector_compact
  * On Solaris, fix a process time scaling error
  * On Solaris, fix the build
  * On NetBSD, OpenBSD and Solaris ensure env buffer size is sufficient
  * On Linux, resolve processes exiting interfering with sampling
  * Fix ProcessList quadratic removal when scanning processes
  * Under LXC, limit CPU count to that given by /proc/cpuinfo
  * Improve container detection for LXC
  * Some minor documentation fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675684800">- Update to 3.2.2:
  * CPUMeter now can show frequency in text mode
  * Add option to render distribution path prefixes shadowed
  * DiskIOMeter converts to bytes per second (not per interval)
  * DiskIOMeter uses complete units, including missing "iB/s"
  * DiskIOMeter indicates read and write in meter mode
  * NetworkIOMeter converts to packets per second, shows packet rate
  * Allow continued process following when changing display settings
  * Update the panel header when changing to another tab
  * Drop margin around the header if there are no meters
  * Use Unicode replacement character for non-printable characters
  * Default color preset uses bold blue for better visibility
  * Update the Panel header on sort order inversions ('I')
  * Toggle the header meters with pound key
  * Fix ScreenPanel to handle quitting the panel while renaming
  * Add fallback for HOME environment variable using passwd database
  * Replace meaningless ID column with FD column in lock screen
  * Use device format in the lock screen matching the files screen
  * On Linux, improvements to file-descriptor lock detection
  * On Linux, further distinguish systemd states in the SystemdMeter
  * On Linux, improvements to cgroup and container identification
  * On Linux, support openat(2) without readlinkat(2) platforms
  * On Darwin, fix current process buffer handling for busy systems
  * On DragonFly BSD, fix incorrect processor time of processes
  * On FreeBSD, fix an issue with the memory graph not showing correctly
  * On FreeBSD, add support for displaying shared memory usage
  * On PCP, use pmLookupDescs(3) if available for efficiency
  * On PCP, normalize generic columns values for consistent display
  * On PCP, changes preparing for configurable, dynamic screens
  * Handle invalid process columns from the configuration file
  * Avoid undefined behaviour with deeply nested processes
  * Fix crash when removing the currently active screen
  * Prevent possible crash on a very early error path
  * Include automake for Debian/Ubuntu
  * Restore non-mouse support
  * Reject unsupported command line arguments
  * Document idle process state
  * Clarify M_TRS/M_DRS columns</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686571200">- Drop no longer available configure option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1701172800">- Switch to xz compressed sources</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704974400">- Update to version 3.3.0:
  * Multiple refactorings and code improvements
  * Shorten docker container IDs to 12 characters
  * Settings: preserve empty header
  * Fix execlp() argument without pointer cast
  * OpenFilesScreen: Make column sizing dynamic for file size, offset and inode
  * Add support for "truss" (FreeBSD equivalent of "strace")
  * Darwin: add NetworkIOMeter support
  * HeaderLayout: add "3 columns - 40/30/30", "... 30/40/30" &amp; "... 30/30/40"
  * Meter: use correct unicode characters for digit '9'
  * Note in manual re default memory units of KiB
  * Add column for process container name
  * Add logic to filter the container name (+type) from the CGroup name
  * Change NetworkIOMeter value unit from KiB/s to bytes/second
  * Cap DiskIOMeter "utilisation" percentage at 100%
  * PCP platform implementation of frontswap and zswap accounting
  * Shorten podman/libpod container IDs to 12 characters
  * Write configuration to temporary file first
  * Incorporate shared memory in bar text
  * Move shared memory next to used memory
  * Correct order of memory meter in help
  * Add recalculate to Ctrl-L refresh
  * Update process list on thread visibility toggling
  * Support dynamic screens with 'top-most' entities beyond processes
  * Introduce Row and Table classes for screens beyond top-processes
  * Rework ZramMeter and remove MeterClass.comprisedValues
  * More robust logic for CPU process percentages (Linux &amp; PCP)
  * Show year as start time for processes older than a year
  * Short-term fix for docker container detection
  * default color preset: use bold blue for better visibility
  * Document 'O' keyboard shortcut
  * Implement logic for '--max-iterations'
  * Update F5 key label on tab switch (Tree &lt;-&gt; List)
  * Force re-sorting of the process list view after switching between list/treeview mode
  * Linux: (hack) work around the fact that Zswapped pages may be SwapCached
  * Linux: implement zswap support
  * {Memory,Swap}Meter: add "compressed memory" metrics
  * Darwin: add DiskIOMeter support
  * Fix scroll relative to followed process
  * ZramMeter: update bar mode
  * Use shared real memory on FreeBSD
  * Increase Search and Filter max string length to 128
  * Improve CPU computation code
  * Remove LXC special handling for the CPU count
  * Create new File Descriptor meter
  * PCP: add IRQ PSI meter
  * Linux: add IRQ PSI meter
  * Linux: highlight username if process has elevated privileges
  * Add support for scheduling policies
  * Add a systemd user meter to monitor user units.
  * FreeBSD: remove duplicate zfs ARC size subtraction</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1742990400">- Update to version 3.4.0:
  * Improve Darwin support for ARM-based systems
  * Fix static linking with libsystemd
  * Various build fixes for DragonFlyBSD, Darwin, NetBSD, OpenBSD &amp; Solaris
  * Fix running task display (count)
  * Fix sort order handling in tree mode
  * Add warning when exiting with a signal (not saving .htoprc)
  * Add Disk I/O and Network I/O meter for DragonFlyBSD
  * Improve handling of invalid Unicode strings
  * Disable basename checking for kernel tasks
  * Updated documentation for pcp-htop
  * Disable FOCUS_IN/FOCUS_OUT event handling
  * Add GPU meter for Linux and PCP
  * Add colum for GPU time per process on Linux and PCP
  * Avoid glibc FILE API voodoo
  * Ignore previously unhandled signals USR1 and USR2
  * Force locating the config file to only use absolute paths
  * Prefer reading htoprc from ~/.config/htop/htoprc over legacy ~/.htoprc
  * Force writing the configuration to a regular file
  * Use distinct config files for htop and pcp-htop
  * Link libnl3 at runtime
  * Gather permitted capabilities via capget(2)
  * Avoid fetching certain process information for each thread on Linux (speed up)
  * Improved handling for invalid data in /proc/tty/drivers on Linux
  * Various changes to avoid memory allocations inside signal handlers
  * Add single column header layout
  * Fix DivByZero bug on startup on Darwin
  * Include thread information on Darwin
  * Show process state on Darwin
  * Update compat check for C23 compilers
  * Improved detail in help screen
  * Unicode support for CGROUP, CCGROUP, CONTAINER and SECATTR columns
  * Mark newline characters in the process command line display
  * Resolve nested derived metrics for PCP
  * Make supported modes/styles specific to each meter
  * Refined checks for terminals supporting to redefine keys
  * Fix handling of the NICE value on FreeBSD
  * Fix display of CPU utilization on FreeBSD
  * Honour update interval adjustments properly without restart
  * Force rebuild of display table after item removals
  * Reworked handling for various temperature sensors
  * Fix high CPU load when the strace'd process exits prematurely
  * Document --drop-capabilities to require a compile time support
  * Always call PKG_PROG_PKG_CONFIG in configure
  * Make configure warn when pkg.m4 is absent
  * Rewrite curses/terminfo detection code in configure
  * Keep following a process when resuming process updates (Z key)
  * Normalize Disk I/O usage and allow utilization above 100%
  * Plug several memory leaks and improve performance for information parsing
  * Allow to show or hide cache and buffers in memory usage meter
  * Visibility hint and UX improvements in status bar of display options panel
  * Remove IOKit / IOMainPort / IOMMasterPort logic for Darwin builds
  * Replace BCC with metrics from BPF for pcp-htop</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1744372800">- Update to version 3.4.1:
  * Support for PMAPI v3 for PCP
  * PCP code cleanups
  * Proper checks for strchrnul
  * Code cleanup in the NetworkIOMeter
  * Improved documentation for the --user option
  * Display stuck processes on Darwin
  * Handle issues when the monotonic clock runs backwards
  * Fix builds using native curses on NetBSD</changelog>
</package>
<package pkgid="8e8057cc9f6531c12eebf971b13822d649ebd1819774626f89c9c66c51dfe649" name="htop" arch="src">
  <version epoch="0" ver="3.4.1" rel="bp156.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1587643200">- Add patches:
  * htop-2.2.0-fix-linux-process-ordering.patch
  * htop-2.2.0-fix-option-string.patch (fixes boo#1165352)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Fix building with gcc10:
  * htop-2.2.0-gcc10.patch</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1598702400">- Update to version 3.0.0
  * Add simple, optional vim key mapping mode
  * Support more than 2 smaller CPU meter columns
  * Support Linux proportional set size metrics
  * Support Linux pressure stall information metrics
  * New display option to show CPU frequency in CPU meters
  * Update Linux sysfs battery discovery for recent kernels
  * Add hardware topology information in the affinity panel
  * Add timestamp reporting to the strace screen
  * Added an option to disable the mouse
  * Without an argument -u uses $USER value automatically
  * Support less(1) search navigation shortcuts
  * Support ZFS ARC statistics
  * Report values larger than 100 terabytes
  * Widen ST_UID (UID) column to allow for UIDs &gt; 9999
  * BUGFIX: fix makefiles for building with clang
  * BUGFIX: fix &lt;sys/sysmacros.h&gt; major() usage
  * BUGFIX: correctly identify other types of zombie process
  * BUGFIX: improve follow-process handling in some situations
  * BUGFIX: fix custom meters reverting to unexpected setting
  * BUGFIX: close pipe after running lsof(1)
  * BUGFIX: meters honour setting of counting CPUs from 0/1
- Drop htop-2.2.0.tar.gz.asc - no sig provided
- Upstreamed patches removed:
  * Drop htop-2.2.0-fix-linux-process-ordering.patch
  * Drop htop-2.2.0-fix-option-string.patch
  * Drop htop-2.2.0-gcc10.patch
  * Drop htop-desktop-file-fix-thoenig-01.patch
  * Drop htop-script-python3.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599393600">- Update to version 3.0.1
  * BUGFIX: Fix early exit with longer sysfs battery paths
  * BUGFIX: Improve OOM output, fix sorting
  * Rework check buttons and tree open/closed
  * Add -U/--no-unicode option to disable unicode
  * Improvements to the affinity panel</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1600171200">- Update to version 3.0.2
  * BUGFIX: Drop 'vim_mode' - several issues, needs rethink
  * BUGFIX: fix regression in -u optional-argument handling
  * Build system rework to remove python, header generation
  * CI, code quality improvements
- Switch to new official bintray tarball to remove automake deps</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1607342400">- Update to version 3.0.3
  * Process sorting in 'tree' mode
  * Improved command display/sort functionality
  * Add screen for active file locks
  * Calculate library size (M_LRS column) from maps file
  * Add a Zram meter
  * Add Linux cwd process column
  * Dynamically load libsensors at runtime
  * Improve PressureStall Meter display strings
  * Hide process selection on ESC
  * Fully support non-ascii characters in Meter-Bar
  * Add support to change numeric options in settings screen
  * Rename virtual memory column from M_SIZE to M_VIRT
  * Add process column for normalized CPU usage
  * Show CPU temperature in CPU meter
  * Drop hideThreads Setting
  * Add a systemd meter
  * Add a network IO meter
  * Add a SELinux meter
  * Compress size of default FunctionBar
  * Updates to the OpenFiles screen
  * Continue updating header data in paused mode
  * BUGFIX: Handle data wraparounds in IO meters
  * BUGFIX: Update InfoScreen content on resize
  * Add security attribute process column
  * Add DiskIOMeter for IO read/write usage
  * Read CPU frequency from sysfs by default
  * Add Linux process column for context switches
  * Several FreeBSD and Mac OS X platform updates
  * Add process environment for FreeBSD
  * Parse POWER_SUPPLY_CAPACITY for Linux Battery meter
  * Add octuple-column CPU meters.
  * BUGFIX: On Linux consider ZFS ARC to be cache
  * BUGFIX: Limit screen title length to window width
  * Show selected command wrapped in a separate window
  * Allow to pass '/' for item search
  * Document implicit incremental search
  * Handle 'q' as quit if first character
  * Avoid expensive build of process tree when not using it
  * Include documentation for COMM and EXE
  * Distinguish display of no permissions for reading M_LRS
  * Only calculate M_LRS size every 2 seconds
  * Improvements to comm / cmdline display functionality
  * Merged view for COMM, EXE and cmdline
    (thanks to Narendran Gopalakrishnan and Benny Baumann)
  * Consistent kernel thread display for COMM/EXE columns
  * Central fault handling for all platforms
  * Handle parsing envID &amp; VPid from process status file
  * Use threshold for display of guest/steal/irq meters
  * Enhance highlighting of semi-large and large numbers
  * Documentation on the repository style guide
  * Align processor identifier to the right
  * Document M_PSS, M_PSSWP, M_SWAP in man page
  * Add Date and DateTime meters
  * BUGFIX: Fix Solaris 11.4 due to missing ZFS ARC kstats
  * Code hardening, speedups, fd and memory leak fixes
  * Number CPUs from zero by default
  * Remove residual python checks during the build process</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- htop 3.0.4:
  * Separate tree and list sort orders
  * PSI Meter: constant width and only print ten-duration as bar
  * Sort in paused mode after inverting sort order
  * Handle absence of package CPU temperature
  * Document dynamic bindings and assumed external configuration
  * Update key mapping documentation for sorting</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610452800">- Update to version 3.0.5:
  * InfoScreen: fix uncontrolled format string
  * Improve white text in the Light Terminal colour scheme
  * Enable the function bar on the main screen to be hidden (see Setup -&gt; Display options)
  * Reduce layout issues esp. around printing wide characters (not complete yet)
  * Make the follow function exit cleanly after followed process died
  * Update help and man page for improved -t / -s options
  * Drop usage of formatted error messages from &lt;err.h&gt;
  * Show arrow indicating order of sorted process column
  * Lots of plumbing around the internal Hashtable, hardening and code cleanups
  * LibSensors: add support for Ryzen CPUs
  * Fix CPU percentage on M1 silicon Macs
  * LoadMeter: dynamically adjust color and total of bar
  * Find libsensors.so.4 for Fedora and friends
  * Enable going back to previous search matches (Shift-F3)
  * Added keybind 'N' for sorting by PID (drops 'n'/'N' as not used before much)</changelog>
  <changelog author="kh Lai &lt;dlshcbmuipmam@hotmail.com&gt;" date="1632312000">- Add autoconf and automake as dependencies
- Switch the url to the Github release page
- Update to 3.1.0:
  * Updated COPYING file to remove the PLPA exemption (appendix 2)
    With this change the license is now GPLv2 without any additional wording.
  * Improved default sort ordering
    Note for users: This may lead to an inverted sort order on startup of
    htop 3.1.0 compared to previous versions.
    This is due to what is stored in your htoprc file. Solution: Press I
    (to invert sort order).
    This changed setting will be saved by htop on exit as long as it can
    write to your htoprc file.
  * The compile-time option to cater specifically for running htop as
    setuid has been removed
  * Add read-only option
    This allows htop to be run in an non-intrusive fashion where it acts only
    as a process viewer disabling all functions to manipulate system state.
    Note: This is not a security feature!
  * Move the code for handling the command line formatting related tasks
    to be shared across all platforms
    This means important features like stale binary/library highlighting
    can now be available on all supported platforms.
  * Make the EXE and COMM columns available on all platforms
    All supported platforms have the name of the executable (EXE) and a
    self-chosen thread/command name (COMM) available one way or the other.
    Moving this column to be handled as a platform-independently available
    information simplifies the markup of the command line.
  * Introduce configuration file versioning and config_reader_min_version
    Starting with this version the configuration file contains a version
    identifying the minimum version of the configuration parser needed to
    fully understand the configuration file format.
    Old configuration file formats are automatically upgraded when
    saving the config file (htoprc).
  * Make the configuration parser friendlier to users (thanks to Bart Bakker)
    With this change only settings that cannot be parsed properly are
    reset to their defaults.
  * Improve default display for systems with many CPUs
  * Add the process ELAPSED time column
  * Improve the process STATE column sorting
  * Reworked handling resize and redrawing of the UI
  * Fixed an issue where the LED meter mode could overflow allotted space
  * Allow text mode Meters to span empty neighbors to the right
  * Rescale graph meters when value of total changes
    (thanks to Michael Schönitzer)
  * Update generic process field display
    Usually "uninteresting" values in columns like 1 thread, nice value
    of 0, CPU and memory of 0%, idle/sleeping state, etc. are shown with
    reduced intensity (dark grey)
  * Option and key ("*") to collapse / expand all branches under PID 1
    (and PID 2 if kernel threads are shown) (thanks to Krishna Chaitanya)
  * Keep following a process when inverting the sort order, displaying
    the help screen or hiding/unhiding userland threads.
    If a thread is currently selected the selection is updated to point
    to the thread's parent process. (thanks to Gonzalo, et.al.)
  * Reorder process scanning to be performed before updating the display
    of the meters in the header
  * Always check the user for a process for any changes.
    This affects multiple platforms that previously didn't correctly handle
    the user field for a process to change at runtime (e.g. due to seteuid
    or similar syscalls).
  * Disable mouse option when support is unavailable
  * Support curses libraries without ncurses mouse support
    (thanks to Santhosh Raju)
  * Support offline and hot-swapping of CPUs on all platforms
  * Fix the CPU Meter for machines with more than 256 CPUs
  * Supplemented the "show updated/deleted executables" feature (red basename)
    to indicate when linked libraries were updated (yellow basename)
  * Apply the stale binary highlighting for the EXE column in addition to
    the command line field
  * Add new combined Memory and Swap meter
  * Implement bar and graph mode for NetworkIO Meter
    (thanks to Michael F. Schönitzer)
  * Rework TTY column to be more consistent across platforms
  * Make the CWD column generally available on all platforms
    (thanks to Santhosh Raju et. al.)
  * Add Performance Co-Pilot (PCP) platform support
    This is added via a separate pcp-htop(1) binary which provides remote host
    analysis, new Meters for any PCP metric and new Columns for any PCP process
    metric - see the pcp-htop(5) man page for further details.
    (thanks to Sohaib Mohamed)
  * Add Linux columns and key bindings for process autogroup identifier
    and nice value
  * Change available and used memory reporting on Linux to be based on
    MemAvailable (Kernel 3.14+) (thanks to Chris Cheney and Tomas Wido)
  * Add a new SysArchMeter showing kernel and platform information
    (thanks to ahgamut)
  * Linux memory usage explicitly treats tmpfs memory usage as shared memory
    This is to make memory used by tmpfs visible as this cannot be freed
    unlike normal filesystem cache data.
  * Exclude zram devices when calculating DiskIO on Linux
  * Use PATH lookup for systemctl in systemd meter (thanks to Scott Olson)
  * Add native platform support for NetBSD
    This allows htop to run on NetBSD without the need for active Linux
    emulation of the procfs filesystem.
    (thanks to Santhosh Raju and Nia Alarie)
  * Add NetworkIO, DiskIO, CPU frequency, and battery meter support on NetBSD
    (thanks to Nia Alarie)
  * Fix NetBSD display of in-use and cached memory (thanks to Nia Alarie)
  * Rework NetBSD CPU and memory accounting (thanks to Santhosh Raju)
  * Fix NetBSD accounting of user and kernel threads (thanks to Santhosh Raju)
  * Initial work to allow building with default libcurses on NetBSD
    (thanks to Santhosh Raju)
  * FreeBSD updates - implement process majflt and processor column values
  * Add FreeBSD support for CPU frequency and temperature
  * Fixes and cleanups for ZFS Meters and metrics
  * Correctly color the ZFS ARC ratio (thanks to Ross Williams)
  * Bugfixes related to CPU time display/calculations for darwin on M1 systems
    (thanks to Alexander Momchilov)
  * Harmonize the handling of multiple batteries across different platforms.
    The system is now considered to run on AC if at least one power supply
    marked as AC is found in the system.
    Battery capacity is summed up over all batteries found.
    This also changes the old behavior that batteries reported by the
    system after the first AC adapter where sometimes ignored.
  * Correctly handle multiple batteries on Darwin.
    Resolves a possible memory leak on systems with multiple batteries.
  * Handle Linux Shmem being part of Cached in the MemoryMeter
  * Add SwapCached to the Linux swap meter (thanks to David Zarzycki)
  * Convert process time to days if applicable (thanks to David Zarzycki)
  * Always show the number of threads in the TaskMeter, even when threads
    are not shown in the process list
  * Fix Linux --drop-capabilities option handling
  * Correctly detect failure to initialize Linux boottime
  * Overhaul the Linux memory fields to partition them like free(1) now does
  * Improve the Linux process I/O column values
  * Rework the libsensors parsing on Linux
  * Update the MemoryMeter to display shared memory
  * Update OpenBSD platform - implement additional columns, scan LWP,
    proper markup for STATE, show CPU frequency
  * Fix the tree view on OpenBSD when hiding kernel threads
  * Remove old InfoScreen lines before re-scanning (thanks to Øystein Hiåsen)
  * Document historic naming of Light-Weight Processes column aka threads
  * Improve user interaction when the last process entry is selected
  * Draw the panel header on the TraceScreen (thanks to Youngjae Lee)
  * Add mouse wheel scroll and fix mouse selection on the InfoScreen
    (thanks to Youngjae Lee)
  * Add a HugepageMeter and subtract hugepages from normal memory
  * Display wide characters in LED meters and restore non-wide ncurses support
  * Add command line option to drop Linux capabilities
  * Support scheduler affinity on platforms beyond Linux
  * Report on any failure to write the configuration file
  * Cache stderr to be able to print assert messages.
    These messages are shown in case htop terminates unexpectedly.
  * Print current settings on crash
  * Reset signal handlers on program exit
  * Add configure script option to create a static htop binary
  * Resolved longer-standing compilation issues on Solaris/Illumos
  * Check for availability of set_escdelay in configure
    (thanks to Stefan Polluks)
  * Build system updates for autotools 2.70</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632398400">- Enable linux capabilities
- Drop unsupported configure options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1635768000">-  Update to version 3.1.1 (boo#1192144):
  * See https://github.com/htop-dev/htop/compare/3.1.0...3.1.1</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1638273600">- Update to version 3.1.2
  * Bugfix for crash when storing modified settings at exit
  * Generate xz-compressed source tarball (with configure) using github actions
  * Allow -u UID with numerical value as argument
  * Added documentation for obsolete/state libraries/program files highlighting
  * Some obsolete/stale library highlighting refinements
  * Column width issues resolved
  * Dynamic UID column sizing improved
  * Discard stale information from Disk and Network I/O meters
  * Refined Linux kernel thread detection
  * Reworked process state handling
  * New CCGROUP column showing abbreviated cgroup name
  * New OFFSET column in the list of open files screen</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1651492800">- Update to 3.2.0:
  * Support for displaying multiple tabs in the user interface
  * Allow multiple filter and search terms (logical OR, separate by "|")
  * Set correct default sorting direction (defaultSortDesc)
  * Improve performance for process lookup and update
  * Rework the IOMeters initial display
  * Removed duplicate sections on COMM and EXE
  * Highlight process UNINTERRUPTIBLE_WAIT state (D)
  * Show only integer value when CPU% more than 99.9%
  * Handle rounding ambiguity between 99.9 and 100.0%
  * No longer leaves empty the last column in header
  * Fix header layout and meters reset if a header column is empty
  * Fix PID and UID column widths off-by-one error
  * On Linux, read generic sysfs batteries
  * On Linux, do not collect LRS per thread (it is process-wide)
  * On Linux, dynamically adjust the SECATTR and CGROUP column widths
  * On Linux, fix a crash in LXD
  * On FreeBSD, add support for showing process emulation
  * On Darwin, lazily set process TTY name
  * Always set SIGCHLD to default handling
  * Avoid zombie processes on signal races
  * Ensure last line is cleared when SIGINT is received
  * Instead of SIGTERM, pre-select the last sent signal
  * Internal Hashtable performance and sizing improvements
  * Add heuristics for guessing LXC or Docker from /proc/1/mounts
  * Force elapsed time display to zero if process started in the future
  * Avoid extremely large year values when printing time
  * Fix division by zero when calculating IO rates
  * Fix out of boundary writes in XUtils
  * Fix custom thread name display issue
  * Use AC_CANONICAL_HOST, not AC_CANONICAL_TARGET in configure.ac
  * Support libunwind of LLVM</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1654257600">- Update to 3.2.1
  * Fix setting to show all branches collapsed by default
  * Restore functionality of stripExeFromCmdline setting
  * Fix some command line display settings not being honored without restart
  * Display single digit precision for CPU% greater than 99.9%
  * On Linux, FreeBSD and PCP consider only shrinkable ZFS ARC as cache
  * On Linux, increase field width of CPUD% and SWAPD% columns
  * Colorize process state characters in help screen
  * Use mousemask(3X) to enable and disable mouse control
  * Fix heap buffer overflow in Vector_compact
  * On Solaris, fix a process time scaling error
  * On Solaris, fix the build
  * On NetBSD, OpenBSD and Solaris ensure env buffer size is sufficient
  * On Linux, resolve processes exiting interfering with sampling
  * Fix ProcessList quadratic removal when scanning processes
  * Under LXC, limit CPU count to that given by /proc/cpuinfo
  * Improve container detection for LXC
  * Some minor documentation fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675684800">- Update to 3.2.2:
  * CPUMeter now can show frequency in text mode
  * Add option to render distribution path prefixes shadowed
  * DiskIOMeter converts to bytes per second (not per interval)
  * DiskIOMeter uses complete units, including missing "iB/s"
  * DiskIOMeter indicates read and write in meter mode
  * NetworkIOMeter converts to packets per second, shows packet rate
  * Allow continued process following when changing display settings
  * Update the panel header when changing to another tab
  * Drop margin around the header if there are no meters
  * Use Unicode replacement character for non-printable characters
  * Default color preset uses bold blue for better visibility
  * Update the Panel header on sort order inversions ('I')
  * Toggle the header meters with pound key
  * Fix ScreenPanel to handle quitting the panel while renaming
  * Add fallback for HOME environment variable using passwd database
  * Replace meaningless ID column with FD column in lock screen
  * Use device format in the lock screen matching the files screen
  * On Linux, improvements to file-descriptor lock detection
  * On Linux, further distinguish systemd states in the SystemdMeter
  * On Linux, improvements to cgroup and container identification
  * On Linux, support openat(2) without readlinkat(2) platforms
  * On Darwin, fix current process buffer handling for busy systems
  * On DragonFly BSD, fix incorrect processor time of processes
  * On FreeBSD, fix an issue with the memory graph not showing correctly
  * On FreeBSD, add support for displaying shared memory usage
  * On PCP, use pmLookupDescs(3) if available for efficiency
  * On PCP, normalize generic columns values for consistent display
  * On PCP, changes preparing for configurable, dynamic screens
  * Handle invalid process columns from the configuration file
  * Avoid undefined behaviour with deeply nested processes
  * Fix crash when removing the currently active screen
  * Prevent possible crash on a very early error path
  * Include automake for Debian/Ubuntu
  * Restore non-mouse support
  * Reject unsupported command line arguments
  * Document idle process state
  * Clarify M_TRS/M_DRS columns</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686571200">- Drop no longer available configure option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1701172800">- Switch to xz compressed sources</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704974400">- Update to version 3.3.0:
  * Multiple refactorings and code improvements
  * Shorten docker container IDs to 12 characters
  * Settings: preserve empty header
  * Fix execlp() argument without pointer cast
  * OpenFilesScreen: Make column sizing dynamic for file size, offset and inode
  * Add support for "truss" (FreeBSD equivalent of "strace")
  * Darwin: add NetworkIOMeter support
  * HeaderLayout: add "3 columns - 40/30/30", "... 30/40/30" &amp; "... 30/30/40"
  * Meter: use correct unicode characters for digit '9'
  * Note in manual re default memory units of KiB
  * Add column for process container name
  * Add logic to filter the container name (+type) from the CGroup name
  * Change NetworkIOMeter value unit from KiB/s to bytes/second
  * Cap DiskIOMeter "utilisation" percentage at 100%
  * PCP platform implementation of frontswap and zswap accounting
  * Shorten podman/libpod container IDs to 12 characters
  * Write configuration to temporary file first
  * Incorporate shared memory in bar text
  * Move shared memory next to used memory
  * Correct order of memory meter in help
  * Add recalculate to Ctrl-L refresh
  * Update process list on thread visibility toggling
  * Support dynamic screens with 'top-most' entities beyond processes
  * Introduce Row and Table classes for screens beyond top-processes
  * Rework ZramMeter and remove MeterClass.comprisedValues
  * More robust logic for CPU process percentages (Linux &amp; PCP)
  * Show year as start time for processes older than a year
  * Short-term fix for docker container detection
  * default color preset: use bold blue for better visibility
  * Document 'O' keyboard shortcut
  * Implement logic for '--max-iterations'
  * Update F5 key label on tab switch (Tree &lt;-&gt; List)
  * Force re-sorting of the process list view after switching between list/treeview mode
  * Linux: (hack) work around the fact that Zswapped pages may be SwapCached
  * Linux: implement zswap support
  * {Memory,Swap}Meter: add "compressed memory" metrics
  * Darwin: add DiskIOMeter support
  * Fix scroll relative to followed process
  * ZramMeter: update bar mode
  * Use shared real memory on FreeBSD
  * Increase Search and Filter max string length to 128
  * Improve CPU computation code
  * Remove LXC special handling for the CPU count
  * Create new File Descriptor meter
  * PCP: add IRQ PSI meter
  * Linux: add IRQ PSI meter
  * Linux: highlight username if process has elevated privileges
  * Add support for scheduling policies
  * Add a systemd user meter to monitor user units.
  * FreeBSD: remove duplicate zfs ARC size subtraction</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1742990400">- Update to version 3.4.0:
  * Improve Darwin support for ARM-based systems
  * Fix static linking with libsystemd
  * Various build fixes for DragonFlyBSD, Darwin, NetBSD, OpenBSD &amp; Solaris
  * Fix running task display (count)
  * Fix sort order handling in tree mode
  * Add warning when exiting with a signal (not saving .htoprc)
  * Add Disk I/O and Network I/O meter for DragonFlyBSD
  * Improve handling of invalid Unicode strings
  * Disable basename checking for kernel tasks
  * Updated documentation for pcp-htop
  * Disable FOCUS_IN/FOCUS_OUT event handling
  * Add GPU meter for Linux and PCP
  * Add colum for GPU time per process on Linux and PCP
  * Avoid glibc FILE API voodoo
  * Ignore previously unhandled signals USR1 and USR2
  * Force locating the config file to only use absolute paths
  * Prefer reading htoprc from ~/.config/htop/htoprc over legacy ~/.htoprc
  * Force writing the configuration to a regular file
  * Use distinct config files for htop and pcp-htop
  * Link libnl3 at runtime
  * Gather permitted capabilities via capget(2)
  * Avoid fetching certain process information for each thread on Linux (speed up)
  * Improved handling for invalid data in /proc/tty/drivers on Linux
  * Various changes to avoid memory allocations inside signal handlers
  * Add single column header layout
  * Fix DivByZero bug on startup on Darwin
  * Include thread information on Darwin
  * Show process state on Darwin
  * Update compat check for C23 compilers
  * Improved detail in help screen
  * Unicode support for CGROUP, CCGROUP, CONTAINER and SECATTR columns
  * Mark newline characters in the process command line display
  * Resolve nested derived metrics for PCP
  * Make supported modes/styles specific to each meter
  * Refined checks for terminals supporting to redefine keys
  * Fix handling of the NICE value on FreeBSD
  * Fix display of CPU utilization on FreeBSD
  * Honour update interval adjustments properly without restart
  * Force rebuild of display table after item removals
  * Reworked handling for various temperature sensors
  * Fix high CPU load when the strace'd process exits prematurely
  * Document --drop-capabilities to require a compile time support
  * Always call PKG_PROG_PKG_CONFIG in configure
  * Make configure warn when pkg.m4 is absent
  * Rewrite curses/terminfo detection code in configure
  * Keep following a process when resuming process updates (Z key)
  * Normalize Disk I/O usage and allow utilization above 100%
  * Plug several memory leaks and improve performance for information parsing
  * Allow to show or hide cache and buffers in memory usage meter
  * Visibility hint and UX improvements in status bar of display options panel
  * Remove IOKit / IOMainPort / IOMMasterPort logic for Darwin builds
  * Replace BCC with metrics from BPF for pcp-htop</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1744372800">- Update to version 3.4.1:
  * Support for PMAPI v3 for PCP
  * PCP code cleanups
  * Proper checks for strchrnul
  * Code cleanup in the NetworkIOMeter
  * Improved documentation for the --user option
  * Display stuck processes on Darwin
  * Handle issues when the monotonic clock runs backwards
  * Fix builds using native curses on NetBSD</changelog>
</package>
<package pkgid="fe6138036d2c1a8d8495612d7920b819c7e39544aefe1024625f835f66fc34de" name="htop" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="bp156.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1587643200">- Add patches:
  * htop-2.2.0-fix-linux-process-ordering.patch
  * htop-2.2.0-fix-option-string.patch (fixes boo#1165352)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Fix building with gcc10:
  * htop-2.2.0-gcc10.patch</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1598702400">- Update to version 3.0.0
  * Add simple, optional vim key mapping mode
  * Support more than 2 smaller CPU meter columns
  * Support Linux proportional set size metrics
  * Support Linux pressure stall information metrics
  * New display option to show CPU frequency in CPU meters
  * Update Linux sysfs battery discovery for recent kernels
  * Add hardware topology information in the affinity panel
  * Add timestamp reporting to the strace screen
  * Added an option to disable the mouse
  * Without an argument -u uses $USER value automatically
  * Support less(1) search navigation shortcuts
  * Support ZFS ARC statistics
  * Report values larger than 100 terabytes
  * Widen ST_UID (UID) column to allow for UIDs &gt; 9999
  * BUGFIX: fix makefiles for building with clang
  * BUGFIX: fix &lt;sys/sysmacros.h&gt; major() usage
  * BUGFIX: correctly identify other types of zombie process
  * BUGFIX: improve follow-process handling in some situations
  * BUGFIX: fix custom meters reverting to unexpected setting
  * BUGFIX: close pipe after running lsof(1)
  * BUGFIX: meters honour setting of counting CPUs from 0/1
- Drop htop-2.2.0.tar.gz.asc - no sig provided
- Upstreamed patches removed:
  * Drop htop-2.2.0-fix-linux-process-ordering.patch
  * Drop htop-2.2.0-fix-option-string.patch
  * Drop htop-2.2.0-gcc10.patch
  * Drop htop-desktop-file-fix-thoenig-01.patch
  * Drop htop-script-python3.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599393600">- Update to version 3.0.1
  * BUGFIX: Fix early exit with longer sysfs battery paths
  * BUGFIX: Improve OOM output, fix sorting
  * Rework check buttons and tree open/closed
  * Add -U/--no-unicode option to disable unicode
  * Improvements to the affinity panel</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1600171200">- Update to version 3.0.2
  * BUGFIX: Drop 'vim_mode' - several issues, needs rethink
  * BUGFIX: fix regression in -u optional-argument handling
  * Build system rework to remove python, header generation
  * CI, code quality improvements
- Switch to new official bintray tarball to remove automake deps</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1607342400">- Update to version 3.0.3
  * Process sorting in 'tree' mode
  * Improved command display/sort functionality
  * Add screen for active file locks
  * Calculate library size (M_LRS column) from maps file
  * Add a Zram meter
  * Add Linux cwd process column
  * Dynamically load libsensors at runtime
  * Improve PressureStall Meter display strings
  * Hide process selection on ESC
  * Fully support non-ascii characters in Meter-Bar
  * Add support to change numeric options in settings screen
  * Rename virtual memory column from M_SIZE to M_VIRT
  * Add process column for normalized CPU usage
  * Show CPU temperature in CPU meter
  * Drop hideThreads Setting
  * Add a systemd meter
  * Add a network IO meter
  * Add a SELinux meter
  * Compress size of default FunctionBar
  * Updates to the OpenFiles screen
  * Continue updating header data in paused mode
  * BUGFIX: Handle data wraparounds in IO meters
  * BUGFIX: Update InfoScreen content on resize
  * Add security attribute process column
  * Add DiskIOMeter for IO read/write usage
  * Read CPU frequency from sysfs by default
  * Add Linux process column for context switches
  * Several FreeBSD and Mac OS X platform updates
  * Add process environment for FreeBSD
  * Parse POWER_SUPPLY_CAPACITY for Linux Battery meter
  * Add octuple-column CPU meters.
  * BUGFIX: On Linux consider ZFS ARC to be cache
  * BUGFIX: Limit screen title length to window width
  * Show selected command wrapped in a separate window
  * Allow to pass '/' for item search
  * Document implicit incremental search
  * Handle 'q' as quit if first character
  * Avoid expensive build of process tree when not using it
  * Include documentation for COMM and EXE
  * Distinguish display of no permissions for reading M_LRS
  * Only calculate M_LRS size every 2 seconds
  * Improvements to comm / cmdline display functionality
  * Merged view for COMM, EXE and cmdline
    (thanks to Narendran Gopalakrishnan and Benny Baumann)
  * Consistent kernel thread display for COMM/EXE columns
  * Central fault handling for all platforms
  * Handle parsing envID &amp; VPid from process status file
  * Use threshold for display of guest/steal/irq meters
  * Enhance highlighting of semi-large and large numbers
  * Documentation on the repository style guide
  * Align processor identifier to the right
  * Document M_PSS, M_PSSWP, M_SWAP in man page
  * Add Date and DateTime meters
  * BUGFIX: Fix Solaris 11.4 due to missing ZFS ARC kstats
  * Code hardening, speedups, fd and memory leak fixes
  * Number CPUs from zero by default
  * Remove residual python checks during the build process</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- htop 3.0.4:
  * Separate tree and list sort orders
  * PSI Meter: constant width and only print ten-duration as bar
  * Sort in paused mode after inverting sort order
  * Handle absence of package CPU temperature
  * Document dynamic bindings and assumed external configuration
  * Update key mapping documentation for sorting</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610452800">- Update to version 3.0.5:
  * InfoScreen: fix uncontrolled format string
  * Improve white text in the Light Terminal colour scheme
  * Enable the function bar on the main screen to be hidden (see Setup -&gt; Display options)
  * Reduce layout issues esp. around printing wide characters (not complete yet)
  * Make the follow function exit cleanly after followed process died
  * Update help and man page for improved -t / -s options
  * Drop usage of formatted error messages from &lt;err.h&gt;
  * Show arrow indicating order of sorted process column
  * Lots of plumbing around the internal Hashtable, hardening and code cleanups
  * LibSensors: add support for Ryzen CPUs
  * Fix CPU percentage on M1 silicon Macs
  * LoadMeter: dynamically adjust color and total of bar
  * Find libsensors.so.4 for Fedora and friends
  * Enable going back to previous search matches (Shift-F3)
  * Added keybind 'N' for sorting by PID (drops 'n'/'N' as not used before much)</changelog>
  <changelog author="kh Lai &lt;dlshcbmuipmam@hotmail.com&gt;" date="1632312000">- Add autoconf and automake as dependencies
- Switch the url to the Github release page
- Update to 3.1.0:
  * Updated COPYING file to remove the PLPA exemption (appendix 2)
    With this change the license is now GPLv2 without any additional wording.
  * Improved default sort ordering
    Note for users: This may lead to an inverted sort order on startup of
    htop 3.1.0 compared to previous versions.
    This is due to what is stored in your htoprc file. Solution: Press I
    (to invert sort order).
    This changed setting will be saved by htop on exit as long as it can
    write to your htoprc file.
  * The compile-time option to cater specifically for running htop as
    setuid has been removed
  * Add read-only option
    This allows htop to be run in an non-intrusive fashion where it acts only
    as a process viewer disabling all functions to manipulate system state.
    Note: This is not a security feature!
  * Move the code for handling the command line formatting related tasks
    to be shared across all platforms
    This means important features like stale binary/library highlighting
    can now be available on all supported platforms.
  * Make the EXE and COMM columns available on all platforms
    All supported platforms have the name of the executable (EXE) and a
    self-chosen thread/command name (COMM) available one way or the other.
    Moving this column to be handled as a platform-independently available
    information simplifies the markup of the command line.
  * Introduce configuration file versioning and config_reader_min_version
    Starting with this version the configuration file contains a version
    identifying the minimum version of the configuration parser needed to
    fully understand the configuration file format.
    Old configuration file formats are automatically upgraded when
    saving the config file (htoprc).
  * Make the configuration parser friendlier to users (thanks to Bart Bakker)
    With this change only settings that cannot be parsed properly are
    reset to their defaults.
  * Improve default display for systems with many CPUs
  * Add the process ELAPSED time column
  * Improve the process STATE column sorting
  * Reworked handling resize and redrawing of the UI
  * Fixed an issue where the LED meter mode could overflow allotted space
  * Allow text mode Meters to span empty neighbors to the right
  * Rescale graph meters when value of total changes
    (thanks to Michael Schönitzer)
  * Update generic process field display
    Usually "uninteresting" values in columns like 1 thread, nice value
    of 0, CPU and memory of 0%, idle/sleeping state, etc. are shown with
    reduced intensity (dark grey)
  * Option and key ("*") to collapse / expand all branches under PID 1
    (and PID 2 if kernel threads are shown) (thanks to Krishna Chaitanya)
  * Keep following a process when inverting the sort order, displaying
    the help screen or hiding/unhiding userland threads.
    If a thread is currently selected the selection is updated to point
    to the thread's parent process. (thanks to Gonzalo, et.al.)
  * Reorder process scanning to be performed before updating the display
    of the meters in the header
  * Always check the user for a process for any changes.
    This affects multiple platforms that previously didn't correctly handle
    the user field for a process to change at runtime (e.g. due to seteuid
    or similar syscalls).
  * Disable mouse option when support is unavailable
  * Support curses libraries without ncurses mouse support
    (thanks to Santhosh Raju)
  * Support offline and hot-swapping of CPUs on all platforms
  * Fix the CPU Meter for machines with more than 256 CPUs
  * Supplemented the "show updated/deleted executables" feature (red basename)
    to indicate when linked libraries were updated (yellow basename)
  * Apply the stale binary highlighting for the EXE column in addition to
    the command line field
  * Add new combined Memory and Swap meter
  * Implement bar and graph mode for NetworkIO Meter
    (thanks to Michael F. Schönitzer)
  * Rework TTY column to be more consistent across platforms
  * Make the CWD column generally available on all platforms
    (thanks to Santhosh Raju et. al.)
  * Add Performance Co-Pilot (PCP) platform support
    This is added via a separate pcp-htop(1) binary which provides remote host
    analysis, new Meters for any PCP metric and new Columns for any PCP process
    metric - see the pcp-htop(5) man page for further details.
    (thanks to Sohaib Mohamed)
  * Add Linux columns and key bindings for process autogroup identifier
    and nice value
  * Change available and used memory reporting on Linux to be based on
    MemAvailable (Kernel 3.14+) (thanks to Chris Cheney and Tomas Wido)
  * Add a new SysArchMeter showing kernel and platform information
    (thanks to ahgamut)
  * Linux memory usage explicitly treats tmpfs memory usage as shared memory
    This is to make memory used by tmpfs visible as this cannot be freed
    unlike normal filesystem cache data.
  * Exclude zram devices when calculating DiskIO on Linux
  * Use PATH lookup for systemctl in systemd meter (thanks to Scott Olson)
  * Add native platform support for NetBSD
    This allows htop to run on NetBSD without the need for active Linux
    emulation of the procfs filesystem.
    (thanks to Santhosh Raju and Nia Alarie)
  * Add NetworkIO, DiskIO, CPU frequency, and battery meter support on NetBSD
    (thanks to Nia Alarie)
  * Fix NetBSD display of in-use and cached memory (thanks to Nia Alarie)
  * Rework NetBSD CPU and memory accounting (thanks to Santhosh Raju)
  * Fix NetBSD accounting of user and kernel threads (thanks to Santhosh Raju)
  * Initial work to allow building with default libcurses on NetBSD
    (thanks to Santhosh Raju)
  * FreeBSD updates - implement process majflt and processor column values
  * Add FreeBSD support for CPU frequency and temperature
  * Fixes and cleanups for ZFS Meters and metrics
  * Correctly color the ZFS ARC ratio (thanks to Ross Williams)
  * Bugfixes related to CPU time display/calculations for darwin on M1 systems
    (thanks to Alexander Momchilov)
  * Harmonize the handling of multiple batteries across different platforms.
    The system is now considered to run on AC if at least one power supply
    marked as AC is found in the system.
    Battery capacity is summed up over all batteries found.
    This also changes the old behavior that batteries reported by the
    system after the first AC adapter where sometimes ignored.
  * Correctly handle multiple batteries on Darwin.
    Resolves a possible memory leak on systems with multiple batteries.
  * Handle Linux Shmem being part of Cached in the MemoryMeter
  * Add SwapCached to the Linux swap meter (thanks to David Zarzycki)
  * Convert process time to days if applicable (thanks to David Zarzycki)
  * Always show the number of threads in the TaskMeter, even when threads
    are not shown in the process list
  * Fix Linux --drop-capabilities option handling
  * Correctly detect failure to initialize Linux boottime
  * Overhaul the Linux memory fields to partition them like free(1) now does
  * Improve the Linux process I/O column values
  * Rework the libsensors parsing on Linux
  * Update the MemoryMeter to display shared memory
  * Update OpenBSD platform - implement additional columns, scan LWP,
    proper markup for STATE, show CPU frequency
  * Fix the tree view on OpenBSD when hiding kernel threads
  * Remove old InfoScreen lines before re-scanning (thanks to Øystein Hiåsen)
  * Document historic naming of Light-Weight Processes column aka threads
  * Improve user interaction when the last process entry is selected
  * Draw the panel header on the TraceScreen (thanks to Youngjae Lee)
  * Add mouse wheel scroll and fix mouse selection on the InfoScreen
    (thanks to Youngjae Lee)
  * Add a HugepageMeter and subtract hugepages from normal memory
  * Display wide characters in LED meters and restore non-wide ncurses support
  * Add command line option to drop Linux capabilities
  * Support scheduler affinity on platforms beyond Linux
  * Report on any failure to write the configuration file
  * Cache stderr to be able to print assert messages.
    These messages are shown in case htop terminates unexpectedly.
  * Print current settings on crash
  * Reset signal handlers on program exit
  * Add configure script option to create a static htop binary
  * Resolved longer-standing compilation issues on Solaris/Illumos
  * Check for availability of set_escdelay in configure
    (thanks to Stefan Polluks)
  * Build system updates for autotools 2.70</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632398400">- Enable linux capabilities
- Drop unsupported configure options</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1635768000">-  Update to version 3.1.1 (boo#1192144):
  * See https://github.com/htop-dev/htop/compare/3.1.0...3.1.1</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1638273600">- Update to version 3.1.2
  * Bugfix for crash when storing modified settings at exit
  * Generate xz-compressed source tarball (with configure) using github actions
  * Allow -u UID with numerical value as argument
  * Added documentation for obsolete/state libraries/program files highlighting
  * Some obsolete/stale library highlighting refinements
  * Column width issues resolved
  * Dynamic UID column sizing improved
  * Discard stale information from Disk and Network I/O meters
  * Refined Linux kernel thread detection
  * Reworked process state handling
  * New CCGROUP column showing abbreviated cgroup name
  * New OFFSET column in the list of open files screen</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1651492800">- Update to 3.2.0:
  * Support for displaying multiple tabs in the user interface
  * Allow multiple filter and search terms (logical OR, separate by "|")
  * Set correct default sorting direction (defaultSortDesc)
  * Improve performance for process lookup and update
  * Rework the IOMeters initial display
  * Removed duplicate sections on COMM and EXE
  * Highlight process UNINTERRUPTIBLE_WAIT state (D)
  * Show only integer value when CPU% more than 99.9%
  * Handle rounding ambiguity between 99.9 and 100.0%
  * No longer leaves empty the last column in header
  * Fix header layout and meters reset if a header column is empty
  * Fix PID and UID column widths off-by-one error
  * On Linux, read generic sysfs batteries
  * On Linux, do not collect LRS per thread (it is process-wide)
  * On Linux, dynamically adjust the SECATTR and CGROUP column widths
  * On Linux, fix a crash in LXD
  * On FreeBSD, add support for showing process emulation
  * On Darwin, lazily set process TTY name
  * Always set SIGCHLD to default handling
  * Avoid zombie processes on signal races
  * Ensure last line is cleared when SIGINT is received
  * Instead of SIGTERM, pre-select the last sent signal
  * Internal Hashtable performance and sizing improvements
  * Add heuristics for guessing LXC or Docker from /proc/1/mounts
  * Force elapsed time display to zero if process started in the future
  * Avoid extremely large year values when printing time
  * Fix division by zero when calculating IO rates
  * Fix out of boundary writes in XUtils
  * Fix custom thread name display issue
  * Use AC_CANONICAL_HOST, not AC_CANONICAL_TARGET in configure.ac
  * Support libunwind of LLVM</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1654257600">- Update to 3.2.1
  * Fix setting to show all branches collapsed by default
  * Restore functionality of stripExeFromCmdline setting
  * Fix some command line display settings not being honored without restart
  * Display single digit precision for CPU% greater than 99.9%
  * On Linux, FreeBSD and PCP consider only shrinkable ZFS ARC as cache
  * On Linux, increase field width of CPUD% and SWAPD% columns
  * Colorize process state characters in help screen
  * Use mousemask(3X) to enable and disable mouse control
  * Fix heap buffer overflow in Vector_compact
  * On Solaris, fix a process time scaling error
  * On Solaris, fix the build
  * On NetBSD, OpenBSD and Solaris ensure env buffer size is sufficient
  * On Linux, resolve processes exiting interfering with sampling
  * Fix ProcessList quadratic removal when scanning processes
  * Under LXC, limit CPU count to that given by /proc/cpuinfo
  * Improve container detection for LXC
  * Some minor documentation fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675684800">- Update to 3.2.2:
  * CPUMeter now can show frequency in text mode
  * Add option to render distribution path prefixes shadowed
  * DiskIOMeter converts to bytes per second (not per interval)
  * DiskIOMeter uses complete units, including missing "iB/s"
  * DiskIOMeter indicates read and write in meter mode
  * NetworkIOMeter converts to packets per second, shows packet rate
  * Allow continued process following when changing display settings
  * Update the panel header when changing to another tab
  * Drop margin around the header if there are no meters
  * Use Unicode replacement character for non-printable characters
  * Default color preset uses bold blue for better visibility
  * Update the Panel header on sort order inversions ('I')
  * Toggle the header meters with pound key
  * Fix ScreenPanel to handle quitting the panel while renaming
  * Add fallback for HOME environment variable using passwd database
  * Replace meaningless ID column with FD column in lock screen
  * Use device format in the lock screen matching the files screen
  * On Linux, improvements to file-descriptor lock detection
  * On Linux, further distinguish systemd states in the SystemdMeter
  * On Linux, improvements to cgroup and container identification
  * On Linux, support openat(2) without readlinkat(2) platforms
  * On Darwin, fix current process buffer handling for busy systems
  * On DragonFly BSD, fix incorrect processor time of processes
  * On FreeBSD, fix an issue with the memory graph not showing correctly
  * On FreeBSD, add support for displaying shared memory usage
  * On PCP, use pmLookupDescs(3) if available for efficiency
  * On PCP, normalize generic columns values for consistent display
  * On PCP, changes preparing for configurable, dynamic screens
  * Handle invalid process columns from the configuration file
  * Avoid undefined behaviour with deeply nested processes
  * Fix crash when removing the currently active screen
  * Prevent possible crash on a very early error path
  * Include automake for Debian/Ubuntu
  * Restore non-mouse support
  * Reject unsupported command line arguments
  * Document idle process state
  * Clarify M_TRS/M_DRS columns</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686571200">- Drop no longer available configure option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1701172800">- Switch to xz compressed sources</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1704974400">- Update to version 3.3.0:
  * Multiple refactorings and code improvements
  * Shorten docker container IDs to 12 characters
  * Settings: preserve empty header
  * Fix execlp() argument without pointer cast
  * OpenFilesScreen: Make column sizing dynamic for file size, offset and inode
  * Add support for "truss" (FreeBSD equivalent of "strace")
  * Darwin: add NetworkIOMeter support
  * HeaderLayout: add "3 columns - 40/30/30", "... 30/40/30" &amp; "... 30/30/40"
  * Meter: use correct unicode characters for digit '9'
  * Note in manual re default memory units of KiB
  * Add column for process container name
  * Add logic to filter the container name (+type) from the CGroup name
  * Change NetworkIOMeter value unit from KiB/s to bytes/second
  * Cap DiskIOMeter "utilisation" percentage at 100%
  * PCP platform implementation of frontswap and zswap accounting
  * Shorten podman/libpod container IDs to 12 characters
  * Write configuration to temporary file first
  * Incorporate shared memory in bar text
  * Move shared memory next to used memory
  * Correct order of memory meter in help
  * Add recalculate to Ctrl-L refresh
  * Update process list on thread visibility toggling
  * Support dynamic screens with 'top-most' entities beyond processes
  * Introduce Row and Table classes for screens beyond top-processes
  * Rework ZramMeter and remove MeterClass.comprisedValues
  * More robust logic for CPU process percentages (Linux &amp; PCP)
  * Show year as start time for processes older than a year
  * Short-term fix for docker container detection
  * default color preset: use bold blue for better visibility
  * Document 'O' keyboard shortcut
  * Implement logic for '--max-iterations'
  * Update F5 key label on tab switch (Tree &lt;-&gt; List)
  * Force re-sorting of the process list view after switching between list/treeview mode
  * Linux: (hack) work around the fact that Zswapped pages may be SwapCached
  * Linux: implement zswap support
  * {Memory,Swap}Meter: add "compressed memory" metrics
  * Darwin: add DiskIOMeter support
  * Fix scroll relative to followed process
  * ZramMeter: update bar mode
  * Use shared real memory on FreeBSD
  * Increase Search and Filter max string length to 128
  * Improve CPU computation code
  * Remove LXC special handling for the CPU count
  * Create new File Descriptor meter
  * PCP: add IRQ PSI meter
  * Linux: add IRQ PSI meter
  * Linux: highlight username if process has elevated privileges
  * Add support for scheduling policies
  * Add a systemd user meter to monitor user units.
  * FreeBSD: remove duplicate zfs ARC size subtraction</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1742990400">- Update to version 3.4.0:
  * Improve Darwin support for ARM-based systems
  * Fix static linking with libsystemd
  * Various build fixes for DragonFlyBSD, Darwin, NetBSD, OpenBSD &amp; Solaris
  * Fix running task display (count)
  * Fix sort order handling in tree mode
  * Add warning when exiting with a signal (not saving .htoprc)
  * Add Disk I/O and Network I/O meter for DragonFlyBSD
  * Improve handling of invalid Unicode strings
  * Disable basename checking for kernel tasks
  * Updated documentation for pcp-htop
  * Disable FOCUS_IN/FOCUS_OUT event handling
  * Add GPU meter for Linux and PCP
  * Add colum for GPU time per process on Linux and PCP
  * Avoid glibc FILE API voodoo
  * Ignore previously unhandled signals USR1 and USR2
  * Force locating the config file to only use absolute paths
  * Prefer reading htoprc from ~/.config/htop/htoprc over legacy ~/.htoprc
  * Force writing the configuration to a regular file
  * Use distinct config files for htop and pcp-htop
  * Link libnl3 at runtime
  * Gather permitted capabilities via capget(2)
  * Avoid fetching certain process information for each thread on Linux (speed up)
  * Improved handling for invalid data in /proc/tty/drivers on Linux
  * Various changes to avoid memory allocations inside signal handlers
  * Add single column header layout
  * Fix DivByZero bug on startup on Darwin
  * Include thread information on Darwin
  * Show process state on Darwin
  * Update compat check for C23 compilers
  * Improved detail in help screen
  * Unicode support for CGROUP, CCGROUP, CONTAINER and SECATTR columns
  * Mark newline characters in the process command line display
  * Resolve nested derived metrics for PCP
  * Make supported modes/styles specific to each meter
  * Refined checks for terminals supporting to redefine keys
  * Fix handling of the NICE value on FreeBSD
  * Fix display of CPU utilization on FreeBSD
  * Honour update interval adjustments properly without restart
  * Force rebuild of display table after item removals
  * Reworked handling for various temperature sensors
  * Fix high CPU load when the strace'd process exits prematurely
  * Document --drop-capabilities to require a compile time support
  * Always call PKG_PROG_PKG_CONFIG in configure
  * Make configure warn when pkg.m4 is absent
  * Rewrite curses/terminfo detection code in configure
  * Keep following a process when resuming process updates (Z key)
  * Normalize Disk I/O usage and allow utilization above 100%
  * Plug several memory leaks and improve performance for information parsing
  * Allow to show or hide cache and buffers in memory usage meter
  * Visibility hint and UX improvements in status bar of display options panel
  * Remove IOKit / IOMainPort / IOMMasterPort logic for Darwin builds
  * Replace BCC with metrics from BPF for pcp-htop</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1744372800">- Update to version 3.4.1:
  * Support for PMAPI v3 for PCP
  * PCP code cleanups
  * Proper checks for strchrnul
  * Code cleanup in the NetworkIOMeter
  * Improved documentation for the --user option
  * Display stuck processes on Darwin
  * Handle issues when the monotonic clock runs backwards
  * Fix builds using native curses on NetBSD</changelog>
</package>
<package pkgid="0401f7d0cb887ed5aced41368c5aea4bfba058cd1c44d7368325f98eb98eb623" name="human-theme-gtk" arch="noarch">
  <version epoch="0" ver="2.2.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream release (1.3.0)
  * (gtk3 &amp; 4) new style for switch buttons
  * (gtk3 &amp; 4) new style for scales (for 0% and 100%)
  * (gtk3 &amp; 4) set style for selection box (rubberband)
  * (gtk3 &amp; 4) set style for check, radio, progress and icon
    widgets in treeviews
  * (gtk3) fix menuitems style for mate-calc
  * (gtk3) fix selected days style in calendars
  * (gtk4) set style for menuitems
  * (gtk4) set style for calendars
  * (gtk4) set style for toolbar buttons (without flat class)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream release (1.4.0)
  * (gtk 3 &amp; 4) fix style for disabled switchs, spinbuttons, images
  * (gtk 3 &amp; 4) fix text color for progressbars in treeviews
  * (gtk 3 &amp; 4) fix credits and license borders in about dialogs
  * (gtk 3 &amp; 4) set same focused border color (outline)
  * (gtk 3 &amp; 4) add border for focused scales (outline)
  * (gtk 3 &amp; 4) add style for disabled toggle buttons in toolbars
  * (gtk 3 &amp; 4) add RTL styles
  * (gtk 3) fix right click menu style for mate-calc and gedit
  * (gtk 3) remove borders separators for mate window
    selector applet
  * (gtk 4) refactor style of toolbar buttons and scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream release (1.5.0)
  * (gtk 3 &amp; 4) fix text color for image settings of print dialog
  * (gtk 3) set background color for RTL scales
  * (gtk 4) set vertical scale marks position</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream release (2.0.0)
  * (gtk 3) alternating row colours in tree views is back
  * Xfce users have now decorations for windows
  * Mate users will enjoy better styles for lock screen and OSD
  * Mate users have now styles for window selector and date/hour
    applets when clicked
  * status bar styles works with or without gtk3-classic
  * added styles for CSD windows</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1696939200">- New upstream release (2.1.0)
  * (gtk 3 &amp; 4) small fix for geany messages window
  * (gtk 3 &amp; 4) almost same rendering between pango 1.42 and 1.51
  * (gtk 4) compatibility with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.2.0)
  * (gtk 3) dual text color for progress bars is back
    with appearance__progress_text.gtk3.patch for gtk3-classic
  * (gtk 3) add gtk standard color names
  * (gtk 3 &amp; 4) add style for statusbar in progressbar and toolbar
  * (gtk 3 &amp; 4) update style for progressbar in treeviews
  * (gtk 3 &amp; 4) update style for arrows of notebook tabs
  * (gtk 4) compatibility only with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.2.1)
  * packages scripts update
  * (gtk 3 &amp; 4) update style for Thunar (same as Caja)</changelog>
</package>
<package pkgid="8ab5c89aff97e89862754f26625c288b9f85311184a04321b3e43688b6ee1741" name="human-theme-gtk" arch="src">
  <version epoch="0" ver="2.2.1" rel="bp156.2.3.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream release (1.3.0)
  * (gtk3 &amp; 4) new style for switch buttons
  * (gtk3 &amp; 4) new style for scales (for 0% and 100%)
  * (gtk3 &amp; 4) set style for selection box (rubberband)
  * (gtk3 &amp; 4) set style for check, radio, progress and icon
    widgets in treeviews
  * (gtk3) fix menuitems style for mate-calc
  * (gtk3) fix selected days style in calendars
  * (gtk4) set style for menuitems
  * (gtk4) set style for calendars
  * (gtk4) set style for toolbar buttons (without flat class)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream release (1.4.0)
  * (gtk 3 &amp; 4) fix style for disabled switchs, spinbuttons, images
  * (gtk 3 &amp; 4) fix text color for progressbars in treeviews
  * (gtk 3 &amp; 4) fix credits and license borders in about dialogs
  * (gtk 3 &amp; 4) set same focused border color (outline)
  * (gtk 3 &amp; 4) add border for focused scales (outline)
  * (gtk 3 &amp; 4) add style for disabled toggle buttons in toolbars
  * (gtk 3 &amp; 4) add RTL styles
  * (gtk 3) fix right click menu style for mate-calc and gedit
  * (gtk 3) remove borders separators for mate window
    selector applet
  * (gtk 4) refactor style of toolbar buttons and scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream release (1.5.0)
  * (gtk 3 &amp; 4) fix text color for image settings of print dialog
  * (gtk 3) set background color for RTL scales
  * (gtk 4) set vertical scale marks position</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream release (2.0.0)
  * (gtk 3) alternating row colours in tree views is back
  * Xfce users have now decorations for windows
  * Mate users will enjoy better styles for lock screen and OSD
  * Mate users have now styles for window selector and date/hour
    applets when clicked
  * status bar styles works with or without gtk3-classic
  * added styles for CSD windows</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1696939200">- New upstream release (2.1.0)
  * (gtk 3 &amp; 4) small fix for geany messages window
  * (gtk 3 &amp; 4) almost same rendering between pango 1.42 and 1.51
  * (gtk 4) compatibility with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.2.0)
  * (gtk 3) dual text color for progress bars is back
    with appearance__progress_text.gtk3.patch for gtk3-classic
  * (gtk 3) add gtk standard color names
  * (gtk 3 &amp; 4) add style for statusbar in progressbar and toolbar
  * (gtk 3 &amp; 4) update style for progressbar in treeviews
  * (gtk 3 &amp; 4) update style for arrows of notebook tabs
  * (gtk 4) compatibility only with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.2.1)
  * packages scripts update
  * (gtk 3 &amp; 4) update style for Thunar (same as Caja)</changelog>
</package>
<package pkgid="ba2e0736fddda22187f303ae6d48c665b512c3b75a0af817e54aa91d570dca70" name="human-theme-gtk" arch="noarch">
  <version epoch="0" ver="2.3.0" rel="bp156.2.6.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream release (1.3.0)
  * (gtk3 &amp; 4) new style for switch buttons
  * (gtk3 &amp; 4) new style for scales (for 0% and 100%)
  * (gtk3 &amp; 4) set style for selection box (rubberband)
  * (gtk3 &amp; 4) set style for check, radio, progress and icon
    widgets in treeviews
  * (gtk3) fix menuitems style for mate-calc
  * (gtk3) fix selected days style in calendars
  * (gtk4) set style for menuitems
  * (gtk4) set style for calendars
  * (gtk4) set style for toolbar buttons (without flat class)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream release (1.4.0)
  * (gtk 3 &amp; 4) fix style for disabled switchs, spinbuttons, images
  * (gtk 3 &amp; 4) fix text color for progressbars in treeviews
  * (gtk 3 &amp; 4) fix credits and license borders in about dialogs
  * (gtk 3 &amp; 4) set same focused border color (outline)
  * (gtk 3 &amp; 4) add border for focused scales (outline)
  * (gtk 3 &amp; 4) add style for disabled toggle buttons in toolbars
  * (gtk 3 &amp; 4) add RTL styles
  * (gtk 3) fix right click menu style for mate-calc and gedit
  * (gtk 3) remove borders separators for mate window
    selector applet
  * (gtk 4) refactor style of toolbar buttons and scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream release (1.5.0)
  * (gtk 3 &amp; 4) fix text color for image settings of print dialog
  * (gtk 3) set background color for RTL scales
  * (gtk 4) set vertical scale marks position</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream release (2.0.0)
  * (gtk 3) alternating row colours in tree views is back
  * Xfce users have now decorations for windows
  * Mate users will enjoy better styles for lock screen and OSD
  * Mate users have now styles for window selector and date/hour
    applets when clicked
  * status bar styles works with or without gtk3-classic
  * added styles for CSD windows</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1696939200">- New upstream release (2.1.0)
  * (gtk 3 &amp; 4) small fix for geany messages window
  * (gtk 3 &amp; 4) almost same rendering between pango 1.42 and 1.51
  * (gtk 4) compatibility with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.2.0)
  * (gtk 3) dual text color for progress bars is back
    with appearance__progress_text.gtk3.patch for gtk3-classic
  * (gtk 3) add gtk standard color names
  * (gtk 3 &amp; 4) add style for statusbar in progressbar and toolbar
  * (gtk 3 &amp; 4) update style for progressbar in treeviews
  * (gtk 3 &amp; 4) update style for arrows of notebook tabs
  * (gtk 4) compatibility only with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.2.1)
  * packages scripts update
  * (gtk 3 &amp; 4) update style for Thunar (same as Caja)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.3.0)
  * (gtk 3) new design for Mate notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    mate-notification-daemon v1.28.4+
  * (gtk 3) fix design for Bleachbit
    PR =&gt; github.com/bleachbit/bleachbit/pull/1195
    bleachbit v?
  * (gtk 3) update design for mate-control-center &amp; ccsm
  * (gtk 3) fix icon size in titlebar for xfwm4
  * (gtk 3) fix padding in titlebar when maximized for xfwm4
  * (gtk 3) same design between Mate and Xfce for terminal &amp; alttab
    PR =&gt; github.com/mate-desktop/marco/pull/789
    marco v1.28.2+
  * (gtk 3) update font color for mate-panel
  * (gtk 3) fix font color for mate keyboard indicator
  * (gtk 3) fix background for disabled view for Caja (F3)
  * (gtk 3) fix lines (treeview) for disabled view for Caja (F3)
  * (gtk 3) fix design of progressbar in statusbar for Eom
  * (gtk 3) fix design for Mate osd when compositor is enabled
  * (gtk 3 &amp; 4) fix design of progressbars with text in statusbar
  * (gtk 3 &amp; 4) fix and update design of progressbars with text
  * (gtk 3 &amp; 4) update background for selected lines in treeviews
  * (gtk 3 &amp; 4) add highlight effect for icons on hover
  * (gtk 3 &amp; 4) better contrast for progressbars/scales background
  * (gtk 3 &amp; 4) little enhancement for headarbar
  * (gtk 4) fix for the stupid hover effect on menubar items
  * (gtk 4) fix background of menu items
  * (gtk 4) add design for listviews (open/save dialogs)
  * (gtk 4) add design open/save dialogs
  * (gtk 4) no changes required from 4.12 to 4.18!
- The best with gtk3-classic and gtk4-classic
    gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk 3) automatic min-width/min-height for progressbars
  * (gtk 4) add dual text color for progressbars</changelog>
</package>
<package pkgid="d07cabd26fee0b8c040002d1259150cd6dd9793884d8d5c348be649d76e3f2f7" name="human-theme-gtk" arch="src">
  <version epoch="0" ver="2.3.0" rel="bp156.2.6.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream release (1.3.0)
  * (gtk3 &amp; 4) new style for switch buttons
  * (gtk3 &amp; 4) new style for scales (for 0% and 100%)
  * (gtk3 &amp; 4) set style for selection box (rubberband)
  * (gtk3 &amp; 4) set style for check, radio, progress and icon
    widgets in treeviews
  * (gtk3) fix menuitems style for mate-calc
  * (gtk3) fix selected days style in calendars
  * (gtk4) set style for menuitems
  * (gtk4) set style for calendars
  * (gtk4) set style for toolbar buttons (without flat class)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream release (1.4.0)
  * (gtk 3 &amp; 4) fix style for disabled switchs, spinbuttons, images
  * (gtk 3 &amp; 4) fix text color for progressbars in treeviews
  * (gtk 3 &amp; 4) fix credits and license borders in about dialogs
  * (gtk 3 &amp; 4) set same focused border color (outline)
  * (gtk 3 &amp; 4) add border for focused scales (outline)
  * (gtk 3 &amp; 4) add style for disabled toggle buttons in toolbars
  * (gtk 3 &amp; 4) add RTL styles
  * (gtk 3) fix right click menu style for mate-calc and gedit
  * (gtk 3) remove borders separators for mate window
    selector applet
  * (gtk 4) refactor style of toolbar buttons and scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream release (1.5.0)
  * (gtk 3 &amp; 4) fix text color for image settings of print dialog
  * (gtk 3) set background color for RTL scales
  * (gtk 4) set vertical scale marks position</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream release (2.0.0)
  * (gtk 3) alternating row colours in tree views is back
  * Xfce users have now decorations for windows
  * Mate users will enjoy better styles for lock screen and OSD
  * Mate users have now styles for window selector and date/hour
    applets when clicked
  * status bar styles works with or without gtk3-classic
  * added styles for CSD windows</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1696939200">- New upstream release (2.1.0)
  * (gtk 3 &amp; 4) small fix for geany messages window
  * (gtk 3 &amp; 4) almost same rendering between pango 1.42 and 1.51
  * (gtk 4) compatibility with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.2.0)
  * (gtk 3) dual text color for progress bars is back
    with appearance__progress_text.gtk3.patch for gtk3-classic
  * (gtk 3) add gtk standard color names
  * (gtk 3 &amp; 4) add style for statusbar in progressbar and toolbar
  * (gtk 3 &amp; 4) update style for progressbar in treeviews
  * (gtk 3 &amp; 4) update style for arrows of notebook tabs
  * (gtk 4) compatibility only with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.2.1)
  * packages scripts update
  * (gtk 3 &amp; 4) update style for Thunar (same as Caja)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.3.0)
  * (gtk 3) new design for Mate notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    mate-notification-daemon v1.28.4+
  * (gtk 3) fix design for Bleachbit
    PR =&gt; github.com/bleachbit/bleachbit/pull/1195
    bleachbit v?
  * (gtk 3) update design for mate-control-center &amp; ccsm
  * (gtk 3) fix icon size in titlebar for xfwm4
  * (gtk 3) fix padding in titlebar when maximized for xfwm4
  * (gtk 3) same design between Mate and Xfce for terminal &amp; alttab
    PR =&gt; github.com/mate-desktop/marco/pull/789
    marco v1.28.2+
  * (gtk 3) update font color for mate-panel
  * (gtk 3) fix font color for mate keyboard indicator
  * (gtk 3) fix background for disabled view for Caja (F3)
  * (gtk 3) fix lines (treeview) for disabled view for Caja (F3)
  * (gtk 3) fix design of progressbar in statusbar for Eom
  * (gtk 3) fix design for Mate osd when compositor is enabled
  * (gtk 3 &amp; 4) fix design of progressbars with text in statusbar
  * (gtk 3 &amp; 4) fix and update design of progressbars with text
  * (gtk 3 &amp; 4) update background for selected lines in treeviews
  * (gtk 3 &amp; 4) add highlight effect for icons on hover
  * (gtk 3 &amp; 4) better contrast for progressbars/scales background
  * (gtk 3 &amp; 4) little enhancement for headarbar
  * (gtk 4) fix for the stupid hover effect on menubar items
  * (gtk 4) fix background of menu items
  * (gtk 4) add design for listviews (open/save dialogs)
  * (gtk 4) add design open/save dialogs
  * (gtk 4) no changes required from 4.12 to 4.18!
- The best with gtk3-classic and gtk4-classic
    gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk 3) automatic min-width/min-height for progressbars
  * (gtk 4) add dual text color for progressbars</changelog>
</package>
<package pkgid="c62fe375ad9d7facb0d5fad5a4b80e69c0362001ff9bb25824574c9c305e9ce6" name="human-theme-gtk" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream release (1.3.0)
  * (gtk3 &amp; 4) new style for switch buttons
  * (gtk3 &amp; 4) new style for scales (for 0% and 100%)
  * (gtk3 &amp; 4) set style for selection box (rubberband)
  * (gtk3 &amp; 4) set style for check, radio, progress and icon
    widgets in treeviews
  * (gtk3) fix menuitems style for mate-calc
  * (gtk3) fix selected days style in calendars
  * (gtk4) set style for menuitems
  * (gtk4) set style for calendars
  * (gtk4) set style for toolbar buttons (without flat class)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream release (1.4.0)
  * (gtk 3 &amp; 4) fix style for disabled switchs, spinbuttons, images
  * (gtk 3 &amp; 4) fix text color for progressbars in treeviews
  * (gtk 3 &amp; 4) fix credits and license borders in about dialogs
  * (gtk 3 &amp; 4) set same focused border color (outline)
  * (gtk 3 &amp; 4) add border for focused scales (outline)
  * (gtk 3 &amp; 4) add style for disabled toggle buttons in toolbars
  * (gtk 3 &amp; 4) add RTL styles
  * (gtk 3) fix right click menu style for mate-calc and gedit
  * (gtk 3) remove borders separators for mate window
    selector applet
  * (gtk 4) refactor style of toolbar buttons and scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream release (1.5.0)
  * (gtk 3 &amp; 4) fix text color for image settings of print dialog
  * (gtk 3) set background color for RTL scales
  * (gtk 4) set vertical scale marks position</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream release (2.0.0)
  * (gtk 3) alternating row colours in tree views is back
  * Xfce users have now decorations for windows
  * Mate users will enjoy better styles for lock screen and OSD
  * Mate users have now styles for window selector and date/hour
    applets when clicked
  * status bar styles works with or without gtk3-classic
  * added styles for CSD windows</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1696939200">- New upstream release (2.1.0)
  * (gtk 3 &amp; 4) small fix for geany messages window
  * (gtk 3 &amp; 4) almost same rendering between pango 1.42 and 1.51
  * (gtk 4) compatibility with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.2.0)
  * (gtk 3) dual text color for progress bars is back
    with appearance__progress_text.gtk3.patch for gtk3-classic
  * (gtk 3) add gtk standard color names
  * (gtk 3 &amp; 4) add style for statusbar in progressbar and toolbar
  * (gtk 3 &amp; 4) update style for progressbar in treeviews
  * (gtk 3 &amp; 4) update style for arrows of notebook tabs
  * (gtk 4) compatibility only with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.2.1)
  * packages scripts update
  * (gtk 3 &amp; 4) update style for Thunar (same as Caja)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.3.0)
  * (gtk 3) new design for Mate notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    mate-notification-daemon v1.28.4+
  * (gtk 3) fix design for Bleachbit
    PR =&gt; github.com/bleachbit/bleachbit/pull/1195
    bleachbit v?
  * (gtk 3) update design for mate-control-center &amp; ccsm
  * (gtk 3) fix icon size in titlebar for xfwm4
  * (gtk 3) fix padding in titlebar when maximized for xfwm4
  * (gtk 3) same design between Mate and Xfce for terminal &amp; alttab
    PR =&gt; github.com/mate-desktop/marco/pull/789
    marco v1.28.2+
  * (gtk 3) update font color for mate-panel
  * (gtk 3) fix font color for mate keyboard indicator
  * (gtk 3) fix background for disabled view for Caja (F3)
  * (gtk 3) fix lines (treeview) for disabled view for Caja (F3)
  * (gtk 3) fix design of progressbar in statusbar for Eom
  * (gtk 3) fix design for Mate osd when compositor is enabled
  * (gtk 3 &amp; 4) fix design of progressbars with text in statusbar
  * (gtk 3 &amp; 4) fix and update design of progressbars with text
  * (gtk 3 &amp; 4) update background for selected lines in treeviews
  * (gtk 3 &amp; 4) add highlight effect for icons on hover
  * (gtk 3 &amp; 4) better contrast for progressbars/scales background
  * (gtk 3 &amp; 4) little enhancement for headarbar
  * (gtk 4) fix for the stupid hover effect on menubar items
  * (gtk 4) fix background of menu items
  * (gtk 4) add design for listviews (open/save dialogs)
  * (gtk 4) add design open/save dialogs
  * (gtk 4) no changes required from 4.12 to 4.18!
- The best with gtk3-classic and gtk4-classic
    gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk 3) automatic min-width/min-height for progressbars
  * (gtk 4) add dual text color for progressbars</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (2.4.0)
  * (gtk 3 &amp; 4) fix/update design of headerbar
  * (gtk 3 &amp; 4) fix/update design of CSD window
  * (gtk 3 &amp; 4) fix position of check/radio in menuitem
  * (gtk 3 &amp; 4) fix rtl menu with only check/radio
  * (gtk 3) fix/update design for Mate notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/234
- It works: with or without compositor, with or without CSD windows
  and with or without gtk3-classic/gtk4-classic
- The best with gtk3-classic and gtk4-classic
    gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk 3 &amp; 4) automatic min-width/min-height from text for
    progressbars, with dual text color, without excessive cpu usage</changelog>
</package>
<package pkgid="a4b73b4ede86ebe1d18ec190915a54dad367736b4f3462c953949e8c460be31c" name="human-theme-gtk" arch="src">
  <version epoch="0" ver="2.4.0" rel="bp156.2.9.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream release (1.3.0)
  * (gtk3 &amp; 4) new style for switch buttons
  * (gtk3 &amp; 4) new style for scales (for 0% and 100%)
  * (gtk3 &amp; 4) set style for selection box (rubberband)
  * (gtk3 &amp; 4) set style for check, radio, progress and icon
    widgets in treeviews
  * (gtk3) fix menuitems style for mate-calc
  * (gtk3) fix selected days style in calendars
  * (gtk4) set style for menuitems
  * (gtk4) set style for calendars
  * (gtk4) set style for toolbar buttons (without flat class)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream release (1.4.0)
  * (gtk 3 &amp; 4) fix style for disabled switchs, spinbuttons, images
  * (gtk 3 &amp; 4) fix text color for progressbars in treeviews
  * (gtk 3 &amp; 4) fix credits and license borders in about dialogs
  * (gtk 3 &amp; 4) set same focused border color (outline)
  * (gtk 3 &amp; 4) add border for focused scales (outline)
  * (gtk 3 &amp; 4) add style for disabled toggle buttons in toolbars
  * (gtk 3 &amp; 4) add RTL styles
  * (gtk 3) fix right click menu style for mate-calc and gedit
  * (gtk 3) remove borders separators for mate window
    selector applet
  * (gtk 4) refactor style of toolbar buttons and scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream release (1.5.0)
  * (gtk 3 &amp; 4) fix text color for image settings of print dialog
  * (gtk 3) set background color for RTL scales
  * (gtk 4) set vertical scale marks position</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream release (2.0.0)
  * (gtk 3) alternating row colours in tree views is back
  * Xfce users have now decorations for windows
  * Mate users will enjoy better styles for lock screen and OSD
  * Mate users have now styles for window selector and date/hour
    applets when clicked
  * status bar styles works with or without gtk3-classic
  * added styles for CSD windows</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1696939200">- New upstream release (2.1.0)
  * (gtk 3 &amp; 4) small fix for geany messages window
  * (gtk 3 &amp; 4) almost same rendering between pango 1.42 and 1.51
  * (gtk 4) compatibility with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.2.0)
  * (gtk 3) dual text color for progress bars is back
    with appearance__progress_text.gtk3.patch for gtk3-classic
  * (gtk 3) add gtk standard color names
  * (gtk 3 &amp; 4) add style for statusbar in progressbar and toolbar
  * (gtk 3 &amp; 4) update style for progressbar in treeviews
  * (gtk 3 &amp; 4) update style for arrows of notebook tabs
  * (gtk 4) compatibility only with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.2.1)
  * packages scripts update
  * (gtk 3 &amp; 4) update style for Thunar (same as Caja)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.3.0)
  * (gtk 3) new design for Mate notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    mate-notification-daemon v1.28.4+
  * (gtk 3) fix design for Bleachbit
    PR =&gt; github.com/bleachbit/bleachbit/pull/1195
    bleachbit v?
  * (gtk 3) update design for mate-control-center &amp; ccsm
  * (gtk 3) fix icon size in titlebar for xfwm4
  * (gtk 3) fix padding in titlebar when maximized for xfwm4
  * (gtk 3) same design between Mate and Xfce for terminal &amp; alttab
    PR =&gt; github.com/mate-desktop/marco/pull/789
    marco v1.28.2+
  * (gtk 3) update font color for mate-panel
  * (gtk 3) fix font color for mate keyboard indicator
  * (gtk 3) fix background for disabled view for Caja (F3)
  * (gtk 3) fix lines (treeview) for disabled view for Caja (F3)
  * (gtk 3) fix design of progressbar in statusbar for Eom
  * (gtk 3) fix design for Mate osd when compositor is enabled
  * (gtk 3 &amp; 4) fix design of progressbars with text in statusbar
  * (gtk 3 &amp; 4) fix and update design of progressbars with text
  * (gtk 3 &amp; 4) update background for selected lines in treeviews
  * (gtk 3 &amp; 4) add highlight effect for icons on hover
  * (gtk 3 &amp; 4) better contrast for progressbars/scales background
  * (gtk 3 &amp; 4) little enhancement for headarbar
  * (gtk 4) fix for the stupid hover effect on menubar items
  * (gtk 4) fix background of menu items
  * (gtk 4) add design for listviews (open/save dialogs)
  * (gtk 4) add design open/save dialogs
  * (gtk 4) no changes required from 4.12 to 4.18!
- The best with gtk3-classic and gtk4-classic
    gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk 3) automatic min-width/min-height for progressbars
  * (gtk 4) add dual text color for progressbars</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (2.4.0)
  * (gtk 3 &amp; 4) fix/update design of headerbar
  * (gtk 3 &amp; 4) fix/update design of CSD window
  * (gtk 3 &amp; 4) fix position of check/radio in menuitem
  * (gtk 3 &amp; 4) fix rtl menu with only check/radio
  * (gtk 3) fix/update design for Mate notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/234
- It works: with or without compositor, with or without CSD windows
  and with or without gtk3-classic/gtk4-classic
- The best with gtk3-classic and gtk4-classic
    gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk 3 &amp; 4) automatic min-width/min-height from text for
    progressbars, with dual text color, without excessive cpu usage</changelog>
</package>
<package pkgid="f44fa4d6101a2c37f2f89f6b505397b7752d4425566e6d939a7dbe236bfcb713" name="human-theme-gtk" arch="noarch">
  <version epoch="0" ver="2.5.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream release (1.3.0)
  * (gtk3 &amp; 4) new style for switch buttons
  * (gtk3 &amp; 4) new style for scales (for 0% and 100%)
  * (gtk3 &amp; 4) set style for selection box (rubberband)
  * (gtk3 &amp; 4) set style for check, radio, progress and icon
    widgets in treeviews
  * (gtk3) fix menuitems style for mate-calc
  * (gtk3) fix selected days style in calendars
  * (gtk4) set style for menuitems
  * (gtk4) set style for calendars
  * (gtk4) set style for toolbar buttons (without flat class)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream release (1.4.0)
  * (gtk 3 &amp; 4) fix style for disabled switchs, spinbuttons, images
  * (gtk 3 &amp; 4) fix text color for progressbars in treeviews
  * (gtk 3 &amp; 4) fix credits and license borders in about dialogs
  * (gtk 3 &amp; 4) set same focused border color (outline)
  * (gtk 3 &amp; 4) add border for focused scales (outline)
  * (gtk 3 &amp; 4) add style for disabled toggle buttons in toolbars
  * (gtk 3 &amp; 4) add RTL styles
  * (gtk 3) fix right click menu style for mate-calc and gedit
  * (gtk 3) remove borders separators for mate window
    selector applet
  * (gtk 4) refactor style of toolbar buttons and scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream release (1.5.0)
  * (gtk 3 &amp; 4) fix text color for image settings of print dialog
  * (gtk 3) set background color for RTL scales
  * (gtk 4) set vertical scale marks position</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream release (2.0.0)
  * (gtk 3) alternating row colours in tree views is back
  * Xfce users have now decorations for windows
  * Mate users will enjoy better styles for lock screen and OSD
  * Mate users have now styles for window selector and date/hour
    applets when clicked
  * status bar styles works with or without gtk3-classic
  * added styles for CSD windows</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1696939200">- New upstream release (2.1.0)
  * (gtk 3 &amp; 4) small fix for geany messages window
  * (gtk 3 &amp; 4) almost same rendering between pango 1.42 and 1.51
  * (gtk 4) compatibility with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.2.0)
  * (gtk 3) dual text color for progress bars is back
    with appearance__progress_text.gtk3.patch for gtk3-classic
  * (gtk 3) add gtk standard color names
  * (gtk 3 &amp; 4) add style for statusbar in progressbar and toolbar
  * (gtk 3 &amp; 4) update style for progressbar in treeviews
  * (gtk 3 &amp; 4) update style for arrows of notebook tabs
  * (gtk 4) compatibility only with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.2.1)
  * packages scripts update
  * (gtk 3 &amp; 4) update style for Thunar (same as Caja)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.3.0)
  * (gtk 3) new design for Mate notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    mate-notification-daemon v1.28.4+
  * (gtk 3) fix design for Bleachbit
    PR =&gt; github.com/bleachbit/bleachbit/pull/1195
    bleachbit v?
  * (gtk 3) update design for mate-control-center &amp; ccsm
  * (gtk 3) fix icon size in titlebar for xfwm4
  * (gtk 3) fix padding in titlebar when maximized for xfwm4
  * (gtk 3) same design between Mate and Xfce for terminal &amp; alttab
    PR =&gt; github.com/mate-desktop/marco/pull/789
    marco v1.28.2+
  * (gtk 3) update font color for mate-panel
  * (gtk 3) fix font color for mate keyboard indicator
  * (gtk 3) fix background for disabled view for Caja (F3)
  * (gtk 3) fix lines (treeview) for disabled view for Caja (F3)
  * (gtk 3) fix design of progressbar in statusbar for Eom
  * (gtk 3) fix design for Mate osd when compositor is enabled
  * (gtk 3 &amp; 4) fix design of progressbars with text in statusbar
  * (gtk 3 &amp; 4) fix and update design of progressbars with text
  * (gtk 3 &amp; 4) update background for selected lines in treeviews
  * (gtk 3 &amp; 4) add highlight effect for icons on hover
  * (gtk 3 &amp; 4) better contrast for progressbars/scales background
  * (gtk 3 &amp; 4) little enhancement for headarbar
  * (gtk 4) fix for the stupid hover effect on menubar items
  * (gtk 4) fix background of menu items
  * (gtk 4) add design for listviews (open/save dialogs)
  * (gtk 4) add design open/save dialogs
  * (gtk 4) no changes required from 4.12 to 4.18!
- The best with gtk3-classic and gtk4-classic
    gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk 3) automatic min-width/min-height for progressbars
  * (gtk 4) add dual text color for progressbars</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (2.4.0)
  * (gtk 3 &amp; 4) fix/update design of headerbar
  * (gtk 3 &amp; 4) fix/update design of CSD window
  * (gtk 3 &amp; 4) fix position of check/radio in menuitem
  * (gtk 3 &amp; 4) fix rtl menu with only check/radio
  * (gtk 3) fix/update design for Mate notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/234
- It works: with or without compositor, with or without CSD windows
  and with or without gtk3-classic/gtk4-classic
- The best with gtk3-classic and gtk4-classic
    gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk 3 &amp; 4) automatic min-width/min-height from text for
    progressbars, with dual text color, without excessive cpu usage</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1749211200">- New upstream release (2.5.0)
  * (gtk 3 &amp; 4) fix statusbar and progressbar in statusbar
    when window is fullscreen with Mate &amp; Xfce
  * (gtk 3) update design for Mate panel buttons
    PR =&gt; github.com/mate-desktop/mate-panel/pull/1474
  * (gtk 3) fix Xfce desktop icons
  * (gtk 3) update design of caja/thunar/nemo tabs
  * (gtk 3) add experimental support for Cinnamon desktop
  * (gtk 3) fix headerbar for cinnamon/muffin/mutter (.ssd)
  * (gtk 3) update design of compact menu button applet,
    clock applet, window selector button =&gt; same as main menu bar
  * (gtk 4) fix design of print dialog
  * (gtk 3) ready for the future scrollbar__extra_zone.patch
    for gtk3-classic</changelog>
</package>
<package pkgid="412bbc68c76d83db6bd650908116c37dc1ada26eaa870405dc6090121469ae02" name="human-theme-gtk" arch="src">
  <version epoch="0" ver="2.5.0" rel="bp156.2.12.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream release (1.3.0)
  * (gtk3 &amp; 4) new style for switch buttons
  * (gtk3 &amp; 4) new style for scales (for 0% and 100%)
  * (gtk3 &amp; 4) set style for selection box (rubberband)
  * (gtk3 &amp; 4) set style for check, radio, progress and icon
    widgets in treeviews
  * (gtk3) fix menuitems style for mate-calc
  * (gtk3) fix selected days style in calendars
  * (gtk4) set style for menuitems
  * (gtk4) set style for calendars
  * (gtk4) set style for toolbar buttons (without flat class)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream release (1.4.0)
  * (gtk 3 &amp; 4) fix style for disabled switchs, spinbuttons, images
  * (gtk 3 &amp; 4) fix text color for progressbars in treeviews
  * (gtk 3 &amp; 4) fix credits and license borders in about dialogs
  * (gtk 3 &amp; 4) set same focused border color (outline)
  * (gtk 3 &amp; 4) add border for focused scales (outline)
  * (gtk 3 &amp; 4) add style for disabled toggle buttons in toolbars
  * (gtk 3 &amp; 4) add RTL styles
  * (gtk 3) fix right click menu style for mate-calc and gedit
  * (gtk 3) remove borders separators for mate window
    selector applet
  * (gtk 4) refactor style of toolbar buttons and scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream release (1.5.0)
  * (gtk 3 &amp; 4) fix text color for image settings of print dialog
  * (gtk 3) set background color for RTL scales
  * (gtk 4) set vertical scale marks position</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream release (2.0.0)
  * (gtk 3) alternating row colours in tree views is back
  * Xfce users have now decorations for windows
  * Mate users will enjoy better styles for lock screen and OSD
  * Mate users have now styles for window selector and date/hour
    applets when clicked
  * status bar styles works with or without gtk3-classic
  * added styles for CSD windows</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1696939200">- New upstream release (2.1.0)
  * (gtk 3 &amp; 4) small fix for geany messages window
  * (gtk 3 &amp; 4) almost same rendering between pango 1.42 and 1.51
  * (gtk 4) compatibility with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.2.0)
  * (gtk 3) dual text color for progress bars is back
    with appearance__progress_text.gtk3.patch for gtk3-classic
  * (gtk 3) add gtk standard color names
  * (gtk 3 &amp; 4) add style for statusbar in progressbar and toolbar
  * (gtk 3 &amp; 4) update style for progressbar in treeviews
  * (gtk 3 &amp; 4) update style for arrows of notebook tabs
  * (gtk 4) compatibility only with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.2.1)
  * packages scripts update
  * (gtk 3 &amp; 4) update style for Thunar (same as Caja)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.3.0)
  * (gtk 3) new design for Mate notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    mate-notification-daemon v1.28.4+
  * (gtk 3) fix design for Bleachbit
    PR =&gt; github.com/bleachbit/bleachbit/pull/1195
    bleachbit v?
  * (gtk 3) update design for mate-control-center &amp; ccsm
  * (gtk 3) fix icon size in titlebar for xfwm4
  * (gtk 3) fix padding in titlebar when maximized for xfwm4
  * (gtk 3) same design between Mate and Xfce for terminal &amp; alttab
    PR =&gt; github.com/mate-desktop/marco/pull/789
    marco v1.28.2+
  * (gtk 3) update font color for mate-panel
  * (gtk 3) fix font color for mate keyboard indicator
  * (gtk 3) fix background for disabled view for Caja (F3)
  * (gtk 3) fix lines (treeview) for disabled view for Caja (F3)
  * (gtk 3) fix design of progressbar in statusbar for Eom
  * (gtk 3) fix design for Mate osd when compositor is enabled
  * (gtk 3 &amp; 4) fix design of progressbars with text in statusbar
  * (gtk 3 &amp; 4) fix and update design of progressbars with text
  * (gtk 3 &amp; 4) update background for selected lines in treeviews
  * (gtk 3 &amp; 4) add highlight effect for icons on hover
  * (gtk 3 &amp; 4) better contrast for progressbars/scales background
  * (gtk 3 &amp; 4) little enhancement for headarbar
  * (gtk 4) fix for the stupid hover effect on menubar items
  * (gtk 4) fix background of menu items
  * (gtk 4) add design for listviews (open/save dialogs)
  * (gtk 4) add design open/save dialogs
  * (gtk 4) no changes required from 4.12 to 4.18!
- The best with gtk3-classic and gtk4-classic
    gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk 3) automatic min-width/min-height for progressbars
  * (gtk 4) add dual text color for progressbars</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (2.4.0)
  * (gtk 3 &amp; 4) fix/update design of headerbar
  * (gtk 3 &amp; 4) fix/update design of CSD window
  * (gtk 3 &amp; 4) fix position of check/radio in menuitem
  * (gtk 3 &amp; 4) fix rtl menu with only check/radio
  * (gtk 3) fix/update design for Mate notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/234
- It works: with or without compositor, with or without CSD windows
  and with or without gtk3-classic/gtk4-classic
- The best with gtk3-classic and gtk4-classic
    gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk 3 &amp; 4) automatic min-width/min-height from text for
    progressbars, with dual text color, without excessive cpu usage</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1749211200">- New upstream release (2.5.0)
  * (gtk 3 &amp; 4) fix statusbar and progressbar in statusbar
    when window is fullscreen with Mate &amp; Xfce
  * (gtk 3) update design for Mate panel buttons
    PR =&gt; github.com/mate-desktop/mate-panel/pull/1474
  * (gtk 3) fix Xfce desktop icons
  * (gtk 3) update design of caja/thunar/nemo tabs
  * (gtk 3) add experimental support for Cinnamon desktop
  * (gtk 3) fix headerbar for cinnamon/muffin/mutter (.ssd)
  * (gtk 3) update design of compact menu button applet,
    clock applet, window selector button =&gt; same as main menu bar
  * (gtk 4) fix design of print dialog
  * (gtk 3) ready for the future scrollbar__extra_zone.patch
    for gtk3-classic</changelog>
</package>
<package pkgid="c774a2670c27faa760d7e87d500a6b64c8e4848c20ad5ff8d28f14884cca4309" name="human-theme-gtk" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="bp156.2.15.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream release (1.3.0)
  * (gtk3 &amp; 4) new style for switch buttons
  * (gtk3 &amp; 4) new style for scales (for 0% and 100%)
  * (gtk3 &amp; 4) set style for selection box (rubberband)
  * (gtk3 &amp; 4) set style for check, radio, progress and icon
    widgets in treeviews
  * (gtk3) fix menuitems style for mate-calc
  * (gtk3) fix selected days style in calendars
  * (gtk4) set style for menuitems
  * (gtk4) set style for calendars
  * (gtk4) set style for toolbar buttons (without flat class)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream release (1.4.0)
  * (gtk3 &amp; 4) fix style for disabled switchs, spinbuttons, images
  * (gtk3 &amp; 4) fix text color for progressbars in treeviews
  * (gtk3 &amp; 4) fix credits and license borders in about dialogs
  * (gtk3 &amp; 4) set same focused border color (outline)
  * (gtk3 &amp; 4) add border for focused scales (outline)
  * (gtk3 &amp; 4) add style for disabled toggle buttons in toolbars
  * (gtk3 &amp; 4) add RTL styles
  * (gtk3) fix right click menu style for mate-calc and gedit
  * (gtk3) remove border separator for MATE window selector applet
  * (gtk4) refactor style of toolbar buttons and scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream release (1.5.0)
  * (gtk3 &amp; 4) fix text color for image settings of print dialog
  * (gtk3) set background color for RTL scales
  * (gtk4) set vertical scale marks position</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream release (2.0.0)
  * (gtk3) alternating row colours in treeviews is back
  * Xfce users have now decorations for windows
  * MATE users will enjoy better styles for lock screen and OSD
  * MATE users have now design for window selector and date/hour
    applets when applet is opened/clicked
  * statusbar styles works with or without gtk3-classic
  * add styles for CSD windows</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1696939200">- New upstream release (2.1.0)
  * (gtk3 &amp; 4) small fix for geany messages window
  * (gtk3 &amp; 4) almost same rendering between pango 1.42 and 1.51
  * (gtk4) compatibility with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.2.0)
  * (gtk3) dual text color for progressbars is back
    with appearance__progress_text.gtk3.patch for gtk3-classic
  * (gtk3) add GTK standard color names
  * (gtk3 &amp; 4) add design for statusbar in progressbar and toolbar
  * (gtk3 &amp; 4) update design for progressbar in treeviews
  * (gtk3 &amp; 4) update design for arrows of notebook tabs
  * (gtk4) compatibility only with 4.12+</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.2.1)
  * packages scripts update
  * (gtk3 &amp; 4) update Thunar design (same as Caja)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.3.0)
  * (gtk3) new design for MATE notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    mate-notification-daemon v1.28.4+
  * (gtk3) fix design for Bleachbit
    PR =&gt; github.com/bleachbit/bleachbit/pull/1195
    bleachbit v?
  * (gtk3) update design for mate-control-center &amp; ccsm
  * (gtk3) fix icon size in titlebar for xfwm4
  * (gtk3) fix padding in titlebar when maximized for xfwm4
  * (gtk3) same design between MATE and Xfce for terminal &amp; alttab
    PR =&gt; github.com/mate-desktop/marco/pull/796
    marco v1.28.2+
  * (gtk3) update font color for mate-panel
  * (gtk3) fix font color for MATE keyboard indicator
  * (gtk3) fix background for disabled view for Caja (F3)
  * (gtk3) fix lines (treeview) for disabled view for Caja (F3)
  * (gtk3) fix design of progressbar in statusbar for Eom
  * (gtk3) fix design for MATE osd when compositor is enabled
  * (gtk3 &amp; 4) fix design of progressbars with text in statusbar
  * (gtk3 &amp; 4) fix and update design of progressbars with text
  * (gtk3 &amp; 4) update background for selected lines in treeviews
  * (gtk3 &amp; 4) add highlight effect for icons on hover
  * (gtk3 &amp; 4) better contrast for progressbars/scales background
  * (gtk3 &amp; 4) little enhancement for headarbar
  * (gtk4) fix for the stupid hover effect on menubar items
  * (gtk4) fix background of menu items
  * (gtk4) add design for listviews (open/save dialogs)
  * (gtk4) add design open/save dialogs
  * (gtk4) no changes required from 4.12 to 4.18!
- The best with gtk3-classic and gtk4-classic
  gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk3) automatic min-width/min-height for progressbars
  * (gtk4) add dual text color for progressbars</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (2.4.0)
  * (gtk3 &amp; 4) fix/update design of headerbar
  * (gtk3 &amp; 4) fix/update design of CSD windows
  * (gtk3 &amp; 4) fix/update position of check/radio in menuitem
  * (gtk3 &amp; 4) fix/update RTL menu with only check/radio
  * (gtk3) fix/update design for MATE notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/234
- It works: with or without compositor, with or without CSD windows
  and with or without gtk3-classic/gtk4-classic
- The best with gtk3-classic and gtk4-classic
  gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk3 &amp; 4) automatic min-width/min-height from text for
    progressbars, with dual text color, without excessive cpu usage</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1749211200">- New upstream release (2.5.0)
  * (gtk3 &amp; 4) fix statusbar and progressbar-in-statusbar
    when window is fullscreen
  * (gtk3) update design for MATE panel buttons
    PR =&gt; github.com/mate-desktop/mate-panel/pull/1474
    PR =&gt; github.com/mate-desktop/mate-applets/pull/678
  * (gtk3) fix Xfce desktop icons
  * (gtk3) update design of Caja/Thunar/Nemo tabs
  * (gtk3) add experimental support for Cinnamon desktop
  * (gtk3) fix headerbar for cinnamon/muffin/mutter (.ssd)
  * (gtk3) ready for the future scrollbar__extra_zone.patch
    for gtk3-classic
  * (gtk4) fix design of print dialog
  * MATE users will enjoy new common design for compact menu
    button applet, clock applet, window selector button applet
    =&gt; same as main menu bar applet</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (2.6.0)
  * (gtk3) fix geany statusbar (regression)
  * (gtk3) fix separator for menu in toolbar
  * (gtk3) fix background color for popover menu
  * (gtk3) fix design of GNOME terminal
  * (gtk3) fix design of Pluma statusbar
  * (gtk4) fix menuitem height
  * (gtk4) add styles for icons in menubar
  * (gtk3 &amp; 4) fix dialog layout and buttons position/margin,
    with our without CSD dialogs,
    so same layout between gtk3 &amp; gtk4
    =&gt; same as mate-appearance-properties
    =&gt; some PR for MATE on github.com/mate-desktop
  * add default colors for terminal (white on black)
  * MATE users will enjoy fixed design for transparent panels
  * MATE+Mint users will enjoy new design for mint menu applet
    PR =&gt; github.com/linuxmint/mintmenu/pull/285
    PR =&gt; github.com/ubuntu-mate/mate-menu/pull/89
  * Xfce users will enjoy new design for whisker menu</changelog>
</package>
<package pkgid="db7b44ca9ad17aa216e69edb08f18c842757fe1489df559c2fbe9058db4d409a" name="human-theme-gtk" arch="src">
  <version epoch="0" ver="2.6.0" rel="bp156.2.15.1"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1617710400">- Initial openSUSE package release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream release (1.3.0)
  * (gtk3 &amp; 4) new style for switch buttons
  * (gtk3 &amp; 4) new style for scales (for 0% and 100%)
  * (gtk3 &amp; 4) set style for selection box (rubberband)
  * (gtk3 &amp; 4) set style for check, radio, progress and icon
    widgets in treeviews
  * (gtk3) fix menuitems style for mate-calc
  * (gtk3) fix selected days style in calendars
  * (gtk4) set style for menuitems
  * (gtk4) set style for calendars
  * (gtk4) set style for toolbar buttons (without flat class)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream release (1.4.0)
  * (gtk3 &amp; 4) fix style for disabled switchs, spinbuttons, images
  * (gtk3 &amp; 4) fix text color for progressbars in treeviews
  * (gtk3 &amp; 4) fix credits and license borders in about dialogs
  * (gtk3 &amp; 4) set same focused border color (outline)
  * (gtk3 &amp; 4) add border for focused scales (outline)
  * (gtk3 &amp; 4) add style for disabled toggle buttons in toolbars
  * (gtk3 &amp; 4) add RTL styles
  * (gtk3) fix right click menu style for mate-calc and gedit
  * (gtk3) remove border separator for MATE window selector applet
  * (gtk4) refactor style of toolbar buttons and scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream release (1.5.0)
  * (gtk3 &amp; 4) fix text color for image settings of print dialog
  * (gtk3) set background color for RTL scales
  * (gtk4) set vertical scale marks position</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream release (2.0.0)
  * (gtk3) alternating row colours in treeviews is back
  * Xfce users have now decorations for windows
  * MATE users will enjoy better styles for lock screen and OSD
  * MATE users have now design for window selector and date/hour
    applets when applet is opened/clicked
  * statusbar styles works with or without gtk3-classic
  * add styles for CSD windows</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1696939200">- New upstream release (2.1.0)
  * (gtk3 &amp; 4) small fix for geany messages window
  * (gtk3 &amp; 4) almost same rendering between pango 1.42 and 1.51
  * (gtk4) compatibility with 4.12</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.2.0)
  * (gtk3) dual text color for progressbars is back
    with appearance__progress_text.gtk3.patch for gtk3-classic
  * (gtk3) add GTK standard color names
  * (gtk3 &amp; 4) add design for statusbar in progressbar and toolbar
  * (gtk3 &amp; 4) update design for progressbar in treeviews
  * (gtk3 &amp; 4) update design for arrows of notebook tabs
  * (gtk4) compatibility only with 4.12+</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.2.1)
  * packages scripts update
  * (gtk3 &amp; 4) update Thunar design (same as Caja)</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.3.0)
  * (gtk3) new design for MATE notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    mate-notification-daemon v1.28.4+
  * (gtk3) fix design for Bleachbit
    PR =&gt; github.com/bleachbit/bleachbit/pull/1195
    bleachbit v?
  * (gtk3) update design for mate-control-center &amp; ccsm
  * (gtk3) fix icon size in titlebar for xfwm4
  * (gtk3) fix padding in titlebar when maximized for xfwm4
  * (gtk3) same design between MATE and Xfce for terminal &amp; alttab
    PR =&gt; github.com/mate-desktop/marco/pull/796
    marco v1.28.2+
  * (gtk3) update font color for mate-panel
  * (gtk3) fix font color for MATE keyboard indicator
  * (gtk3) fix background for disabled view for Caja (F3)
  * (gtk3) fix lines (treeview) for disabled view for Caja (F3)
  * (gtk3) fix design of progressbar in statusbar for Eom
  * (gtk3) fix design for MATE osd when compositor is enabled
  * (gtk3 &amp; 4) fix design of progressbars with text in statusbar
  * (gtk3 &amp; 4) fix and update design of progressbars with text
  * (gtk3 &amp; 4) update background for selected lines in treeviews
  * (gtk3 &amp; 4) add highlight effect for icons on hover
  * (gtk3 &amp; 4) better contrast for progressbars/scales background
  * (gtk3 &amp; 4) little enhancement for headarbar
  * (gtk4) fix for the stupid hover effect on menubar items
  * (gtk4) fix background of menu items
  * (gtk4) add design for listviews (open/save dialogs)
  * (gtk4) add design open/save dialogs
  * (gtk4) no changes required from 4.12 to 4.18!
- The best with gtk3-classic and gtk4-classic
  gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk3) automatic min-width/min-height for progressbars
  * (gtk4) add dual text color for progressbars</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (2.4.0)
  * (gtk3 &amp; 4) fix/update design of headerbar
  * (gtk3 &amp; 4) fix/update design of CSD windows
  * (gtk3 &amp; 4) fix/update position of check/radio in menuitem
  * (gtk3 &amp; 4) fix/update RTL menu with only check/radio
  * (gtk3) fix/update design for MATE notifications
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/232
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/233
    PR =&gt; github.com/mate-desktop/mate-notification-daemon/pull/234
- It works: with or without compositor, with or without CSD windows
  and with or without gtk3-classic/gtk4-classic
- The best with gtk3-classic and gtk4-classic
  gist.github.com/luigifab/0fce786cdb93b5687069a82f490ea95e
  * (gtk3 &amp; 4) automatic min-width/min-height from text for
    progressbars, with dual text color, without excessive cpu usage</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1749211200">- New upstream release (2.5.0)
  * (gtk3 &amp; 4) fix statusbar and progressbar-in-statusbar
    when window is fullscreen
  * (gtk3) update design for MATE panel buttons
    PR =&gt; github.com/mate-desktop/mate-panel/pull/1474
    PR =&gt; github.com/mate-desktop/mate-applets/pull/678
  * (gtk3) fix Xfce desktop icons
  * (gtk3) update design of Caja/Thunar/Nemo tabs
  * (gtk3) add experimental support for Cinnamon desktop
  * (gtk3) fix headerbar for cinnamon/muffin/mutter (.ssd)
  * (gtk3) ready for the future scrollbar__extra_zone.patch
    for gtk3-classic
  * (gtk4) fix design of print dialog
  * MATE users will enjoy new common design for compact menu
    button applet, clock applet, window selector button applet
    =&gt; same as main menu bar applet</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (2.6.0)
  * (gtk3) fix geany statusbar (regression)
  * (gtk3) fix separator for menu in toolbar
  * (gtk3) fix background color for popover menu
  * (gtk3) fix design of GNOME terminal
  * (gtk3) fix design of Pluma statusbar
  * (gtk4) fix menuitem height
  * (gtk4) add styles for icons in menubar
  * (gtk3 &amp; 4) fix dialog layout and buttons position/margin,
    with our without CSD dialogs,
    so same layout between gtk3 &amp; gtk4
    =&gt; same as mate-appearance-properties
    =&gt; some PR for MATE on github.com/mate-desktop
  * add default colors for terminal (white on black)
  * MATE users will enjoy fixed design for transparent panels
  * MATE+Mint users will enjoy new design for mint menu applet
    PR =&gt; github.com/linuxmint/mintmenu/pull/285
    PR =&gt; github.com/ubuntu-mate/mate-menu/pull/89
  * Xfce users will enjoy new design for whisker menu</changelog>
</package>
<package pkgid="e1a939e7bd0aad44859382dad43daef5e2f14698282f3476b7b470bea8099cd3" name="hylafax+" arch="aarch64">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="293cbcd9810a59168198586ffde6b8b024d844ad61addf56eeb8dd69bd251997" name="hylafax+" arch="i586">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="fadf406e86bfaa9faad36c585feaaf7a090c8e4e759f2bfc72804252eb71d5ed" name="hylafax+" arch="ppc64le">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="9ac4f01ca78d352469d23b50bf5d19e3aabeac85cb8b107ea0343ad8a3000d4b" name="hylafax+" arch="s390x">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="60909414ea54e4266601aafc987ca5895ad5a116f626ed0cf79a0cba570a1ea2" name="hylafax+" arch="src">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="29143b8d992e6cc43a3df59e3a61dcd2dbd88816bb07aaa8241843ad1359a254" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="9c7776fca235eb6609f849a18a1ca9a2ac25140b356c89113124e6b413a74dd0" name="hylafax+-client" arch="aarch64">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="02e0dbd9438768c63418e0d8822709c42761ec2de755a04fae05a09b59afa278" name="hylafax+-client" arch="i586">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="a0f50f9eb63b0cb6c7bbc63626a5c61637dc1ea11c77e02e421228931bb14c9b" name="hylafax+-client" arch="ppc64le">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="2ec4bdfe138e2c3002174e74f48791caabc939212047c36c86a1a35a147bc714" name="hylafax+-client" arch="s390x">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="8c526c84553757af6feed945c1366c58303a39a17ac33f6ae971fea48c156c07" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="90169557d86c95a884d43711c874024ce411562fd500ce2102172f76a9d29ac5" name="icecast" arch="aarch64">
  <version epoch="0" ver="2.4.4" rel="bp156.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="avindra@opensuse.org" date="1513512000">- update to version 2.4.3:
  * Fixes Windows only vulnerability (CVE-2005-0837), where an
    attacker could access the raw XSLT template file by appending a
    dot “.” to the URL. To be clear, no runtime information could be
    accessed this way.
- cleanup spec file with spec-cleaner
- fix bad line endings warning in CSS file
- rebase icecast-fix-no-add-needed.patch
- replace PreReq statements with Requires(pre)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- update to version 2.4.4:
  * Fix buffer overflows in URL auth code (CVE-2018-18820,
    bsc#1114434)
  * Worked around buffer overflows in URL auth’s cURL interface
  * Do not report hashed user passworts in user list
  * Fixed segfault in htpasswd auth if no filename is set
  * Fixed a segfault when xsltApplyStylesheet() returns error
  * Do not segfault on malformed Opus streams
  * Global listener count could be negative under certain
    circumstances
  * Added code to announce Opus streams as such towards yp servers</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * icecast.service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1752062400">- Fix logrotate configuration to set the proper owner (bsc#1245967);
  also dropping the corresponding rpmlintrc entry</changelog>
</package>
<package pkgid="735a1870017da0c0d867e1330bafb62111e2dc6ac22c781738f6c4547a4a65fb" name="icecast" arch="i586">
  <version epoch="0" ver="2.4.4" rel="bp156.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="avindra@opensuse.org" date="1513512000">- update to version 2.4.3:
  * Fixes Windows only vulnerability (CVE-2005-0837), where an
    attacker could access the raw XSLT template file by appending a
    dot “.” to the URL. To be clear, no runtime information could be
    accessed this way.
- cleanup spec file with spec-cleaner
- fix bad line endings warning in CSS file
- rebase icecast-fix-no-add-needed.patch
- replace PreReq statements with Requires(pre)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- update to version 2.4.4:
  * Fix buffer overflows in URL auth code (CVE-2018-18820,
    bsc#1114434)
  * Worked around buffer overflows in URL auth’s cURL interface
  * Do not report hashed user passworts in user list
  * Fixed segfault in htpasswd auth if no filename is set
  * Fixed a segfault when xsltApplyStylesheet() returns error
  * Do not segfault on malformed Opus streams
  * Global listener count could be negative under certain
    circumstances
  * Added code to announce Opus streams as such towards yp servers</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * icecast.service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1752062400">- Fix logrotate configuration to set the proper owner (bsc#1245967);
  also dropping the corresponding rpmlintrc entry</changelog>
</package>
<package pkgid="f4740fd3d4a41c597983e17faa28f07617d9ae46ec136d45bd1029dc5721954b" name="icecast" arch="ppc64le">
  <version epoch="0" ver="2.4.4" rel="bp156.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="avindra@opensuse.org" date="1513512000">- update to version 2.4.3:
  * Fixes Windows only vulnerability (CVE-2005-0837), where an
    attacker could access the raw XSLT template file by appending a
    dot “.” to the URL. To be clear, no runtime information could be
    accessed this way.
- cleanup spec file with spec-cleaner
- fix bad line endings warning in CSS file
- rebase icecast-fix-no-add-needed.patch
- replace PreReq statements with Requires(pre)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- update to version 2.4.4:
  * Fix buffer overflows in URL auth code (CVE-2018-18820,
    bsc#1114434)
  * Worked around buffer overflows in URL auth’s cURL interface
  * Do not report hashed user passworts in user list
  * Fixed segfault in htpasswd auth if no filename is set
  * Fixed a segfault when xsltApplyStylesheet() returns error
  * Do not segfault on malformed Opus streams
  * Global listener count could be negative under certain
    circumstances
  * Added code to announce Opus streams as such towards yp servers</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * icecast.service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1752062400">- Fix logrotate configuration to set the proper owner (bsc#1245967);
  also dropping the corresponding rpmlintrc entry</changelog>
</package>
<package pkgid="7b5bd46a580edfc3da61f6dfc277577d226f58fafd9ece1599940777a74a8a26" name="icecast" arch="s390x">
  <version epoch="0" ver="2.4.4" rel="bp156.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="avindra@opensuse.org" date="1513512000">- update to version 2.4.3:
  * Fixes Windows only vulnerability (CVE-2005-0837), where an
    attacker could access the raw XSLT template file by appending a
    dot “.” to the URL. To be clear, no runtime information could be
    accessed this way.
- cleanup spec file with spec-cleaner
- fix bad line endings warning in CSS file
- rebase icecast-fix-no-add-needed.patch
- replace PreReq statements with Requires(pre)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- update to version 2.4.4:
  * Fix buffer overflows in URL auth code (CVE-2018-18820,
    bsc#1114434)
  * Worked around buffer overflows in URL auth’s cURL interface
  * Do not report hashed user passworts in user list
  * Fixed segfault in htpasswd auth if no filename is set
  * Fixed a segfault when xsltApplyStylesheet() returns error
  * Do not segfault on malformed Opus streams
  * Global listener count could be negative under certain
    circumstances
  * Added code to announce Opus streams as such towards yp servers</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * icecast.service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1752062400">- Fix logrotate configuration to set the proper owner (bsc#1245967);
  also dropping the corresponding rpmlintrc entry</changelog>
</package>
<package pkgid="79ccffeea7a528ff1250b1f26be5484a8f15734b47e324fb032da86a946dd02b" name="icecast" arch="src">
  <version epoch="0" ver="2.4.4" rel="bp156.4.3.1"/>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tiwai@suse.de" date="1330948800">- Fix VUL-1: icecast log injection (CVE-2011-4612, bnc#737255)</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="jw@suse.com" date="1358856000">- nuked %make_install to make SLES11 SP2 happy.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1370433600">- update to 2.3.3:
  * security:
    + Improved HTTPS cipher handling and added support for chained certificates.
    + Allow the source password to be undefined. There was a corner case, where
    a default password would have taken effect. It would require the admin to
    remove the 'source-password' from the icecast config to take effect. Default
    configs ship with the password set, so this vulnerability doesn't trigger
    there.
    + Prevent error log injection of control characters by substituting
    non-alphanumeric characters with a '.' (CVE-2011-4612). Injection attempts
    can be identified via access.log, as that stores URL encoded requests.
    Investigation if further logging code needs to have sanitized output is
    ongoing.
  * bugfixes:
    + On-demand relaying - Reject listeners while reconnecting. Fix stats for
    relays without mount section.
    + Prevent too frequent YP updates.
    + Only allow raw metadata updates from same IP as connected source (unless
    user is admin). This addresses broken client software that issues updates
    without being connected.
    + Minor memory leaks
    + XSPF file installation
    + Fix case of global listeners count becoming out of sync.
    + Setting an interval of 0 in mount should disable shoutcast metadata inserts.
  * authentication:
    + Sources can now be authenticated via URL, like listeners. Post info is
    "action=stream_auth&amp;mount=/stream&amp;ip=IP&amp;server=SERVER&amp;port=8000&amp;user=fred&amp;pass=pass"
    As admin requests can come in for a stream (eg metadata update) these
    requests can be issued while stream is active. For these &amp;admin=1 is added to
    the POST details.
  * XSL update:
    + automatically generate VCLT playlist like we do with M3U, the mountpoint
    extension is .vclt
- package updates:
  * add systemd service file
  * add logrotate configuration
  * add Gentoo patches
  * set pidfile directive in default config file to make it work with
    systemd
  * split out HTML documentation into -doc subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1385726400">- remove dependency to syslog.target in icecast.service, as it doesn't exist
  any more, see bnc#852314</changelog>
  <changelog author="tiwai@suse.de" date="1392120000">- Remove the obsoleted icecast-2.3.2-CVE-2011-4612.diff that leads
  to invalid access to freed memory (bnc#862096)</changelog>
  <changelog author="mail@davykager.nl" date="1400587200">- Update to version 2.4.0:
  * Support for WebM video
  * Support for Opus audio in Ogg
  * Fixes for some race conditions
  * Allow (standard strftime(3)) %x codes in &lt;dump-file&gt;. Disabled for win32.
  * Dropped debian packaging directory as debian use their own.
- Disable Gentoo patches because they have no effect on the OBS builds.
  icecast-2.3.3-libkate.patch (has no effect on automated builds)
  icecast-2.3.3-fix-xiph_openssl.patch (spec file guarantees openssl exists)
- Rebase icecast-fix-no-add-needed.patch for version 2.4.0.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="avindra@opensuse.org" date="1513512000">- update to version 2.4.3:
  * Fixes Windows only vulnerability (CVE-2005-0837), where an
    attacker could access the raw XSLT template file by appending a
    dot “.” to the URL. To be clear, no runtime information could be
    accessed this way.
- cleanup spec file with spec-cleaner
- fix bad line endings warning in CSS file
- rebase icecast-fix-no-add-needed.patch
- replace PreReq statements with Requires(pre)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- update to version 2.4.4:
  * Fix buffer overflows in URL auth code (CVE-2018-18820,
    bsc#1114434)
  * Worked around buffer overflows in URL auth’s cURL interface
  * Do not report hashed user passworts in user list
  * Fixed segfault in htpasswd auth if no filename is set
  * Fixed a segfault when xsltApplyStylesheet() returns error
  * Do not segfault on malformed Opus streams
  * Global listener count could be negative under certain
    circumstances
  * Added code to announce Opus streams as such towards yp servers</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * icecast.service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1752062400">- Fix logrotate configuration to set the proper owner (bsc#1245967);
  also dropping the corresponding rpmlintrc entry</changelog>
</package>
<package pkgid="cf40d9efa7e312866093e127cc7adf2aee40f06402808c286cf48b54a507bb8a" name="icecast" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="bp156.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="avindra@opensuse.org" date="1513512000">- update to version 2.4.3:
  * Fixes Windows only vulnerability (CVE-2005-0837), where an
    attacker could access the raw XSLT template file by appending a
    dot “.” to the URL. To be clear, no runtime information could be
    accessed this way.
- cleanup spec file with spec-cleaner
- fix bad line endings warning in CSS file
- rebase icecast-fix-no-add-needed.patch
- replace PreReq statements with Requires(pre)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- update to version 2.4.4:
  * Fix buffer overflows in URL auth code (CVE-2018-18820,
    bsc#1114434)
  * Worked around buffer overflows in URL auth’s cURL interface
  * Do not report hashed user passworts in user list
  * Fixed segfault in htpasswd auth if no filename is set
  * Fixed a segfault when xsltApplyStylesheet() returns error
  * Do not segfault on malformed Opus streams
  * Global listener count could be negative under certain
    circumstances
  * Added code to announce Opus streams as such towards yp servers</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * icecast.service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1752062400">- Fix logrotate configuration to set the proper owner (bsc#1245967);
  also dropping the corresponding rpmlintrc entry</changelog>
</package>
<package pkgid="87f08b0dfd120dc5431ae6c35d9d95c75a4204beccad71461d179dbd48ddc468" name="icecast-doc" arch="noarch">
  <version epoch="0" ver="2.4.4" rel="bp156.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="avindra@opensuse.org" date="1513512000">- update to version 2.4.3:
  * Fixes Windows only vulnerability (CVE-2005-0837), where an
    attacker could access the raw XSLT template file by appending a
    dot “.” to the URL. To be clear, no runtime information could be
    accessed this way.
- cleanup spec file with spec-cleaner
- fix bad line endings warning in CSS file
- rebase icecast-fix-no-add-needed.patch
- replace PreReq statements with Requires(pre)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- update to version 2.4.4:
  * Fix buffer overflows in URL auth code (CVE-2018-18820,
    bsc#1114434)
  * Worked around buffer overflows in URL auth’s cURL interface
  * Do not report hashed user passworts in user list
  * Fixed segfault in htpasswd auth if no filename is set
  * Fixed a segfault when xsltApplyStylesheet() returns error
  * Do not segfault on malformed Opus streams
  * Global listener count could be negative under certain
    circumstances
  * Added code to announce Opus streams as such towards yp servers</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * icecast.service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1752062400">- Fix logrotate configuration to set the proper owner (bsc#1245967);
  also dropping the corresponding rpmlintrc entry</changelog>
</package>
<package pkgid="38c05b4c0bcbe971862a07751cbb221ec131e52961b64f967df40e85fb564555" name="icinga2" arch="aarch64">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="793722bb7deea3de300268e185e860080f3e57c7a3825e04ef54d7454b9256e2" name="icinga2" arch="i586">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="38185ec264b5b699ef33cc300ce723129616fc033b526c35fb590ad1e785f0ce" name="icinga2" arch="ppc64le">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="ead97da57f4d0039a43699beebe9066b9a7e9d778363c56445bcc3406a94a6f4" name="icinga2" arch="src">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="b51597afa93d0993c22e4cd622757365436e1b168cf3dd68a814265c63731ed1" name="icinga2" arch="x86_64">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="fc7c4854f66321483784a979b5647ef7a985a9516126af60b89c409c17486b55" name="icinga2-bin" arch="aarch64">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="bbf2d3d031429e09e3f36f280dcd9f3fa4437e4fab102126eec20b519e62fd56" name="icinga2-bin" arch="i586">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="eb92b847b00cb1b87de8e140a433ded39231287443d1f82eecd3ecb9d05b11aa" name="icinga2-bin" arch="ppc64le">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="6bc9cfe81be3a1368e5da938db01bfd4d1d1cda3b2ee10d082410542653d5188" name="icinga2-bin" arch="x86_64">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="00f8ff8e30e6bac5ed213fe6881cd694e262a122f294716806907b11d24cc742" name="icinga2-common" arch="aarch64">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="cc33f47c96133e54f1ef49bf1455ffcf14e61957549818da08dd25bd26b52511" name="icinga2-common" arch="i586">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="3deaa7a958023f2ed524013d2beb6dcdcdb4807e6c460b88c6add89457533177" name="icinga2-common" arch="ppc64le">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="0797bd539cf9c8dd13cf24fb58bfc33cc58fc20eea7dcf09790750fae63f515e" name="icinga2-common" arch="x86_64">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="3660b360814164307ab9accc1e59857d854943ebb8258020c94ff23a8f50e41f" name="icinga2-doc" arch="aarch64">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="da15b25a181ff4e841c684dafcaa047de84966faf3c89a0cb8ba3a721df268f1" name="icinga2-doc" arch="i586">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="29c237dc50db03a80ff763755e5365525db22771d2f74b4b187fb7bf267ee37a" name="icinga2-doc" arch="ppc64le">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="df568d17541ee112c7e9dc98a9115db9a31b0c02c64e7b4616676f55204518c0" name="icinga2-doc" arch="x86_64">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="b24d5f0a65e620075bda190371af923ade49c0ed8c8315d0c4e7a48ca60ec49c" name="icinga2-ido-mysql" arch="aarch64">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="2d6eeef47c520ca1b8fcf8b122e100749e066109cd4f783633a78e2ba0acb718" name="icinga2-ido-mysql" arch="i586">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="3ad96e2e972d0c0cf161b71188491eff7e2055588b07fa29a8e69c9d2c5c04ef" name="icinga2-ido-mysql" arch="ppc64le">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="225041d0b2a1f770cf4edcc9fd263d417ed8c45d3f3c68025c7657a2b6a97717" name="icinga2-ido-mysql" arch="x86_64">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="461ca3bcac21950994076ae72ccc926607249b31b671019f020665edabaf65ff" name="icinga2-ido-pgsql" arch="aarch64">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="835678bc421d0b2dbab7242deba29f2a7546d21c783b94d445e703314abc46e3" name="icinga2-ido-pgsql" arch="i586">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="6a0109511a540d7b750d68ed817b32496400ccd455559b36f24b11dc8f548549" name="icinga2-ido-pgsql" arch="ppc64le">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="183e95c1ff12afe4ddae02c372bcf548cdba30d627b0f569f489e61a2b880f3f" name="icinga2-ido-pgsql" arch="x86_64">
  <version epoch="0" ver="2.13.10" rel="bp156.4.3.1"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1605614400">- Update _constraints to current requirements to avoid OOM seen
  in aarch64 Tumbleweed</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1606824000">- Update to 2.12.2
  * Bugfixes
  - Fix a connection leak with misconfigured agents #8483
  - Properly sync changes of config objects in global zones done
    via the API #8474 #8470
  - Prevent other clients from being disconnected when replaying
    the cluster log takes very long #8496
  - Avoid duplicate connections between endpoints #8465
  - Ignore incoming config object updates for unknown zones #8461
  - Check timestamps before removing files in config sync #8495
  * Enhancements
  - Include HTTP status codes in log #8467</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608033600">- Update to 2.12.3
  * Security
  - Fix that revoked certificates due for renewal will
    automatically be renewed ignoring the CRL
    (Advisory / CVE-2020-29663)
  * Bugfixes
  - Improve config sync locking - resolves high load issues on
    Windows #8511
  - Fix runtime config updates being ignored for objects without
    zone #8549
  - Use proper buffer size for OpenSSL error messages #8542
  * Enhancements
  - On checkable recovery: re-check children that have a problem
    [#8506]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1622116800">- Update to 2.12.4
  * Bugfixes
  - Fix a crash when notification objects are deleted using the
    API #8782
  - Fix crashes that might occur during downtime scheduling if
    host or downtime objects are deleted using the API #8785
  - Fix an issue where notifications may incorrectly be skipped
    after a downtime ends #8775
  - Don't send reminder notification if the notification is still
    suppressed by a time period #8808
  - Fix an issue where attempting to create a duplicate object
    using the API might result in the original object being
    deleted #8787
  - IDO: prioritize program status updates #8809
  - Improve exceptions handling, including a fix for an uncaught
    exception on Windows #8777
  - Retry file rename operations on Windows to avoid intermittent
    locking issues #8771
  * Enhancements
  - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792
- Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch
  and icinga2-boost-8185-8191.patch because now in upstream.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1626350400">- Update to 2.12.5
  Version 2.12.5 fixes two security vulnerabilities that may lead
  to privilege escalation for authenticated API users.
  Other improvements include several bugfixes related to downtimes,
  downtime notifications, and more reliable connection handling.
  * Security
  - Don't expose the PKI ticket salt via the API. This may lead
    to privilege escalation for authenticated API users by them
    being able to request certificates for other identities
    (CVE-2021-32739)
  - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and
    ElasticsearchWriter passwords via the API
    (CVE-2021-32743)
  - Windows: Update bundled OpenSSL to version 1.1.1k #8888
    Depending on your setup, manual intervention beyond installing
    the new versions may be required, so please read the more
    detailed information in the release blog post carefully.
  * Bugfixes
  - Don't send downtime end notification if downtime hasn't
    started #8878
  - Don't let a failed downtime creation block the others #8871
  - Support downtimes and comments for checkables with long names
    [#8870]
  - Trigger fixed downtimes immediately if the current time
    matches (instead of waiting for the timer) #8891
  - Add configurable timeout for full connection handshake #8872
  * Enhancements
  - Replace existing downtimes on ScheduledDowntime change #8880
  - Improve crashlog #8869</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1627992000">- Update to 2.13.0
  * Enhancements
    + Core
  - PerfdataValue: Add units of measurement #7871
  - Flapping: Allow to ignore states in flapping detection #8600
    + Cluster
    Display log message if two nodes run on incompatible versions #8088
    + API
  - /v1/actions/remove-downtime: Also remove child downtimes #8913
  - Add API endpoint: /v1/actions/execute-command #8040
  - /v1/actions/add-comment: Add param expiry #8035
  - API-Event StateChange &amp; CheckResult: Add acknowledgement and downtime_depth #7736
  - Implement new API events ObjectCreated, ObjectDeleted and ObjectModified #8083
  - Implement scheduling_endpoint attribute to checkable #6326
    + Windows
  - Add support for Windows Event Log and write early log messages to it #8710
    + IDO
  - MySQL: support larger host and service names #8425
    + ITL
  - Add -S parameter for esxi_hardware ITL #8814
  - Add CheckCommands for Thola #8683
  - Add option ignore-sct for ssl_cert to ITL #8625
  - Improve check_dns command when used with monitoring-plugins 2.3 #8589
  - Add parameter -f to snmp-process #8569
  - Add systemd CheckCommand #8568
  - Add new options for ipmi-sensor #8498
  - check_snmp_int: support -a #8003
  - check_fail2ban: Add parameter fail2ban_jail to monitor a specific jail only #7960
  - check_nrpe: Add parameters needed for PKI usage #7907
    + Metrics
  - Support InfluxDB 2.0 #8719
  - Add support for InfluxDB basic auth #8314
    + Docs
  - Add info about ongoing support for IDO #8446
  - Improve instructions on how to setup a Windows dev env #8400
  - Improve instructions for installing wixtoolset on Windows #8397
  - Add section about usage of satellites #8458
  - Document command for verifying the parent node's certificate #8221
  - Clarify TimePeriod/ScheduledDowntime time zone handling #8001
    + Misc
  - Support TLS 1.3 #8718
  - Livestatus: append app name to program_version #7931
  - sd_notify() systemd about what we're doing right now #7874
  * Bugfixes
    + Core
  - Fix state not being UNKNOWN after process timeout #8937
  - Set a default severity for loggers #8846
  - Fix integer overflow when converting large unsigned integers to string #8742
  - StartUnixWorker(): don't exit() on fork() failure #8427
  - Fix perf data parser not recognizing scientific notation #8492
  - Close FDs based on /proc/self/fd #8442
  - Fix check source getting overwritten on passive check result #8158
  - Clean up temp files #8157
  - Improve perf data parser to allow for special output (e.g. ASCII tables) #8008
  - On check timeout first send SIGTERM #7918
    + Cluster
  - Drop passive check results for unreachable hosts/services #8267
  - Fix state timestamps set by the same check result differing across nodes #8101
    + API
  - Do not override status codes that are not 200 #8532
  - Update the SSL context after accepting incoming connections #8515
  - Allow to create API User with password #8321
  - Send Content-Type as API response header too #8108
  - Display a correct status when removing a downtime #8104
  - Display log message if a permission error occurs #8087
  - Replace broken package name validation regex #8825 #8946
    + Windows
  - Fix Windows command escape for " #7092
    + Notifications/Downtimes
  - Fix no re-notification for non OK state changes with time delay #8562
  - TimePeriod/ScheduledDowntime: Improve DST handling #8921
  - Don't send notifications while suppressed by checkable #8513
  - Fix a crash while removing a downtime from a disappeared checkable #8229
    + IDO
  - Update program status on stop #8730
  - Also mark objects inactive in memory on object deactivation #8626
  - IdoCheckTask: Don't override checkable critical with warn state #8613
  - PostgreSQL: Do not set standard_conforming_strings to off #8123
    + ITL
  - check_http: Fix assignment of check_adress blocking check by hostname #8109
  - check_mysql: Don't set -H if -s is given #8020
    + Metrics
  - OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1629374400">- Update to 2.13.1
  * Security
  - CVE-2021-37698: Add TLS server certificate validation to ElasticsearchWriter, GelfWriter,
    InfluxdbWriter and Influxdb2Writer (GHSA-cxfm-8j5v-5qr2)
    Depending on your setup, manual intervention beyond installing the new versions may be required,
    so please read the more detailed information in the release blog post carefully.
  * Bugfixes
  - IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958
  - ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1650801600">- Update to 2.13.3
  * API
  - The /v1/config/stages endpoint now immediately rejects parallel config updates
    instead of accepting and then later failing to verify and activate them. #9328
  * Certificates
  - The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337
  - Compare cluster certificate tickets in constant time. #9333
  * Notifications
  - Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124
  - Fix missing or redundant notifications after certain combinations of state changes happened
    while notifications were suppressed, for example during a downtime. #9285
  * Checks and Commands
  - Fix a deadlock when processing check results for checkables with dependencies. #9228
  - Fix a message routing loop that can happen for event commands that are executed within a zone
    using command_endpoint that resulted in excessive execution of the command. #9260
  * Downtimes
  - Fix scheduling of downtimes for all services on child hosts. #9159
  - Creating fixed downtimes starting immediately now send a corresponding notification. #9158
  - Fix some issues involving daylight saving time changes that could result in an hour missing
    from scheduled downtimes. This fix applies to time periods as well. #9238
  * Configuration
  - Fix the evaluation order of default templates when used in combination with apply rules.
    Now default templates are imported first as stated in the documentation
    and as it already happens for objects defined without using apply. #9290
  * IDO
  - Fix an issue where contacts were not written correctly to the notification history
    if multiple IDO instances are active on the same node. #9242
  - Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312
  - Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file
    and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139
  * Performance Data Writers
  - Fix a race condition in the InfluxDB Writers that could result in a crash. #9237
  - Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315
  - All writers no longer send metrics multiple times after HA failovers. #9322
  * Build
  - Fix the order of linker flags to fix builds on some ARM platforms. #9164
  - Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094
  - Fix an issue when building within an unrelated Git repository, version information
    from that repository could incorrectly be used for Icinga 2. #9155
  - Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325
  * Internals
  - Fix some race conditions due to missing synchronization.
    These race conditions should not have caused any practical problems
    besides incorrect numbers in debug log message. #9306
  - Move the startup.log and status files created when validating incoming cluster config updates
    to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335
  * Icinga DB
  - The severity attribute was updated to match the sort order Icinga Web 2 uses for the IDO.
    The documentation for this attribute was already incorrect before
    and was updated to reflect the current functionality. #9239 #9240
  - Fix the is_sticky attribute for comments. #9303
  - Fix missing updates of is_reachable and severity in the state tables. #9241
  - Removing an acknowledgement no longer incorrectly writes comment history. #9302
  - Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190
  - Fix that history events are no longer written when state information should be updated. #9252
  - Fix an issue where incomplete comment history events were generated. #9301
  - Note: when removing comments using the API, the dedicated remove-comment action
    should be used instead of the objects API, otherwise no history event will be generated.
  - Fix handling of non-integer values for the order attribute of command arguments. #9181
  - Note: You should only specify integer values for order, other values are converted to
    integer before use so using fractional numbers there has no effect.
  - Add a dependency on icingadb-redis.service to the systemd service file
    so that Redis is stopped after Icinga 2. #9304
  - Buffer history events in memory when the Redis connection is lost. #9271
  - Add the previous soft state to the state tables. #9214
  - Add missing locking on object runtime updates. #9300
- Changes from 2.13.2
  * Icinga DB
  - Prefix command_id with command type #9085
  - Decouple environment from Icinga 2 Environment constant #9082
  - Make icinga:history:stream:*#event_id deterministic #9076
  - Add downtime.duration &amp; service_state.host_id to Redis #9084
  - Sync checkables along with their states first #9081
  - Flush both buffered states and state checksums on initial dump #9079
  - Introduce icinga:history:stream:downtime#scheduled_by #9080
  - Actually write parent to parent_id of zones #9078
  - Set value in milliseconds for program_start in stats/heartbeat #9077
  - Clean up vanished objects from icinga:checksum:*:state #9074
  - Remove usernotification history stream #9073
  - Write IDs of notified users into notification history stream #9071
  - Make CheckResult#scheduling_source available to Icinga DB #9072
  - Stream runtime state updates only to icinga:runtime:state #9068
  - Publish Redis schema version via XADD icinga:schema #9069
  - Don't include checkable types in history IDs #9070
  - Remove unused Redis key 'icinga:zone:parent' #9075</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1656504000">- add icinga2-vim_syntax.patch:
  When upgrading vim to version 8 the syntax file does not work anymore:
  line xxx:
    E10: \ should be followed by /, ? or &amp;
  Reason: The line continuation does not work, as vim is reading
  syntax files now in vi-compatible mode. The patch sets the
  nocompatible mode manually for that syntax file.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656676800">- Update to 2.13.4
  * Bugfixes
  - Fix a race-condition involving object attribute updates that could result in a crash. #9395
  - After a host recovered, only send problem notifications for services after they have been
    rechecked afterwards to avoid false - notifications. #9348
  - Speed up config validation by avoiding redundant serialization of objects. #9400
  - Add a separator attribute to allow using arguments like --key=value as required by some
    check plugins. This fixes the --upgrade and --dist-upgrade arguments of check_apt. #9397
  - Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415
  * Icinga DB
  - Add an icingadb CheckCommand to allow checking if Icinga DB is healthy. #9417
  - Update documentation related to Icinga DB. #9423
  - Fix a bug where history events could miss the environment ID. #9396
  - Properly serialize attributes of command arguments when explicitly set to null. #9398
  - Rename some attributes to make the database schema more consistent. #9399 #9419 #9421
  - Make the error message more helpful if the API isn't set up #9418</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1660219200">- Update to 2.13.5
  * Bugfixes
  - Ensure not to write an incomplete (i.e. corrupt) state file. #9467
  - ITL: Render vars.apt_upgrade=true as --upgrade, not --upgrade=true. #9458
  - Icinga DB: Add missing Redis SELinux policy. #9473
  - Windows: Don't spam the event log with non-error startup messages. #9457
  - Windows: Update bundled version of OpenSSL. #9460
  - Docs: Update RHEL 8 installation instructions. #9482
  - Docs: Add RHEL 9 installation instructions. #9482</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667908800">- Update to 2.13.6
  * Bugfixes
  - Improve the throughput of the Icinga DB feature. #9550
  - Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558
  - Fix a possible crash on config loading related to ignore_on_error. #9560
  - Check API user permission on objects returned by joins. #9561
  - Windows: update bundled Boost and OpenSSL versions. #9562 #9567</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1675425600">- Add icinga2-boost.patch to make compilable on Boost v1.81
  and fix build error on Tumbleweed.</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1731499200">- Update to 2.13.10
  * Security: fix TLS certificate validation bypass. CVE-2024-49369
  * Security: update OpenSSL shipped on Windows to v3.0.15.
  * Windows: sign MSI packages with a certificate the OS trusts by default.
- Remove deprecated patch icinga2-boost.patch.</changelog>
</package>
<package pkgid="c6f07d24cf6da195d5f6b7508a4411ddeaff99ed4e2b988ac678978026816f6f" name="incus" arch="aarch64">
  <version epoch="0" ver="6.7" rel="bp156.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
</package>
<package pkgid="8e978173d1e8ef7a314fe9de6e14a6a8d0b09a064d186c2ea28a904e6579b0e7" name="incus" arch="ppc64le">
  <version epoch="0" ver="6.7" rel="bp156.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
</package>
<package pkgid="5a2bbb3480fb0d8273f4a4203e8871a8bba92c8803e40501c9227c9a7eea08c7" name="incus" arch="s390x">
  <version epoch="0" ver="6.7" rel="bp156.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
</package>
<package pkgid="c1d6a93da92298770a9ee7cbecf260377f463ec4fd043f95a1915bcbbc70af82" name="incus" arch="src">
  <version epoch="0" ver="6.7" rel="bp156.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
</package>
<package pkgid="007f6562df293447060f7a8887248831348784c5075a8349674b66dfe0be710a" name="incus" arch="x86_64">
  <version epoch="0" ver="6.7" rel="bp156.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
</package>
<package pkgid="117d53ee4d03ef296515818428b781c1780b352675a0fd6a4d7add1014682988" name="incus" arch="aarch64">
  <version epoch="0" ver="6.8" rel="bp156.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1734091200">- update to 6.8:
  * exec: Consume websocket pings for stderr by @stefanor in #1380
  * incus-simplestreams: Add prune command by @presztak in #1381
  * internal/instance: Fix validation of volatile.cpu.nodes by
    @stgraber in #1394
  * Add a function to clone map and use it where appropriate by
    @montag451 in #1397
  * cgo/process_utils: fix 32bit builds by @brauner in #1398
  * Start using goimports by @stgraber in #1399
  * instance/config: Mark user keys as live updatable by @stgraber
    in #1404
  * incus/internal/server/instance/drivers/: Fix incorrect Vars
    file mapping in edk2 driver by @cmspam in #1406
  * zfs: load keys for encrypted datasets during pool import by
    @cyphar in #1384
  * incusd/instance: Lock image access by @stgraber in #1408
  * incus/image: Make use of server-side alias handling by
    @stgraber in #1409
  * incusd/cluster: Validate cluster HTTPS address on join too by
    @stgraber in #1411
  * Remove metadata info from space usage calculation by @presztak
    in #1417
  * Add ability to set the initial owner of a custom volume by
    @presztak in #1415
  * Allow local live-migration between storage pools by @presztak
    in #1410
  * incus: Add aliases completion by @montag451 in #1385
  * golangci: Add local prefixes for goimports by @breml in #1401
  * client: invalidate simple streams cache by @breml in #1424
  * incusd/instances_post: Fix cluster internal migrations by
    @stgraber in #1427
  * Fix DHCP client keeping container up by @stgraber in #1430
  * Add support for VGA console screenshots by @breml in #1431
  * Add --reuse to incus image import by @presztak in #1428
  * Fix random ETag values due to map ordering by @stgraber in
    [#1432]
  * incusd/task: Fix wait group logic (more entries than running
    tasks) by @stgraber in #1433
  * Allow setting aliases during raw image upload by @stgraber in
    [#1434]
  * Fixes an issue when copying a custom volume using the --refresh
    flag by @presztak in #1437
  * Openfga improvements by @stgraber in #1435
  * doc/instance/properties: Add missing instance properties by
    @stgraber in #1439
  * incusd/daemon_storage: Ensure corect symlinks for
    images/backups by @stgraber in #1441
  * incusd/storage/lvm: Handle newer LVM by @stgraber in #1442
  * Tweak rendering of manpage in doc by @stgraber in #1443
  * incusd/storage/lvm: Require 512-bytes physical block size for
    VM images by @stgraber in #1444
  * incusd: Fill ExpiryDate and remove LastUsedDate in
    volumeSnapshotToProtobuf by @presztak in #1448
  * incusd/device/tpm: Wait for swtpm to be ready by @stgraber in
    [#1447]
  * incus: Improve completion for file push and file pull by
    @montag451 in #1445
  * incusd/auth/tls: Restrict config access to non-admin by
    @stgraber in #1451
  * incusd/storage: Handle default disk size in GetInstanceUsage by
    @stgraber in #1452
  * incus: Improve completion for some file sub-commmands by
    @montag451 in #1453
  * incus: Fix completion for profile copy by @montag451 in #1454
  * incus: Add completion for image alias subcommands by @montag451
    in #1457
  * doc/installing: Update Fedora instructions by @stgraber in
    [#1456]
  * Fix gap in validation of pre-existing certificates when
    switching to PKI mode by @stgraber in #1458
  * doc/network_forwards: Split configuration into own table by
    @stgraber in #1460
  * chore: Happy path on the left, early return by @breml in #1461
  * incus: Fix completion for image alias create by @montag451 in
    [#1459]
  * incus/top: Ignore CPU idle time by @stgraber in #1462
  * incus: Display the alias expansion when execution of an alias
    fails by @montag451 in #1464
  * lint: disallow restricted licenses in go-licenses by @breml in
    [#1466]
  * chore: code structure, Go identifier shaddowing by @breml in
    [#1465]
  * incus: Fix alias arguments handling by @montag451 in #1463
  * incus/file/push Use SFTP client instead of file API by
    @HassanAlsamahi in #1468
  * Fix TPM fd leaks and OpenFGA patching issue by @stgraber in
    [#1469]
  * Clarify device override syntax by @stgraber in #1471
  * incusd/auth/openfga: refresh model before applying patches by
    @stgraber in #1472
  * Add authorization scriptlet by @bensmrs in #1412
  * doc: add openSUSE installation instructions by @cyphar in #1475
  * OCI image debugging improvements by @danbiagini in #1478
  * Add function checks to scriptlet validation by @bensmrs in
    [#1484]
  * incus/project: Fix handling of default (unset) project in
    get-current by @irhndt in #1476
  * Translations update from Hosted Weblate by @weblate in #1492
  * Add --force flag to the console command by @presztak in #1491
  * Accept io.Writer in RenderTable by @breml in #1490
  * doc/network_bridge: Fix missing escaping around variable by
    @irhndt in #1493
  * incusd/cluster: Skip project restrictions during join by
    @stgraber in #1497
  * incusd/instance/lxc: Skip instances without idmap allocation
    yet by @stgraber in #1495
  * incusd/storage/drivers/common: Truncate/Discard ahead of sparse
    write by @stgraber in #1496
  * Add AskPassword/AskPasswordOnce to Asker by @breml in #1499
  * Add additional check to Cancel method for ConsoleShow operation
    by @presztak in #1500
  * Improve console disconnections by @stgraber in #1501
  * Fix duplicate OVN load-balancer entries by @stgraber in #1502
  * Improve SFTP performance by @stgraber in #1503
  * incusd/instance_post: Expand profiles in scriptlet context by
    @stgraber in #1504
- remove patches:
  * 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  * 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
</package>
<package pkgid="d058970c35fadacb28e2f9869526c8150fba9938d8e536713f97f348e55b19a1" name="incus" arch="ppc64le">
  <version epoch="0" ver="6.8" rel="bp156.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1734091200">- update to 6.8:
  * exec: Consume websocket pings for stderr by @stefanor in #1380
  * incus-simplestreams: Add prune command by @presztak in #1381
  * internal/instance: Fix validation of volatile.cpu.nodes by
    @stgraber in #1394
  * Add a function to clone map and use it where appropriate by
    @montag451 in #1397
  * cgo/process_utils: fix 32bit builds by @brauner in #1398
  * Start using goimports by @stgraber in #1399
  * instance/config: Mark user keys as live updatable by @stgraber
    in #1404
  * incus/internal/server/instance/drivers/: Fix incorrect Vars
    file mapping in edk2 driver by @cmspam in #1406
  * zfs: load keys for encrypted datasets during pool import by
    @cyphar in #1384
  * incusd/instance: Lock image access by @stgraber in #1408
  * incus/image: Make use of server-side alias handling by
    @stgraber in #1409
  * incusd/cluster: Validate cluster HTTPS address on join too by
    @stgraber in #1411
  * Remove metadata info from space usage calculation by @presztak
    in #1417
  * Add ability to set the initial owner of a custom volume by
    @presztak in #1415
  * Allow local live-migration between storage pools by @presztak
    in #1410
  * incus: Add aliases completion by @montag451 in #1385
  * golangci: Add local prefixes for goimports by @breml in #1401
  * client: invalidate simple streams cache by @breml in #1424
  * incusd/instances_post: Fix cluster internal migrations by
    @stgraber in #1427
  * Fix DHCP client keeping container up by @stgraber in #1430
  * Add support for VGA console screenshots by @breml in #1431
  * Add --reuse to incus image import by @presztak in #1428
  * Fix random ETag values due to map ordering by @stgraber in
    [#1432]
  * incusd/task: Fix wait group logic (more entries than running
    tasks) by @stgraber in #1433
  * Allow setting aliases during raw image upload by @stgraber in
    [#1434]
  * Fixes an issue when copying a custom volume using the --refresh
    flag by @presztak in #1437
  * Openfga improvements by @stgraber in #1435
  * doc/instance/properties: Add missing instance properties by
    @stgraber in #1439
  * incusd/daemon_storage: Ensure corect symlinks for
    images/backups by @stgraber in #1441
  * incusd/storage/lvm: Handle newer LVM by @stgraber in #1442
  * Tweak rendering of manpage in doc by @stgraber in #1443
  * incusd/storage/lvm: Require 512-bytes physical block size for
    VM images by @stgraber in #1444
  * incusd: Fill ExpiryDate and remove LastUsedDate in
    volumeSnapshotToProtobuf by @presztak in #1448
  * incusd/device/tpm: Wait for swtpm to be ready by @stgraber in
    [#1447]
  * incus: Improve completion for file push and file pull by
    @montag451 in #1445
  * incusd/auth/tls: Restrict config access to non-admin by
    @stgraber in #1451
  * incusd/storage: Handle default disk size in GetInstanceUsage by
    @stgraber in #1452
  * incus: Improve completion for some file sub-commmands by
    @montag451 in #1453
  * incus: Fix completion for profile copy by @montag451 in #1454
  * incus: Add completion for image alias subcommands by @montag451
    in #1457
  * doc/installing: Update Fedora instructions by @stgraber in
    [#1456]
  * Fix gap in validation of pre-existing certificates when
    switching to PKI mode by @stgraber in #1458
  * doc/network_forwards: Split configuration into own table by
    @stgraber in #1460
  * chore: Happy path on the left, early return by @breml in #1461
  * incus: Fix completion for image alias create by @montag451 in
    [#1459]
  * incus/top: Ignore CPU idle time by @stgraber in #1462
  * incus: Display the alias expansion when execution of an alias
    fails by @montag451 in #1464
  * lint: disallow restricted licenses in go-licenses by @breml in
    [#1466]
  * chore: code structure, Go identifier shaddowing by @breml in
    [#1465]
  * incus: Fix alias arguments handling by @montag451 in #1463
  * incus/file/push Use SFTP client instead of file API by
    @HassanAlsamahi in #1468
  * Fix TPM fd leaks and OpenFGA patching issue by @stgraber in
    [#1469]
  * Clarify device override syntax by @stgraber in #1471
  * incusd/auth/openfga: refresh model before applying patches by
    @stgraber in #1472
  * Add authorization scriptlet by @bensmrs in #1412
  * doc: add openSUSE installation instructions by @cyphar in #1475
  * OCI image debugging improvements by @danbiagini in #1478
  * Add function checks to scriptlet validation by @bensmrs in
    [#1484]
  * incus/project: Fix handling of default (unset) project in
    get-current by @irhndt in #1476
  * Translations update from Hosted Weblate by @weblate in #1492
  * Add --force flag to the console command by @presztak in #1491
  * Accept io.Writer in RenderTable by @breml in #1490
  * doc/network_bridge: Fix missing escaping around variable by
    @irhndt in #1493
  * incusd/cluster: Skip project restrictions during join by
    @stgraber in #1497
  * incusd/instance/lxc: Skip instances without idmap allocation
    yet by @stgraber in #1495
  * incusd/storage/drivers/common: Truncate/Discard ahead of sparse
    write by @stgraber in #1496
  * Add AskPassword/AskPasswordOnce to Asker by @breml in #1499
  * Add additional check to Cancel method for ConsoleShow operation
    by @presztak in #1500
  * Improve console disconnections by @stgraber in #1501
  * Fix duplicate OVN load-balancer entries by @stgraber in #1502
  * Improve SFTP performance by @stgraber in #1503
  * incusd/instance_post: Expand profiles in scriptlet context by
    @stgraber in #1504
- remove patches:
  * 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  * 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
</package>
<package pkgid="60ae06dca8ff58ed9971194425a27cca7dc0de61228119026c87f1ac508ac62b" name="incus" arch="s390x">
  <version epoch="0" ver="6.8" rel="bp156.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1734091200">- update to 6.8:
  * exec: Consume websocket pings for stderr by @stefanor in #1380
  * incus-simplestreams: Add prune command by @presztak in #1381
  * internal/instance: Fix validation of volatile.cpu.nodes by
    @stgraber in #1394
  * Add a function to clone map and use it where appropriate by
    @montag451 in #1397
  * cgo/process_utils: fix 32bit builds by @brauner in #1398
  * Start using goimports by @stgraber in #1399
  * instance/config: Mark user keys as live updatable by @stgraber
    in #1404
  * incus/internal/server/instance/drivers/: Fix incorrect Vars
    file mapping in edk2 driver by @cmspam in #1406
  * zfs: load keys for encrypted datasets during pool import by
    @cyphar in #1384
  * incusd/instance: Lock image access by @stgraber in #1408
  * incus/image: Make use of server-side alias handling by
    @stgraber in #1409
  * incusd/cluster: Validate cluster HTTPS address on join too by
    @stgraber in #1411
  * Remove metadata info from space usage calculation by @presztak
    in #1417
  * Add ability to set the initial owner of a custom volume by
    @presztak in #1415
  * Allow local live-migration between storage pools by @presztak
    in #1410
  * incus: Add aliases completion by @montag451 in #1385
  * golangci: Add local prefixes for goimports by @breml in #1401
  * client: invalidate simple streams cache by @breml in #1424
  * incusd/instances_post: Fix cluster internal migrations by
    @stgraber in #1427
  * Fix DHCP client keeping container up by @stgraber in #1430
  * Add support for VGA console screenshots by @breml in #1431
  * Add --reuse to incus image import by @presztak in #1428
  * Fix random ETag values due to map ordering by @stgraber in
    [#1432]
  * incusd/task: Fix wait group logic (more entries than running
    tasks) by @stgraber in #1433
  * Allow setting aliases during raw image upload by @stgraber in
    [#1434]
  * Fixes an issue when copying a custom volume using the --refresh
    flag by @presztak in #1437
  * Openfga improvements by @stgraber in #1435
  * doc/instance/properties: Add missing instance properties by
    @stgraber in #1439
  * incusd/daemon_storage: Ensure corect symlinks for
    images/backups by @stgraber in #1441
  * incusd/storage/lvm: Handle newer LVM by @stgraber in #1442
  * Tweak rendering of manpage in doc by @stgraber in #1443
  * incusd/storage/lvm: Require 512-bytes physical block size for
    VM images by @stgraber in #1444
  * incusd: Fill ExpiryDate and remove LastUsedDate in
    volumeSnapshotToProtobuf by @presztak in #1448
  * incusd/device/tpm: Wait for swtpm to be ready by @stgraber in
    [#1447]
  * incus: Improve completion for file push and file pull by
    @montag451 in #1445
  * incusd/auth/tls: Restrict config access to non-admin by
    @stgraber in #1451
  * incusd/storage: Handle default disk size in GetInstanceUsage by
    @stgraber in #1452
  * incus: Improve completion for some file sub-commmands by
    @montag451 in #1453
  * incus: Fix completion for profile copy by @montag451 in #1454
  * incus: Add completion for image alias subcommands by @montag451
    in #1457
  * doc/installing: Update Fedora instructions by @stgraber in
    [#1456]
  * Fix gap in validation of pre-existing certificates when
    switching to PKI mode by @stgraber in #1458
  * doc/network_forwards: Split configuration into own table by
    @stgraber in #1460
  * chore: Happy path on the left, early return by @breml in #1461
  * incus: Fix completion for image alias create by @montag451 in
    [#1459]
  * incus/top: Ignore CPU idle time by @stgraber in #1462
  * incus: Display the alias expansion when execution of an alias
    fails by @montag451 in #1464
  * lint: disallow restricted licenses in go-licenses by @breml in
    [#1466]
  * chore: code structure, Go identifier shaddowing by @breml in
    [#1465]
  * incus: Fix alias arguments handling by @montag451 in #1463
  * incus/file/push Use SFTP client instead of file API by
    @HassanAlsamahi in #1468
  * Fix TPM fd leaks and OpenFGA patching issue by @stgraber in
    [#1469]
  * Clarify device override syntax by @stgraber in #1471
  * incusd/auth/openfga: refresh model before applying patches by
    @stgraber in #1472
  * Add authorization scriptlet by @bensmrs in #1412
  * doc: add openSUSE installation instructions by @cyphar in #1475
  * OCI image debugging improvements by @danbiagini in #1478
  * Add function checks to scriptlet validation by @bensmrs in
    [#1484]
  * incus/project: Fix handling of default (unset) project in
    get-current by @irhndt in #1476
  * Translations update from Hosted Weblate by @weblate in #1492
  * Add --force flag to the console command by @presztak in #1491
  * Accept io.Writer in RenderTable by @breml in #1490
  * doc/network_bridge: Fix missing escaping around variable by
    @irhndt in #1493
  * incusd/cluster: Skip project restrictions during join by
    @stgraber in #1497
  * incusd/instance/lxc: Skip instances without idmap allocation
    yet by @stgraber in #1495
  * incusd/storage/drivers/common: Truncate/Discard ahead of sparse
    write by @stgraber in #1496
  * Add AskPassword/AskPasswordOnce to Asker by @breml in #1499
  * Add additional check to Cancel method for ConsoleShow operation
    by @presztak in #1500
  * Improve console disconnections by @stgraber in #1501
  * Fix duplicate OVN load-balancer entries by @stgraber in #1502
  * Improve SFTP performance by @stgraber in #1503
  * incusd/instance_post: Expand profiles in scriptlet context by
    @stgraber in #1504
- remove patches:
  * 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  * 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
</package>
<package pkgid="d07cc1a99dd310a8d91f6a33d3b3577615dadc6e666a6a75fcff659c8048b1a9" name="incus" arch="src">
  <version epoch="0" ver="6.8" rel="bp156.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1734091200">- update to 6.8:
  * exec: Consume websocket pings for stderr by @stefanor in #1380
  * incus-simplestreams: Add prune command by @presztak in #1381
  * internal/instance: Fix validation of volatile.cpu.nodes by
    @stgraber in #1394
  * Add a function to clone map and use it where appropriate by
    @montag451 in #1397
  * cgo/process_utils: fix 32bit builds by @brauner in #1398
  * Start using goimports by @stgraber in #1399
  * instance/config: Mark user keys as live updatable by @stgraber
    in #1404
  * incus/internal/server/instance/drivers/: Fix incorrect Vars
    file mapping in edk2 driver by @cmspam in #1406
  * zfs: load keys for encrypted datasets during pool import by
    @cyphar in #1384
  * incusd/instance: Lock image access by @stgraber in #1408
  * incus/image: Make use of server-side alias handling by
    @stgraber in #1409
  * incusd/cluster: Validate cluster HTTPS address on join too by
    @stgraber in #1411
  * Remove metadata info from space usage calculation by @presztak
    in #1417
  * Add ability to set the initial owner of a custom volume by
    @presztak in #1415
  * Allow local live-migration between storage pools by @presztak
    in #1410
  * incus: Add aliases completion by @montag451 in #1385
  * golangci: Add local prefixes for goimports by @breml in #1401
  * client: invalidate simple streams cache by @breml in #1424
  * incusd/instances_post: Fix cluster internal migrations by
    @stgraber in #1427
  * Fix DHCP client keeping container up by @stgraber in #1430
  * Add support for VGA console screenshots by @breml in #1431
  * Add --reuse to incus image import by @presztak in #1428
  * Fix random ETag values due to map ordering by @stgraber in
    [#1432]
  * incusd/task: Fix wait group logic (more entries than running
    tasks) by @stgraber in #1433
  * Allow setting aliases during raw image upload by @stgraber in
    [#1434]
  * Fixes an issue when copying a custom volume using the --refresh
    flag by @presztak in #1437
  * Openfga improvements by @stgraber in #1435
  * doc/instance/properties: Add missing instance properties by
    @stgraber in #1439
  * incusd/daemon_storage: Ensure corect symlinks for
    images/backups by @stgraber in #1441
  * incusd/storage/lvm: Handle newer LVM by @stgraber in #1442
  * Tweak rendering of manpage in doc by @stgraber in #1443
  * incusd/storage/lvm: Require 512-bytes physical block size for
    VM images by @stgraber in #1444
  * incusd: Fill ExpiryDate and remove LastUsedDate in
    volumeSnapshotToProtobuf by @presztak in #1448
  * incusd/device/tpm: Wait for swtpm to be ready by @stgraber in
    [#1447]
  * incus: Improve completion for file push and file pull by
    @montag451 in #1445
  * incusd/auth/tls: Restrict config access to non-admin by
    @stgraber in #1451
  * incusd/storage: Handle default disk size in GetInstanceUsage by
    @stgraber in #1452
  * incus: Improve completion for some file sub-commmands by
    @montag451 in #1453
  * incus: Fix completion for profile copy by @montag451 in #1454
  * incus: Add completion for image alias subcommands by @montag451
    in #1457
  * doc/installing: Update Fedora instructions by @stgraber in
    [#1456]
  * Fix gap in validation of pre-existing certificates when
    switching to PKI mode by @stgraber in #1458
  * doc/network_forwards: Split configuration into own table by
    @stgraber in #1460
  * chore: Happy path on the left, early return by @breml in #1461
  * incus: Fix completion for image alias create by @montag451 in
    [#1459]
  * incus/top: Ignore CPU idle time by @stgraber in #1462
  * incus: Display the alias expansion when execution of an alias
    fails by @montag451 in #1464
  * lint: disallow restricted licenses in go-licenses by @breml in
    [#1466]
  * chore: code structure, Go identifier shaddowing by @breml in
    [#1465]
  * incus: Fix alias arguments handling by @montag451 in #1463
  * incus/file/push Use SFTP client instead of file API by
    @HassanAlsamahi in #1468
  * Fix TPM fd leaks and OpenFGA patching issue by @stgraber in
    [#1469]
  * Clarify device override syntax by @stgraber in #1471
  * incusd/auth/openfga: refresh model before applying patches by
    @stgraber in #1472
  * Add authorization scriptlet by @bensmrs in #1412
  * doc: add openSUSE installation instructions by @cyphar in #1475
  * OCI image debugging improvements by @danbiagini in #1478
  * Add function checks to scriptlet validation by @bensmrs in
    [#1484]
  * incus/project: Fix handling of default (unset) project in
    get-current by @irhndt in #1476
  * Translations update from Hosted Weblate by @weblate in #1492
  * Add --force flag to the console command by @presztak in #1491
  * Accept io.Writer in RenderTable by @breml in #1490
  * doc/network_bridge: Fix missing escaping around variable by
    @irhndt in #1493
  * incusd/cluster: Skip project restrictions during join by
    @stgraber in #1497
  * incusd/instance/lxc: Skip instances without idmap allocation
    yet by @stgraber in #1495
  * incusd/storage/drivers/common: Truncate/Discard ahead of sparse
    write by @stgraber in #1496
  * Add AskPassword/AskPasswordOnce to Asker by @breml in #1499
  * Add additional check to Cancel method for ConsoleShow operation
    by @presztak in #1500
  * Improve console disconnections by @stgraber in #1501
  * Fix duplicate OVN load-balancer entries by @stgraber in #1502
  * Improve SFTP performance by @stgraber in #1503
  * incusd/instance_post: Expand profiles in scriptlet context by
    @stgraber in #1504
- remove patches:
  * 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  * 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
</package>
<package pkgid="d6155af5ba172fa18a0fa786acc9bab41391eddf59036f0ac74ce95c02926a9b" name="incus" arch="x86_64">
  <version epoch="0" ver="6.8" rel="bp156.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1734091200">- update to 6.8:
  * exec: Consume websocket pings for stderr by @stefanor in #1380
  * incus-simplestreams: Add prune command by @presztak in #1381
  * internal/instance: Fix validation of volatile.cpu.nodes by
    @stgraber in #1394
  * Add a function to clone map and use it where appropriate by
    @montag451 in #1397
  * cgo/process_utils: fix 32bit builds by @brauner in #1398
  * Start using goimports by @stgraber in #1399
  * instance/config: Mark user keys as live updatable by @stgraber
    in #1404
  * incus/internal/server/instance/drivers/: Fix incorrect Vars
    file mapping in edk2 driver by @cmspam in #1406
  * zfs: load keys for encrypted datasets during pool import by
    @cyphar in #1384
  * incusd/instance: Lock image access by @stgraber in #1408
  * incus/image: Make use of server-side alias handling by
    @stgraber in #1409
  * incusd/cluster: Validate cluster HTTPS address on join too by
    @stgraber in #1411
  * Remove metadata info from space usage calculation by @presztak
    in #1417
  * Add ability to set the initial owner of a custom volume by
    @presztak in #1415
  * Allow local live-migration between storage pools by @presztak
    in #1410
  * incus: Add aliases completion by @montag451 in #1385
  * golangci: Add local prefixes for goimports by @breml in #1401
  * client: invalidate simple streams cache by @breml in #1424
  * incusd/instances_post: Fix cluster internal migrations by
    @stgraber in #1427
  * Fix DHCP client keeping container up by @stgraber in #1430
  * Add support for VGA console screenshots by @breml in #1431
  * Add --reuse to incus image import by @presztak in #1428
  * Fix random ETag values due to map ordering by @stgraber in
    [#1432]
  * incusd/task: Fix wait group logic (more entries than running
    tasks) by @stgraber in #1433
  * Allow setting aliases during raw image upload by @stgraber in
    [#1434]
  * Fixes an issue when copying a custom volume using the --refresh
    flag by @presztak in #1437
  * Openfga improvements by @stgraber in #1435
  * doc/instance/properties: Add missing instance properties by
    @stgraber in #1439
  * incusd/daemon_storage: Ensure corect symlinks for
    images/backups by @stgraber in #1441
  * incusd/storage/lvm: Handle newer LVM by @stgraber in #1442
  * Tweak rendering of manpage in doc by @stgraber in #1443
  * incusd/storage/lvm: Require 512-bytes physical block size for
    VM images by @stgraber in #1444
  * incusd: Fill ExpiryDate and remove LastUsedDate in
    volumeSnapshotToProtobuf by @presztak in #1448
  * incusd/device/tpm: Wait for swtpm to be ready by @stgraber in
    [#1447]
  * incus: Improve completion for file push and file pull by
    @montag451 in #1445
  * incusd/auth/tls: Restrict config access to non-admin by
    @stgraber in #1451
  * incusd/storage: Handle default disk size in GetInstanceUsage by
    @stgraber in #1452
  * incus: Improve completion for some file sub-commmands by
    @montag451 in #1453
  * incus: Fix completion for profile copy by @montag451 in #1454
  * incus: Add completion for image alias subcommands by @montag451
    in #1457
  * doc/installing: Update Fedora instructions by @stgraber in
    [#1456]
  * Fix gap in validation of pre-existing certificates when
    switching to PKI mode by @stgraber in #1458
  * doc/network_forwards: Split configuration into own table by
    @stgraber in #1460
  * chore: Happy path on the left, early return by @breml in #1461
  * incus: Fix completion for image alias create by @montag451 in
    [#1459]
  * incus/top: Ignore CPU idle time by @stgraber in #1462
  * incus: Display the alias expansion when execution of an alias
    fails by @montag451 in #1464
  * lint: disallow restricted licenses in go-licenses by @breml in
    [#1466]
  * chore: code structure, Go identifier shaddowing by @breml in
    [#1465]
  * incus: Fix alias arguments handling by @montag451 in #1463
  * incus/file/push Use SFTP client instead of file API by
    @HassanAlsamahi in #1468
  * Fix TPM fd leaks and OpenFGA patching issue by @stgraber in
    [#1469]
  * Clarify device override syntax by @stgraber in #1471
  * incusd/auth/openfga: refresh model before applying patches by
    @stgraber in #1472
  * Add authorization scriptlet by @bensmrs in #1412
  * doc: add openSUSE installation instructions by @cyphar in #1475
  * OCI image debugging improvements by @danbiagini in #1478
  * Add function checks to scriptlet validation by @bensmrs in
    [#1484]
  * incus/project: Fix handling of default (unset) project in
    get-current by @irhndt in #1476
  * Translations update from Hosted Weblate by @weblate in #1492
  * Add --force flag to the console command by @presztak in #1491
  * Accept io.Writer in RenderTable by @breml in #1490
  * doc/network_bridge: Fix missing escaping around variable by
    @irhndt in #1493
  * incusd/cluster: Skip project restrictions during join by
    @stgraber in #1497
  * incusd/instance/lxc: Skip instances without idmap allocation
    yet by @stgraber in #1495
  * incusd/storage/drivers/common: Truncate/Discard ahead of sparse
    write by @stgraber in #1496
  * Add AskPassword/AskPasswordOnce to Asker by @breml in #1499
  * Add additional check to Cancel method for ConsoleShow operation
    by @presztak in #1500
  * Improve console disconnections by @stgraber in #1501
  * Fix duplicate OVN load-balancer entries by @stgraber in #1502
  * Improve SFTP performance by @stgraber in #1503
  * incusd/instance_post: Expand profiles in scriptlet context by
    @stgraber in #1504
- remove patches:
  * 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  * 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
</package>
<package pkgid="234dea0acc8b42a0b246486bbb80ea01175b36467f0ec02b228e102296e128f2" name="incus-bash-completion" arch="noarch">
  <version epoch="0" ver="6.7" rel="bp156.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
</package>
<package pkgid="50241363b68b31f1d3217765ca96da06663b1c720977d4be2f413ab8135a354e" name="incus-bash-completion" arch="noarch">
  <version epoch="0" ver="6.8" rel="bp156.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1734091200">- update to 6.8:
  * exec: Consume websocket pings for stderr by @stefanor in #1380
  * incus-simplestreams: Add prune command by @presztak in #1381
  * internal/instance: Fix validation of volatile.cpu.nodes by
    @stgraber in #1394
  * Add a function to clone map and use it where appropriate by
    @montag451 in #1397
  * cgo/process_utils: fix 32bit builds by @brauner in #1398
  * Start using goimports by @stgraber in #1399
  * instance/config: Mark user keys as live updatable by @stgraber
    in #1404
  * incus/internal/server/instance/drivers/: Fix incorrect Vars
    file mapping in edk2 driver by @cmspam in #1406
  * zfs: load keys for encrypted datasets during pool import by
    @cyphar in #1384
  * incusd/instance: Lock image access by @stgraber in #1408
  * incus/image: Make use of server-side alias handling by
    @stgraber in #1409
  * incusd/cluster: Validate cluster HTTPS address on join too by
    @stgraber in #1411
  * Remove metadata info from space usage calculation by @presztak
    in #1417
  * Add ability to set the initial owner of a custom volume by
    @presztak in #1415
  * Allow local live-migration between storage pools by @presztak
    in #1410
  * incus: Add aliases completion by @montag451 in #1385
  * golangci: Add local prefixes for goimports by @breml in #1401
  * client: invalidate simple streams cache by @breml in #1424
  * incusd/instances_post: Fix cluster internal migrations by
    @stgraber in #1427
  * Fix DHCP client keeping container up by @stgraber in #1430
  * Add support for VGA console screenshots by @breml in #1431
  * Add --reuse to incus image import by @presztak in #1428
  * Fix random ETag values due to map ordering by @stgraber in
    [#1432]
  * incusd/task: Fix wait group logic (more entries than running
    tasks) by @stgraber in #1433
  * Allow setting aliases during raw image upload by @stgraber in
    [#1434]
  * Fixes an issue when copying a custom volume using the --refresh
    flag by @presztak in #1437
  * Openfga improvements by @stgraber in #1435
  * doc/instance/properties: Add missing instance properties by
    @stgraber in #1439
  * incusd/daemon_storage: Ensure corect symlinks for
    images/backups by @stgraber in #1441
  * incusd/storage/lvm: Handle newer LVM by @stgraber in #1442
  * Tweak rendering of manpage in doc by @stgraber in #1443
  * incusd/storage/lvm: Require 512-bytes physical block size for
    VM images by @stgraber in #1444
  * incusd: Fill ExpiryDate and remove LastUsedDate in
    volumeSnapshotToProtobuf by @presztak in #1448
  * incusd/device/tpm: Wait for swtpm to be ready by @stgraber in
    [#1447]
  * incus: Improve completion for file push and file pull by
    @montag451 in #1445
  * incusd/auth/tls: Restrict config access to non-admin by
    @stgraber in #1451
  * incusd/storage: Handle default disk size in GetInstanceUsage by
    @stgraber in #1452
  * incus: Improve completion for some file sub-commmands by
    @montag451 in #1453
  * incus: Fix completion for profile copy by @montag451 in #1454
  * incus: Add completion for image alias subcommands by @montag451
    in #1457
  * doc/installing: Update Fedora instructions by @stgraber in
    [#1456]
  * Fix gap in validation of pre-existing certificates when
    switching to PKI mode by @stgraber in #1458
  * doc/network_forwards: Split configuration into own table by
    @stgraber in #1460
  * chore: Happy path on the left, early return by @breml in #1461
  * incus: Fix completion for image alias create by @montag451 in
    [#1459]
  * incus/top: Ignore CPU idle time by @stgraber in #1462
  * incus: Display the alias expansion when execution of an alias
    fails by @montag451 in #1464
  * lint: disallow restricted licenses in go-licenses by @breml in
    [#1466]
  * chore: code structure, Go identifier shaddowing by @breml in
    [#1465]
  * incus: Fix alias arguments handling by @montag451 in #1463
  * incus/file/push Use SFTP client instead of file API by
    @HassanAlsamahi in #1468
  * Fix TPM fd leaks and OpenFGA patching issue by @stgraber in
    [#1469]
  * Clarify device override syntax by @stgraber in #1471
  * incusd/auth/openfga: refresh model before applying patches by
    @stgraber in #1472
  * Add authorization scriptlet by @bensmrs in #1412
  * doc: add openSUSE installation instructions by @cyphar in #1475
  * OCI image debugging improvements by @danbiagini in #1478
  * Add function checks to scriptlet validation by @bensmrs in
    [#1484]
  * incus/project: Fix handling of default (unset) project in
    get-current by @irhndt in #1476
  * Translations update from Hosted Weblate by @weblate in #1492
  * Add --force flag to the console command by @presztak in #1491
  * Accept io.Writer in RenderTable by @breml in #1490
  * doc/network_bridge: Fix missing escaping around variable by
    @irhndt in #1493
  * incusd/cluster: Skip project restrictions during join by
    @stgraber in #1497
  * incusd/instance/lxc: Skip instances without idmap allocation
    yet by @stgraber in #1495
  * incusd/storage/drivers/common: Truncate/Discard ahead of sparse
    write by @stgraber in #1496
  * Add AskPassword/AskPasswordOnce to Asker by @breml in #1499
  * Add additional check to Cancel method for ConsoleShow operation
    by @presztak in #1500
  * Improve console disconnections by @stgraber in #1501
  * Fix duplicate OVN load-balancer entries by @stgraber in #1502
  * Improve SFTP performance by @stgraber in #1503
  * incusd/instance_post: Expand profiles in scriptlet context by
    @stgraber in #1504
- remove patches:
  * 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  * 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
</package>
<package pkgid="daa7e7861ce60274281b8f053880f5099f2f4f1c7ac0c440b15d39db7c28159d" name="incus-fish-completion" arch="noarch">
  <version epoch="0" ver="6.7" rel="bp156.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
</package>
<package pkgid="1587946ffbf5c3cbf83a81018809079458f93416a72fe0c86e81a624f9ab8bb6" name="incus-fish-completion" arch="noarch">
  <version epoch="0" ver="6.8" rel="bp156.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1734091200">- update to 6.8:
  * exec: Consume websocket pings for stderr by @stefanor in #1380
  * incus-simplestreams: Add prune command by @presztak in #1381
  * internal/instance: Fix validation of volatile.cpu.nodes by
    @stgraber in #1394
  * Add a function to clone map and use it where appropriate by
    @montag451 in #1397
  * cgo/process_utils: fix 32bit builds by @brauner in #1398
  * Start using goimports by @stgraber in #1399
  * instance/config: Mark user keys as live updatable by @stgraber
    in #1404
  * incus/internal/server/instance/drivers/: Fix incorrect Vars
    file mapping in edk2 driver by @cmspam in #1406
  * zfs: load keys for encrypted datasets during pool import by
    @cyphar in #1384
  * incusd/instance: Lock image access by @stgraber in #1408
  * incus/image: Make use of server-side alias handling by
    @stgraber in #1409
  * incusd/cluster: Validate cluster HTTPS address on join too by
    @stgraber in #1411
  * Remove metadata info from space usage calculation by @presztak
    in #1417
  * Add ability to set the initial owner of a custom volume by
    @presztak in #1415
  * Allow local live-migration between storage pools by @presztak
    in #1410
  * incus: Add aliases completion by @montag451 in #1385
  * golangci: Add local prefixes for goimports by @breml in #1401
  * client: invalidate simple streams cache by @breml in #1424
  * incusd/instances_post: Fix cluster internal migrations by
    @stgraber in #1427
  * Fix DHCP client keeping container up by @stgraber in #1430
  * Add support for VGA console screenshots by @breml in #1431
  * Add --reuse to incus image import by @presztak in #1428
  * Fix random ETag values due to map ordering by @stgraber in
    [#1432]
  * incusd/task: Fix wait group logic (more entries than running
    tasks) by @stgraber in #1433
  * Allow setting aliases during raw image upload by @stgraber in
    [#1434]
  * Fixes an issue when copying a custom volume using the --refresh
    flag by @presztak in #1437
  * Openfga improvements by @stgraber in #1435
  * doc/instance/properties: Add missing instance properties by
    @stgraber in #1439
  * incusd/daemon_storage: Ensure corect symlinks for
    images/backups by @stgraber in #1441
  * incusd/storage/lvm: Handle newer LVM by @stgraber in #1442
  * Tweak rendering of manpage in doc by @stgraber in #1443
  * incusd/storage/lvm: Require 512-bytes physical block size for
    VM images by @stgraber in #1444
  * incusd: Fill ExpiryDate and remove LastUsedDate in
    volumeSnapshotToProtobuf by @presztak in #1448
  * incusd/device/tpm: Wait for swtpm to be ready by @stgraber in
    [#1447]
  * incus: Improve completion for file push and file pull by
    @montag451 in #1445
  * incusd/auth/tls: Restrict config access to non-admin by
    @stgraber in #1451
  * incusd/storage: Handle default disk size in GetInstanceUsage by
    @stgraber in #1452
  * incus: Improve completion for some file sub-commmands by
    @montag451 in #1453
  * incus: Fix completion for profile copy by @montag451 in #1454
  * incus: Add completion for image alias subcommands by @montag451
    in #1457
  * doc/installing: Update Fedora instructions by @stgraber in
    [#1456]
  * Fix gap in validation of pre-existing certificates when
    switching to PKI mode by @stgraber in #1458
  * doc/network_forwards: Split configuration into own table by
    @stgraber in #1460
  * chore: Happy path on the left, early return by @breml in #1461
  * incus: Fix completion for image alias create by @montag451 in
    [#1459]
  * incus/top: Ignore CPU idle time by @stgraber in #1462
  * incus: Display the alias expansion when execution of an alias
    fails by @montag451 in #1464
  * lint: disallow restricted licenses in go-licenses by @breml in
    [#1466]
  * chore: code structure, Go identifier shaddowing by @breml in
    [#1465]
  * incus: Fix alias arguments handling by @montag451 in #1463
  * incus/file/push Use SFTP client instead of file API by
    @HassanAlsamahi in #1468
  * Fix TPM fd leaks and OpenFGA patching issue by @stgraber in
    [#1469]
  * Clarify device override syntax by @stgraber in #1471
  * incusd/auth/openfga: refresh model before applying patches by
    @stgraber in #1472
  * Add authorization scriptlet by @bensmrs in #1412
  * doc: add openSUSE installation instructions by @cyphar in #1475
  * OCI image debugging improvements by @danbiagini in #1478
  * Add function checks to scriptlet validation by @bensmrs in
    [#1484]
  * incus/project: Fix handling of default (unset) project in
    get-current by @irhndt in #1476
  * Translations update from Hosted Weblate by @weblate in #1492
  * Add --force flag to the console command by @presztak in #1491
  * Accept io.Writer in RenderTable by @breml in #1490
  * doc/network_bridge: Fix missing escaping around variable by
    @irhndt in #1493
  * incusd/cluster: Skip project restrictions during join by
    @stgraber in #1497
  * incusd/instance/lxc: Skip instances without idmap allocation
    yet by @stgraber in #1495
  * incusd/storage/drivers/common: Truncate/Discard ahead of sparse
    write by @stgraber in #1496
  * Add AskPassword/AskPasswordOnce to Asker by @breml in #1499
  * Add additional check to Cancel method for ConsoleShow operation
    by @presztak in #1500
  * Improve console disconnections by @stgraber in #1501
  * Fix duplicate OVN load-balancer entries by @stgraber in #1502
  * Improve SFTP performance by @stgraber in #1503
  * incusd/instance_post: Expand profiles in scriptlet context by
    @stgraber in #1504
- remove patches:
  * 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  * 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
</package>
<package pkgid="76137d94a733231e7980ff69673905acc0ebb468f65eda673678efa65db9c7c5" name="incus-tools" arch="aarch64">
  <version epoch="0" ver="6.7" rel="bp156.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
</package>
<package pkgid="856158e7b0e5d77179e03f193aa18190d53e66a1220e243a9a9aee828fe5158f" name="incus-tools" arch="ppc64le">
  <version epoch="0" ver="6.7" rel="bp156.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
</package>
<package pkgid="2c2bce132ab07570262518d6d9481a0284b065a6cbdb1705acca1ed7e4b6be4b" name="incus-tools" arch="s390x">
  <version epoch="0" ver="6.7" rel="bp156.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
</package>
<package pkgid="911eb5181a76f357eb651013594b48b04c95a2a035ec32b4168605b6db00e568" name="incus-tools" arch="x86_64">
  <version epoch="0" ver="6.7" rel="bp156.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
</package>
<package pkgid="22efa89477a2aa4199ed799349fbf877b6ca908c6a5747d3ab288a07025e0103" name="incus-tools" arch="aarch64">
  <version epoch="0" ver="6.8" rel="bp156.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1734091200">- update to 6.8:
  * exec: Consume websocket pings for stderr by @stefanor in #1380
  * incus-simplestreams: Add prune command by @presztak in #1381
  * internal/instance: Fix validation of volatile.cpu.nodes by
    @stgraber in #1394
  * Add a function to clone map and use it where appropriate by
    @montag451 in #1397
  * cgo/process_utils: fix 32bit builds by @brauner in #1398
  * Start using goimports by @stgraber in #1399
  * instance/config: Mark user keys as live updatable by @stgraber
    in #1404
  * incus/internal/server/instance/drivers/: Fix incorrect Vars
    file mapping in edk2 driver by @cmspam in #1406
  * zfs: load keys for encrypted datasets during pool import by
    @cyphar in #1384
  * incusd/instance: Lock image access by @stgraber in #1408
  * incus/image: Make use of server-side alias handling by
    @stgraber in #1409
  * incusd/cluster: Validate cluster HTTPS address on join too by
    @stgraber in #1411
  * Remove metadata info from space usage calculation by @presztak
    in #1417
  * Add ability to set the initial owner of a custom volume by
    @presztak in #1415
  * Allow local live-migration between storage pools by @presztak
    in #1410
  * incus: Add aliases completion by @montag451 in #1385
  * golangci: Add local prefixes for goimports by @breml in #1401
  * client: invalidate simple streams cache by @breml in #1424
  * incusd/instances_post: Fix cluster internal migrations by
    @stgraber in #1427
  * Fix DHCP client keeping container up by @stgraber in #1430
  * Add support for VGA console screenshots by @breml in #1431
  * Add --reuse to incus image import by @presztak in #1428
  * Fix random ETag values due to map ordering by @stgraber in
    [#1432]
  * incusd/task: Fix wait group logic (more entries than running
    tasks) by @stgraber in #1433
  * Allow setting aliases during raw image upload by @stgraber in
    [#1434]
  * Fixes an issue when copying a custom volume using the --refresh
    flag by @presztak in #1437
  * Openfga improvements by @stgraber in #1435
  * doc/instance/properties: Add missing instance properties by
    @stgraber in #1439
  * incusd/daemon_storage: Ensure corect symlinks for
    images/backups by @stgraber in #1441
  * incusd/storage/lvm: Handle newer LVM by @stgraber in #1442
  * Tweak rendering of manpage in doc by @stgraber in #1443
  * incusd/storage/lvm: Require 512-bytes physical block size for
    VM images by @stgraber in #1444
  * incusd: Fill ExpiryDate and remove LastUsedDate in
    volumeSnapshotToProtobuf by @presztak in #1448
  * incusd/device/tpm: Wait for swtpm to be ready by @stgraber in
    [#1447]
  * incus: Improve completion for file push and file pull by
    @montag451 in #1445
  * incusd/auth/tls: Restrict config access to non-admin by
    @stgraber in #1451
  * incusd/storage: Handle default disk size in GetInstanceUsage by
    @stgraber in #1452
  * incus: Improve completion for some file sub-commmands by
    @montag451 in #1453
  * incus: Fix completion for profile copy by @montag451 in #1454
  * incus: Add completion for image alias subcommands by @montag451
    in #1457
  * doc/installing: Update Fedora instructions by @stgraber in
    [#1456]
  * Fix gap in validation of pre-existing certificates when
    switching to PKI mode by @stgraber in #1458
  * doc/network_forwards: Split configuration into own table by
    @stgraber in #1460
  * chore: Happy path on the left, early return by @breml in #1461
  * incus: Fix completion for image alias create by @montag451 in
    [#1459]
  * incus/top: Ignore CPU idle time by @stgraber in #1462
  * incus: Display the alias expansion when execution of an alias
    fails by @montag451 in #1464
  * lint: disallow restricted licenses in go-licenses by @breml in
    [#1466]
  * chore: code structure, Go identifier shaddowing by @breml in
    [#1465]
  * incus: Fix alias arguments handling by @montag451 in #1463
  * incus/file/push Use SFTP client instead of file API by
    @HassanAlsamahi in #1468
  * Fix TPM fd leaks and OpenFGA patching issue by @stgraber in
    [#1469]
  * Clarify device override syntax by @stgraber in #1471
  * incusd/auth/openfga: refresh model before applying patches by
    @stgraber in #1472
  * Add authorization scriptlet by @bensmrs in #1412
  * doc: add openSUSE installation instructions by @cyphar in #1475
  * OCI image debugging improvements by @danbiagini in #1478
  * Add function checks to scriptlet validation by @bensmrs in
    [#1484]
  * incus/project: Fix handling of default (unset) project in
    get-current by @irhndt in #1476
  * Translations update from Hosted Weblate by @weblate in #1492
  * Add --force flag to the console command by @presztak in #1491
  * Accept io.Writer in RenderTable by @breml in #1490
  * doc/network_bridge: Fix missing escaping around variable by
    @irhndt in #1493
  * incusd/cluster: Skip project restrictions during join by
    @stgraber in #1497
  * incusd/instance/lxc: Skip instances without idmap allocation
    yet by @stgraber in #1495
  * incusd/storage/drivers/common: Truncate/Discard ahead of sparse
    write by @stgraber in #1496
  * Add AskPassword/AskPasswordOnce to Asker by @breml in #1499
  * Add additional check to Cancel method for ConsoleShow operation
    by @presztak in #1500
  * Improve console disconnections by @stgraber in #1501
  * Fix duplicate OVN load-balancer entries by @stgraber in #1502
  * Improve SFTP performance by @stgraber in #1503
  * incusd/instance_post: Expand profiles in scriptlet context by
    @stgraber in #1504
- remove patches:
  * 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  * 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
</package>
<package pkgid="e83a2a82acda2d4f77195f18c560fe099bff74a6e74154bdc99f940b54b9b6f3" name="incus-tools" arch="ppc64le">
  <version epoch="0" ver="6.8" rel="bp156.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1734091200">- update to 6.8:
  * exec: Consume websocket pings for stderr by @stefanor in #1380
  * incus-simplestreams: Add prune command by @presztak in #1381
  * internal/instance: Fix validation of volatile.cpu.nodes by
    @stgraber in #1394
  * Add a function to clone map and use it where appropriate by
    @montag451 in #1397
  * cgo/process_utils: fix 32bit builds by @brauner in #1398
  * Start using goimports by @stgraber in #1399
  * instance/config: Mark user keys as live updatable by @stgraber
    in #1404
  * incus/internal/server/instance/drivers/: Fix incorrect Vars
    file mapping in edk2 driver by @cmspam in #1406
  * zfs: load keys for encrypted datasets during pool import by
    @cyphar in #1384
  * incusd/instance: Lock image access by @stgraber in #1408
  * incus/image: Make use of server-side alias handling by
    @stgraber in #1409
  * incusd/cluster: Validate cluster HTTPS address on join too by
    @stgraber in #1411
  * Remove metadata info from space usage calculation by @presztak
    in #1417
  * Add ability to set the initial owner of a custom volume by
    @presztak in #1415
  * Allow local live-migration between storage pools by @presztak
    in #1410
  * incus: Add aliases completion by @montag451 in #1385
  * golangci: Add local prefixes for goimports by @breml in #1401
  * client: invalidate simple streams cache by @breml in #1424
  * incusd/instances_post: Fix cluster internal migrations by
    @stgraber in #1427
  * Fix DHCP client keeping container up by @stgraber in #1430
  * Add support for VGA console screenshots by @breml in #1431
  * Add --reuse to incus image import by @presztak in #1428
  * Fix random ETag values due to map ordering by @stgraber in
    [#1432]
  * incusd/task: Fix wait group logic (more entries than running
    tasks) by @stgraber in #1433
  * Allow setting aliases during raw image upload by @stgraber in
    [#1434]
  * Fixes an issue when copying a custom volume using the --refresh
    flag by @presztak in #1437
  * Openfga improvements by @stgraber in #1435
  * doc/instance/properties: Add missing instance properties by
    @stgraber in #1439
  * incusd/daemon_storage: Ensure corect symlinks for
    images/backups by @stgraber in #1441
  * incusd/storage/lvm: Handle newer LVM by @stgraber in #1442
  * Tweak rendering of manpage in doc by @stgraber in #1443
  * incusd/storage/lvm: Require 512-bytes physical block size for
    VM images by @stgraber in #1444
  * incusd: Fill ExpiryDate and remove LastUsedDate in
    volumeSnapshotToProtobuf by @presztak in #1448
  * incusd/device/tpm: Wait for swtpm to be ready by @stgraber in
    [#1447]
  * incus: Improve completion for file push and file pull by
    @montag451 in #1445
  * incusd/auth/tls: Restrict config access to non-admin by
    @stgraber in #1451
  * incusd/storage: Handle default disk size in GetInstanceUsage by
    @stgraber in #1452
  * incus: Improve completion for some file sub-commmands by
    @montag451 in #1453
  * incus: Fix completion for profile copy by @montag451 in #1454
  * incus: Add completion for image alias subcommands by @montag451
    in #1457
  * doc/installing: Update Fedora instructions by @stgraber in
    [#1456]
  * Fix gap in validation of pre-existing certificates when
    switching to PKI mode by @stgraber in #1458
  * doc/network_forwards: Split configuration into own table by
    @stgraber in #1460
  * chore: Happy path on the left, early return by @breml in #1461
  * incus: Fix completion for image alias create by @montag451 in
    [#1459]
  * incus/top: Ignore CPU idle time by @stgraber in #1462
  * incus: Display the alias expansion when execution of an alias
    fails by @montag451 in #1464
  * lint: disallow restricted licenses in go-licenses by @breml in
    [#1466]
  * chore: code structure, Go identifier shaddowing by @breml in
    [#1465]
  * incus: Fix alias arguments handling by @montag451 in #1463
  * incus/file/push Use SFTP client instead of file API by
    @HassanAlsamahi in #1468
  * Fix TPM fd leaks and OpenFGA patching issue by @stgraber in
    [#1469]
  * Clarify device override syntax by @stgraber in #1471
  * incusd/auth/openfga: refresh model before applying patches by
    @stgraber in #1472
  * Add authorization scriptlet by @bensmrs in #1412
  * doc: add openSUSE installation instructions by @cyphar in #1475
  * OCI image debugging improvements by @danbiagini in #1478
  * Add function checks to scriptlet validation by @bensmrs in
    [#1484]
  * incus/project: Fix handling of default (unset) project in
    get-current by @irhndt in #1476
  * Translations update from Hosted Weblate by @weblate in #1492
  * Add --force flag to the console command by @presztak in #1491
  * Accept io.Writer in RenderTable by @breml in #1490
  * doc/network_bridge: Fix missing escaping around variable by
    @irhndt in #1493
  * incusd/cluster: Skip project restrictions during join by
    @stgraber in #1497
  * incusd/instance/lxc: Skip instances without idmap allocation
    yet by @stgraber in #1495
  * incusd/storage/drivers/common: Truncate/Discard ahead of sparse
    write by @stgraber in #1496
  * Add AskPassword/AskPasswordOnce to Asker by @breml in #1499
  * Add additional check to Cancel method for ConsoleShow operation
    by @presztak in #1500
  * Improve console disconnections by @stgraber in #1501
  * Fix duplicate OVN load-balancer entries by @stgraber in #1502
  * Improve SFTP performance by @stgraber in #1503
  * incusd/instance_post: Expand profiles in scriptlet context by
    @stgraber in #1504
- remove patches:
  * 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  * 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
</package>
<package pkgid="feaaa4d311c115a8581025b6ad376c454dd29b05d1236791fbe88bc1733aff29" name="incus-tools" arch="s390x">
  <version epoch="0" ver="6.8" rel="bp156.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1734091200">- update to 6.8:
  * exec: Consume websocket pings for stderr by @stefanor in #1380
  * incus-simplestreams: Add prune command by @presztak in #1381
  * internal/instance: Fix validation of volatile.cpu.nodes by
    @stgraber in #1394
  * Add a function to clone map and use it where appropriate by
    @montag451 in #1397
  * cgo/process_utils: fix 32bit builds by @brauner in #1398
  * Start using goimports by @stgraber in #1399
  * instance/config: Mark user keys as live updatable by @stgraber
    in #1404
  * incus/internal/server/instance/drivers/: Fix incorrect Vars
    file mapping in edk2 driver by @cmspam in #1406
  * zfs: load keys for encrypted datasets during pool import by
    @cyphar in #1384
  * incusd/instance: Lock image access by @stgraber in #1408
  * incus/image: Make use of server-side alias handling by
    @stgraber in #1409
  * incusd/cluster: Validate cluster HTTPS address on join too by
    @stgraber in #1411
  * Remove metadata info from space usage calculation by @presztak
    in #1417
  * Add ability to set the initial owner of a custom volume by
    @presztak in #1415
  * Allow local live-migration between storage pools by @presztak
    in #1410
  * incus: Add aliases completion by @montag451 in #1385
  * golangci: Add local prefixes for goimports by @breml in #1401
  * client: invalidate simple streams cache by @breml in #1424
  * incusd/instances_post: Fix cluster internal migrations by
    @stgraber in #1427
  * Fix DHCP client keeping container up by @stgraber in #1430
  * Add support for VGA console screenshots by @breml in #1431
  * Add --reuse to incus image import by @presztak in #1428
  * Fix random ETag values due to map ordering by @stgraber in
    [#1432]
  * incusd/task: Fix wait group logic (more entries than running
    tasks) by @stgraber in #1433
  * Allow setting aliases during raw image upload by @stgraber in
    [#1434]
  * Fixes an issue when copying a custom volume using the --refresh
    flag by @presztak in #1437
  * Openfga improvements by @stgraber in #1435
  * doc/instance/properties: Add missing instance properties by
    @stgraber in #1439
  * incusd/daemon_storage: Ensure corect symlinks for
    images/backups by @stgraber in #1441
  * incusd/storage/lvm: Handle newer LVM by @stgraber in #1442
  * Tweak rendering of manpage in doc by @stgraber in #1443
  * incusd/storage/lvm: Require 512-bytes physical block size for
    VM images by @stgraber in #1444
  * incusd: Fill ExpiryDate and remove LastUsedDate in
    volumeSnapshotToProtobuf by @presztak in #1448
  * incusd/device/tpm: Wait for swtpm to be ready by @stgraber in
    [#1447]
  * incus: Improve completion for file push and file pull by
    @montag451 in #1445
  * incusd/auth/tls: Restrict config access to non-admin by
    @stgraber in #1451
  * incusd/storage: Handle default disk size in GetInstanceUsage by
    @stgraber in #1452
  * incus: Improve completion for some file sub-commmands by
    @montag451 in #1453
  * incus: Fix completion for profile copy by @montag451 in #1454
  * incus: Add completion for image alias subcommands by @montag451
    in #1457
  * doc/installing: Update Fedora instructions by @stgraber in
    [#1456]
  * Fix gap in validation of pre-existing certificates when
    switching to PKI mode by @stgraber in #1458
  * doc/network_forwards: Split configuration into own table by
    @stgraber in #1460
  * chore: Happy path on the left, early return by @breml in #1461
  * incus: Fix completion for image alias create by @montag451 in
    [#1459]
  * incus/top: Ignore CPU idle time by @stgraber in #1462
  * incus: Display the alias expansion when execution of an alias
    fails by @montag451 in #1464
  * lint: disallow restricted licenses in go-licenses by @breml in
    [#1466]
  * chore: code structure, Go identifier shaddowing by @breml in
    [#1465]
  * incus: Fix alias arguments handling by @montag451 in #1463
  * incus/file/push Use SFTP client instead of file API by
    @HassanAlsamahi in #1468
  * Fix TPM fd leaks and OpenFGA patching issue by @stgraber in
    [#1469]
  * Clarify device override syntax by @stgraber in #1471
  * incusd/auth/openfga: refresh model before applying patches by
    @stgraber in #1472
  * Add authorization scriptlet by @bensmrs in #1412
  * doc: add openSUSE installation instructions by @cyphar in #1475
  * OCI image debugging improvements by @danbiagini in #1478
  * Add function checks to scriptlet validation by @bensmrs in
    [#1484]
  * incus/project: Fix handling of default (unset) project in
    get-current by @irhndt in #1476
  * Translations update from Hosted Weblate by @weblate in #1492
  * Add --force flag to the console command by @presztak in #1491
  * Accept io.Writer in RenderTable by @breml in #1490
  * doc/network_bridge: Fix missing escaping around variable by
    @irhndt in #1493
  * incusd/cluster: Skip project restrictions during join by
    @stgraber in #1497
  * incusd/instance/lxc: Skip instances without idmap allocation
    yet by @stgraber in #1495
  * incusd/storage/drivers/common: Truncate/Discard ahead of sparse
    write by @stgraber in #1496
  * Add AskPassword/AskPasswordOnce to Asker by @breml in #1499
  * Add additional check to Cancel method for ConsoleShow operation
    by @presztak in #1500
  * Improve console disconnections by @stgraber in #1501
  * Fix duplicate OVN load-balancer entries by @stgraber in #1502
  * Improve SFTP performance by @stgraber in #1503
  * incusd/instance_post: Expand profiles in scriptlet context by
    @stgraber in #1504
- remove patches:
  * 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  * 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
</package>
<package pkgid="e349d998543451b4ea75e8d1203e3d4d28fdf2b18663ae3e684044db1bed3ae9" name="incus-tools" arch="x86_64">
  <version epoch="0" ver="6.8" rel="bp156.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1734091200">- update to 6.8:
  * exec: Consume websocket pings for stderr by @stefanor in #1380
  * incus-simplestreams: Add prune command by @presztak in #1381
  * internal/instance: Fix validation of volatile.cpu.nodes by
    @stgraber in #1394
  * Add a function to clone map and use it where appropriate by
    @montag451 in #1397
  * cgo/process_utils: fix 32bit builds by @brauner in #1398
  * Start using goimports by @stgraber in #1399
  * instance/config: Mark user keys as live updatable by @stgraber
    in #1404
  * incus/internal/server/instance/drivers/: Fix incorrect Vars
    file mapping in edk2 driver by @cmspam in #1406
  * zfs: load keys for encrypted datasets during pool import by
    @cyphar in #1384
  * incusd/instance: Lock image access by @stgraber in #1408
  * incus/image: Make use of server-side alias handling by
    @stgraber in #1409
  * incusd/cluster: Validate cluster HTTPS address on join too by
    @stgraber in #1411
  * Remove metadata info from space usage calculation by @presztak
    in #1417
  * Add ability to set the initial owner of a custom volume by
    @presztak in #1415
  * Allow local live-migration between storage pools by @presztak
    in #1410
  * incus: Add aliases completion by @montag451 in #1385
  * golangci: Add local prefixes for goimports by @breml in #1401
  * client: invalidate simple streams cache by @breml in #1424
  * incusd/instances_post: Fix cluster internal migrations by
    @stgraber in #1427
  * Fix DHCP client keeping container up by @stgraber in #1430
  * Add support for VGA console screenshots by @breml in #1431
  * Add --reuse to incus image import by @presztak in #1428
  * Fix random ETag values due to map ordering by @stgraber in
    [#1432]
  * incusd/task: Fix wait group logic (more entries than running
    tasks) by @stgraber in #1433
  * Allow setting aliases during raw image upload by @stgraber in
    [#1434]
  * Fixes an issue when copying a custom volume using the --refresh
    flag by @presztak in #1437
  * Openfga improvements by @stgraber in #1435
  * doc/instance/properties: Add missing instance properties by
    @stgraber in #1439
  * incusd/daemon_storage: Ensure corect symlinks for
    images/backups by @stgraber in #1441
  * incusd/storage/lvm: Handle newer LVM by @stgraber in #1442
  * Tweak rendering of manpage in doc by @stgraber in #1443
  * incusd/storage/lvm: Require 512-bytes physical block size for
    VM images by @stgraber in #1444
  * incusd: Fill ExpiryDate and remove LastUsedDate in
    volumeSnapshotToProtobuf by @presztak in #1448
  * incusd/device/tpm: Wait for swtpm to be ready by @stgraber in
    [#1447]
  * incus: Improve completion for file push and file pull by
    @montag451 in #1445
  * incusd/auth/tls: Restrict config access to non-admin by
    @stgraber in #1451
  * incusd/storage: Handle default disk size in GetInstanceUsage by
    @stgraber in #1452
  * incus: Improve completion for some file sub-commmands by
    @montag451 in #1453
  * incus: Fix completion for profile copy by @montag451 in #1454
  * incus: Add completion for image alias subcommands by @montag451
    in #1457
  * doc/installing: Update Fedora instructions by @stgraber in
    [#1456]
  * Fix gap in validation of pre-existing certificates when
    switching to PKI mode by @stgraber in #1458
  * doc/network_forwards: Split configuration into own table by
    @stgraber in #1460
  * chore: Happy path on the left, early return by @breml in #1461
  * incus: Fix completion for image alias create by @montag451 in
    [#1459]
  * incus/top: Ignore CPU idle time by @stgraber in #1462
  * incus: Display the alias expansion when execution of an alias
    fails by @montag451 in #1464
  * lint: disallow restricted licenses in go-licenses by @breml in
    [#1466]
  * chore: code structure, Go identifier shaddowing by @breml in
    [#1465]
  * incus: Fix alias arguments handling by @montag451 in #1463
  * incus/file/push Use SFTP client instead of file API by
    @HassanAlsamahi in #1468
  * Fix TPM fd leaks and OpenFGA patching issue by @stgraber in
    [#1469]
  * Clarify device override syntax by @stgraber in #1471
  * incusd/auth/openfga: refresh model before applying patches by
    @stgraber in #1472
  * Add authorization scriptlet by @bensmrs in #1412
  * doc: add openSUSE installation instructions by @cyphar in #1475
  * OCI image debugging improvements by @danbiagini in #1478
  * Add function checks to scriptlet validation by @bensmrs in
    [#1484]
  * incus/project: Fix handling of default (unset) project in
    get-current by @irhndt in #1476
  * Translations update from Hosted Weblate by @weblate in #1492
  * Add --force flag to the console command by @presztak in #1491
  * Accept io.Writer in RenderTable by @breml in #1490
  * doc/network_bridge: Fix missing escaping around variable by
    @irhndt in #1493
  * incusd/cluster: Skip project restrictions during join by
    @stgraber in #1497
  * incusd/instance/lxc: Skip instances without idmap allocation
    yet by @stgraber in #1495
  * incusd/storage/drivers/common: Truncate/Discard ahead of sparse
    write by @stgraber in #1496
  * Add AskPassword/AskPasswordOnce to Asker by @breml in #1499
  * Add additional check to Cancel method for ConsoleShow operation
    by @presztak in #1500
  * Improve console disconnections by @stgraber in #1501
  * Fix duplicate OVN load-balancer entries by @stgraber in #1502
  * Improve SFTP performance by @stgraber in #1503
  * incusd/instance_post: Expand profiles in scriptlet context by
    @stgraber in #1504
- remove patches:
  * 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  * 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
</package>
<package pkgid="9a0ea6d7bb603d9a721fa87a1c95508cf43fa41eb1be5d7007b357bba8f5cf77" name="incus-zsh-completion" arch="noarch">
  <version epoch="0" ver="6.7" rel="bp156.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
</package>
<package pkgid="70c50b01b3dd972d24eb9a8aed24a8cedd296b3a892599cc019686fb75f480a0" name="incus-zsh-completion" arch="noarch">
  <version epoch="0" ver="6.8" rel="bp156.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729512000">- Rework packaging to match recommended packaging from doc/packaging.md and
  &lt;https://github.com/zabbly/incus/tree/stable/systemd&gt;.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729684800">- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1731585600">- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1731672000">- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338
  * incusd/scriptlet: Make set_target fail with invalid members #1339
  * Export QMP functions #1340
  * incusd/network/ovn: Add support to ipv4.dhcp.ranges #1341
  * internal/server: Log QMP interaction to a file #1345
  * incusd/instance/qemu: Log QEMU command line #1346
  * Improve cluster instance placement #1344
  * incusd/instance_logs: Update log file list #1347
  * Add infrastructure for OVN events #1349
  * Fix QEMU feature checks during startup #1350
  * incusd/instance/lxc: Fix LXCFS per-instance path #1352
  * doc/idmap: Clarify subuid/subgid configuration #1353
  * incusd/instance/qmp: Fix logging with no log file #1355
  * Add a GetOIDCTokens() method #1357
  * Add get-current to show current project #1356
  * incus/file/create: Use SFTP client instead of file API #1354
  * internal/instance: Allow 0 as value to limits.cpu.nodes #1358
  * Translations update from Hosted Weblate #1361
  * Translations update from Hosted Weblate #1362
  * Translations update from Hosted Weblate #1368
  * Improve agent interface listing performance #1367
  * Make incus top output configurable through options #1370
  * Automatic live-migration to balance load on cluster #1369
  * gomod: Update dependencies #1372
  * Add refresh-exclude-older flag to only transfer new snapshots during instance/volume refresh #1365
  * incusd/instances/publish: Fix base metadata #1374
  * Fix TPM with long instance names #1377
  * Don't BGP advertise OVN load-balancers when all backends are offline #1376
  * incusd/instance/qemu: Don't take over operations on console retrieval #1379
  * Tweak to cluster internal relocation #1378</changelog>
  <changelog author="Charles Miller &lt;charlesmillerspam@gmail.com&gt;" date="1732190400">- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once &lt;https://github.com/lxc/incus/pull/1406&gt; is merged.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276800">- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. &lt;https://github.com/lxc/incus/pull/1384&gt;
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1732276801">- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with &gt;100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1734091200">- update to 6.8:
  * exec: Consume websocket pings for stderr by @stefanor in #1380
  * incus-simplestreams: Add prune command by @presztak in #1381
  * internal/instance: Fix validation of volatile.cpu.nodes by
    @stgraber in #1394
  * Add a function to clone map and use it where appropriate by
    @montag451 in #1397
  * cgo/process_utils: fix 32bit builds by @brauner in #1398
  * Start using goimports by @stgraber in #1399
  * instance/config: Mark user keys as live updatable by @stgraber
    in #1404
  * incus/internal/server/instance/drivers/: Fix incorrect Vars
    file mapping in edk2 driver by @cmspam in #1406
  * zfs: load keys for encrypted datasets during pool import by
    @cyphar in #1384
  * incusd/instance: Lock image access by @stgraber in #1408
  * incus/image: Make use of server-side alias handling by
    @stgraber in #1409
  * incusd/cluster: Validate cluster HTTPS address on join too by
    @stgraber in #1411
  * Remove metadata info from space usage calculation by @presztak
    in #1417
  * Add ability to set the initial owner of a custom volume by
    @presztak in #1415
  * Allow local live-migration between storage pools by @presztak
    in #1410
  * incus: Add aliases completion by @montag451 in #1385
  * golangci: Add local prefixes for goimports by @breml in #1401
  * client: invalidate simple streams cache by @breml in #1424
  * incusd/instances_post: Fix cluster internal migrations by
    @stgraber in #1427
  * Fix DHCP client keeping container up by @stgraber in #1430
  * Add support for VGA console screenshots by @breml in #1431
  * Add --reuse to incus image import by @presztak in #1428
  * Fix random ETag values due to map ordering by @stgraber in
    [#1432]
  * incusd/task: Fix wait group logic (more entries than running
    tasks) by @stgraber in #1433
  * Allow setting aliases during raw image upload by @stgraber in
    [#1434]
  * Fixes an issue when copying a custom volume using the --refresh
    flag by @presztak in #1437
  * Openfga improvements by @stgraber in #1435
  * doc/instance/properties: Add missing instance properties by
    @stgraber in #1439
  * incusd/daemon_storage: Ensure corect symlinks for
    images/backups by @stgraber in #1441
  * incusd/storage/lvm: Handle newer LVM by @stgraber in #1442
  * Tweak rendering of manpage in doc by @stgraber in #1443
  * incusd/storage/lvm: Require 512-bytes physical block size for
    VM images by @stgraber in #1444
  * incusd: Fill ExpiryDate and remove LastUsedDate in
    volumeSnapshotToProtobuf by @presztak in #1448
  * incusd/device/tpm: Wait for swtpm to be ready by @stgraber in
    [#1447]
  * incus: Improve completion for file push and file pull by
    @montag451 in #1445
  * incusd/auth/tls: Restrict config access to non-admin by
    @stgraber in #1451
  * incusd/storage: Handle default disk size in GetInstanceUsage by
    @stgraber in #1452
  * incus: Improve completion for some file sub-commmands by
    @montag451 in #1453
  * incus: Fix completion for profile copy by @montag451 in #1454
  * incus: Add completion for image alias subcommands by @montag451
    in #1457
  * doc/installing: Update Fedora instructions by @stgraber in
    [#1456]
  * Fix gap in validation of pre-existing certificates when
    switching to PKI mode by @stgraber in #1458
  * doc/network_forwards: Split configuration into own table by
    @stgraber in #1460
  * chore: Happy path on the left, early return by @breml in #1461
  * incus: Fix completion for image alias create by @montag451 in
    [#1459]
  * incus/top: Ignore CPU idle time by @stgraber in #1462
  * incus: Display the alias expansion when execution of an alias
    fails by @montag451 in #1464
  * lint: disallow restricted licenses in go-licenses by @breml in
    [#1466]
  * chore: code structure, Go identifier shaddowing by @breml in
    [#1465]
  * incus: Fix alias arguments handling by @montag451 in #1463
  * incus/file/push Use SFTP client instead of file API by
    @HassanAlsamahi in #1468
  * Fix TPM fd leaks and OpenFGA patching issue by @stgraber in
    [#1469]
  * Clarify device override syntax by @stgraber in #1471
  * incusd/auth/openfga: refresh model before applying patches by
    @stgraber in #1472
  * Add authorization scriptlet by @bensmrs in #1412
  * doc: add openSUSE installation instructions by @cyphar in #1475
  * OCI image debugging improvements by @danbiagini in #1478
  * Add function checks to scriptlet validation by @bensmrs in
    [#1484]
  * incus/project: Fix handling of default (unset) project in
    get-current by @irhndt in #1476
  * Translations update from Hosted Weblate by @weblate in #1492
  * Add --force flag to the console command by @presztak in #1491
  * Accept io.Writer in RenderTable by @breml in #1490
  * doc/network_bridge: Fix missing escaping around variable by
    @irhndt in #1493
  * incusd/cluster: Skip project restrictions during join by
    @stgraber in #1497
  * incusd/instance/lxc: Skip instances without idmap allocation
    yet by @stgraber in #1495
  * incusd/storage/drivers/common: Truncate/Discard ahead of sparse
    write by @stgraber in #1496
  * Add AskPassword/AskPasswordOnce to Asker by @breml in #1499
  * Add additional check to Cancel method for ConsoleShow operation
    by @presztak in #1500
  * Improve console disconnections by @stgraber in #1501
  * Fix duplicate OVN load-balancer entries by @stgraber in #1502
  * Improve SFTP performance by @stgraber in #1503
  * incusd/instance_post: Expand profiles in scriptlet context by
    @stgraber in #1504
- remove patches:
  * 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  * 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch</changelog>
</package>
<package pkgid="c558f525d0cf9b9cbd483d1341a28dd4e7bd3e8cbafefc3bd7efff56fcf73e7b" name="iodine" arch="aarch64">
  <version epoch="0" ver="0.7.0" rel="bp156.6.3.1"/>
  <changelog author="wagner-thomas@gmx.at" date="1431172800">- start iodine and iodined after network.target
- added rc-link</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1482926400">- fixed unbalanced quotes in service files bnc#1017236</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1489406400">- Remove insserv requirement and macro to fix Factory build.
- Add fdupes check to avoid duplicate man page warning.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Thomas Wagner &lt;wagner-thomas@gmx.at&gt;" date="1546776000">- added dependency for ifconfig</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622894400">- Change to using systemd-sysusers</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623153600">- Use noun phrasing in descriptions.
- Use more modern rpm macros.
- Reduce sh code emissions of %service_*.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * iodine.service
  * iodined.service</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1693742400">- Comment out ProtectClock in hardening, (boo#1206835). Modified:
  * iodine.service.
  * iodined.service.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1723032000">- Comment out PrivateDevices in hardening,
  (boo#1216238 and boo#1228788). Modified:
  * iodine.service.
  * iodined.service.</changelog>
</package>
<package pkgid="4bacc31a54db588d1002fbef7afad390f79469172035d9ff30f25df4bc49d4e7" name="iodine" arch="i586">
  <version epoch="0" ver="0.7.0" rel="bp156.6.3.1"/>
  <changelog author="wagner-thomas@gmx.at" date="1431172800">- start iodine and iodined after network.target
- added rc-link</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1482926400">- fixed unbalanced quotes in service files bnc#1017236</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1489406400">- Remove insserv requirement and macro to fix Factory build.
- Add fdupes check to avoid duplicate man page warning.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Thomas Wagner &lt;wagner-thomas@gmx.at&gt;" date="1546776000">- added dependency for ifconfig</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622894400">- Change to using systemd-sysusers</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623153600">- Use noun phrasing in descriptions.
- Use more modern rpm macros.
- Reduce sh code emissions of %service_*.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * iodine.service
  * iodined.service</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1693742400">- Comment out ProtectClock in hardening, (boo#1206835). Modified:
  * iodine.service.
  * iodined.service.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1723032000">- Comment out PrivateDevices in hardening,
  (boo#1216238 and boo#1228788). Modified:
  * iodine.service.
  * iodined.service.</changelog>
</package>
<package pkgid="df4b6d2cefeeed6a1efbcf7cb98d621efaceabbcde2c9e5be2c4f00c47f949e5" name="iodine" arch="ppc64le">
  <version epoch="0" ver="0.7.0" rel="bp156.6.3.1"/>
  <changelog author="wagner-thomas@gmx.at" date="1431172800">- start iodine and iodined after network.target
- added rc-link</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1482926400">- fixed unbalanced quotes in service files bnc#1017236</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1489406400">- Remove insserv requirement and macro to fix Factory build.
- Add fdupes check to avoid duplicate man page warning.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Thomas Wagner &lt;wagner-thomas@gmx.at&gt;" date="1546776000">- added dependency for ifconfig</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622894400">- Change to using systemd-sysusers</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623153600">- Use noun phrasing in descriptions.
- Use more modern rpm macros.
- Reduce sh code emissions of %service_*.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * iodine.service
  * iodined.service</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1693742400">- Comment out ProtectClock in hardening, (boo#1206835). Modified:
  * iodine.service.
  * iodined.service.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1723032000">- Comment out PrivateDevices in hardening,
  (boo#1216238 and boo#1228788). Modified:
  * iodine.service.
  * iodined.service.</changelog>
</package>
<package pkgid="8184009e38f85b9cbb9bdf6056173d2a061bb8106a21c9e134496ec46741f3be" name="iodine" arch="s390x">
  <version epoch="0" ver="0.7.0" rel="bp156.6.3.1"/>
  <changelog author="wagner-thomas@gmx.at" date="1431172800">- start iodine and iodined after network.target
- added rc-link</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1482926400">- fixed unbalanced quotes in service files bnc#1017236</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1489406400">- Remove insserv requirement and macro to fix Factory build.
- Add fdupes check to avoid duplicate man page warning.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Thomas Wagner &lt;wagner-thomas@gmx.at&gt;" date="1546776000">- added dependency for ifconfig</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622894400">- Change to using systemd-sysusers</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623153600">- Use noun phrasing in descriptions.
- Use more modern rpm macros.
- Reduce sh code emissions of %service_*.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * iodine.service
  * iodined.service</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1693742400">- Comment out ProtectClock in hardening, (boo#1206835). Modified:
  * iodine.service.
  * iodined.service.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1723032000">- Comment out PrivateDevices in hardening,
  (boo#1216238 and boo#1228788). Modified:
  * iodine.service.
  * iodined.service.</changelog>
</package>
<package pkgid="e2eaf96cd6f2de777c199135c6a697fd639c1bf3d2843a147e1808c6cb7566a9" name="iodine" arch="src">
  <version epoch="0" ver="0.7.0" rel="bp156.6.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1348056000">- Initial build.
- Add iodine-fix-makefile-prefix.patch: Modify default install
  prefix.
- Add systemd service and sysconfig files for both server and
  client.</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1409140800">- separate user for iodined
- added a default config (bnc#857181) with a chroot directory
- fixed license string
- Update to 0.7.0:
  * Artial IPv6 support (#107)
    Client can connect to iodined through an relaying IPv6
  nameserver. Server only supports IPv4 for now.
  Traffic inside tunnel is IPv4.
  * dd socket activation for systemd, by Michael Scherer.
  * Add automated lookup of external ip (via -n auto).
  * Bugfix for OS X (Can't assign requested address)
  * Fix DNS tunneling bug caused by uninitialized variable, #94
  * Handle spaces when entering password interactively, fixes
    [#93]. Patch by Hagar.
  * Add -R option to set OpenBSD routing domain for the DNS
    socket. Patch by laurent at gouloum fr, fixes #95.
  * Add android patches and makefile, from Marcel Bokhorst,
    fixes #105.
  * Added missing break in iodine.c, by Pavel Pergamenshchik,
    [#108].
  * A number of minor patches from Frank Denis, Gregor Herrmann
    and Barak A. Pearlmutter.
  + Testcase compilation fixes for OS X and FreeBSD
  + Do not let sockets be inherited by sub-processes, fixes
    [#99].
  + Add unspecified RR type (called PRIVATE; id 65399, in
    private use range). For servers with RFC3597 support.
    Fixes #97.
    + Fix authentication bypass vulnerability; found by Oscar
    Reparaz.</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1431172800">- start iodine and iodined after network.target
- added rc-link</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1482926400">- fixed unbalanced quotes in service files bnc#1017236</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1489406400">- Remove insserv requirement and macro to fix Factory build.
- Add fdupes check to avoid duplicate man page warning.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Thomas Wagner &lt;wagner-thomas@gmx.at&gt;" date="1546776000">- added dependency for ifconfig</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622894400">- Change to using systemd-sysusers</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623153600">- Use noun phrasing in descriptions.
- Use more modern rpm macros.
- Reduce sh code emissions of %service_*.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * iodine.service
  * iodined.service</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1693742400">- Comment out ProtectClock in hardening, (boo#1206835). Modified:
  * iodine.service.
  * iodined.service.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1723032000">- Comment out PrivateDevices in hardening,
  (boo#1216238 and boo#1228788). Modified:
  * iodine.service.
  * iodined.service.</changelog>
</package>
<package pkgid="fbbc2bb7deb1eb307025587f30126724d30c1b684c8e28d077a48bd640a05edb" name="iodine" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="bp156.6.3.1"/>
  <changelog author="wagner-thomas@gmx.at" date="1431172800">- start iodine and iodined after network.target
- added rc-link</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1482926400">- fixed unbalanced quotes in service files bnc#1017236</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1489406400">- Remove insserv requirement and macro to fix Factory build.
- Add fdupes check to avoid duplicate man page warning.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Thomas Wagner &lt;wagner-thomas@gmx.at&gt;" date="1546776000">- added dependency for ifconfig</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622894400">- Change to using systemd-sysusers</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623153600">- Use noun phrasing in descriptions.
- Use more modern rpm macros.
- Reduce sh code emissions of %service_*.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * iodine.service
  * iodined.service</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1693742400">- Comment out ProtectClock in hardening, (boo#1206835). Modified:
  * iodine.service.
  * iodined.service.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1723032000">- Comment out PrivateDevices in hardening,
  (boo#1216238 and boo#1228788). Modified:
  * iodine.service.
  * iodined.service.</changelog>
</package>
<package pkgid="e257c67c84ee155b4bff64ca8e359309ae258419f5e086902c31326874f499bb" name="iptraf-ng" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="bp156.4.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1349611200">- iptraf-ng-1.1.3.1-kernel-v3.5-kill-off-token-ring-support.patch
  to remove TokenRing support which was removed in Linux 3.5
- move to pristine upstream tarball</changelog>
  <changelog author="jengelh@inai.de" date="1364472000">- Update to new git snapshot 1.1.3.1+git49
  * remove TokenRing and ISDN support
  * 802.1ad and QinQ VLAN handling
  * restore functionality of iptraf -B (bnc#812080)
- Remove iptraf-ng-1.1.3.1-kernel-v3.5-kill-off-token-ring-support.patch
  (merged upstream)
- Add 0001-build-prefer-ncurses6-and-wide.patch
- Depend on 3.1 headers (source uses ETH_P_QINQ1)</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.1.4
  * update all rates not only the visible ones
  * add 802.1ad / 802.1ah / QinQ ethertypes
- Removed 0001-build-prefer-ncurses6-and-wide.patch
  (merged upstream)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1379505600">- fix "Floating point exception" in tcplog_flowrate_msg(), adds
  iptraf-ng-1.1.4-fix-Floating-point-exception-in-tcplog_flowra.patch
  from Fedora [bnc#841156]</changelog>
  <changelog author="jslaby@suse.com" date="1439380800">- add build-use-wide-version-of-lpanel-when-needed.patch (bnc#940207)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578830400">- Employ new homepage URLs.
- Rename the SRPM from iptraf to iptraf-ng. Effectively no change
  for the produced BRPMs.
- Add 0001-ifstats-make-sort-by-ifname-the-only-mode-of-operati.patch
  from upstream.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591790400">- Update to release 1.2.0
  * A set of minor bugfixes.
  * Fix CPU hogging if the interface gets removed [rhbz#1572750]
- Drop iptraf-ng-1.1.4-fix-Floating-point-exception-in-tcplog_flowra.patch,
  build-use-wide-version-of-lpanel-when-needed.patch,
  0001-ifstats-make-sort-by-ifname-the-only-mode-of-operati.patch
  (merged)
- Add 0001-Revert-TPACKET_V3-mlock-mmap-ed-address-space-into-R.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 1.2.1:
  * Makefile: protect mandatory compile flags
  * packet capture: don't reuse socket for multiple receive functions
  * TPACKET_V[23]: continue even if mlock() fails
- remove 0001-Revert-TPACKET_V3-mlock-mmap-ed-address-space-into-R.patch:
  fixed differently upstream</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1605096000">- Fix build error on SLE12 (%make_build not defined)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732190400">- Update to release 1.2.2
  * serv.c: validate loading/saving/entry of port ranges
  * limit interface name lengths to IFNAMSIZ [CVE-2024-52949]</changelog>
</package>
<package pkgid="21172871a1d5e471222c247763c744181945624d6a83afe2e78030c7c874064b" name="iptraf-ng" arch="i586">
  <version epoch="0" ver="1.2.2" rel="bp156.4.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1349611200">- iptraf-ng-1.1.3.1-kernel-v3.5-kill-off-token-ring-support.patch
  to remove TokenRing support which was removed in Linux 3.5
- move to pristine upstream tarball</changelog>
  <changelog author="jengelh@inai.de" date="1364472000">- Update to new git snapshot 1.1.3.1+git49
  * remove TokenRing and ISDN support
  * 802.1ad and QinQ VLAN handling
  * restore functionality of iptraf -B (bnc#812080)
- Remove iptraf-ng-1.1.3.1-kernel-v3.5-kill-off-token-ring-support.patch
  (merged upstream)
- Add 0001-build-prefer-ncurses6-and-wide.patch
- Depend on 3.1 headers (source uses ETH_P_QINQ1)</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.1.4
  * update all rates not only the visible ones
  * add 802.1ad / 802.1ah / QinQ ethertypes
- Removed 0001-build-prefer-ncurses6-and-wide.patch
  (merged upstream)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1379505600">- fix "Floating point exception" in tcplog_flowrate_msg(), adds
  iptraf-ng-1.1.4-fix-Floating-point-exception-in-tcplog_flowra.patch
  from Fedora [bnc#841156]</changelog>
  <changelog author="jslaby@suse.com" date="1439380800">- add build-use-wide-version-of-lpanel-when-needed.patch (bnc#940207)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578830400">- Employ new homepage URLs.
- Rename the SRPM from iptraf to iptraf-ng. Effectively no change
  for the produced BRPMs.
- Add 0001-ifstats-make-sort-by-ifname-the-only-mode-of-operati.patch
  from upstream.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591790400">- Update to release 1.2.0
  * A set of minor bugfixes.
  * Fix CPU hogging if the interface gets removed [rhbz#1572750]
- Drop iptraf-ng-1.1.4-fix-Floating-point-exception-in-tcplog_flowra.patch,
  build-use-wide-version-of-lpanel-when-needed.patch,
  0001-ifstats-make-sort-by-ifname-the-only-mode-of-operati.patch
  (merged)
- Add 0001-Revert-TPACKET_V3-mlock-mmap-ed-address-space-into-R.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 1.2.1:
  * Makefile: protect mandatory compile flags
  * packet capture: don't reuse socket for multiple receive functions
  * TPACKET_V[23]: continue even if mlock() fails
- remove 0001-Revert-TPACKET_V3-mlock-mmap-ed-address-space-into-R.patch:
  fixed differently upstream</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1605096000">- Fix build error on SLE12 (%make_build not defined)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732190400">- Update to release 1.2.2
  * serv.c: validate loading/saving/entry of port ranges
  * limit interface name lengths to IFNAMSIZ [CVE-2024-52949]</changelog>
</package>
<package pkgid="74ed81649cd33c9a09d511419f0f1501b7e4ba33331ca6813d7a5602c2c65a90" name="iptraf-ng" arch="ppc64le">
  <version epoch="0" ver="1.2.2" rel="bp156.4.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1349611200">- iptraf-ng-1.1.3.1-kernel-v3.5-kill-off-token-ring-support.patch
  to remove TokenRing support which was removed in Linux 3.5
- move to pristine upstream tarball</changelog>
  <changelog author="jengelh@inai.de" date="1364472000">- Update to new git snapshot 1.1.3.1+git49
  * remove TokenRing and ISDN support
  * 802.1ad and QinQ VLAN handling
  * restore functionality of iptraf -B (bnc#812080)
- Remove iptraf-ng-1.1.3.1-kernel-v3.5-kill-off-token-ring-support.patch
  (merged upstream)
- Add 0001-build-prefer-ncurses6-and-wide.patch
- Depend on 3.1 headers (source uses ETH_P_QINQ1)</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.1.4
  * update all rates not only the visible ones
  * add 802.1ad / 802.1ah / QinQ ethertypes
- Removed 0001-build-prefer-ncurses6-and-wide.patch
  (merged upstream)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1379505600">- fix "Floating point exception" in tcplog_flowrate_msg(), adds
  iptraf-ng-1.1.4-fix-Floating-point-exception-in-tcplog_flowra.patch
  from Fedora [bnc#841156]</changelog>
  <changelog author="jslaby@suse.com" date="1439380800">- add build-use-wide-version-of-lpanel-when-needed.patch (bnc#940207)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578830400">- Employ new homepage URLs.
- Rename the SRPM from iptraf to iptraf-ng. Effectively no change
  for the produced BRPMs.
- Add 0001-ifstats-make-sort-by-ifname-the-only-mode-of-operati.patch
  from upstream.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591790400">- Update to release 1.2.0
  * A set of minor bugfixes.
  * Fix CPU hogging if the interface gets removed [rhbz#1572750]
- Drop iptraf-ng-1.1.4-fix-Floating-point-exception-in-tcplog_flowra.patch,
  build-use-wide-version-of-lpanel-when-needed.patch,
  0001-ifstats-make-sort-by-ifname-the-only-mode-of-operati.patch
  (merged)
- Add 0001-Revert-TPACKET_V3-mlock-mmap-ed-address-space-into-R.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 1.2.1:
  * Makefile: protect mandatory compile flags
  * packet capture: don't reuse socket for multiple receive functions
  * TPACKET_V[23]: continue even if mlock() fails
- remove 0001-Revert-TPACKET_V3-mlock-mmap-ed-address-space-into-R.patch:
  fixed differently upstream</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1605096000">- Fix build error on SLE12 (%make_build not defined)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732190400">- Update to release 1.2.2
  * serv.c: validate loading/saving/entry of port ranges
  * limit interface name lengths to IFNAMSIZ [CVE-2024-52949]</changelog>
</package>
<package pkgid="3be606c2a905d533c38dbc63990885784f53d1e65ccb650db14db21dc5047f7a" name="iptraf-ng" arch="s390x">
  <version epoch="0" ver="1.2.2" rel="bp156.4.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1349611200">- iptraf-ng-1.1.3.1-kernel-v3.5-kill-off-token-ring-support.patch
  to remove TokenRing support which was removed in Linux 3.5
- move to pristine upstream tarball</changelog>
  <changelog author="jengelh@inai.de" date="1364472000">- Update to new git snapshot 1.1.3.1+git49
  * remove TokenRing and ISDN support
  * 802.1ad and QinQ VLAN handling
  * restore functionality of iptraf -B (bnc#812080)
- Remove iptraf-ng-1.1.3.1-kernel-v3.5-kill-off-token-ring-support.patch
  (merged upstream)
- Add 0001-build-prefer-ncurses6-and-wide.patch
- Depend on 3.1 headers (source uses ETH_P_QINQ1)</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.1.4
  * update all rates not only the visible ones
  * add 802.1ad / 802.1ah / QinQ ethertypes
- Removed 0001-build-prefer-ncurses6-and-wide.patch
  (merged upstream)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1379505600">- fix "Floating point exception" in tcplog_flowrate_msg(), adds
  iptraf-ng-1.1.4-fix-Floating-point-exception-in-tcplog_flowra.patch
  from Fedora [bnc#841156]</changelog>
  <changelog author="jslaby@suse.com" date="1439380800">- add build-use-wide-version-of-lpanel-when-needed.patch (bnc#940207)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578830400">- Employ new homepage URLs.
- Rename the SRPM from iptraf to iptraf-ng. Effectively no change
  for the produced BRPMs.
- Add 0001-ifstats-make-sort-by-ifname-the-only-mode-of-operati.patch
  from upstream.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591790400">- Update to release 1.2.0
  * A set of minor bugfixes.
  * Fix CPU hogging if the interface gets removed [rhbz#1572750]
- Drop iptraf-ng-1.1.4-fix-Floating-point-exception-in-tcplog_flowra.patch,
  build-use-wide-version-of-lpanel-when-needed.patch,
  0001-ifstats-make-sort-by-ifname-the-only-mode-of-operati.patch
  (merged)
- Add 0001-Revert-TPACKET_V3-mlock-mmap-ed-address-space-into-R.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 1.2.1:
  * Makefile: protect mandatory compile flags
  * packet capture: don't reuse socket for multiple receive functions
  * TPACKET_V[23]: continue even if mlock() fails
- remove 0001-Revert-TPACKET_V3-mlock-mmap-ed-address-space-into-R.patch:
  fixed differently upstream</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1605096000">- Fix build error on SLE12 (%make_build not defined)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732190400">- Update to release 1.2.2
  * serv.c: validate loading/saving/entry of port ranges
  * limit interface name lengths to IFNAMSIZ [CVE-2024-52949]</changelog>
</package>
<package pkgid="964fbdf3183e4cc96d9b605549898683ad1862394d4809e82cd44c3d078a2be1" name="iptraf-ng" arch="src">
  <version epoch="0" ver="1.2.2" rel="bp156.4.3.1"/>
  <changelog author="puzel@suse.cz" date="1257940800">- iptraf-3.0.0-fix-promisc-crash.patch (bnc#548485)</changelog>
  <changelog author="rguenther@suse.de" date="1266062400">- fix harmless buffer-overflow to fix build with GCC 4.5</changelog>
  <changelog author="puzel@novell.com" date="1301918400">- switch to iptraf-ng (thanks jengelh@medozas.de)
- drop all patches (merged upstream)</changelog>
  <changelog author="jengelh@medozas.de" date="1301918401">- Run spec-beautifier</changelog>
  <changelog author="jengelh@medozas.de" date="1303300800">- Name the binary package iptraf-ng</changelog>
  <changelog author="vcizek@suse.com" date="1314878400">- fixed segfault caused by off-by-one allocation error (bnc#711726)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="puzel@suse.com" date="1323950400">- install /var/lib/iptraf-ng directory (bnc#736900)
- fix executing rvnamed daemon (bnc#737032)
  - add fix-calling-rvnamed.patch</changelog>
  <changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.1.2
  * New RFC1071-based IP checksum implementation
  * Various fixes for IPv6 port statistics and byte counting,
  interfaces with long names, PPP handling
  * Make capturing on TUN interfaces work
  * Support GRE tunnels</changelog>
  <changelog author="jengelh@inai.de" date="1338465600">- Update to new upstream release 1.1.3.1
  * support SIT tunnels
  * fix checksumming for odd-sized IPv4 packets
- iptraf-1.0.2-segfault.patch rendered obsolete by commit b3eec3f</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1349611200">- iptraf-ng-1.1.3.1-kernel-v3.5-kill-off-token-ring-support.patch
  to remove TokenRing support which was removed in Linux 3.5
- move to pristine upstream tarball</changelog>
  <changelog author="jengelh@inai.de" date="1364472000">- Update to new git snapshot 1.1.3.1+git49
  * remove TokenRing and ISDN support
  * 802.1ad and QinQ VLAN handling
  * restore functionality of iptraf -B (bnc#812080)
- Remove iptraf-ng-1.1.3.1-kernel-v3.5-kill-off-token-ring-support.patch
  (merged upstream)
- Add 0001-build-prefer-ncurses6-and-wide.patch
- Depend on 3.1 headers (source uses ETH_P_QINQ1)</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.1.4
  * update all rates not only the visible ones
  * add 802.1ad / 802.1ah / QinQ ethertypes
- Removed 0001-build-prefer-ncurses6-and-wide.patch
  (merged upstream)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1379505600">- fix "Floating point exception" in tcplog_flowrate_msg(), adds
  iptraf-ng-1.1.4-fix-Floating-point-exception-in-tcplog_flowra.patch
  from Fedora [bnc#841156]</changelog>
  <changelog author="jslaby@suse.com" date="1439380800">- add build-use-wide-version-of-lpanel-when-needed.patch (bnc#940207)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578830400">- Employ new homepage URLs.
- Rename the SRPM from iptraf to iptraf-ng. Effectively no change
  for the produced BRPMs.
- Add 0001-ifstats-make-sort-by-ifname-the-only-mode-of-operati.patch
  from upstream.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591790400">- Update to release 1.2.0
  * A set of minor bugfixes.
  * Fix CPU hogging if the interface gets removed [rhbz#1572750]
- Drop iptraf-ng-1.1.4-fix-Floating-point-exception-in-tcplog_flowra.patch,
  build-use-wide-version-of-lpanel-when-needed.patch,
  0001-ifstats-make-sort-by-ifname-the-only-mode-of-operati.patch
  (merged)
- Add 0001-Revert-TPACKET_V3-mlock-mmap-ed-address-space-into-R.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 1.2.1:
  * Makefile: protect mandatory compile flags
  * packet capture: don't reuse socket for multiple receive functions
  * TPACKET_V[23]: continue even if mlock() fails
- remove 0001-Revert-TPACKET_V3-mlock-mmap-ed-address-space-into-R.patch:
  fixed differently upstream</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1605096000">- Fix build error on SLE12 (%make_build not defined)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732190400">- Update to release 1.2.2
  * serv.c: validate loading/saving/entry of port ranges
  * limit interface name lengths to IFNAMSIZ [CVE-2024-52949]</changelog>
</package>
<package pkgid="cf10079915e64ba2e4779529e18cd93252a1e4c7a08acb4d0e3119a9d6fe7e7d" name="iptraf-ng" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="bp156.4.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1349611200">- iptraf-ng-1.1.3.1-kernel-v3.5-kill-off-token-ring-support.patch
  to remove TokenRing support which was removed in Linux 3.5
- move to pristine upstream tarball</changelog>
  <changelog author="jengelh@inai.de" date="1364472000">- Update to new git snapshot 1.1.3.1+git49
  * remove TokenRing and ISDN support
  * 802.1ad and QinQ VLAN handling
  * restore functionality of iptraf -B (bnc#812080)
- Remove iptraf-ng-1.1.3.1-kernel-v3.5-kill-off-token-ring-support.patch
  (merged upstream)
- Add 0001-build-prefer-ncurses6-and-wide.patch
- Depend on 3.1 headers (source uses ETH_P_QINQ1)</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.1.4
  * update all rates not only the visible ones
  * add 802.1ad / 802.1ah / QinQ ethertypes
- Removed 0001-build-prefer-ncurses6-and-wide.patch
  (merged upstream)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1379505600">- fix "Floating point exception" in tcplog_flowrate_msg(), adds
  iptraf-ng-1.1.4-fix-Floating-point-exception-in-tcplog_flowra.patch
  from Fedora [bnc#841156]</changelog>
  <changelog author="jslaby@suse.com" date="1439380800">- add build-use-wide-version-of-lpanel-when-needed.patch (bnc#940207)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578830400">- Employ new homepage URLs.
- Rename the SRPM from iptraf to iptraf-ng. Effectively no change
  for the produced BRPMs.
- Add 0001-ifstats-make-sort-by-ifname-the-only-mode-of-operati.patch
  from upstream.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591790400">- Update to release 1.2.0
  * A set of minor bugfixes.
  * Fix CPU hogging if the interface gets removed [rhbz#1572750]
- Drop iptraf-ng-1.1.4-fix-Floating-point-exception-in-tcplog_flowra.patch,
  build-use-wide-version-of-lpanel-when-needed.patch,
  0001-ifstats-make-sort-by-ifname-the-only-mode-of-operati.patch
  (merged)
- Add 0001-Revert-TPACKET_V3-mlock-mmap-ed-address-space-into-R.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 1.2.1:
  * Makefile: protect mandatory compile flags
  * packet capture: don't reuse socket for multiple receive functions
  * TPACKET_V[23]: continue even if mlock() fails
- remove 0001-Revert-TPACKET_V3-mlock-mmap-ed-address-space-into-R.patch:
  fixed differently upstream</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1605096000">- Fix build error on SLE12 (%make_build not defined)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732190400">- Update to release 1.2.2
  * serv.c: validate loading/saving/entry of port ranges
  * limit interface name lengths to IFNAMSIZ [CVE-2024-52949]</changelog>
</package>
<package pkgid="0c9f40cf4a91536f98e45bf3c30a038c0b18f7bfd2faf53810e77dea13a87c43" name="java-11-openj9" arch="aarch64">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="030f40cc2310e7547ff10ca84f0e4e6c94b9c2eea79de526da8b081d25f5102b" name="java-11-openj9" arch="ppc64le">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="8ff18c82c2277d5b78a352efa50f5ce3e8f4df4dd29055b409385393c8e05946" name="java-11-openj9" arch="s390x">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="047f9e3b1e03e43c36118020996b59a2c8110481544b3157957d4db1b815e345" name="java-11-openj9" arch="src">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="4e9c1619ade38411c20ba3b4b7205ba2f9b36aaeaa07961aa8ea6578f7177440" name="java-11-openj9" arch="x86_64">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="b441ca36b7c56512e6600a89f352631665e4b0426bb88effb36dc22f316ab73e" name="java-11-openj9" arch="aarch64">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="46e4375f3bc0a1cf45335cc18c949638e27b6a2ad0fa96a0134c26c4c03aff74" name="java-11-openj9" arch="ppc64le">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="f5325c02c20f55873f377a9f394ff6a934a4ec2145807dfb03373148cfc12ee6" name="java-11-openj9" arch="s390x">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="702afe05ffbafd9b443400e1d7b58890a72098b2e8dd955431d6d8126cd5779f" name="java-11-openj9" arch="src">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="9a8aed4c369e1ba3f56f1dafb1adf336057d310bcdd3f6a6fb903b8f84024887" name="java-11-openj9" arch="x86_64">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="f81143c19aea46ba46917c384733e83ca9b0ef57b04da16cbdc13f74568fb4a7" name="java-11-openj9-demo" arch="aarch64">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="dd5a5ac40575bafe5ad195102b6601d66f57526b0b7d80baba5d38b75000ae22" name="java-11-openj9-demo" arch="ppc64le">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="c90233648cff1696ae5f0954ab3ee607b35d6e8e8474fd5e2ab873ebe3b52fa7" name="java-11-openj9-demo" arch="s390x">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="773c928d4dfd85523a814c0a0355dcd8997ab43ca6ed295867c8ebbca421ee41" name="java-11-openj9-demo" arch="x86_64">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="d0841f2a2b766f583ae3ab0146f7d0c758e3206cca67c347d46f90d50108e219" name="java-11-openj9-demo" arch="aarch64">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="ab9eb584eba687f0bcc333fee6cd1bbb811c38f8a127111bd12c204e7a0b02ad" name="java-11-openj9-demo" arch="ppc64le">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="c7219b57f38f6df9a9b5b1b9f45834080be3f2aa87801f7a49ed40f8f25b9832" name="java-11-openj9-demo" arch="s390x">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="3f6601fb2ac13ee478a20fdc41aa8ef46d22db4283cc990235661e2dd56ff8f5" name="java-11-openj9-demo" arch="x86_64">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="0cfde75cad0ca796bfe0c4ca413699df61fe5141ed7981cc0fff16b3c90a25d1" name="java-11-openj9-devel" arch="aarch64">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="b9d68ee3b2b17f56520ece62525bb422bb81e49a6e977dd831b425e3f39f21c8" name="java-11-openj9-devel" arch="ppc64le">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="8b6219f0ddf2b1984630cbf9fa081ca938d15f38dbdf8cb8165be19ffee66e35" name="java-11-openj9-devel" arch="s390x">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="9829011d225b5580345e97054c90f455519d6d2a9992964912f0272bba9df826" name="java-11-openj9-devel" arch="x86_64">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="ec624709003f84282ca4193047535896e86744ccf9cfb19fcb9ba31bcdd6c909" name="java-11-openj9-devel" arch="aarch64">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="0a62fb07ddaac4de6c282c770e3212cc9a162776c16a368094b131849d803c18" name="java-11-openj9-devel" arch="ppc64le">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="f693e51fe41e2c07bc53d91db9ece5353cb337180ce6868e77812eb59bcb117b" name="java-11-openj9-devel" arch="s390x">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="343f03f630a9efcac882c335fdf501f3ce688e07c16fc2daa15b6007921516ec" name="java-11-openj9-devel" arch="x86_64">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="680603c85a2bdec2917caa185a30d5c22951f5382186f6c5b199f1923442eff9" name="java-11-openj9-headless" arch="aarch64">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="e9b6e219c3f0c4f426a78b6e3dc3dff9ef20ff08973a143f673b4edd4adb73c5" name="java-11-openj9-headless" arch="ppc64le">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="78b4b514bd5a1305078a8da6518fb4c002bc8204272b15b628b7ca49a8479f01" name="java-11-openj9-headless" arch="s390x">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="61097986d93735492b7841b834b2eb71e898d7892a6e74395de77b64154fbea2" name="java-11-openj9-headless" arch="x86_64">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="0c7e57213182b667942d83c98ed70acf9b2b3150bd27515c624ed6e2cc22621b" name="java-11-openj9-headless" arch="aarch64">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="6ab883cb813f254e14a00f19822f9e795a1866236d473e62a4fcd9fc4f3aa05f" name="java-11-openj9-headless" arch="ppc64le">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="26ab63008e5e7bc2d8176045f5abcb5c3fa3ae15aa914cff3a5d77cb95b71aef" name="java-11-openj9-headless" arch="s390x">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="750189cde8b672f0e7c6ca87cd21108fd134585e05acd73697c8c5c6a66fa1f0" name="java-11-openj9-headless" arch="x86_64">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="6130ab0f46e537897cb19ee48071a1485d56fd1de62fed3ae40652f61328f001" name="java-11-openj9-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="d618d05ca8f84e8a5171513910e86bdcce336ca57b60aa14907a5fa5843f166a" name="java-11-openj9-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="7d53989e70d6d0be02f663f3ab722370b1fba74db26bb9be76ffc8815418b1bd" name="java-11-openj9-jmods" arch="aarch64">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="7f69bb505b60a1a81f3ead18495ca892b43b43ba4afc0d74676b6f0666edfad3" name="java-11-openj9-jmods" arch="ppc64le">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="7712aa51410bc7550ec499465f2402ec268b0eac9f9c175bce2feb228a04be7c" name="java-11-openj9-jmods" arch="s390x">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="630f5849511b9211c06a9438f0e4724f929c4f33d17c0c57b7d761e2226b9138" name="java-11-openj9-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="04e3f57aaaf32d513fee33654847c63916520825eeb51c1a76d21bd9df928a0b" name="java-11-openj9-jmods" arch="aarch64">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="51158262ea9c70f2acfb117e6605b1335e2af10edd4e89e6c5afc9e19d29d1a0" name="java-11-openj9-jmods" arch="ppc64le">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="cdfabe8a8fcd9ed61c5740aed5cfa4928fd41fdd39baf86afe119e6d4b53c298" name="java-11-openj9-jmods" arch="s390x">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="2f4c9a1c79dec46cffbca6f94dc94ba8c70886126b68f274e8d9e52cf0d46018" name="java-11-openj9-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="573a679700cd0cd5085e6d30413f4d8ed5920d7445f07b3c404e4efa325bda54" name="java-11-openj9-src" arch="aarch64">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="fee13c1781bf99a005d241c4329a0bd77b79db73f500e529f3e2b92ed551c678" name="java-11-openj9-src" arch="ppc64le">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="d090d8ff94ba41096fbf18a70e85ef4c7be13d81745837e2d32687fbe99fa18d" name="java-11-openj9-src" arch="s390x">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="9a98d0157cb6514670b0088dd17d0a6b7a334af874be7a74c7a930c019502561" name="java-11-openj9-src" arch="x86_64">
  <version epoch="0" ver="11.0.26.0" rel="bp156.4.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1624017600">- Remove the forcing of DWARF version 4, since the libdwarf in
  factory works correctly with this build and DWARF5 symbol format</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1635854400">- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine
  * including Oracle July 2021 and October 2021 CPU changes
    (bsc#1188564, bsc#1188565, bsc#1188566, bsc#1191901,
    bsc#1191909, bsc#1191910, bsc#1191911, bsc#1191912,
    bsc#1191913, bsc#1191903, bsc#1191904, bsc#1191914,
    bsc#1191906)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.29
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * maybe-uninitialized.patch
  * omr-no-return-in-nonvoid-function.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646049600">- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine
  * including Oracle January 2022 CPU changes (bsc#1194925,
    bsc#1194926, bsc#1194927, bsc#1194928, bsc#1194929, bsc#1194930,
    bsc#1194931, bsc#1194932, bsc#1194933, bsc#1194934, bsc#1194935,
    bsc#1194937, bsc#1194939, bsc#1194940, bsc#1194941)
  * OpenJ9 changes see
    https://www.eclipse.org/openj9/docs/version0.30.1
- Added patch:
  * libdwarf-fix.patch
    + fix build with different versions of libdwarf</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine
  * Fixes bsc#1198935, CVE-2021-41041: unverified methods can be
    invoked using MethodHandles
  * Including Oracle April 2022 CPU fixes
    CVE-2022-21426 (bsc#1198672), CVE-2022-21434 (bsc#1198674),
    CVE-2022-21443 (bsc#1198675), CVE-2022-21476 (bsc#1198671),
    CVE-2022-21496 (bsc#1198673)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="4379ce6d4ee84442e3a61ebffc188081c2b9902ea784d9200fc1dfca3b46f1f9" name="java-11-openj9-src" arch="aarch64">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="42848379b0fb724ff11a0e1b3f485d2bb3aacae38baa10f78b0f073677496fd3" name="java-11-openj9-src" arch="ppc64le">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="5125cf276a8951ebc8b1eda509977d9f6398399155c1c96cce812cf4af18df84" name="java-11-openj9-src" arch="s390x">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="a97e731397e44fb202fb5927aaf640ab99ea176ea70e74fac1c1b3fea316ee24" name="java-11-openj9-src" arch="x86_64">
  <version epoch="0" ver="11.0.28.0" rel="bp156.4.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine
  * Including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22045 (bsc#1213481),
    CVE-2023-22049 (bsc#1213482), CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700654400">- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Remove the possibility to put back removes JavaEE modules, since
  our Java stack does not need this hack any more
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + not useful with the JavaEE modules removed</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21085 (bsc#1222984),
    CVE-2024-21068 (bsc#1222983)
- Including OpenJ9/OMR specific fix:
  * CVE-2024-3933 (bsc#1225470)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING
- Modified patch:
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21144 (bsc#1228050),
    CVE-2024-21147 (bsc#1228052), CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">-  removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 11.0.27 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 11.0.28 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-30761 (bsc#1246580), CVE-2025-50059 (bsc#1246575),
    CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="00c2ef95d386d8dc48ec05da30b6e69b4504b90fd46308de5949baa4907d5fe5" name="java-17-openj9" arch="aarch64">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="8120e0b0b612dfa62058f5aa75973e04348f4397a2e09342969855d1942e2634" name="java-17-openj9" arch="ppc64le">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="c716e090507627c54d347adfba720fab0c1b60f611f1efc2e3a8a488436d684b" name="java-17-openj9" arch="s390x">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="491a4f617e1c641e212c07c3698bc8bd2a80dced4a72e5483284ccd56053cece" name="java-17-openj9" arch="src">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="b1e3790c922f22dc0a096c2750e878c48cf8775f4ae862bcd8eb42a4a7df67c2" name="java-17-openj9" arch="x86_64">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="6429efccff1fe08182001dba1435af947d6ce3103b23ec867a74ad2cabd64547" name="java-17-openj9" arch="aarch64">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="1e01d4dc1fdee74c802a072ab7263e1137e0967275daecb58ecf690977ddaf01" name="java-17-openj9" arch="ppc64le">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="42883683014f4a05fcf40e4c0203b5c26612e803a222ee8df7b40849b80129b9" name="java-17-openj9" arch="s390x">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="949d9350836aae7d2f6e50c796d13f05379d5fe3ec9820e7055668cd1a2f26a0" name="java-17-openj9" arch="src">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="d1d7db752fbaf5bef4385ec299877d5c681ca4f4e085db3310679df1a24878b0" name="java-17-openj9" arch="x86_64">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="908d04907b0d11256b88c43f7eab3cde0c202aaa818a1a5faec1a083e8ca287a" name="java-17-openj9-demo" arch="aarch64">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="755e8882c74b494670100b0dd55e0b60e5a4ba61a2612023e17338123e7cbf4d" name="java-17-openj9-demo" arch="ppc64le">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="e354200d3f098b7a687e8ea4fc22ae4bebfb75fcc5394a26c555c62df3a40398" name="java-17-openj9-demo" arch="s390x">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="5e5f90336e2eff62b50eff8434872dd2b50aaa59459354642ced3e5cfd822d3b" name="java-17-openj9-demo" arch="x86_64">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="9fb08455ac8ce82f29cb201d26abd4d082e87bfdef42a7d94ac414aab9505e92" name="java-17-openj9-demo" arch="aarch64">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="362002d56870dded304eb2f82562e577ad2c25d3a1d50263d6d8c6483285d9f5" name="java-17-openj9-demo" arch="ppc64le">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="73ed195ef6756a0afd756384028088f2af3e3ba98d7e487f83269d0064ded335" name="java-17-openj9-demo" arch="s390x">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="c3d97ef82df847452555d206b07b7c55e188d4f6ae351384bc235affde01cf10" name="java-17-openj9-demo" arch="x86_64">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="b85bb50074406a2a774901627032078f4c9de04c3a461bcbbbea891ad2e14c1b" name="java-17-openj9-devel" arch="aarch64">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="e9984ae6d4de8c735f0d5b20a126dcb6ffb582c6f10f9feb897440cd2abf1b32" name="java-17-openj9-devel" arch="ppc64le">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="c8fbd0f5dd8477f910a774ad2b7fa50ec383f69ff44036000492851d34bc5c32" name="java-17-openj9-devel" arch="s390x">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="c426a4114c497bfe4722b52e92095947231730f7d44ebdb093903fa91a465c98" name="java-17-openj9-devel" arch="x86_64">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="9c5ee0fe44604dc76ab36f087cf59a2bf652a121f55bafdd505642bac012d103" name="java-17-openj9-devel" arch="aarch64">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="c0771be8724e75270d8dbb1836a0e21f2503cfbf5d16408bf1c11ea0725a816a" name="java-17-openj9-devel" arch="ppc64le">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="b38e21c6722c32289c001b850fcc568f34ef31871a817385b93a9b317dbcc0c1" name="java-17-openj9-devel" arch="s390x">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="5a9fcdb91706eafd25a843c93b210de183e820cbad8f4fc62338b415cabf8503" name="java-17-openj9-devel" arch="x86_64">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="4bec227b60a474f75980d809dcccb3b37f36a83a48724ab05e4e4f051a391a4f" name="java-17-openj9-headless" arch="aarch64">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="509205bb74ad879d6ce15dd7d54f51e6b05ef37e6be201583e9c091c5376a770" name="java-17-openj9-headless" arch="ppc64le">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="80fedd2c20a35014593e449ca9500b60b73c0b2e1452407d79fb391d6a891217" name="java-17-openj9-headless" arch="s390x">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="858b127d97120929023fde923c3220c9d458704c3ae7c123aceaca83e32b17c7" name="java-17-openj9-headless" arch="x86_64">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="bc5f3cd77d983fcf5418dc5ce09e0ee8b17c446d49cfbd5179fd9b0991835ee5" name="java-17-openj9-headless" arch="aarch64">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="01b342a00a3652ca89b58735f8cca14ab90f8e00448985134af621c503443580" name="java-17-openj9-headless" arch="ppc64le">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="8e3d4fb6a64616ed9bdf877230fa335262a5d248131018f0773027c971fe32f2" name="java-17-openj9-headless" arch="s390x">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="8a501e33e8c282c66311372904044d54a29f80fa78dc2bfaf3d2886d5af7a642" name="java-17-openj9-headless" arch="x86_64">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="d2835283f98fa7dc0010d80b36caef7300185f480b1fe742a3a919f3a88677da" name="java-17-openj9-javadoc" arch="noarch">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="1d8f96fbc2b81dcf70c0268aa1813f49aa3d7cffdf34a5cc5001a8bf6702952f" name="java-17-openj9-javadoc" arch="noarch">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="dbbf9e547b1cc52fee75a28b4b4bc82c47e1dfb0f48b69ccdbf611221737a4a7" name="java-17-openj9-jmods" arch="aarch64">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="212711ae1153f604fa75455e8f9d6d75a4921b9b6938dd4a953cd3b7dc0de848" name="java-17-openj9-jmods" arch="ppc64le">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="645c5fc480806b60f5bcc089ff1860dbc28d25bd1cd93e17e3b9326e388bfddb" name="java-17-openj9-jmods" arch="s390x">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="4a9c7a6bd3ca039b471403611d707416c7055f88eccb34d7ab609878e4193e97" name="java-17-openj9-jmods" arch="x86_64">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="2963ca461c0a27144f54d84f1f3e2700deeb79f8c089beb52d21811ac8223e04" name="java-17-openj9-jmods" arch="aarch64">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="d71697048651393cff26b2b221cd683c1072ed56632ed12d72026ba0607398d0" name="java-17-openj9-jmods" arch="ppc64le">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="d7853272a9a7f2555dc103bdd33a7a7d4a7dbd167508f06b5aa28538cc146c84" name="java-17-openj9-jmods" arch="s390x">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="e74dd5256d5bf32aff1906ef0aae5401a839fe2b7baf60b7282ef44f5096f16a" name="java-17-openj9-jmods" arch="x86_64">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="7b72560163dc99131b1a6f419c5fa7a3cce98f15163a782aaab8554357f9c530" name="java-17-openj9-src" arch="aarch64">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="5eab079f68a8d4e31c4a70a5a73a92897dcd77d406f956ea4e7dcecd60f6419a" name="java-17-openj9-src" arch="ppc64le">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="ecbef0cd9fd3bd64a94836b6e0eff1d372269ebc55464bf06b54bb4a0b975c5f" name="java-17-openj9-src" arch="s390x">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="96809cff25df039f0717a57841ce6bd05988919077d4515e56d0a3784844eaf4" name="java-17-openj9-src" arch="x86_64">
  <version epoch="0" ver="17.0.14.0" rel="bp156.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1657627200">- Initial packaging of OpenJDK 17.0.3 with OpenJ9 0.32.0 virtual
  machine
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.32</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1660651200">- Update to OpenJDK 17.0.4 with OpenJ9 0.33.0 virtual machine
  * Including Oracle July 2022 CPU changes
    CVE-2022-21540 (bsc#1201694), CVE-2022-21541 (bsc#1201692),
    CVE-2022-21549 (bsc#1201685), CVE-2022-34169 (bsc#1201684)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.33
- Modified template patch:
  * openj9-nogit.patch.in
    + The git commit hash code became more generic, so redo the
    template patch
- Added patch:
  * openj9-no-narrowing.patch
    + Fix narrowing conversion error</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1667217600">- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine
  * Including Oracle October 2022 CPU changes
    CVE-2022-21618 (bsc#1204468), CVE-2022-21619 (bsc#1204473),
    CVE-2022-21626 (bsc#1204471), CVE-2022-21624 (bsc#1204475),
    CVE-2022-21628 (bsc#1204472), CVE-2022-39399 (bsc#1204480)
  * Fixes OpenJ9 vulnerability bsc#1204703, CVE-2022-3676
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.35</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
</package>
<package pkgid="2c7d28dc14c81e853e33d5e3d51da8f9b262e3c9368e06b971f6cabe4db2ac6f" name="java-17-openj9-src" arch="aarch64">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="80db3c548dcc1f15791082b7b7fb74456291113f7d7cca6117d5b5a8848c2b95" name="java-17-openj9-src" arch="ppc64le">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="75777a8ead709c7e7b07b67b3da34531871f5b5875d5a4ebaf0c08b0fa3fc9af" name="java-17-openj9-src" arch="s390x">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="092b456242ede5876aa07d60751d0f04680341b57c51d645aba80d0ecaf4c7a3" name="java-17-openj9-src" arch="x86_64">
  <version epoch="0" ver="17.0.16.0" rel="bp156.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1678104000">- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine
  * including Oracle January 2023 CPU changes
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.36</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1680004800">- Added patch:
  * stringop-overflow.patch
    + disable -Wstringop-overflow and fix build in Factory</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692014400">- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine
- Including Oracle April 2023 CPU changes
  * CVE-2023-21930 (bsc#1210628), CVE-2023-21937 (bsc#1210631),
    CVE-2023-21938 (bsc#1210632), CVE-2023-21939 (bsc#1210634),
    CVE-2023-21954 (bsc#1210635), CVE-2023-21967 (bsc#1210636),
    CVE-2023-21968 (bsc#1210637)
  * OpenJ9 specific vulnerability: CVE-2023-2597 (bsc#1211615)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.38</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine
- Including Oracle July 2023 CPU changes
  * CVE-2023-22006 (bsc#1213473), CVE-2023-22036 (bsc#1213474),
    CVE-2023-22041 (bsc#1213475), CVE-2023-22044 (bsc#1213479),
    CVE-2023-22045 (bsc#1213481), CVE-2023-22049 (bsc#1213482),
    CVE-2023-25193 (bsc#1207922)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.40
- Modified patch:
  * stringop-overflow.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1693051200">- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine
  * JDK-8313765: Invalid CEN header (invalid zip64 extra data
    field size)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1700740800">- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine
- Including Oracle October 2023 CPU changes
  * CVE-2023-22081, bsc#1216374
  * CVE-2023-22025, bsc#1216339
- Including Openj9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
  * For other OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.41</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707739200">- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine
- Including Oracle January 2024 CPU changes
  * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),
    CVE-2024-20921 (bsc#1218905), CVE-2024-20932 (bsc#1218908),
    CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.43/
- Modified patches:
  * alternative-tzdb_dat.patch
  * openj9-nogit.patch.in
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1709812800">- Removed patch:
  * alternative-tzdb_dat.patch
    + Remove the possibility to use the system timezone-java. It
    creates more problems then it solves (bsc#1213470)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1716465600">- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine
- Including Oracle April 2024 CPU changes
  * CVE-2024-21012 (bsc#1222987), CVE-2024-21094 (bsc#1222986),
    CVE-2024-21011 (bsc#1222979), CVE-2024-21068 (bsc#1222983)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.44/
- Added patch:
  * openj9-openssl.patch
    + fix build with older openssl that does not define
    SSL_R_UNEXPECTED_EOF_WHILE_READING</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1722945600">- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine
- Including Oracle July 2024 CPU changes
  * CVE-2024-21131 (bsc#1228046), CVE-2024-21138 (bsc#1228047),
    CVE-2024-21140 (bsc#1228048), CVE-2024-21147 (bsc#1228052),
    CVE-2024-21145 (bsc#1228051)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.46/
- Removed patch:
  * openj9-no-narrowing.patch
    + fixed in upstream code</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1738756800">- removed unneeded xorg-x11-proto-devel BuildRequires (bsc#1236804)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1738929600">- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
- Including Oracle October 2024 and January 2025 CPU changes
  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),
    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),
    CVE-2025-21502 (bsc#1236278)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.49/
- Added patch:
  * openssl-OSSL_LIB_CTX.patch
    + allow building with openssl &lt; 3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1739880000">- Added patch:
  * openj9-nasm-noexecstack.patch
    + fix wrong execstack flag in libj9jit (bsc#1235844)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1746619200">- export CMAKE_POLICY_VERSION_MINIMUM="3.5" to ignore cmakes
  minimum version warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1746792000">- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
- Including Oracle April 2025 CPU changes
  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),
    CVE-2025-30698 (bsc#1241276)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.51/
- Removed patch:
  * openj9-nasm-noexecstack.patch
    + chosing a better upstream solution
- Added patch:
  * openj9-noexecstack.patch
    + better upstream solution to the previous fix
- Modified patch:
  * openssl-OSSL_LIB_CTX.patch
    + rediff</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1750161600">- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since
  the C++ part is on -std=gnu++98, this is the closest.
- Added patch:
  * fix-build-with-gcc15.patch
    + fix a typo in omr that is fatal with gcc15</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753099200">- Do not embed rebuild counter (bsc#1246806)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1753531200">- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
- Including Oracle July 2025 CPU changes
  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),
    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.53/
- Removed patches:
  * fix-build-with-gcc15.patch
  * libdwarf-fix.patch
  * openj9-noexecstack.patch
  * stringop-overflow.patch
    + fixed in this version
- Modified patches:
  * openj9-nogit.patch.in
  * openssl-OSSL_LIB_CTX.patch
    + rediff to changed context
- Added patch:
  * bootcycle.patch
    + fix bootcycle-images target
- Enable bootcycle build</changelog>
</package>
<package pkgid="c2e2d49501f650f0a8348aea468ed86107877b88609840af7af02b7dd4334b26" name="java-binfmt-misc" arch="aarch64">
  <version epoch="0" ver="1.4" rel="bp156.4.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1233835200">- Initial packaging of java-binfmt-misc (splitted from jpackage-utils)
- Test of existence a files in /proc/sys/fs/binfmt_misc/ before write in stop
  (the older version ends with an error if stop was called several times)
- New java-binfmt-misc.1 manual page (manual page of every available wrapper is
  a link to this page)
- Include a Documentation/java.txt
- Build a javaclassname command from source code and drop the ad-hoc binary
  from sources</changelog>
  <changelog author="mvyskocil@suse.cz" date="1234267200">- Remove Java 64bit Webstart warning, as it's obsoleted by openjdk and Sun u12</changelog>
  <changelog author="mvyskocil@suse.cz" date="1237982400">- fixed minor indentation in initscript [bnc#435514] using vim's =</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- update to 1.4
  * add systemd-style binfmt.d config files
  * drop sysvinit script
  * rename and update readme file</changelog>
  <changelog author="tchvatal@suse.com" date="1490097600">- Move the wrappers to libexec wrt bsc#1029650 (see binfmt.d(5))
- Format a bit with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1490529600">- Run desktop db scriptlet updates wrt bsc#1030903</changelog>
  <changelog author="mpluskal@suse.com" date="1504785600">- Reload systemd-binfmt.service so that binfmt setting are applied
  without need to reboot (bsc#1057531)</changelog>
  <changelog author="Heitor Moreira da Silva &lt;heitor@opensuse.org&gt;" date="1742644800">- Add supplements to openJDK (boo#1205413 and boo#1205825)</changelog>
</package>
<package pkgid="e42f539c7d38043aaad9d02b2678ec9746d24af68c8d92b00e0116a7cd3725c6" name="java-binfmt-misc" arch="i586">
  <version epoch="0" ver="1.4" rel="bp156.4.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1233835200">- Initial packaging of java-binfmt-misc (splitted from jpackage-utils)
- Test of existence a files in /proc/sys/fs/binfmt_misc/ before write in stop
  (the older version ends with an error if stop was called several times)
- New java-binfmt-misc.1 manual page (manual page of every available wrapper is
  a link to this page)
- Include a Documentation/java.txt
- Build a javaclassname command from source code and drop the ad-hoc binary
  from sources</changelog>
  <changelog author="mvyskocil@suse.cz" date="1234267200">- Remove Java 64bit Webstart warning, as it's obsoleted by openjdk and Sun u12</changelog>
  <changelog author="mvyskocil@suse.cz" date="1237982400">- fixed minor indentation in initscript [bnc#435514] using vim's =</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- update to 1.4
  * add systemd-style binfmt.d config files
  * drop sysvinit script
  * rename and update readme file</changelog>
  <changelog author="tchvatal@suse.com" date="1490097600">- Move the wrappers to libexec wrt bsc#1029650 (see binfmt.d(5))
- Format a bit with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1490529600">- Run desktop db scriptlet updates wrt bsc#1030903</changelog>
  <changelog author="mpluskal@suse.com" date="1504785600">- Reload systemd-binfmt.service so that binfmt setting are applied
  without need to reboot (bsc#1057531)</changelog>
  <changelog author="Heitor Moreira da Silva &lt;heitor@opensuse.org&gt;" date="1742644800">- Add supplements to openJDK (boo#1205413 and boo#1205825)</changelog>
</package>
<package pkgid="6d44dfcc10e76a1dacc803447f152652d3fd8776fdcb3893923c155b0934c4f4" name="java-binfmt-misc" arch="ppc64le">
  <version epoch="0" ver="1.4" rel="bp156.4.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1233835200">- Initial packaging of java-binfmt-misc (splitted from jpackage-utils)
- Test of existence a files in /proc/sys/fs/binfmt_misc/ before write in stop
  (the older version ends with an error if stop was called several times)
- New java-binfmt-misc.1 manual page (manual page of every available wrapper is
  a link to this page)
- Include a Documentation/java.txt
- Build a javaclassname command from source code and drop the ad-hoc binary
  from sources</changelog>
  <changelog author="mvyskocil@suse.cz" date="1234267200">- Remove Java 64bit Webstart warning, as it's obsoleted by openjdk and Sun u12</changelog>
  <changelog author="mvyskocil@suse.cz" date="1237982400">- fixed minor indentation in initscript [bnc#435514] using vim's =</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- update to 1.4
  * add systemd-style binfmt.d config files
  * drop sysvinit script
  * rename and update readme file</changelog>
  <changelog author="tchvatal@suse.com" date="1490097600">- Move the wrappers to libexec wrt bsc#1029650 (see binfmt.d(5))
- Format a bit with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1490529600">- Run desktop db scriptlet updates wrt bsc#1030903</changelog>
  <changelog author="mpluskal@suse.com" date="1504785600">- Reload systemd-binfmt.service so that binfmt setting are applied
  without need to reboot (bsc#1057531)</changelog>
  <changelog author="Heitor Moreira da Silva &lt;heitor@opensuse.org&gt;" date="1742644800">- Add supplements to openJDK (boo#1205413 and boo#1205825)</changelog>
</package>
<package pkgid="ecf4d5aebdece5e08ffbb42cee17480313fc4ac3d20e95a2c38f7bdd26b617fe" name="java-binfmt-misc" arch="s390x">
  <version epoch="0" ver="1.4" rel="bp156.4.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1233835200">- Initial packaging of java-binfmt-misc (splitted from jpackage-utils)
- Test of existence a files in /proc/sys/fs/binfmt_misc/ before write in stop
  (the older version ends with an error if stop was called several times)
- New java-binfmt-misc.1 manual page (manual page of every available wrapper is
  a link to this page)
- Include a Documentation/java.txt
- Build a javaclassname command from source code and drop the ad-hoc binary
  from sources</changelog>
  <changelog author="mvyskocil@suse.cz" date="1234267200">- Remove Java 64bit Webstart warning, as it's obsoleted by openjdk and Sun u12</changelog>
  <changelog author="mvyskocil@suse.cz" date="1237982400">- fixed minor indentation in initscript [bnc#435514] using vim's =</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- update to 1.4
  * add systemd-style binfmt.d config files
  * drop sysvinit script
  * rename and update readme file</changelog>
  <changelog author="tchvatal@suse.com" date="1490097600">- Move the wrappers to libexec wrt bsc#1029650 (see binfmt.d(5))
- Format a bit with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1490529600">- Run desktop db scriptlet updates wrt bsc#1030903</changelog>
  <changelog author="mpluskal@suse.com" date="1504785600">- Reload systemd-binfmt.service so that binfmt setting are applied
  without need to reboot (bsc#1057531)</changelog>
  <changelog author="Heitor Moreira da Silva &lt;heitor@opensuse.org&gt;" date="1742644800">- Add supplements to openJDK (boo#1205413 and boo#1205825)</changelog>
</package>
<package pkgid="95ef4a14c8cc3a267b8756f286c197f9ed0309d4c9a186ce2cc6177798d6757b" name="java-binfmt-misc" arch="src">
  <version epoch="0" ver="1.4" rel="bp156.4.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1233835200">- Initial packaging of java-binfmt-misc (splitted from jpackage-utils)
- Test of existence a files in /proc/sys/fs/binfmt_misc/ before write in stop
  (the older version ends with an error if stop was called several times)
- New java-binfmt-misc.1 manual page (manual page of every available wrapper is
  a link to this page)
- Include a Documentation/java.txt
- Build a javaclassname command from source code and drop the ad-hoc binary
  from sources</changelog>
  <changelog author="mvyskocil@suse.cz" date="1234267200">- Remove Java 64bit Webstart warning, as it's obsoleted by openjdk and Sun u12</changelog>
  <changelog author="mvyskocil@suse.cz" date="1237982400">- fixed minor indentation in initscript [bnc#435514] using vim's =</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- update to 1.4
  * add systemd-style binfmt.d config files
  * drop sysvinit script
  * rename and update readme file</changelog>
  <changelog author="tchvatal@suse.com" date="1490097600">- Move the wrappers to libexec wrt bsc#1029650 (see binfmt.d(5))
- Format a bit with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1490529600">- Run desktop db scriptlet updates wrt bsc#1030903</changelog>
  <changelog author="mpluskal@suse.com" date="1504785600">- Reload systemd-binfmt.service so that binfmt setting are applied
  without need to reboot (bsc#1057531)</changelog>
  <changelog author="Heitor Moreira da Silva &lt;heitor@opensuse.org&gt;" date="1742644800">- Add supplements to openJDK (boo#1205413 and boo#1205825)</changelog>
</package>
<package pkgid="6b60c7efc26ec98bf9e013948795a3c819a57a1b214397169d75e7751316450e" name="java-binfmt-misc" arch="x86_64">
  <version epoch="0" ver="1.4" rel="bp156.4.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1233835200">- Initial packaging of java-binfmt-misc (splitted from jpackage-utils)
- Test of existence a files in /proc/sys/fs/binfmt_misc/ before write in stop
  (the older version ends with an error if stop was called several times)
- New java-binfmt-misc.1 manual page (manual page of every available wrapper is
  a link to this page)
- Include a Documentation/java.txt
- Build a javaclassname command from source code and drop the ad-hoc binary
  from sources</changelog>
  <changelog author="mvyskocil@suse.cz" date="1234267200">- Remove Java 64bit Webstart warning, as it's obsoleted by openjdk and Sun u12</changelog>
  <changelog author="mvyskocil@suse.cz" date="1237982400">- fixed minor indentation in initscript [bnc#435514] using vim's =</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- update to 1.4
  * add systemd-style binfmt.d config files
  * drop sysvinit script
  * rename and update readme file</changelog>
  <changelog author="tchvatal@suse.com" date="1490097600">- Move the wrappers to libexec wrt bsc#1029650 (see binfmt.d(5))
- Format a bit with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1490529600">- Run desktop db scriptlet updates wrt bsc#1030903</changelog>
  <changelog author="mpluskal@suse.com" date="1504785600">- Reload systemd-binfmt.service so that binfmt setting are applied
  without need to reboot (bsc#1057531)</changelog>
  <changelog author="Heitor Moreira da Silva &lt;heitor@opensuse.org&gt;" date="1742644800">- Add supplements to openJDK (boo#1205413 and boo#1205825)</changelog>
</package>
<package pkgid="5f3dff6d2a9b4b070d44f936448c79e5597b81932af768979a27979e77cd4205" name="jupyter-jupyterlab" arch="noarch">
  <version epoch="0" ver="2.2.10" rel="bp156.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1525262400">- Trim filler wording from description.
- Replace bashisms in %install.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1533211200">- Update to 0.33.4
  + Key Features:
  * No longer in beta
  * Workspaces
  * Menu items
  * Keyboard shortcuts
  * Command palette items
  * Settings
  * Larger file uploads
  * Extension management and installation
  * Interface changes
  * Renderers
  * Changes for developers
  * Other fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1536321600">- Update to 0.34.7
  * Notebooks, consoles, and text files now have access to completions for local
    tokens.
  * Python 3.5+ is now required to use JupyterLab. Python 2 kernels can still be
    run within JupyterLab.
  * Added the pipe (``|``) character as a CSV delimiter option.
  * Added "Open From Path..."" to top level ``File`` menu.
  * Added "Copy Download Link" to context menu for files.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1538136000">- Update to 0.34.12
  * add sidebar min-width css variable
  * use encodeURI instead of encodeURIComponent for shareable links
  * expand JupyterLab.IOptions to allow for custom DocumentRegistry
  * Rename package.json to package.json.orig when copying it to build folder
  * fix python versions of build wheels by removing the universal flag
  * Hide quit entry for older notebook versions
  * Notebook 4.3 Shim</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1546603200">- Update to 0.35.4
  + Features
  * A notebook cell can now be readonly, reflecting its ``enabled`` metadata. (`#5401 &lt;https://github.com/jupyterlab/jupyterlab/pull/5401&gt;`__, `#1312 &lt;https://github.com/jupyterlab/jupyterlab/issues/1312&gt;`__)
  * Add "Go To Line" in the Edit menu for text editors. (`#5377 &lt;https://github.com/jupyterlab/jupyterlab/pull/5377&gt;`__)
  * Sidebar panels can now be switched between left and right sidebars. Right-click on a sidebar tab to move it to the other sidebar. (`#5347 &lt;https://github.com/jupyterlab/jupyterlab/pull/5347&gt;`__, `#5054 &lt;https://github.com/jupyterlab/jupyterlab/  issues/5054&gt;`__, `#3707 &lt;https://github.com/jupyterlab/jupyterlab/issues/3707&gt;`__)
  * Make the sidebar a bit narrower, and make the minimum width adjustable from a theme. (`#5245 &lt;https://github.com/jupyterlab/jupyterlab/pull/5245&gt;`__)
  * Populate the File, Export Notebook As... submenu from the server nbconvert capabilities. (`#5217 &lt;https://github.com/jupyterlab/jupyterlab/pull/5217&gt;`__)
  * Server contents managers can now tell JupyterLab to open files as notebooks. For example, several custom contents managers save and open notebooks as Markdown files. (`#5247 &lt;https://github.com/jupyterlab/jupyterlab/pull/5247&gt;`__, `#4924 &lt;https://github.com/jupyterlab/jupyterlab/issues/4924&gt;`__)
  * Add a command-line interface for managing workspaces. (`#5166 &lt;https://github.com/jupyterlab/jupyterlab/pull/5166&gt;`__)
  * Allow safe inline CSS styles in Markdown. (`#5012 &lt;https://github.com/jupyterlab/jupyterlab/pull/5012&gt;`__, `#1812 &lt;https://github.com/jupyterlab/jupyterlab/issues/1812&gt;`__)
  * Add Quit to File menu when appropriate. (`#5226 &lt;https://github.com/jupyterlab/jupyterlab/pull/5226&gt;`__, `#5252 &lt;https://github.com/jupyterlab/jupyterlab/pull/5252&gt;`__, `#5246 &lt;https://github.com/jupyterlab/jupyterlab/issues/5246&gt;`__, `#5280 &lt;https://github.com/jupyterlab/jupyterlab/pull/5280&gt;`__)
  * Rework extension manager user experience. (`#5147 &lt;https://github.com/jupyterlab/jupyterlab/pull/5147&gt;`__, `#5042 &lt;https://github.com/jupyterlab/jupyterlab/issues/5042&gt;`__)
  + Dark theme
  * Show a dark splash screen when using a dark theme. (`#5339 &lt;https://github.com/jupyterlab/jupyterlab/pull/5339&gt;`__, `#5338 &lt;https://github.com/jupyterlab/jupyterlab/issues/5338&gt;`__, `#5403 &lt;https://github.com/jupyterlab/jupyterlab/pull/5403&gt;`__)
  * Fix code completion menu for a dark theme. (`#5364 &lt;https://github.com/jupyterlab/jupyterlab/pull/5364&gt;`__, `#5349 &lt;https://github.com/jupyterlab/jupyterlab/issues/5349&gt;`__)
  * Style CSV viewer for a dark theme. (`#5304 &lt;https://github.com/jupyterlab/jupyterlab/pull/5304&gt;`__, `#3456 &lt;https://github.com/jupyterlab/jupyterlab/issues/3456&gt;`__)
  * Make Matplotlib figures legible in a dark theme. (`#5232 &lt;https://github.com/jupyterlab/jupyterlab/pull/5232&gt;`__)
  * Fix notebook cell dropdown legibility in a dark theme. (`#5168 &lt;https://github.com/jupyterlab/jupyterlab/issues/5168&gt;`__)
  + Bug fixes
  * Various save options in the file menu and toolbar are now disabled when a file is not writable. (`#5376 &lt;https://github.com/jupyterlab/jupyterlab/pull/5376&gt;`__, `#5391 &lt;https://github.com/jupyterlab/jupyterlab/pull/5391&gt;`__)
  * Kernel selector dialog no longer cuts off kernel names. (`#5260 &lt;https://github.com/jupyterlab/jupyterlab/pull/5260&gt;`__, `#5181 &lt;https://github.com/jupyterlab/jupyterlab/issues/5181&gt;`__)
  * Fix focus issues with the toolbar. (`#5344 &lt;https://github.com/jupyterlab/jupyterlab/pull/5344&gt;`__, `#5324 &lt;https://github.com/jupyterlab/jupyterlab/pull/5324&gt;`__, `#2995 &lt;https://github.com/jupyterlab/jupyterlab/issues/2995&gt;`__, `#5328 &lt;https://github.com/jupyterlab/jupyterlab/pull/5328&gt;`__)
  * Fix toolbar button enabled/disabled status. (`#5278 &lt;https://github.com/jupyterlab/jupyterlab/pull/5278&gt;`__)
  * Table alignment is now respected in Markdown. (`#5301 &lt;https://github.com/jupyterlab/jupyterlab/pull/5301&gt;`__, `#3180 &lt;https://github.com/jupyterlab/jupyterlab/issues/3180&gt;`__)
  * Fix syntax highlighting for Markdown lists. (`#5297 &lt;https://github.com/jupyterlab/jupyterlab/pull/5297&gt;`__, `#2741 &lt;https://github.com/jupyterlab/jupyterlab/issues/2741&gt;`__)
  * Use the current filebrowser instead of the default one for various commands. (`#5390 &lt;https://github.com/jupyterlab/jupyterlab/pull/5390&gt;`__)
  * Fix escaping in link handling to conform to Markdown syntax. This means that spaces in link references now need to be encoded as ``%20``. (`#5383 &lt;https://github.com/jupyterlab/jupyterlab/pull/5383&gt;`__, `#5340 &lt;https://github.com/jupyterlab/jupyterlab/pull/5340&gt;`__, `#5153 &lt;https://github.com/jupyterlab/jupyterlab/issues/5153&gt;`__)
  + Build system
  * Use Typescript 3.1. (`#5360 &lt;https://github.com/jupyterlab/jupyterlab/pull/5360&gt;`__)
  * Use Lerna 3.2.1. (`#5262 &lt;https://github.com/jupyterlab/jupyterlab/pull/5262&gt;`__)
  * Node &gt;=6.11.5 is now required. (`#5227 &lt;https://github.com/jupyterlab/jupyterlab/pull/5227&gt;`__)
  * Pin vega-embed version to 3.18.2. (`#5342 &lt;https://github.com/jupyterlab/jupyterlab/pull/5342&gt;`__)
  * Use Jest for services tests. (`#5251 &lt;https://github.com/jupyterlab/jupyterlab/pull/5251&gt;`__, `#5282 &lt;https://github.com/jupyterlab/jupyterlab/pull/5282&gt;`__)
  * Make it easier for third party extensions to use the JupyterLab test app and testing utilities. (`#5415 &lt;https://github.com/jupyterlab/jupyterlab/pull/5415&gt;`__)
  * Fix ``jupyter lab clean`` on Windows. (`#5400 &lt;https://github.com/jupyterlab/jupyterlab/pull/5400&gt;`__, `#5397 &lt;https://github.com/jupyterlab/jupyterlab/issues/5397&gt;`__)
  * Fix ``jupyter lab build`` on NFS. (`#5237 &lt;https://github.com/jupyterlab/jupyterlab/pull/5237&gt;`__, `#5233 &lt;https://github.com/jupyterlab/jupyterlab/issues/5233&gt;`__)
  * Build wheels for Python 3 only. (`#5287 &lt;https://github.com/jupyterlab/jupyterlab/pull/5287&gt;`__)
  * Migrate to using ``jupyterlab_server`` instead of ``jupyterlab_launcher`` and fix the app example. (`#5316 &lt;https://github.com/jupyterlab/jupyterlab/pull/5316&gt;`__)
  * Move Mathjax 2 typesetter to a library package. (`#5259 &lt;https://github.com/jupyterlab/jupyterlab/pull/5259&gt;`__, `#5257 &lt;https://github.com/jupyterlab/jupyterlab/issues/5257&gt;`__)
  + For Developers
  * Default toolbar buttons can be overridden, and mime renderers can now specify toolbar buttons. (`#5398 &lt;https://github.com/jupyterlab/jupyterlab/pull/5398&gt;`__, `#5370 &lt;https://github.com/jupyterlab/jupyterlab/pull/5370&gt;`__, `#5363 &lt;https://github.com/jupyterlab/jupyterlab/issues/5363&gt;`__)
  * A JupyterLab application instance can now be given a document registry, service manager, and command linker. (`#5291 &lt;https://github.com/jupyterlab/jupyterlab/pull/5291&gt;`__)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Update to 0.35.5
  * use target=_blank for download links
  * Release filebrowser@0.19.4
- Rename to to match jupyter package naming guidelines.
- Add rpm macros</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1557835200">- Update to 0.35.6
  * Publish outputarea 0.19.2
  * Make sure the cached value of `_lastStream` reflects the removed
    characters so we don't have to remove them over and over again.
- Split directories and macros into separate package.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566302400">- Update to 1.0.6
  + User Facing Changes
  * We have added first class support for find and replace across JupyterLab. It is currently supported in notebooks and text files and is extensible for other widgets who wish to support it.
  * We have integrated the JupyterLab Status Bar package into the core distribution. Extensions can add their own status to it as well.
  * We now include the JupyterHub extension in core JupyterLab, so you no longer need to install ``@jupyterlab/hub-extension``.
  * JupyterLab now has a File &gt; Logout menu entry when running with JupyterHub
  * now have a printing system that allows extensions to customize how documents and activities are printed.
  * The launcher displays longer kernel names and supports keyboard navigation
  * Notebook outputs without any valid MimeType renderers will not be displayed, instead of displaying an error
  * Add tooltip to file browser root breadcrumb icon showing the server root, if it is available
  * Downloading a file will no longer open a new browser window
  * Rename the help "Inspector" to "Contextual Help" and move it to the "Help" menu
  * Update many of the icons to make them more consistent
  * Update the settings UI to remove the table view
  * Replace FAQ Extension with link to JupyterLab documentation
  * Change the default keyboard shortcut for closing a tab to be ``Alt+w`` instead of ``Cmd/Ctrl+w`` to avoid conflicts with operating systems.
  * Show help text in Inspector window to describe you should select a function
  * Fixes SVG rendering
  * Add support for dropping a tab in the tab bar area.
  * Switch some default shortcuts to use ``Accel`` instead of ``Ctrl`` so they are more natural for Mac users
  * Add ability to tell between hover and selected command palette items
  * Hide the "Last Modified" column when the file browser is narrow
  * Support copy/paste in terminal and Mac OS using ``Ctrl+C`` and ``Ctrl+V``
  * Support scrolling in running kernels panel
  * Adds ability to "Merge Selected Cells" in the context menu in the notebook
  * Turn On Accessibility In Xterm.js to make it more compatible for screen readers
  * When selecting cells using the keyboard shortcuts, we now skip collapsed cells
  * Supporting opening ``.geojson`` files in JSON viewer
  * Performance fixes for text-based progress bars
  * Add support for rendering Vega 5 and Vega Lite 3 while keeping the existing Vega 4 and Vega Lite 2 renderers
  * Drag and drop console cells into a notebook or text editor
  * Drag and drop notebook cells into a console or text editor
  * The extension manager search now sorts extensions by the score assigned to them by NPM instead of alphabetically
  * Notify the user when a kernel is automatically restarted, for example, if crashes from an out of memory error
  * Expose the extension manager in a command and menu item
  * Add command to render all Markdown cells
  * Supports using shift to select text in output area
  * Output areas that opened in new views are restored properly now on reload
  * Add support for managing notebook metadata under a new "Advanced Tools" section in the cell tools area. The cell and notebook metadata now always reflect the current state of the notebook
  * Inherit terminal theme from core theme
  * Adds a built-in HTML viewer so that you can view HTML files
  * New workspaces are now automatically generated when you create a new window with the same workspace name.
  * We now add a hint to the context menu to describe how you can access the native browser menu
  * The tabs on the left panel have changed to make them more understandable
  * Start a new terminal when the page is refreshed and the old terminal has died
  * Add a command to open the main menus, which can be assigned to a keyboard shortcut to open and navigate menus without a mouse
  * The contextual help now updates based on changes in the cursor from the mouse instead of just from the keyboard
  * The launcher now updates when the kernels change on the server
  * Retain cell auto scroll behavior even when a cell output is cleared
  * If you link to a relative path that is not a file in a markdown cell, this will now be preserved instead of changing it to a file URL
  * Adds the ability to link to a certain row in a CSV file and have the viewer open to that row
  * We have improved the performance of switching to a large notebook
  * The vdom extension now supports event handling, so that you can have kernel code run in response to user interaction with the UI
  * Adds the ability to run "Run All Code" and "Restart Kernel and Run All Code" in code and markdown files
  * We now remember what line ending a text file has when loading it, so that files with ``CRLF`` line endings will properly be saved with the same endings
  * Fixes rendering of SVG elements in HTML MimeType output
  * Allow copying files by holding down ``Ctrl`` when dragging them in the file browser
  * Switch the hover modified time in the file browser to use the local format
  * We have added a default keyboard shortcut of ``Ctrl Shift Q`` for closing and cleaning up a file
  * Adds the ability to find and go to a certain line in the CSV viewer
  * Add the ability to create new text and markdown files from the launcher and command palette
  * A "New Folder" option has been added to the file browser context menu
  * The ANSI colors are now the same as those in the classic notebook
  * Send complete statements instead of current lines when stepping through code in a cell
  * Description list styles (``dl``, ``dt``, ``dd``) are improved to be consistent with the nteract project
  + Settings
  * The settings system has been rewritten and now uses json5 as the syntax, which supports comments and other features for better human readability.
  * The keyboard shortcut system has been rewritten and now displays a list of system commands in the settings comments.
  * There are new settings for many following items, including:
    &gt; Adds an option to shut down terminals and notebook kernels when they are closed
    &gt; Scrolling past the end of a notebooks and text editor document
    &gt; Text editor code folding, rulers, and active line highlighting
    &gt; Markdown viewer options
    &gt; Terminal scrollback and other settings
    &gt; The autosave interval
    &gt; The file browser showing the current active file
    &gt; Custom scrollbar styling for dark themes
  + Command Line Changes
  * Installing extensions will be quieter and adds a ``--debug`` to extension installing
  * We now support running JupyterLab when its application directory is a symlink
  * Add ``--all`` flag to ``labextension uninstall`` to remove all extensions
  * Adds the ability to override the base URLs from the config
  * Updates to workspaces CLI command
  + Extension Development Changes
  * We have rewritten how extensions provide keyboard shortcuts and interact with the settings system. If you previously defined keyboard shortcuts or used the settings mechanism, you will need to update your extension
  * We have renamed the plugin type from ``JupyterLabPlugin`` to ``JupyterFrontEndPlugin``. The application arg is also renamed from ``JupyterLab`` to  ``JupyterFrontEnd`` and some its functionality has been moved to a separate ``ILabShell`` plugin
  * The lab shell ``addToMainArea``, ``addToLeftArea``, ``addToTopArea``, ``addToRightArea``, and ``addToBottomArea`` functions have been replaced with a single ``add()`` function that takes the area as an argument. Replace ``addToMainArea(widget, options)`` with ``add(widget, 'main', options)``, etc.
  * Rename ``pageUrl`` to ``appUrl`` in the server connection
  * ``MainAreaWidget`` instances now forward update requests to their ``content``
  * The theme data attributes are renamed and moved to the document body element. If you are relying on these attributes in CSS to conditionally style based on the theme, you should update their names. For example ``data-theme-light`` is now ``data-jp-theme-light``.
  * Extensions which require CSS should no longer import their CSS files into their Javascript files. Instead, they should specify a root CSS file in the ``style`` attribute in their ``package.json``, and JupyterLab will automatically import that CSS file.
  * ``Dialog.prompt`` has been replaced by a number of type-specific dialogs such as ``InputDialog.getString``, ``InputDialog.getBoolean``, etc.
  * When a ``RenderMime`` widget is re-rendered, the default behavior is to remove any existing content in the DOM. This can be overridden if needed.
  * We have updated our internal TypeScript version to 3.5.1 and our compile target to ``ES2017``. Extensions may need to upgrade their TypeScript version and target as well.
  * We have updated the typings for some of the Kernel messages so that they better match the spec.
  * A ``connectionFailure`` signal has been added to some of the manager classes, which can be used to detect when a connection to the server is lost
  * Add rate limiting and polling utilities to ``coreutils``  to use for throttling and debouncing of API requests
  * Require session when instantiating terminal widget
  * Provides a signal to see what items are opened in a directory listing
  * Ads the ability to add widget above the main work area to a top header area
  * Renames ``contextMenuFirst`` to  ``contextMenuHitTest`` in the ``JupyterFrontEnd``
  * Removes the ``initialCommand`` arg from the terminal creation command.
  * Adds ``--jp-code-cursor-width0``, ``--jp-code-cursor-width1``, and ``--jp-code-cursor-width2`` variables to the themes to support changing the cursor width if you change the font size
  * Adds the ability to insert a new item to the toolbar before or after another item
  * Adds the ability for extensions to register new CodeMirror modes
  * We have removed the ``JUPYTERLAB_xxx_LOADER`` Webpack loaders, instead you should use the loader directly in the URL as Webpack supports it
  * Adds the ability to handle fragments for document widgets
  * We have added a  ``@jupyterlab/ui-components`` package that contains reusable React components to be used internally and in extensions. Feel free to use this to create extension UIs with consistent styles
  * The ``showErrorMessage`` function now lets you customize the buttons it uses
  * We now provide helpers for using React components within JupyterLab. If you were previously using ``ReactElementWidget`` you should switch to using ``ReactWidget``.
  * The share link command has been moved to its own extension so that it can be overridden
  * Creating a new services session now requires passing a kernel model instead of a kernel instance
  * We upgraded the Webpack raw file loader. The new version of the raw loader exports ES2015 modules, so this may require changes in extensions that import files using the raw loader. For example, if you did ``require('myfile.md')`` to get the content of `myfile.md` as a string, you now should import it using ES2015 `import` syntax, or use `require('myfile.md').default`.
  * Widget factories now can support custom cloning behavior from an optional source widget
  * We have renamed the type ``InstanceTracker`` to ``WidgetTracker``.
  * In order to add widgets to the main area (e.g. as in the old XKCD extension tutorial), the correct syntax is now ``app.shell.add(widget)`` or ``app.shell.add(widget, 'main')``,</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566561600">- Update to 1.0.9
  * integrity
  * update packages
  * fix package name
  * enforce jinja2 requirement
- jupyterlab-discovery has been merged into jupyterlab</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1566820800">- Use better way to handle tornado version compatibility.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1573560000">- Update to version 1.2.2
  + User-facing changes
  * Select cells from the current cell to the top of the notebook with ``Shift Home``, to the bottom of the notebook with ``Shift End``
  * Add a log console extension to display unhandled messages and other activity
  * Allow the npm ``max-old-space`` option to be specified outside of JupyterLab
  * Only display node structure in a JSON tree view for arrays and empty objects
  * Make much smaller distribution packages by not building JavaScript source maps for releases.
  * Add support for pasting cell attachments and dragging attachments from the file browser
  * Add a new ``registry`` configuration parameter to override the default yarn repository when building
  + For developers
  * Update the Markdown renderer (``marked``) to 0.7.0
  * Remove datagrid as a singleton, allowing extensions to use newer versions
  * Add metadata to the kernelspec information
  * Allow different mimetypes for the clipboard data
  * Add inline svg icon support to toolbar buttons
  * Add PageConfig functions to query if a plugin is deferred or disabled
  * Allow for renderers for nbformat.ierror to be created
  * Refactor ``fileeditor-extension`` for modularization
  * Add execution timing to cells
  + Bugfixes
  * Fix the ``file-browser-path`` query parameter
  * Skip custom click behavior on links when the download attribute is set
  * Fix opening multiple browser tabs in Safari
  * Fix context menus on SVG icons
  * Fix overwriting of target attribute of anchors rendered by ``IPython.display``
  * Fix multi-cursor backspacing
  * Fix mult-cursor cell splitting</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1575892800">- Update to version 1.2.3
  * Update status bar index.css to be hand-curated
  * fix dropdown option style issue in Windows
  * Update the ui-components css to reflect the correct dependencies.
- Rename spec file to python-jupyterlab to work better
  with OSC python tooling.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1575979200">- Use pyproject_install macro (boo#1094323)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1579089600">- Update to 1.2.4
  * update yarn.lock
  * update terser dep</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1580212800">- Update to 1.2.6
  * Update dependencies</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1583236800">- Update to 2.0.0
  + User-facing changes
  * New user interface for notebook cell tags
  * File info display when hovering on a file in the file browser
  * Support for searching outputs in notebooks
  * ``Ctrl Shift .`` and ``Ctrl Shift ,`` shortcuts move focus to the next and previous tab bar in the main area, respectively
  * ``Shift Home`` and ``Shift End`` shortcuts in a notebook select all cells from the current cell to the top or bottom of a notebook, respectively
  * Explicit "No Kernel" button in the kernel selection dialog for new notebooks
  * Notebook ``recordTiming`` advanced setting to control whether execution timing information is stored in notebook files
  * "Select current running or last run cell" command added (requires notebook ``recordTiming`` advanced setting to be set to true)
  * Codemirror ``lineWiseCopyCut`` advanced setting to control the behavior of the copy/cut keyboard shortcuts when there is no selection
  * Refreshed the command palette and property inspector sidebar icons and user interfaces
  * "New File" and "New Markdown File" items in file browser context menu
  * "Download" item in File menu
  * "Restart Kernel and Run up to Selected Cell" item in notebook Kernel menu
  * In extension manager, the "enable" button is now only shown for installed extensions
  * Dialogs can now be closed by clicking outside of them
  * ``documentsearch:startWithReplace`` command to open the document find overlay with replace. There is not currently a default keyboard shortcut for this, but one can be assigned as a custom keyboard shortcut in Advanced Settings.
  * ``#`` added to the CSV Viewer delimiter options
  * The JSON viewer now only displays structure hints for arrays and empty objects for a more streamlined feel
  * Optional platform-aware keyboard shortcut fields ``linuxKeys``, ``macKeys``, and ``winKeys`` in keyboard shortcut definitions
  * Added options for ``jupyter lab clean`` to clean specific parts of the build, such as ``--extensions``, ``--settings``, ``--static``, and ``--all``
  * Removed the vega 4 and vega-lite 2 renderers (vega 5 and vega-lite 4 is included in JupyterLab by default). These legacy renderers may be available via custom extensions
  * JupyterHub users should use the ``c.Spawner.default_url = '/lab'`` setting instead of the deprecated and now removed ``labhubapp``
  + Backward incompatible changes
  * Switch from ``@phosphor`` to ``@lumino`` dependencies.
  * Factor out the ``settingsregistry`` and ``statedb`` packages from coreutils
  * Rework services architecture (sessions, kernels, terminals) and rename ``ClientSession`` to ``SessionContext``
  * Upgrade to TypeScript 3.7
  * Remove ``polling`` from coreutils in favor for ``@lumino/polling``
  * TypeScript strict null checking in core packages
  * Update state database list method to query based on namespace match.
  * Address code todo items and deprecations for 2.0
  * Update Console panel tracker widgets
  * Update contribution guide to require node v12+
  * New API for the ``Running`` sidebar extension
  * Clean up handling of icons under unified LabIcon
  + Other changes
  * New property inspector used to display the properties of the currently selected main area widget
  * Allow metadata for launcher items
  * Allow default file browser to restore manually.
  * Upgrade bundled yarn to 1.21.1
  * Make session dialogs configurable
  * Support transient editor configs
  * Optionally force new browser tab
  * Update core dependencies (e.g., ``codemirror``, ``xterm.js``, ``markdown``, ``fontawesome``, etc.)
  * Add storybook to ``ui-components``
  * Add explicit documentation encouraging people to re-use lab components
  * Enable TypeScript sourcemaps for debugging locally installed labextensions
  * Add ``UseSignal`` example to the docs
  * Add ``env`` prop to kernel options
  * Add kernelspec metadata
  * Allow different mimetypes for the clipboard data
  * Add password dialog to apputils
  * Alias phosphor packages to lumino to allow a deprecation period for phosphor
  * Match react version in ui-components peerdependencies
  * Fix lint-staged for both win and mac
  * Update websocket workaround for node environments
  * Fix handling of linked extensions
  * Fix extension compatibility checks for prereleases and extensions supporting multiple major versions of JupyterLab
  * Teach update-dependency about more range specifiers and make it adopt the current range for any tag
  * Add support for giving a rank to items in the top area
  * Apply all options to the initial JupyterLab application instance
  + Bugfixes
  * "Copy Shareable Link" in the file browser context menu now properly works in JupyterHub
  * Update Mathjax CDN in the cell and console examples
  * Revert ensure-max-old-space now that Node 12+ has better default memory ceilings
  * Resolve race condition between default file browser and tree urls.
  * Fix handling of code editor refresh
  * Start new notebooks in edit mode
  * Use consistent versions of React
  * Add scrollbar styles to nbconvert-css
  * Close output views when corresponding notebooks are closed
  * Fixed incorrect white background for new command palette icon
  * Block fetching the settings for a plugin that is disabled
  * When timing metadata changes, ensure signal fires
  * Prevent memory leaks in Vega renderer
  * Handle cell execution cancellation when cell is disposed
  * Fix dropdown option style issue on Windows
  * Make sure label is linked to a control when checking for element type
  * Refine log console message UX
  * Fix multicursor backspacing
  * Reset log display and count when non-notebook tab gets activated
  * Fix Safari multiple tabs by working around a Safari bug.
  * Skip custom click behavior on links when the download attribute is set
  * Fix context menu hit test to deal with SVG nodes.
  * Fix overwriting of target attribute of anchors rendered by ``IPython.display``
  * Fix file browser location in tree view
  * Stop too many fetch calls in docmanager-extension
  * Ensures that ``Shift Tab`` dedent shortcut works correctly in the file editor
  * Fix unexpected jump to last search result when using documentsearch
  * Fixed refresh issue for html viewer
  * Fix for center-aligned images with IPython.display.image
  * Changes to setting editor should trigger application dirty state
  * Move vega from "devdependencies" to "dependencies"
  * Restore default file browser manually.
  * Use default ``app_dir`` when ``app_dir`` is ``''``</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1583496000">- Requires nodejs/npm &gt;= 10</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585742400">- We should work with tornado 4, 5 and 6.
- The bugs were found in tornado 6.0.1 and 6.0.2 were fixed
  by upstream developers</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1659009600">- Update to 2.2.10:
  * Remove `form` tags' `action` attribute during sanitizing, to prevent an
    XSS (CVE-2021-32797) (bsc#1196663)
  * Header ‘Content-Type’ should not be overwritten
  * Do not use token parameters in websocket urls
  * Properly handle errors in async browser_check
  * Cells can no longer be executed while kernels are terminating or
    restarting. There is a new status for these events on the Kernel Indicator
  * Add styling for high memory usage warning in status bar with nbresuse
  * Adds support for Python version 3.10
  * Support live editing of SVG with updating rendering
  * Lazy load codemirror theme stylesheets
  * Add feature request template + slight reorg in readme
  * Add link to react example in extension-examples repo
  * Close correct tab with close tab
  * Remove unused css rules
  * Simplified multicursor backspace code
  * Fix recent breaking changes to normalizepath in filebrowser
  * Handle quit_button when launched as an extension
  * Add worker-loader
  * Fix icon sidebar height for third party extensions
  * Scrolls cells into view after deletion
  * Support Node.js 10+
  * Select search text when focusing the search overlay
  * Throttle fetch requests in the setting registry’s data connector
  * Avoid redundant checkpoint calls on loading a notebook</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1727092800">- Build the full pacakge with the javascript dependencies as a new
  source in vendor.tar.gz.
- Add CVE-2024-43805.patch, bsc#1229914</changelog>
</package>
<package pkgid="39b118ef85032df072e17bf7c276230bf17f6ad3e607c0e10580343c7d579020" name="jupyter-notebook" arch="noarch">
  <version epoch="0" ver="5.7.11" rel="bp156.4.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1524139200">- Update to version 5.4.1
  * A security release to fix CVE-2018-8768.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1527595200">- Update to version 5.5.0
  + New features:
  * The files list now shows file sizes (:ghpull:`3539`)
  * Add a quit button in the dashboard (:ghpull:`3004`)
  * Display hostname in the terminal when running remotely (:ghpull:`3356`, :ghpull:`3593`)
  * Add slides exportation/download to the menu (:ghpull:`3287`)
  * Add any extra installed nbconvert exporters to the "Download as" menu (:ghpull:`3323`)
  * Editor: warning when overwriting a file that is modified on disk (:ghpull:`2783`)
  * Display a warning message if cookies are not enabled (:ghpull:`3511`)
  * Basic ``__version__`` reporting for extensions (:ghpull:`3541`)
  * Add ``NotebookApp.terminals_enabled`` config option (:ghpull:`3478`)
  * Make buffer time between last modified on disk and last modified on last save configurable (:ghpull:`3273`)
  * Allow binding custom shortcuts for 'close and halt' (:ghpull:`3314`)
  * Add description for 'Trusted' notification (:ghpull:`3386`)
  * Add ``settings['activity_sources']`` (:ghpull:`3401`)
  * Add an ``output_updated.OutputArea`` event (:ghpull:`3560`)
  + Fixing problems:
  * Fixes to improve web accessibility (:ghpull:`3507`)
    There is more to do on this! See :ghissue:`1801`.
  * Fixed color contrast issue in tree.less (:ghpull:`3336`)
  * Allow cancelling upload of large files (:ghpull:`3373`)
  * Don't clear login cookie on requests without cookie (:ghpull:`3380`)
  * Don't trash files on different device to home dir on Linux (:ghpull:`3304`)
  * Clear waiting asterisks when restarting kernel (:ghpull:`3494`)
  * Fix output prompt when ``execution_count`` missing (:ghpull:`3236`)
  * Make the 'changed on disk' dialog work when displayed twice (:ghpull:`3589`)
  * Fix going back to root directory with history in notebook list (:ghpull:`3411`)
  * Allow defining keyboard shortcuts for missing actions (:ghpull:`3561`)
  * Prevent default on pageup/pagedown when completer is active (:ghpull:`3500`)
  * Prevent default event handling on new terminal (:ghpull:`3497`)
  * ConfigManager should not write out default values found in the .d directory (:ghpull:`3485`)
  * Fix leak of iopub object in activity monitoring (:ghpull:`3424`)
  * Javascript lint in notebooklist.js (:ghpull:`3409`)
  * Some Javascript syntax fixes (:ghpull:`3294`)
  * Convert native for loop to ``Array.forEach()`` (:ghpull:`3477`)
  * Disable cache when downloading nbconvert output (:ghpull:`3484`)
  * Add missing digestmod arg to HMAC (:ghpull:`3399`)
  * Log OSErrors failing to create less-critical files during startup (:ghpull:`3384`)
  * Use powershell on Windows (:ghpull:`3379`)
  * API spec improvements, API handler improvements (:ghpull:`3368`)
  * Set notebook to dirty state after change to kernel metadata (:ghpull:`3350`)
  * Use CSP header to treat served files as belonging to a separate origin (:ghpull:`3341`)
  * Don't install gettext into builtins (:ghpull:`3330`)
  * Add missing ``import _`` (:ghpull:`3316`, :ghpull:`3326`)
  * Write ``notebook.json`` file atomically (:ghpull:`3305`)
  * Fix clicking with modifiers, page title updates (:ghpull:`3282`)
  * Upgrade jQuery to version 2.2 (:ghpull:`3428`)
  * Upgrade xterm.js to 3.1.0 (:ghpull:`3189`)
  * Upgrade moment.js to 2.19.3 (:ghpull:`3562`)
  * Upgrade CodeMirror to 5.35 (:ghpull:`3372`)
  * "Require" pyzmq&gt;=17 (:ghpull:`3586`)
  + Documentation:
  * Documentation updates and organisation (:ghpull:`3584`)
  * Add section in docs about privacy (:ghpull:`3571`)
  * Add explanation on how to change the type of a cell to Markdown (:ghpull:`3377`)
  * Update docs with confd implementation details (:ghpull:`3520`)
  * Add more information for where ``jupyter_notebook_config.py`` is located (:ghpull:`3346`)
  * Document options to enable nbextensions in specific sections (:ghpull:`3525`)
  * jQuery attribute selector value MUST be surrounded by quotes (:ghpull:`3527`)
  * Do not execute special notebooks with nbsphinx (:ghpull:`3360`)
  * Other minor fixes in :ghpull:`3288`, :ghpull:`3528`, :ghpull:`3293`, :ghpull:`3367`
  + Testing:
  * Testing with Selenium &amp; Sauce labs (:ghpull:`3321`)
  * Selenium utils + markdown rendering tests (:ghpull:`3458`)
  * Convert insert cell tests to Selenium (:ghpull:`3508`)
  * Convert prompt numbers tests to Selenium (:ghpull:`3554`)
  * Convert delete cells tests to Selenium (:ghpull:`3465`)
  * Convert undelete cell tests to Selenium (:ghpull:`3475`)
  * More selenium testing utilities (:ghpull:`3412`)
  * Only check links when build is trigger by Travis Cron job (:ghpull:`3493`)
  * Fix Appveyor build errors (:ghpull:`3430`)
  * Undo patches in teardown before attempting to delete files (:ghpull:`3459`)
  * Get tests running with tornado 5 (:ghpull:`3398`)
  * Unpin ipykernel version on Travis (:ghpull:`3223`)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1533211200">- Update to version 5.6.0
  + New features:
  * Execute cells by clicking icon in input prompt (:ghpull:`3535`, :ghpull:`3687`)
  * New "Save as" menu option (:ghpull:`3289`)
  * When serving on a loopback interface, protect against DNS rebinding by
    checking the ``Host`` header from the browser (:ghpull:`3714`).
    This check can be disabled if necessary by setting
    ``NotebookApp.allow_remote_access``.
    (Disabled by default while we work out some Mac issues in :ghissue:`3754`).
  * Add kernel_info_timeout traitlet to enable restarting slow kernels (:ghpull:`3665`)
  * Add ``custom_display_host`` config option to override displayed URL (:ghpull:`3668`)
  * Add /metrics endpoint for Prometheus Metrics (:ghpull:`3490`)
  * Update to MathJax 2.7.4 (:ghpull:`3751`)
  * Update to jQuery 3.3 (:ghpull:`3655`)
  * Update marked to 0.4 (:ghpull:`3686`)
  + Fixing problems:
  * Don't duplicate token in displayed URL (:ghpull:`3656`)
  * Clarify displayed URL when listening on all interfaces (:ghpull:`3703`)
  * Don't trash non-empty directories on Windows (:ghpull:`3673`)
  * Include LICENSE file in wheels (:ghpull:`3671`)
- Don't show "0 active kernels" when starting the notebook (:ghpull:`3696`)
  + Testing:
  * Add find replace test (:ghpull:`3630`)
  * Selenium test for deleting all cells (:ghpull:`3601`)
  * Make creating a new notebook more robust (:ghpull:`3726`)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1538136000">- Update to version 5.7.0
  + New features:
  * Update to CodeMirror to 5.37, which includes f-string sytax for Python 3.6 (:ghpull:`3816`)
  * Update jquery-ui to 1.12 (:ghpull:`3836`)
  * Check Host header to more securely protect localhost deployments from DNS rebinding.
    This is a pre-emptive measure, not fixing a known vulnerability (:ghpull:`3766`).
    Use ``.NotebookApp.allow_remote_access`` and ``.NotebookApp.local_hostnames`` to configure
    access.
  * Allow access-control-allow-headers to be overridden (:ghpull:`3886`)
  * Allow configuring max_body_size and max_buffer_size (:ghpull:`3829`)
  * Allow configuring get_secure_cookie keyword-args (:ghpull:`3778`)
  * Respect nbconvert entrypoints as sources for exporters (:ghpull:`3879`)
  * Include translation sources in source distributions (:ghpull:`3925`, :ghpull:`3931`)
  * Various improvements to documentation (:ghpull:`3799`, :ghpull:`3800`,
    :ghpull:`3806`, :ghpull:`3883`, :ghpull:`3908`)
  + Fixing problems:
  * Fix breadcrumb link when running with a base url (:ghpull:`3905`)
  * Fix possible type error when closing activity stream (:ghpull:`3907`)
  * Disable metadata editing for non-editable cells (:ghpull:`3744`)
  * Fix some styling and alignment of prompts caused by regressions in 5.6.0.
  * Enter causing page reload in shortcuts editor (:ghpull:`3871`)
  * Fix uploading to the same file twice (:ghpull:`3712`)
  * Drop -doc subpackage.  Use pre-built upstream docs instead.</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1543060800">- update to version 5.7.2:
  * 5.7.2 contains a security fix preventing malicious directory names
    from being able to execute javascript. CVE request pending.
- changes from version 5.7.1:
  * 5.7.1 contains a security fix preventing nbconvert endpoints from
    executing javascript with access to the server API. CVE request
    pending.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1546603200">- Update to 5.7.4
  * fixes a bug introduced in 5.7.3, in which the ``list_running_servers()``
    function attempts to parse HTML files as JSON, and consequently crashes
  (:ghpull:`4284`).
- Update to 5.7.3
  * Launch the browser with a local file which redirects to the server address
    including the authentication token (:ghpull:`4260`).
    This prevents another logged-in user from stealing the token from command line
    arguments and authenticating to the server.
    The single-use token previously used to mitigate this has been removed.
    Thanks to Dr. Owain Kenway for suggesting the local file approach.
  * Upgrade bootstrap to 3.4, fixing an XSS vulnerability, which has been
    assigned `CVE-2018-14041 &lt;https://nvd.nist.gov/vuln/detail/CVE-2018-14041&gt;`_
    (:ghpull:`4271`).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547035200">- Fix {name} -&gt; %{name}</changelog>
  <changelog author="rolf@rotkraut.de" date="1547208000">- Update requirements: python-jupyter_core &gt;= 4.4.0, python-terminado &gt;= 0.8.1.</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1552132800">- update to version 5.7.5:
  * Fix compatibility with tornado 6 (:ghpull:`4392`, :ghpull:`4449`).
  * Fix opening integer filedescriptor during startup on Python 2
    (:ghpull:`4349`)
  * Fix compatibility with asynchronous KernelManager.restart_kernel
    methods (:ghpull:`4412`)</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1552219200">- update to version 5.7.6:
  * 5.7.6 contains a security fix for a cross-site inclusion (XSSI)
    vulnerability, where files at a known URL could be included in a
    page from an unauthorized website if the user is logged into a
    Jupyter server. The fix involves setting the
    X-Content-Type-Options: nosniff header, and applying CSRF checks
    previously on all non-GET API requests to GET requests to API
    endpoints and the /files/ endpoint.
    The attacking page is able to access some contents of files when
    using Internet Explorer through script errors, but this has not
    been demonstrated with other browsers. A CVE has been requested
    for this vulnerability.</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1553947200">- update to version 5.7.7:
  * Fix regression in restarting kernels in 5.7.5. The restart handler
    would return before restart was completed.
  * Further improve compatibility with tornado 6 with improved checks
    for when websockets are closed.
  * Fix regression in 5.7.6 on Windows where .js files could have the
    wrong mime-type.
  * Fix Open Redirect vulnerability where certain malicious URLs could
    redirect from the Jupyter login page to a malicious site after a
    successful login. A CVE has been requested for this vulnerability.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1554120000">- Fix doc url</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Update to 5.7.8
  * Fix regression in restarting kernels in 5.7.5.
    The restart handler would return before restart was completed.
  * Further improve compatibility with tornado 6 with improved
    checks for when websockets are closed.
  * Fix regression in 5.7.6 on Windows where .js files could have the wrong mime-type.
  * Fix Open Redirect vulnerability (CVE-2019-10255)
    where certain malicious URLs could redirect from the Jupyter login page
    to a malicious site after a successful login.
    5.7.7 contained only a partial fix for this issue.
- Rename to to match python package naming guidelines.
- Split jupyter components into own subpackage.
- Add rpm macros.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1557921600">- Add conflicts to jupyter subpackage to more explicitly handle
  file overlaps with old naming scheme.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1558526400">- Split directories and macros into separate package.
- Make lang subpackage python version-specific</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1558699200">- Add a jupyter-specific language package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559044800">- Use noun phrase in summary.</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584446400">- Fixup to build with the TW based packages.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1609761600">- Fix boo#1180458 (CVE-2020-26215) with CVE-2020-26215.patch</changelog>
  <changelog author="Nico Krapp &lt;nico.krapp@suse.com&gt;" date="1722513600">- Update to 5.7.11
  * sanitizer fix CVE-2021-32798 (bsc#1227583)
- Update to 5.7.10
  * no upstream changelog
- Update to 5.7.9
  * Update JQuery dependency to version 3.4.1 to fix security
    vulnerability (CVE-2019-11358)
  * Update from preact to React</changelog>
</package>
<package pkgid="cc4ed8c1f344031297a3cb8c870d1ac3ad1ce45e7a4e48211df9c0a3317896d5" name="jupyter-notebook-doc" arch="noarch">
  <version epoch="0" ver="5.7.11" rel="bp156.4.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1524139200">- Update to version 5.4.1
  * A security release to fix CVE-2018-8768.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1527595200">- Update to version 5.5.0
  + New features:
  * The files list now shows file sizes (:ghpull:`3539`)
  * Add a quit button in the dashboard (:ghpull:`3004`)
  * Display hostname in the terminal when running remotely (:ghpull:`3356`, :ghpull:`3593`)
  * Add slides exportation/download to the menu (:ghpull:`3287`)
  * Add any extra installed nbconvert exporters to the "Download as" menu (:ghpull:`3323`)
  * Editor: warning when overwriting a file that is modified on disk (:ghpull:`2783`)
  * Display a warning message if cookies are not enabled (:ghpull:`3511`)
  * Basic ``__version__`` reporting for extensions (:ghpull:`3541`)
  * Add ``NotebookApp.terminals_enabled`` config option (:ghpull:`3478`)
  * Make buffer time between last modified on disk and last modified on last save configurable (:ghpull:`3273`)
  * Allow binding custom shortcuts for 'close and halt' (:ghpull:`3314`)
  * Add description for 'Trusted' notification (:ghpull:`3386`)
  * Add ``settings['activity_sources']`` (:ghpull:`3401`)
  * Add an ``output_updated.OutputArea`` event (:ghpull:`3560`)
  + Fixing problems:
  * Fixes to improve web accessibility (:ghpull:`3507`)
    There is more to do on this! See :ghissue:`1801`.
  * Fixed color contrast issue in tree.less (:ghpull:`3336`)
  * Allow cancelling upload of large files (:ghpull:`3373`)
  * Don't clear login cookie on requests without cookie (:ghpull:`3380`)
  * Don't trash files on different device to home dir on Linux (:ghpull:`3304`)
  * Clear waiting asterisks when restarting kernel (:ghpull:`3494`)
  * Fix output prompt when ``execution_count`` missing (:ghpull:`3236`)
  * Make the 'changed on disk' dialog work when displayed twice (:ghpull:`3589`)
  * Fix going back to root directory with history in notebook list (:ghpull:`3411`)
  * Allow defining keyboard shortcuts for missing actions (:ghpull:`3561`)
  * Prevent default on pageup/pagedown when completer is active (:ghpull:`3500`)
  * Prevent default event handling on new terminal (:ghpull:`3497`)
  * ConfigManager should not write out default values found in the .d directory (:ghpull:`3485`)
  * Fix leak of iopub object in activity monitoring (:ghpull:`3424`)
  * Javascript lint in notebooklist.js (:ghpull:`3409`)
  * Some Javascript syntax fixes (:ghpull:`3294`)
  * Convert native for loop to ``Array.forEach()`` (:ghpull:`3477`)
  * Disable cache when downloading nbconvert output (:ghpull:`3484`)
  * Add missing digestmod arg to HMAC (:ghpull:`3399`)
  * Log OSErrors failing to create less-critical files during startup (:ghpull:`3384`)
  * Use powershell on Windows (:ghpull:`3379`)
  * API spec improvements, API handler improvements (:ghpull:`3368`)
  * Set notebook to dirty state after change to kernel metadata (:ghpull:`3350`)
  * Use CSP header to treat served files as belonging to a separate origin (:ghpull:`3341`)
  * Don't install gettext into builtins (:ghpull:`3330`)
  * Add missing ``import _`` (:ghpull:`3316`, :ghpull:`3326`)
  * Write ``notebook.json`` file atomically (:ghpull:`3305`)
  * Fix clicking with modifiers, page title updates (:ghpull:`3282`)
  * Upgrade jQuery to version 2.2 (:ghpull:`3428`)
  * Upgrade xterm.js to 3.1.0 (:ghpull:`3189`)
  * Upgrade moment.js to 2.19.3 (:ghpull:`3562`)
  * Upgrade CodeMirror to 5.35 (:ghpull:`3372`)
  * "Require" pyzmq&gt;=17 (:ghpull:`3586`)
  + Documentation:
  * Documentation updates and organisation (:ghpull:`3584`)
  * Add section in docs about privacy (:ghpull:`3571`)
  * Add explanation on how to change the type of a cell to Markdown (:ghpull:`3377`)
  * Update docs with confd implementation details (:ghpull:`3520`)
  * Add more information for where ``jupyter_notebook_config.py`` is located (:ghpull:`3346`)
  * Document options to enable nbextensions in specific sections (:ghpull:`3525`)
  * jQuery attribute selector value MUST be surrounded by quotes (:ghpull:`3527`)
  * Do not execute special notebooks with nbsphinx (:ghpull:`3360`)
  * Other minor fixes in :ghpull:`3288`, :ghpull:`3528`, :ghpull:`3293`, :ghpull:`3367`
  + Testing:
  * Testing with Selenium &amp; Sauce labs (:ghpull:`3321`)
  * Selenium utils + markdown rendering tests (:ghpull:`3458`)
  * Convert insert cell tests to Selenium (:ghpull:`3508`)
  * Convert prompt numbers tests to Selenium (:ghpull:`3554`)
  * Convert delete cells tests to Selenium (:ghpull:`3465`)
  * Convert undelete cell tests to Selenium (:ghpull:`3475`)
  * More selenium testing utilities (:ghpull:`3412`)
  * Only check links when build is trigger by Travis Cron job (:ghpull:`3493`)
  * Fix Appveyor build errors (:ghpull:`3430`)
  * Undo patches in teardown before attempting to delete files (:ghpull:`3459`)
  * Get tests running with tornado 5 (:ghpull:`3398`)
  * Unpin ipykernel version on Travis (:ghpull:`3223`)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1533211200">- Update to version 5.6.0
  + New features:
  * Execute cells by clicking icon in input prompt (:ghpull:`3535`, :ghpull:`3687`)
  * New "Save as" menu option (:ghpull:`3289`)
  * When serving on a loopback interface, protect against DNS rebinding by
    checking the ``Host`` header from the browser (:ghpull:`3714`).
    This check can be disabled if necessary by setting
    ``NotebookApp.allow_remote_access``.
    (Disabled by default while we work out some Mac issues in :ghissue:`3754`).
  * Add kernel_info_timeout traitlet to enable restarting slow kernels (:ghpull:`3665`)
  * Add ``custom_display_host`` config option to override displayed URL (:ghpull:`3668`)
  * Add /metrics endpoint for Prometheus Metrics (:ghpull:`3490`)
  * Update to MathJax 2.7.4 (:ghpull:`3751`)
  * Update to jQuery 3.3 (:ghpull:`3655`)
  * Update marked to 0.4 (:ghpull:`3686`)
  + Fixing problems:
  * Don't duplicate token in displayed URL (:ghpull:`3656`)
  * Clarify displayed URL when listening on all interfaces (:ghpull:`3703`)
  * Don't trash non-empty directories on Windows (:ghpull:`3673`)
  * Include LICENSE file in wheels (:ghpull:`3671`)
- Don't show "0 active kernels" when starting the notebook (:ghpull:`3696`)
  + Testing:
  * Add find replace test (:ghpull:`3630`)
  * Selenium test for deleting all cells (:ghpull:`3601`)
  * Make creating a new notebook more robust (:ghpull:`3726`)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1538136000">- Update to version 5.7.0
  + New features:
  * Update to CodeMirror to 5.37, which includes f-string sytax for Python 3.6 (:ghpull:`3816`)
  * Update jquery-ui to 1.12 (:ghpull:`3836`)
  * Check Host header to more securely protect localhost deployments from DNS rebinding.
    This is a pre-emptive measure, not fixing a known vulnerability (:ghpull:`3766`).
    Use ``.NotebookApp.allow_remote_access`` and ``.NotebookApp.local_hostnames`` to configure
    access.
  * Allow access-control-allow-headers to be overridden (:ghpull:`3886`)
  * Allow configuring max_body_size and max_buffer_size (:ghpull:`3829`)
  * Allow configuring get_secure_cookie keyword-args (:ghpull:`3778`)
  * Respect nbconvert entrypoints as sources for exporters (:ghpull:`3879`)
  * Include translation sources in source distributions (:ghpull:`3925`, :ghpull:`3931`)
  * Various improvements to documentation (:ghpull:`3799`, :ghpull:`3800`,
    :ghpull:`3806`, :ghpull:`3883`, :ghpull:`3908`)
  + Fixing problems:
  * Fix breadcrumb link when running with a base url (:ghpull:`3905`)
  * Fix possible type error when closing activity stream (:ghpull:`3907`)
  * Disable metadata editing for non-editable cells (:ghpull:`3744`)
  * Fix some styling and alignment of prompts caused by regressions in 5.6.0.
  * Enter causing page reload in shortcuts editor (:ghpull:`3871`)
  * Fix uploading to the same file twice (:ghpull:`3712`)
  * Drop -doc subpackage.  Use pre-built upstream docs instead.</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1543060800">- update to version 5.7.2:
  * 5.7.2 contains a security fix preventing malicious directory names
    from being able to execute javascript. CVE request pending.
- changes from version 5.7.1:
  * 5.7.1 contains a security fix preventing nbconvert endpoints from
    executing javascript with access to the server API. CVE request
    pending.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1546603200">- Update to 5.7.4
  * fixes a bug introduced in 5.7.3, in which the ``list_running_servers()``
    function attempts to parse HTML files as JSON, and consequently crashes
  (:ghpull:`4284`).
- Update to 5.7.3
  * Launch the browser with a local file which redirects to the server address
    including the authentication token (:ghpull:`4260`).
    This prevents another logged-in user from stealing the token from command line
    arguments and authenticating to the server.
    The single-use token previously used to mitigate this has been removed.
    Thanks to Dr. Owain Kenway for suggesting the local file approach.
  * Upgrade bootstrap to 3.4, fixing an XSS vulnerability, which has been
    assigned `CVE-2018-14041 &lt;https://nvd.nist.gov/vuln/detail/CVE-2018-14041&gt;`_
    (:ghpull:`4271`).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547035200">- Fix {name} -&gt; %{name}</changelog>
  <changelog author="rolf@rotkraut.de" date="1547208000">- Update requirements: python-jupyter_core &gt;= 4.4.0, python-terminado &gt;= 0.8.1.</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1552132800">- update to version 5.7.5:
  * Fix compatibility with tornado 6 (:ghpull:`4392`, :ghpull:`4449`).
  * Fix opening integer filedescriptor during startup on Python 2
    (:ghpull:`4349`)
  * Fix compatibility with asynchronous KernelManager.restart_kernel
    methods (:ghpull:`4412`)</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1552219200">- update to version 5.7.6:
  * 5.7.6 contains a security fix for a cross-site inclusion (XSSI)
    vulnerability, where files at a known URL could be included in a
    page from an unauthorized website if the user is logged into a
    Jupyter server. The fix involves setting the
    X-Content-Type-Options: nosniff header, and applying CSRF checks
    previously on all non-GET API requests to GET requests to API
    endpoints and the /files/ endpoint.
    The attacking page is able to access some contents of files when
    using Internet Explorer through script errors, but this has not
    been demonstrated with other browsers. A CVE has been requested
    for this vulnerability.</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1553947200">- update to version 5.7.7:
  * Fix regression in restarting kernels in 5.7.5. The restart handler
    would return before restart was completed.
  * Further improve compatibility with tornado 6 with improved checks
    for when websockets are closed.
  * Fix regression in 5.7.6 on Windows where .js files could have the
    wrong mime-type.
  * Fix Open Redirect vulnerability where certain malicious URLs could
    redirect from the Jupyter login page to a malicious site after a
    successful login. A CVE has been requested for this vulnerability.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1554120000">- Fix doc url</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Update to 5.7.8
  * Fix regression in restarting kernels in 5.7.5.
    The restart handler would return before restart was completed.
  * Further improve compatibility with tornado 6 with improved
    checks for when websockets are closed.
  * Fix regression in 5.7.6 on Windows where .js files could have the wrong mime-type.
  * Fix Open Redirect vulnerability (CVE-2019-10255)
    where certain malicious URLs could redirect from the Jupyter login page
    to a malicious site after a successful login.
    5.7.7 contained only a partial fix for this issue.
- Rename to to match python package naming guidelines.
- Split jupyter components into own subpackage.
- Add rpm macros.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1557921600">- Add conflicts to jupyter subpackage to more explicitly handle
  file overlaps with old naming scheme.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1558526400">- Split directories and macros into separate package.
- Make lang subpackage python version-specific</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1558699200">- Add a jupyter-specific language package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559044800">- Use noun phrase in summary.</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584446400">- Fixup to build with the TW based packages.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1609761600">- Fix boo#1180458 (CVE-2020-26215) with CVE-2020-26215.patch</changelog>
  <changelog author="Nico Krapp &lt;nico.krapp@suse.com&gt;" date="1722513600">- Update to 5.7.11
  * sanitizer fix CVE-2021-32798 (bsc#1227583)
- Update to 5.7.10
  * no upstream changelog
- Update to 5.7.9
  * Update JQuery dependency to version 3.4.1 to fix security
    vulnerability (CVE-2019-11358)
  * Update from preact to React</changelog>
</package>
<package pkgid="958aec89f7fad8a64765e34310b2b6e22050ddb514eb869ab6adee954bfd5d45" name="jupyter-notebook-lang" arch="noarch">
  <version epoch="0" ver="5.7.11" rel="bp156.4.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1524139200">- Update to version 5.4.1
  * A security release to fix CVE-2018-8768.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1527595200">- Update to version 5.5.0
  + New features:
  * The files list now shows file sizes (:ghpull:`3539`)
  * Add a quit button in the dashboard (:ghpull:`3004`)
  * Display hostname in the terminal when running remotely (:ghpull:`3356`, :ghpull:`3593`)
  * Add slides exportation/download to the menu (:ghpull:`3287`)
  * Add any extra installed nbconvert exporters to the "Download as" menu (:ghpull:`3323`)
  * Editor: warning when overwriting a file that is modified on disk (:ghpull:`2783`)
  * Display a warning message if cookies are not enabled (:ghpull:`3511`)
  * Basic ``__version__`` reporting for extensions (:ghpull:`3541`)
  * Add ``NotebookApp.terminals_enabled`` config option (:ghpull:`3478`)
  * Make buffer time between last modified on disk and last modified on last save configurable (:ghpull:`3273`)
  * Allow binding custom shortcuts for 'close and halt' (:ghpull:`3314`)
  * Add description for 'Trusted' notification (:ghpull:`3386`)
  * Add ``settings['activity_sources']`` (:ghpull:`3401`)
  * Add an ``output_updated.OutputArea`` event (:ghpull:`3560`)
  + Fixing problems:
  * Fixes to improve web accessibility (:ghpull:`3507`)
    There is more to do on this! See :ghissue:`1801`.
  * Fixed color contrast issue in tree.less (:ghpull:`3336`)
  * Allow cancelling upload of large files (:ghpull:`3373`)
  * Don't clear login cookie on requests without cookie (:ghpull:`3380`)
  * Don't trash files on different device to home dir on Linux (:ghpull:`3304`)
  * Clear waiting asterisks when restarting kernel (:ghpull:`3494`)
  * Fix output prompt when ``execution_count`` missing (:ghpull:`3236`)
  * Make the 'changed on disk' dialog work when displayed twice (:ghpull:`3589`)
  * Fix going back to root directory with history in notebook list (:ghpull:`3411`)
  * Allow defining keyboard shortcuts for missing actions (:ghpull:`3561`)
  * Prevent default on pageup/pagedown when completer is active (:ghpull:`3500`)
  * Prevent default event handling on new terminal (:ghpull:`3497`)
  * ConfigManager should not write out default values found in the .d directory (:ghpull:`3485`)
  * Fix leak of iopub object in activity monitoring (:ghpull:`3424`)
  * Javascript lint in notebooklist.js (:ghpull:`3409`)
  * Some Javascript syntax fixes (:ghpull:`3294`)
  * Convert native for loop to ``Array.forEach()`` (:ghpull:`3477`)
  * Disable cache when downloading nbconvert output (:ghpull:`3484`)
  * Add missing digestmod arg to HMAC (:ghpull:`3399`)
  * Log OSErrors failing to create less-critical files during startup (:ghpull:`3384`)
  * Use powershell on Windows (:ghpull:`3379`)
  * API spec improvements, API handler improvements (:ghpull:`3368`)
  * Set notebook to dirty state after change to kernel metadata (:ghpull:`3350`)
  * Use CSP header to treat served files as belonging to a separate origin (:ghpull:`3341`)
  * Don't install gettext into builtins (:ghpull:`3330`)
  * Add missing ``import _`` (:ghpull:`3316`, :ghpull:`3326`)
  * Write ``notebook.json`` file atomically (:ghpull:`3305`)
  * Fix clicking with modifiers, page title updates (:ghpull:`3282`)
  * Upgrade jQuery to version 2.2 (:ghpull:`3428`)
  * Upgrade xterm.js to 3.1.0 (:ghpull:`3189`)
  * Upgrade moment.js to 2.19.3 (:ghpull:`3562`)
  * Upgrade CodeMirror to 5.35 (:ghpull:`3372`)
  * "Require" pyzmq&gt;=17 (:ghpull:`3586`)
  + Documentation:
  * Documentation updates and organisation (:ghpull:`3584`)
  * Add section in docs about privacy (:ghpull:`3571`)
  * Add explanation on how to change the type of a cell to Markdown (:ghpull:`3377`)
  * Update docs with confd implementation details (:ghpull:`3520`)
  * Add more information for where ``jupyter_notebook_config.py`` is located (:ghpull:`3346`)
  * Document options to enable nbextensions in specific sections (:ghpull:`3525`)
  * jQuery attribute selector value MUST be surrounded by quotes (:ghpull:`3527`)
  * Do not execute special notebooks with nbsphinx (:ghpull:`3360`)
  * Other minor fixes in :ghpull:`3288`, :ghpull:`3528`, :ghpull:`3293`, :ghpull:`3367`
  + Testing:
  * Testing with Selenium &amp; Sauce labs (:ghpull:`3321`)
  * Selenium utils + markdown rendering tests (:ghpull:`3458`)
  * Convert insert cell tests to Selenium (:ghpull:`3508`)
  * Convert prompt numbers tests to Selenium (:ghpull:`3554`)
  * Convert delete cells tests to Selenium (:ghpull:`3465`)
  * Convert undelete cell tests to Selenium (:ghpull:`3475`)
  * More selenium testing utilities (:ghpull:`3412`)
  * Only check links when build is trigger by Travis Cron job (:ghpull:`3493`)
  * Fix Appveyor build errors (:ghpull:`3430`)
  * Undo patches in teardown before attempting to delete files (:ghpull:`3459`)
  * Get tests running with tornado 5 (:ghpull:`3398`)
  * Unpin ipykernel version on Travis (:ghpull:`3223`)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1533211200">- Update to version 5.6.0
  + New features:
  * Execute cells by clicking icon in input prompt (:ghpull:`3535`, :ghpull:`3687`)
  * New "Save as" menu option (:ghpull:`3289`)
  * When serving on a loopback interface, protect against DNS rebinding by
    checking the ``Host`` header from the browser (:ghpull:`3714`).
    This check can be disabled if necessary by setting
    ``NotebookApp.allow_remote_access``.
    (Disabled by default while we work out some Mac issues in :ghissue:`3754`).
  * Add kernel_info_timeout traitlet to enable restarting slow kernels (:ghpull:`3665`)
  * Add ``custom_display_host`` config option to override displayed URL (:ghpull:`3668`)
  * Add /metrics endpoint for Prometheus Metrics (:ghpull:`3490`)
  * Update to MathJax 2.7.4 (:ghpull:`3751`)
  * Update to jQuery 3.3 (:ghpull:`3655`)
  * Update marked to 0.4 (:ghpull:`3686`)
  + Fixing problems:
  * Don't duplicate token in displayed URL (:ghpull:`3656`)
  * Clarify displayed URL when listening on all interfaces (:ghpull:`3703`)
  * Don't trash non-empty directories on Windows (:ghpull:`3673`)
  * Include LICENSE file in wheels (:ghpull:`3671`)
- Don't show "0 active kernels" when starting the notebook (:ghpull:`3696`)
  + Testing:
  * Add find replace test (:ghpull:`3630`)
  * Selenium test for deleting all cells (:ghpull:`3601`)
  * Make creating a new notebook more robust (:ghpull:`3726`)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1538136000">- Update to version 5.7.0
  + New features:
  * Update to CodeMirror to 5.37, which includes f-string sytax for Python 3.6 (:ghpull:`3816`)
  * Update jquery-ui to 1.12 (:ghpull:`3836`)
  * Check Host header to more securely protect localhost deployments from DNS rebinding.
    This is a pre-emptive measure, not fixing a known vulnerability (:ghpull:`3766`).
    Use ``.NotebookApp.allow_remote_access`` and ``.NotebookApp.local_hostnames`` to configure
    access.
  * Allow access-control-allow-headers to be overridden (:ghpull:`3886`)
  * Allow configuring max_body_size and max_buffer_size (:ghpull:`3829`)
  * Allow configuring get_secure_cookie keyword-args (:ghpull:`3778`)
  * Respect nbconvert entrypoints as sources for exporters (:ghpull:`3879`)
  * Include translation sources in source distributions (:ghpull:`3925`, :ghpull:`3931`)
  * Various improvements to documentation (:ghpull:`3799`, :ghpull:`3800`,
    :ghpull:`3806`, :ghpull:`3883`, :ghpull:`3908`)
  + Fixing problems:
  * Fix breadcrumb link when running with a base url (:ghpull:`3905`)
  * Fix possible type error when closing activity stream (:ghpull:`3907`)
  * Disable metadata editing for non-editable cells (:ghpull:`3744`)
  * Fix some styling and alignment of prompts caused by regressions in 5.6.0.
  * Enter causing page reload in shortcuts editor (:ghpull:`3871`)
  * Fix uploading to the same file twice (:ghpull:`3712`)
  * Drop -doc subpackage.  Use pre-built upstream docs instead.</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1543060800">- update to version 5.7.2:
  * 5.7.2 contains a security fix preventing malicious directory names
    from being able to execute javascript. CVE request pending.
- changes from version 5.7.1:
  * 5.7.1 contains a security fix preventing nbconvert endpoints from
    executing javascript with access to the server API. CVE request
    pending.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1546603200">- Update to 5.7.4
  * fixes a bug introduced in 5.7.3, in which the ``list_running_servers()``
    function attempts to parse HTML files as JSON, and consequently crashes
  (:ghpull:`4284`).
- Update to 5.7.3
  * Launch the browser with a local file which redirects to the server address
    including the authentication token (:ghpull:`4260`).
    This prevents another logged-in user from stealing the token from command line
    arguments and authenticating to the server.
    The single-use token previously used to mitigate this has been removed.
    Thanks to Dr. Owain Kenway for suggesting the local file approach.
  * Upgrade bootstrap to 3.4, fixing an XSS vulnerability, which has been
    assigned `CVE-2018-14041 &lt;https://nvd.nist.gov/vuln/detail/CVE-2018-14041&gt;`_
    (:ghpull:`4271`).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547035200">- Fix {name} -&gt; %{name}</changelog>
  <changelog author="rolf@rotkraut.de" date="1547208000">- Update requirements: python-jupyter_core &gt;= 4.4.0, python-terminado &gt;= 0.8.1.</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1552132800">- update to version 5.7.5:
  * Fix compatibility with tornado 6 (:ghpull:`4392`, :ghpull:`4449`).
  * Fix opening integer filedescriptor during startup on Python 2
    (:ghpull:`4349`)
  * Fix compatibility with asynchronous KernelManager.restart_kernel
    methods (:ghpull:`4412`)</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1552219200">- update to version 5.7.6:
  * 5.7.6 contains a security fix for a cross-site inclusion (XSSI)
    vulnerability, where files at a known URL could be included in a
    page from an unauthorized website if the user is logged into a
    Jupyter server. The fix involves setting the
    X-Content-Type-Options: nosniff header, and applying CSRF checks
    previously on all non-GET API requests to GET requests to API
    endpoints and the /files/ endpoint.
    The attacking page is able to access some contents of files when
    using Internet Explorer through script errors, but this has not
    been demonstrated with other browsers. A CVE has been requested
    for this vulnerability.</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1553947200">- update to version 5.7.7:
  * Fix regression in restarting kernels in 5.7.5. The restart handler
    would return before restart was completed.
  * Further improve compatibility with tornado 6 with improved checks
    for when websockets are closed.
  * Fix regression in 5.7.6 on Windows where .js files could have the
    wrong mime-type.
  * Fix Open Redirect vulnerability where certain malicious URLs could
    redirect from the Jupyter login page to a malicious site after a
    successful login. A CVE has been requested for this vulnerability.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1554120000">- Fix doc url</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Update to 5.7.8
  * Fix regression in restarting kernels in 5.7.5.
    The restart handler would return before restart was completed.
  * Further improve compatibility with tornado 6 with improved
    checks for when websockets are closed.
  * Fix regression in 5.7.6 on Windows where .js files could have the wrong mime-type.
  * Fix Open Redirect vulnerability (CVE-2019-10255)
    where certain malicious URLs could redirect from the Jupyter login page
    to a malicious site after a successful login.
    5.7.7 contained only a partial fix for this issue.
- Rename to to match python package naming guidelines.
- Split jupyter components into own subpackage.
- Add rpm macros.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1557921600">- Add conflicts to jupyter subpackage to more explicitly handle
  file overlaps with old naming scheme.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1558526400">- Split directories and macros into separate package.
- Make lang subpackage python version-specific</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1558699200">- Add a jupyter-specific language package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559044800">- Use noun phrase in summary.</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584446400">- Fixup to build with the TW based packages.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1609761600">- Fix boo#1180458 (CVE-2020-26215) with CVE-2020-26215.patch</changelog>
  <changelog author="Nico Krapp &lt;nico.krapp@suse.com&gt;" date="1722513600">- Update to 5.7.11
  * sanitizer fix CVE-2021-32798 (bsc#1227583)
- Update to 5.7.10
  * no upstream changelog
- Update to 5.7.9
  * Update JQuery dependency to version 3.4.1 to fix security
    vulnerability (CVE-2019-11358)
  * Update from preact to React</changelog>
</package>
<package pkgid="b341f8666fee6714d3ebfba4c1f538be8e66bd74267470f3053885810192f0b0" name="jupyter-notebook-latex" arch="noarch">
  <version epoch="0" ver="5.7.11" rel="bp156.4.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1524139200">- Update to version 5.4.1
  * A security release to fix CVE-2018-8768.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1527595200">- Update to version 5.5.0
  + New features:
  * The files list now shows file sizes (:ghpull:`3539`)
  * Add a quit button in the dashboard (:ghpull:`3004`)
  * Display hostname in the terminal when running remotely (:ghpull:`3356`, :ghpull:`3593`)
  * Add slides exportation/download to the menu (:ghpull:`3287`)
  * Add any extra installed nbconvert exporters to the "Download as" menu (:ghpull:`3323`)
  * Editor: warning when overwriting a file that is modified on disk (:ghpull:`2783`)
  * Display a warning message if cookies are not enabled (:ghpull:`3511`)
  * Basic ``__version__`` reporting for extensions (:ghpull:`3541`)
  * Add ``NotebookApp.terminals_enabled`` config option (:ghpull:`3478`)
  * Make buffer time between last modified on disk and last modified on last save configurable (:ghpull:`3273`)
  * Allow binding custom shortcuts for 'close and halt' (:ghpull:`3314`)
  * Add description for 'Trusted' notification (:ghpull:`3386`)
  * Add ``settings['activity_sources']`` (:ghpull:`3401`)
  * Add an ``output_updated.OutputArea`` event (:ghpull:`3560`)
  + Fixing problems:
  * Fixes to improve web accessibility (:ghpull:`3507`)
    There is more to do on this! See :ghissue:`1801`.
  * Fixed color contrast issue in tree.less (:ghpull:`3336`)
  * Allow cancelling upload of large files (:ghpull:`3373`)
  * Don't clear login cookie on requests without cookie (:ghpull:`3380`)
  * Don't trash files on different device to home dir on Linux (:ghpull:`3304`)
  * Clear waiting asterisks when restarting kernel (:ghpull:`3494`)
  * Fix output prompt when ``execution_count`` missing (:ghpull:`3236`)
  * Make the 'changed on disk' dialog work when displayed twice (:ghpull:`3589`)
  * Fix going back to root directory with history in notebook list (:ghpull:`3411`)
  * Allow defining keyboard shortcuts for missing actions (:ghpull:`3561`)
  * Prevent default on pageup/pagedown when completer is active (:ghpull:`3500`)
  * Prevent default event handling on new terminal (:ghpull:`3497`)
  * ConfigManager should not write out default values found in the .d directory (:ghpull:`3485`)
  * Fix leak of iopub object in activity monitoring (:ghpull:`3424`)
  * Javascript lint in notebooklist.js (:ghpull:`3409`)
  * Some Javascript syntax fixes (:ghpull:`3294`)
  * Convert native for loop to ``Array.forEach()`` (:ghpull:`3477`)
  * Disable cache when downloading nbconvert output (:ghpull:`3484`)
  * Add missing digestmod arg to HMAC (:ghpull:`3399`)
  * Log OSErrors failing to create less-critical files during startup (:ghpull:`3384`)
  * Use powershell on Windows (:ghpull:`3379`)
  * API spec improvements, API handler improvements (:ghpull:`3368`)
  * Set notebook to dirty state after change to kernel metadata (:ghpull:`3350`)
  * Use CSP header to treat served files as belonging to a separate origin (:ghpull:`3341`)
  * Don't install gettext into builtins (:ghpull:`3330`)
  * Add missing ``import _`` (:ghpull:`3316`, :ghpull:`3326`)
  * Write ``notebook.json`` file atomically (:ghpull:`3305`)
  * Fix clicking with modifiers, page title updates (:ghpull:`3282`)
  * Upgrade jQuery to version 2.2 (:ghpull:`3428`)
  * Upgrade xterm.js to 3.1.0 (:ghpull:`3189`)
  * Upgrade moment.js to 2.19.3 (:ghpull:`3562`)
  * Upgrade CodeMirror to 5.35 (:ghpull:`3372`)
  * "Require" pyzmq&gt;=17 (:ghpull:`3586`)
  + Documentation:
  * Documentation updates and organisation (:ghpull:`3584`)
  * Add section in docs about privacy (:ghpull:`3571`)
  * Add explanation on how to change the type of a cell to Markdown (:ghpull:`3377`)
  * Update docs with confd implementation details (:ghpull:`3520`)
  * Add more information for where ``jupyter_notebook_config.py`` is located (:ghpull:`3346`)
  * Document options to enable nbextensions in specific sections (:ghpull:`3525`)
  * jQuery attribute selector value MUST be surrounded by quotes (:ghpull:`3527`)
  * Do not execute special notebooks with nbsphinx (:ghpull:`3360`)
  * Other minor fixes in :ghpull:`3288`, :ghpull:`3528`, :ghpull:`3293`, :ghpull:`3367`
  + Testing:
  * Testing with Selenium &amp; Sauce labs (:ghpull:`3321`)
  * Selenium utils + markdown rendering tests (:ghpull:`3458`)
  * Convert insert cell tests to Selenium (:ghpull:`3508`)
  * Convert prompt numbers tests to Selenium (:ghpull:`3554`)
  * Convert delete cells tests to Selenium (:ghpull:`3465`)
  * Convert undelete cell tests to Selenium (:ghpull:`3475`)
  * More selenium testing utilities (:ghpull:`3412`)
  * Only check links when build is trigger by Travis Cron job (:ghpull:`3493`)
  * Fix Appveyor build errors (:ghpull:`3430`)
  * Undo patches in teardown before attempting to delete files (:ghpull:`3459`)
  * Get tests running with tornado 5 (:ghpull:`3398`)
  * Unpin ipykernel version on Travis (:ghpull:`3223`)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1533211200">- Update to version 5.6.0
  + New features:
  * Execute cells by clicking icon in input prompt (:ghpull:`3535`, :ghpull:`3687`)
  * New "Save as" menu option (:ghpull:`3289`)
  * When serving on a loopback interface, protect against DNS rebinding by
    checking the ``Host`` header from the browser (:ghpull:`3714`).
    This check can be disabled if necessary by setting
    ``NotebookApp.allow_remote_access``.
    (Disabled by default while we work out some Mac issues in :ghissue:`3754`).
  * Add kernel_info_timeout traitlet to enable restarting slow kernels (:ghpull:`3665`)
  * Add ``custom_display_host`` config option to override displayed URL (:ghpull:`3668`)
  * Add /metrics endpoint for Prometheus Metrics (:ghpull:`3490`)
  * Update to MathJax 2.7.4 (:ghpull:`3751`)
  * Update to jQuery 3.3 (:ghpull:`3655`)
  * Update marked to 0.4 (:ghpull:`3686`)
  + Fixing problems:
  * Don't duplicate token in displayed URL (:ghpull:`3656`)
  * Clarify displayed URL when listening on all interfaces (:ghpull:`3703`)
  * Don't trash non-empty directories on Windows (:ghpull:`3673`)
  * Include LICENSE file in wheels (:ghpull:`3671`)
- Don't show "0 active kernels" when starting the notebook (:ghpull:`3696`)
  + Testing:
  * Add find replace test (:ghpull:`3630`)
  * Selenium test for deleting all cells (:ghpull:`3601`)
  * Make creating a new notebook more robust (:ghpull:`3726`)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1538136000">- Update to version 5.7.0
  + New features:
  * Update to CodeMirror to 5.37, which includes f-string sytax for Python 3.6 (:ghpull:`3816`)
  * Update jquery-ui to 1.12 (:ghpull:`3836`)
  * Check Host header to more securely protect localhost deployments from DNS rebinding.
    This is a pre-emptive measure, not fixing a known vulnerability (:ghpull:`3766`).
    Use ``.NotebookApp.allow_remote_access`` and ``.NotebookApp.local_hostnames`` to configure
    access.
  * Allow access-control-allow-headers to be overridden (:ghpull:`3886`)
  * Allow configuring max_body_size and max_buffer_size (:ghpull:`3829`)
  * Allow configuring get_secure_cookie keyword-args (:ghpull:`3778`)
  * Respect nbconvert entrypoints as sources for exporters (:ghpull:`3879`)
  * Include translation sources in source distributions (:ghpull:`3925`, :ghpull:`3931`)
  * Various improvements to documentation (:ghpull:`3799`, :ghpull:`3800`,
    :ghpull:`3806`, :ghpull:`3883`, :ghpull:`3908`)
  + Fixing problems:
  * Fix breadcrumb link when running with a base url (:ghpull:`3905`)
  * Fix possible type error when closing activity stream (:ghpull:`3907`)
  * Disable metadata editing for non-editable cells (:ghpull:`3744`)
  * Fix some styling and alignment of prompts caused by regressions in 5.6.0.
  * Enter causing page reload in shortcuts editor (:ghpull:`3871`)
  * Fix uploading to the same file twice (:ghpull:`3712`)
  * Drop -doc subpackage.  Use pre-built upstream docs instead.</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1543060800">- update to version 5.7.2:
  * 5.7.2 contains a security fix preventing malicious directory names
    from being able to execute javascript. CVE request pending.
- changes from version 5.7.1:
  * 5.7.1 contains a security fix preventing nbconvert endpoints from
    executing javascript with access to the server API. CVE request
    pending.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1546603200">- Update to 5.7.4
  * fixes a bug introduced in 5.7.3, in which the ``list_running_servers()``
    function attempts to parse HTML files as JSON, and consequently crashes
  (:ghpull:`4284`).
- Update to 5.7.3
  * Launch the browser with a local file which redirects to the server address
    including the authentication token (:ghpull:`4260`).
    This prevents another logged-in user from stealing the token from command line
    arguments and authenticating to the server.
    The single-use token previously used to mitigate this has been removed.
    Thanks to Dr. Owain Kenway for suggesting the local file approach.
  * Upgrade bootstrap to 3.4, fixing an XSS vulnerability, which has been
    assigned `CVE-2018-14041 &lt;https://nvd.nist.gov/vuln/detail/CVE-2018-14041&gt;`_
    (:ghpull:`4271`).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547035200">- Fix {name} -&gt; %{name}</changelog>
  <changelog author="rolf@rotkraut.de" date="1547208000">- Update requirements: python-jupyter_core &gt;= 4.4.0, python-terminado &gt;= 0.8.1.</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1552132800">- update to version 5.7.5:
  * Fix compatibility with tornado 6 (:ghpull:`4392`, :ghpull:`4449`).
  * Fix opening integer filedescriptor during startup on Python 2
    (:ghpull:`4349`)
  * Fix compatibility with asynchronous KernelManager.restart_kernel
    methods (:ghpull:`4412`)</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1552219200">- update to version 5.7.6:
  * 5.7.6 contains a security fix for a cross-site inclusion (XSSI)
    vulnerability, where files at a known URL could be included in a
    page from an unauthorized website if the user is logged into a
    Jupyter server. The fix involves setting the
    X-Content-Type-Options: nosniff header, and applying CSRF checks
    previously on all non-GET API requests to GET requests to API
    endpoints and the /files/ endpoint.
    The attacking page is able to access some contents of files when
    using Internet Explorer through script errors, but this has not
    been demonstrated with other browsers. A CVE has been requested
    for this vulnerability.</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1553947200">- update to version 5.7.7:
  * Fix regression in restarting kernels in 5.7.5. The restart handler
    would return before restart was completed.
  * Further improve compatibility with tornado 6 with improved checks
    for when websockets are closed.
  * Fix regression in 5.7.6 on Windows where .js files could have the
    wrong mime-type.
  * Fix Open Redirect vulnerability where certain malicious URLs could
    redirect from the Jupyter login page to a malicious site after a
    successful login. A CVE has been requested for this vulnerability.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1554120000">- Fix doc url</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1556193600">- Update to 5.7.8
  * Fix regression in restarting kernels in 5.7.5.
    The restart handler would return before restart was completed.
  * Further improve compatibility with tornado 6 with improved
    checks for when websockets are closed.
  * Fix regression in 5.7.6 on Windows where .js files could have the wrong mime-type.
  * Fix Open Redirect vulnerability (CVE-2019-10255)
    where certain malicious URLs could redirect from the Jupyter login page
    to a malicious site after a successful login.
    5.7.7 contained only a partial fix for this issue.
- Rename to to match python package naming guidelines.
- Split jupyter components into own subpackage.
- Add rpm macros.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1557921600">- Add conflicts to jupyter subpackage to more explicitly handle
  file overlaps with old naming scheme.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1558526400">- Split directories and macros into separate package.
- Make lang subpackage python version-specific</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1558699200">- Add a jupyter-specific language package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559044800">- Use noun phrase in summary.</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1584446400">- Fixup to build with the TW based packages.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1609761600">- Fix boo#1180458 (CVE-2020-26215) with CVE-2020-26215.patch</changelog>
  <changelog author="Nico Krapp &lt;nico.krapp@suse.com&gt;" date="1722513600">- Update to 5.7.11
  * sanitizer fix CVE-2021-32798 (bsc#1227583)
- Update to 5.7.10
  * no upstream changelog
- Update to 5.7.9
  * Update JQuery dependency to version 3.4.1 to fix security
    vulnerability (CVE-2019-11358)
  * Update from preact to React</changelog>
</package>
<package pkgid="41fdf8416116521269bae245e9caba4873923fe16bed2d5b5d26e09c50e58d1f" name="jxl-thumbnailer" arch="noarch">
  <version epoch="0" ver="0.8.4" rel="bp156.3.3.4"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658577600">- Initial package (version 0.7~779.f5d6e29) build.opensuse.org</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1663848000">- Update to 0.7.0:
  * new functions for retrieving associated alpha channel with
    premultiplied or unpremultiplied colors, for blending
    information for extra channels in the non-coalesced case, for
    getting the intended downsampling ratio of progressive steps,
    for disabling rendering of spot colors.
  * Added ability to add metadata boxes, to set several encoder
    options, to check required codestream compatibility level,
    for force-emitting the box-based container format, to store
    JPEG metadata for lossless reconstruction, to encode
    arbitrary extra channels.</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1671105600">- Added missing baselibs.conf so that 32bit library packages
  become available</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1671451200">- Add patch (applied reversed) to revert the requirement for an
  updated liblcms2 library when we have an older one. This allows
  libjxl to build in SLE15 SP4/SP5 (and Leap 15.4/15.5):
  * 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674043200">- Update to release 0.8
  * API: new function JxlDecoderSetImageBitDepth and
    JxlEncoderSetFrameBitDepth to set the bit depth of buffers.
  * encoder API: add an effort 10 option for lossless
    compression; using this setting requires calling
    JxlEncoderAllowExpertOptions.
- Enable PNG utilities [boo#1205107]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675598400">- Update to release 0.8.1
  * Allow fast-lossless for 16-bit float input
  * Fix OOB read in exif.h</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1676030400">- build glibc hwcaps optimized overlay</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1681732800">- Refresh 0001-Remove-LCMS-mutex.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686312000">- Build package in correct phase
- Use macros for ldconfig</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1686744000">- Update to release 0.8.2
  * Fix an integer underflow bug in patch decoding.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694865600">- Build plugins:
  * Add _service file to generate skcms tarball (needed to build
    plugins).
  * Add skcms tarball as source and copy extracted dir to
    ./third_party/ so cmake can find it.
  * Split out new packages:
  * gdk-pixbuf-loader-jxl: Pixbuf loader for supported apps.
  * gimp-plugin-jxl: Plugin to allow gimp to work with JPEG XL
    files.
  * jxl-thumbnailer: Thumbnailer and mime files to allow
    generating thumbnails for JPEG XL files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1695297600">- Switch from LCMS to SKCMS: libjxl core can use either, but
  plugins can only use SKCMS. Exercising two CMS simultaneously
  also is silly. Delete 0001-Remove-LCMS-mutex.patch .</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1732622400">- Update to release 0.8.4
  * Huffman lookup table size fix [CVE-2024-11403]
  * Check height limit in modular trees [CVE-2024-11498]</changelog>
</package>
<package pkgid="4afaab3de2bcca07e50e8446af87906240c3f7f176a476c1a0a551cac49e1695" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.3.3~git0.f075d13" rel="bp156.4.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1681473600">- bsc#1210356 - CVE-2023-26964 - hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames</changelog>
  <changelog author="william.brown@suse.com" date="1682942400">- Update to version 1.1.0~alpha12~git0.bcdbb18:
  * Release 1.1.0-alpha.12 (#1588)
  * chore(deps): bump tokio-util from 0.7.7 to 0.7.8 (#1587)
  * chore(deps): bump reqwest from 0.11.16 to 0.11.17 (#1586)
  * chore(deps): bump tokio from 1.27.0 to 1.28.0 (#1585)
  * chore(deps): bump uuid from 1.3.1 to 1.3.2 (#1584)
  * chore(deps): bump clap from 3.2.23 to 3.2.25 (#1583)
  * chore(deps-dev): bump coverage from 7.2.3 to 7.2.5 in /pykanidm (#1582)
  * Correctly prevent start up when https sockets in use (#1579)
  * Filter rdns and dns for ldap filters (#1576)
  * use sccache, merge "test" actions into "build", remove homebrew caching (#1578)
  * Cleanup incorrect log errors of denied entries (#1577)
  * 20230424 clippppppppppppyyyyyyyy (#1574)
  * Add exclusive process lock to Kanidm to prevent accidental duplicate commands. (#1575)
  * more more more unixd build fixes (#1573)
  * chore(deps-dev): bump mkdocs-material from 9.1.7 to 9.1.8 in /pykanidm (#1572)
  * chore(deps): bump openssl from 0.10.51 to 0.10.52 (#1571)
  * chore(deps): bump openssl-sys from 0.9.86 to 0.9.87 (#1570)
  * chore(deps-dev): bump ruff from 0.0.262 to 0.0.263 in /pykanidm (#1569)
  * more-merge unixd commands (#1568)
  * Consolidate unix tools (#1566)
  * 1553 pam remote or local detection (#1565)
  * chore(deps): bump openssl from 0.10.50 to 0.10.51 (#1563)
  * Improve user experince of refreshing with intent tokens during cred update (#1556)
  * chore(deps): bump tracing-subscriber from 0.3.16 to 0.3.17 (#1562)
  * chore(deps): bump regex from 1.7.3 to 1.8.1 (#1561)
  * chore(deps): bump libc from 0.2.141 to 0.2.142 (#1560)
  * chore(deps-dev): bump ruff from 0.0.261 to 0.0.262 in /pykanidm (#1559)
  * chore(deps-dev): bump mkdocs-material from 9.1.6 to 9.1.7 in /pykanidm (#1558)
  * chore(deps): bump actions/upload-artifact from 1 to 3 (#1557)
  * Fix incompatible future warnings by removing older crates (#1554)
  * 20230330 oauth2 refresh tokens (#1502)
  * Sorting documentation builds (#1551)
  * Add troubleshooting step for pam home dirs (#1550)
  * AuthSession non empty vec part 2 (#1543)
  * chore(deps): bump openssl from 0.10.49 to 0.10.50 (#1548)
  * chore(deps): bump serde from 1.0.159 to 1.0.160 (#1547)
  * chore(deps): bump syn from 2.0.13 to 2.0.15 (#1546)
  * chore(deps): bump serde_json from 1.0.95 to 1.0.96 (#1545)
  * chore(deps-dev): bump pytest from 7.3.0 to 7.3.1 in /pykanidm (#1544)
  * chore(deps): bump h2 from 0.3.15 to 0.3.17 (#1540)
  * Improve unicode control character detection (#1539)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1533)
  * chore(deps-dev): bump mypy from 1.0.1 to 1.2.0 in /pykanidm (#1532)
  * chore(deps): bump filetime from 0.2.20 to 0.2.21 (#1529)
  * chore(deps-dev): bump mkdocstrings from 0.20.0 to 0.21.2 in /pykanidm (#1536)
  * chore(deps-dev): bump mkdocs-material from 9.1.5 to 9.1.6 in /pykanidm (#1535)
  * chore(deps-dev): bump ruff from 0.0.260 to 0.0.261 in /pykanidm (#1534)
  * chore(deps-dev): bump coverage from 7.2.2 to 7.2.3 in /pykanidm (#1530)
  * chore(deps): bump uuid from 1.3.0 to 1.3.1 (#1531)
  * chore(deps): bump syn from 2.0.12 to 2.0.13 (#1527)
  * chore(deps): bump dialoguer from 0.10.3 to 0.10.4 (#1526)
  * chore(deps-dev): bump pytest from 7.2.2 to 7.3.0 in /pykanidm (#1528)
  * chore(deps): bump libc from 0.2.140 to 0.2.141 (#1525)
  * chore(deps): bump fernet from 0.2.0 to 0.2.1 (#1524)
  * Authsession non empty vec (#1522)
  * chore(deps-dev): bump ruff from 0.0.259 to 0.0.260 in /pykanidm (#1506)
  * chore(deps-dev): bump mkdocs-material from 9.1.4 to 9.1.5 in /pykanidm (#1510)
  * chore(deps): bump serde from 1.0.158 to 1.0.159 (#1515)
  * chore(deps): bump openssl from 0.10.48 to 0.10.49 (#1513)
  * chore(deps): bump tokio from 1.26.0 to 1.27.0 (#1505)
  * chore(deps): bump openssl-sys from 0.9.83 to 0.9.84 (#1507)
  * chore(deps): bump futures from 0.3.27 to 0.3.28 (#1509)
  * chore(deps): bump reqwest from 0.11.15 to 0.11.16 (#1517)
  * chore(deps-dev): bump black from 23.1.0 to 23.3.0 in /pykanidm (#1514)
  * changing from merge to squash (#1521)
  * chore(deps): bump proc-macro2 from 1.0.54 to 1.0.56
  * fixing up auto-merge (#1519)
  * chore(deps): bump syn from 2.0.10 to 2.0.12 (#1511)
  * chore(deps-dev): bump types-toml from 0.10.8.5 to 0.10.8.6 in /pykanidm (#1504)
  * chore(deps): bump serde_json from 1.0.94 to 1.0.95 (#1516)
  * chore(deps): bump ldap3_proto from 0.3.1 to 0.3.2 (#1518)
  * chore(deps): bump syn from 1.0.109 to 2.0.10 (#1499)
  * Be non empty vec (#1501)
  * 1496 ldap basedn config (#1500)
  * chore(deps): bump proc-macro2 from 1.0.52 to 1.0.54 (#1494)
  * chore(deps): bump regex from 1.7.1 to 1.7.3 (#1491)
  * chore(deps): bump pydantic from 1.10.6 to 1.10.7 in /pykanidm (#1492)
  * chore(deps-dev): bump mkdocs-material from 9.1.3 to 9.1.4 in /pykanidm (#1487)
  * chore(deps): bump async-trait from 0.1.67 to 0.1.68 (#1488)
  * Improve string validation (#1497)
  * chore(deps): bump reqwest from 0.11.14 to 0.11.15 (#1493)
  * chore(deps-dev): bump ruff from 0.0.257 to 0.0.259 in /pykanidm (#1489)
  * chore(deps): bump serde from 1.0.157 to 1.0.158 (#1490)
  * Adding an auto-merger for dependabot updates (#1486)
  * Make examples in ldap chapter consistent (#1495)
  * 1115 priv (reauth, sudo) mode (#1479)
  * chore(deps): bump openssl from 0.10.47 to 0.10.48 (#1484)
  * Server daemon logging and exit codes (#1475)
  * Fix path-relative links in documentation (#1478)
  * chore(deps): bump openssl from 0.10.45 to 0.10.47 (#1471)
  * chore(deps): bump serde from 1.0.155 to 1.0.157 (#1473)
  * chore(deps-dev): bump mkdocs-material from 9.1.2 to 9.1.3 in /pykanidm (#1468)
  * chore(deps-dev): bump pylint-pydantic from 0.1.7 to 0.1.8 in /pykanidm (#1469)
  * chore(deps-dev): bump coverage from 7.2.1 to 7.2.2 in /pykanidm (#1463)
  * chore(deps-dev): bump ruff from 0.0.254 to 0.0.257 in /pykanidm (#1466)
  * chore(deps): bump async-trait from 0.1.66 to 0.1.67 (#1461)
  * chore(deps): bump whoami from 1.3.0 to 1.4.0 (#1460)
  * chore(deps): bump zxcvbn from 2.2.1 to 2.2.2 (#1464)
  * chore(deps): bump openssl-sys from 0.9.80 to 0.9.82 (#1470)
  * chore(deps-dev): bump pytest-asyncio from 0.20.3 to 0.21.0 in /pykanidm (#1459)
  * Add unixd exit code (#1453)
  * Unixd daemon improvement (#1454)
  * chore(deps): bump walkdir from 2.3.2 to 2.3.3 (#1458)
  * checks for a minimum number of arguments (#1452)
  * chore(deps): bump chrono from 0.4.23 to 0.4.24 (#1444)
  * chore(deps): bump futures from 0.3.26 to 0.3.27 (#1447)
  * chore(deps): bump paste from 1.0.11 to 1.0.12 (#1449)
  * chore(deps-dev): bump mkdocs-material from 9.1.1 to 9.1.2 in /pykanidm (#1450)
  * chore(deps): bump csv from 1.2.0 to 1.2.1 (#1443)
  * chore(deps): bump libc from 0.2.139 to 0.2.140 (#1442)
  * chore(deps): bump serde from 1.0.152 to 1.0.155 (#1446)
  * chore(deps): bump pydantic from 1.10.5 to 1.10.6 in /pykanidm (#1448)
  * Image fixes in the build (#1441)
  * Fix RADIUS docker image file permissions (#1439)
  * User auth token session display implementation (#1415)
  * RADIUS container fixes (#1424)
  * Update book - OAuth2 integration step (#1437)
  * chore(deps): bump async-trait from 0.1.64 to 0.1.66 (#1433)
  * Hopefully fix exp issues by making it a stable part of the access token. (#1434)
  * chore(deps): bump base64 from 0.13.1 to 0.21.0 (#1350)
  * chore(deps): bump serde_json from 1.0.93 to 1.0.94 (#1427)
  * chore(deps-dev): bump pytest from 7.2.1 to 7.2.2 in /pykanidm (#1431)
  * chore(deps-dev): bump pylint-pydantic from 0.1.6 to 0.1.7 in /pykanidm (#1430)
  * chore(deps-dev): bump ruff from 0.0.253 to 0.0.254 in /pykanidm (#1429)
  * chore(deps-dev): bump mkdocs-material from 9.0.15 to 9.1.1 in /pykanidm (#1428)
  * Openssl build fix (#1422)
  * 1399 some async cleanup (#1421)
  * Web UI: Sort group memberships of profile (#1410)
  * Update the dev docs to flow nicer (#1420)
  * chore(deps): bump dyn-clone from 1.0.10 to 1.0.11 (#1417)
  * chore(deps): bump tokio from 1.25.0 to 1.26.0 (#1418)
  * chore(deps-dev): bump coverage from 7.1.0 to 7.2.1 in /pykanidm (#1405)
  * chore(deps-dev): bump ruff from 0.0.230 to 0.0.253 in /pykanidm (#1419)
  * 1399 cleanup cli docs (#1413)
  * 1399 cleanup reorg (#1412)
  * 1399 cleanup (#1409)
  * Version  output for 4 unix_int tools (#1408)
  * Windows build fixes (#1388)
  * chore(deps): bump num_enum from 0.5.10 to 0.5.11 (#1404)
  * chore(deps-dev): bump types-toml from 0.10.8.4 to 0.10.8.5 in /pykanidm (#1407)
  * chore(deps): bump syn from 1.0.107 to 1.0.109 (#1406)
  * chore(deps-dev): bump mkdocs-material from 9.0.13 to 9.0.15 in /pykanidm (#1403)
  * Mention my Recursing of the Passport (#1402)
  * Start to add reauth capabilities (#1398)
  * Add Recursive Logos (#1401)
  * Prevent invalidation of api tokens (#1397)
  * chore(deps): bump tokio-util from 0.7.4 to 0.7.7 (#1378)
  * chore(deps): bump web-sys from 0.3.60 to 0.3.61 (#1362)
  * chore(deps): bump filetime from 0.2.19 to 0.2.20 (#1375)
  * chore(deps): bump pydantic from 1.10.4 to 1.10.5 in /pykanidm (#1392)
  * chore(deps-dev): bump mkdocs-material from 9.0.12 to 9.0.13 in /pykanidm (#1394)
  * chore(deps): bump num_enum from 0.5.9 to 0.5.10 (#1391)
  * chore(deps-dev): bump types-toml from 0.10.8.3 to 0.10.8.4 in /pykanidm (#1395)
  * chore(deps-dev): bump mypy from 1.0.0 to 1.0.1 in /pykanidm (#1390)
  * chore(deps): bump csv from 1.1.6 to 1.2.0 (#1393)
  * chore(deps): bump base64urlsafedata from 0.1.2 to 0.1.3 (#1389)
  * 20230220 passkey cleanup (#1396)
  * 1115 store credential ids per session (#1386)
  * Reduce the number of cow cells in idm (#1385)
  * 1355 docker builds (#1384)
  * chore(deps): bump proc-macro2 from 1.0.50 to 1.0.51 (#1369)
  * Improve some small behaviours of login and key management (#1383)
  * 967 oauth2 implicit search (#1382)
  * chore(deps): bump wasm-bindgen-test from 0.3.33 to 0.3.34 (#1364)
  * chore(deps): bump serde_json from 1.0.91 to 1.0.93 (#1376)
  * chore(deps-dev): bump black from 22.12.0 to 23.1.0 in /pykanidm (#1367)
  * chore(deps-dev): bump pylint-pydantic from 0.1.5 to 0.1.6 in /pykanidm (#1351)
  * chore(deps-dev): bump coverage from 7.0.5 to 7.1.0 in /pykanidm (#1352)
  * 20230130 hackweek replication (#1358)
  * Improve some diagnostic messages in console (#1381)
  * chore(deps): bump docker/build-push-action from 3 to 4 (#1360)
  * chore(deps): bump aiohttp from 3.8.3 to 3.8.4 in /pykanidm (#1377)
  * chore(deps-dev): bump mypy from 0.991 to 1.0.0 in /pykanidm (#1380)
  * chore(deps): bump uuid from 1.2.2 to 1.3.0 (#1368)
  * chore(deps-dev): bump mkdocs-material from 9.0.6 to 9.0.12 in /pykanidm (#1379)
  * chore(deps-dev): bump types-toml from 0.10.8.1 to 0.10.8.3 in /pykanidm (#1374)
  * chore(deps): bump cryptography from 39.0.0 to 39.0.1 in /pykanidm (#1371)
  * Update release docs to prevent forgetting a release step (#1370)
  * 1355 docker builds (#1357)
  * Update to 12 dev (#1356)</changelog>
  <changelog author="william.brown@suse.com" date="1690891200">- Update to version 1.1.0~beta13~git2.5d1e2f9:
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)
  * Release 1.1.0-beta.13 (#1922)
  * 20230731 release (#1921)
  * Improve default shells for distros (#1920)
  * 20230728 techdebt paydown (#1909)
  * chasing weirdness (#1910)
  * chore(deps-dev): bump mkdocs-material from 9.1.19 to 9.1.21 in /pykanidm (#1918)
  * chore(deps): bump serde_json from 1.0.103 to 1.0.104 (#1917)
  * chore(deps): bump serde from 1.0.174 to 1.0.178 (#1916)
  * chore(deps): bump tikv-jemallocator from 0.5.0 to 0.5.4 (#1915)
  * chore(deps-dev): bump mkdocs from 1.4.3 to 1.5.1 in /pykanidm (#1913)
  * chore(deps-dev): bump pylint-pydantic from 0.2.3 to 0.2.4 in /pykanidm (#1912)
  * chore(deps): bump pydantic from 2.0.3 to 2.1.1 in /pykanidm (#1911)
  * 20230727 unix int modularity (#1907)
  * bumping action version (#1908)
  * 68 20230720 replication improvements (#1905)
  * Resolve compilation issue with tpm enabled on linux (#1902)
  * Improve service file for host installs (#1901)
  * 20230720 unix int modular (#1881)
  * fixing up pydantic things (#1885)
  * 1788 admin unix socket (#1880)
  * chore(deps-dev): bump pylint-pydantic from 0.2.1 to 0.2.3 in /pykanidm (#1900)
  * chore(deps-dev): bump ruff from 0.0.278 to 0.0.280 in /pykanidm (#1899)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1898)
  * chore(deps-dev): bump mkdocs-material from 9.1.18 to 9.1.19 in /pykanidm (#1897)
  * chore(deps): bump async-trait from 0.1.71 to 0.1.72 (#1895)
  * chore(deps-dev): bump types-toml from 0.10.8.6 to 0.10.8.7 in /pykanidm (#1896)
  * chore(deps): bump axum from 0.6.18 to 0.6.19 (#1894)
  * chore(deps): bump clap from 4.3.12 to 4.3.19 (#1893)
  * chore(deps): bump axum-macros from 0.3.7 to 0.3.8 (#1892)
  * chore(deps): bump serde from 1.0.171 to 1.0.174 (#1891)
  * chore(deps): bump uuid from 1.4.0 to 1.4.1 (#1890)
  * chore(deps): bump quote from 1.0.31 to 1.0.32 (#1889)
  * chore(deps): bump tower-http from 0.4.1 to 0.4.3 (#1888)
  * chore(deps): bump syn from 2.0.26 to 2.0.27 (#1887)
  * chore(deps): bump urlencoding from 2.1.2 to 2.1.3 (#1886)
  * added hsts header middleware (#1882)
  * chore(deps): bump aiohttp from 3.8.4 to 3.8.5 in /pykanidm (#1883)
  * 1785 allow sync attr yielding via partial write admin (#1879)
  * Alter filter generation to exclude empty conditions (#1877)
  * Revert to opensuse based radius container. (#1878)
  * Unix gid duplicate fix (#1876)
  * Refactor docker_build_kanidm to be more isolated (v13) (#1872)
  * Sync account import improvements (#1873)
  * chore(deps): bump quote from 1.0.29 to 1.0.31 (#1870)
  * chore(deps-dev): bump black from 23.3.0 to 23.7.0 in /pykanidm (#1859)
  * Add a newline to fix links in LLDAP section of the README (#1871)
  * chore(deps): bump dyn-clone from 1.0.11 to 1.0.12 (#1869)
  * chore(deps): bump pydantic from 1.10.11 to 2.0.3 in /pykanidm (#1858)
  * chore(deps): bump serde_json from 1.0.102 to 1.0.103 (#1868)
  * Fix missing slash in tag (#1853)
  * chore(deps): bump argon2 from 0.5.0 to 0.5.1 (#1867)
  * chore(deps): bump syn from 2.0.25 to 2.0.26 (#1866)
  * chore(deps): bump paste from 1.0.13 to 1.0.14 (#1864)
  * chore(deps-dev): bump pylint-pydantic from 0.2.0 to 0.2.1 in /pykanidm (#1863)
  * chore(deps): bump clap from 4.3.11 to 4.3.12 (#1862)
  * chore(deps-dev): bump pytest-asyncio from 0.21.0 to 0.21.1 in /pykanidm (#1861)
  * chore(deps): bump proc-macro2 from 1.0.64 to 1.0.66 (#1860)
  * chore(deps-dev): bump ruff from 0.0.277 to 0.0.278 in /pykanidm (#1857)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1856)
  * chore(deps): bump actions/upload-pages-artifact from 1 to 2 (#1855)
  * Revert "something something token permissions (#1850)" (#1852)
  * something something token permissions (#1850)
  * Upgraded clap, removing atty as a dependency (#1849)
  * Ensure we dont use std hashmaps (#1848)
  * Improve selinux in tasks daemon (#1847)
  * Resolve issue with order of operations causing group memberships to disappear (#1845)
  * headless webdriver testing, starting on brotli feature (#1844)
  * chore(deps-dev): bump mkdocs-material from 9.1.17 to 9.1.18 in /pykanidm (#1835)
  * chore(deps): bump serde from 1.0.166 to 1.0.170 (#1843)
  * Fix a typo in the unix daemon debug (#1822)
  * chore(deps-dev): bump ruff from 0.0.275 to 0.0.277 in /pykanidm (#1833)
  * chore(deps): bump serde-wasm-bindgen from 0.4.5 to 0.5.0 (#1842)
  * chore(deps): bump proc-macro2 from 1.0.63 to 1.0.64 (#1841)
  * chore(deps): bump syn from 2.0.23 to 2.0.25 (#1840)
  * chore(deps): bump async-trait from 0.1.69 to 0.1.71 (#1839)
  * chore(deps): bump regex from 1.8.4 to 1.9.1 (#1838)
  * chore(deps): bump is-terminal from 0.4.8 to 0.4.9 (#1837)
  * chore(deps): bump serde_json from 1.0.99 to 1.0.100 (#1836)
  * Allow Authorization header in CORS preflight response (#1831)
  * chore(deps): bump pydantic from 1.10.10 to 1.10.11 in /pykanidm (#1834)
  * chore(deps-dev): bump pylint-pydantic from 0.1.8 to 0.2.0 in /pykanidm (#1832)
  * Add preflight headers (#1829)
  * Persist nonce through refresh to support client (#1826)
  * Cleanup spa handling (#1825)
  * 1792 public oauth clients (#1821)
  * 1812 1813 post axum cleanup (#1817)
  * Fix diagram colours (#1815)
  * Converting from tide to axum (#1797)
  * Add client UX for redirecting to an external portal for synced accounts (#1791)
  * Add cors policy (#1807)
  * Improve tasks daemon shutdown (#1806)
  * Improve durability of migrations (#1804)
  * clippy-izing an unsafe in pam (#1795)
  * chore(deps): bump pydantic from 1.10.9 to 1.10.10 in /pykanidm (#1803)
  * chore(deps): bump uuid from 1.3.4 to 1.4.0 (#1802)
  * chore(deps): bump tokio from 1.28.2 to 1.29.1 (#1801)
  * chore(deps): bump syn from 2.0.20 to 2.0.23 (#1800)
  * chore(deps): bump whoami from 1.4.0 to 1.4.1 (#1799)
  * chore(deps): bump quote from 1.0.28 to 1.0.29 (#1798)
  * 20230629 tpm keygen ... again (#1793)
  * Fixing the kanidmd healthcheck (#1789)
  * Name change history (#1727)
  * 20230628 tpm minor issue with key regen (#1790)
  * Still trying to fix the docs. (#1709)
  * Improve cli to support multi-domain handling. (#1786)
  * Started chasing noise, found some code to delete... (#1768)
  * Improve tpm key generation - improve unix config for tpms. (#1782)
  * chore(deps-dev): bump pytest from 7.3.2 to 7.4.0 in /pykanidm (#1771)
  * chore(deps-dev): bump mkdocs-material from 9.1.16 to 9.1.17 in /pykanidm (#1773)
  * chore(deps-dev): bump mypy from 1.3.0 to 1.4.1 in /pykanidm (#1784)
  * chore(deps): bump serde_json from 1.0.97 to 1.0.99 (#1778)
  * chore(deps): bump syn from 2.0.18 to 2.0.20 (#1779)
  * chore(deps): bump authlib from 1.2.0 to 1.2.1 in /pykanidm (#1777)
  * chore(deps): bump proc-macro2 from 1.0.60 to 1.0.63 (#1776)
  * chore(deps): bump libc from 0.2.146 to 0.2.147 (#1774)
  * chore(deps): bump gloo-net from 0.2.6 to 0.3.0 (#1772)
  * chore(deps-dev): bump ruff from 0.0.272 to 0.0.275 in /pykanidm (#1770)
  * Fix debian packaging (#1742)
  * Remove r2d2 - sad beep noises (#1766)
  * Kanidmd is a bit noisy (#1765)
  * Ux improvements - Allow enrolling other devices (#1764)
  * Make argon2id default pw hasher - improve parameter detection (#1762)
  * chore(deps): bump openssl from 0.10.54 to 0.10.55 (#1761)
  * Implement tpm binding of cached password hashes (#1754)
  * Mention client configuration in tool installation guide (#1756)
  * Remove scripts that are no longer required (#1759)
  * OAuth2 secret JSON (#1758)
  * Allow account locking with expire-at 'epoch' and 'now' (#1757)
  * Resolve codespell issues (#1753)
  * Add tls generator to main kanidmd (#1743)
  * Fix block_on in ssh authorised keys (#1752)
  * chore(deps-dev): bump mkdocs-material from 9.1.15 to 9.1.16 in /pykanidm (#1751)
  * chore(deps): bump gloo from 0.8.0 to 0.8.1 (#1750)
  * chore(deps-dev): bump pytest-mock from 3.10.0 to 3.11.1 in /pykanidm (#1749)
  * chore(deps): bump hashbrown from 0.13.2 to 0.14.0 (#1748)
  * 1737 1739 sync - map uidnumbers mail (#1741)
  * Add support for argon2id (#1736)
  * Disable neon on linux (#1740)
  * 20230614 unix account security - move account name deny to unixd (#1733)
  * fixed return value of add_ava_int (#1735)
  * unix_integration: also check running SELinux mode (#1704)
  * added pre_cand entries to both pre_modify and pre_batch_modify plugin functions (#1732)
  * 20230608 ldap sync (#1728)
  * Add acp allowing service accounts to clear their own sessions (#1731)
  * Declare when no applications are available (#1730)
  * Fix ip addr parse (#1729)
  * X-Forwarded-For catcher - improve ip addr parsing (#1725)
  * chore(deps): bump proc-macro2 from 1.0.59 to 1.0.60 (#1723)
  * chore(deps): bump url from 2.3.1 to 2.4.0 (#1722)
  * chore(deps-dev): bump pytest from 7.3.1 to 7.3.2 in /pykanidm (#1719)
  * chore(deps): bump libc from 0.2.145 to 0.2.146 (#1721)
  * chore(deps-dev): bump ruff from 0.0.270 to 0.0.272 in /pykanidm (#1720)
  * docs: fix typo in sync concepts (#1715)
  * chore(deps): bump regex from 1.8.3 to 1.8.4 (#1718)
  * chore(deps): bump pydantic from 1.10.8 to 1.10.9 in /pykanidm (#1717)
  * chore(deps): bump serde from 1.0.163 to 1.0.164 (#1716)
  * Absolutely minimal implementation (#1711)
  * Add further incremental replication tests (#1707)
  * Save two more kay strokes (#1708)
  * Documentation root directory 404 (#1706)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1697)
  * Improve diagnostic and docs of ldap bind requiring posix password (#1702)
  * #1680 redux - trying to fix docs again (#1692)
  * Automatically login &amp; reauth (#1691)
  * chore(deps-dev): bump coverage from 7.2.6 to 7.2.7 in /pykanidm (#1698)
  * chore(deps): bump libc from 0.2.144 to 0.2.145 (#1701)
  * chore(deps): bump openssl from 0.10.52 to 0.10.54 (#1700)
  * chore(deps): bump csv from 1.2.1 to 1.2.2 (#1699)
  * chore(deps): bump syn from 2.0.17 to 2.0.18 (#1696)
  * chore(deps): bump chrono from 0.4.24 to 0.4.26 (#1695)
  * chore(deps-dev): bump mkdocs-material from 9.1.14 to 9.1.15 in /pykanidm (#1694)
  * chore(deps): bump openssl-sys from 0.9.87 to 0.9.88 (#1693)
  * Documentation root directory 404 (#1681)
  * Crono expression parser fix (#1682)
  * Document OpenID connect setup for Miniflux (#1683)
  * chore(deps): bump cryptography from 39.0.1 to 41.0.0 in /pykanidm (#1684)
  * Improve the readme (#1679)
  * Move the socket startup to localise it to the acceptor (#1678)
  * SELinux support for kanidm-unixd-tasks daemon (#1661)
  * Resolve ability to delete ssh keys with spaces in tags (#1674)
  * Adding mdbook-template back for bookgen (#1660)
  * chore(deps-dev): bump coverage from 7.2.5 to 7.2.6 in /pykanidm (#1669)
  * chore(deps-dev): bump mkdocstrings from 0.21.2 to 0.22.0 in /pykanidm (#1671)
  * 20230526 incremental replication improvements (#1659)
  * chore(deps): bump regex from 1.8.1 to 1.8.3 (#1670)
  * chore(deps): bump hashbrown from 0.12.3 to 0.13.2 (#1668)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1667)
  * chore(deps): bump tokio from 1.28.1 to 1.28.2 (#1666)
  * chore(deps-dev): bump ruff from 0.0.269 to 0.0.270 in /pykanidm (#1665)
  * chore(deps): bump quote from 1.0.27 to 1.0.28 (#1664)
  * chore(deps): bump pydantic from 1.10.7 to 1.10.8 in /pykanidm (#1663)
  * fixing get-tags-action in book build (#1657)
  * Add more replication tests, improve some handling of tombstones. (#1656)
  * Bring back CpuOptLevel x86_64_v1 (#1590)
  * Doc fixes (#1658)
  * Identifiable tokens (#1623)
  * Add version tag to makefile images (#1654)
  * during service account recovery, remove incompatible credentials (#1650)
  * signal handling for tasks daemon (#1651)
  * Time travelling (#1648)
  * chore(deps): bump requests from 2.28.2 to 2.31.0 in /pykanidm (#1649)
  * 20230508 replication incremental (#1620)
  * chore(deps-dev): bump mkdocs-material from 9.1.12 to 9.1.14 in /pykanidm (#1642)
  * chore(deps): bump wasm-bindgen from 0.2.85 to 0.2.86 (#1647)
  * chore(deps): bump js-sys from 0.3.62 to 0.3.63 (#1646)
  * chore(deps): bump uuid from 1.3.2 to 1.3.3 (#1645)
  * chore(deps): bump proc-macro2 from 1.0.56 to 1.0.58 (#1644)
  * chore(deps): bump reqwest from 0.11.17 to 0.11.18 (#1643)
  * chore(deps-dev): bump ruff from 0.0.267 to 0.0.269 in /pykanidm (#1641)
  * Fix use-reset-token command hint (#1639)
  * chore(deps): bump pymdown-extensions from 9.9.2 to 10.0 in /pykanidm (#1638)
  * chore(deps-dev): bump mypy from 1.2.0 to 1.3.0 in /pykanidm (#1636)
  * chore(deps): bump wasm-bindgen-test from 0.3.34 to 0.3.35 (#1635)
  * chore(deps-dev): bump ruff from 0.0.265 to 0.0.267 in /pykanidm (#1634)
  * chore(deps): bump syn from 2.0.15 to 2.0.16 (#1633)
  * chore(deps): bump quote from 1.0.26 to 1.0.27 (#1628)
  * chore(deps): bump serde from 1.0.162 to 1.0.163 (#1632)
  * chore(deps-dev): bump mkdocs-material from 9.1.9 to 9.1.12 in /pykanidm (#1631)
  * chore(deps): bump tokio from 1.28.0 to 1.28.1 (#1629)
  * chore(deps): bump web-sys from 0.3.61 to 0.3.62 (#1627)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1626)
  * chore(deps): bump libc from 0.2.143 to 0.2.144 (#1625)
  * chore(deps): bump js-sys from 0.3.61 to 0.3.62 (#1624)
  * Update policy (#1619)
  * fixing up some spelling errors (#1618)
  * Update RELEASE_NOTES.md (#1616)
  * 20230505 replication groundwork - ruv consistency improvements (#1606)
  * chore(deps-dev): bump ruff from 0.0.263 to 0.0.265 in /pykanidm (#1608)
  * chore(deps-dev): bump mkdocs-material from 9.1.8 to 9.1.9 in /pykanidm (#1609)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1611)
  * chore(deps): bump serde from 1.0.160 to 1.0.162 (#1613)
  * chore(deps): bump libc from 0.2.142 to 0.2.143 (#1612)
  * chore(deps): bump pkg-config from 0.3.26 to 0.3.27 (#1610)
  * chore(deps-dev): bump mkdocs from 1.4.2 to 1.4.3 in /pykanidm (#1607)
  * github pages ... something is definitely going weird. (#1605)
  * token permissions! (#1604)
  * Using github actions might actually push a change (#1603)
  * looks like that's a bug (#1602)
  * fix things (#1601)
  * 20230506 ignore some references (#1600)
  * Harden migrate session to prevent duplicate migration errors (#1599)
  * reducing action concurrency load (#1598)
  * more testing cleanup (#1595)
  * Document that you need to tell Nginx or other proxies to use HTTP 1.1… (#1592)
  * sccache github actions fixes (#1593)
  * Start next dev cycle (#1589)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
</package>
<package pkgid="805be6eced18ca2421b0eb41dc26a4d6773f14cf47f4462531b11f28721f590e" name="kanidm" arch="src">
  <version epoch="0" ver="1.3.3~git0.f075d13" rel="bp156.4.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1681473600">- bsc#1210356 - CVE-2023-26964 - hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames</changelog>
  <changelog author="william.brown@suse.com" date="1682942400">- Update to version 1.1.0~alpha12~git0.bcdbb18:
  * Release 1.1.0-alpha.12 (#1588)
  * chore(deps): bump tokio-util from 0.7.7 to 0.7.8 (#1587)
  * chore(deps): bump reqwest from 0.11.16 to 0.11.17 (#1586)
  * chore(deps): bump tokio from 1.27.0 to 1.28.0 (#1585)
  * chore(deps): bump uuid from 1.3.1 to 1.3.2 (#1584)
  * chore(deps): bump clap from 3.2.23 to 3.2.25 (#1583)
  * chore(deps-dev): bump coverage from 7.2.3 to 7.2.5 in /pykanidm (#1582)
  * Correctly prevent start up when https sockets in use (#1579)
  * Filter rdns and dns for ldap filters (#1576)
  * use sccache, merge "test" actions into "build", remove homebrew caching (#1578)
  * Cleanup incorrect log errors of denied entries (#1577)
  * 20230424 clippppppppppppyyyyyyyy (#1574)
  * Add exclusive process lock to Kanidm to prevent accidental duplicate commands. (#1575)
  * more more more unixd build fixes (#1573)
  * chore(deps-dev): bump mkdocs-material from 9.1.7 to 9.1.8 in /pykanidm (#1572)
  * chore(deps): bump openssl from 0.10.51 to 0.10.52 (#1571)
  * chore(deps): bump openssl-sys from 0.9.86 to 0.9.87 (#1570)
  * chore(deps-dev): bump ruff from 0.0.262 to 0.0.263 in /pykanidm (#1569)
  * more-merge unixd commands (#1568)
  * Consolidate unix tools (#1566)
  * 1553 pam remote or local detection (#1565)
  * chore(deps): bump openssl from 0.10.50 to 0.10.51 (#1563)
  * Improve user experince of refreshing with intent tokens during cred update (#1556)
  * chore(deps): bump tracing-subscriber from 0.3.16 to 0.3.17 (#1562)
  * chore(deps): bump regex from 1.7.3 to 1.8.1 (#1561)
  * chore(deps): bump libc from 0.2.141 to 0.2.142 (#1560)
  * chore(deps-dev): bump ruff from 0.0.261 to 0.0.262 in /pykanidm (#1559)
  * chore(deps-dev): bump mkdocs-material from 9.1.6 to 9.1.7 in /pykanidm (#1558)
  * chore(deps): bump actions/upload-artifact from 1 to 3 (#1557)
  * Fix incompatible future warnings by removing older crates (#1554)
  * 20230330 oauth2 refresh tokens (#1502)
  * Sorting documentation builds (#1551)
  * Add troubleshooting step for pam home dirs (#1550)
  * AuthSession non empty vec part 2 (#1543)
  * chore(deps): bump openssl from 0.10.49 to 0.10.50 (#1548)
  * chore(deps): bump serde from 1.0.159 to 1.0.160 (#1547)
  * chore(deps): bump syn from 2.0.13 to 2.0.15 (#1546)
  * chore(deps): bump serde_json from 1.0.95 to 1.0.96 (#1545)
  * chore(deps-dev): bump pytest from 7.3.0 to 7.3.1 in /pykanidm (#1544)
  * chore(deps): bump h2 from 0.3.15 to 0.3.17 (#1540)
  * Improve unicode control character detection (#1539)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1533)
  * chore(deps-dev): bump mypy from 1.0.1 to 1.2.0 in /pykanidm (#1532)
  * chore(deps): bump filetime from 0.2.20 to 0.2.21 (#1529)
  * chore(deps-dev): bump mkdocstrings from 0.20.0 to 0.21.2 in /pykanidm (#1536)
  * chore(deps-dev): bump mkdocs-material from 9.1.5 to 9.1.6 in /pykanidm (#1535)
  * chore(deps-dev): bump ruff from 0.0.260 to 0.0.261 in /pykanidm (#1534)
  * chore(deps-dev): bump coverage from 7.2.2 to 7.2.3 in /pykanidm (#1530)
  * chore(deps): bump uuid from 1.3.0 to 1.3.1 (#1531)
  * chore(deps): bump syn from 2.0.12 to 2.0.13 (#1527)
  * chore(deps): bump dialoguer from 0.10.3 to 0.10.4 (#1526)
  * chore(deps-dev): bump pytest from 7.2.2 to 7.3.0 in /pykanidm (#1528)
  * chore(deps): bump libc from 0.2.140 to 0.2.141 (#1525)
  * chore(deps): bump fernet from 0.2.0 to 0.2.1 (#1524)
  * Authsession non empty vec (#1522)
  * chore(deps-dev): bump ruff from 0.0.259 to 0.0.260 in /pykanidm (#1506)
  * chore(deps-dev): bump mkdocs-material from 9.1.4 to 9.1.5 in /pykanidm (#1510)
  * chore(deps): bump serde from 1.0.158 to 1.0.159 (#1515)
  * chore(deps): bump openssl from 0.10.48 to 0.10.49 (#1513)
  * chore(deps): bump tokio from 1.26.0 to 1.27.0 (#1505)
  * chore(deps): bump openssl-sys from 0.9.83 to 0.9.84 (#1507)
  * chore(deps): bump futures from 0.3.27 to 0.3.28 (#1509)
  * chore(deps): bump reqwest from 0.11.15 to 0.11.16 (#1517)
  * chore(deps-dev): bump black from 23.1.0 to 23.3.0 in /pykanidm (#1514)
  * changing from merge to squash (#1521)
  * chore(deps): bump proc-macro2 from 1.0.54 to 1.0.56
  * fixing up auto-merge (#1519)
  * chore(deps): bump syn from 2.0.10 to 2.0.12 (#1511)
  * chore(deps-dev): bump types-toml from 0.10.8.5 to 0.10.8.6 in /pykanidm (#1504)
  * chore(deps): bump serde_json from 1.0.94 to 1.0.95 (#1516)
  * chore(deps): bump ldap3_proto from 0.3.1 to 0.3.2 (#1518)
  * chore(deps): bump syn from 1.0.109 to 2.0.10 (#1499)
  * Be non empty vec (#1501)
  * 1496 ldap basedn config (#1500)
  * chore(deps): bump proc-macro2 from 1.0.52 to 1.0.54 (#1494)
  * chore(deps): bump regex from 1.7.1 to 1.7.3 (#1491)
  * chore(deps): bump pydantic from 1.10.6 to 1.10.7 in /pykanidm (#1492)
  * chore(deps-dev): bump mkdocs-material from 9.1.3 to 9.1.4 in /pykanidm (#1487)
  * chore(deps): bump async-trait from 0.1.67 to 0.1.68 (#1488)
  * Improve string validation (#1497)
  * chore(deps): bump reqwest from 0.11.14 to 0.11.15 (#1493)
  * chore(deps-dev): bump ruff from 0.0.257 to 0.0.259 in /pykanidm (#1489)
  * chore(deps): bump serde from 1.0.157 to 1.0.158 (#1490)
  * Adding an auto-merger for dependabot updates (#1486)
  * Make examples in ldap chapter consistent (#1495)
  * 1115 priv (reauth, sudo) mode (#1479)
  * chore(deps): bump openssl from 0.10.47 to 0.10.48 (#1484)
  * Server daemon logging and exit codes (#1475)
  * Fix path-relative links in documentation (#1478)
  * chore(deps): bump openssl from 0.10.45 to 0.10.47 (#1471)
  * chore(deps): bump serde from 1.0.155 to 1.0.157 (#1473)
  * chore(deps-dev): bump mkdocs-material from 9.1.2 to 9.1.3 in /pykanidm (#1468)
  * chore(deps-dev): bump pylint-pydantic from 0.1.7 to 0.1.8 in /pykanidm (#1469)
  * chore(deps-dev): bump coverage from 7.2.1 to 7.2.2 in /pykanidm (#1463)
  * chore(deps-dev): bump ruff from 0.0.254 to 0.0.257 in /pykanidm (#1466)
  * chore(deps): bump async-trait from 0.1.66 to 0.1.67 (#1461)
  * chore(deps): bump whoami from 1.3.0 to 1.4.0 (#1460)
  * chore(deps): bump zxcvbn from 2.2.1 to 2.2.2 (#1464)
  * chore(deps): bump openssl-sys from 0.9.80 to 0.9.82 (#1470)
  * chore(deps-dev): bump pytest-asyncio from 0.20.3 to 0.21.0 in /pykanidm (#1459)
  * Add unixd exit code (#1453)
  * Unixd daemon improvement (#1454)
  * chore(deps): bump walkdir from 2.3.2 to 2.3.3 (#1458)
  * checks for a minimum number of arguments (#1452)
  * chore(deps): bump chrono from 0.4.23 to 0.4.24 (#1444)
  * chore(deps): bump futures from 0.3.26 to 0.3.27 (#1447)
  * chore(deps): bump paste from 1.0.11 to 1.0.12 (#1449)
  * chore(deps-dev): bump mkdocs-material from 9.1.1 to 9.1.2 in /pykanidm (#1450)
  * chore(deps): bump csv from 1.2.0 to 1.2.1 (#1443)
  * chore(deps): bump libc from 0.2.139 to 0.2.140 (#1442)
  * chore(deps): bump serde from 1.0.152 to 1.0.155 (#1446)
  * chore(deps): bump pydantic from 1.10.5 to 1.10.6 in /pykanidm (#1448)
  * Image fixes in the build (#1441)
  * Fix RADIUS docker image file permissions (#1439)
  * User auth token session display implementation (#1415)
  * RADIUS container fixes (#1424)
  * Update book - OAuth2 integration step (#1437)
  * chore(deps): bump async-trait from 0.1.64 to 0.1.66 (#1433)
  * Hopefully fix exp issues by making it a stable part of the access token. (#1434)
  * chore(deps): bump base64 from 0.13.1 to 0.21.0 (#1350)
  * chore(deps): bump serde_json from 1.0.93 to 1.0.94 (#1427)
  * chore(deps-dev): bump pytest from 7.2.1 to 7.2.2 in /pykanidm (#1431)
  * chore(deps-dev): bump pylint-pydantic from 0.1.6 to 0.1.7 in /pykanidm (#1430)
  * chore(deps-dev): bump ruff from 0.0.253 to 0.0.254 in /pykanidm (#1429)
  * chore(deps-dev): bump mkdocs-material from 9.0.15 to 9.1.1 in /pykanidm (#1428)
  * Openssl build fix (#1422)
  * 1399 some async cleanup (#1421)
  * Web UI: Sort group memberships of profile (#1410)
  * Update the dev docs to flow nicer (#1420)
  * chore(deps): bump dyn-clone from 1.0.10 to 1.0.11 (#1417)
  * chore(deps): bump tokio from 1.25.0 to 1.26.0 (#1418)
  * chore(deps-dev): bump coverage from 7.1.0 to 7.2.1 in /pykanidm (#1405)
  * chore(deps-dev): bump ruff from 0.0.230 to 0.0.253 in /pykanidm (#1419)
  * 1399 cleanup cli docs (#1413)
  * 1399 cleanup reorg (#1412)
  * 1399 cleanup (#1409)
  * Version  output for 4 unix_int tools (#1408)
  * Windows build fixes (#1388)
  * chore(deps): bump num_enum from 0.5.10 to 0.5.11 (#1404)
  * chore(deps-dev): bump types-toml from 0.10.8.4 to 0.10.8.5 in /pykanidm (#1407)
  * chore(deps): bump syn from 1.0.107 to 1.0.109 (#1406)
  * chore(deps-dev): bump mkdocs-material from 9.0.13 to 9.0.15 in /pykanidm (#1403)
  * Mention my Recursing of the Passport (#1402)
  * Start to add reauth capabilities (#1398)
  * Add Recursive Logos (#1401)
  * Prevent invalidation of api tokens (#1397)
  * chore(deps): bump tokio-util from 0.7.4 to 0.7.7 (#1378)
  * chore(deps): bump web-sys from 0.3.60 to 0.3.61 (#1362)
  * chore(deps): bump filetime from 0.2.19 to 0.2.20 (#1375)
  * chore(deps): bump pydantic from 1.10.4 to 1.10.5 in /pykanidm (#1392)
  * chore(deps-dev): bump mkdocs-material from 9.0.12 to 9.0.13 in /pykanidm (#1394)
  * chore(deps): bump num_enum from 0.5.9 to 0.5.10 (#1391)
  * chore(deps-dev): bump types-toml from 0.10.8.3 to 0.10.8.4 in /pykanidm (#1395)
  * chore(deps-dev): bump mypy from 1.0.0 to 1.0.1 in /pykanidm (#1390)
  * chore(deps): bump csv from 1.1.6 to 1.2.0 (#1393)
  * chore(deps): bump base64urlsafedata from 0.1.2 to 0.1.3 (#1389)
  * 20230220 passkey cleanup (#1396)
  * 1115 store credential ids per session (#1386)
  * Reduce the number of cow cells in idm (#1385)
  * 1355 docker builds (#1384)
  * chore(deps): bump proc-macro2 from 1.0.50 to 1.0.51 (#1369)
  * Improve some small behaviours of login and key management (#1383)
  * 967 oauth2 implicit search (#1382)
  * chore(deps): bump wasm-bindgen-test from 0.3.33 to 0.3.34 (#1364)
  * chore(deps): bump serde_json from 1.0.91 to 1.0.93 (#1376)
  * chore(deps-dev): bump black from 22.12.0 to 23.1.0 in /pykanidm (#1367)
  * chore(deps-dev): bump pylint-pydantic from 0.1.5 to 0.1.6 in /pykanidm (#1351)
  * chore(deps-dev): bump coverage from 7.0.5 to 7.1.0 in /pykanidm (#1352)
  * 20230130 hackweek replication (#1358)
  * Improve some diagnostic messages in console (#1381)
  * chore(deps): bump docker/build-push-action from 3 to 4 (#1360)
  * chore(deps): bump aiohttp from 3.8.3 to 3.8.4 in /pykanidm (#1377)
  * chore(deps-dev): bump mypy from 0.991 to 1.0.0 in /pykanidm (#1380)
  * chore(deps): bump uuid from 1.2.2 to 1.3.0 (#1368)
  * chore(deps-dev): bump mkdocs-material from 9.0.6 to 9.0.12 in /pykanidm (#1379)
  * chore(deps-dev): bump types-toml from 0.10.8.1 to 0.10.8.3 in /pykanidm (#1374)
  * chore(deps): bump cryptography from 39.0.0 to 39.0.1 in /pykanidm (#1371)
  * Update release docs to prevent forgetting a release step (#1370)
  * 1355 docker builds (#1357)
  * Update to 12 dev (#1356)</changelog>
  <changelog author="william.brown@suse.com" date="1690891200">- Update to version 1.1.0~beta13~git2.5d1e2f9:
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)
  * Release 1.1.0-beta.13 (#1922)
  * 20230731 release (#1921)
  * Improve default shells for distros (#1920)
  * 20230728 techdebt paydown (#1909)
  * chasing weirdness (#1910)
  * chore(deps-dev): bump mkdocs-material from 9.1.19 to 9.1.21 in /pykanidm (#1918)
  * chore(deps): bump serde_json from 1.0.103 to 1.0.104 (#1917)
  * chore(deps): bump serde from 1.0.174 to 1.0.178 (#1916)
  * chore(deps): bump tikv-jemallocator from 0.5.0 to 0.5.4 (#1915)
  * chore(deps-dev): bump mkdocs from 1.4.3 to 1.5.1 in /pykanidm (#1913)
  * chore(deps-dev): bump pylint-pydantic from 0.2.3 to 0.2.4 in /pykanidm (#1912)
  * chore(deps): bump pydantic from 2.0.3 to 2.1.1 in /pykanidm (#1911)
  * 20230727 unix int modularity (#1907)
  * bumping action version (#1908)
  * 68 20230720 replication improvements (#1905)
  * Resolve compilation issue with tpm enabled on linux (#1902)
  * Improve service file for host installs (#1901)
  * 20230720 unix int modular (#1881)
  * fixing up pydantic things (#1885)
  * 1788 admin unix socket (#1880)
  * chore(deps-dev): bump pylint-pydantic from 0.2.1 to 0.2.3 in /pykanidm (#1900)
  * chore(deps-dev): bump ruff from 0.0.278 to 0.0.280 in /pykanidm (#1899)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1898)
  * chore(deps-dev): bump mkdocs-material from 9.1.18 to 9.1.19 in /pykanidm (#1897)
  * chore(deps): bump async-trait from 0.1.71 to 0.1.72 (#1895)
  * chore(deps-dev): bump types-toml from 0.10.8.6 to 0.10.8.7 in /pykanidm (#1896)
  * chore(deps): bump axum from 0.6.18 to 0.6.19 (#1894)
  * chore(deps): bump clap from 4.3.12 to 4.3.19 (#1893)
  * chore(deps): bump axum-macros from 0.3.7 to 0.3.8 (#1892)
  * chore(deps): bump serde from 1.0.171 to 1.0.174 (#1891)
  * chore(deps): bump uuid from 1.4.0 to 1.4.1 (#1890)
  * chore(deps): bump quote from 1.0.31 to 1.0.32 (#1889)
  * chore(deps): bump tower-http from 0.4.1 to 0.4.3 (#1888)
  * chore(deps): bump syn from 2.0.26 to 2.0.27 (#1887)
  * chore(deps): bump urlencoding from 2.1.2 to 2.1.3 (#1886)
  * added hsts header middleware (#1882)
  * chore(deps): bump aiohttp from 3.8.4 to 3.8.5 in /pykanidm (#1883)
  * 1785 allow sync attr yielding via partial write admin (#1879)
  * Alter filter generation to exclude empty conditions (#1877)
  * Revert to opensuse based radius container. (#1878)
  * Unix gid duplicate fix (#1876)
  * Refactor docker_build_kanidm to be more isolated (v13) (#1872)
  * Sync account import improvements (#1873)
  * chore(deps): bump quote from 1.0.29 to 1.0.31 (#1870)
  * chore(deps-dev): bump black from 23.3.0 to 23.7.0 in /pykanidm (#1859)
  * Add a newline to fix links in LLDAP section of the README (#1871)
  * chore(deps): bump dyn-clone from 1.0.11 to 1.0.12 (#1869)
  * chore(deps): bump pydantic from 1.10.11 to 2.0.3 in /pykanidm (#1858)
  * chore(deps): bump serde_json from 1.0.102 to 1.0.103 (#1868)
  * Fix missing slash in tag (#1853)
  * chore(deps): bump argon2 from 0.5.0 to 0.5.1 (#1867)
  * chore(deps): bump syn from 2.0.25 to 2.0.26 (#1866)
  * chore(deps): bump paste from 1.0.13 to 1.0.14 (#1864)
  * chore(deps-dev): bump pylint-pydantic from 0.2.0 to 0.2.1 in /pykanidm (#1863)
  * chore(deps): bump clap from 4.3.11 to 4.3.12 (#1862)
  * chore(deps-dev): bump pytest-asyncio from 0.21.0 to 0.21.1 in /pykanidm (#1861)
  * chore(deps): bump proc-macro2 from 1.0.64 to 1.0.66 (#1860)
  * chore(deps-dev): bump ruff from 0.0.277 to 0.0.278 in /pykanidm (#1857)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1856)
  * chore(deps): bump actions/upload-pages-artifact from 1 to 2 (#1855)
  * Revert "something something token permissions (#1850)" (#1852)
  * something something token permissions (#1850)
  * Upgraded clap, removing atty as a dependency (#1849)
  * Ensure we dont use std hashmaps (#1848)
  * Improve selinux in tasks daemon (#1847)
  * Resolve issue with order of operations causing group memberships to disappear (#1845)
  * headless webdriver testing, starting on brotli feature (#1844)
  * chore(deps-dev): bump mkdocs-material from 9.1.17 to 9.1.18 in /pykanidm (#1835)
  * chore(deps): bump serde from 1.0.166 to 1.0.170 (#1843)
  * Fix a typo in the unix daemon debug (#1822)
  * chore(deps-dev): bump ruff from 0.0.275 to 0.0.277 in /pykanidm (#1833)
  * chore(deps): bump serde-wasm-bindgen from 0.4.5 to 0.5.0 (#1842)
  * chore(deps): bump proc-macro2 from 1.0.63 to 1.0.64 (#1841)
  * chore(deps): bump syn from 2.0.23 to 2.0.25 (#1840)
  * chore(deps): bump async-trait from 0.1.69 to 0.1.71 (#1839)
  * chore(deps): bump regex from 1.8.4 to 1.9.1 (#1838)
  * chore(deps): bump is-terminal from 0.4.8 to 0.4.9 (#1837)
  * chore(deps): bump serde_json from 1.0.99 to 1.0.100 (#1836)
  * Allow Authorization header in CORS preflight response (#1831)
  * chore(deps): bump pydantic from 1.10.10 to 1.10.11 in /pykanidm (#1834)
  * chore(deps-dev): bump pylint-pydantic from 0.1.8 to 0.2.0 in /pykanidm (#1832)
  * Add preflight headers (#1829)
  * Persist nonce through refresh to support client (#1826)
  * Cleanup spa handling (#1825)
  * 1792 public oauth clients (#1821)
  * 1812 1813 post axum cleanup (#1817)
  * Fix diagram colours (#1815)
  * Converting from tide to axum (#1797)
  * Add client UX for redirecting to an external portal for synced accounts (#1791)
  * Add cors policy (#1807)
  * Improve tasks daemon shutdown (#1806)
  * Improve durability of migrations (#1804)
  * clippy-izing an unsafe in pam (#1795)
  * chore(deps): bump pydantic from 1.10.9 to 1.10.10 in /pykanidm (#1803)
  * chore(deps): bump uuid from 1.3.4 to 1.4.0 (#1802)
  * chore(deps): bump tokio from 1.28.2 to 1.29.1 (#1801)
  * chore(deps): bump syn from 2.0.20 to 2.0.23 (#1800)
  * chore(deps): bump whoami from 1.4.0 to 1.4.1 (#1799)
  * chore(deps): bump quote from 1.0.28 to 1.0.29 (#1798)
  * 20230629 tpm keygen ... again (#1793)
  * Fixing the kanidmd healthcheck (#1789)
  * Name change history (#1727)
  * 20230628 tpm minor issue with key regen (#1790)
  * Still trying to fix the docs. (#1709)
  * Improve cli to support multi-domain handling. (#1786)
  * Started chasing noise, found some code to delete... (#1768)
  * Improve tpm key generation - improve unix config for tpms. (#1782)
  * chore(deps-dev): bump pytest from 7.3.2 to 7.4.0 in /pykanidm (#1771)
  * chore(deps-dev): bump mkdocs-material from 9.1.16 to 9.1.17 in /pykanidm (#1773)
  * chore(deps-dev): bump mypy from 1.3.0 to 1.4.1 in /pykanidm (#1784)
  * chore(deps): bump serde_json from 1.0.97 to 1.0.99 (#1778)
  * chore(deps): bump syn from 2.0.18 to 2.0.20 (#1779)
  * chore(deps): bump authlib from 1.2.0 to 1.2.1 in /pykanidm (#1777)
  * chore(deps): bump proc-macro2 from 1.0.60 to 1.0.63 (#1776)
  * chore(deps): bump libc from 0.2.146 to 0.2.147 (#1774)
  * chore(deps): bump gloo-net from 0.2.6 to 0.3.0 (#1772)
  * chore(deps-dev): bump ruff from 0.0.272 to 0.0.275 in /pykanidm (#1770)
  * Fix debian packaging (#1742)
  * Remove r2d2 - sad beep noises (#1766)
  * Kanidmd is a bit noisy (#1765)
  * Ux improvements - Allow enrolling other devices (#1764)
  * Make argon2id default pw hasher - improve parameter detection (#1762)
  * chore(deps): bump openssl from 0.10.54 to 0.10.55 (#1761)
  * Implement tpm binding of cached password hashes (#1754)
  * Mention client configuration in tool installation guide (#1756)
  * Remove scripts that are no longer required (#1759)
  * OAuth2 secret JSON (#1758)
  * Allow account locking with expire-at 'epoch' and 'now' (#1757)
  * Resolve codespell issues (#1753)
  * Add tls generator to main kanidmd (#1743)
  * Fix block_on in ssh authorised keys (#1752)
  * chore(deps-dev): bump mkdocs-material from 9.1.15 to 9.1.16 in /pykanidm (#1751)
  * chore(deps): bump gloo from 0.8.0 to 0.8.1 (#1750)
  * chore(deps-dev): bump pytest-mock from 3.10.0 to 3.11.1 in /pykanidm (#1749)
  * chore(deps): bump hashbrown from 0.13.2 to 0.14.0 (#1748)
  * 1737 1739 sync - map uidnumbers mail (#1741)
  * Add support for argon2id (#1736)
  * Disable neon on linux (#1740)
  * 20230614 unix account security - move account name deny to unixd (#1733)
  * fixed return value of add_ava_int (#1735)
  * unix_integration: also check running SELinux mode (#1704)
  * added pre_cand entries to both pre_modify and pre_batch_modify plugin functions (#1732)
  * 20230608 ldap sync (#1728)
  * Add acp allowing service accounts to clear their own sessions (#1731)
  * Declare when no applications are available (#1730)
  * Fix ip addr parse (#1729)
  * X-Forwarded-For catcher - improve ip addr parsing (#1725)
  * chore(deps): bump proc-macro2 from 1.0.59 to 1.0.60 (#1723)
  * chore(deps): bump url from 2.3.1 to 2.4.0 (#1722)
  * chore(deps-dev): bump pytest from 7.3.1 to 7.3.2 in /pykanidm (#1719)
  * chore(deps): bump libc from 0.2.145 to 0.2.146 (#1721)
  * chore(deps-dev): bump ruff from 0.0.270 to 0.0.272 in /pykanidm (#1720)
  * docs: fix typo in sync concepts (#1715)
  * chore(deps): bump regex from 1.8.3 to 1.8.4 (#1718)
  * chore(deps): bump pydantic from 1.10.8 to 1.10.9 in /pykanidm (#1717)
  * chore(deps): bump serde from 1.0.163 to 1.0.164 (#1716)
  * Absolutely minimal implementation (#1711)
  * Add further incremental replication tests (#1707)
  * Save two more kay strokes (#1708)
  * Documentation root directory 404 (#1706)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1697)
  * Improve diagnostic and docs of ldap bind requiring posix password (#1702)
  * #1680 redux - trying to fix docs again (#1692)
  * Automatically login &amp; reauth (#1691)
  * chore(deps-dev): bump coverage from 7.2.6 to 7.2.7 in /pykanidm (#1698)
  * chore(deps): bump libc from 0.2.144 to 0.2.145 (#1701)
  * chore(deps): bump openssl from 0.10.52 to 0.10.54 (#1700)
  * chore(deps): bump csv from 1.2.1 to 1.2.2 (#1699)
  * chore(deps): bump syn from 2.0.17 to 2.0.18 (#1696)
  * chore(deps): bump chrono from 0.4.24 to 0.4.26 (#1695)
  * chore(deps-dev): bump mkdocs-material from 9.1.14 to 9.1.15 in /pykanidm (#1694)
  * chore(deps): bump openssl-sys from 0.9.87 to 0.9.88 (#1693)
  * Documentation root directory 404 (#1681)
  * Crono expression parser fix (#1682)
  * Document OpenID connect setup for Miniflux (#1683)
  * chore(deps): bump cryptography from 39.0.1 to 41.0.0 in /pykanidm (#1684)
  * Improve the readme (#1679)
  * Move the socket startup to localise it to the acceptor (#1678)
  * SELinux support for kanidm-unixd-tasks daemon (#1661)
  * Resolve ability to delete ssh keys with spaces in tags (#1674)
  * Adding mdbook-template back for bookgen (#1660)
  * chore(deps-dev): bump coverage from 7.2.5 to 7.2.6 in /pykanidm (#1669)
  * chore(deps-dev): bump mkdocstrings from 0.21.2 to 0.22.0 in /pykanidm (#1671)
  * 20230526 incremental replication improvements (#1659)
  * chore(deps): bump regex from 1.8.1 to 1.8.3 (#1670)
  * chore(deps): bump hashbrown from 0.12.3 to 0.13.2 (#1668)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1667)
  * chore(deps): bump tokio from 1.28.1 to 1.28.2 (#1666)
  * chore(deps-dev): bump ruff from 0.0.269 to 0.0.270 in /pykanidm (#1665)
  * chore(deps): bump quote from 1.0.27 to 1.0.28 (#1664)
  * chore(deps): bump pydantic from 1.10.7 to 1.10.8 in /pykanidm (#1663)
  * fixing get-tags-action in book build (#1657)
  * Add more replication tests, improve some handling of tombstones. (#1656)
  * Bring back CpuOptLevel x86_64_v1 (#1590)
  * Doc fixes (#1658)
  * Identifiable tokens (#1623)
  * Add version tag to makefile images (#1654)
  * during service account recovery, remove incompatible credentials (#1650)
  * signal handling for tasks daemon (#1651)
  * Time travelling (#1648)
  * chore(deps): bump requests from 2.28.2 to 2.31.0 in /pykanidm (#1649)
  * 20230508 replication incremental (#1620)
  * chore(deps-dev): bump mkdocs-material from 9.1.12 to 9.1.14 in /pykanidm (#1642)
  * chore(deps): bump wasm-bindgen from 0.2.85 to 0.2.86 (#1647)
  * chore(deps): bump js-sys from 0.3.62 to 0.3.63 (#1646)
  * chore(deps): bump uuid from 1.3.2 to 1.3.3 (#1645)
  * chore(deps): bump proc-macro2 from 1.0.56 to 1.0.58 (#1644)
  * chore(deps): bump reqwest from 0.11.17 to 0.11.18 (#1643)
  * chore(deps-dev): bump ruff from 0.0.267 to 0.0.269 in /pykanidm (#1641)
  * Fix use-reset-token command hint (#1639)
  * chore(deps): bump pymdown-extensions from 9.9.2 to 10.0 in /pykanidm (#1638)
  * chore(deps-dev): bump mypy from 1.2.0 to 1.3.0 in /pykanidm (#1636)
  * chore(deps): bump wasm-bindgen-test from 0.3.34 to 0.3.35 (#1635)
  * chore(deps-dev): bump ruff from 0.0.265 to 0.0.267 in /pykanidm (#1634)
  * chore(deps): bump syn from 2.0.15 to 2.0.16 (#1633)
  * chore(deps): bump quote from 1.0.26 to 1.0.27 (#1628)
  * chore(deps): bump serde from 1.0.162 to 1.0.163 (#1632)
  * chore(deps-dev): bump mkdocs-material from 9.1.9 to 9.1.12 in /pykanidm (#1631)
  * chore(deps): bump tokio from 1.28.0 to 1.28.1 (#1629)
  * chore(deps): bump web-sys from 0.3.61 to 0.3.62 (#1627)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1626)
  * chore(deps): bump libc from 0.2.143 to 0.2.144 (#1625)
  * chore(deps): bump js-sys from 0.3.61 to 0.3.62 (#1624)
  * Update policy (#1619)
  * fixing up some spelling errors (#1618)
  * Update RELEASE_NOTES.md (#1616)
  * 20230505 replication groundwork - ruv consistency improvements (#1606)
  * chore(deps-dev): bump ruff from 0.0.263 to 0.0.265 in /pykanidm (#1608)
  * chore(deps-dev): bump mkdocs-material from 9.1.8 to 9.1.9 in /pykanidm (#1609)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1611)
  * chore(deps): bump serde from 1.0.160 to 1.0.162 (#1613)
  * chore(deps): bump libc from 0.2.142 to 0.2.143 (#1612)
  * chore(deps): bump pkg-config from 0.3.26 to 0.3.27 (#1610)
  * chore(deps-dev): bump mkdocs from 1.4.2 to 1.4.3 in /pykanidm (#1607)
  * github pages ... something is definitely going weird. (#1605)
  * token permissions! (#1604)
  * Using github actions might actually push a change (#1603)
  * looks like that's a bug (#1602)
  * fix things (#1601)
  * 20230506 ignore some references (#1600)
  * Harden migrate session to prevent duplicate migration errors (#1599)
  * reducing action concurrency load (#1598)
  * more testing cleanup (#1595)
  * Document that you need to tell Nginx or other proxies to use HTTP 1.1… (#1592)
  * sccache github actions fixes (#1593)
  * Start next dev cycle (#1589)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
</package>
<package pkgid="fa25af82e1bd801fc2eac81117ec42ebcd99526099b94a014202412b992d6fba" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.3.3~git0.f075d13" rel="bp156.4.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1681473600">- bsc#1210356 - CVE-2023-26964 - hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames</changelog>
  <changelog author="william.brown@suse.com" date="1682942400">- Update to version 1.1.0~alpha12~git0.bcdbb18:
  * Release 1.1.0-alpha.12 (#1588)
  * chore(deps): bump tokio-util from 0.7.7 to 0.7.8 (#1587)
  * chore(deps): bump reqwest from 0.11.16 to 0.11.17 (#1586)
  * chore(deps): bump tokio from 1.27.0 to 1.28.0 (#1585)
  * chore(deps): bump uuid from 1.3.1 to 1.3.2 (#1584)
  * chore(deps): bump clap from 3.2.23 to 3.2.25 (#1583)
  * chore(deps-dev): bump coverage from 7.2.3 to 7.2.5 in /pykanidm (#1582)
  * Correctly prevent start up when https sockets in use (#1579)
  * Filter rdns and dns for ldap filters (#1576)
  * use sccache, merge "test" actions into "build", remove homebrew caching (#1578)
  * Cleanup incorrect log errors of denied entries (#1577)
  * 20230424 clippppppppppppyyyyyyyy (#1574)
  * Add exclusive process lock to Kanidm to prevent accidental duplicate commands. (#1575)
  * more more more unixd build fixes (#1573)
  * chore(deps-dev): bump mkdocs-material from 9.1.7 to 9.1.8 in /pykanidm (#1572)
  * chore(deps): bump openssl from 0.10.51 to 0.10.52 (#1571)
  * chore(deps): bump openssl-sys from 0.9.86 to 0.9.87 (#1570)
  * chore(deps-dev): bump ruff from 0.0.262 to 0.0.263 in /pykanidm (#1569)
  * more-merge unixd commands (#1568)
  * Consolidate unix tools (#1566)
  * 1553 pam remote or local detection (#1565)
  * chore(deps): bump openssl from 0.10.50 to 0.10.51 (#1563)
  * Improve user experince of refreshing with intent tokens during cred update (#1556)
  * chore(deps): bump tracing-subscriber from 0.3.16 to 0.3.17 (#1562)
  * chore(deps): bump regex from 1.7.3 to 1.8.1 (#1561)
  * chore(deps): bump libc from 0.2.141 to 0.2.142 (#1560)
  * chore(deps-dev): bump ruff from 0.0.261 to 0.0.262 in /pykanidm (#1559)
  * chore(deps-dev): bump mkdocs-material from 9.1.6 to 9.1.7 in /pykanidm (#1558)
  * chore(deps): bump actions/upload-artifact from 1 to 3 (#1557)
  * Fix incompatible future warnings by removing older crates (#1554)
  * 20230330 oauth2 refresh tokens (#1502)
  * Sorting documentation builds (#1551)
  * Add troubleshooting step for pam home dirs (#1550)
  * AuthSession non empty vec part 2 (#1543)
  * chore(deps): bump openssl from 0.10.49 to 0.10.50 (#1548)
  * chore(deps): bump serde from 1.0.159 to 1.0.160 (#1547)
  * chore(deps): bump syn from 2.0.13 to 2.0.15 (#1546)
  * chore(deps): bump serde_json from 1.0.95 to 1.0.96 (#1545)
  * chore(deps-dev): bump pytest from 7.3.0 to 7.3.1 in /pykanidm (#1544)
  * chore(deps): bump h2 from 0.3.15 to 0.3.17 (#1540)
  * Improve unicode control character detection (#1539)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1533)
  * chore(deps-dev): bump mypy from 1.0.1 to 1.2.0 in /pykanidm (#1532)
  * chore(deps): bump filetime from 0.2.20 to 0.2.21 (#1529)
  * chore(deps-dev): bump mkdocstrings from 0.20.0 to 0.21.2 in /pykanidm (#1536)
  * chore(deps-dev): bump mkdocs-material from 9.1.5 to 9.1.6 in /pykanidm (#1535)
  * chore(deps-dev): bump ruff from 0.0.260 to 0.0.261 in /pykanidm (#1534)
  * chore(deps-dev): bump coverage from 7.2.2 to 7.2.3 in /pykanidm (#1530)
  * chore(deps): bump uuid from 1.3.0 to 1.3.1 (#1531)
  * chore(deps): bump syn from 2.0.12 to 2.0.13 (#1527)
  * chore(deps): bump dialoguer from 0.10.3 to 0.10.4 (#1526)
  * chore(deps-dev): bump pytest from 7.2.2 to 7.3.0 in /pykanidm (#1528)
  * chore(deps): bump libc from 0.2.140 to 0.2.141 (#1525)
  * chore(deps): bump fernet from 0.2.0 to 0.2.1 (#1524)
  * Authsession non empty vec (#1522)
  * chore(deps-dev): bump ruff from 0.0.259 to 0.0.260 in /pykanidm (#1506)
  * chore(deps-dev): bump mkdocs-material from 9.1.4 to 9.1.5 in /pykanidm (#1510)
  * chore(deps): bump serde from 1.0.158 to 1.0.159 (#1515)
  * chore(deps): bump openssl from 0.10.48 to 0.10.49 (#1513)
  * chore(deps): bump tokio from 1.26.0 to 1.27.0 (#1505)
  * chore(deps): bump openssl-sys from 0.9.83 to 0.9.84 (#1507)
  * chore(deps): bump futures from 0.3.27 to 0.3.28 (#1509)
  * chore(deps): bump reqwest from 0.11.15 to 0.11.16 (#1517)
  * chore(deps-dev): bump black from 23.1.0 to 23.3.0 in /pykanidm (#1514)
  * changing from merge to squash (#1521)
  * chore(deps): bump proc-macro2 from 1.0.54 to 1.0.56
  * fixing up auto-merge (#1519)
  * chore(deps): bump syn from 2.0.10 to 2.0.12 (#1511)
  * chore(deps-dev): bump types-toml from 0.10.8.5 to 0.10.8.6 in /pykanidm (#1504)
  * chore(deps): bump serde_json from 1.0.94 to 1.0.95 (#1516)
  * chore(deps): bump ldap3_proto from 0.3.1 to 0.3.2 (#1518)
  * chore(deps): bump syn from 1.0.109 to 2.0.10 (#1499)
  * Be non empty vec (#1501)
  * 1496 ldap basedn config (#1500)
  * chore(deps): bump proc-macro2 from 1.0.52 to 1.0.54 (#1494)
  * chore(deps): bump regex from 1.7.1 to 1.7.3 (#1491)
  * chore(deps): bump pydantic from 1.10.6 to 1.10.7 in /pykanidm (#1492)
  * chore(deps-dev): bump mkdocs-material from 9.1.3 to 9.1.4 in /pykanidm (#1487)
  * chore(deps): bump async-trait from 0.1.67 to 0.1.68 (#1488)
  * Improve string validation (#1497)
  * chore(deps): bump reqwest from 0.11.14 to 0.11.15 (#1493)
  * chore(deps-dev): bump ruff from 0.0.257 to 0.0.259 in /pykanidm (#1489)
  * chore(deps): bump serde from 1.0.157 to 1.0.158 (#1490)
  * Adding an auto-merger for dependabot updates (#1486)
  * Make examples in ldap chapter consistent (#1495)
  * 1115 priv (reauth, sudo) mode (#1479)
  * chore(deps): bump openssl from 0.10.47 to 0.10.48 (#1484)
  * Server daemon logging and exit codes (#1475)
  * Fix path-relative links in documentation (#1478)
  * chore(deps): bump openssl from 0.10.45 to 0.10.47 (#1471)
  * chore(deps): bump serde from 1.0.155 to 1.0.157 (#1473)
  * chore(deps-dev): bump mkdocs-material from 9.1.2 to 9.1.3 in /pykanidm (#1468)
  * chore(deps-dev): bump pylint-pydantic from 0.1.7 to 0.1.8 in /pykanidm (#1469)
  * chore(deps-dev): bump coverage from 7.2.1 to 7.2.2 in /pykanidm (#1463)
  * chore(deps-dev): bump ruff from 0.0.254 to 0.0.257 in /pykanidm (#1466)
  * chore(deps): bump async-trait from 0.1.66 to 0.1.67 (#1461)
  * chore(deps): bump whoami from 1.3.0 to 1.4.0 (#1460)
  * chore(deps): bump zxcvbn from 2.2.1 to 2.2.2 (#1464)
  * chore(deps): bump openssl-sys from 0.9.80 to 0.9.82 (#1470)
  * chore(deps-dev): bump pytest-asyncio from 0.20.3 to 0.21.0 in /pykanidm (#1459)
  * Add unixd exit code (#1453)
  * Unixd daemon improvement (#1454)
  * chore(deps): bump walkdir from 2.3.2 to 2.3.3 (#1458)
  * checks for a minimum number of arguments (#1452)
  * chore(deps): bump chrono from 0.4.23 to 0.4.24 (#1444)
  * chore(deps): bump futures from 0.3.26 to 0.3.27 (#1447)
  * chore(deps): bump paste from 1.0.11 to 1.0.12 (#1449)
  * chore(deps-dev): bump mkdocs-material from 9.1.1 to 9.1.2 in /pykanidm (#1450)
  * chore(deps): bump csv from 1.2.0 to 1.2.1 (#1443)
  * chore(deps): bump libc from 0.2.139 to 0.2.140 (#1442)
  * chore(deps): bump serde from 1.0.152 to 1.0.155 (#1446)
  * chore(deps): bump pydantic from 1.10.5 to 1.10.6 in /pykanidm (#1448)
  * Image fixes in the build (#1441)
  * Fix RADIUS docker image file permissions (#1439)
  * User auth token session display implementation (#1415)
  * RADIUS container fixes (#1424)
  * Update book - OAuth2 integration step (#1437)
  * chore(deps): bump async-trait from 0.1.64 to 0.1.66 (#1433)
  * Hopefully fix exp issues by making it a stable part of the access token. (#1434)
  * chore(deps): bump base64 from 0.13.1 to 0.21.0 (#1350)
  * chore(deps): bump serde_json from 1.0.93 to 1.0.94 (#1427)
  * chore(deps-dev): bump pytest from 7.2.1 to 7.2.2 in /pykanidm (#1431)
  * chore(deps-dev): bump pylint-pydantic from 0.1.6 to 0.1.7 in /pykanidm (#1430)
  * chore(deps-dev): bump ruff from 0.0.253 to 0.0.254 in /pykanidm (#1429)
  * chore(deps-dev): bump mkdocs-material from 9.0.15 to 9.1.1 in /pykanidm (#1428)
  * Openssl build fix (#1422)
  * 1399 some async cleanup (#1421)
  * Web UI: Sort group memberships of profile (#1410)
  * Update the dev docs to flow nicer (#1420)
  * chore(deps): bump dyn-clone from 1.0.10 to 1.0.11 (#1417)
  * chore(deps): bump tokio from 1.25.0 to 1.26.0 (#1418)
  * chore(deps-dev): bump coverage from 7.1.0 to 7.2.1 in /pykanidm (#1405)
  * chore(deps-dev): bump ruff from 0.0.230 to 0.0.253 in /pykanidm (#1419)
  * 1399 cleanup cli docs (#1413)
  * 1399 cleanup reorg (#1412)
  * 1399 cleanup (#1409)
  * Version  output for 4 unix_int tools (#1408)
  * Windows build fixes (#1388)
  * chore(deps): bump num_enum from 0.5.10 to 0.5.11 (#1404)
  * chore(deps-dev): bump types-toml from 0.10.8.4 to 0.10.8.5 in /pykanidm (#1407)
  * chore(deps): bump syn from 1.0.107 to 1.0.109 (#1406)
  * chore(deps-dev): bump mkdocs-material from 9.0.13 to 9.0.15 in /pykanidm (#1403)
  * Mention my Recursing of the Passport (#1402)
  * Start to add reauth capabilities (#1398)
  * Add Recursive Logos (#1401)
  * Prevent invalidation of api tokens (#1397)
  * chore(deps): bump tokio-util from 0.7.4 to 0.7.7 (#1378)
  * chore(deps): bump web-sys from 0.3.60 to 0.3.61 (#1362)
  * chore(deps): bump filetime from 0.2.19 to 0.2.20 (#1375)
  * chore(deps): bump pydantic from 1.10.4 to 1.10.5 in /pykanidm (#1392)
  * chore(deps-dev): bump mkdocs-material from 9.0.12 to 9.0.13 in /pykanidm (#1394)
  * chore(deps): bump num_enum from 0.5.9 to 0.5.10 (#1391)
  * chore(deps-dev): bump types-toml from 0.10.8.3 to 0.10.8.4 in /pykanidm (#1395)
  * chore(deps-dev): bump mypy from 1.0.0 to 1.0.1 in /pykanidm (#1390)
  * chore(deps): bump csv from 1.1.6 to 1.2.0 (#1393)
  * chore(deps): bump base64urlsafedata from 0.1.2 to 0.1.3 (#1389)
  * 20230220 passkey cleanup (#1396)
  * 1115 store credential ids per session (#1386)
  * Reduce the number of cow cells in idm (#1385)
  * 1355 docker builds (#1384)
  * chore(deps): bump proc-macro2 from 1.0.50 to 1.0.51 (#1369)
  * Improve some small behaviours of login and key management (#1383)
  * 967 oauth2 implicit search (#1382)
  * chore(deps): bump wasm-bindgen-test from 0.3.33 to 0.3.34 (#1364)
  * chore(deps): bump serde_json from 1.0.91 to 1.0.93 (#1376)
  * chore(deps-dev): bump black from 22.12.0 to 23.1.0 in /pykanidm (#1367)
  * chore(deps-dev): bump pylint-pydantic from 0.1.5 to 0.1.6 in /pykanidm (#1351)
  * chore(deps-dev): bump coverage from 7.0.5 to 7.1.0 in /pykanidm (#1352)
  * 20230130 hackweek replication (#1358)
  * Improve some diagnostic messages in console (#1381)
  * chore(deps): bump docker/build-push-action from 3 to 4 (#1360)
  * chore(deps): bump aiohttp from 3.8.3 to 3.8.4 in /pykanidm (#1377)
  * chore(deps-dev): bump mypy from 0.991 to 1.0.0 in /pykanidm (#1380)
  * chore(deps): bump uuid from 1.2.2 to 1.3.0 (#1368)
  * chore(deps-dev): bump mkdocs-material from 9.0.6 to 9.0.12 in /pykanidm (#1379)
  * chore(deps-dev): bump types-toml from 0.10.8.1 to 0.10.8.3 in /pykanidm (#1374)
  * chore(deps): bump cryptography from 39.0.0 to 39.0.1 in /pykanidm (#1371)
  * Update release docs to prevent forgetting a release step (#1370)
  * 1355 docker builds (#1357)
  * Update to 12 dev (#1356)</changelog>
  <changelog author="william.brown@suse.com" date="1690891200">- Update to version 1.1.0~beta13~git2.5d1e2f9:
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)
  * Release 1.1.0-beta.13 (#1922)
  * 20230731 release (#1921)
  * Improve default shells for distros (#1920)
  * 20230728 techdebt paydown (#1909)
  * chasing weirdness (#1910)
  * chore(deps-dev): bump mkdocs-material from 9.1.19 to 9.1.21 in /pykanidm (#1918)
  * chore(deps): bump serde_json from 1.0.103 to 1.0.104 (#1917)
  * chore(deps): bump serde from 1.0.174 to 1.0.178 (#1916)
  * chore(deps): bump tikv-jemallocator from 0.5.0 to 0.5.4 (#1915)
  * chore(deps-dev): bump mkdocs from 1.4.3 to 1.5.1 in /pykanidm (#1913)
  * chore(deps-dev): bump pylint-pydantic from 0.2.3 to 0.2.4 in /pykanidm (#1912)
  * chore(deps): bump pydantic from 2.0.3 to 2.1.1 in /pykanidm (#1911)
  * 20230727 unix int modularity (#1907)
  * bumping action version (#1908)
  * 68 20230720 replication improvements (#1905)
  * Resolve compilation issue with tpm enabled on linux (#1902)
  * Improve service file for host installs (#1901)
  * 20230720 unix int modular (#1881)
  * fixing up pydantic things (#1885)
  * 1788 admin unix socket (#1880)
  * chore(deps-dev): bump pylint-pydantic from 0.2.1 to 0.2.3 in /pykanidm (#1900)
  * chore(deps-dev): bump ruff from 0.0.278 to 0.0.280 in /pykanidm (#1899)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1898)
  * chore(deps-dev): bump mkdocs-material from 9.1.18 to 9.1.19 in /pykanidm (#1897)
  * chore(deps): bump async-trait from 0.1.71 to 0.1.72 (#1895)
  * chore(deps-dev): bump types-toml from 0.10.8.6 to 0.10.8.7 in /pykanidm (#1896)
  * chore(deps): bump axum from 0.6.18 to 0.6.19 (#1894)
  * chore(deps): bump clap from 4.3.12 to 4.3.19 (#1893)
  * chore(deps): bump axum-macros from 0.3.7 to 0.3.8 (#1892)
  * chore(deps): bump serde from 1.0.171 to 1.0.174 (#1891)
  * chore(deps): bump uuid from 1.4.0 to 1.4.1 (#1890)
  * chore(deps): bump quote from 1.0.31 to 1.0.32 (#1889)
  * chore(deps): bump tower-http from 0.4.1 to 0.4.3 (#1888)
  * chore(deps): bump syn from 2.0.26 to 2.0.27 (#1887)
  * chore(deps): bump urlencoding from 2.1.2 to 2.1.3 (#1886)
  * added hsts header middleware (#1882)
  * chore(deps): bump aiohttp from 3.8.4 to 3.8.5 in /pykanidm (#1883)
  * 1785 allow sync attr yielding via partial write admin (#1879)
  * Alter filter generation to exclude empty conditions (#1877)
  * Revert to opensuse based radius container. (#1878)
  * Unix gid duplicate fix (#1876)
  * Refactor docker_build_kanidm to be more isolated (v13) (#1872)
  * Sync account import improvements (#1873)
  * chore(deps): bump quote from 1.0.29 to 1.0.31 (#1870)
  * chore(deps-dev): bump black from 23.3.0 to 23.7.0 in /pykanidm (#1859)
  * Add a newline to fix links in LLDAP section of the README (#1871)
  * chore(deps): bump dyn-clone from 1.0.11 to 1.0.12 (#1869)
  * chore(deps): bump pydantic from 1.10.11 to 2.0.3 in /pykanidm (#1858)
  * chore(deps): bump serde_json from 1.0.102 to 1.0.103 (#1868)
  * Fix missing slash in tag (#1853)
  * chore(deps): bump argon2 from 0.5.0 to 0.5.1 (#1867)
  * chore(deps): bump syn from 2.0.25 to 2.0.26 (#1866)
  * chore(deps): bump paste from 1.0.13 to 1.0.14 (#1864)
  * chore(deps-dev): bump pylint-pydantic from 0.2.0 to 0.2.1 in /pykanidm (#1863)
  * chore(deps): bump clap from 4.3.11 to 4.3.12 (#1862)
  * chore(deps-dev): bump pytest-asyncio from 0.21.0 to 0.21.1 in /pykanidm (#1861)
  * chore(deps): bump proc-macro2 from 1.0.64 to 1.0.66 (#1860)
  * chore(deps-dev): bump ruff from 0.0.277 to 0.0.278 in /pykanidm (#1857)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1856)
  * chore(deps): bump actions/upload-pages-artifact from 1 to 2 (#1855)
  * Revert "something something token permissions (#1850)" (#1852)
  * something something token permissions (#1850)
  * Upgraded clap, removing atty as a dependency (#1849)
  * Ensure we dont use std hashmaps (#1848)
  * Improve selinux in tasks daemon (#1847)
  * Resolve issue with order of operations causing group memberships to disappear (#1845)
  * headless webdriver testing, starting on brotli feature (#1844)
  * chore(deps-dev): bump mkdocs-material from 9.1.17 to 9.1.18 in /pykanidm (#1835)
  * chore(deps): bump serde from 1.0.166 to 1.0.170 (#1843)
  * Fix a typo in the unix daemon debug (#1822)
  * chore(deps-dev): bump ruff from 0.0.275 to 0.0.277 in /pykanidm (#1833)
  * chore(deps): bump serde-wasm-bindgen from 0.4.5 to 0.5.0 (#1842)
  * chore(deps): bump proc-macro2 from 1.0.63 to 1.0.64 (#1841)
  * chore(deps): bump syn from 2.0.23 to 2.0.25 (#1840)
  * chore(deps): bump async-trait from 0.1.69 to 0.1.71 (#1839)
  * chore(deps): bump regex from 1.8.4 to 1.9.1 (#1838)
  * chore(deps): bump is-terminal from 0.4.8 to 0.4.9 (#1837)
  * chore(deps): bump serde_json from 1.0.99 to 1.0.100 (#1836)
  * Allow Authorization header in CORS preflight response (#1831)
  * chore(deps): bump pydantic from 1.10.10 to 1.10.11 in /pykanidm (#1834)
  * chore(deps-dev): bump pylint-pydantic from 0.1.8 to 0.2.0 in /pykanidm (#1832)
  * Add preflight headers (#1829)
  * Persist nonce through refresh to support client (#1826)
  * Cleanup spa handling (#1825)
  * 1792 public oauth clients (#1821)
  * 1812 1813 post axum cleanup (#1817)
  * Fix diagram colours (#1815)
  * Converting from tide to axum (#1797)
  * Add client UX for redirecting to an external portal for synced accounts (#1791)
  * Add cors policy (#1807)
  * Improve tasks daemon shutdown (#1806)
  * Improve durability of migrations (#1804)
  * clippy-izing an unsafe in pam (#1795)
  * chore(deps): bump pydantic from 1.10.9 to 1.10.10 in /pykanidm (#1803)
  * chore(deps): bump uuid from 1.3.4 to 1.4.0 (#1802)
  * chore(deps): bump tokio from 1.28.2 to 1.29.1 (#1801)
  * chore(deps): bump syn from 2.0.20 to 2.0.23 (#1800)
  * chore(deps): bump whoami from 1.4.0 to 1.4.1 (#1799)
  * chore(deps): bump quote from 1.0.28 to 1.0.29 (#1798)
  * 20230629 tpm keygen ... again (#1793)
  * Fixing the kanidmd healthcheck (#1789)
  * Name change history (#1727)
  * 20230628 tpm minor issue with key regen (#1790)
  * Still trying to fix the docs. (#1709)
  * Improve cli to support multi-domain handling. (#1786)
  * Started chasing noise, found some code to delete... (#1768)
  * Improve tpm key generation - improve unix config for tpms. (#1782)
  * chore(deps-dev): bump pytest from 7.3.2 to 7.4.0 in /pykanidm (#1771)
  * chore(deps-dev): bump mkdocs-material from 9.1.16 to 9.1.17 in /pykanidm (#1773)
  * chore(deps-dev): bump mypy from 1.3.0 to 1.4.1 in /pykanidm (#1784)
  * chore(deps): bump serde_json from 1.0.97 to 1.0.99 (#1778)
  * chore(deps): bump syn from 2.0.18 to 2.0.20 (#1779)
  * chore(deps): bump authlib from 1.2.0 to 1.2.1 in /pykanidm (#1777)
  * chore(deps): bump proc-macro2 from 1.0.60 to 1.0.63 (#1776)
  * chore(deps): bump libc from 0.2.146 to 0.2.147 (#1774)
  * chore(deps): bump gloo-net from 0.2.6 to 0.3.0 (#1772)
  * chore(deps-dev): bump ruff from 0.0.272 to 0.0.275 in /pykanidm (#1770)
  * Fix debian packaging (#1742)
  * Remove r2d2 - sad beep noises (#1766)
  * Kanidmd is a bit noisy (#1765)
  * Ux improvements - Allow enrolling other devices (#1764)
  * Make argon2id default pw hasher - improve parameter detection (#1762)
  * chore(deps): bump openssl from 0.10.54 to 0.10.55 (#1761)
  * Implement tpm binding of cached password hashes (#1754)
  * Mention client configuration in tool installation guide (#1756)
  * Remove scripts that are no longer required (#1759)
  * OAuth2 secret JSON (#1758)
  * Allow account locking with expire-at 'epoch' and 'now' (#1757)
  * Resolve codespell issues (#1753)
  * Add tls generator to main kanidmd (#1743)
  * Fix block_on in ssh authorised keys (#1752)
  * chore(deps-dev): bump mkdocs-material from 9.1.15 to 9.1.16 in /pykanidm (#1751)
  * chore(deps): bump gloo from 0.8.0 to 0.8.1 (#1750)
  * chore(deps-dev): bump pytest-mock from 3.10.0 to 3.11.1 in /pykanidm (#1749)
  * chore(deps): bump hashbrown from 0.13.2 to 0.14.0 (#1748)
  * 1737 1739 sync - map uidnumbers mail (#1741)
  * Add support for argon2id (#1736)
  * Disable neon on linux (#1740)
  * 20230614 unix account security - move account name deny to unixd (#1733)
  * fixed return value of add_ava_int (#1735)
  * unix_integration: also check running SELinux mode (#1704)
  * added pre_cand entries to both pre_modify and pre_batch_modify plugin functions (#1732)
  * 20230608 ldap sync (#1728)
  * Add acp allowing service accounts to clear their own sessions (#1731)
  * Declare when no applications are available (#1730)
  * Fix ip addr parse (#1729)
  * X-Forwarded-For catcher - improve ip addr parsing (#1725)
  * chore(deps): bump proc-macro2 from 1.0.59 to 1.0.60 (#1723)
  * chore(deps): bump url from 2.3.1 to 2.4.0 (#1722)
  * chore(deps-dev): bump pytest from 7.3.1 to 7.3.2 in /pykanidm (#1719)
  * chore(deps): bump libc from 0.2.145 to 0.2.146 (#1721)
  * chore(deps-dev): bump ruff from 0.0.270 to 0.0.272 in /pykanidm (#1720)
  * docs: fix typo in sync concepts (#1715)
  * chore(deps): bump regex from 1.8.3 to 1.8.4 (#1718)
  * chore(deps): bump pydantic from 1.10.8 to 1.10.9 in /pykanidm (#1717)
  * chore(deps): bump serde from 1.0.163 to 1.0.164 (#1716)
  * Absolutely minimal implementation (#1711)
  * Add further incremental replication tests (#1707)
  * Save two more kay strokes (#1708)
  * Documentation root directory 404 (#1706)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1697)
  * Improve diagnostic and docs of ldap bind requiring posix password (#1702)
  * #1680 redux - trying to fix docs again (#1692)
  * Automatically login &amp; reauth (#1691)
  * chore(deps-dev): bump coverage from 7.2.6 to 7.2.7 in /pykanidm (#1698)
  * chore(deps): bump libc from 0.2.144 to 0.2.145 (#1701)
  * chore(deps): bump openssl from 0.10.52 to 0.10.54 (#1700)
  * chore(deps): bump csv from 1.2.1 to 1.2.2 (#1699)
  * chore(deps): bump syn from 2.0.17 to 2.0.18 (#1696)
  * chore(deps): bump chrono from 0.4.24 to 0.4.26 (#1695)
  * chore(deps-dev): bump mkdocs-material from 9.1.14 to 9.1.15 in /pykanidm (#1694)
  * chore(deps): bump openssl-sys from 0.9.87 to 0.9.88 (#1693)
  * Documentation root directory 404 (#1681)
  * Crono expression parser fix (#1682)
  * Document OpenID connect setup for Miniflux (#1683)
  * chore(deps): bump cryptography from 39.0.1 to 41.0.0 in /pykanidm (#1684)
  * Improve the readme (#1679)
  * Move the socket startup to localise it to the acceptor (#1678)
  * SELinux support for kanidm-unixd-tasks daemon (#1661)
  * Resolve ability to delete ssh keys with spaces in tags (#1674)
  * Adding mdbook-template back for bookgen (#1660)
  * chore(deps-dev): bump coverage from 7.2.5 to 7.2.6 in /pykanidm (#1669)
  * chore(deps-dev): bump mkdocstrings from 0.21.2 to 0.22.0 in /pykanidm (#1671)
  * 20230526 incremental replication improvements (#1659)
  * chore(deps): bump regex from 1.8.1 to 1.8.3 (#1670)
  * chore(deps): bump hashbrown from 0.12.3 to 0.13.2 (#1668)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1667)
  * chore(deps): bump tokio from 1.28.1 to 1.28.2 (#1666)
  * chore(deps-dev): bump ruff from 0.0.269 to 0.0.270 in /pykanidm (#1665)
  * chore(deps): bump quote from 1.0.27 to 1.0.28 (#1664)
  * chore(deps): bump pydantic from 1.10.7 to 1.10.8 in /pykanidm (#1663)
  * fixing get-tags-action in book build (#1657)
  * Add more replication tests, improve some handling of tombstones. (#1656)
  * Bring back CpuOptLevel x86_64_v1 (#1590)
  * Doc fixes (#1658)
  * Identifiable tokens (#1623)
  * Add version tag to makefile images (#1654)
  * during service account recovery, remove incompatible credentials (#1650)
  * signal handling for tasks daemon (#1651)
  * Time travelling (#1648)
  * chore(deps): bump requests from 2.28.2 to 2.31.0 in /pykanidm (#1649)
  * 20230508 replication incremental (#1620)
  * chore(deps-dev): bump mkdocs-material from 9.1.12 to 9.1.14 in /pykanidm (#1642)
  * chore(deps): bump wasm-bindgen from 0.2.85 to 0.2.86 (#1647)
  * chore(deps): bump js-sys from 0.3.62 to 0.3.63 (#1646)
  * chore(deps): bump uuid from 1.3.2 to 1.3.3 (#1645)
  * chore(deps): bump proc-macro2 from 1.0.56 to 1.0.58 (#1644)
  * chore(deps): bump reqwest from 0.11.17 to 0.11.18 (#1643)
  * chore(deps-dev): bump ruff from 0.0.267 to 0.0.269 in /pykanidm (#1641)
  * Fix use-reset-token command hint (#1639)
  * chore(deps): bump pymdown-extensions from 9.9.2 to 10.0 in /pykanidm (#1638)
  * chore(deps-dev): bump mypy from 1.2.0 to 1.3.0 in /pykanidm (#1636)
  * chore(deps): bump wasm-bindgen-test from 0.3.34 to 0.3.35 (#1635)
  * chore(deps-dev): bump ruff from 0.0.265 to 0.0.267 in /pykanidm (#1634)
  * chore(deps): bump syn from 2.0.15 to 2.0.16 (#1633)
  * chore(deps): bump quote from 1.0.26 to 1.0.27 (#1628)
  * chore(deps): bump serde from 1.0.162 to 1.0.163 (#1632)
  * chore(deps-dev): bump mkdocs-material from 9.1.9 to 9.1.12 in /pykanidm (#1631)
  * chore(deps): bump tokio from 1.28.0 to 1.28.1 (#1629)
  * chore(deps): bump web-sys from 0.3.61 to 0.3.62 (#1627)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1626)
  * chore(deps): bump libc from 0.2.143 to 0.2.144 (#1625)
  * chore(deps): bump js-sys from 0.3.61 to 0.3.62 (#1624)
  * Update policy (#1619)
  * fixing up some spelling errors (#1618)
  * Update RELEASE_NOTES.md (#1616)
  * 20230505 replication groundwork - ruv consistency improvements (#1606)
  * chore(deps-dev): bump ruff from 0.0.263 to 0.0.265 in /pykanidm (#1608)
  * chore(deps-dev): bump mkdocs-material from 9.1.8 to 9.1.9 in /pykanidm (#1609)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1611)
  * chore(deps): bump serde from 1.0.160 to 1.0.162 (#1613)
  * chore(deps): bump libc from 0.2.142 to 0.2.143 (#1612)
  * chore(deps): bump pkg-config from 0.3.26 to 0.3.27 (#1610)
  * chore(deps-dev): bump mkdocs from 1.4.2 to 1.4.3 in /pykanidm (#1607)
  * github pages ... something is definitely going weird. (#1605)
  * token permissions! (#1604)
  * Using github actions might actually push a change (#1603)
  * looks like that's a bug (#1602)
  * fix things (#1601)
  * 20230506 ignore some references (#1600)
  * Harden migrate session to prevent duplicate migration errors (#1599)
  * reducing action concurrency load (#1598)
  * more testing cleanup (#1595)
  * Document that you need to tell Nginx or other proxies to use HTTP 1.1… (#1592)
  * sccache github actions fixes (#1593)
  * Start next dev cycle (#1589)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
</package>
<package pkgid="5555b2dd02c9a1d09e528418efc6ef7f4dbf31fd6551c68fadd8dda890cffc24" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.4.0~git2.770efa8" rel="bp156.7.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
</package>
<package pkgid="68e1bda5e53e4257377e0329acfc116de5c3c4c0ec288e6a20c577a93d386a4c" name="kanidm" arch="src">
  <version epoch="0" ver="1.4.0~git2.770efa8" rel="bp156.7.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
</package>
<package pkgid="c2ce66dff6d7bbad3434177e4fca6fd01276314759c5318a5d37805b14b0628b" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.4.0~git2.770efa8" rel="bp156.7.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
</package>
<package pkgid="cb6dac6cd899dbd1337eb748c869355dd4ef271e798f73e09d0e315dc2cb3e5f" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.4.3~git1.078625c" rel="bp156.10.1"/>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
</package>
<package pkgid="623cd0c71ebc3ede5e25a20a2e3e6609e454865a3345c8df69eedf94f37714b1" name="kanidm" arch="src">
  <version epoch="0" ver="1.4.3~git1.078625c" rel="bp156.10.1"/>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
</package>
<package pkgid="74ccf50dc879f901c98b4a932db3d8a4c05c3389c885ae79944de99210b2c23f" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.4.3~git1.078625c" rel="bp156.10.1"/>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
</package>
<package pkgid="2db5d001f120c95623a336b6335e7c6b9c68dfba344acd76a73b65421eba9703" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.4.4~git0.c3dbf83" rel="bp156.13.1"/>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
</package>
<package pkgid="b82111426feb0bedf3e517e0d220b19c97baa505675b4efd7cc7120df2ccd753" name="kanidm" arch="src">
  <version epoch="0" ver="1.4.4~git0.c3dbf83" rel="bp156.13.1"/>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
</package>
<package pkgid="34484c86e5edf5ae1764777bf1c8e9b608080fd6f9c642cde26528328df83731" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.4.4~git0.c3dbf83" rel="bp156.13.1"/>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
</package>
<package pkgid="7224378f25453ff30727686822c8dfa45b593b7ac1d44eb765685172bb6da5c7" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.4.5~git0.a7fabde" rel="bp156.18.1"/>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
</package>
<package pkgid="033378a1968c1f61df5a01b3b4d8184dcfb8e1b154f5d028c80d30a50ec60a5e" name="kanidm" arch="src">
  <version epoch="0" ver="1.4.5~git0.a7fabde" rel="bp156.18.1"/>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
</package>
<package pkgid="1821215384bf3c821babded610a675ea49d12baad7f5b6afff3b9a35f911eaed" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.4.5~git0.a7fabde" rel="bp156.18.1"/>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
</package>
<package pkgid="a0cb59120721fdf329e28aec66bfd298474723bad1c259e2fc4193642d769499" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.4.6~git0.3ce4e0f" rel="bp156.21.1"/>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
</package>
<package pkgid="547feec505cd376afa85afc40a4b96ef8722e493d45bc4d6a204c784c2f05c75" name="kanidm" arch="src">
  <version epoch="0" ver="1.4.6~git0.3ce4e0f" rel="bp156.21.1"/>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
</package>
<package pkgid="edfb35253af9ffeb876e710dbe481fa1bd8024d65fc8e0a43ea3be6fcd78f39d" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.4.6~git0.3ce4e0f" rel="bp156.21.1"/>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
</package>
<package pkgid="97eeaa31f65457fd2c62b39dd61224ca129914c7dc44c97f8073c79122958a49" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.5.0~git1.0fa57fc" rel="bp156.24.1"/>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
</package>
<package pkgid="613be8030f70a2bddc5fe75cf5da808eb0e488ce60acf084caffb1242680f2ed" name="kanidm" arch="src">
  <version epoch="0" ver="1.5.0~git1.0fa57fc" rel="bp156.24.1"/>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
</package>
<package pkgid="075c8375b906b042e262bb47372aaa2b6157e4d4db294a97d9825591d0af0a4c" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.5.0~git1.0fa57fc" rel="bp156.24.1"/>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
</package>
<package pkgid="0677b27af7f90d79a658c831ffe41164f3d42a0e6b829912c448505f2624463a" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.6.2~git0.a20663ea8" rel="bp156.29.1"/>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
</package>
<package pkgid="55f6522e5a698336d4b409d7c8e179fc1374f6fd61f76ef5c027e8452513eb07" name="kanidm" arch="src">
  <version epoch="0" ver="1.6.2~git0.a20663ea8" rel="bp156.29.1"/>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
</package>
<package pkgid="e92b6fb6fb873f8682bf1364cd42bd687666ba7f49e8061afa6143273414386b" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.6.2~git0.a20663ea8" rel="bp156.29.1"/>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
</package>
<package pkgid="473fc61b95632f74c7784286a273da58aee9a5c442b7d57a659b22178f2150f4" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.6.3~git0.389493eb1" rel="bp156.32.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
</package>
<package pkgid="ef23e4671c8f9a047775b13bca94fb03eeeba9a0a90245ae4c878ba3304c92d0" name="kanidm" arch="src">
  <version epoch="0" ver="1.6.3~git0.389493eb1" rel="bp156.32.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
</package>
<package pkgid="70baf4efe196b627509174ffbf13d3c9f38d8f463e041c018cacf34a612a64da" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.6.3~git0.389493eb1" rel="bp156.32.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
</package>
<package pkgid="b0f0d158a2589cdc33f21d491e9592f60f71b34a87c5f4cc7e9e83f086f9f6bd" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.6.4~git2.a4b3b0f7b" rel="bp156.35.1"/>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
</package>
<package pkgid="e176d11648f27f3da300ed8c663d1512628e33d55fe5116dc241c71701b18e5d" name="kanidm" arch="src">
  <version epoch="0" ver="1.6.4~git2.a4b3b0f7b" rel="bp156.35.1"/>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
</package>
<package pkgid="7e670ce721107e5a916491c44c7f627af3ffd89c422daf6d24d958298a105dce" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.6.4~git2.a4b3b0f7b" rel="bp156.35.1"/>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
</package>
<package pkgid="aff1521825a2fe1030608899b01c1334c096f9388c2443c110a25fd43946d687" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.7.0~git0.621ac7be0" rel="bp156.38.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
</package>
<package pkgid="1b323ae5f5b8e125b48f514e6d043e8294c5f0afe4ca26399f8e638cd501d953" name="kanidm" arch="src">
  <version epoch="0" ver="1.7.0~git0.621ac7be0" rel="bp156.38.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
</package>
<package pkgid="7bebc02b3aabf32fcf33623a03c65d14308b6e47962930ea72de47c805232950" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.7.0~git0.621ac7be0" rel="bp156.38.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
</package>
<package pkgid="45311c04dca004af646118a9b558c4273f1a14743eea1254d2f0504292dc0bf8" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.7.1~git0.130a31d29" rel="bp156.41.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
</package>
<package pkgid="f2f092528a9efa218bc7ea6ecba0e7d11829f4fdc8b1f3c84e6ddc3d42ba87b2" name="kanidm" arch="src">
  <version epoch="0" ver="1.7.1~git0.130a31d29" rel="bp156.41.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
</package>
<package pkgid="9a30b85a40a026607e2a7b00db9627b8717fa9409c58330faae2625bc0fe1821" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.7.1~git0.130a31d29" rel="bp156.41.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
</package>
<package pkgid="b10b7a394a38137839e66c0df6d6bdadbcfaf9187c624e0ab119042f84f07eb8" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.7.2~git0.d331ea986" rel="bp156.44.1"/>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
</package>
<package pkgid="1854754c6e2823f38778dc3d2cfab0099b154bd98465826c09509939c4288a10" name="kanidm" arch="src">
  <version epoch="0" ver="1.7.2~git0.d331ea986" rel="bp156.44.1"/>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
</package>
<package pkgid="afdc54ee250c0b4263488a720bce0181274cb5d9931b7227fe93788cc1b6c77e" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.7.2~git0.d331ea986" rel="bp156.44.1"/>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
</package>
<package pkgid="3d08e9323402bc80c0293811501400288bd52bf3b58179e7e29c1a3b2b8ece5b" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.7.3~git0.10847190e" rel="bp156.47.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
</package>
<package pkgid="c2e56e453ece27166a144463859840aa3c91a5ac033c6687ac3a82a7d6e74bb4" name="kanidm" arch="src">
  <version epoch="0" ver="1.7.3~git0.10847190e" rel="bp156.47.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
</package>
<package pkgid="dccb139971da6626c19b1ae35684106c2924bcb33d9b5ccc96da92e8b3e77e36" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.7.3~git0.10847190e" rel="bp156.47.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
</package>
<package pkgid="3f42785551ce2b2394504d643e3dfb3b5867a1a48893aac6c86c404f0440d55e" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.8.0~git0.42d0e864c" rel="bp156.50.1"/>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
</package>
<package pkgid="b8e5272b4677d89f84f845da61cbe6817a8beeb82d60fab68718e63bb5ee1968" name="kanidm" arch="src">
  <version epoch="0" ver="1.8.0~git0.42d0e864c" rel="bp156.50.1"/>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
</package>
<package pkgid="937572d88928db1022b8d3662abe6affe05cd487519da24823da84454f892c51" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.8.0~git0.42d0e864c" rel="bp156.50.1"/>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
</package>
<package pkgid="d1bac18994cb46764d31d8bff69d50c812a31a2a1324eca53378874414139f6b" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.8.1~git0.3d1bdfd13" rel="bp156.53.1"/>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
</package>
<package pkgid="7f1fc5c53de4deac90aff6593e39efe9bc54ad52d05af9fecec9d4eef2b2cc40" name="kanidm" arch="src">
  <version epoch="0" ver="1.8.1~git0.3d1bdfd13" rel="bp156.53.1"/>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
</package>
<package pkgid="cba7123670b9692c0ffa900041e34c262518f7143ca83a7d7e9cfa29e066791d" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.8.1~git0.3d1bdfd13" rel="bp156.53.1"/>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
</package>
<package pkgid="9bd57e22d2143a18fd2b303240e2a41c5603df3232610066b3ba76027fef2df3" name="kanidm" arch="aarch64">
  <version epoch="0" ver="1.8.4~git0.2449805e3" rel="bp156.58.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
  <changelog author="william.brown@suse.com" date="1764331200">- Update to version 1.8.2~git0.387e2ce61:
  * Release 1.8.2
  * Prevent deprecation warnings affecting release
  * Ignore CredentialTypeMinimum during migrations (#3991)
  * Report correct client IP in request log (#3990)
  * Ensure that privileged sessions expirations are synced (#3984)
  * Missing constraint on skip upgrade process (#3983)
  * Document the upgrade process through versions. (#3982)
  * lib crypto should not depend on proto (#3975)
  * Change AttributeUniqueness to yield BAD_REQUEST (#3974)
  * fix: kanidm_build_profiles has unwrap which can cause builds to fail (#3973)</changelog>
  <changelog author="william.brown@suse.com" date="1764331201">- Update to version 1.8.3~git0.471c021f2:
  * Release 1.8.3
  * Resolve infinite reauth loop</changelog>
  <changelog author="william.brown@suse.com" date="1765368000">- Update to version 1.8.4~git0.2449805e3:
  * Release 1.8.4
  * Handle concurrent pam sessions. (#4001)
  * fix: correcting parsing of backup compression input (#3995)
  * fixing up docs builds (#4006)</changelog>
</package>
<package pkgid="6a23f18ddcd3bc9ab781901ce0127a6e555754416ec41d12f2f84554fd11db7c" name="kanidm" arch="src">
  <version epoch="0" ver="1.8.4~git0.2449805e3" rel="bp156.58.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
  <changelog author="william.brown@suse.com" date="1764331200">- Update to version 1.8.2~git0.387e2ce61:
  * Release 1.8.2
  * Prevent deprecation warnings affecting release
  * Ignore CredentialTypeMinimum during migrations (#3991)
  * Report correct client IP in request log (#3990)
  * Ensure that privileged sessions expirations are synced (#3984)
  * Missing constraint on skip upgrade process (#3983)
  * Document the upgrade process through versions. (#3982)
  * lib crypto should not depend on proto (#3975)
  * Change AttributeUniqueness to yield BAD_REQUEST (#3974)
  * fix: kanidm_build_profiles has unwrap which can cause builds to fail (#3973)</changelog>
  <changelog author="william.brown@suse.com" date="1764331201">- Update to version 1.8.3~git0.471c021f2:
  * Release 1.8.3
  * Resolve infinite reauth loop</changelog>
  <changelog author="william.brown@suse.com" date="1765368000">- Update to version 1.8.4~git0.2449805e3:
  * Release 1.8.4
  * Handle concurrent pam sessions. (#4001)
  * fix: correcting parsing of backup compression input (#3995)
  * fixing up docs builds (#4006)</changelog>
</package>
<package pkgid="fa6f5e8cc918572afbd011c28f0df1a10424630bc4f7068f6ea7e7ce9faf6c10" name="kanidm" arch="x86_64">
  <version epoch="0" ver="1.8.4~git0.2449805e3" rel="bp156.58.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
  <changelog author="william.brown@suse.com" date="1764331200">- Update to version 1.8.2~git0.387e2ce61:
  * Release 1.8.2
  * Prevent deprecation warnings affecting release
  * Ignore CredentialTypeMinimum during migrations (#3991)
  * Report correct client IP in request log (#3990)
  * Ensure that privileged sessions expirations are synced (#3984)
  * Missing constraint on skip upgrade process (#3983)
  * Document the upgrade process through versions. (#3982)
  * lib crypto should not depend on proto (#3975)
  * Change AttributeUniqueness to yield BAD_REQUEST (#3974)
  * fix: kanidm_build_profiles has unwrap which can cause builds to fail (#3973)</changelog>
  <changelog author="william.brown@suse.com" date="1764331201">- Update to version 1.8.3~git0.471c021f2:
  * Release 1.8.3
  * Resolve infinite reauth loop</changelog>
  <changelog author="william.brown@suse.com" date="1765368000">- Update to version 1.8.4~git0.2449805e3:
  * Release 1.8.4
  * Handle concurrent pam sessions. (#4001)
  * fix: correcting parsing of backup compression input (#3995)
  * fixing up docs builds (#4006)</changelog>
</package>
<package pkgid="f64db08abdc3f987ce6e26c25ed64626fb2281d938c6ab90c36df246e5b8fe7f" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.3.3~git0.f075d13" rel="bp156.4.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1681473600">- bsc#1210356 - CVE-2023-26964 - hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames</changelog>
  <changelog author="william.brown@suse.com" date="1682942400">- Update to version 1.1.0~alpha12~git0.bcdbb18:
  * Release 1.1.0-alpha.12 (#1588)
  * chore(deps): bump tokio-util from 0.7.7 to 0.7.8 (#1587)
  * chore(deps): bump reqwest from 0.11.16 to 0.11.17 (#1586)
  * chore(deps): bump tokio from 1.27.0 to 1.28.0 (#1585)
  * chore(deps): bump uuid from 1.3.1 to 1.3.2 (#1584)
  * chore(deps): bump clap from 3.2.23 to 3.2.25 (#1583)
  * chore(deps-dev): bump coverage from 7.2.3 to 7.2.5 in /pykanidm (#1582)
  * Correctly prevent start up when https sockets in use (#1579)
  * Filter rdns and dns for ldap filters (#1576)
  * use sccache, merge "test" actions into "build", remove homebrew caching (#1578)
  * Cleanup incorrect log errors of denied entries (#1577)
  * 20230424 clippppppppppppyyyyyyyy (#1574)
  * Add exclusive process lock to Kanidm to prevent accidental duplicate commands. (#1575)
  * more more more unixd build fixes (#1573)
  * chore(deps-dev): bump mkdocs-material from 9.1.7 to 9.1.8 in /pykanidm (#1572)
  * chore(deps): bump openssl from 0.10.51 to 0.10.52 (#1571)
  * chore(deps): bump openssl-sys from 0.9.86 to 0.9.87 (#1570)
  * chore(deps-dev): bump ruff from 0.0.262 to 0.0.263 in /pykanidm (#1569)
  * more-merge unixd commands (#1568)
  * Consolidate unix tools (#1566)
  * 1553 pam remote or local detection (#1565)
  * chore(deps): bump openssl from 0.10.50 to 0.10.51 (#1563)
  * Improve user experince of refreshing with intent tokens during cred update (#1556)
  * chore(deps): bump tracing-subscriber from 0.3.16 to 0.3.17 (#1562)
  * chore(deps): bump regex from 1.7.3 to 1.8.1 (#1561)
  * chore(deps): bump libc from 0.2.141 to 0.2.142 (#1560)
  * chore(deps-dev): bump ruff from 0.0.261 to 0.0.262 in /pykanidm (#1559)
  * chore(deps-dev): bump mkdocs-material from 9.1.6 to 9.1.7 in /pykanidm (#1558)
  * chore(deps): bump actions/upload-artifact from 1 to 3 (#1557)
  * Fix incompatible future warnings by removing older crates (#1554)
  * 20230330 oauth2 refresh tokens (#1502)
  * Sorting documentation builds (#1551)
  * Add troubleshooting step for pam home dirs (#1550)
  * AuthSession non empty vec part 2 (#1543)
  * chore(deps): bump openssl from 0.10.49 to 0.10.50 (#1548)
  * chore(deps): bump serde from 1.0.159 to 1.0.160 (#1547)
  * chore(deps): bump syn from 2.0.13 to 2.0.15 (#1546)
  * chore(deps): bump serde_json from 1.0.95 to 1.0.96 (#1545)
  * chore(deps-dev): bump pytest from 7.3.0 to 7.3.1 in /pykanidm (#1544)
  * chore(deps): bump h2 from 0.3.15 to 0.3.17 (#1540)
  * Improve unicode control character detection (#1539)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1533)
  * chore(deps-dev): bump mypy from 1.0.1 to 1.2.0 in /pykanidm (#1532)
  * chore(deps): bump filetime from 0.2.20 to 0.2.21 (#1529)
  * chore(deps-dev): bump mkdocstrings from 0.20.0 to 0.21.2 in /pykanidm (#1536)
  * chore(deps-dev): bump mkdocs-material from 9.1.5 to 9.1.6 in /pykanidm (#1535)
  * chore(deps-dev): bump ruff from 0.0.260 to 0.0.261 in /pykanidm (#1534)
  * chore(deps-dev): bump coverage from 7.2.2 to 7.2.3 in /pykanidm (#1530)
  * chore(deps): bump uuid from 1.3.0 to 1.3.1 (#1531)
  * chore(deps): bump syn from 2.0.12 to 2.0.13 (#1527)
  * chore(deps): bump dialoguer from 0.10.3 to 0.10.4 (#1526)
  * chore(deps-dev): bump pytest from 7.2.2 to 7.3.0 in /pykanidm (#1528)
  * chore(deps): bump libc from 0.2.140 to 0.2.141 (#1525)
  * chore(deps): bump fernet from 0.2.0 to 0.2.1 (#1524)
  * Authsession non empty vec (#1522)
  * chore(deps-dev): bump ruff from 0.0.259 to 0.0.260 in /pykanidm (#1506)
  * chore(deps-dev): bump mkdocs-material from 9.1.4 to 9.1.5 in /pykanidm (#1510)
  * chore(deps): bump serde from 1.0.158 to 1.0.159 (#1515)
  * chore(deps): bump openssl from 0.10.48 to 0.10.49 (#1513)
  * chore(deps): bump tokio from 1.26.0 to 1.27.0 (#1505)
  * chore(deps): bump openssl-sys from 0.9.83 to 0.9.84 (#1507)
  * chore(deps): bump futures from 0.3.27 to 0.3.28 (#1509)
  * chore(deps): bump reqwest from 0.11.15 to 0.11.16 (#1517)
  * chore(deps-dev): bump black from 23.1.0 to 23.3.0 in /pykanidm (#1514)
  * changing from merge to squash (#1521)
  * chore(deps): bump proc-macro2 from 1.0.54 to 1.0.56
  * fixing up auto-merge (#1519)
  * chore(deps): bump syn from 2.0.10 to 2.0.12 (#1511)
  * chore(deps-dev): bump types-toml from 0.10.8.5 to 0.10.8.6 in /pykanidm (#1504)
  * chore(deps): bump serde_json from 1.0.94 to 1.0.95 (#1516)
  * chore(deps): bump ldap3_proto from 0.3.1 to 0.3.2 (#1518)
  * chore(deps): bump syn from 1.0.109 to 2.0.10 (#1499)
  * Be non empty vec (#1501)
  * 1496 ldap basedn config (#1500)
  * chore(deps): bump proc-macro2 from 1.0.52 to 1.0.54 (#1494)
  * chore(deps): bump regex from 1.7.1 to 1.7.3 (#1491)
  * chore(deps): bump pydantic from 1.10.6 to 1.10.7 in /pykanidm (#1492)
  * chore(deps-dev): bump mkdocs-material from 9.1.3 to 9.1.4 in /pykanidm (#1487)
  * chore(deps): bump async-trait from 0.1.67 to 0.1.68 (#1488)
  * Improve string validation (#1497)
  * chore(deps): bump reqwest from 0.11.14 to 0.11.15 (#1493)
  * chore(deps-dev): bump ruff from 0.0.257 to 0.0.259 in /pykanidm (#1489)
  * chore(deps): bump serde from 1.0.157 to 1.0.158 (#1490)
  * Adding an auto-merger for dependabot updates (#1486)
  * Make examples in ldap chapter consistent (#1495)
  * 1115 priv (reauth, sudo) mode (#1479)
  * chore(deps): bump openssl from 0.10.47 to 0.10.48 (#1484)
  * Server daemon logging and exit codes (#1475)
  * Fix path-relative links in documentation (#1478)
  * chore(deps): bump openssl from 0.10.45 to 0.10.47 (#1471)
  * chore(deps): bump serde from 1.0.155 to 1.0.157 (#1473)
  * chore(deps-dev): bump mkdocs-material from 9.1.2 to 9.1.3 in /pykanidm (#1468)
  * chore(deps-dev): bump pylint-pydantic from 0.1.7 to 0.1.8 in /pykanidm (#1469)
  * chore(deps-dev): bump coverage from 7.2.1 to 7.2.2 in /pykanidm (#1463)
  * chore(deps-dev): bump ruff from 0.0.254 to 0.0.257 in /pykanidm (#1466)
  * chore(deps): bump async-trait from 0.1.66 to 0.1.67 (#1461)
  * chore(deps): bump whoami from 1.3.0 to 1.4.0 (#1460)
  * chore(deps): bump zxcvbn from 2.2.1 to 2.2.2 (#1464)
  * chore(deps): bump openssl-sys from 0.9.80 to 0.9.82 (#1470)
  * chore(deps-dev): bump pytest-asyncio from 0.20.3 to 0.21.0 in /pykanidm (#1459)
  * Add unixd exit code (#1453)
  * Unixd daemon improvement (#1454)
  * chore(deps): bump walkdir from 2.3.2 to 2.3.3 (#1458)
  * checks for a minimum number of arguments (#1452)
  * chore(deps): bump chrono from 0.4.23 to 0.4.24 (#1444)
  * chore(deps): bump futures from 0.3.26 to 0.3.27 (#1447)
  * chore(deps): bump paste from 1.0.11 to 1.0.12 (#1449)
  * chore(deps-dev): bump mkdocs-material from 9.1.1 to 9.1.2 in /pykanidm (#1450)
  * chore(deps): bump csv from 1.2.0 to 1.2.1 (#1443)
  * chore(deps): bump libc from 0.2.139 to 0.2.140 (#1442)
  * chore(deps): bump serde from 1.0.152 to 1.0.155 (#1446)
  * chore(deps): bump pydantic from 1.10.5 to 1.10.6 in /pykanidm (#1448)
  * Image fixes in the build (#1441)
  * Fix RADIUS docker image file permissions (#1439)
  * User auth token session display implementation (#1415)
  * RADIUS container fixes (#1424)
  * Update book - OAuth2 integration step (#1437)
  * chore(deps): bump async-trait from 0.1.64 to 0.1.66 (#1433)
  * Hopefully fix exp issues by making it a stable part of the access token. (#1434)
  * chore(deps): bump base64 from 0.13.1 to 0.21.0 (#1350)
  * chore(deps): bump serde_json from 1.0.93 to 1.0.94 (#1427)
  * chore(deps-dev): bump pytest from 7.2.1 to 7.2.2 in /pykanidm (#1431)
  * chore(deps-dev): bump pylint-pydantic from 0.1.6 to 0.1.7 in /pykanidm (#1430)
  * chore(deps-dev): bump ruff from 0.0.253 to 0.0.254 in /pykanidm (#1429)
  * chore(deps-dev): bump mkdocs-material from 9.0.15 to 9.1.1 in /pykanidm (#1428)
  * Openssl build fix (#1422)
  * 1399 some async cleanup (#1421)
  * Web UI: Sort group memberships of profile (#1410)
  * Update the dev docs to flow nicer (#1420)
  * chore(deps): bump dyn-clone from 1.0.10 to 1.0.11 (#1417)
  * chore(deps): bump tokio from 1.25.0 to 1.26.0 (#1418)
  * chore(deps-dev): bump coverage from 7.1.0 to 7.2.1 in /pykanidm (#1405)
  * chore(deps-dev): bump ruff from 0.0.230 to 0.0.253 in /pykanidm (#1419)
  * 1399 cleanup cli docs (#1413)
  * 1399 cleanup reorg (#1412)
  * 1399 cleanup (#1409)
  * Version  output for 4 unix_int tools (#1408)
  * Windows build fixes (#1388)
  * chore(deps): bump num_enum from 0.5.10 to 0.5.11 (#1404)
  * chore(deps-dev): bump types-toml from 0.10.8.4 to 0.10.8.5 in /pykanidm (#1407)
  * chore(deps): bump syn from 1.0.107 to 1.0.109 (#1406)
  * chore(deps-dev): bump mkdocs-material from 9.0.13 to 9.0.15 in /pykanidm (#1403)
  * Mention my Recursing of the Passport (#1402)
  * Start to add reauth capabilities (#1398)
  * Add Recursive Logos (#1401)
  * Prevent invalidation of api tokens (#1397)
  * chore(deps): bump tokio-util from 0.7.4 to 0.7.7 (#1378)
  * chore(deps): bump web-sys from 0.3.60 to 0.3.61 (#1362)
  * chore(deps): bump filetime from 0.2.19 to 0.2.20 (#1375)
  * chore(deps): bump pydantic from 1.10.4 to 1.10.5 in /pykanidm (#1392)
  * chore(deps-dev): bump mkdocs-material from 9.0.12 to 9.0.13 in /pykanidm (#1394)
  * chore(deps): bump num_enum from 0.5.9 to 0.5.10 (#1391)
  * chore(deps-dev): bump types-toml from 0.10.8.3 to 0.10.8.4 in /pykanidm (#1395)
  * chore(deps-dev): bump mypy from 1.0.0 to 1.0.1 in /pykanidm (#1390)
  * chore(deps): bump csv from 1.1.6 to 1.2.0 (#1393)
  * chore(deps): bump base64urlsafedata from 0.1.2 to 0.1.3 (#1389)
  * 20230220 passkey cleanup (#1396)
  * 1115 store credential ids per session (#1386)
  * Reduce the number of cow cells in idm (#1385)
  * 1355 docker builds (#1384)
  * chore(deps): bump proc-macro2 from 1.0.50 to 1.0.51 (#1369)
  * Improve some small behaviours of login and key management (#1383)
  * 967 oauth2 implicit search (#1382)
  * chore(deps): bump wasm-bindgen-test from 0.3.33 to 0.3.34 (#1364)
  * chore(deps): bump serde_json from 1.0.91 to 1.0.93 (#1376)
  * chore(deps-dev): bump black from 22.12.0 to 23.1.0 in /pykanidm (#1367)
  * chore(deps-dev): bump pylint-pydantic from 0.1.5 to 0.1.6 in /pykanidm (#1351)
  * chore(deps-dev): bump coverage from 7.0.5 to 7.1.0 in /pykanidm (#1352)
  * 20230130 hackweek replication (#1358)
  * Improve some diagnostic messages in console (#1381)
  * chore(deps): bump docker/build-push-action from 3 to 4 (#1360)
  * chore(deps): bump aiohttp from 3.8.3 to 3.8.4 in /pykanidm (#1377)
  * chore(deps-dev): bump mypy from 0.991 to 1.0.0 in /pykanidm (#1380)
  * chore(deps): bump uuid from 1.2.2 to 1.3.0 (#1368)
  * chore(deps-dev): bump mkdocs-material from 9.0.6 to 9.0.12 in /pykanidm (#1379)
  * chore(deps-dev): bump types-toml from 0.10.8.1 to 0.10.8.3 in /pykanidm (#1374)
  * chore(deps): bump cryptography from 39.0.0 to 39.0.1 in /pykanidm (#1371)
  * Update release docs to prevent forgetting a release step (#1370)
  * 1355 docker builds (#1357)
  * Update to 12 dev (#1356)</changelog>
  <changelog author="william.brown@suse.com" date="1690891200">- Update to version 1.1.0~beta13~git2.5d1e2f9:
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)
  * Release 1.1.0-beta.13 (#1922)
  * 20230731 release (#1921)
  * Improve default shells for distros (#1920)
  * 20230728 techdebt paydown (#1909)
  * chasing weirdness (#1910)
  * chore(deps-dev): bump mkdocs-material from 9.1.19 to 9.1.21 in /pykanidm (#1918)
  * chore(deps): bump serde_json from 1.0.103 to 1.0.104 (#1917)
  * chore(deps): bump serde from 1.0.174 to 1.0.178 (#1916)
  * chore(deps): bump tikv-jemallocator from 0.5.0 to 0.5.4 (#1915)
  * chore(deps-dev): bump mkdocs from 1.4.3 to 1.5.1 in /pykanidm (#1913)
  * chore(deps-dev): bump pylint-pydantic from 0.2.3 to 0.2.4 in /pykanidm (#1912)
  * chore(deps): bump pydantic from 2.0.3 to 2.1.1 in /pykanidm (#1911)
  * 20230727 unix int modularity (#1907)
  * bumping action version (#1908)
  * 68 20230720 replication improvements (#1905)
  * Resolve compilation issue with tpm enabled on linux (#1902)
  * Improve service file for host installs (#1901)
  * 20230720 unix int modular (#1881)
  * fixing up pydantic things (#1885)
  * 1788 admin unix socket (#1880)
  * chore(deps-dev): bump pylint-pydantic from 0.2.1 to 0.2.3 in /pykanidm (#1900)
  * chore(deps-dev): bump ruff from 0.0.278 to 0.0.280 in /pykanidm (#1899)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1898)
  * chore(deps-dev): bump mkdocs-material from 9.1.18 to 9.1.19 in /pykanidm (#1897)
  * chore(deps): bump async-trait from 0.1.71 to 0.1.72 (#1895)
  * chore(deps-dev): bump types-toml from 0.10.8.6 to 0.10.8.7 in /pykanidm (#1896)
  * chore(deps): bump axum from 0.6.18 to 0.6.19 (#1894)
  * chore(deps): bump clap from 4.3.12 to 4.3.19 (#1893)
  * chore(deps): bump axum-macros from 0.3.7 to 0.3.8 (#1892)
  * chore(deps): bump serde from 1.0.171 to 1.0.174 (#1891)
  * chore(deps): bump uuid from 1.4.0 to 1.4.1 (#1890)
  * chore(deps): bump quote from 1.0.31 to 1.0.32 (#1889)
  * chore(deps): bump tower-http from 0.4.1 to 0.4.3 (#1888)
  * chore(deps): bump syn from 2.0.26 to 2.0.27 (#1887)
  * chore(deps): bump urlencoding from 2.1.2 to 2.1.3 (#1886)
  * added hsts header middleware (#1882)
  * chore(deps): bump aiohttp from 3.8.4 to 3.8.5 in /pykanidm (#1883)
  * 1785 allow sync attr yielding via partial write admin (#1879)
  * Alter filter generation to exclude empty conditions (#1877)
  * Revert to opensuse based radius container. (#1878)
  * Unix gid duplicate fix (#1876)
  * Refactor docker_build_kanidm to be more isolated (v13) (#1872)
  * Sync account import improvements (#1873)
  * chore(deps): bump quote from 1.0.29 to 1.0.31 (#1870)
  * chore(deps-dev): bump black from 23.3.0 to 23.7.0 in /pykanidm (#1859)
  * Add a newline to fix links in LLDAP section of the README (#1871)
  * chore(deps): bump dyn-clone from 1.0.11 to 1.0.12 (#1869)
  * chore(deps): bump pydantic from 1.10.11 to 2.0.3 in /pykanidm (#1858)
  * chore(deps): bump serde_json from 1.0.102 to 1.0.103 (#1868)
  * Fix missing slash in tag (#1853)
  * chore(deps): bump argon2 from 0.5.0 to 0.5.1 (#1867)
  * chore(deps): bump syn from 2.0.25 to 2.0.26 (#1866)
  * chore(deps): bump paste from 1.0.13 to 1.0.14 (#1864)
  * chore(deps-dev): bump pylint-pydantic from 0.2.0 to 0.2.1 in /pykanidm (#1863)
  * chore(deps): bump clap from 4.3.11 to 4.3.12 (#1862)
  * chore(deps-dev): bump pytest-asyncio from 0.21.0 to 0.21.1 in /pykanidm (#1861)
  * chore(deps): bump proc-macro2 from 1.0.64 to 1.0.66 (#1860)
  * chore(deps-dev): bump ruff from 0.0.277 to 0.0.278 in /pykanidm (#1857)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1856)
  * chore(deps): bump actions/upload-pages-artifact from 1 to 2 (#1855)
  * Revert "something something token permissions (#1850)" (#1852)
  * something something token permissions (#1850)
  * Upgraded clap, removing atty as a dependency (#1849)
  * Ensure we dont use std hashmaps (#1848)
  * Improve selinux in tasks daemon (#1847)
  * Resolve issue with order of operations causing group memberships to disappear (#1845)
  * headless webdriver testing, starting on brotli feature (#1844)
  * chore(deps-dev): bump mkdocs-material from 9.1.17 to 9.1.18 in /pykanidm (#1835)
  * chore(deps): bump serde from 1.0.166 to 1.0.170 (#1843)
  * Fix a typo in the unix daemon debug (#1822)
  * chore(deps-dev): bump ruff from 0.0.275 to 0.0.277 in /pykanidm (#1833)
  * chore(deps): bump serde-wasm-bindgen from 0.4.5 to 0.5.0 (#1842)
  * chore(deps): bump proc-macro2 from 1.0.63 to 1.0.64 (#1841)
  * chore(deps): bump syn from 2.0.23 to 2.0.25 (#1840)
  * chore(deps): bump async-trait from 0.1.69 to 0.1.71 (#1839)
  * chore(deps): bump regex from 1.8.4 to 1.9.1 (#1838)
  * chore(deps): bump is-terminal from 0.4.8 to 0.4.9 (#1837)
  * chore(deps): bump serde_json from 1.0.99 to 1.0.100 (#1836)
  * Allow Authorization header in CORS preflight response (#1831)
  * chore(deps): bump pydantic from 1.10.10 to 1.10.11 in /pykanidm (#1834)
  * chore(deps-dev): bump pylint-pydantic from 0.1.8 to 0.2.0 in /pykanidm (#1832)
  * Add preflight headers (#1829)
  * Persist nonce through refresh to support client (#1826)
  * Cleanup spa handling (#1825)
  * 1792 public oauth clients (#1821)
  * 1812 1813 post axum cleanup (#1817)
  * Fix diagram colours (#1815)
  * Converting from tide to axum (#1797)
  * Add client UX for redirecting to an external portal for synced accounts (#1791)
  * Add cors policy (#1807)
  * Improve tasks daemon shutdown (#1806)
  * Improve durability of migrations (#1804)
  * clippy-izing an unsafe in pam (#1795)
  * chore(deps): bump pydantic from 1.10.9 to 1.10.10 in /pykanidm (#1803)
  * chore(deps): bump uuid from 1.3.4 to 1.4.0 (#1802)
  * chore(deps): bump tokio from 1.28.2 to 1.29.1 (#1801)
  * chore(deps): bump syn from 2.0.20 to 2.0.23 (#1800)
  * chore(deps): bump whoami from 1.4.0 to 1.4.1 (#1799)
  * chore(deps): bump quote from 1.0.28 to 1.0.29 (#1798)
  * 20230629 tpm keygen ... again (#1793)
  * Fixing the kanidmd healthcheck (#1789)
  * Name change history (#1727)
  * 20230628 tpm minor issue with key regen (#1790)
  * Still trying to fix the docs. (#1709)
  * Improve cli to support multi-domain handling. (#1786)
  * Started chasing noise, found some code to delete... (#1768)
  * Improve tpm key generation - improve unix config for tpms. (#1782)
  * chore(deps-dev): bump pytest from 7.3.2 to 7.4.0 in /pykanidm (#1771)
  * chore(deps-dev): bump mkdocs-material from 9.1.16 to 9.1.17 in /pykanidm (#1773)
  * chore(deps-dev): bump mypy from 1.3.0 to 1.4.1 in /pykanidm (#1784)
  * chore(deps): bump serde_json from 1.0.97 to 1.0.99 (#1778)
  * chore(deps): bump syn from 2.0.18 to 2.0.20 (#1779)
  * chore(deps): bump authlib from 1.2.0 to 1.2.1 in /pykanidm (#1777)
  * chore(deps): bump proc-macro2 from 1.0.60 to 1.0.63 (#1776)
  * chore(deps): bump libc from 0.2.146 to 0.2.147 (#1774)
  * chore(deps): bump gloo-net from 0.2.6 to 0.3.0 (#1772)
  * chore(deps-dev): bump ruff from 0.0.272 to 0.0.275 in /pykanidm (#1770)
  * Fix debian packaging (#1742)
  * Remove r2d2 - sad beep noises (#1766)
  * Kanidmd is a bit noisy (#1765)
  * Ux improvements - Allow enrolling other devices (#1764)
  * Make argon2id default pw hasher - improve parameter detection (#1762)
  * chore(deps): bump openssl from 0.10.54 to 0.10.55 (#1761)
  * Implement tpm binding of cached password hashes (#1754)
  * Mention client configuration in tool installation guide (#1756)
  * Remove scripts that are no longer required (#1759)
  * OAuth2 secret JSON (#1758)
  * Allow account locking with expire-at 'epoch' and 'now' (#1757)
  * Resolve codespell issues (#1753)
  * Add tls generator to main kanidmd (#1743)
  * Fix block_on in ssh authorised keys (#1752)
  * chore(deps-dev): bump mkdocs-material from 9.1.15 to 9.1.16 in /pykanidm (#1751)
  * chore(deps): bump gloo from 0.8.0 to 0.8.1 (#1750)
  * chore(deps-dev): bump pytest-mock from 3.10.0 to 3.11.1 in /pykanidm (#1749)
  * chore(deps): bump hashbrown from 0.13.2 to 0.14.0 (#1748)
  * 1737 1739 sync - map uidnumbers mail (#1741)
  * Add support for argon2id (#1736)
  * Disable neon on linux (#1740)
  * 20230614 unix account security - move account name deny to unixd (#1733)
  * fixed return value of add_ava_int (#1735)
  * unix_integration: also check running SELinux mode (#1704)
  * added pre_cand entries to both pre_modify and pre_batch_modify plugin functions (#1732)
  * 20230608 ldap sync (#1728)
  * Add acp allowing service accounts to clear their own sessions (#1731)
  * Declare when no applications are available (#1730)
  * Fix ip addr parse (#1729)
  * X-Forwarded-For catcher - improve ip addr parsing (#1725)
  * chore(deps): bump proc-macro2 from 1.0.59 to 1.0.60 (#1723)
  * chore(deps): bump url from 2.3.1 to 2.4.0 (#1722)
  * chore(deps-dev): bump pytest from 7.3.1 to 7.3.2 in /pykanidm (#1719)
  * chore(deps): bump libc from 0.2.145 to 0.2.146 (#1721)
  * chore(deps-dev): bump ruff from 0.0.270 to 0.0.272 in /pykanidm (#1720)
  * docs: fix typo in sync concepts (#1715)
  * chore(deps): bump regex from 1.8.3 to 1.8.4 (#1718)
  * chore(deps): bump pydantic from 1.10.8 to 1.10.9 in /pykanidm (#1717)
  * chore(deps): bump serde from 1.0.163 to 1.0.164 (#1716)
  * Absolutely minimal implementation (#1711)
  * Add further incremental replication tests (#1707)
  * Save two more kay strokes (#1708)
  * Documentation root directory 404 (#1706)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1697)
  * Improve diagnostic and docs of ldap bind requiring posix password (#1702)
  * #1680 redux - trying to fix docs again (#1692)
  * Automatically login &amp; reauth (#1691)
  * chore(deps-dev): bump coverage from 7.2.6 to 7.2.7 in /pykanidm (#1698)
  * chore(deps): bump libc from 0.2.144 to 0.2.145 (#1701)
  * chore(deps): bump openssl from 0.10.52 to 0.10.54 (#1700)
  * chore(deps): bump csv from 1.2.1 to 1.2.2 (#1699)
  * chore(deps): bump syn from 2.0.17 to 2.0.18 (#1696)
  * chore(deps): bump chrono from 0.4.24 to 0.4.26 (#1695)
  * chore(deps-dev): bump mkdocs-material from 9.1.14 to 9.1.15 in /pykanidm (#1694)
  * chore(deps): bump openssl-sys from 0.9.87 to 0.9.88 (#1693)
  * Documentation root directory 404 (#1681)
  * Crono expression parser fix (#1682)
  * Document OpenID connect setup for Miniflux (#1683)
  * chore(deps): bump cryptography from 39.0.1 to 41.0.0 in /pykanidm (#1684)
  * Improve the readme (#1679)
  * Move the socket startup to localise it to the acceptor (#1678)
  * SELinux support for kanidm-unixd-tasks daemon (#1661)
  * Resolve ability to delete ssh keys with spaces in tags (#1674)
  * Adding mdbook-template back for bookgen (#1660)
  * chore(deps-dev): bump coverage from 7.2.5 to 7.2.6 in /pykanidm (#1669)
  * chore(deps-dev): bump mkdocstrings from 0.21.2 to 0.22.0 in /pykanidm (#1671)
  * 20230526 incremental replication improvements (#1659)
  * chore(deps): bump regex from 1.8.1 to 1.8.3 (#1670)
  * chore(deps): bump hashbrown from 0.12.3 to 0.13.2 (#1668)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1667)
  * chore(deps): bump tokio from 1.28.1 to 1.28.2 (#1666)
  * chore(deps-dev): bump ruff from 0.0.269 to 0.0.270 in /pykanidm (#1665)
  * chore(deps): bump quote from 1.0.27 to 1.0.28 (#1664)
  * chore(deps): bump pydantic from 1.10.7 to 1.10.8 in /pykanidm (#1663)
  * fixing get-tags-action in book build (#1657)
  * Add more replication tests, improve some handling of tombstones. (#1656)
  * Bring back CpuOptLevel x86_64_v1 (#1590)
  * Doc fixes (#1658)
  * Identifiable tokens (#1623)
  * Add version tag to makefile images (#1654)
  * during service account recovery, remove incompatible credentials (#1650)
  * signal handling for tasks daemon (#1651)
  * Time travelling (#1648)
  * chore(deps): bump requests from 2.28.2 to 2.31.0 in /pykanidm (#1649)
  * 20230508 replication incremental (#1620)
  * chore(deps-dev): bump mkdocs-material from 9.1.12 to 9.1.14 in /pykanidm (#1642)
  * chore(deps): bump wasm-bindgen from 0.2.85 to 0.2.86 (#1647)
  * chore(deps): bump js-sys from 0.3.62 to 0.3.63 (#1646)
  * chore(deps): bump uuid from 1.3.2 to 1.3.3 (#1645)
  * chore(deps): bump proc-macro2 from 1.0.56 to 1.0.58 (#1644)
  * chore(deps): bump reqwest from 0.11.17 to 0.11.18 (#1643)
  * chore(deps-dev): bump ruff from 0.0.267 to 0.0.269 in /pykanidm (#1641)
  * Fix use-reset-token command hint (#1639)
  * chore(deps): bump pymdown-extensions from 9.9.2 to 10.0 in /pykanidm (#1638)
  * chore(deps-dev): bump mypy from 1.2.0 to 1.3.0 in /pykanidm (#1636)
  * chore(deps): bump wasm-bindgen-test from 0.3.34 to 0.3.35 (#1635)
  * chore(deps-dev): bump ruff from 0.0.265 to 0.0.267 in /pykanidm (#1634)
  * chore(deps): bump syn from 2.0.15 to 2.0.16 (#1633)
  * chore(deps): bump quote from 1.0.26 to 1.0.27 (#1628)
  * chore(deps): bump serde from 1.0.162 to 1.0.163 (#1632)
  * chore(deps-dev): bump mkdocs-material from 9.1.9 to 9.1.12 in /pykanidm (#1631)
  * chore(deps): bump tokio from 1.28.0 to 1.28.1 (#1629)
  * chore(deps): bump web-sys from 0.3.61 to 0.3.62 (#1627)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1626)
  * chore(deps): bump libc from 0.2.143 to 0.2.144 (#1625)
  * chore(deps): bump js-sys from 0.3.61 to 0.3.62 (#1624)
  * Update policy (#1619)
  * fixing up some spelling errors (#1618)
  * Update RELEASE_NOTES.md (#1616)
  * 20230505 replication groundwork - ruv consistency improvements (#1606)
  * chore(deps-dev): bump ruff from 0.0.263 to 0.0.265 in /pykanidm (#1608)
  * chore(deps-dev): bump mkdocs-material from 9.1.8 to 9.1.9 in /pykanidm (#1609)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1611)
  * chore(deps): bump serde from 1.0.160 to 1.0.162 (#1613)
  * chore(deps): bump libc from 0.2.142 to 0.2.143 (#1612)
  * chore(deps): bump pkg-config from 0.3.26 to 0.3.27 (#1610)
  * chore(deps-dev): bump mkdocs from 1.4.2 to 1.4.3 in /pykanidm (#1607)
  * github pages ... something is definitely going weird. (#1605)
  * token permissions! (#1604)
  * Using github actions might actually push a change (#1603)
  * looks like that's a bug (#1602)
  * fix things (#1601)
  * 20230506 ignore some references (#1600)
  * Harden migrate session to prevent duplicate migration errors (#1599)
  * reducing action concurrency load (#1598)
  * more testing cleanup (#1595)
  * Document that you need to tell Nginx or other proxies to use HTTP 1.1… (#1592)
  * sccache github actions fixes (#1593)
  * Start next dev cycle (#1589)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
</package>
<package pkgid="d9b84273e7faa50f7703bf62817f200101611025dce08e3c2e05613e2f2afd2d" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.3.3~git0.f075d13" rel="bp156.4.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1681473600">- bsc#1210356 - CVE-2023-26964 - hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames</changelog>
  <changelog author="william.brown@suse.com" date="1682942400">- Update to version 1.1.0~alpha12~git0.bcdbb18:
  * Release 1.1.0-alpha.12 (#1588)
  * chore(deps): bump tokio-util from 0.7.7 to 0.7.8 (#1587)
  * chore(deps): bump reqwest from 0.11.16 to 0.11.17 (#1586)
  * chore(deps): bump tokio from 1.27.0 to 1.28.0 (#1585)
  * chore(deps): bump uuid from 1.3.1 to 1.3.2 (#1584)
  * chore(deps): bump clap from 3.2.23 to 3.2.25 (#1583)
  * chore(deps-dev): bump coverage from 7.2.3 to 7.2.5 in /pykanidm (#1582)
  * Correctly prevent start up when https sockets in use (#1579)
  * Filter rdns and dns for ldap filters (#1576)
  * use sccache, merge "test" actions into "build", remove homebrew caching (#1578)
  * Cleanup incorrect log errors of denied entries (#1577)
  * 20230424 clippppppppppppyyyyyyyy (#1574)
  * Add exclusive process lock to Kanidm to prevent accidental duplicate commands. (#1575)
  * more more more unixd build fixes (#1573)
  * chore(deps-dev): bump mkdocs-material from 9.1.7 to 9.1.8 in /pykanidm (#1572)
  * chore(deps): bump openssl from 0.10.51 to 0.10.52 (#1571)
  * chore(deps): bump openssl-sys from 0.9.86 to 0.9.87 (#1570)
  * chore(deps-dev): bump ruff from 0.0.262 to 0.0.263 in /pykanidm (#1569)
  * more-merge unixd commands (#1568)
  * Consolidate unix tools (#1566)
  * 1553 pam remote or local detection (#1565)
  * chore(deps): bump openssl from 0.10.50 to 0.10.51 (#1563)
  * Improve user experince of refreshing with intent tokens during cred update (#1556)
  * chore(deps): bump tracing-subscriber from 0.3.16 to 0.3.17 (#1562)
  * chore(deps): bump regex from 1.7.3 to 1.8.1 (#1561)
  * chore(deps): bump libc from 0.2.141 to 0.2.142 (#1560)
  * chore(deps-dev): bump ruff from 0.0.261 to 0.0.262 in /pykanidm (#1559)
  * chore(deps-dev): bump mkdocs-material from 9.1.6 to 9.1.7 in /pykanidm (#1558)
  * chore(deps): bump actions/upload-artifact from 1 to 3 (#1557)
  * Fix incompatible future warnings by removing older crates (#1554)
  * 20230330 oauth2 refresh tokens (#1502)
  * Sorting documentation builds (#1551)
  * Add troubleshooting step for pam home dirs (#1550)
  * AuthSession non empty vec part 2 (#1543)
  * chore(deps): bump openssl from 0.10.49 to 0.10.50 (#1548)
  * chore(deps): bump serde from 1.0.159 to 1.0.160 (#1547)
  * chore(deps): bump syn from 2.0.13 to 2.0.15 (#1546)
  * chore(deps): bump serde_json from 1.0.95 to 1.0.96 (#1545)
  * chore(deps-dev): bump pytest from 7.3.0 to 7.3.1 in /pykanidm (#1544)
  * chore(deps): bump h2 from 0.3.15 to 0.3.17 (#1540)
  * Improve unicode control character detection (#1539)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1533)
  * chore(deps-dev): bump mypy from 1.0.1 to 1.2.0 in /pykanidm (#1532)
  * chore(deps): bump filetime from 0.2.20 to 0.2.21 (#1529)
  * chore(deps-dev): bump mkdocstrings from 0.20.0 to 0.21.2 in /pykanidm (#1536)
  * chore(deps-dev): bump mkdocs-material from 9.1.5 to 9.1.6 in /pykanidm (#1535)
  * chore(deps-dev): bump ruff from 0.0.260 to 0.0.261 in /pykanidm (#1534)
  * chore(deps-dev): bump coverage from 7.2.2 to 7.2.3 in /pykanidm (#1530)
  * chore(deps): bump uuid from 1.3.0 to 1.3.1 (#1531)
  * chore(deps): bump syn from 2.0.12 to 2.0.13 (#1527)
  * chore(deps): bump dialoguer from 0.10.3 to 0.10.4 (#1526)
  * chore(deps-dev): bump pytest from 7.2.2 to 7.3.0 in /pykanidm (#1528)
  * chore(deps): bump libc from 0.2.140 to 0.2.141 (#1525)
  * chore(deps): bump fernet from 0.2.0 to 0.2.1 (#1524)
  * Authsession non empty vec (#1522)
  * chore(deps-dev): bump ruff from 0.0.259 to 0.0.260 in /pykanidm (#1506)
  * chore(deps-dev): bump mkdocs-material from 9.1.4 to 9.1.5 in /pykanidm (#1510)
  * chore(deps): bump serde from 1.0.158 to 1.0.159 (#1515)
  * chore(deps): bump openssl from 0.10.48 to 0.10.49 (#1513)
  * chore(deps): bump tokio from 1.26.0 to 1.27.0 (#1505)
  * chore(deps): bump openssl-sys from 0.9.83 to 0.9.84 (#1507)
  * chore(deps): bump futures from 0.3.27 to 0.3.28 (#1509)
  * chore(deps): bump reqwest from 0.11.15 to 0.11.16 (#1517)
  * chore(deps-dev): bump black from 23.1.0 to 23.3.0 in /pykanidm (#1514)
  * changing from merge to squash (#1521)
  * chore(deps): bump proc-macro2 from 1.0.54 to 1.0.56
  * fixing up auto-merge (#1519)
  * chore(deps): bump syn from 2.0.10 to 2.0.12 (#1511)
  * chore(deps-dev): bump types-toml from 0.10.8.5 to 0.10.8.6 in /pykanidm (#1504)
  * chore(deps): bump serde_json from 1.0.94 to 1.0.95 (#1516)
  * chore(deps): bump ldap3_proto from 0.3.1 to 0.3.2 (#1518)
  * chore(deps): bump syn from 1.0.109 to 2.0.10 (#1499)
  * Be non empty vec (#1501)
  * 1496 ldap basedn config (#1500)
  * chore(deps): bump proc-macro2 from 1.0.52 to 1.0.54 (#1494)
  * chore(deps): bump regex from 1.7.1 to 1.7.3 (#1491)
  * chore(deps): bump pydantic from 1.10.6 to 1.10.7 in /pykanidm (#1492)
  * chore(deps-dev): bump mkdocs-material from 9.1.3 to 9.1.4 in /pykanidm (#1487)
  * chore(deps): bump async-trait from 0.1.67 to 0.1.68 (#1488)
  * Improve string validation (#1497)
  * chore(deps): bump reqwest from 0.11.14 to 0.11.15 (#1493)
  * chore(deps-dev): bump ruff from 0.0.257 to 0.0.259 in /pykanidm (#1489)
  * chore(deps): bump serde from 1.0.157 to 1.0.158 (#1490)
  * Adding an auto-merger for dependabot updates (#1486)
  * Make examples in ldap chapter consistent (#1495)
  * 1115 priv (reauth, sudo) mode (#1479)
  * chore(deps): bump openssl from 0.10.47 to 0.10.48 (#1484)
  * Server daemon logging and exit codes (#1475)
  * Fix path-relative links in documentation (#1478)
  * chore(deps): bump openssl from 0.10.45 to 0.10.47 (#1471)
  * chore(deps): bump serde from 1.0.155 to 1.0.157 (#1473)
  * chore(deps-dev): bump mkdocs-material from 9.1.2 to 9.1.3 in /pykanidm (#1468)
  * chore(deps-dev): bump pylint-pydantic from 0.1.7 to 0.1.8 in /pykanidm (#1469)
  * chore(deps-dev): bump coverage from 7.2.1 to 7.2.2 in /pykanidm (#1463)
  * chore(deps-dev): bump ruff from 0.0.254 to 0.0.257 in /pykanidm (#1466)
  * chore(deps): bump async-trait from 0.1.66 to 0.1.67 (#1461)
  * chore(deps): bump whoami from 1.3.0 to 1.4.0 (#1460)
  * chore(deps): bump zxcvbn from 2.2.1 to 2.2.2 (#1464)
  * chore(deps): bump openssl-sys from 0.9.80 to 0.9.82 (#1470)
  * chore(deps-dev): bump pytest-asyncio from 0.20.3 to 0.21.0 in /pykanidm (#1459)
  * Add unixd exit code (#1453)
  * Unixd daemon improvement (#1454)
  * chore(deps): bump walkdir from 2.3.2 to 2.3.3 (#1458)
  * checks for a minimum number of arguments (#1452)
  * chore(deps): bump chrono from 0.4.23 to 0.4.24 (#1444)
  * chore(deps): bump futures from 0.3.26 to 0.3.27 (#1447)
  * chore(deps): bump paste from 1.0.11 to 1.0.12 (#1449)
  * chore(deps-dev): bump mkdocs-material from 9.1.1 to 9.1.2 in /pykanidm (#1450)
  * chore(deps): bump csv from 1.2.0 to 1.2.1 (#1443)
  * chore(deps): bump libc from 0.2.139 to 0.2.140 (#1442)
  * chore(deps): bump serde from 1.0.152 to 1.0.155 (#1446)
  * chore(deps): bump pydantic from 1.10.5 to 1.10.6 in /pykanidm (#1448)
  * Image fixes in the build (#1441)
  * Fix RADIUS docker image file permissions (#1439)
  * User auth token session display implementation (#1415)
  * RADIUS container fixes (#1424)
  * Update book - OAuth2 integration step (#1437)
  * chore(deps): bump async-trait from 0.1.64 to 0.1.66 (#1433)
  * Hopefully fix exp issues by making it a stable part of the access token. (#1434)
  * chore(deps): bump base64 from 0.13.1 to 0.21.0 (#1350)
  * chore(deps): bump serde_json from 1.0.93 to 1.0.94 (#1427)
  * chore(deps-dev): bump pytest from 7.2.1 to 7.2.2 in /pykanidm (#1431)
  * chore(deps-dev): bump pylint-pydantic from 0.1.6 to 0.1.7 in /pykanidm (#1430)
  * chore(deps-dev): bump ruff from 0.0.253 to 0.0.254 in /pykanidm (#1429)
  * chore(deps-dev): bump mkdocs-material from 9.0.15 to 9.1.1 in /pykanidm (#1428)
  * Openssl build fix (#1422)
  * 1399 some async cleanup (#1421)
  * Web UI: Sort group memberships of profile (#1410)
  * Update the dev docs to flow nicer (#1420)
  * chore(deps): bump dyn-clone from 1.0.10 to 1.0.11 (#1417)
  * chore(deps): bump tokio from 1.25.0 to 1.26.0 (#1418)
  * chore(deps-dev): bump coverage from 7.1.0 to 7.2.1 in /pykanidm (#1405)
  * chore(deps-dev): bump ruff from 0.0.230 to 0.0.253 in /pykanidm (#1419)
  * 1399 cleanup cli docs (#1413)
  * 1399 cleanup reorg (#1412)
  * 1399 cleanup (#1409)
  * Version  output for 4 unix_int tools (#1408)
  * Windows build fixes (#1388)
  * chore(deps): bump num_enum from 0.5.10 to 0.5.11 (#1404)
  * chore(deps-dev): bump types-toml from 0.10.8.4 to 0.10.8.5 in /pykanidm (#1407)
  * chore(deps): bump syn from 1.0.107 to 1.0.109 (#1406)
  * chore(deps-dev): bump mkdocs-material from 9.0.13 to 9.0.15 in /pykanidm (#1403)
  * Mention my Recursing of the Passport (#1402)
  * Start to add reauth capabilities (#1398)
  * Add Recursive Logos (#1401)
  * Prevent invalidation of api tokens (#1397)
  * chore(deps): bump tokio-util from 0.7.4 to 0.7.7 (#1378)
  * chore(deps): bump web-sys from 0.3.60 to 0.3.61 (#1362)
  * chore(deps): bump filetime from 0.2.19 to 0.2.20 (#1375)
  * chore(deps): bump pydantic from 1.10.4 to 1.10.5 in /pykanidm (#1392)
  * chore(deps-dev): bump mkdocs-material from 9.0.12 to 9.0.13 in /pykanidm (#1394)
  * chore(deps): bump num_enum from 0.5.9 to 0.5.10 (#1391)
  * chore(deps-dev): bump types-toml from 0.10.8.3 to 0.10.8.4 in /pykanidm (#1395)
  * chore(deps-dev): bump mypy from 1.0.0 to 1.0.1 in /pykanidm (#1390)
  * chore(deps): bump csv from 1.1.6 to 1.2.0 (#1393)
  * chore(deps): bump base64urlsafedata from 0.1.2 to 0.1.3 (#1389)
  * 20230220 passkey cleanup (#1396)
  * 1115 store credential ids per session (#1386)
  * Reduce the number of cow cells in idm (#1385)
  * 1355 docker builds (#1384)
  * chore(deps): bump proc-macro2 from 1.0.50 to 1.0.51 (#1369)
  * Improve some small behaviours of login and key management (#1383)
  * 967 oauth2 implicit search (#1382)
  * chore(deps): bump wasm-bindgen-test from 0.3.33 to 0.3.34 (#1364)
  * chore(deps): bump serde_json from 1.0.91 to 1.0.93 (#1376)
  * chore(deps-dev): bump black from 22.12.0 to 23.1.0 in /pykanidm (#1367)
  * chore(deps-dev): bump pylint-pydantic from 0.1.5 to 0.1.6 in /pykanidm (#1351)
  * chore(deps-dev): bump coverage from 7.0.5 to 7.1.0 in /pykanidm (#1352)
  * 20230130 hackweek replication (#1358)
  * Improve some diagnostic messages in console (#1381)
  * chore(deps): bump docker/build-push-action from 3 to 4 (#1360)
  * chore(deps): bump aiohttp from 3.8.3 to 3.8.4 in /pykanidm (#1377)
  * chore(deps-dev): bump mypy from 0.991 to 1.0.0 in /pykanidm (#1380)
  * chore(deps): bump uuid from 1.2.2 to 1.3.0 (#1368)
  * chore(deps-dev): bump mkdocs-material from 9.0.6 to 9.0.12 in /pykanidm (#1379)
  * chore(deps-dev): bump types-toml from 0.10.8.1 to 0.10.8.3 in /pykanidm (#1374)
  * chore(deps): bump cryptography from 39.0.0 to 39.0.1 in /pykanidm (#1371)
  * Update release docs to prevent forgetting a release step (#1370)
  * 1355 docker builds (#1357)
  * Update to 12 dev (#1356)</changelog>
  <changelog author="william.brown@suse.com" date="1690891200">- Update to version 1.1.0~beta13~git2.5d1e2f9:
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)
  * Release 1.1.0-beta.13 (#1922)
  * 20230731 release (#1921)
  * Improve default shells for distros (#1920)
  * 20230728 techdebt paydown (#1909)
  * chasing weirdness (#1910)
  * chore(deps-dev): bump mkdocs-material from 9.1.19 to 9.1.21 in /pykanidm (#1918)
  * chore(deps): bump serde_json from 1.0.103 to 1.0.104 (#1917)
  * chore(deps): bump serde from 1.0.174 to 1.0.178 (#1916)
  * chore(deps): bump tikv-jemallocator from 0.5.0 to 0.5.4 (#1915)
  * chore(deps-dev): bump mkdocs from 1.4.3 to 1.5.1 in /pykanidm (#1913)
  * chore(deps-dev): bump pylint-pydantic from 0.2.3 to 0.2.4 in /pykanidm (#1912)
  * chore(deps): bump pydantic from 2.0.3 to 2.1.1 in /pykanidm (#1911)
  * 20230727 unix int modularity (#1907)
  * bumping action version (#1908)
  * 68 20230720 replication improvements (#1905)
  * Resolve compilation issue with tpm enabled on linux (#1902)
  * Improve service file for host installs (#1901)
  * 20230720 unix int modular (#1881)
  * fixing up pydantic things (#1885)
  * 1788 admin unix socket (#1880)
  * chore(deps-dev): bump pylint-pydantic from 0.2.1 to 0.2.3 in /pykanidm (#1900)
  * chore(deps-dev): bump ruff from 0.0.278 to 0.0.280 in /pykanidm (#1899)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1898)
  * chore(deps-dev): bump mkdocs-material from 9.1.18 to 9.1.19 in /pykanidm (#1897)
  * chore(deps): bump async-trait from 0.1.71 to 0.1.72 (#1895)
  * chore(deps-dev): bump types-toml from 0.10.8.6 to 0.10.8.7 in /pykanidm (#1896)
  * chore(deps): bump axum from 0.6.18 to 0.6.19 (#1894)
  * chore(deps): bump clap from 4.3.12 to 4.3.19 (#1893)
  * chore(deps): bump axum-macros from 0.3.7 to 0.3.8 (#1892)
  * chore(deps): bump serde from 1.0.171 to 1.0.174 (#1891)
  * chore(deps): bump uuid from 1.4.0 to 1.4.1 (#1890)
  * chore(deps): bump quote from 1.0.31 to 1.0.32 (#1889)
  * chore(deps): bump tower-http from 0.4.1 to 0.4.3 (#1888)
  * chore(deps): bump syn from 2.0.26 to 2.0.27 (#1887)
  * chore(deps): bump urlencoding from 2.1.2 to 2.1.3 (#1886)
  * added hsts header middleware (#1882)
  * chore(deps): bump aiohttp from 3.8.4 to 3.8.5 in /pykanidm (#1883)
  * 1785 allow sync attr yielding via partial write admin (#1879)
  * Alter filter generation to exclude empty conditions (#1877)
  * Revert to opensuse based radius container. (#1878)
  * Unix gid duplicate fix (#1876)
  * Refactor docker_build_kanidm to be more isolated (v13) (#1872)
  * Sync account import improvements (#1873)
  * chore(deps): bump quote from 1.0.29 to 1.0.31 (#1870)
  * chore(deps-dev): bump black from 23.3.0 to 23.7.0 in /pykanidm (#1859)
  * Add a newline to fix links in LLDAP section of the README (#1871)
  * chore(deps): bump dyn-clone from 1.0.11 to 1.0.12 (#1869)
  * chore(deps): bump pydantic from 1.10.11 to 2.0.3 in /pykanidm (#1858)
  * chore(deps): bump serde_json from 1.0.102 to 1.0.103 (#1868)
  * Fix missing slash in tag (#1853)
  * chore(deps): bump argon2 from 0.5.0 to 0.5.1 (#1867)
  * chore(deps): bump syn from 2.0.25 to 2.0.26 (#1866)
  * chore(deps): bump paste from 1.0.13 to 1.0.14 (#1864)
  * chore(deps-dev): bump pylint-pydantic from 0.2.0 to 0.2.1 in /pykanidm (#1863)
  * chore(deps): bump clap from 4.3.11 to 4.3.12 (#1862)
  * chore(deps-dev): bump pytest-asyncio from 0.21.0 to 0.21.1 in /pykanidm (#1861)
  * chore(deps): bump proc-macro2 from 1.0.64 to 1.0.66 (#1860)
  * chore(deps-dev): bump ruff from 0.0.277 to 0.0.278 in /pykanidm (#1857)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1856)
  * chore(deps): bump actions/upload-pages-artifact from 1 to 2 (#1855)
  * Revert "something something token permissions (#1850)" (#1852)
  * something something token permissions (#1850)
  * Upgraded clap, removing atty as a dependency (#1849)
  * Ensure we dont use std hashmaps (#1848)
  * Improve selinux in tasks daemon (#1847)
  * Resolve issue with order of operations causing group memberships to disappear (#1845)
  * headless webdriver testing, starting on brotli feature (#1844)
  * chore(deps-dev): bump mkdocs-material from 9.1.17 to 9.1.18 in /pykanidm (#1835)
  * chore(deps): bump serde from 1.0.166 to 1.0.170 (#1843)
  * Fix a typo in the unix daemon debug (#1822)
  * chore(deps-dev): bump ruff from 0.0.275 to 0.0.277 in /pykanidm (#1833)
  * chore(deps): bump serde-wasm-bindgen from 0.4.5 to 0.5.0 (#1842)
  * chore(deps): bump proc-macro2 from 1.0.63 to 1.0.64 (#1841)
  * chore(deps): bump syn from 2.0.23 to 2.0.25 (#1840)
  * chore(deps): bump async-trait from 0.1.69 to 0.1.71 (#1839)
  * chore(deps): bump regex from 1.8.4 to 1.9.1 (#1838)
  * chore(deps): bump is-terminal from 0.4.8 to 0.4.9 (#1837)
  * chore(deps): bump serde_json from 1.0.99 to 1.0.100 (#1836)
  * Allow Authorization header in CORS preflight response (#1831)
  * chore(deps): bump pydantic from 1.10.10 to 1.10.11 in /pykanidm (#1834)
  * chore(deps-dev): bump pylint-pydantic from 0.1.8 to 0.2.0 in /pykanidm (#1832)
  * Add preflight headers (#1829)
  * Persist nonce through refresh to support client (#1826)
  * Cleanup spa handling (#1825)
  * 1792 public oauth clients (#1821)
  * 1812 1813 post axum cleanup (#1817)
  * Fix diagram colours (#1815)
  * Converting from tide to axum (#1797)
  * Add client UX for redirecting to an external portal for synced accounts (#1791)
  * Add cors policy (#1807)
  * Improve tasks daemon shutdown (#1806)
  * Improve durability of migrations (#1804)
  * clippy-izing an unsafe in pam (#1795)
  * chore(deps): bump pydantic from 1.10.9 to 1.10.10 in /pykanidm (#1803)
  * chore(deps): bump uuid from 1.3.4 to 1.4.0 (#1802)
  * chore(deps): bump tokio from 1.28.2 to 1.29.1 (#1801)
  * chore(deps): bump syn from 2.0.20 to 2.0.23 (#1800)
  * chore(deps): bump whoami from 1.4.0 to 1.4.1 (#1799)
  * chore(deps): bump quote from 1.0.28 to 1.0.29 (#1798)
  * 20230629 tpm keygen ... again (#1793)
  * Fixing the kanidmd healthcheck (#1789)
  * Name change history (#1727)
  * 20230628 tpm minor issue with key regen (#1790)
  * Still trying to fix the docs. (#1709)
  * Improve cli to support multi-domain handling. (#1786)
  * Started chasing noise, found some code to delete... (#1768)
  * Improve tpm key generation - improve unix config for tpms. (#1782)
  * chore(deps-dev): bump pytest from 7.3.2 to 7.4.0 in /pykanidm (#1771)
  * chore(deps-dev): bump mkdocs-material from 9.1.16 to 9.1.17 in /pykanidm (#1773)
  * chore(deps-dev): bump mypy from 1.3.0 to 1.4.1 in /pykanidm (#1784)
  * chore(deps): bump serde_json from 1.0.97 to 1.0.99 (#1778)
  * chore(deps): bump syn from 2.0.18 to 2.0.20 (#1779)
  * chore(deps): bump authlib from 1.2.0 to 1.2.1 in /pykanidm (#1777)
  * chore(deps): bump proc-macro2 from 1.0.60 to 1.0.63 (#1776)
  * chore(deps): bump libc from 0.2.146 to 0.2.147 (#1774)
  * chore(deps): bump gloo-net from 0.2.6 to 0.3.0 (#1772)
  * chore(deps-dev): bump ruff from 0.0.272 to 0.0.275 in /pykanidm (#1770)
  * Fix debian packaging (#1742)
  * Remove r2d2 - sad beep noises (#1766)
  * Kanidmd is a bit noisy (#1765)
  * Ux improvements - Allow enrolling other devices (#1764)
  * Make argon2id default pw hasher - improve parameter detection (#1762)
  * chore(deps): bump openssl from 0.10.54 to 0.10.55 (#1761)
  * Implement tpm binding of cached password hashes (#1754)
  * Mention client configuration in tool installation guide (#1756)
  * Remove scripts that are no longer required (#1759)
  * OAuth2 secret JSON (#1758)
  * Allow account locking with expire-at 'epoch' and 'now' (#1757)
  * Resolve codespell issues (#1753)
  * Add tls generator to main kanidmd (#1743)
  * Fix block_on in ssh authorised keys (#1752)
  * chore(deps-dev): bump mkdocs-material from 9.1.15 to 9.1.16 in /pykanidm (#1751)
  * chore(deps): bump gloo from 0.8.0 to 0.8.1 (#1750)
  * chore(deps-dev): bump pytest-mock from 3.10.0 to 3.11.1 in /pykanidm (#1749)
  * chore(deps): bump hashbrown from 0.13.2 to 0.14.0 (#1748)
  * 1737 1739 sync - map uidnumbers mail (#1741)
  * Add support for argon2id (#1736)
  * Disable neon on linux (#1740)
  * 20230614 unix account security - move account name deny to unixd (#1733)
  * fixed return value of add_ava_int (#1735)
  * unix_integration: also check running SELinux mode (#1704)
  * added pre_cand entries to both pre_modify and pre_batch_modify plugin functions (#1732)
  * 20230608 ldap sync (#1728)
  * Add acp allowing service accounts to clear their own sessions (#1731)
  * Declare when no applications are available (#1730)
  * Fix ip addr parse (#1729)
  * X-Forwarded-For catcher - improve ip addr parsing (#1725)
  * chore(deps): bump proc-macro2 from 1.0.59 to 1.0.60 (#1723)
  * chore(deps): bump url from 2.3.1 to 2.4.0 (#1722)
  * chore(deps-dev): bump pytest from 7.3.1 to 7.3.2 in /pykanidm (#1719)
  * chore(deps): bump libc from 0.2.145 to 0.2.146 (#1721)
  * chore(deps-dev): bump ruff from 0.0.270 to 0.0.272 in /pykanidm (#1720)
  * docs: fix typo in sync concepts (#1715)
  * chore(deps): bump regex from 1.8.3 to 1.8.4 (#1718)
  * chore(deps): bump pydantic from 1.10.8 to 1.10.9 in /pykanidm (#1717)
  * chore(deps): bump serde from 1.0.163 to 1.0.164 (#1716)
  * Absolutely minimal implementation (#1711)
  * Add further incremental replication tests (#1707)
  * Save two more kay strokes (#1708)
  * Documentation root directory 404 (#1706)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1697)
  * Improve diagnostic and docs of ldap bind requiring posix password (#1702)
  * #1680 redux - trying to fix docs again (#1692)
  * Automatically login &amp; reauth (#1691)
  * chore(deps-dev): bump coverage from 7.2.6 to 7.2.7 in /pykanidm (#1698)
  * chore(deps): bump libc from 0.2.144 to 0.2.145 (#1701)
  * chore(deps): bump openssl from 0.10.52 to 0.10.54 (#1700)
  * chore(deps): bump csv from 1.2.1 to 1.2.2 (#1699)
  * chore(deps): bump syn from 2.0.17 to 2.0.18 (#1696)
  * chore(deps): bump chrono from 0.4.24 to 0.4.26 (#1695)
  * chore(deps-dev): bump mkdocs-material from 9.1.14 to 9.1.15 in /pykanidm (#1694)
  * chore(deps): bump openssl-sys from 0.9.87 to 0.9.88 (#1693)
  * Documentation root directory 404 (#1681)
  * Crono expression parser fix (#1682)
  * Document OpenID connect setup for Miniflux (#1683)
  * chore(deps): bump cryptography from 39.0.1 to 41.0.0 in /pykanidm (#1684)
  * Improve the readme (#1679)
  * Move the socket startup to localise it to the acceptor (#1678)
  * SELinux support for kanidm-unixd-tasks daemon (#1661)
  * Resolve ability to delete ssh keys with spaces in tags (#1674)
  * Adding mdbook-template back for bookgen (#1660)
  * chore(deps-dev): bump coverage from 7.2.5 to 7.2.6 in /pykanidm (#1669)
  * chore(deps-dev): bump mkdocstrings from 0.21.2 to 0.22.0 in /pykanidm (#1671)
  * 20230526 incremental replication improvements (#1659)
  * chore(deps): bump regex from 1.8.1 to 1.8.3 (#1670)
  * chore(deps): bump hashbrown from 0.12.3 to 0.13.2 (#1668)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1667)
  * chore(deps): bump tokio from 1.28.1 to 1.28.2 (#1666)
  * chore(deps-dev): bump ruff from 0.0.269 to 0.0.270 in /pykanidm (#1665)
  * chore(deps): bump quote from 1.0.27 to 1.0.28 (#1664)
  * chore(deps): bump pydantic from 1.10.7 to 1.10.8 in /pykanidm (#1663)
  * fixing get-tags-action in book build (#1657)
  * Add more replication tests, improve some handling of tombstones. (#1656)
  * Bring back CpuOptLevel x86_64_v1 (#1590)
  * Doc fixes (#1658)
  * Identifiable tokens (#1623)
  * Add version tag to makefile images (#1654)
  * during service account recovery, remove incompatible credentials (#1650)
  * signal handling for tasks daemon (#1651)
  * Time travelling (#1648)
  * chore(deps): bump requests from 2.28.2 to 2.31.0 in /pykanidm (#1649)
  * 20230508 replication incremental (#1620)
  * chore(deps-dev): bump mkdocs-material from 9.1.12 to 9.1.14 in /pykanidm (#1642)
  * chore(deps): bump wasm-bindgen from 0.2.85 to 0.2.86 (#1647)
  * chore(deps): bump js-sys from 0.3.62 to 0.3.63 (#1646)
  * chore(deps): bump uuid from 1.3.2 to 1.3.3 (#1645)
  * chore(deps): bump proc-macro2 from 1.0.56 to 1.0.58 (#1644)
  * chore(deps): bump reqwest from 0.11.17 to 0.11.18 (#1643)
  * chore(deps-dev): bump ruff from 0.0.267 to 0.0.269 in /pykanidm (#1641)
  * Fix use-reset-token command hint (#1639)
  * chore(deps): bump pymdown-extensions from 9.9.2 to 10.0 in /pykanidm (#1638)
  * chore(deps-dev): bump mypy from 1.2.0 to 1.3.0 in /pykanidm (#1636)
  * chore(deps): bump wasm-bindgen-test from 0.3.34 to 0.3.35 (#1635)
  * chore(deps-dev): bump ruff from 0.0.265 to 0.0.267 in /pykanidm (#1634)
  * chore(deps): bump syn from 2.0.15 to 2.0.16 (#1633)
  * chore(deps): bump quote from 1.0.26 to 1.0.27 (#1628)
  * chore(deps): bump serde from 1.0.162 to 1.0.163 (#1632)
  * chore(deps-dev): bump mkdocs-material from 9.1.9 to 9.1.12 in /pykanidm (#1631)
  * chore(deps): bump tokio from 1.28.0 to 1.28.1 (#1629)
  * chore(deps): bump web-sys from 0.3.61 to 0.3.62 (#1627)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1626)
  * chore(deps): bump libc from 0.2.143 to 0.2.144 (#1625)
  * chore(deps): bump js-sys from 0.3.61 to 0.3.62 (#1624)
  * Update policy (#1619)
  * fixing up some spelling errors (#1618)
  * Update RELEASE_NOTES.md (#1616)
  * 20230505 replication groundwork - ruv consistency improvements (#1606)
  * chore(deps-dev): bump ruff from 0.0.263 to 0.0.265 in /pykanidm (#1608)
  * chore(deps-dev): bump mkdocs-material from 9.1.8 to 9.1.9 in /pykanidm (#1609)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1611)
  * chore(deps): bump serde from 1.0.160 to 1.0.162 (#1613)
  * chore(deps): bump libc from 0.2.142 to 0.2.143 (#1612)
  * chore(deps): bump pkg-config from 0.3.26 to 0.3.27 (#1610)
  * chore(deps-dev): bump mkdocs from 1.4.2 to 1.4.3 in /pykanidm (#1607)
  * github pages ... something is definitely going weird. (#1605)
  * token permissions! (#1604)
  * Using github actions might actually push a change (#1603)
  * looks like that's a bug (#1602)
  * fix things (#1601)
  * 20230506 ignore some references (#1600)
  * Harden migrate session to prevent duplicate migration errors (#1599)
  * reducing action concurrency load (#1598)
  * more testing cleanup (#1595)
  * Document that you need to tell Nginx or other proxies to use HTTP 1.1… (#1592)
  * sccache github actions fixes (#1593)
  * Start next dev cycle (#1589)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
</package>
<package pkgid="5a2bc9fe8abc0658243a3e958034edef462f0e5c15058e53c9d2cd15f4d98509" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.4.0~git2.770efa8" rel="bp156.7.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
</package>
<package pkgid="e6c2495e75b71c83d45c1bf833bc2d8f8b51aada7a7eda413c05b58dba276688" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.4.0~git2.770efa8" rel="bp156.7.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
</package>
<package pkgid="f2e0442731ec1656e79856260cd4a3c6c10e37a1083ad67562bf3ae2c8c30263" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.4.3~git1.078625c" rel="bp156.10.1"/>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
</package>
<package pkgid="a632b2ace45f5a67870bf8e2f582eda85fc6208ef45e3b4afeae07d1e6cb1bf0" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.4.3~git1.078625c" rel="bp156.10.1"/>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
</package>
<package pkgid="058db4f3deb47043b0813ee7093c29e4e189aee1de94078e78db5f1eb53c25d5" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.4.4~git0.c3dbf83" rel="bp156.13.1"/>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
</package>
<package pkgid="ee657d0443a66f423fbff3d5aad50a2af0ee3fed75cf29780f7d28410b268c0c" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.4.4~git0.c3dbf83" rel="bp156.13.1"/>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
</package>
<package pkgid="2311116ac33d244f90ea4ae668cf16eb9faffab0dd06bdb1472f1aeed4e1a478" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.4.5~git0.a7fabde" rel="bp156.18.1"/>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
</package>
<package pkgid="0a3882104d0ef031b2045719c2fb5a51399982288affa607d511a2197e72936f" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.4.5~git0.a7fabde" rel="bp156.18.1"/>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
</package>
<package pkgid="311853088e8c5546212fa38f6d91dbeaa4de974e0d79fb757e397dcc64b2fbfb" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.4.6~git0.3ce4e0f" rel="bp156.21.1"/>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
</package>
<package pkgid="c99b268ebb212d20906f572255266f90a3abd414590a6f856921cf09fd22e1d9" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.4.6~git0.3ce4e0f" rel="bp156.21.1"/>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
</package>
<package pkgid="518ec4f3e51b15145b56a2b5043679c09d8eda77fc21eea8a6c149ec3c0dacd9" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.5.0~git1.0fa57fc" rel="bp156.24.1"/>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
</package>
<package pkgid="c6e303e186b00b2106e7a647f7289380353f3efdb0c70b38a212e07e0d162ceb" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.5.0~git1.0fa57fc" rel="bp156.24.1"/>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
</package>
<package pkgid="f1c2eb3438bb382629d72c4518d103671c23e7cee7e28ba2da7d77a6c555f93c" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.6.2~git0.a20663ea8" rel="bp156.29.1"/>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
</package>
<package pkgid="db1be826acc3a7c94b5c58b2256bfae1fedb831ecb5f758dad9b7101e0392cb3" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.6.2~git0.a20663ea8" rel="bp156.29.1"/>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
</package>
<package pkgid="98312c22521cbf4b6c470cde5d9e971ded40ab3b7b537069ada9033f14c2245f" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.6.3~git0.389493eb1" rel="bp156.32.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
</package>
<package pkgid="265fbf8834a8f5ce9627ad4da35516b667bd54c34df6e13255a219ea8ed2e6c1" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.6.3~git0.389493eb1" rel="bp156.32.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
</package>
<package pkgid="6610ea4032921d8d76d4367ec8551a796d89c69dd9facc614999e3d12ffdb59c" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.6.4~git2.a4b3b0f7b" rel="bp156.35.1"/>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
</package>
<package pkgid="3a22cc6983234e012a3cc67c6a61e36257811dad1e1d7db850312a742453728d" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.6.4~git2.a4b3b0f7b" rel="bp156.35.1"/>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
</package>
<package pkgid="438c4bad0939c29d85befa3cc6cf6f2c9f2dcede11699f0a0694929555dae85e" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.7.0~git0.621ac7be0" rel="bp156.38.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
</package>
<package pkgid="948cab165c383ac526fb64e1a9f70f2c67a6d75edac2c085004278d71839f679" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.7.0~git0.621ac7be0" rel="bp156.38.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
</package>
<package pkgid="d3784d61d518dcd5e04222da33e8386abda6d279bff6e736c356945b5dbb27b2" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.7.1~git0.130a31d29" rel="bp156.41.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
</package>
<package pkgid="6d81edfc55cd0bbdd65ddc7c2f8845f0aea0a9092cf0a4a5b54a8b507b283cf2" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.7.1~git0.130a31d29" rel="bp156.41.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
</package>
<package pkgid="05087573331374c299e6a3bc4388fb2b91e2adaaed25ddef11e4cc90fd863a5e" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.7.2~git0.d331ea986" rel="bp156.44.1"/>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
</package>
<package pkgid="14c0f3ec367abdead9d5ebfab0b0a5f03f813514f93887677ceb6f85c9f59fd5" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.7.2~git0.d331ea986" rel="bp156.44.1"/>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
</package>
<package pkgid="ffb3ece2293cd336b2495cef37a878637a220f4d86be36d324a54050cd08f9da" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.7.3~git0.10847190e" rel="bp156.47.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
</package>
<package pkgid="6ec293914a11c112c2a6f4377b34eb79f0be0a8320367a15cd6294d9bc5fe942" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.7.3~git0.10847190e" rel="bp156.47.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
</package>
<package pkgid="7d44350d530e73bc8813c3af4fa4d86626e228de8a612f9e3c5b7eeb7c62ba68" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.8.0~git0.42d0e864c" rel="bp156.50.1"/>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
</package>
<package pkgid="1bdee94744b1d69b51e87675eccd8267597b21b2002c07efa0b52886f480ac7a" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.8.0~git0.42d0e864c" rel="bp156.50.1"/>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
</package>
<package pkgid="1639aa6584d69edff5d76b96b3d9c9c8b5b0924928e82be1632d1290a1f28829" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.8.1~git0.3d1bdfd13" rel="bp156.53.1"/>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
</package>
<package pkgid="824820d7e394022627b51852e525d4ef06ebd3d102d0fdbba8b4ed3183ecc225" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.8.1~git0.3d1bdfd13" rel="bp156.53.1"/>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
</package>
<package pkgid="dac21a2a90902e9d0b09af10efa341a58c1d614bcbec1473595b702e3aa5054b" name="kanidm-clients" arch="aarch64">
  <version epoch="0" ver="1.8.4~git0.2449805e3" rel="bp156.58.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
  <changelog author="william.brown@suse.com" date="1764331200">- Update to version 1.8.2~git0.387e2ce61:
  * Release 1.8.2
  * Prevent deprecation warnings affecting release
  * Ignore CredentialTypeMinimum during migrations (#3991)
  * Report correct client IP in request log (#3990)
  * Ensure that privileged sessions expirations are synced (#3984)
  * Missing constraint on skip upgrade process (#3983)
  * Document the upgrade process through versions. (#3982)
  * lib crypto should not depend on proto (#3975)
  * Change AttributeUniqueness to yield BAD_REQUEST (#3974)
  * fix: kanidm_build_profiles has unwrap which can cause builds to fail (#3973)</changelog>
  <changelog author="william.brown@suse.com" date="1764331201">- Update to version 1.8.3~git0.471c021f2:
  * Release 1.8.3
  * Resolve infinite reauth loop</changelog>
  <changelog author="william.brown@suse.com" date="1765368000">- Update to version 1.8.4~git0.2449805e3:
  * Release 1.8.4
  * Handle concurrent pam sessions. (#4001)
  * fix: correcting parsing of backup compression input (#3995)
  * fixing up docs builds (#4006)</changelog>
</package>
<package pkgid="1b59284824c5b42fd8b5e9143091e74da89a8a8905d184c6eecb295d6f453a6d" name="kanidm-clients" arch="x86_64">
  <version epoch="0" ver="1.8.4~git0.2449805e3" rel="bp156.58.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
  <changelog author="william.brown@suse.com" date="1764331200">- Update to version 1.8.2~git0.387e2ce61:
  * Release 1.8.2
  * Prevent deprecation warnings affecting release
  * Ignore CredentialTypeMinimum during migrations (#3991)
  * Report correct client IP in request log (#3990)
  * Ensure that privileged sessions expirations are synced (#3984)
  * Missing constraint on skip upgrade process (#3983)
  * Document the upgrade process through versions. (#3982)
  * lib crypto should not depend on proto (#3975)
  * Change AttributeUniqueness to yield BAD_REQUEST (#3974)
  * fix: kanidm_build_profiles has unwrap which can cause builds to fail (#3973)</changelog>
  <changelog author="william.brown@suse.com" date="1764331201">- Update to version 1.8.3~git0.471c021f2:
  * Release 1.8.3
  * Resolve infinite reauth loop</changelog>
  <changelog author="william.brown@suse.com" date="1765368000">- Update to version 1.8.4~git0.2449805e3:
  * Release 1.8.4
  * Handle concurrent pam sessions. (#4001)
  * fix: correcting parsing of backup compression input (#3995)
  * fixing up docs builds (#4006)</changelog>
</package>
<package pkgid="c2473464fa479a66843f4d367c7cfce7d461415886dd2546672ecc66602085a1" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.3.3~git0.f075d13" rel="bp156.4.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1681473600">- bsc#1210356 - CVE-2023-26964 - hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames</changelog>
  <changelog author="william.brown@suse.com" date="1682942400">- Update to version 1.1.0~alpha12~git0.bcdbb18:
  * Release 1.1.0-alpha.12 (#1588)
  * chore(deps): bump tokio-util from 0.7.7 to 0.7.8 (#1587)
  * chore(deps): bump reqwest from 0.11.16 to 0.11.17 (#1586)
  * chore(deps): bump tokio from 1.27.0 to 1.28.0 (#1585)
  * chore(deps): bump uuid from 1.3.1 to 1.3.2 (#1584)
  * chore(deps): bump clap from 3.2.23 to 3.2.25 (#1583)
  * chore(deps-dev): bump coverage from 7.2.3 to 7.2.5 in /pykanidm (#1582)
  * Correctly prevent start up when https sockets in use (#1579)
  * Filter rdns and dns for ldap filters (#1576)
  * use sccache, merge "test" actions into "build", remove homebrew caching (#1578)
  * Cleanup incorrect log errors of denied entries (#1577)
  * 20230424 clippppppppppppyyyyyyyy (#1574)
  * Add exclusive process lock to Kanidm to prevent accidental duplicate commands. (#1575)
  * more more more unixd build fixes (#1573)
  * chore(deps-dev): bump mkdocs-material from 9.1.7 to 9.1.8 in /pykanidm (#1572)
  * chore(deps): bump openssl from 0.10.51 to 0.10.52 (#1571)
  * chore(deps): bump openssl-sys from 0.9.86 to 0.9.87 (#1570)
  * chore(deps-dev): bump ruff from 0.0.262 to 0.0.263 in /pykanidm (#1569)
  * more-merge unixd commands (#1568)
  * Consolidate unix tools (#1566)
  * 1553 pam remote or local detection (#1565)
  * chore(deps): bump openssl from 0.10.50 to 0.10.51 (#1563)
  * Improve user experince of refreshing with intent tokens during cred update (#1556)
  * chore(deps): bump tracing-subscriber from 0.3.16 to 0.3.17 (#1562)
  * chore(deps): bump regex from 1.7.3 to 1.8.1 (#1561)
  * chore(deps): bump libc from 0.2.141 to 0.2.142 (#1560)
  * chore(deps-dev): bump ruff from 0.0.261 to 0.0.262 in /pykanidm (#1559)
  * chore(deps-dev): bump mkdocs-material from 9.1.6 to 9.1.7 in /pykanidm (#1558)
  * chore(deps): bump actions/upload-artifact from 1 to 3 (#1557)
  * Fix incompatible future warnings by removing older crates (#1554)
  * 20230330 oauth2 refresh tokens (#1502)
  * Sorting documentation builds (#1551)
  * Add troubleshooting step for pam home dirs (#1550)
  * AuthSession non empty vec part 2 (#1543)
  * chore(deps): bump openssl from 0.10.49 to 0.10.50 (#1548)
  * chore(deps): bump serde from 1.0.159 to 1.0.160 (#1547)
  * chore(deps): bump syn from 2.0.13 to 2.0.15 (#1546)
  * chore(deps): bump serde_json from 1.0.95 to 1.0.96 (#1545)
  * chore(deps-dev): bump pytest from 7.3.0 to 7.3.1 in /pykanidm (#1544)
  * chore(deps): bump h2 from 0.3.15 to 0.3.17 (#1540)
  * Improve unicode control character detection (#1539)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1533)
  * chore(deps-dev): bump mypy from 1.0.1 to 1.2.0 in /pykanidm (#1532)
  * chore(deps): bump filetime from 0.2.20 to 0.2.21 (#1529)
  * chore(deps-dev): bump mkdocstrings from 0.20.0 to 0.21.2 in /pykanidm (#1536)
  * chore(deps-dev): bump mkdocs-material from 9.1.5 to 9.1.6 in /pykanidm (#1535)
  * chore(deps-dev): bump ruff from 0.0.260 to 0.0.261 in /pykanidm (#1534)
  * chore(deps-dev): bump coverage from 7.2.2 to 7.2.3 in /pykanidm (#1530)
  * chore(deps): bump uuid from 1.3.0 to 1.3.1 (#1531)
  * chore(deps): bump syn from 2.0.12 to 2.0.13 (#1527)
  * chore(deps): bump dialoguer from 0.10.3 to 0.10.4 (#1526)
  * chore(deps-dev): bump pytest from 7.2.2 to 7.3.0 in /pykanidm (#1528)
  * chore(deps): bump libc from 0.2.140 to 0.2.141 (#1525)
  * chore(deps): bump fernet from 0.2.0 to 0.2.1 (#1524)
  * Authsession non empty vec (#1522)
  * chore(deps-dev): bump ruff from 0.0.259 to 0.0.260 in /pykanidm (#1506)
  * chore(deps-dev): bump mkdocs-material from 9.1.4 to 9.1.5 in /pykanidm (#1510)
  * chore(deps): bump serde from 1.0.158 to 1.0.159 (#1515)
  * chore(deps): bump openssl from 0.10.48 to 0.10.49 (#1513)
  * chore(deps): bump tokio from 1.26.0 to 1.27.0 (#1505)
  * chore(deps): bump openssl-sys from 0.9.83 to 0.9.84 (#1507)
  * chore(deps): bump futures from 0.3.27 to 0.3.28 (#1509)
  * chore(deps): bump reqwest from 0.11.15 to 0.11.16 (#1517)
  * chore(deps-dev): bump black from 23.1.0 to 23.3.0 in /pykanidm (#1514)
  * changing from merge to squash (#1521)
  * chore(deps): bump proc-macro2 from 1.0.54 to 1.0.56
  * fixing up auto-merge (#1519)
  * chore(deps): bump syn from 2.0.10 to 2.0.12 (#1511)
  * chore(deps-dev): bump types-toml from 0.10.8.5 to 0.10.8.6 in /pykanidm (#1504)
  * chore(deps): bump serde_json from 1.0.94 to 1.0.95 (#1516)
  * chore(deps): bump ldap3_proto from 0.3.1 to 0.3.2 (#1518)
  * chore(deps): bump syn from 1.0.109 to 2.0.10 (#1499)
  * Be non empty vec (#1501)
  * 1496 ldap basedn config (#1500)
  * chore(deps): bump proc-macro2 from 1.0.52 to 1.0.54 (#1494)
  * chore(deps): bump regex from 1.7.1 to 1.7.3 (#1491)
  * chore(deps): bump pydantic from 1.10.6 to 1.10.7 in /pykanidm (#1492)
  * chore(deps-dev): bump mkdocs-material from 9.1.3 to 9.1.4 in /pykanidm (#1487)
  * chore(deps): bump async-trait from 0.1.67 to 0.1.68 (#1488)
  * Improve string validation (#1497)
  * chore(deps): bump reqwest from 0.11.14 to 0.11.15 (#1493)
  * chore(deps-dev): bump ruff from 0.0.257 to 0.0.259 in /pykanidm (#1489)
  * chore(deps): bump serde from 1.0.157 to 1.0.158 (#1490)
  * Adding an auto-merger for dependabot updates (#1486)
  * Make examples in ldap chapter consistent (#1495)
  * 1115 priv (reauth, sudo) mode (#1479)
  * chore(deps): bump openssl from 0.10.47 to 0.10.48 (#1484)
  * Server daemon logging and exit codes (#1475)
  * Fix path-relative links in documentation (#1478)
  * chore(deps): bump openssl from 0.10.45 to 0.10.47 (#1471)
  * chore(deps): bump serde from 1.0.155 to 1.0.157 (#1473)
  * chore(deps-dev): bump mkdocs-material from 9.1.2 to 9.1.3 in /pykanidm (#1468)
  * chore(deps-dev): bump pylint-pydantic from 0.1.7 to 0.1.8 in /pykanidm (#1469)
  * chore(deps-dev): bump coverage from 7.2.1 to 7.2.2 in /pykanidm (#1463)
  * chore(deps-dev): bump ruff from 0.0.254 to 0.0.257 in /pykanidm (#1466)
  * chore(deps): bump async-trait from 0.1.66 to 0.1.67 (#1461)
  * chore(deps): bump whoami from 1.3.0 to 1.4.0 (#1460)
  * chore(deps): bump zxcvbn from 2.2.1 to 2.2.2 (#1464)
  * chore(deps): bump openssl-sys from 0.9.80 to 0.9.82 (#1470)
  * chore(deps-dev): bump pytest-asyncio from 0.20.3 to 0.21.0 in /pykanidm (#1459)
  * Add unixd exit code (#1453)
  * Unixd daemon improvement (#1454)
  * chore(deps): bump walkdir from 2.3.2 to 2.3.3 (#1458)
  * checks for a minimum number of arguments (#1452)
  * chore(deps): bump chrono from 0.4.23 to 0.4.24 (#1444)
  * chore(deps): bump futures from 0.3.26 to 0.3.27 (#1447)
  * chore(deps): bump paste from 1.0.11 to 1.0.12 (#1449)
  * chore(deps-dev): bump mkdocs-material from 9.1.1 to 9.1.2 in /pykanidm (#1450)
  * chore(deps): bump csv from 1.2.0 to 1.2.1 (#1443)
  * chore(deps): bump libc from 0.2.139 to 0.2.140 (#1442)
  * chore(deps): bump serde from 1.0.152 to 1.0.155 (#1446)
  * chore(deps): bump pydantic from 1.10.5 to 1.10.6 in /pykanidm (#1448)
  * Image fixes in the build (#1441)
  * Fix RADIUS docker image file permissions (#1439)
  * User auth token session display implementation (#1415)
  * RADIUS container fixes (#1424)
  * Update book - OAuth2 integration step (#1437)
  * chore(deps): bump async-trait from 0.1.64 to 0.1.66 (#1433)
  * Hopefully fix exp issues by making it a stable part of the access token. (#1434)
  * chore(deps): bump base64 from 0.13.1 to 0.21.0 (#1350)
  * chore(deps): bump serde_json from 1.0.93 to 1.0.94 (#1427)
  * chore(deps-dev): bump pytest from 7.2.1 to 7.2.2 in /pykanidm (#1431)
  * chore(deps-dev): bump pylint-pydantic from 0.1.6 to 0.1.7 in /pykanidm (#1430)
  * chore(deps-dev): bump ruff from 0.0.253 to 0.0.254 in /pykanidm (#1429)
  * chore(deps-dev): bump mkdocs-material from 9.0.15 to 9.1.1 in /pykanidm (#1428)
  * Openssl build fix (#1422)
  * 1399 some async cleanup (#1421)
  * Web UI: Sort group memberships of profile (#1410)
  * Update the dev docs to flow nicer (#1420)
  * chore(deps): bump dyn-clone from 1.0.10 to 1.0.11 (#1417)
  * chore(deps): bump tokio from 1.25.0 to 1.26.0 (#1418)
  * chore(deps-dev): bump coverage from 7.1.0 to 7.2.1 in /pykanidm (#1405)
  * chore(deps-dev): bump ruff from 0.0.230 to 0.0.253 in /pykanidm (#1419)
  * 1399 cleanup cli docs (#1413)
  * 1399 cleanup reorg (#1412)
  * 1399 cleanup (#1409)
  * Version  output for 4 unix_int tools (#1408)
  * Windows build fixes (#1388)
  * chore(deps): bump num_enum from 0.5.10 to 0.5.11 (#1404)
  * chore(deps-dev): bump types-toml from 0.10.8.4 to 0.10.8.5 in /pykanidm (#1407)
  * chore(deps): bump syn from 1.0.107 to 1.0.109 (#1406)
  * chore(deps-dev): bump mkdocs-material from 9.0.13 to 9.0.15 in /pykanidm (#1403)
  * Mention my Recursing of the Passport (#1402)
  * Start to add reauth capabilities (#1398)
  * Add Recursive Logos (#1401)
  * Prevent invalidation of api tokens (#1397)
  * chore(deps): bump tokio-util from 0.7.4 to 0.7.7 (#1378)
  * chore(deps): bump web-sys from 0.3.60 to 0.3.61 (#1362)
  * chore(deps): bump filetime from 0.2.19 to 0.2.20 (#1375)
  * chore(deps): bump pydantic from 1.10.4 to 1.10.5 in /pykanidm (#1392)
  * chore(deps-dev): bump mkdocs-material from 9.0.12 to 9.0.13 in /pykanidm (#1394)
  * chore(deps): bump num_enum from 0.5.9 to 0.5.10 (#1391)
  * chore(deps-dev): bump types-toml from 0.10.8.3 to 0.10.8.4 in /pykanidm (#1395)
  * chore(deps-dev): bump mypy from 1.0.0 to 1.0.1 in /pykanidm (#1390)
  * chore(deps): bump csv from 1.1.6 to 1.2.0 (#1393)
  * chore(deps): bump base64urlsafedata from 0.1.2 to 0.1.3 (#1389)
  * 20230220 passkey cleanup (#1396)
  * 1115 store credential ids per session (#1386)
  * Reduce the number of cow cells in idm (#1385)
  * 1355 docker builds (#1384)
  * chore(deps): bump proc-macro2 from 1.0.50 to 1.0.51 (#1369)
  * Improve some small behaviours of login and key management (#1383)
  * 967 oauth2 implicit search (#1382)
  * chore(deps): bump wasm-bindgen-test from 0.3.33 to 0.3.34 (#1364)
  * chore(deps): bump serde_json from 1.0.91 to 1.0.93 (#1376)
  * chore(deps-dev): bump black from 22.12.0 to 23.1.0 in /pykanidm (#1367)
  * chore(deps-dev): bump pylint-pydantic from 0.1.5 to 0.1.6 in /pykanidm (#1351)
  * chore(deps-dev): bump coverage from 7.0.5 to 7.1.0 in /pykanidm (#1352)
  * 20230130 hackweek replication (#1358)
  * Improve some diagnostic messages in console (#1381)
  * chore(deps): bump docker/build-push-action from 3 to 4 (#1360)
  * chore(deps): bump aiohttp from 3.8.3 to 3.8.4 in /pykanidm (#1377)
  * chore(deps-dev): bump mypy from 0.991 to 1.0.0 in /pykanidm (#1380)
  * chore(deps): bump uuid from 1.2.2 to 1.3.0 (#1368)
  * chore(deps-dev): bump mkdocs-material from 9.0.6 to 9.0.12 in /pykanidm (#1379)
  * chore(deps-dev): bump types-toml from 0.10.8.1 to 0.10.8.3 in /pykanidm (#1374)
  * chore(deps): bump cryptography from 39.0.0 to 39.0.1 in /pykanidm (#1371)
  * Update release docs to prevent forgetting a release step (#1370)
  * 1355 docker builds (#1357)
  * Update to 12 dev (#1356)</changelog>
  <changelog author="william.brown@suse.com" date="1690891200">- Update to version 1.1.0~beta13~git2.5d1e2f9:
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)
  * Release 1.1.0-beta.13 (#1922)
  * 20230731 release (#1921)
  * Improve default shells for distros (#1920)
  * 20230728 techdebt paydown (#1909)
  * chasing weirdness (#1910)
  * chore(deps-dev): bump mkdocs-material from 9.1.19 to 9.1.21 in /pykanidm (#1918)
  * chore(deps): bump serde_json from 1.0.103 to 1.0.104 (#1917)
  * chore(deps): bump serde from 1.0.174 to 1.0.178 (#1916)
  * chore(deps): bump tikv-jemallocator from 0.5.0 to 0.5.4 (#1915)
  * chore(deps-dev): bump mkdocs from 1.4.3 to 1.5.1 in /pykanidm (#1913)
  * chore(deps-dev): bump pylint-pydantic from 0.2.3 to 0.2.4 in /pykanidm (#1912)
  * chore(deps): bump pydantic from 2.0.3 to 2.1.1 in /pykanidm (#1911)
  * 20230727 unix int modularity (#1907)
  * bumping action version (#1908)
  * 68 20230720 replication improvements (#1905)
  * Resolve compilation issue with tpm enabled on linux (#1902)
  * Improve service file for host installs (#1901)
  * 20230720 unix int modular (#1881)
  * fixing up pydantic things (#1885)
  * 1788 admin unix socket (#1880)
  * chore(deps-dev): bump pylint-pydantic from 0.2.1 to 0.2.3 in /pykanidm (#1900)
  * chore(deps-dev): bump ruff from 0.0.278 to 0.0.280 in /pykanidm (#1899)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1898)
  * chore(deps-dev): bump mkdocs-material from 9.1.18 to 9.1.19 in /pykanidm (#1897)
  * chore(deps): bump async-trait from 0.1.71 to 0.1.72 (#1895)
  * chore(deps-dev): bump types-toml from 0.10.8.6 to 0.10.8.7 in /pykanidm (#1896)
  * chore(deps): bump axum from 0.6.18 to 0.6.19 (#1894)
  * chore(deps): bump clap from 4.3.12 to 4.3.19 (#1893)
  * chore(deps): bump axum-macros from 0.3.7 to 0.3.8 (#1892)
  * chore(deps): bump serde from 1.0.171 to 1.0.174 (#1891)
  * chore(deps): bump uuid from 1.4.0 to 1.4.1 (#1890)
  * chore(deps): bump quote from 1.0.31 to 1.0.32 (#1889)
  * chore(deps): bump tower-http from 0.4.1 to 0.4.3 (#1888)
  * chore(deps): bump syn from 2.0.26 to 2.0.27 (#1887)
  * chore(deps): bump urlencoding from 2.1.2 to 2.1.3 (#1886)
  * added hsts header middleware (#1882)
  * chore(deps): bump aiohttp from 3.8.4 to 3.8.5 in /pykanidm (#1883)
  * 1785 allow sync attr yielding via partial write admin (#1879)
  * Alter filter generation to exclude empty conditions (#1877)
  * Revert to opensuse based radius container. (#1878)
  * Unix gid duplicate fix (#1876)
  * Refactor docker_build_kanidm to be more isolated (v13) (#1872)
  * Sync account import improvements (#1873)
  * chore(deps): bump quote from 1.0.29 to 1.0.31 (#1870)
  * chore(deps-dev): bump black from 23.3.0 to 23.7.0 in /pykanidm (#1859)
  * Add a newline to fix links in LLDAP section of the README (#1871)
  * chore(deps): bump dyn-clone from 1.0.11 to 1.0.12 (#1869)
  * chore(deps): bump pydantic from 1.10.11 to 2.0.3 in /pykanidm (#1858)
  * chore(deps): bump serde_json from 1.0.102 to 1.0.103 (#1868)
  * Fix missing slash in tag (#1853)
  * chore(deps): bump argon2 from 0.5.0 to 0.5.1 (#1867)
  * chore(deps): bump syn from 2.0.25 to 2.0.26 (#1866)
  * chore(deps): bump paste from 1.0.13 to 1.0.14 (#1864)
  * chore(deps-dev): bump pylint-pydantic from 0.2.0 to 0.2.1 in /pykanidm (#1863)
  * chore(deps): bump clap from 4.3.11 to 4.3.12 (#1862)
  * chore(deps-dev): bump pytest-asyncio from 0.21.0 to 0.21.1 in /pykanidm (#1861)
  * chore(deps): bump proc-macro2 from 1.0.64 to 1.0.66 (#1860)
  * chore(deps-dev): bump ruff from 0.0.277 to 0.0.278 in /pykanidm (#1857)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1856)
  * chore(deps): bump actions/upload-pages-artifact from 1 to 2 (#1855)
  * Revert "something something token permissions (#1850)" (#1852)
  * something something token permissions (#1850)
  * Upgraded clap, removing atty as a dependency (#1849)
  * Ensure we dont use std hashmaps (#1848)
  * Improve selinux in tasks daemon (#1847)
  * Resolve issue with order of operations causing group memberships to disappear (#1845)
  * headless webdriver testing, starting on brotli feature (#1844)
  * chore(deps-dev): bump mkdocs-material from 9.1.17 to 9.1.18 in /pykanidm (#1835)
  * chore(deps): bump serde from 1.0.166 to 1.0.170 (#1843)
  * Fix a typo in the unix daemon debug (#1822)
  * chore(deps-dev): bump ruff from 0.0.275 to 0.0.277 in /pykanidm (#1833)
  * chore(deps): bump serde-wasm-bindgen from 0.4.5 to 0.5.0 (#1842)
  * chore(deps): bump proc-macro2 from 1.0.63 to 1.0.64 (#1841)
  * chore(deps): bump syn from 2.0.23 to 2.0.25 (#1840)
  * chore(deps): bump async-trait from 0.1.69 to 0.1.71 (#1839)
  * chore(deps): bump regex from 1.8.4 to 1.9.1 (#1838)
  * chore(deps): bump is-terminal from 0.4.8 to 0.4.9 (#1837)
  * chore(deps): bump serde_json from 1.0.99 to 1.0.100 (#1836)
  * Allow Authorization header in CORS preflight response (#1831)
  * chore(deps): bump pydantic from 1.10.10 to 1.10.11 in /pykanidm (#1834)
  * chore(deps-dev): bump pylint-pydantic from 0.1.8 to 0.2.0 in /pykanidm (#1832)
  * Add preflight headers (#1829)
  * Persist nonce through refresh to support client (#1826)
  * Cleanup spa handling (#1825)
  * 1792 public oauth clients (#1821)
  * 1812 1813 post axum cleanup (#1817)
  * Fix diagram colours (#1815)
  * Converting from tide to axum (#1797)
  * Add client UX for redirecting to an external portal for synced accounts (#1791)
  * Add cors policy (#1807)
  * Improve tasks daemon shutdown (#1806)
  * Improve durability of migrations (#1804)
  * clippy-izing an unsafe in pam (#1795)
  * chore(deps): bump pydantic from 1.10.9 to 1.10.10 in /pykanidm (#1803)
  * chore(deps): bump uuid from 1.3.4 to 1.4.0 (#1802)
  * chore(deps): bump tokio from 1.28.2 to 1.29.1 (#1801)
  * chore(deps): bump syn from 2.0.20 to 2.0.23 (#1800)
  * chore(deps): bump whoami from 1.4.0 to 1.4.1 (#1799)
  * chore(deps): bump quote from 1.0.28 to 1.0.29 (#1798)
  * 20230629 tpm keygen ... again (#1793)
  * Fixing the kanidmd healthcheck (#1789)
  * Name change history (#1727)
  * 20230628 tpm minor issue with key regen (#1790)
  * Still trying to fix the docs. (#1709)
  * Improve cli to support multi-domain handling. (#1786)
  * Started chasing noise, found some code to delete... (#1768)
  * Improve tpm key generation - improve unix config for tpms. (#1782)
  * chore(deps-dev): bump pytest from 7.3.2 to 7.4.0 in /pykanidm (#1771)
  * chore(deps-dev): bump mkdocs-material from 9.1.16 to 9.1.17 in /pykanidm (#1773)
  * chore(deps-dev): bump mypy from 1.3.0 to 1.4.1 in /pykanidm (#1784)
  * chore(deps): bump serde_json from 1.0.97 to 1.0.99 (#1778)
  * chore(deps): bump syn from 2.0.18 to 2.0.20 (#1779)
  * chore(deps): bump authlib from 1.2.0 to 1.2.1 in /pykanidm (#1777)
  * chore(deps): bump proc-macro2 from 1.0.60 to 1.0.63 (#1776)
  * chore(deps): bump libc from 0.2.146 to 0.2.147 (#1774)
  * chore(deps): bump gloo-net from 0.2.6 to 0.3.0 (#1772)
  * chore(deps-dev): bump ruff from 0.0.272 to 0.0.275 in /pykanidm (#1770)
  * Fix debian packaging (#1742)
  * Remove r2d2 - sad beep noises (#1766)
  * Kanidmd is a bit noisy (#1765)
  * Ux improvements - Allow enrolling other devices (#1764)
  * Make argon2id default pw hasher - improve parameter detection (#1762)
  * chore(deps): bump openssl from 0.10.54 to 0.10.55 (#1761)
  * Implement tpm binding of cached password hashes (#1754)
  * Mention client configuration in tool installation guide (#1756)
  * Remove scripts that are no longer required (#1759)
  * OAuth2 secret JSON (#1758)
  * Allow account locking with expire-at 'epoch' and 'now' (#1757)
  * Resolve codespell issues (#1753)
  * Add tls generator to main kanidmd (#1743)
  * Fix block_on in ssh authorised keys (#1752)
  * chore(deps-dev): bump mkdocs-material from 9.1.15 to 9.1.16 in /pykanidm (#1751)
  * chore(deps): bump gloo from 0.8.0 to 0.8.1 (#1750)
  * chore(deps-dev): bump pytest-mock from 3.10.0 to 3.11.1 in /pykanidm (#1749)
  * chore(deps): bump hashbrown from 0.13.2 to 0.14.0 (#1748)
  * 1737 1739 sync - map uidnumbers mail (#1741)
  * Add support for argon2id (#1736)
  * Disable neon on linux (#1740)
  * 20230614 unix account security - move account name deny to unixd (#1733)
  * fixed return value of add_ava_int (#1735)
  * unix_integration: also check running SELinux mode (#1704)
  * added pre_cand entries to both pre_modify and pre_batch_modify plugin functions (#1732)
  * 20230608 ldap sync (#1728)
  * Add acp allowing service accounts to clear their own sessions (#1731)
  * Declare when no applications are available (#1730)
  * Fix ip addr parse (#1729)
  * X-Forwarded-For catcher - improve ip addr parsing (#1725)
  * chore(deps): bump proc-macro2 from 1.0.59 to 1.0.60 (#1723)
  * chore(deps): bump url from 2.3.1 to 2.4.0 (#1722)
  * chore(deps-dev): bump pytest from 7.3.1 to 7.3.2 in /pykanidm (#1719)
  * chore(deps): bump libc from 0.2.145 to 0.2.146 (#1721)
  * chore(deps-dev): bump ruff from 0.0.270 to 0.0.272 in /pykanidm (#1720)
  * docs: fix typo in sync concepts (#1715)
  * chore(deps): bump regex from 1.8.3 to 1.8.4 (#1718)
  * chore(deps): bump pydantic from 1.10.8 to 1.10.9 in /pykanidm (#1717)
  * chore(deps): bump serde from 1.0.163 to 1.0.164 (#1716)
  * Absolutely minimal implementation (#1711)
  * Add further incremental replication tests (#1707)
  * Save two more kay strokes (#1708)
  * Documentation root directory 404 (#1706)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1697)
  * Improve diagnostic and docs of ldap bind requiring posix password (#1702)
  * #1680 redux - trying to fix docs again (#1692)
  * Automatically login &amp; reauth (#1691)
  * chore(deps-dev): bump coverage from 7.2.6 to 7.2.7 in /pykanidm (#1698)
  * chore(deps): bump libc from 0.2.144 to 0.2.145 (#1701)
  * chore(deps): bump openssl from 0.10.52 to 0.10.54 (#1700)
  * chore(deps): bump csv from 1.2.1 to 1.2.2 (#1699)
  * chore(deps): bump syn from 2.0.17 to 2.0.18 (#1696)
  * chore(deps): bump chrono from 0.4.24 to 0.4.26 (#1695)
  * chore(deps-dev): bump mkdocs-material from 9.1.14 to 9.1.15 in /pykanidm (#1694)
  * chore(deps): bump openssl-sys from 0.9.87 to 0.9.88 (#1693)
  * Documentation root directory 404 (#1681)
  * Crono expression parser fix (#1682)
  * Document OpenID connect setup for Miniflux (#1683)
  * chore(deps): bump cryptography from 39.0.1 to 41.0.0 in /pykanidm (#1684)
  * Improve the readme (#1679)
  * Move the socket startup to localise it to the acceptor (#1678)
  * SELinux support for kanidm-unixd-tasks daemon (#1661)
  * Resolve ability to delete ssh keys with spaces in tags (#1674)
  * Adding mdbook-template back for bookgen (#1660)
  * chore(deps-dev): bump coverage from 7.2.5 to 7.2.6 in /pykanidm (#1669)
  * chore(deps-dev): bump mkdocstrings from 0.21.2 to 0.22.0 in /pykanidm (#1671)
  * 20230526 incremental replication improvements (#1659)
  * chore(deps): bump regex from 1.8.1 to 1.8.3 (#1670)
  * chore(deps): bump hashbrown from 0.12.3 to 0.13.2 (#1668)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1667)
  * chore(deps): bump tokio from 1.28.1 to 1.28.2 (#1666)
  * chore(deps-dev): bump ruff from 0.0.269 to 0.0.270 in /pykanidm (#1665)
  * chore(deps): bump quote from 1.0.27 to 1.0.28 (#1664)
  * chore(deps): bump pydantic from 1.10.7 to 1.10.8 in /pykanidm (#1663)
  * fixing get-tags-action in book build (#1657)
  * Add more replication tests, improve some handling of tombstones. (#1656)
  * Bring back CpuOptLevel x86_64_v1 (#1590)
  * Doc fixes (#1658)
  * Identifiable tokens (#1623)
  * Add version tag to makefile images (#1654)
  * during service account recovery, remove incompatible credentials (#1650)
  * signal handling for tasks daemon (#1651)
  * Time travelling (#1648)
  * chore(deps): bump requests from 2.28.2 to 2.31.0 in /pykanidm (#1649)
  * 20230508 replication incremental (#1620)
  * chore(deps-dev): bump mkdocs-material from 9.1.12 to 9.1.14 in /pykanidm (#1642)
  * chore(deps): bump wasm-bindgen from 0.2.85 to 0.2.86 (#1647)
  * chore(deps): bump js-sys from 0.3.62 to 0.3.63 (#1646)
  * chore(deps): bump uuid from 1.3.2 to 1.3.3 (#1645)
  * chore(deps): bump proc-macro2 from 1.0.56 to 1.0.58 (#1644)
  * chore(deps): bump reqwest from 0.11.17 to 0.11.18 (#1643)
  * chore(deps-dev): bump ruff from 0.0.267 to 0.0.269 in /pykanidm (#1641)
  * Fix use-reset-token command hint (#1639)
  * chore(deps): bump pymdown-extensions from 9.9.2 to 10.0 in /pykanidm (#1638)
  * chore(deps-dev): bump mypy from 1.2.0 to 1.3.0 in /pykanidm (#1636)
  * chore(deps): bump wasm-bindgen-test from 0.3.34 to 0.3.35 (#1635)
  * chore(deps-dev): bump ruff from 0.0.265 to 0.0.267 in /pykanidm (#1634)
  * chore(deps): bump syn from 2.0.15 to 2.0.16 (#1633)
  * chore(deps): bump quote from 1.0.26 to 1.0.27 (#1628)
  * chore(deps): bump serde from 1.0.162 to 1.0.163 (#1632)
  * chore(deps-dev): bump mkdocs-material from 9.1.9 to 9.1.12 in /pykanidm (#1631)
  * chore(deps): bump tokio from 1.28.0 to 1.28.1 (#1629)
  * chore(deps): bump web-sys from 0.3.61 to 0.3.62 (#1627)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1626)
  * chore(deps): bump libc from 0.2.143 to 0.2.144 (#1625)
  * chore(deps): bump js-sys from 0.3.61 to 0.3.62 (#1624)
  * Update policy (#1619)
  * fixing up some spelling errors (#1618)
  * Update RELEASE_NOTES.md (#1616)
  * 20230505 replication groundwork - ruv consistency improvements (#1606)
  * chore(deps-dev): bump ruff from 0.0.263 to 0.0.265 in /pykanidm (#1608)
  * chore(deps-dev): bump mkdocs-material from 9.1.8 to 9.1.9 in /pykanidm (#1609)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1611)
  * chore(deps): bump serde from 1.0.160 to 1.0.162 (#1613)
  * chore(deps): bump libc from 0.2.142 to 0.2.143 (#1612)
  * chore(deps): bump pkg-config from 0.3.26 to 0.3.27 (#1610)
  * chore(deps-dev): bump mkdocs from 1.4.2 to 1.4.3 in /pykanidm (#1607)
  * github pages ... something is definitely going weird. (#1605)
  * token permissions! (#1604)
  * Using github actions might actually push a change (#1603)
  * looks like that's a bug (#1602)
  * fix things (#1601)
  * 20230506 ignore some references (#1600)
  * Harden migrate session to prevent duplicate migration errors (#1599)
  * reducing action concurrency load (#1598)
  * more testing cleanup (#1595)
  * Document that you need to tell Nginx or other proxies to use HTTP 1.1… (#1592)
  * sccache github actions fixes (#1593)
  * Start next dev cycle (#1589)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
</package>
<package pkgid="18e64e47058eea539ac16a63d6222be67a714c352c1c375fc940019dd77711c7" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.3.3~git0.f075d13" rel="bp156.4.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1681473600">- bsc#1210356 - CVE-2023-26964 - hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames</changelog>
  <changelog author="william.brown@suse.com" date="1682942400">- Update to version 1.1.0~alpha12~git0.bcdbb18:
  * Release 1.1.0-alpha.12 (#1588)
  * chore(deps): bump tokio-util from 0.7.7 to 0.7.8 (#1587)
  * chore(deps): bump reqwest from 0.11.16 to 0.11.17 (#1586)
  * chore(deps): bump tokio from 1.27.0 to 1.28.0 (#1585)
  * chore(deps): bump uuid from 1.3.1 to 1.3.2 (#1584)
  * chore(deps): bump clap from 3.2.23 to 3.2.25 (#1583)
  * chore(deps-dev): bump coverage from 7.2.3 to 7.2.5 in /pykanidm (#1582)
  * Correctly prevent start up when https sockets in use (#1579)
  * Filter rdns and dns for ldap filters (#1576)
  * use sccache, merge "test" actions into "build", remove homebrew caching (#1578)
  * Cleanup incorrect log errors of denied entries (#1577)
  * 20230424 clippppppppppppyyyyyyyy (#1574)
  * Add exclusive process lock to Kanidm to prevent accidental duplicate commands. (#1575)
  * more more more unixd build fixes (#1573)
  * chore(deps-dev): bump mkdocs-material from 9.1.7 to 9.1.8 in /pykanidm (#1572)
  * chore(deps): bump openssl from 0.10.51 to 0.10.52 (#1571)
  * chore(deps): bump openssl-sys from 0.9.86 to 0.9.87 (#1570)
  * chore(deps-dev): bump ruff from 0.0.262 to 0.0.263 in /pykanidm (#1569)
  * more-merge unixd commands (#1568)
  * Consolidate unix tools (#1566)
  * 1553 pam remote or local detection (#1565)
  * chore(deps): bump openssl from 0.10.50 to 0.10.51 (#1563)
  * Improve user experince of refreshing with intent tokens during cred update (#1556)
  * chore(deps): bump tracing-subscriber from 0.3.16 to 0.3.17 (#1562)
  * chore(deps): bump regex from 1.7.3 to 1.8.1 (#1561)
  * chore(deps): bump libc from 0.2.141 to 0.2.142 (#1560)
  * chore(deps-dev): bump ruff from 0.0.261 to 0.0.262 in /pykanidm (#1559)
  * chore(deps-dev): bump mkdocs-material from 9.1.6 to 9.1.7 in /pykanidm (#1558)
  * chore(deps): bump actions/upload-artifact from 1 to 3 (#1557)
  * Fix incompatible future warnings by removing older crates (#1554)
  * 20230330 oauth2 refresh tokens (#1502)
  * Sorting documentation builds (#1551)
  * Add troubleshooting step for pam home dirs (#1550)
  * AuthSession non empty vec part 2 (#1543)
  * chore(deps): bump openssl from 0.10.49 to 0.10.50 (#1548)
  * chore(deps): bump serde from 1.0.159 to 1.0.160 (#1547)
  * chore(deps): bump syn from 2.0.13 to 2.0.15 (#1546)
  * chore(deps): bump serde_json from 1.0.95 to 1.0.96 (#1545)
  * chore(deps-dev): bump pytest from 7.3.0 to 7.3.1 in /pykanidm (#1544)
  * chore(deps): bump h2 from 0.3.15 to 0.3.17 (#1540)
  * Improve unicode control character detection (#1539)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1533)
  * chore(deps-dev): bump mypy from 1.0.1 to 1.2.0 in /pykanidm (#1532)
  * chore(deps): bump filetime from 0.2.20 to 0.2.21 (#1529)
  * chore(deps-dev): bump mkdocstrings from 0.20.0 to 0.21.2 in /pykanidm (#1536)
  * chore(deps-dev): bump mkdocs-material from 9.1.5 to 9.1.6 in /pykanidm (#1535)
  * chore(deps-dev): bump ruff from 0.0.260 to 0.0.261 in /pykanidm (#1534)
  * chore(deps-dev): bump coverage from 7.2.2 to 7.2.3 in /pykanidm (#1530)
  * chore(deps): bump uuid from 1.3.0 to 1.3.1 (#1531)
  * chore(deps): bump syn from 2.0.12 to 2.0.13 (#1527)
  * chore(deps): bump dialoguer from 0.10.3 to 0.10.4 (#1526)
  * chore(deps-dev): bump pytest from 7.2.2 to 7.3.0 in /pykanidm (#1528)
  * chore(deps): bump libc from 0.2.140 to 0.2.141 (#1525)
  * chore(deps): bump fernet from 0.2.0 to 0.2.1 (#1524)
  * Authsession non empty vec (#1522)
  * chore(deps-dev): bump ruff from 0.0.259 to 0.0.260 in /pykanidm (#1506)
  * chore(deps-dev): bump mkdocs-material from 9.1.4 to 9.1.5 in /pykanidm (#1510)
  * chore(deps): bump serde from 1.0.158 to 1.0.159 (#1515)
  * chore(deps): bump openssl from 0.10.48 to 0.10.49 (#1513)
  * chore(deps): bump tokio from 1.26.0 to 1.27.0 (#1505)
  * chore(deps): bump openssl-sys from 0.9.83 to 0.9.84 (#1507)
  * chore(deps): bump futures from 0.3.27 to 0.3.28 (#1509)
  * chore(deps): bump reqwest from 0.11.15 to 0.11.16 (#1517)
  * chore(deps-dev): bump black from 23.1.0 to 23.3.0 in /pykanidm (#1514)
  * changing from merge to squash (#1521)
  * chore(deps): bump proc-macro2 from 1.0.54 to 1.0.56
  * fixing up auto-merge (#1519)
  * chore(deps): bump syn from 2.0.10 to 2.0.12 (#1511)
  * chore(deps-dev): bump types-toml from 0.10.8.5 to 0.10.8.6 in /pykanidm (#1504)
  * chore(deps): bump serde_json from 1.0.94 to 1.0.95 (#1516)
  * chore(deps): bump ldap3_proto from 0.3.1 to 0.3.2 (#1518)
  * chore(deps): bump syn from 1.0.109 to 2.0.10 (#1499)
  * Be non empty vec (#1501)
  * 1496 ldap basedn config (#1500)
  * chore(deps): bump proc-macro2 from 1.0.52 to 1.0.54 (#1494)
  * chore(deps): bump regex from 1.7.1 to 1.7.3 (#1491)
  * chore(deps): bump pydantic from 1.10.6 to 1.10.7 in /pykanidm (#1492)
  * chore(deps-dev): bump mkdocs-material from 9.1.3 to 9.1.4 in /pykanidm (#1487)
  * chore(deps): bump async-trait from 0.1.67 to 0.1.68 (#1488)
  * Improve string validation (#1497)
  * chore(deps): bump reqwest from 0.11.14 to 0.11.15 (#1493)
  * chore(deps-dev): bump ruff from 0.0.257 to 0.0.259 in /pykanidm (#1489)
  * chore(deps): bump serde from 1.0.157 to 1.0.158 (#1490)
  * Adding an auto-merger for dependabot updates (#1486)
  * Make examples in ldap chapter consistent (#1495)
  * 1115 priv (reauth, sudo) mode (#1479)
  * chore(deps): bump openssl from 0.10.47 to 0.10.48 (#1484)
  * Server daemon logging and exit codes (#1475)
  * Fix path-relative links in documentation (#1478)
  * chore(deps): bump openssl from 0.10.45 to 0.10.47 (#1471)
  * chore(deps): bump serde from 1.0.155 to 1.0.157 (#1473)
  * chore(deps-dev): bump mkdocs-material from 9.1.2 to 9.1.3 in /pykanidm (#1468)
  * chore(deps-dev): bump pylint-pydantic from 0.1.7 to 0.1.8 in /pykanidm (#1469)
  * chore(deps-dev): bump coverage from 7.2.1 to 7.2.2 in /pykanidm (#1463)
  * chore(deps-dev): bump ruff from 0.0.254 to 0.0.257 in /pykanidm (#1466)
  * chore(deps): bump async-trait from 0.1.66 to 0.1.67 (#1461)
  * chore(deps): bump whoami from 1.3.0 to 1.4.0 (#1460)
  * chore(deps): bump zxcvbn from 2.2.1 to 2.2.2 (#1464)
  * chore(deps): bump openssl-sys from 0.9.80 to 0.9.82 (#1470)
  * chore(deps-dev): bump pytest-asyncio from 0.20.3 to 0.21.0 in /pykanidm (#1459)
  * Add unixd exit code (#1453)
  * Unixd daemon improvement (#1454)
  * chore(deps): bump walkdir from 2.3.2 to 2.3.3 (#1458)
  * checks for a minimum number of arguments (#1452)
  * chore(deps): bump chrono from 0.4.23 to 0.4.24 (#1444)
  * chore(deps): bump futures from 0.3.26 to 0.3.27 (#1447)
  * chore(deps): bump paste from 1.0.11 to 1.0.12 (#1449)
  * chore(deps-dev): bump mkdocs-material from 9.1.1 to 9.1.2 in /pykanidm (#1450)
  * chore(deps): bump csv from 1.2.0 to 1.2.1 (#1443)
  * chore(deps): bump libc from 0.2.139 to 0.2.140 (#1442)
  * chore(deps): bump serde from 1.0.152 to 1.0.155 (#1446)
  * chore(deps): bump pydantic from 1.10.5 to 1.10.6 in /pykanidm (#1448)
  * Image fixes in the build (#1441)
  * Fix RADIUS docker image file permissions (#1439)
  * User auth token session display implementation (#1415)
  * RADIUS container fixes (#1424)
  * Update book - OAuth2 integration step (#1437)
  * chore(deps): bump async-trait from 0.1.64 to 0.1.66 (#1433)
  * Hopefully fix exp issues by making it a stable part of the access token. (#1434)
  * chore(deps): bump base64 from 0.13.1 to 0.21.0 (#1350)
  * chore(deps): bump serde_json from 1.0.93 to 1.0.94 (#1427)
  * chore(deps-dev): bump pytest from 7.2.1 to 7.2.2 in /pykanidm (#1431)
  * chore(deps-dev): bump pylint-pydantic from 0.1.6 to 0.1.7 in /pykanidm (#1430)
  * chore(deps-dev): bump ruff from 0.0.253 to 0.0.254 in /pykanidm (#1429)
  * chore(deps-dev): bump mkdocs-material from 9.0.15 to 9.1.1 in /pykanidm (#1428)
  * Openssl build fix (#1422)
  * 1399 some async cleanup (#1421)
  * Web UI: Sort group memberships of profile (#1410)
  * Update the dev docs to flow nicer (#1420)
  * chore(deps): bump dyn-clone from 1.0.10 to 1.0.11 (#1417)
  * chore(deps): bump tokio from 1.25.0 to 1.26.0 (#1418)
  * chore(deps-dev): bump coverage from 7.1.0 to 7.2.1 in /pykanidm (#1405)
  * chore(deps-dev): bump ruff from 0.0.230 to 0.0.253 in /pykanidm (#1419)
  * 1399 cleanup cli docs (#1413)
  * 1399 cleanup reorg (#1412)
  * 1399 cleanup (#1409)
  * Version  output for 4 unix_int tools (#1408)
  * Windows build fixes (#1388)
  * chore(deps): bump num_enum from 0.5.10 to 0.5.11 (#1404)
  * chore(deps-dev): bump types-toml from 0.10.8.4 to 0.10.8.5 in /pykanidm (#1407)
  * chore(deps): bump syn from 1.0.107 to 1.0.109 (#1406)
  * chore(deps-dev): bump mkdocs-material from 9.0.13 to 9.0.15 in /pykanidm (#1403)
  * Mention my Recursing of the Passport (#1402)
  * Start to add reauth capabilities (#1398)
  * Add Recursive Logos (#1401)
  * Prevent invalidation of api tokens (#1397)
  * chore(deps): bump tokio-util from 0.7.4 to 0.7.7 (#1378)
  * chore(deps): bump web-sys from 0.3.60 to 0.3.61 (#1362)
  * chore(deps): bump filetime from 0.2.19 to 0.2.20 (#1375)
  * chore(deps): bump pydantic from 1.10.4 to 1.10.5 in /pykanidm (#1392)
  * chore(deps-dev): bump mkdocs-material from 9.0.12 to 9.0.13 in /pykanidm (#1394)
  * chore(deps): bump num_enum from 0.5.9 to 0.5.10 (#1391)
  * chore(deps-dev): bump types-toml from 0.10.8.3 to 0.10.8.4 in /pykanidm (#1395)
  * chore(deps-dev): bump mypy from 1.0.0 to 1.0.1 in /pykanidm (#1390)
  * chore(deps): bump csv from 1.1.6 to 1.2.0 (#1393)
  * chore(deps): bump base64urlsafedata from 0.1.2 to 0.1.3 (#1389)
  * 20230220 passkey cleanup (#1396)
  * 1115 store credential ids per session (#1386)
  * Reduce the number of cow cells in idm (#1385)
  * 1355 docker builds (#1384)
  * chore(deps): bump proc-macro2 from 1.0.50 to 1.0.51 (#1369)
  * Improve some small behaviours of login and key management (#1383)
  * 967 oauth2 implicit search (#1382)
  * chore(deps): bump wasm-bindgen-test from 0.3.33 to 0.3.34 (#1364)
  * chore(deps): bump serde_json from 1.0.91 to 1.0.93 (#1376)
  * chore(deps-dev): bump black from 22.12.0 to 23.1.0 in /pykanidm (#1367)
  * chore(deps-dev): bump pylint-pydantic from 0.1.5 to 0.1.6 in /pykanidm (#1351)
  * chore(deps-dev): bump coverage from 7.0.5 to 7.1.0 in /pykanidm (#1352)
  * 20230130 hackweek replication (#1358)
  * Improve some diagnostic messages in console (#1381)
  * chore(deps): bump docker/build-push-action from 3 to 4 (#1360)
  * chore(deps): bump aiohttp from 3.8.3 to 3.8.4 in /pykanidm (#1377)
  * chore(deps-dev): bump mypy from 0.991 to 1.0.0 in /pykanidm (#1380)
  * chore(deps): bump uuid from 1.2.2 to 1.3.0 (#1368)
  * chore(deps-dev): bump mkdocs-material from 9.0.6 to 9.0.12 in /pykanidm (#1379)
  * chore(deps-dev): bump types-toml from 0.10.8.1 to 0.10.8.3 in /pykanidm (#1374)
  * chore(deps): bump cryptography from 39.0.0 to 39.0.1 in /pykanidm (#1371)
  * Update release docs to prevent forgetting a release step (#1370)
  * 1355 docker builds (#1357)
  * Update to 12 dev (#1356)</changelog>
  <changelog author="william.brown@suse.com" date="1690891200">- Update to version 1.1.0~beta13~git2.5d1e2f9:
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)
  * Release 1.1.0-beta.13 (#1922)
  * 20230731 release (#1921)
  * Improve default shells for distros (#1920)
  * 20230728 techdebt paydown (#1909)
  * chasing weirdness (#1910)
  * chore(deps-dev): bump mkdocs-material from 9.1.19 to 9.1.21 in /pykanidm (#1918)
  * chore(deps): bump serde_json from 1.0.103 to 1.0.104 (#1917)
  * chore(deps): bump serde from 1.0.174 to 1.0.178 (#1916)
  * chore(deps): bump tikv-jemallocator from 0.5.0 to 0.5.4 (#1915)
  * chore(deps-dev): bump mkdocs from 1.4.3 to 1.5.1 in /pykanidm (#1913)
  * chore(deps-dev): bump pylint-pydantic from 0.2.3 to 0.2.4 in /pykanidm (#1912)
  * chore(deps): bump pydantic from 2.0.3 to 2.1.1 in /pykanidm (#1911)
  * 20230727 unix int modularity (#1907)
  * bumping action version (#1908)
  * 68 20230720 replication improvements (#1905)
  * Resolve compilation issue with tpm enabled on linux (#1902)
  * Improve service file for host installs (#1901)
  * 20230720 unix int modular (#1881)
  * fixing up pydantic things (#1885)
  * 1788 admin unix socket (#1880)
  * chore(deps-dev): bump pylint-pydantic from 0.2.1 to 0.2.3 in /pykanidm (#1900)
  * chore(deps-dev): bump ruff from 0.0.278 to 0.0.280 in /pykanidm (#1899)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1898)
  * chore(deps-dev): bump mkdocs-material from 9.1.18 to 9.1.19 in /pykanidm (#1897)
  * chore(deps): bump async-trait from 0.1.71 to 0.1.72 (#1895)
  * chore(deps-dev): bump types-toml from 0.10.8.6 to 0.10.8.7 in /pykanidm (#1896)
  * chore(deps): bump axum from 0.6.18 to 0.6.19 (#1894)
  * chore(deps): bump clap from 4.3.12 to 4.3.19 (#1893)
  * chore(deps): bump axum-macros from 0.3.7 to 0.3.8 (#1892)
  * chore(deps): bump serde from 1.0.171 to 1.0.174 (#1891)
  * chore(deps): bump uuid from 1.4.0 to 1.4.1 (#1890)
  * chore(deps): bump quote from 1.0.31 to 1.0.32 (#1889)
  * chore(deps): bump tower-http from 0.4.1 to 0.4.3 (#1888)
  * chore(deps): bump syn from 2.0.26 to 2.0.27 (#1887)
  * chore(deps): bump urlencoding from 2.1.2 to 2.1.3 (#1886)
  * added hsts header middleware (#1882)
  * chore(deps): bump aiohttp from 3.8.4 to 3.8.5 in /pykanidm (#1883)
  * 1785 allow sync attr yielding via partial write admin (#1879)
  * Alter filter generation to exclude empty conditions (#1877)
  * Revert to opensuse based radius container. (#1878)
  * Unix gid duplicate fix (#1876)
  * Refactor docker_build_kanidm to be more isolated (v13) (#1872)
  * Sync account import improvements (#1873)
  * chore(deps): bump quote from 1.0.29 to 1.0.31 (#1870)
  * chore(deps-dev): bump black from 23.3.0 to 23.7.0 in /pykanidm (#1859)
  * Add a newline to fix links in LLDAP section of the README (#1871)
  * chore(deps): bump dyn-clone from 1.0.11 to 1.0.12 (#1869)
  * chore(deps): bump pydantic from 1.10.11 to 2.0.3 in /pykanidm (#1858)
  * chore(deps): bump serde_json from 1.0.102 to 1.0.103 (#1868)
  * Fix missing slash in tag (#1853)
  * chore(deps): bump argon2 from 0.5.0 to 0.5.1 (#1867)
  * chore(deps): bump syn from 2.0.25 to 2.0.26 (#1866)
  * chore(deps): bump paste from 1.0.13 to 1.0.14 (#1864)
  * chore(deps-dev): bump pylint-pydantic from 0.2.0 to 0.2.1 in /pykanidm (#1863)
  * chore(deps): bump clap from 4.3.11 to 4.3.12 (#1862)
  * chore(deps-dev): bump pytest-asyncio from 0.21.0 to 0.21.1 in /pykanidm (#1861)
  * chore(deps): bump proc-macro2 from 1.0.64 to 1.0.66 (#1860)
  * chore(deps-dev): bump ruff from 0.0.277 to 0.0.278 in /pykanidm (#1857)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1856)
  * chore(deps): bump actions/upload-pages-artifact from 1 to 2 (#1855)
  * Revert "something something token permissions (#1850)" (#1852)
  * something something token permissions (#1850)
  * Upgraded clap, removing atty as a dependency (#1849)
  * Ensure we dont use std hashmaps (#1848)
  * Improve selinux in tasks daemon (#1847)
  * Resolve issue with order of operations causing group memberships to disappear (#1845)
  * headless webdriver testing, starting on brotli feature (#1844)
  * chore(deps-dev): bump mkdocs-material from 9.1.17 to 9.1.18 in /pykanidm (#1835)
  * chore(deps): bump serde from 1.0.166 to 1.0.170 (#1843)
  * Fix a typo in the unix daemon debug (#1822)
  * chore(deps-dev): bump ruff from 0.0.275 to 0.0.277 in /pykanidm (#1833)
  * chore(deps): bump serde-wasm-bindgen from 0.4.5 to 0.5.0 (#1842)
  * chore(deps): bump proc-macro2 from 1.0.63 to 1.0.64 (#1841)
  * chore(deps): bump syn from 2.0.23 to 2.0.25 (#1840)
  * chore(deps): bump async-trait from 0.1.69 to 0.1.71 (#1839)
  * chore(deps): bump regex from 1.8.4 to 1.9.1 (#1838)
  * chore(deps): bump is-terminal from 0.4.8 to 0.4.9 (#1837)
  * chore(deps): bump serde_json from 1.0.99 to 1.0.100 (#1836)
  * Allow Authorization header in CORS preflight response (#1831)
  * chore(deps): bump pydantic from 1.10.10 to 1.10.11 in /pykanidm (#1834)
  * chore(deps-dev): bump pylint-pydantic from 0.1.8 to 0.2.0 in /pykanidm (#1832)
  * Add preflight headers (#1829)
  * Persist nonce through refresh to support client (#1826)
  * Cleanup spa handling (#1825)
  * 1792 public oauth clients (#1821)
  * 1812 1813 post axum cleanup (#1817)
  * Fix diagram colours (#1815)
  * Converting from tide to axum (#1797)
  * Add client UX for redirecting to an external portal for synced accounts (#1791)
  * Add cors policy (#1807)
  * Improve tasks daemon shutdown (#1806)
  * Improve durability of migrations (#1804)
  * clippy-izing an unsafe in pam (#1795)
  * chore(deps): bump pydantic from 1.10.9 to 1.10.10 in /pykanidm (#1803)
  * chore(deps): bump uuid from 1.3.4 to 1.4.0 (#1802)
  * chore(deps): bump tokio from 1.28.2 to 1.29.1 (#1801)
  * chore(deps): bump syn from 2.0.20 to 2.0.23 (#1800)
  * chore(deps): bump whoami from 1.4.0 to 1.4.1 (#1799)
  * chore(deps): bump quote from 1.0.28 to 1.0.29 (#1798)
  * 20230629 tpm keygen ... again (#1793)
  * Fixing the kanidmd healthcheck (#1789)
  * Name change history (#1727)
  * 20230628 tpm minor issue with key regen (#1790)
  * Still trying to fix the docs. (#1709)
  * Improve cli to support multi-domain handling. (#1786)
  * Started chasing noise, found some code to delete... (#1768)
  * Improve tpm key generation - improve unix config for tpms. (#1782)
  * chore(deps-dev): bump pytest from 7.3.2 to 7.4.0 in /pykanidm (#1771)
  * chore(deps-dev): bump mkdocs-material from 9.1.16 to 9.1.17 in /pykanidm (#1773)
  * chore(deps-dev): bump mypy from 1.3.0 to 1.4.1 in /pykanidm (#1784)
  * chore(deps): bump serde_json from 1.0.97 to 1.0.99 (#1778)
  * chore(deps): bump syn from 2.0.18 to 2.0.20 (#1779)
  * chore(deps): bump authlib from 1.2.0 to 1.2.1 in /pykanidm (#1777)
  * chore(deps): bump proc-macro2 from 1.0.60 to 1.0.63 (#1776)
  * chore(deps): bump libc from 0.2.146 to 0.2.147 (#1774)
  * chore(deps): bump gloo-net from 0.2.6 to 0.3.0 (#1772)
  * chore(deps-dev): bump ruff from 0.0.272 to 0.0.275 in /pykanidm (#1770)
  * Fix debian packaging (#1742)
  * Remove r2d2 - sad beep noises (#1766)
  * Kanidmd is a bit noisy (#1765)
  * Ux improvements - Allow enrolling other devices (#1764)
  * Make argon2id default pw hasher - improve parameter detection (#1762)
  * chore(deps): bump openssl from 0.10.54 to 0.10.55 (#1761)
  * Implement tpm binding of cached password hashes (#1754)
  * Mention client configuration in tool installation guide (#1756)
  * Remove scripts that are no longer required (#1759)
  * OAuth2 secret JSON (#1758)
  * Allow account locking with expire-at 'epoch' and 'now' (#1757)
  * Resolve codespell issues (#1753)
  * Add tls generator to main kanidmd (#1743)
  * Fix block_on in ssh authorised keys (#1752)
  * chore(deps-dev): bump mkdocs-material from 9.1.15 to 9.1.16 in /pykanidm (#1751)
  * chore(deps): bump gloo from 0.8.0 to 0.8.1 (#1750)
  * chore(deps-dev): bump pytest-mock from 3.10.0 to 3.11.1 in /pykanidm (#1749)
  * chore(deps): bump hashbrown from 0.13.2 to 0.14.0 (#1748)
  * 1737 1739 sync - map uidnumbers mail (#1741)
  * Add support for argon2id (#1736)
  * Disable neon on linux (#1740)
  * 20230614 unix account security - move account name deny to unixd (#1733)
  * fixed return value of add_ava_int (#1735)
  * unix_integration: also check running SELinux mode (#1704)
  * added pre_cand entries to both pre_modify and pre_batch_modify plugin functions (#1732)
  * 20230608 ldap sync (#1728)
  * Add acp allowing service accounts to clear their own sessions (#1731)
  * Declare when no applications are available (#1730)
  * Fix ip addr parse (#1729)
  * X-Forwarded-For catcher - improve ip addr parsing (#1725)
  * chore(deps): bump proc-macro2 from 1.0.59 to 1.0.60 (#1723)
  * chore(deps): bump url from 2.3.1 to 2.4.0 (#1722)
  * chore(deps-dev): bump pytest from 7.3.1 to 7.3.2 in /pykanidm (#1719)
  * chore(deps): bump libc from 0.2.145 to 0.2.146 (#1721)
  * chore(deps-dev): bump ruff from 0.0.270 to 0.0.272 in /pykanidm (#1720)
  * docs: fix typo in sync concepts (#1715)
  * chore(deps): bump regex from 1.8.3 to 1.8.4 (#1718)
  * chore(deps): bump pydantic from 1.10.8 to 1.10.9 in /pykanidm (#1717)
  * chore(deps): bump serde from 1.0.163 to 1.0.164 (#1716)
  * Absolutely minimal implementation (#1711)
  * Add further incremental replication tests (#1707)
  * Save two more kay strokes (#1708)
  * Documentation root directory 404 (#1706)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1697)
  * Improve diagnostic and docs of ldap bind requiring posix password (#1702)
  * #1680 redux - trying to fix docs again (#1692)
  * Automatically login &amp; reauth (#1691)
  * chore(deps-dev): bump coverage from 7.2.6 to 7.2.7 in /pykanidm (#1698)
  * chore(deps): bump libc from 0.2.144 to 0.2.145 (#1701)
  * chore(deps): bump openssl from 0.10.52 to 0.10.54 (#1700)
  * chore(deps): bump csv from 1.2.1 to 1.2.2 (#1699)
  * chore(deps): bump syn from 2.0.17 to 2.0.18 (#1696)
  * chore(deps): bump chrono from 0.4.24 to 0.4.26 (#1695)
  * chore(deps-dev): bump mkdocs-material from 9.1.14 to 9.1.15 in /pykanidm (#1694)
  * chore(deps): bump openssl-sys from 0.9.87 to 0.9.88 (#1693)
  * Documentation root directory 404 (#1681)
  * Crono expression parser fix (#1682)
  * Document OpenID connect setup for Miniflux (#1683)
  * chore(deps): bump cryptography from 39.0.1 to 41.0.0 in /pykanidm (#1684)
  * Improve the readme (#1679)
  * Move the socket startup to localise it to the acceptor (#1678)
  * SELinux support for kanidm-unixd-tasks daemon (#1661)
  * Resolve ability to delete ssh keys with spaces in tags (#1674)
  * Adding mdbook-template back for bookgen (#1660)
  * chore(deps-dev): bump coverage from 7.2.5 to 7.2.6 in /pykanidm (#1669)
  * chore(deps-dev): bump mkdocstrings from 0.21.2 to 0.22.0 in /pykanidm (#1671)
  * 20230526 incremental replication improvements (#1659)
  * chore(deps): bump regex from 1.8.1 to 1.8.3 (#1670)
  * chore(deps): bump hashbrown from 0.12.3 to 0.13.2 (#1668)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1667)
  * chore(deps): bump tokio from 1.28.1 to 1.28.2 (#1666)
  * chore(deps-dev): bump ruff from 0.0.269 to 0.0.270 in /pykanidm (#1665)
  * chore(deps): bump quote from 1.0.27 to 1.0.28 (#1664)
  * chore(deps): bump pydantic from 1.10.7 to 1.10.8 in /pykanidm (#1663)
  * fixing get-tags-action in book build (#1657)
  * Add more replication tests, improve some handling of tombstones. (#1656)
  * Bring back CpuOptLevel x86_64_v1 (#1590)
  * Doc fixes (#1658)
  * Identifiable tokens (#1623)
  * Add version tag to makefile images (#1654)
  * during service account recovery, remove incompatible credentials (#1650)
  * signal handling for tasks daemon (#1651)
  * Time travelling (#1648)
  * chore(deps): bump requests from 2.28.2 to 2.31.0 in /pykanidm (#1649)
  * 20230508 replication incremental (#1620)
  * chore(deps-dev): bump mkdocs-material from 9.1.12 to 9.1.14 in /pykanidm (#1642)
  * chore(deps): bump wasm-bindgen from 0.2.85 to 0.2.86 (#1647)
  * chore(deps): bump js-sys from 0.3.62 to 0.3.63 (#1646)
  * chore(deps): bump uuid from 1.3.2 to 1.3.3 (#1645)
  * chore(deps): bump proc-macro2 from 1.0.56 to 1.0.58 (#1644)
  * chore(deps): bump reqwest from 0.11.17 to 0.11.18 (#1643)
  * chore(deps-dev): bump ruff from 0.0.267 to 0.0.269 in /pykanidm (#1641)
  * Fix use-reset-token command hint (#1639)
  * chore(deps): bump pymdown-extensions from 9.9.2 to 10.0 in /pykanidm (#1638)
  * chore(deps-dev): bump mypy from 1.2.0 to 1.3.0 in /pykanidm (#1636)
  * chore(deps): bump wasm-bindgen-test from 0.3.34 to 0.3.35 (#1635)
  * chore(deps-dev): bump ruff from 0.0.265 to 0.0.267 in /pykanidm (#1634)
  * chore(deps): bump syn from 2.0.15 to 2.0.16 (#1633)
  * chore(deps): bump quote from 1.0.26 to 1.0.27 (#1628)
  * chore(deps): bump serde from 1.0.162 to 1.0.163 (#1632)
  * chore(deps-dev): bump mkdocs-material from 9.1.9 to 9.1.12 in /pykanidm (#1631)
  * chore(deps): bump tokio from 1.28.0 to 1.28.1 (#1629)
  * chore(deps): bump web-sys from 0.3.61 to 0.3.62 (#1627)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1626)
  * chore(deps): bump libc from 0.2.143 to 0.2.144 (#1625)
  * chore(deps): bump js-sys from 0.3.61 to 0.3.62 (#1624)
  * Update policy (#1619)
  * fixing up some spelling errors (#1618)
  * Update RELEASE_NOTES.md (#1616)
  * 20230505 replication groundwork - ruv consistency improvements (#1606)
  * chore(deps-dev): bump ruff from 0.0.263 to 0.0.265 in /pykanidm (#1608)
  * chore(deps-dev): bump mkdocs-material from 9.1.8 to 9.1.9 in /pykanidm (#1609)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1611)
  * chore(deps): bump serde from 1.0.160 to 1.0.162 (#1613)
  * chore(deps): bump libc from 0.2.142 to 0.2.143 (#1612)
  * chore(deps): bump pkg-config from 0.3.26 to 0.3.27 (#1610)
  * chore(deps-dev): bump mkdocs from 1.4.2 to 1.4.3 in /pykanidm (#1607)
  * github pages ... something is definitely going weird. (#1605)
  * token permissions! (#1604)
  * Using github actions might actually push a change (#1603)
  * looks like that's a bug (#1602)
  * fix things (#1601)
  * 20230506 ignore some references (#1600)
  * Harden migrate session to prevent duplicate migration errors (#1599)
  * reducing action concurrency load (#1598)
  * more testing cleanup (#1595)
  * Document that you need to tell Nginx or other proxies to use HTTP 1.1… (#1592)
  * sccache github actions fixes (#1593)
  * Start next dev cycle (#1589)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
</package>
<package pkgid="cccca6b438846d4735d640e18b90eca0d0f1cb0c5fe89109983459c99ed85436" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.4.0~git2.770efa8" rel="bp156.7.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
</package>
<package pkgid="d80c7e4b817f6723bd4e54a91c5448f783a8aef6830f7e4654f1a8f7c814192d" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.4.0~git2.770efa8" rel="bp156.7.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
</package>
<package pkgid="da0e28fbda09cb9c9ab2eb2fec232bcd8b28a3ee85eeb7a17d1ac6623d178c42" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.4.3~git1.078625c" rel="bp156.10.1"/>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
</package>
<package pkgid="4cf327d01ef814cbaba30101480e3b598ec13d06f3de5537434d2329dbd7f628" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.4.3~git1.078625c" rel="bp156.10.1"/>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
</package>
<package pkgid="b647f9e391766a99213c85a7f8d87f6e63c4f6cc824abbdee620ad9669a9464c" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.4.4~git0.c3dbf83" rel="bp156.13.1"/>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
</package>
<package pkgid="c00994a48fc2c17fea60e34fb8c14dd77ad4800a12480ccec9bf57497f280af2" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.4.4~git0.c3dbf83" rel="bp156.13.1"/>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
</package>
<package pkgid="6cb6e65a701ac6a2b458fbb9d9d12ccd7671a7bc1526737588e77373ac720969" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.4.5~git0.a7fabde" rel="bp156.18.1"/>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
</package>
<package pkgid="bb881f6da56545d1f46ea82f0be82c88866cb5f78d8f8d0c7a484d4d0234da79" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.4.5~git0.a7fabde" rel="bp156.18.1"/>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
</package>
<package pkgid="7fbdd38603b0eda4ce00019b5dfb780aacd348cfdbe3b3be66f7a0687305fa68" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.4.6~git0.3ce4e0f" rel="bp156.21.1"/>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
</package>
<package pkgid="55b9d81a26e2fa969df5fbd3b504ee597c0957c6b540c6af1a535783724e0419" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.4.6~git0.3ce4e0f" rel="bp156.21.1"/>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
</package>
<package pkgid="3865d8b14036a47805d88bc9ea4f9ca645f4cb83a31875e429142fdad6ab70dd" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.5.0~git1.0fa57fc" rel="bp156.24.1"/>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
</package>
<package pkgid="f4bdddd5404001da56778c6afbb8a3d2023067e818656294c55059d7d9dca3d3" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.5.0~git1.0fa57fc" rel="bp156.24.1"/>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
</package>
<package pkgid="a62f9df2a5191926095d34e67d0f06d776e29c2e0dfc6b781fcee4a09fa6ac25" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.6.2~git0.a20663ea8" rel="bp156.29.1"/>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
</package>
<package pkgid="310287491b1552dfa56d136c5f7278acb550c716fbf3a7c2dc85e31bfddd60c7" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.6.2~git0.a20663ea8" rel="bp156.29.1"/>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
</package>
<package pkgid="6c0c3e08902260a2b05e3a0dfdb45a9df187a0ee1e8d92139174117e977cd5b9" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.6.3~git0.389493eb1" rel="bp156.32.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
</package>
<package pkgid="d7d84c1b420bc13073925807531af59cf283d14f72cd4525a982c9dfd4e4dac3" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.6.3~git0.389493eb1" rel="bp156.32.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
</package>
<package pkgid="4873a6951c2bcc221c5d5a960b4263065c44d07b74dc965069999e5fe23a00fa" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.6.4~git2.a4b3b0f7b" rel="bp156.35.1"/>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
</package>
<package pkgid="5a187ef463a584fb87defaaf7786ac1d23bcfecca4b0bbf088ccdbd0da5b3eaa" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.6.4~git2.a4b3b0f7b" rel="bp156.35.1"/>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
</package>
<package pkgid="fdf7bd56eb77b6246556ce5e721c0a563fdc4cc76e88e680d5894f647350b77f" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.7.0~git0.621ac7be0" rel="bp156.38.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
</package>
<package pkgid="b87e5ba2a99d2adfc9df522ae155bf11272fed39a935af829056a92c28e8005a" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.7.0~git0.621ac7be0" rel="bp156.38.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
</package>
<package pkgid="e09d3abd229effecea49303696abdd93c8d76f6dc989b939b654e5619c98ca1b" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.7.1~git0.130a31d29" rel="bp156.41.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
</package>
<package pkgid="830bf9c942a373f293b02b806646fe984bc606ea253ec28c945a619a341abe65" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.7.1~git0.130a31d29" rel="bp156.41.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
</package>
<package pkgid="90b8fecc7ff64a3b5623b2ca7a287bc2edafcf9f6fbaaa60a5087ed71911f23d" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.7.2~git0.d331ea986" rel="bp156.44.1"/>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
</package>
<package pkgid="007fada2fb4f991217cd3ef956949d52b74f62dcaecf8e503b7e7a2168d4f82d" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.7.2~git0.d331ea986" rel="bp156.44.1"/>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
</package>
<package pkgid="450c6b0ee4c22aa2875d3033696467f7b5303f9b26af601fcfd09cf80c64454a" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.7.3~git0.10847190e" rel="bp156.47.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
</package>
<package pkgid="8b9a1b3f6b9b11be1dcc35901d325a657872f0e65a33a80418b8322f31d9f36e" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.7.3~git0.10847190e" rel="bp156.47.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
</package>
<package pkgid="057d7b87e686ae59f77f6414802add86932ab6a9cafdd04eb1372ce7ac20b04e" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.8.0~git0.42d0e864c" rel="bp156.50.1"/>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
</package>
<package pkgid="0c423dc02e115f05b3c9c919e734bab83cb84a4260329dc1e15f6920b0296bcb" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.8.0~git0.42d0e864c" rel="bp156.50.1"/>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
</package>
<package pkgid="2e3752bed2bd81135a6c899546e0e3b803f97d58852a47aafd7ed7c90a2fe0ff" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.8.1~git0.3d1bdfd13" rel="bp156.53.1"/>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
</package>
<package pkgid="bf69b057e73f7d868177f2dcee4f2b82dba45d39979d6ecb24fe6a1f15c6e4df" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.8.1~git0.3d1bdfd13" rel="bp156.53.1"/>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
</package>
<package pkgid="85d45c2e8cb3033e1f33ec6f6b2afc197f89aad3fbb633e648cfcad0af23379b" name="kanidm-docs" arch="aarch64">
  <version epoch="0" ver="1.8.4~git0.2449805e3" rel="bp156.58.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
  <changelog author="william.brown@suse.com" date="1764331200">- Update to version 1.8.2~git0.387e2ce61:
  * Release 1.8.2
  * Prevent deprecation warnings affecting release
  * Ignore CredentialTypeMinimum during migrations (#3991)
  * Report correct client IP in request log (#3990)
  * Ensure that privileged sessions expirations are synced (#3984)
  * Missing constraint on skip upgrade process (#3983)
  * Document the upgrade process through versions. (#3982)
  * lib crypto should not depend on proto (#3975)
  * Change AttributeUniqueness to yield BAD_REQUEST (#3974)
  * fix: kanidm_build_profiles has unwrap which can cause builds to fail (#3973)</changelog>
  <changelog author="william.brown@suse.com" date="1764331201">- Update to version 1.8.3~git0.471c021f2:
  * Release 1.8.3
  * Resolve infinite reauth loop</changelog>
  <changelog author="william.brown@suse.com" date="1765368000">- Update to version 1.8.4~git0.2449805e3:
  * Release 1.8.4
  * Handle concurrent pam sessions. (#4001)
  * fix: correcting parsing of backup compression input (#3995)
  * fixing up docs builds (#4006)</changelog>
</package>
<package pkgid="989f079df18ca75cd2d82e9c01b619a2665383876df2df1b7509e477a3a7c818" name="kanidm-docs" arch="x86_64">
  <version epoch="0" ver="1.8.4~git0.2449805e3" rel="bp156.58.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
  <changelog author="william.brown@suse.com" date="1764331200">- Update to version 1.8.2~git0.387e2ce61:
  * Release 1.8.2
  * Prevent deprecation warnings affecting release
  * Ignore CredentialTypeMinimum during migrations (#3991)
  * Report correct client IP in request log (#3990)
  * Ensure that privileged sessions expirations are synced (#3984)
  * Missing constraint on skip upgrade process (#3983)
  * Document the upgrade process through versions. (#3982)
  * lib crypto should not depend on proto (#3975)
  * Change AttributeUniqueness to yield BAD_REQUEST (#3974)
  * fix: kanidm_build_profiles has unwrap which can cause builds to fail (#3973)</changelog>
  <changelog author="william.brown@suse.com" date="1764331201">- Update to version 1.8.3~git0.471c021f2:
  * Release 1.8.3
  * Resolve infinite reauth loop</changelog>
  <changelog author="william.brown@suse.com" date="1765368000">- Update to version 1.8.4~git0.2449805e3:
  * Release 1.8.4
  * Handle concurrent pam sessions. (#4001)
  * fix: correcting parsing of backup compression input (#3995)
  * fixing up docs builds (#4006)</changelog>
</package>
<package pkgid="8d142ac1bdb58760a59ce84638c0fbff81740c6475ed44aa4d6eb31150735498" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.3.3~git0.f075d13" rel="bp156.4.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1681473600">- bsc#1210356 - CVE-2023-26964 - hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames</changelog>
  <changelog author="william.brown@suse.com" date="1682942400">- Update to version 1.1.0~alpha12~git0.bcdbb18:
  * Release 1.1.0-alpha.12 (#1588)
  * chore(deps): bump tokio-util from 0.7.7 to 0.7.8 (#1587)
  * chore(deps): bump reqwest from 0.11.16 to 0.11.17 (#1586)
  * chore(deps): bump tokio from 1.27.0 to 1.28.0 (#1585)
  * chore(deps): bump uuid from 1.3.1 to 1.3.2 (#1584)
  * chore(deps): bump clap from 3.2.23 to 3.2.25 (#1583)
  * chore(deps-dev): bump coverage from 7.2.3 to 7.2.5 in /pykanidm (#1582)
  * Correctly prevent start up when https sockets in use (#1579)
  * Filter rdns and dns for ldap filters (#1576)
  * use sccache, merge "test" actions into "build", remove homebrew caching (#1578)
  * Cleanup incorrect log errors of denied entries (#1577)
  * 20230424 clippppppppppppyyyyyyyy (#1574)
  * Add exclusive process lock to Kanidm to prevent accidental duplicate commands. (#1575)
  * more more more unixd build fixes (#1573)
  * chore(deps-dev): bump mkdocs-material from 9.1.7 to 9.1.8 in /pykanidm (#1572)
  * chore(deps): bump openssl from 0.10.51 to 0.10.52 (#1571)
  * chore(deps): bump openssl-sys from 0.9.86 to 0.9.87 (#1570)
  * chore(deps-dev): bump ruff from 0.0.262 to 0.0.263 in /pykanidm (#1569)
  * more-merge unixd commands (#1568)
  * Consolidate unix tools (#1566)
  * 1553 pam remote or local detection (#1565)
  * chore(deps): bump openssl from 0.10.50 to 0.10.51 (#1563)
  * Improve user experince of refreshing with intent tokens during cred update (#1556)
  * chore(deps): bump tracing-subscriber from 0.3.16 to 0.3.17 (#1562)
  * chore(deps): bump regex from 1.7.3 to 1.8.1 (#1561)
  * chore(deps): bump libc from 0.2.141 to 0.2.142 (#1560)
  * chore(deps-dev): bump ruff from 0.0.261 to 0.0.262 in /pykanidm (#1559)
  * chore(deps-dev): bump mkdocs-material from 9.1.6 to 9.1.7 in /pykanidm (#1558)
  * chore(deps): bump actions/upload-artifact from 1 to 3 (#1557)
  * Fix incompatible future warnings by removing older crates (#1554)
  * 20230330 oauth2 refresh tokens (#1502)
  * Sorting documentation builds (#1551)
  * Add troubleshooting step for pam home dirs (#1550)
  * AuthSession non empty vec part 2 (#1543)
  * chore(deps): bump openssl from 0.10.49 to 0.10.50 (#1548)
  * chore(deps): bump serde from 1.0.159 to 1.0.160 (#1547)
  * chore(deps): bump syn from 2.0.13 to 2.0.15 (#1546)
  * chore(deps): bump serde_json from 1.0.95 to 1.0.96 (#1545)
  * chore(deps-dev): bump pytest from 7.3.0 to 7.3.1 in /pykanidm (#1544)
  * chore(deps): bump h2 from 0.3.15 to 0.3.17 (#1540)
  * Improve unicode control character detection (#1539)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1533)
  * chore(deps-dev): bump mypy from 1.0.1 to 1.2.0 in /pykanidm (#1532)
  * chore(deps): bump filetime from 0.2.20 to 0.2.21 (#1529)
  * chore(deps-dev): bump mkdocstrings from 0.20.0 to 0.21.2 in /pykanidm (#1536)
  * chore(deps-dev): bump mkdocs-material from 9.1.5 to 9.1.6 in /pykanidm (#1535)
  * chore(deps-dev): bump ruff from 0.0.260 to 0.0.261 in /pykanidm (#1534)
  * chore(deps-dev): bump coverage from 7.2.2 to 7.2.3 in /pykanidm (#1530)
  * chore(deps): bump uuid from 1.3.0 to 1.3.1 (#1531)
  * chore(deps): bump syn from 2.0.12 to 2.0.13 (#1527)
  * chore(deps): bump dialoguer from 0.10.3 to 0.10.4 (#1526)
  * chore(deps-dev): bump pytest from 7.2.2 to 7.3.0 in /pykanidm (#1528)
  * chore(deps): bump libc from 0.2.140 to 0.2.141 (#1525)
  * chore(deps): bump fernet from 0.2.0 to 0.2.1 (#1524)
  * Authsession non empty vec (#1522)
  * chore(deps-dev): bump ruff from 0.0.259 to 0.0.260 in /pykanidm (#1506)
  * chore(deps-dev): bump mkdocs-material from 9.1.4 to 9.1.5 in /pykanidm (#1510)
  * chore(deps): bump serde from 1.0.158 to 1.0.159 (#1515)
  * chore(deps): bump openssl from 0.10.48 to 0.10.49 (#1513)
  * chore(deps): bump tokio from 1.26.0 to 1.27.0 (#1505)
  * chore(deps): bump openssl-sys from 0.9.83 to 0.9.84 (#1507)
  * chore(deps): bump futures from 0.3.27 to 0.3.28 (#1509)
  * chore(deps): bump reqwest from 0.11.15 to 0.11.16 (#1517)
  * chore(deps-dev): bump black from 23.1.0 to 23.3.0 in /pykanidm (#1514)
  * changing from merge to squash (#1521)
  * chore(deps): bump proc-macro2 from 1.0.54 to 1.0.56
  * fixing up auto-merge (#1519)
  * chore(deps): bump syn from 2.0.10 to 2.0.12 (#1511)
  * chore(deps-dev): bump types-toml from 0.10.8.5 to 0.10.8.6 in /pykanidm (#1504)
  * chore(deps): bump serde_json from 1.0.94 to 1.0.95 (#1516)
  * chore(deps): bump ldap3_proto from 0.3.1 to 0.3.2 (#1518)
  * chore(deps): bump syn from 1.0.109 to 2.0.10 (#1499)
  * Be non empty vec (#1501)
  * 1496 ldap basedn config (#1500)
  * chore(deps): bump proc-macro2 from 1.0.52 to 1.0.54 (#1494)
  * chore(deps): bump regex from 1.7.1 to 1.7.3 (#1491)
  * chore(deps): bump pydantic from 1.10.6 to 1.10.7 in /pykanidm (#1492)
  * chore(deps-dev): bump mkdocs-material from 9.1.3 to 9.1.4 in /pykanidm (#1487)
  * chore(deps): bump async-trait from 0.1.67 to 0.1.68 (#1488)
  * Improve string validation (#1497)
  * chore(deps): bump reqwest from 0.11.14 to 0.11.15 (#1493)
  * chore(deps-dev): bump ruff from 0.0.257 to 0.0.259 in /pykanidm (#1489)
  * chore(deps): bump serde from 1.0.157 to 1.0.158 (#1490)
  * Adding an auto-merger for dependabot updates (#1486)
  * Make examples in ldap chapter consistent (#1495)
  * 1115 priv (reauth, sudo) mode (#1479)
  * chore(deps): bump openssl from 0.10.47 to 0.10.48 (#1484)
  * Server daemon logging and exit codes (#1475)
  * Fix path-relative links in documentation (#1478)
  * chore(deps): bump openssl from 0.10.45 to 0.10.47 (#1471)
  * chore(deps): bump serde from 1.0.155 to 1.0.157 (#1473)
  * chore(deps-dev): bump mkdocs-material from 9.1.2 to 9.1.3 in /pykanidm (#1468)
  * chore(deps-dev): bump pylint-pydantic from 0.1.7 to 0.1.8 in /pykanidm (#1469)
  * chore(deps-dev): bump coverage from 7.2.1 to 7.2.2 in /pykanidm (#1463)
  * chore(deps-dev): bump ruff from 0.0.254 to 0.0.257 in /pykanidm (#1466)
  * chore(deps): bump async-trait from 0.1.66 to 0.1.67 (#1461)
  * chore(deps): bump whoami from 1.3.0 to 1.4.0 (#1460)
  * chore(deps): bump zxcvbn from 2.2.1 to 2.2.2 (#1464)
  * chore(deps): bump openssl-sys from 0.9.80 to 0.9.82 (#1470)
  * chore(deps-dev): bump pytest-asyncio from 0.20.3 to 0.21.0 in /pykanidm (#1459)
  * Add unixd exit code (#1453)
  * Unixd daemon improvement (#1454)
  * chore(deps): bump walkdir from 2.3.2 to 2.3.3 (#1458)
  * checks for a minimum number of arguments (#1452)
  * chore(deps): bump chrono from 0.4.23 to 0.4.24 (#1444)
  * chore(deps): bump futures from 0.3.26 to 0.3.27 (#1447)
  * chore(deps): bump paste from 1.0.11 to 1.0.12 (#1449)
  * chore(deps-dev): bump mkdocs-material from 9.1.1 to 9.1.2 in /pykanidm (#1450)
  * chore(deps): bump csv from 1.2.0 to 1.2.1 (#1443)
  * chore(deps): bump libc from 0.2.139 to 0.2.140 (#1442)
  * chore(deps): bump serde from 1.0.152 to 1.0.155 (#1446)
  * chore(deps): bump pydantic from 1.10.5 to 1.10.6 in /pykanidm (#1448)
  * Image fixes in the build (#1441)
  * Fix RADIUS docker image file permissions (#1439)
  * User auth token session display implementation (#1415)
  * RADIUS container fixes (#1424)
  * Update book - OAuth2 integration step (#1437)
  * chore(deps): bump async-trait from 0.1.64 to 0.1.66 (#1433)
  * Hopefully fix exp issues by making it a stable part of the access token. (#1434)
  * chore(deps): bump base64 from 0.13.1 to 0.21.0 (#1350)
  * chore(deps): bump serde_json from 1.0.93 to 1.0.94 (#1427)
  * chore(deps-dev): bump pytest from 7.2.1 to 7.2.2 in /pykanidm (#1431)
  * chore(deps-dev): bump pylint-pydantic from 0.1.6 to 0.1.7 in /pykanidm (#1430)
  * chore(deps-dev): bump ruff from 0.0.253 to 0.0.254 in /pykanidm (#1429)
  * chore(deps-dev): bump mkdocs-material from 9.0.15 to 9.1.1 in /pykanidm (#1428)
  * Openssl build fix (#1422)
  * 1399 some async cleanup (#1421)
  * Web UI: Sort group memberships of profile (#1410)
  * Update the dev docs to flow nicer (#1420)
  * chore(deps): bump dyn-clone from 1.0.10 to 1.0.11 (#1417)
  * chore(deps): bump tokio from 1.25.0 to 1.26.0 (#1418)
  * chore(deps-dev): bump coverage from 7.1.0 to 7.2.1 in /pykanidm (#1405)
  * chore(deps-dev): bump ruff from 0.0.230 to 0.0.253 in /pykanidm (#1419)
  * 1399 cleanup cli docs (#1413)
  * 1399 cleanup reorg (#1412)
  * 1399 cleanup (#1409)
  * Version  output for 4 unix_int tools (#1408)
  * Windows build fixes (#1388)
  * chore(deps): bump num_enum from 0.5.10 to 0.5.11 (#1404)
  * chore(deps-dev): bump types-toml from 0.10.8.4 to 0.10.8.5 in /pykanidm (#1407)
  * chore(deps): bump syn from 1.0.107 to 1.0.109 (#1406)
  * chore(deps-dev): bump mkdocs-material from 9.0.13 to 9.0.15 in /pykanidm (#1403)
  * Mention my Recursing of the Passport (#1402)
  * Start to add reauth capabilities (#1398)
  * Add Recursive Logos (#1401)
  * Prevent invalidation of api tokens (#1397)
  * chore(deps): bump tokio-util from 0.7.4 to 0.7.7 (#1378)
  * chore(deps): bump web-sys from 0.3.60 to 0.3.61 (#1362)
  * chore(deps): bump filetime from 0.2.19 to 0.2.20 (#1375)
  * chore(deps): bump pydantic from 1.10.4 to 1.10.5 in /pykanidm (#1392)
  * chore(deps-dev): bump mkdocs-material from 9.0.12 to 9.0.13 in /pykanidm (#1394)
  * chore(deps): bump num_enum from 0.5.9 to 0.5.10 (#1391)
  * chore(deps-dev): bump types-toml from 0.10.8.3 to 0.10.8.4 in /pykanidm (#1395)
  * chore(deps-dev): bump mypy from 1.0.0 to 1.0.1 in /pykanidm (#1390)
  * chore(deps): bump csv from 1.1.6 to 1.2.0 (#1393)
  * chore(deps): bump base64urlsafedata from 0.1.2 to 0.1.3 (#1389)
  * 20230220 passkey cleanup (#1396)
  * 1115 store credential ids per session (#1386)
  * Reduce the number of cow cells in idm (#1385)
  * 1355 docker builds (#1384)
  * chore(deps): bump proc-macro2 from 1.0.50 to 1.0.51 (#1369)
  * Improve some small behaviours of login and key management (#1383)
  * 967 oauth2 implicit search (#1382)
  * chore(deps): bump wasm-bindgen-test from 0.3.33 to 0.3.34 (#1364)
  * chore(deps): bump serde_json from 1.0.91 to 1.0.93 (#1376)
  * chore(deps-dev): bump black from 22.12.0 to 23.1.0 in /pykanidm (#1367)
  * chore(deps-dev): bump pylint-pydantic from 0.1.5 to 0.1.6 in /pykanidm (#1351)
  * chore(deps-dev): bump coverage from 7.0.5 to 7.1.0 in /pykanidm (#1352)
  * 20230130 hackweek replication (#1358)
  * Improve some diagnostic messages in console (#1381)
  * chore(deps): bump docker/build-push-action from 3 to 4 (#1360)
  * chore(deps): bump aiohttp from 3.8.3 to 3.8.4 in /pykanidm (#1377)
  * chore(deps-dev): bump mypy from 0.991 to 1.0.0 in /pykanidm (#1380)
  * chore(deps): bump uuid from 1.2.2 to 1.3.0 (#1368)
  * chore(deps-dev): bump mkdocs-material from 9.0.6 to 9.0.12 in /pykanidm (#1379)
  * chore(deps-dev): bump types-toml from 0.10.8.1 to 0.10.8.3 in /pykanidm (#1374)
  * chore(deps): bump cryptography from 39.0.0 to 39.0.1 in /pykanidm (#1371)
  * Update release docs to prevent forgetting a release step (#1370)
  * 1355 docker builds (#1357)
  * Update to 12 dev (#1356)</changelog>
  <changelog author="william.brown@suse.com" date="1690891200">- Update to version 1.1.0~beta13~git2.5d1e2f9:
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)
  * Release 1.1.0-beta.13 (#1922)
  * 20230731 release (#1921)
  * Improve default shells for distros (#1920)
  * 20230728 techdebt paydown (#1909)
  * chasing weirdness (#1910)
  * chore(deps-dev): bump mkdocs-material from 9.1.19 to 9.1.21 in /pykanidm (#1918)
  * chore(deps): bump serde_json from 1.0.103 to 1.0.104 (#1917)
  * chore(deps): bump serde from 1.0.174 to 1.0.178 (#1916)
  * chore(deps): bump tikv-jemallocator from 0.5.0 to 0.5.4 (#1915)
  * chore(deps-dev): bump mkdocs from 1.4.3 to 1.5.1 in /pykanidm (#1913)
  * chore(deps-dev): bump pylint-pydantic from 0.2.3 to 0.2.4 in /pykanidm (#1912)
  * chore(deps): bump pydantic from 2.0.3 to 2.1.1 in /pykanidm (#1911)
  * 20230727 unix int modularity (#1907)
  * bumping action version (#1908)
  * 68 20230720 replication improvements (#1905)
  * Resolve compilation issue with tpm enabled on linux (#1902)
  * Improve service file for host installs (#1901)
  * 20230720 unix int modular (#1881)
  * fixing up pydantic things (#1885)
  * 1788 admin unix socket (#1880)
  * chore(deps-dev): bump pylint-pydantic from 0.2.1 to 0.2.3 in /pykanidm (#1900)
  * chore(deps-dev): bump ruff from 0.0.278 to 0.0.280 in /pykanidm (#1899)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1898)
  * chore(deps-dev): bump mkdocs-material from 9.1.18 to 9.1.19 in /pykanidm (#1897)
  * chore(deps): bump async-trait from 0.1.71 to 0.1.72 (#1895)
  * chore(deps-dev): bump types-toml from 0.10.8.6 to 0.10.8.7 in /pykanidm (#1896)
  * chore(deps): bump axum from 0.6.18 to 0.6.19 (#1894)
  * chore(deps): bump clap from 4.3.12 to 4.3.19 (#1893)
  * chore(deps): bump axum-macros from 0.3.7 to 0.3.8 (#1892)
  * chore(deps): bump serde from 1.0.171 to 1.0.174 (#1891)
  * chore(deps): bump uuid from 1.4.0 to 1.4.1 (#1890)
  * chore(deps): bump quote from 1.0.31 to 1.0.32 (#1889)
  * chore(deps): bump tower-http from 0.4.1 to 0.4.3 (#1888)
  * chore(deps): bump syn from 2.0.26 to 2.0.27 (#1887)
  * chore(deps): bump urlencoding from 2.1.2 to 2.1.3 (#1886)
  * added hsts header middleware (#1882)
  * chore(deps): bump aiohttp from 3.8.4 to 3.8.5 in /pykanidm (#1883)
  * 1785 allow sync attr yielding via partial write admin (#1879)
  * Alter filter generation to exclude empty conditions (#1877)
  * Revert to opensuse based radius container. (#1878)
  * Unix gid duplicate fix (#1876)
  * Refactor docker_build_kanidm to be more isolated (v13) (#1872)
  * Sync account import improvements (#1873)
  * chore(deps): bump quote from 1.0.29 to 1.0.31 (#1870)
  * chore(deps-dev): bump black from 23.3.0 to 23.7.0 in /pykanidm (#1859)
  * Add a newline to fix links in LLDAP section of the README (#1871)
  * chore(deps): bump dyn-clone from 1.0.11 to 1.0.12 (#1869)
  * chore(deps): bump pydantic from 1.10.11 to 2.0.3 in /pykanidm (#1858)
  * chore(deps): bump serde_json from 1.0.102 to 1.0.103 (#1868)
  * Fix missing slash in tag (#1853)
  * chore(deps): bump argon2 from 0.5.0 to 0.5.1 (#1867)
  * chore(deps): bump syn from 2.0.25 to 2.0.26 (#1866)
  * chore(deps): bump paste from 1.0.13 to 1.0.14 (#1864)
  * chore(deps-dev): bump pylint-pydantic from 0.2.0 to 0.2.1 in /pykanidm (#1863)
  * chore(deps): bump clap from 4.3.11 to 4.3.12 (#1862)
  * chore(deps-dev): bump pytest-asyncio from 0.21.0 to 0.21.1 in /pykanidm (#1861)
  * chore(deps): bump proc-macro2 from 1.0.64 to 1.0.66 (#1860)
  * chore(deps-dev): bump ruff from 0.0.277 to 0.0.278 in /pykanidm (#1857)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1856)
  * chore(deps): bump actions/upload-pages-artifact from 1 to 2 (#1855)
  * Revert "something something token permissions (#1850)" (#1852)
  * something something token permissions (#1850)
  * Upgraded clap, removing atty as a dependency (#1849)
  * Ensure we dont use std hashmaps (#1848)
  * Improve selinux in tasks daemon (#1847)
  * Resolve issue with order of operations causing group memberships to disappear (#1845)
  * headless webdriver testing, starting on brotli feature (#1844)
  * chore(deps-dev): bump mkdocs-material from 9.1.17 to 9.1.18 in /pykanidm (#1835)
  * chore(deps): bump serde from 1.0.166 to 1.0.170 (#1843)
  * Fix a typo in the unix daemon debug (#1822)
  * chore(deps-dev): bump ruff from 0.0.275 to 0.0.277 in /pykanidm (#1833)
  * chore(deps): bump serde-wasm-bindgen from 0.4.5 to 0.5.0 (#1842)
  * chore(deps): bump proc-macro2 from 1.0.63 to 1.0.64 (#1841)
  * chore(deps): bump syn from 2.0.23 to 2.0.25 (#1840)
  * chore(deps): bump async-trait from 0.1.69 to 0.1.71 (#1839)
  * chore(deps): bump regex from 1.8.4 to 1.9.1 (#1838)
  * chore(deps): bump is-terminal from 0.4.8 to 0.4.9 (#1837)
  * chore(deps): bump serde_json from 1.0.99 to 1.0.100 (#1836)
  * Allow Authorization header in CORS preflight response (#1831)
  * chore(deps): bump pydantic from 1.10.10 to 1.10.11 in /pykanidm (#1834)
  * chore(deps-dev): bump pylint-pydantic from 0.1.8 to 0.2.0 in /pykanidm (#1832)
  * Add preflight headers (#1829)
  * Persist nonce through refresh to support client (#1826)
  * Cleanup spa handling (#1825)
  * 1792 public oauth clients (#1821)
  * 1812 1813 post axum cleanup (#1817)
  * Fix diagram colours (#1815)
  * Converting from tide to axum (#1797)
  * Add client UX for redirecting to an external portal for synced accounts (#1791)
  * Add cors policy (#1807)
  * Improve tasks daemon shutdown (#1806)
  * Improve durability of migrations (#1804)
  * clippy-izing an unsafe in pam (#1795)
  * chore(deps): bump pydantic from 1.10.9 to 1.10.10 in /pykanidm (#1803)
  * chore(deps): bump uuid from 1.3.4 to 1.4.0 (#1802)
  * chore(deps): bump tokio from 1.28.2 to 1.29.1 (#1801)
  * chore(deps): bump syn from 2.0.20 to 2.0.23 (#1800)
  * chore(deps): bump whoami from 1.4.0 to 1.4.1 (#1799)
  * chore(deps): bump quote from 1.0.28 to 1.0.29 (#1798)
  * 20230629 tpm keygen ... again (#1793)
  * Fixing the kanidmd healthcheck (#1789)
  * Name change history (#1727)
  * 20230628 tpm minor issue with key regen (#1790)
  * Still trying to fix the docs. (#1709)
  * Improve cli to support multi-domain handling. (#1786)
  * Started chasing noise, found some code to delete... (#1768)
  * Improve tpm key generation - improve unix config for tpms. (#1782)
  * chore(deps-dev): bump pytest from 7.3.2 to 7.4.0 in /pykanidm (#1771)
  * chore(deps-dev): bump mkdocs-material from 9.1.16 to 9.1.17 in /pykanidm (#1773)
  * chore(deps-dev): bump mypy from 1.3.0 to 1.4.1 in /pykanidm (#1784)
  * chore(deps): bump serde_json from 1.0.97 to 1.0.99 (#1778)
  * chore(deps): bump syn from 2.0.18 to 2.0.20 (#1779)
  * chore(deps): bump authlib from 1.2.0 to 1.2.1 in /pykanidm (#1777)
  * chore(deps): bump proc-macro2 from 1.0.60 to 1.0.63 (#1776)
  * chore(deps): bump libc from 0.2.146 to 0.2.147 (#1774)
  * chore(deps): bump gloo-net from 0.2.6 to 0.3.0 (#1772)
  * chore(deps-dev): bump ruff from 0.0.272 to 0.0.275 in /pykanidm (#1770)
  * Fix debian packaging (#1742)
  * Remove r2d2 - sad beep noises (#1766)
  * Kanidmd is a bit noisy (#1765)
  * Ux improvements - Allow enrolling other devices (#1764)
  * Make argon2id default pw hasher - improve parameter detection (#1762)
  * chore(deps): bump openssl from 0.10.54 to 0.10.55 (#1761)
  * Implement tpm binding of cached password hashes (#1754)
  * Mention client configuration in tool installation guide (#1756)
  * Remove scripts that are no longer required (#1759)
  * OAuth2 secret JSON (#1758)
  * Allow account locking with expire-at 'epoch' and 'now' (#1757)
  * Resolve codespell issues (#1753)
  * Add tls generator to main kanidmd (#1743)
  * Fix block_on in ssh authorised keys (#1752)
  * chore(deps-dev): bump mkdocs-material from 9.1.15 to 9.1.16 in /pykanidm (#1751)
  * chore(deps): bump gloo from 0.8.0 to 0.8.1 (#1750)
  * chore(deps-dev): bump pytest-mock from 3.10.0 to 3.11.1 in /pykanidm (#1749)
  * chore(deps): bump hashbrown from 0.13.2 to 0.14.0 (#1748)
  * 1737 1739 sync - map uidnumbers mail (#1741)
  * Add support for argon2id (#1736)
  * Disable neon on linux (#1740)
  * 20230614 unix account security - move account name deny to unixd (#1733)
  * fixed return value of add_ava_int (#1735)
  * unix_integration: also check running SELinux mode (#1704)
  * added pre_cand entries to both pre_modify and pre_batch_modify plugin functions (#1732)
  * 20230608 ldap sync (#1728)
  * Add acp allowing service accounts to clear their own sessions (#1731)
  * Declare when no applications are available (#1730)
  * Fix ip addr parse (#1729)
  * X-Forwarded-For catcher - improve ip addr parsing (#1725)
  * chore(deps): bump proc-macro2 from 1.0.59 to 1.0.60 (#1723)
  * chore(deps): bump url from 2.3.1 to 2.4.0 (#1722)
  * chore(deps-dev): bump pytest from 7.3.1 to 7.3.2 in /pykanidm (#1719)
  * chore(deps): bump libc from 0.2.145 to 0.2.146 (#1721)
  * chore(deps-dev): bump ruff from 0.0.270 to 0.0.272 in /pykanidm (#1720)
  * docs: fix typo in sync concepts (#1715)
  * chore(deps): bump regex from 1.8.3 to 1.8.4 (#1718)
  * chore(deps): bump pydantic from 1.10.8 to 1.10.9 in /pykanidm (#1717)
  * chore(deps): bump serde from 1.0.163 to 1.0.164 (#1716)
  * Absolutely minimal implementation (#1711)
  * Add further incremental replication tests (#1707)
  * Save two more kay strokes (#1708)
  * Documentation root directory 404 (#1706)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1697)
  * Improve diagnostic and docs of ldap bind requiring posix password (#1702)
  * #1680 redux - trying to fix docs again (#1692)
  * Automatically login &amp; reauth (#1691)
  * chore(deps-dev): bump coverage from 7.2.6 to 7.2.7 in /pykanidm (#1698)
  * chore(deps): bump libc from 0.2.144 to 0.2.145 (#1701)
  * chore(deps): bump openssl from 0.10.52 to 0.10.54 (#1700)
  * chore(deps): bump csv from 1.2.1 to 1.2.2 (#1699)
  * chore(deps): bump syn from 2.0.17 to 2.0.18 (#1696)
  * chore(deps): bump chrono from 0.4.24 to 0.4.26 (#1695)
  * chore(deps-dev): bump mkdocs-material from 9.1.14 to 9.1.15 in /pykanidm (#1694)
  * chore(deps): bump openssl-sys from 0.9.87 to 0.9.88 (#1693)
  * Documentation root directory 404 (#1681)
  * Crono expression parser fix (#1682)
  * Document OpenID connect setup for Miniflux (#1683)
  * chore(deps): bump cryptography from 39.0.1 to 41.0.0 in /pykanidm (#1684)
  * Improve the readme (#1679)
  * Move the socket startup to localise it to the acceptor (#1678)
  * SELinux support for kanidm-unixd-tasks daemon (#1661)
  * Resolve ability to delete ssh keys with spaces in tags (#1674)
  * Adding mdbook-template back for bookgen (#1660)
  * chore(deps-dev): bump coverage from 7.2.5 to 7.2.6 in /pykanidm (#1669)
  * chore(deps-dev): bump mkdocstrings from 0.21.2 to 0.22.0 in /pykanidm (#1671)
  * 20230526 incremental replication improvements (#1659)
  * chore(deps): bump regex from 1.8.1 to 1.8.3 (#1670)
  * chore(deps): bump hashbrown from 0.12.3 to 0.13.2 (#1668)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1667)
  * chore(deps): bump tokio from 1.28.1 to 1.28.2 (#1666)
  * chore(deps-dev): bump ruff from 0.0.269 to 0.0.270 in /pykanidm (#1665)
  * chore(deps): bump quote from 1.0.27 to 1.0.28 (#1664)
  * chore(deps): bump pydantic from 1.10.7 to 1.10.8 in /pykanidm (#1663)
  * fixing get-tags-action in book build (#1657)
  * Add more replication tests, improve some handling of tombstones. (#1656)
  * Bring back CpuOptLevel x86_64_v1 (#1590)
  * Doc fixes (#1658)
  * Identifiable tokens (#1623)
  * Add version tag to makefile images (#1654)
  * during service account recovery, remove incompatible credentials (#1650)
  * signal handling for tasks daemon (#1651)
  * Time travelling (#1648)
  * chore(deps): bump requests from 2.28.2 to 2.31.0 in /pykanidm (#1649)
  * 20230508 replication incremental (#1620)
  * chore(deps-dev): bump mkdocs-material from 9.1.12 to 9.1.14 in /pykanidm (#1642)
  * chore(deps): bump wasm-bindgen from 0.2.85 to 0.2.86 (#1647)
  * chore(deps): bump js-sys from 0.3.62 to 0.3.63 (#1646)
  * chore(deps): bump uuid from 1.3.2 to 1.3.3 (#1645)
  * chore(deps): bump proc-macro2 from 1.0.56 to 1.0.58 (#1644)
  * chore(deps): bump reqwest from 0.11.17 to 0.11.18 (#1643)
  * chore(deps-dev): bump ruff from 0.0.267 to 0.0.269 in /pykanidm (#1641)
  * Fix use-reset-token command hint (#1639)
  * chore(deps): bump pymdown-extensions from 9.9.2 to 10.0 in /pykanidm (#1638)
  * chore(deps-dev): bump mypy from 1.2.0 to 1.3.0 in /pykanidm (#1636)
  * chore(deps): bump wasm-bindgen-test from 0.3.34 to 0.3.35 (#1635)
  * chore(deps-dev): bump ruff from 0.0.265 to 0.0.267 in /pykanidm (#1634)
  * chore(deps): bump syn from 2.0.15 to 2.0.16 (#1633)
  * chore(deps): bump quote from 1.0.26 to 1.0.27 (#1628)
  * chore(deps): bump serde from 1.0.162 to 1.0.163 (#1632)
  * chore(deps-dev): bump mkdocs-material from 9.1.9 to 9.1.12 in /pykanidm (#1631)
  * chore(deps): bump tokio from 1.28.0 to 1.28.1 (#1629)
  * chore(deps): bump web-sys from 0.3.61 to 0.3.62 (#1627)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1626)
  * chore(deps): bump libc from 0.2.143 to 0.2.144 (#1625)
  * chore(deps): bump js-sys from 0.3.61 to 0.3.62 (#1624)
  * Update policy (#1619)
  * fixing up some spelling errors (#1618)
  * Update RELEASE_NOTES.md (#1616)
  * 20230505 replication groundwork - ruv consistency improvements (#1606)
  * chore(deps-dev): bump ruff from 0.0.263 to 0.0.265 in /pykanidm (#1608)
  * chore(deps-dev): bump mkdocs-material from 9.1.8 to 9.1.9 in /pykanidm (#1609)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1611)
  * chore(deps): bump serde from 1.0.160 to 1.0.162 (#1613)
  * chore(deps): bump libc from 0.2.142 to 0.2.143 (#1612)
  * chore(deps): bump pkg-config from 0.3.26 to 0.3.27 (#1610)
  * chore(deps-dev): bump mkdocs from 1.4.2 to 1.4.3 in /pykanidm (#1607)
  * github pages ... something is definitely going weird. (#1605)
  * token permissions! (#1604)
  * Using github actions might actually push a change (#1603)
  * looks like that's a bug (#1602)
  * fix things (#1601)
  * 20230506 ignore some references (#1600)
  * Harden migrate session to prevent duplicate migration errors (#1599)
  * reducing action concurrency load (#1598)
  * more testing cleanup (#1595)
  * Document that you need to tell Nginx or other proxies to use HTTP 1.1… (#1592)
  * sccache github actions fixes (#1593)
  * Start next dev cycle (#1589)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
</package>
<package pkgid="a3a85aeb66de0cbf351ced6d0a449cadfa57d98a4217368023d49f979dff8d3a" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.3.3~git0.f075d13" rel="bp156.4.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1681473600">- bsc#1210356 - CVE-2023-26964 - hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames</changelog>
  <changelog author="william.brown@suse.com" date="1682942400">- Update to version 1.1.0~alpha12~git0.bcdbb18:
  * Release 1.1.0-alpha.12 (#1588)
  * chore(deps): bump tokio-util from 0.7.7 to 0.7.8 (#1587)
  * chore(deps): bump reqwest from 0.11.16 to 0.11.17 (#1586)
  * chore(deps): bump tokio from 1.27.0 to 1.28.0 (#1585)
  * chore(deps): bump uuid from 1.3.1 to 1.3.2 (#1584)
  * chore(deps): bump clap from 3.2.23 to 3.2.25 (#1583)
  * chore(deps-dev): bump coverage from 7.2.3 to 7.2.5 in /pykanidm (#1582)
  * Correctly prevent start up when https sockets in use (#1579)
  * Filter rdns and dns for ldap filters (#1576)
  * use sccache, merge "test" actions into "build", remove homebrew caching (#1578)
  * Cleanup incorrect log errors of denied entries (#1577)
  * 20230424 clippppppppppppyyyyyyyy (#1574)
  * Add exclusive process lock to Kanidm to prevent accidental duplicate commands. (#1575)
  * more more more unixd build fixes (#1573)
  * chore(deps-dev): bump mkdocs-material from 9.1.7 to 9.1.8 in /pykanidm (#1572)
  * chore(deps): bump openssl from 0.10.51 to 0.10.52 (#1571)
  * chore(deps): bump openssl-sys from 0.9.86 to 0.9.87 (#1570)
  * chore(deps-dev): bump ruff from 0.0.262 to 0.0.263 in /pykanidm (#1569)
  * more-merge unixd commands (#1568)
  * Consolidate unix tools (#1566)
  * 1553 pam remote or local detection (#1565)
  * chore(deps): bump openssl from 0.10.50 to 0.10.51 (#1563)
  * Improve user experince of refreshing with intent tokens during cred update (#1556)
  * chore(deps): bump tracing-subscriber from 0.3.16 to 0.3.17 (#1562)
  * chore(deps): bump regex from 1.7.3 to 1.8.1 (#1561)
  * chore(deps): bump libc from 0.2.141 to 0.2.142 (#1560)
  * chore(deps-dev): bump ruff from 0.0.261 to 0.0.262 in /pykanidm (#1559)
  * chore(deps-dev): bump mkdocs-material from 9.1.6 to 9.1.7 in /pykanidm (#1558)
  * chore(deps): bump actions/upload-artifact from 1 to 3 (#1557)
  * Fix incompatible future warnings by removing older crates (#1554)
  * 20230330 oauth2 refresh tokens (#1502)
  * Sorting documentation builds (#1551)
  * Add troubleshooting step for pam home dirs (#1550)
  * AuthSession non empty vec part 2 (#1543)
  * chore(deps): bump openssl from 0.10.49 to 0.10.50 (#1548)
  * chore(deps): bump serde from 1.0.159 to 1.0.160 (#1547)
  * chore(deps): bump syn from 2.0.13 to 2.0.15 (#1546)
  * chore(deps): bump serde_json from 1.0.95 to 1.0.96 (#1545)
  * chore(deps-dev): bump pytest from 7.3.0 to 7.3.1 in /pykanidm (#1544)
  * chore(deps): bump h2 from 0.3.15 to 0.3.17 (#1540)
  * Improve unicode control character detection (#1539)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1533)
  * chore(deps-dev): bump mypy from 1.0.1 to 1.2.0 in /pykanidm (#1532)
  * chore(deps): bump filetime from 0.2.20 to 0.2.21 (#1529)
  * chore(deps-dev): bump mkdocstrings from 0.20.0 to 0.21.2 in /pykanidm (#1536)
  * chore(deps-dev): bump mkdocs-material from 9.1.5 to 9.1.6 in /pykanidm (#1535)
  * chore(deps-dev): bump ruff from 0.0.260 to 0.0.261 in /pykanidm (#1534)
  * chore(deps-dev): bump coverage from 7.2.2 to 7.2.3 in /pykanidm (#1530)
  * chore(deps): bump uuid from 1.3.0 to 1.3.1 (#1531)
  * chore(deps): bump syn from 2.0.12 to 2.0.13 (#1527)
  * chore(deps): bump dialoguer from 0.10.3 to 0.10.4 (#1526)
  * chore(deps-dev): bump pytest from 7.2.2 to 7.3.0 in /pykanidm (#1528)
  * chore(deps): bump libc from 0.2.140 to 0.2.141 (#1525)
  * chore(deps): bump fernet from 0.2.0 to 0.2.1 (#1524)
  * Authsession non empty vec (#1522)
  * chore(deps-dev): bump ruff from 0.0.259 to 0.0.260 in /pykanidm (#1506)
  * chore(deps-dev): bump mkdocs-material from 9.1.4 to 9.1.5 in /pykanidm (#1510)
  * chore(deps): bump serde from 1.0.158 to 1.0.159 (#1515)
  * chore(deps): bump openssl from 0.10.48 to 0.10.49 (#1513)
  * chore(deps): bump tokio from 1.26.0 to 1.27.0 (#1505)
  * chore(deps): bump openssl-sys from 0.9.83 to 0.9.84 (#1507)
  * chore(deps): bump futures from 0.3.27 to 0.3.28 (#1509)
  * chore(deps): bump reqwest from 0.11.15 to 0.11.16 (#1517)
  * chore(deps-dev): bump black from 23.1.0 to 23.3.0 in /pykanidm (#1514)
  * changing from merge to squash (#1521)
  * chore(deps): bump proc-macro2 from 1.0.54 to 1.0.56
  * fixing up auto-merge (#1519)
  * chore(deps): bump syn from 2.0.10 to 2.0.12 (#1511)
  * chore(deps-dev): bump types-toml from 0.10.8.5 to 0.10.8.6 in /pykanidm (#1504)
  * chore(deps): bump serde_json from 1.0.94 to 1.0.95 (#1516)
  * chore(deps): bump ldap3_proto from 0.3.1 to 0.3.2 (#1518)
  * chore(deps): bump syn from 1.0.109 to 2.0.10 (#1499)
  * Be non empty vec (#1501)
  * 1496 ldap basedn config (#1500)
  * chore(deps): bump proc-macro2 from 1.0.52 to 1.0.54 (#1494)
  * chore(deps): bump regex from 1.7.1 to 1.7.3 (#1491)
  * chore(deps): bump pydantic from 1.10.6 to 1.10.7 in /pykanidm (#1492)
  * chore(deps-dev): bump mkdocs-material from 9.1.3 to 9.1.4 in /pykanidm (#1487)
  * chore(deps): bump async-trait from 0.1.67 to 0.1.68 (#1488)
  * Improve string validation (#1497)
  * chore(deps): bump reqwest from 0.11.14 to 0.11.15 (#1493)
  * chore(deps-dev): bump ruff from 0.0.257 to 0.0.259 in /pykanidm (#1489)
  * chore(deps): bump serde from 1.0.157 to 1.0.158 (#1490)
  * Adding an auto-merger for dependabot updates (#1486)
  * Make examples in ldap chapter consistent (#1495)
  * 1115 priv (reauth, sudo) mode (#1479)
  * chore(deps): bump openssl from 0.10.47 to 0.10.48 (#1484)
  * Server daemon logging and exit codes (#1475)
  * Fix path-relative links in documentation (#1478)
  * chore(deps): bump openssl from 0.10.45 to 0.10.47 (#1471)
  * chore(deps): bump serde from 1.0.155 to 1.0.157 (#1473)
  * chore(deps-dev): bump mkdocs-material from 9.1.2 to 9.1.3 in /pykanidm (#1468)
  * chore(deps-dev): bump pylint-pydantic from 0.1.7 to 0.1.8 in /pykanidm (#1469)
  * chore(deps-dev): bump coverage from 7.2.1 to 7.2.2 in /pykanidm (#1463)
  * chore(deps-dev): bump ruff from 0.0.254 to 0.0.257 in /pykanidm (#1466)
  * chore(deps): bump async-trait from 0.1.66 to 0.1.67 (#1461)
  * chore(deps): bump whoami from 1.3.0 to 1.4.0 (#1460)
  * chore(deps): bump zxcvbn from 2.2.1 to 2.2.2 (#1464)
  * chore(deps): bump openssl-sys from 0.9.80 to 0.9.82 (#1470)
  * chore(deps-dev): bump pytest-asyncio from 0.20.3 to 0.21.0 in /pykanidm (#1459)
  * Add unixd exit code (#1453)
  * Unixd daemon improvement (#1454)
  * chore(deps): bump walkdir from 2.3.2 to 2.3.3 (#1458)
  * checks for a minimum number of arguments (#1452)
  * chore(deps): bump chrono from 0.4.23 to 0.4.24 (#1444)
  * chore(deps): bump futures from 0.3.26 to 0.3.27 (#1447)
  * chore(deps): bump paste from 1.0.11 to 1.0.12 (#1449)
  * chore(deps-dev): bump mkdocs-material from 9.1.1 to 9.1.2 in /pykanidm (#1450)
  * chore(deps): bump csv from 1.2.0 to 1.2.1 (#1443)
  * chore(deps): bump libc from 0.2.139 to 0.2.140 (#1442)
  * chore(deps): bump serde from 1.0.152 to 1.0.155 (#1446)
  * chore(deps): bump pydantic from 1.10.5 to 1.10.6 in /pykanidm (#1448)
  * Image fixes in the build (#1441)
  * Fix RADIUS docker image file permissions (#1439)
  * User auth token session display implementation (#1415)
  * RADIUS container fixes (#1424)
  * Update book - OAuth2 integration step (#1437)
  * chore(deps): bump async-trait from 0.1.64 to 0.1.66 (#1433)
  * Hopefully fix exp issues by making it a stable part of the access token. (#1434)
  * chore(deps): bump base64 from 0.13.1 to 0.21.0 (#1350)
  * chore(deps): bump serde_json from 1.0.93 to 1.0.94 (#1427)
  * chore(deps-dev): bump pytest from 7.2.1 to 7.2.2 in /pykanidm (#1431)
  * chore(deps-dev): bump pylint-pydantic from 0.1.6 to 0.1.7 in /pykanidm (#1430)
  * chore(deps-dev): bump ruff from 0.0.253 to 0.0.254 in /pykanidm (#1429)
  * chore(deps-dev): bump mkdocs-material from 9.0.15 to 9.1.1 in /pykanidm (#1428)
  * Openssl build fix (#1422)
  * 1399 some async cleanup (#1421)
  * Web UI: Sort group memberships of profile (#1410)
  * Update the dev docs to flow nicer (#1420)
  * chore(deps): bump dyn-clone from 1.0.10 to 1.0.11 (#1417)
  * chore(deps): bump tokio from 1.25.0 to 1.26.0 (#1418)
  * chore(deps-dev): bump coverage from 7.1.0 to 7.2.1 in /pykanidm (#1405)
  * chore(deps-dev): bump ruff from 0.0.230 to 0.0.253 in /pykanidm (#1419)
  * 1399 cleanup cli docs (#1413)
  * 1399 cleanup reorg (#1412)
  * 1399 cleanup (#1409)
  * Version  output for 4 unix_int tools (#1408)
  * Windows build fixes (#1388)
  * chore(deps): bump num_enum from 0.5.10 to 0.5.11 (#1404)
  * chore(deps-dev): bump types-toml from 0.10.8.4 to 0.10.8.5 in /pykanidm (#1407)
  * chore(deps): bump syn from 1.0.107 to 1.0.109 (#1406)
  * chore(deps-dev): bump mkdocs-material from 9.0.13 to 9.0.15 in /pykanidm (#1403)
  * Mention my Recursing of the Passport (#1402)
  * Start to add reauth capabilities (#1398)
  * Add Recursive Logos (#1401)
  * Prevent invalidation of api tokens (#1397)
  * chore(deps): bump tokio-util from 0.7.4 to 0.7.7 (#1378)
  * chore(deps): bump web-sys from 0.3.60 to 0.3.61 (#1362)
  * chore(deps): bump filetime from 0.2.19 to 0.2.20 (#1375)
  * chore(deps): bump pydantic from 1.10.4 to 1.10.5 in /pykanidm (#1392)
  * chore(deps-dev): bump mkdocs-material from 9.0.12 to 9.0.13 in /pykanidm (#1394)
  * chore(deps): bump num_enum from 0.5.9 to 0.5.10 (#1391)
  * chore(deps-dev): bump types-toml from 0.10.8.3 to 0.10.8.4 in /pykanidm (#1395)
  * chore(deps-dev): bump mypy from 1.0.0 to 1.0.1 in /pykanidm (#1390)
  * chore(deps): bump csv from 1.1.6 to 1.2.0 (#1393)
  * chore(deps): bump base64urlsafedata from 0.1.2 to 0.1.3 (#1389)
  * 20230220 passkey cleanup (#1396)
  * 1115 store credential ids per session (#1386)
  * Reduce the number of cow cells in idm (#1385)
  * 1355 docker builds (#1384)
  * chore(deps): bump proc-macro2 from 1.0.50 to 1.0.51 (#1369)
  * Improve some small behaviours of login and key management (#1383)
  * 967 oauth2 implicit search (#1382)
  * chore(deps): bump wasm-bindgen-test from 0.3.33 to 0.3.34 (#1364)
  * chore(deps): bump serde_json from 1.0.91 to 1.0.93 (#1376)
  * chore(deps-dev): bump black from 22.12.0 to 23.1.0 in /pykanidm (#1367)
  * chore(deps-dev): bump pylint-pydantic from 0.1.5 to 0.1.6 in /pykanidm (#1351)
  * chore(deps-dev): bump coverage from 7.0.5 to 7.1.0 in /pykanidm (#1352)
  * 20230130 hackweek replication (#1358)
  * Improve some diagnostic messages in console (#1381)
  * chore(deps): bump docker/build-push-action from 3 to 4 (#1360)
  * chore(deps): bump aiohttp from 3.8.3 to 3.8.4 in /pykanidm (#1377)
  * chore(deps-dev): bump mypy from 0.991 to 1.0.0 in /pykanidm (#1380)
  * chore(deps): bump uuid from 1.2.2 to 1.3.0 (#1368)
  * chore(deps-dev): bump mkdocs-material from 9.0.6 to 9.0.12 in /pykanidm (#1379)
  * chore(deps-dev): bump types-toml from 0.10.8.1 to 0.10.8.3 in /pykanidm (#1374)
  * chore(deps): bump cryptography from 39.0.0 to 39.0.1 in /pykanidm (#1371)
  * Update release docs to prevent forgetting a release step (#1370)
  * 1355 docker builds (#1357)
  * Update to 12 dev (#1356)</changelog>
  <changelog author="william.brown@suse.com" date="1690891200">- Update to version 1.1.0~beta13~git2.5d1e2f9:
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)
  * Release 1.1.0-beta.13 (#1922)
  * 20230731 release (#1921)
  * Improve default shells for distros (#1920)
  * 20230728 techdebt paydown (#1909)
  * chasing weirdness (#1910)
  * chore(deps-dev): bump mkdocs-material from 9.1.19 to 9.1.21 in /pykanidm (#1918)
  * chore(deps): bump serde_json from 1.0.103 to 1.0.104 (#1917)
  * chore(deps): bump serde from 1.0.174 to 1.0.178 (#1916)
  * chore(deps): bump tikv-jemallocator from 0.5.0 to 0.5.4 (#1915)
  * chore(deps-dev): bump mkdocs from 1.4.3 to 1.5.1 in /pykanidm (#1913)
  * chore(deps-dev): bump pylint-pydantic from 0.2.3 to 0.2.4 in /pykanidm (#1912)
  * chore(deps): bump pydantic from 2.0.3 to 2.1.1 in /pykanidm (#1911)
  * 20230727 unix int modularity (#1907)
  * bumping action version (#1908)
  * 68 20230720 replication improvements (#1905)
  * Resolve compilation issue with tpm enabled on linux (#1902)
  * Improve service file for host installs (#1901)
  * 20230720 unix int modular (#1881)
  * fixing up pydantic things (#1885)
  * 1788 admin unix socket (#1880)
  * chore(deps-dev): bump pylint-pydantic from 0.2.1 to 0.2.3 in /pykanidm (#1900)
  * chore(deps-dev): bump ruff from 0.0.278 to 0.0.280 in /pykanidm (#1899)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1898)
  * chore(deps-dev): bump mkdocs-material from 9.1.18 to 9.1.19 in /pykanidm (#1897)
  * chore(deps): bump async-trait from 0.1.71 to 0.1.72 (#1895)
  * chore(deps-dev): bump types-toml from 0.10.8.6 to 0.10.8.7 in /pykanidm (#1896)
  * chore(deps): bump axum from 0.6.18 to 0.6.19 (#1894)
  * chore(deps): bump clap from 4.3.12 to 4.3.19 (#1893)
  * chore(deps): bump axum-macros from 0.3.7 to 0.3.8 (#1892)
  * chore(deps): bump serde from 1.0.171 to 1.0.174 (#1891)
  * chore(deps): bump uuid from 1.4.0 to 1.4.1 (#1890)
  * chore(deps): bump quote from 1.0.31 to 1.0.32 (#1889)
  * chore(deps): bump tower-http from 0.4.1 to 0.4.3 (#1888)
  * chore(deps): bump syn from 2.0.26 to 2.0.27 (#1887)
  * chore(deps): bump urlencoding from 2.1.2 to 2.1.3 (#1886)
  * added hsts header middleware (#1882)
  * chore(deps): bump aiohttp from 3.8.4 to 3.8.5 in /pykanidm (#1883)
  * 1785 allow sync attr yielding via partial write admin (#1879)
  * Alter filter generation to exclude empty conditions (#1877)
  * Revert to opensuse based radius container. (#1878)
  * Unix gid duplicate fix (#1876)
  * Refactor docker_build_kanidm to be more isolated (v13) (#1872)
  * Sync account import improvements (#1873)
  * chore(deps): bump quote from 1.0.29 to 1.0.31 (#1870)
  * chore(deps-dev): bump black from 23.3.0 to 23.7.0 in /pykanidm (#1859)
  * Add a newline to fix links in LLDAP section of the README (#1871)
  * chore(deps): bump dyn-clone from 1.0.11 to 1.0.12 (#1869)
  * chore(deps): bump pydantic from 1.10.11 to 2.0.3 in /pykanidm (#1858)
  * chore(deps): bump serde_json from 1.0.102 to 1.0.103 (#1868)
  * Fix missing slash in tag (#1853)
  * chore(deps): bump argon2 from 0.5.0 to 0.5.1 (#1867)
  * chore(deps): bump syn from 2.0.25 to 2.0.26 (#1866)
  * chore(deps): bump paste from 1.0.13 to 1.0.14 (#1864)
  * chore(deps-dev): bump pylint-pydantic from 0.2.0 to 0.2.1 in /pykanidm (#1863)
  * chore(deps): bump clap from 4.3.11 to 4.3.12 (#1862)
  * chore(deps-dev): bump pytest-asyncio from 0.21.0 to 0.21.1 in /pykanidm (#1861)
  * chore(deps): bump proc-macro2 from 1.0.64 to 1.0.66 (#1860)
  * chore(deps-dev): bump ruff from 0.0.277 to 0.0.278 in /pykanidm (#1857)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1856)
  * chore(deps): bump actions/upload-pages-artifact from 1 to 2 (#1855)
  * Revert "something something token permissions (#1850)" (#1852)
  * something something token permissions (#1850)
  * Upgraded clap, removing atty as a dependency (#1849)
  * Ensure we dont use std hashmaps (#1848)
  * Improve selinux in tasks daemon (#1847)
  * Resolve issue with order of operations causing group memberships to disappear (#1845)
  * headless webdriver testing, starting on brotli feature (#1844)
  * chore(deps-dev): bump mkdocs-material from 9.1.17 to 9.1.18 in /pykanidm (#1835)
  * chore(deps): bump serde from 1.0.166 to 1.0.170 (#1843)
  * Fix a typo in the unix daemon debug (#1822)
  * chore(deps-dev): bump ruff from 0.0.275 to 0.0.277 in /pykanidm (#1833)
  * chore(deps): bump serde-wasm-bindgen from 0.4.5 to 0.5.0 (#1842)
  * chore(deps): bump proc-macro2 from 1.0.63 to 1.0.64 (#1841)
  * chore(deps): bump syn from 2.0.23 to 2.0.25 (#1840)
  * chore(deps): bump async-trait from 0.1.69 to 0.1.71 (#1839)
  * chore(deps): bump regex from 1.8.4 to 1.9.1 (#1838)
  * chore(deps): bump is-terminal from 0.4.8 to 0.4.9 (#1837)
  * chore(deps): bump serde_json from 1.0.99 to 1.0.100 (#1836)
  * Allow Authorization header in CORS preflight response (#1831)
  * chore(deps): bump pydantic from 1.10.10 to 1.10.11 in /pykanidm (#1834)
  * chore(deps-dev): bump pylint-pydantic from 0.1.8 to 0.2.0 in /pykanidm (#1832)
  * Add preflight headers (#1829)
  * Persist nonce through refresh to support client (#1826)
  * Cleanup spa handling (#1825)
  * 1792 public oauth clients (#1821)
  * 1812 1813 post axum cleanup (#1817)
  * Fix diagram colours (#1815)
  * Converting from tide to axum (#1797)
  * Add client UX for redirecting to an external portal for synced accounts (#1791)
  * Add cors policy (#1807)
  * Improve tasks daemon shutdown (#1806)
  * Improve durability of migrations (#1804)
  * clippy-izing an unsafe in pam (#1795)
  * chore(deps): bump pydantic from 1.10.9 to 1.10.10 in /pykanidm (#1803)
  * chore(deps): bump uuid from 1.3.4 to 1.4.0 (#1802)
  * chore(deps): bump tokio from 1.28.2 to 1.29.1 (#1801)
  * chore(deps): bump syn from 2.0.20 to 2.0.23 (#1800)
  * chore(deps): bump whoami from 1.4.0 to 1.4.1 (#1799)
  * chore(deps): bump quote from 1.0.28 to 1.0.29 (#1798)
  * 20230629 tpm keygen ... again (#1793)
  * Fixing the kanidmd healthcheck (#1789)
  * Name change history (#1727)
  * 20230628 tpm minor issue with key regen (#1790)
  * Still trying to fix the docs. (#1709)
  * Improve cli to support multi-domain handling. (#1786)
  * Started chasing noise, found some code to delete... (#1768)
  * Improve tpm key generation - improve unix config for tpms. (#1782)
  * chore(deps-dev): bump pytest from 7.3.2 to 7.4.0 in /pykanidm (#1771)
  * chore(deps-dev): bump mkdocs-material from 9.1.16 to 9.1.17 in /pykanidm (#1773)
  * chore(deps-dev): bump mypy from 1.3.0 to 1.4.1 in /pykanidm (#1784)
  * chore(deps): bump serde_json from 1.0.97 to 1.0.99 (#1778)
  * chore(deps): bump syn from 2.0.18 to 2.0.20 (#1779)
  * chore(deps): bump authlib from 1.2.0 to 1.2.1 in /pykanidm (#1777)
  * chore(deps): bump proc-macro2 from 1.0.60 to 1.0.63 (#1776)
  * chore(deps): bump libc from 0.2.146 to 0.2.147 (#1774)
  * chore(deps): bump gloo-net from 0.2.6 to 0.3.0 (#1772)
  * chore(deps-dev): bump ruff from 0.0.272 to 0.0.275 in /pykanidm (#1770)
  * Fix debian packaging (#1742)
  * Remove r2d2 - sad beep noises (#1766)
  * Kanidmd is a bit noisy (#1765)
  * Ux improvements - Allow enrolling other devices (#1764)
  * Make argon2id default pw hasher - improve parameter detection (#1762)
  * chore(deps): bump openssl from 0.10.54 to 0.10.55 (#1761)
  * Implement tpm binding of cached password hashes (#1754)
  * Mention client configuration in tool installation guide (#1756)
  * Remove scripts that are no longer required (#1759)
  * OAuth2 secret JSON (#1758)
  * Allow account locking with expire-at 'epoch' and 'now' (#1757)
  * Resolve codespell issues (#1753)
  * Add tls generator to main kanidmd (#1743)
  * Fix block_on in ssh authorised keys (#1752)
  * chore(deps-dev): bump mkdocs-material from 9.1.15 to 9.1.16 in /pykanidm (#1751)
  * chore(deps): bump gloo from 0.8.0 to 0.8.1 (#1750)
  * chore(deps-dev): bump pytest-mock from 3.10.0 to 3.11.1 in /pykanidm (#1749)
  * chore(deps): bump hashbrown from 0.13.2 to 0.14.0 (#1748)
  * 1737 1739 sync - map uidnumbers mail (#1741)
  * Add support for argon2id (#1736)
  * Disable neon on linux (#1740)
  * 20230614 unix account security - move account name deny to unixd (#1733)
  * fixed return value of add_ava_int (#1735)
  * unix_integration: also check running SELinux mode (#1704)
  * added pre_cand entries to both pre_modify and pre_batch_modify plugin functions (#1732)
  * 20230608 ldap sync (#1728)
  * Add acp allowing service accounts to clear their own sessions (#1731)
  * Declare when no applications are available (#1730)
  * Fix ip addr parse (#1729)
  * X-Forwarded-For catcher - improve ip addr parsing (#1725)
  * chore(deps): bump proc-macro2 from 1.0.59 to 1.0.60 (#1723)
  * chore(deps): bump url from 2.3.1 to 2.4.0 (#1722)
  * chore(deps-dev): bump pytest from 7.3.1 to 7.3.2 in /pykanidm (#1719)
  * chore(deps): bump libc from 0.2.145 to 0.2.146 (#1721)
  * chore(deps-dev): bump ruff from 0.0.270 to 0.0.272 in /pykanidm (#1720)
  * docs: fix typo in sync concepts (#1715)
  * chore(deps): bump regex from 1.8.3 to 1.8.4 (#1718)
  * chore(deps): bump pydantic from 1.10.8 to 1.10.9 in /pykanidm (#1717)
  * chore(deps): bump serde from 1.0.163 to 1.0.164 (#1716)
  * Absolutely minimal implementation (#1711)
  * Add further incremental replication tests (#1707)
  * Save two more kay strokes (#1708)
  * Documentation root directory 404 (#1706)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1697)
  * Improve diagnostic and docs of ldap bind requiring posix password (#1702)
  * #1680 redux - trying to fix docs again (#1692)
  * Automatically login &amp; reauth (#1691)
  * chore(deps-dev): bump coverage from 7.2.6 to 7.2.7 in /pykanidm (#1698)
  * chore(deps): bump libc from 0.2.144 to 0.2.145 (#1701)
  * chore(deps): bump openssl from 0.10.52 to 0.10.54 (#1700)
  * chore(deps): bump csv from 1.2.1 to 1.2.2 (#1699)
  * chore(deps): bump syn from 2.0.17 to 2.0.18 (#1696)
  * chore(deps): bump chrono from 0.4.24 to 0.4.26 (#1695)
  * chore(deps-dev): bump mkdocs-material from 9.1.14 to 9.1.15 in /pykanidm (#1694)
  * chore(deps): bump openssl-sys from 0.9.87 to 0.9.88 (#1693)
  * Documentation root directory 404 (#1681)
  * Crono expression parser fix (#1682)
  * Document OpenID connect setup for Miniflux (#1683)
  * chore(deps): bump cryptography from 39.0.1 to 41.0.0 in /pykanidm (#1684)
  * Improve the readme (#1679)
  * Move the socket startup to localise it to the acceptor (#1678)
  * SELinux support for kanidm-unixd-tasks daemon (#1661)
  * Resolve ability to delete ssh keys with spaces in tags (#1674)
  * Adding mdbook-template back for bookgen (#1660)
  * chore(deps-dev): bump coverage from 7.2.5 to 7.2.6 in /pykanidm (#1669)
  * chore(deps-dev): bump mkdocstrings from 0.21.2 to 0.22.0 in /pykanidm (#1671)
  * 20230526 incremental replication improvements (#1659)
  * chore(deps): bump regex from 1.8.1 to 1.8.3 (#1670)
  * chore(deps): bump hashbrown from 0.12.3 to 0.13.2 (#1668)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1667)
  * chore(deps): bump tokio from 1.28.1 to 1.28.2 (#1666)
  * chore(deps-dev): bump ruff from 0.0.269 to 0.0.270 in /pykanidm (#1665)
  * chore(deps): bump quote from 1.0.27 to 1.0.28 (#1664)
  * chore(deps): bump pydantic from 1.10.7 to 1.10.8 in /pykanidm (#1663)
  * fixing get-tags-action in book build (#1657)
  * Add more replication tests, improve some handling of tombstones. (#1656)
  * Bring back CpuOptLevel x86_64_v1 (#1590)
  * Doc fixes (#1658)
  * Identifiable tokens (#1623)
  * Add version tag to makefile images (#1654)
  * during service account recovery, remove incompatible credentials (#1650)
  * signal handling for tasks daemon (#1651)
  * Time travelling (#1648)
  * chore(deps): bump requests from 2.28.2 to 2.31.0 in /pykanidm (#1649)
  * 20230508 replication incremental (#1620)
  * chore(deps-dev): bump mkdocs-material from 9.1.12 to 9.1.14 in /pykanidm (#1642)
  * chore(deps): bump wasm-bindgen from 0.2.85 to 0.2.86 (#1647)
  * chore(deps): bump js-sys from 0.3.62 to 0.3.63 (#1646)
  * chore(deps): bump uuid from 1.3.2 to 1.3.3 (#1645)
  * chore(deps): bump proc-macro2 from 1.0.56 to 1.0.58 (#1644)
  * chore(deps): bump reqwest from 0.11.17 to 0.11.18 (#1643)
  * chore(deps-dev): bump ruff from 0.0.267 to 0.0.269 in /pykanidm (#1641)
  * Fix use-reset-token command hint (#1639)
  * chore(deps): bump pymdown-extensions from 9.9.2 to 10.0 in /pykanidm (#1638)
  * chore(deps-dev): bump mypy from 1.2.0 to 1.3.0 in /pykanidm (#1636)
  * chore(deps): bump wasm-bindgen-test from 0.3.34 to 0.3.35 (#1635)
  * chore(deps-dev): bump ruff from 0.0.265 to 0.0.267 in /pykanidm (#1634)
  * chore(deps): bump syn from 2.0.15 to 2.0.16 (#1633)
  * chore(deps): bump quote from 1.0.26 to 1.0.27 (#1628)
  * chore(deps): bump serde from 1.0.162 to 1.0.163 (#1632)
  * chore(deps-dev): bump mkdocs-material from 9.1.9 to 9.1.12 in /pykanidm (#1631)
  * chore(deps): bump tokio from 1.28.0 to 1.28.1 (#1629)
  * chore(deps): bump web-sys from 0.3.61 to 0.3.62 (#1627)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1626)
  * chore(deps): bump libc from 0.2.143 to 0.2.144 (#1625)
  * chore(deps): bump js-sys from 0.3.61 to 0.3.62 (#1624)
  * Update policy (#1619)
  * fixing up some spelling errors (#1618)
  * Update RELEASE_NOTES.md (#1616)
  * 20230505 replication groundwork - ruv consistency improvements (#1606)
  * chore(deps-dev): bump ruff from 0.0.263 to 0.0.265 in /pykanidm (#1608)
  * chore(deps-dev): bump mkdocs-material from 9.1.8 to 9.1.9 in /pykanidm (#1609)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1611)
  * chore(deps): bump serde from 1.0.160 to 1.0.162 (#1613)
  * chore(deps): bump libc from 0.2.142 to 0.2.143 (#1612)
  * chore(deps): bump pkg-config from 0.3.26 to 0.3.27 (#1610)
  * chore(deps-dev): bump mkdocs from 1.4.2 to 1.4.3 in /pykanidm (#1607)
  * github pages ... something is definitely going weird. (#1605)
  * token permissions! (#1604)
  * Using github actions might actually push a change (#1603)
  * looks like that's a bug (#1602)
  * fix things (#1601)
  * 20230506 ignore some references (#1600)
  * Harden migrate session to prevent duplicate migration errors (#1599)
  * reducing action concurrency load (#1598)
  * more testing cleanup (#1595)
  * Document that you need to tell Nginx or other proxies to use HTTP 1.1… (#1592)
  * sccache github actions fixes (#1593)
  * Start next dev cycle (#1589)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
</package>
<package pkgid="b4eae11cdacfe2c0dd18ac708b7846b4a15fedac641cb6a13eaa9bda8dfeecf8" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.4.0~git2.770efa8" rel="bp156.7.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
</package>
<package pkgid="9c9d66e8d9706bfcbb9eff34645ac314012459a83abfcd3a2fc8372f40586794" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.4.0~git2.770efa8" rel="bp156.7.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
</package>
<package pkgid="71a33338e1f0d48ca7b82880fd9257ae169f402f3df9e9783fb5d423284b42f9" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.4.3~git1.078625c" rel="bp156.10.1"/>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
</package>
<package pkgid="401496deda4f64c4bd0932cf7502b02a31d87985c5f04477df407779b7ab137c" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.4.3~git1.078625c" rel="bp156.10.1"/>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
</package>
<package pkgid="146a7cbc4a8378a12d5ec416b53594f6b67ef2d0c795153fffbeb910630c30b6" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.4.4~git0.c3dbf83" rel="bp156.13.1"/>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
</package>
<package pkgid="80b944de8fdab940abc9a25467c5b5fe4f992236e9d95382173192f09b170762" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.4.4~git0.c3dbf83" rel="bp156.13.1"/>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
</package>
<package pkgid="ef1caeb20e3a0766dc4fcddc3a831b5c7ad1e7ed5df178fb9babbcbc02bc8aa8" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.4.5~git0.a7fabde" rel="bp156.18.1"/>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
</package>
<package pkgid="bd8457c76e9b2cc30aa97679c59841aa870ff9777648f4e4382c18e448cac030" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.4.5~git0.a7fabde" rel="bp156.18.1"/>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
</package>
<package pkgid="b30ef076d16e0150cb2cae512aa2d491cbbc0a48ec98ebf6adc8db27217468e8" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.4.6~git0.3ce4e0f" rel="bp156.21.1"/>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
</package>
<package pkgid="6da4a9a0804253b848687a520220bbfa89919005f314dae23e436bd5bddb3bb8" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.4.6~git0.3ce4e0f" rel="bp156.21.1"/>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
</package>
<package pkgid="13abb0993e2b5ae5000ecba817936af0bd9e16907f02d5dbd8d50b5d8e71fd6d" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.5.0~git1.0fa57fc" rel="bp156.24.1"/>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
</package>
<package pkgid="86b120f865ba988d84cdc2a1401fe9d4c04d7bba283895fb40c7d2d0de3994ab" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.5.0~git1.0fa57fc" rel="bp156.24.1"/>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
</package>
<package pkgid="ad6543026e4b218e397f5e8b33c5241217a0d02cf91b98df878550e81ee370d1" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.6.2~git0.a20663ea8" rel="bp156.29.1"/>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
</package>
<package pkgid="55a238cfb2aba88273b6fc8a0b2e59a000927cc1c2804757719fc1e354475d89" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.6.2~git0.a20663ea8" rel="bp156.29.1"/>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
</package>
<package pkgid="914c6adbeefc15a004de80e72ccdea60fb9717e4658863d74c9232b6de78996f" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.6.3~git0.389493eb1" rel="bp156.32.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
</package>
<package pkgid="46f7dd6fe81726d77d2d6f4bccacc120d2907f0d5f5c514b6da27ed4ad7b1366" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.6.3~git0.389493eb1" rel="bp156.32.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
</package>
<package pkgid="e6536e5ac0e15f8143c57de259542770cae9ea9bae10d67c0403eac77e73b92f" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.6.4~git2.a4b3b0f7b" rel="bp156.35.1"/>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
</package>
<package pkgid="18736642cf93dc38488f12d960ccd45744d75380217e358a49a9e5409c7976bb" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.6.4~git2.a4b3b0f7b" rel="bp156.35.1"/>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
</package>
<package pkgid="bc8a6249d37e21fcbf5dc1e63db86b9173081cf793f127658656edd05e9b405a" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.7.0~git0.621ac7be0" rel="bp156.38.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
</package>
<package pkgid="44a9d028aba4a7f23430f919d56275392528f4d4f47da72a8a02f74bda9442cc" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.7.0~git0.621ac7be0" rel="bp156.38.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
</package>
<package pkgid="1c9a4fdd6e9b03c55356e4fc6d5e1b8ff64788513e21520e603fd4a658122490" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.7.1~git0.130a31d29" rel="bp156.41.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
</package>
<package pkgid="356f3f4b87b756a7e3cd73d80b307a6c54c4ed702e8703c4d95a7607969830fe" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.7.1~git0.130a31d29" rel="bp156.41.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
</package>
<package pkgid="a4151f9c0c90dbea94c9bb5bf364e38c1f1e8ebce78054b4de9ef8d0bd9d1a71" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.7.2~git0.d331ea986" rel="bp156.44.1"/>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
</package>
<package pkgid="abe4a5e567910296aadbe20a8758f7b67c9db6f31c2a677a0782f3d9100f40a2" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.7.2~git0.d331ea986" rel="bp156.44.1"/>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
</package>
<package pkgid="d59b1b67db89c42b71920972fca73b110b2ca49cb1e33a755656ab42aaa6cfef" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.7.3~git0.10847190e" rel="bp156.47.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
</package>
<package pkgid="6ffed15d53a93ef71efcf8c9ae103df4464b1f676cf927bd601ff5f776a548e4" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.7.3~git0.10847190e" rel="bp156.47.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
</package>
<package pkgid="972a3df33d21ecdba8b9678b20e11761435e52893ee095f6e71a60e8583a677f" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.8.0~git0.42d0e864c" rel="bp156.50.1"/>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
</package>
<package pkgid="984abf1037803afc868f44014598c58d1e154be173f8c67b1f914c5df60c4bbc" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.8.0~git0.42d0e864c" rel="bp156.50.1"/>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
</package>
<package pkgid="6fc894cc17b77d49d8e7881fdbdc8c1751cf53eb557ce435e8f6ffc20334ecc7" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.8.1~git0.3d1bdfd13" rel="bp156.53.1"/>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
</package>
<package pkgid="176fad111ffce3ca8c13dc8179b058b88f5b5a59c8152c7e6f408fbac08b797e" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.8.1~git0.3d1bdfd13" rel="bp156.53.1"/>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
</package>
<package pkgid="ed6f90a2f91d5a6725fbbe07d096f1cbf581d08df64dcaa113a30123ef8b45bc" name="kanidm-server" arch="aarch64">
  <version epoch="0" ver="1.8.4~git0.2449805e3" rel="bp156.58.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
  <changelog author="william.brown@suse.com" date="1764331200">- Update to version 1.8.2~git0.387e2ce61:
  * Release 1.8.2
  * Prevent deprecation warnings affecting release
  * Ignore CredentialTypeMinimum during migrations (#3991)
  * Report correct client IP in request log (#3990)
  * Ensure that privileged sessions expirations are synced (#3984)
  * Missing constraint on skip upgrade process (#3983)
  * Document the upgrade process through versions. (#3982)
  * lib crypto should not depend on proto (#3975)
  * Change AttributeUniqueness to yield BAD_REQUEST (#3974)
  * fix: kanidm_build_profiles has unwrap which can cause builds to fail (#3973)</changelog>
  <changelog author="william.brown@suse.com" date="1764331201">- Update to version 1.8.3~git0.471c021f2:
  * Release 1.8.3
  * Resolve infinite reauth loop</changelog>
  <changelog author="william.brown@suse.com" date="1765368000">- Update to version 1.8.4~git0.2449805e3:
  * Release 1.8.4
  * Handle concurrent pam sessions. (#4001)
  * fix: correcting parsing of backup compression input (#3995)
  * fixing up docs builds (#4006)</changelog>
</package>
<package pkgid="0366aa6c66b07a988f077d35ec6521f9ee854b492b9f8926c4d706c5933f181f" name="kanidm-server" arch="x86_64">
  <version epoch="0" ver="1.8.4~git0.2449805e3" rel="bp156.58.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
  <changelog author="william.brown@suse.com" date="1764331200">- Update to version 1.8.2~git0.387e2ce61:
  * Release 1.8.2
  * Prevent deprecation warnings affecting release
  * Ignore CredentialTypeMinimum during migrations (#3991)
  * Report correct client IP in request log (#3990)
  * Ensure that privileged sessions expirations are synced (#3984)
  * Missing constraint on skip upgrade process (#3983)
  * Document the upgrade process through versions. (#3982)
  * lib crypto should not depend on proto (#3975)
  * Change AttributeUniqueness to yield BAD_REQUEST (#3974)
  * fix: kanidm_build_profiles has unwrap which can cause builds to fail (#3973)</changelog>
  <changelog author="william.brown@suse.com" date="1764331201">- Update to version 1.8.3~git0.471c021f2:
  * Release 1.8.3
  * Resolve infinite reauth loop</changelog>
  <changelog author="william.brown@suse.com" date="1765368000">- Update to version 1.8.4~git0.2449805e3:
  * Release 1.8.4
  * Handle concurrent pam sessions. (#4001)
  * fix: correcting parsing of backup compression input (#3995)
  * fixing up docs builds (#4006)</changelog>
</package>
<package pkgid="7d29eebbcba1627aaf63c625fe40bbf6e7286bfe23ff193a35d3d38b04e2d7f5" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.3.3~git0.f075d13" rel="bp156.4.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1681473600">- bsc#1210356 - CVE-2023-26964 - hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames</changelog>
  <changelog author="william.brown@suse.com" date="1682942400">- Update to version 1.1.0~alpha12~git0.bcdbb18:
  * Release 1.1.0-alpha.12 (#1588)
  * chore(deps): bump tokio-util from 0.7.7 to 0.7.8 (#1587)
  * chore(deps): bump reqwest from 0.11.16 to 0.11.17 (#1586)
  * chore(deps): bump tokio from 1.27.0 to 1.28.0 (#1585)
  * chore(deps): bump uuid from 1.3.1 to 1.3.2 (#1584)
  * chore(deps): bump clap from 3.2.23 to 3.2.25 (#1583)
  * chore(deps-dev): bump coverage from 7.2.3 to 7.2.5 in /pykanidm (#1582)
  * Correctly prevent start up when https sockets in use (#1579)
  * Filter rdns and dns for ldap filters (#1576)
  * use sccache, merge "test" actions into "build", remove homebrew caching (#1578)
  * Cleanup incorrect log errors of denied entries (#1577)
  * 20230424 clippppppppppppyyyyyyyy (#1574)
  * Add exclusive process lock to Kanidm to prevent accidental duplicate commands. (#1575)
  * more more more unixd build fixes (#1573)
  * chore(deps-dev): bump mkdocs-material from 9.1.7 to 9.1.8 in /pykanidm (#1572)
  * chore(deps): bump openssl from 0.10.51 to 0.10.52 (#1571)
  * chore(deps): bump openssl-sys from 0.9.86 to 0.9.87 (#1570)
  * chore(deps-dev): bump ruff from 0.0.262 to 0.0.263 in /pykanidm (#1569)
  * more-merge unixd commands (#1568)
  * Consolidate unix tools (#1566)
  * 1553 pam remote or local detection (#1565)
  * chore(deps): bump openssl from 0.10.50 to 0.10.51 (#1563)
  * Improve user experince of refreshing with intent tokens during cred update (#1556)
  * chore(deps): bump tracing-subscriber from 0.3.16 to 0.3.17 (#1562)
  * chore(deps): bump regex from 1.7.3 to 1.8.1 (#1561)
  * chore(deps): bump libc from 0.2.141 to 0.2.142 (#1560)
  * chore(deps-dev): bump ruff from 0.0.261 to 0.0.262 in /pykanidm (#1559)
  * chore(deps-dev): bump mkdocs-material from 9.1.6 to 9.1.7 in /pykanidm (#1558)
  * chore(deps): bump actions/upload-artifact from 1 to 3 (#1557)
  * Fix incompatible future warnings by removing older crates (#1554)
  * 20230330 oauth2 refresh tokens (#1502)
  * Sorting documentation builds (#1551)
  * Add troubleshooting step for pam home dirs (#1550)
  * AuthSession non empty vec part 2 (#1543)
  * chore(deps): bump openssl from 0.10.49 to 0.10.50 (#1548)
  * chore(deps): bump serde from 1.0.159 to 1.0.160 (#1547)
  * chore(deps): bump syn from 2.0.13 to 2.0.15 (#1546)
  * chore(deps): bump serde_json from 1.0.95 to 1.0.96 (#1545)
  * chore(deps-dev): bump pytest from 7.3.0 to 7.3.1 in /pykanidm (#1544)
  * chore(deps): bump h2 from 0.3.15 to 0.3.17 (#1540)
  * Improve unicode control character detection (#1539)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1533)
  * chore(deps-dev): bump mypy from 1.0.1 to 1.2.0 in /pykanidm (#1532)
  * chore(deps): bump filetime from 0.2.20 to 0.2.21 (#1529)
  * chore(deps-dev): bump mkdocstrings from 0.20.0 to 0.21.2 in /pykanidm (#1536)
  * chore(deps-dev): bump mkdocs-material from 9.1.5 to 9.1.6 in /pykanidm (#1535)
  * chore(deps-dev): bump ruff from 0.0.260 to 0.0.261 in /pykanidm (#1534)
  * chore(deps-dev): bump coverage from 7.2.2 to 7.2.3 in /pykanidm (#1530)
  * chore(deps): bump uuid from 1.3.0 to 1.3.1 (#1531)
  * chore(deps): bump syn from 2.0.12 to 2.0.13 (#1527)
  * chore(deps): bump dialoguer from 0.10.3 to 0.10.4 (#1526)
  * chore(deps-dev): bump pytest from 7.2.2 to 7.3.0 in /pykanidm (#1528)
  * chore(deps): bump libc from 0.2.140 to 0.2.141 (#1525)
  * chore(deps): bump fernet from 0.2.0 to 0.2.1 (#1524)
  * Authsession non empty vec (#1522)
  * chore(deps-dev): bump ruff from 0.0.259 to 0.0.260 in /pykanidm (#1506)
  * chore(deps-dev): bump mkdocs-material from 9.1.4 to 9.1.5 in /pykanidm (#1510)
  * chore(deps): bump serde from 1.0.158 to 1.0.159 (#1515)
  * chore(deps): bump openssl from 0.10.48 to 0.10.49 (#1513)
  * chore(deps): bump tokio from 1.26.0 to 1.27.0 (#1505)
  * chore(deps): bump openssl-sys from 0.9.83 to 0.9.84 (#1507)
  * chore(deps): bump futures from 0.3.27 to 0.3.28 (#1509)
  * chore(deps): bump reqwest from 0.11.15 to 0.11.16 (#1517)
  * chore(deps-dev): bump black from 23.1.0 to 23.3.0 in /pykanidm (#1514)
  * changing from merge to squash (#1521)
  * chore(deps): bump proc-macro2 from 1.0.54 to 1.0.56
  * fixing up auto-merge (#1519)
  * chore(deps): bump syn from 2.0.10 to 2.0.12 (#1511)
  * chore(deps-dev): bump types-toml from 0.10.8.5 to 0.10.8.6 in /pykanidm (#1504)
  * chore(deps): bump serde_json from 1.0.94 to 1.0.95 (#1516)
  * chore(deps): bump ldap3_proto from 0.3.1 to 0.3.2 (#1518)
  * chore(deps): bump syn from 1.0.109 to 2.0.10 (#1499)
  * Be non empty vec (#1501)
  * 1496 ldap basedn config (#1500)
  * chore(deps): bump proc-macro2 from 1.0.52 to 1.0.54 (#1494)
  * chore(deps): bump regex from 1.7.1 to 1.7.3 (#1491)
  * chore(deps): bump pydantic from 1.10.6 to 1.10.7 in /pykanidm (#1492)
  * chore(deps-dev): bump mkdocs-material from 9.1.3 to 9.1.4 in /pykanidm (#1487)
  * chore(deps): bump async-trait from 0.1.67 to 0.1.68 (#1488)
  * Improve string validation (#1497)
  * chore(deps): bump reqwest from 0.11.14 to 0.11.15 (#1493)
  * chore(deps-dev): bump ruff from 0.0.257 to 0.0.259 in /pykanidm (#1489)
  * chore(deps): bump serde from 1.0.157 to 1.0.158 (#1490)
  * Adding an auto-merger for dependabot updates (#1486)
  * Make examples in ldap chapter consistent (#1495)
  * 1115 priv (reauth, sudo) mode (#1479)
  * chore(deps): bump openssl from 0.10.47 to 0.10.48 (#1484)
  * Server daemon logging and exit codes (#1475)
  * Fix path-relative links in documentation (#1478)
  * chore(deps): bump openssl from 0.10.45 to 0.10.47 (#1471)
  * chore(deps): bump serde from 1.0.155 to 1.0.157 (#1473)
  * chore(deps-dev): bump mkdocs-material from 9.1.2 to 9.1.3 in /pykanidm (#1468)
  * chore(deps-dev): bump pylint-pydantic from 0.1.7 to 0.1.8 in /pykanidm (#1469)
  * chore(deps-dev): bump coverage from 7.2.1 to 7.2.2 in /pykanidm (#1463)
  * chore(deps-dev): bump ruff from 0.0.254 to 0.0.257 in /pykanidm (#1466)
  * chore(deps): bump async-trait from 0.1.66 to 0.1.67 (#1461)
  * chore(deps): bump whoami from 1.3.0 to 1.4.0 (#1460)
  * chore(deps): bump zxcvbn from 2.2.1 to 2.2.2 (#1464)
  * chore(deps): bump openssl-sys from 0.9.80 to 0.9.82 (#1470)
  * chore(deps-dev): bump pytest-asyncio from 0.20.3 to 0.21.0 in /pykanidm (#1459)
  * Add unixd exit code (#1453)
  * Unixd daemon improvement (#1454)
  * chore(deps): bump walkdir from 2.3.2 to 2.3.3 (#1458)
  * checks for a minimum number of arguments (#1452)
  * chore(deps): bump chrono from 0.4.23 to 0.4.24 (#1444)
  * chore(deps): bump futures from 0.3.26 to 0.3.27 (#1447)
  * chore(deps): bump paste from 1.0.11 to 1.0.12 (#1449)
  * chore(deps-dev): bump mkdocs-material from 9.1.1 to 9.1.2 in /pykanidm (#1450)
  * chore(deps): bump csv from 1.2.0 to 1.2.1 (#1443)
  * chore(deps): bump libc from 0.2.139 to 0.2.140 (#1442)
  * chore(deps): bump serde from 1.0.152 to 1.0.155 (#1446)
  * chore(deps): bump pydantic from 1.10.5 to 1.10.6 in /pykanidm (#1448)
  * Image fixes in the build (#1441)
  * Fix RADIUS docker image file permissions (#1439)
  * User auth token session display implementation (#1415)
  * RADIUS container fixes (#1424)
  * Update book - OAuth2 integration step (#1437)
  * chore(deps): bump async-trait from 0.1.64 to 0.1.66 (#1433)
  * Hopefully fix exp issues by making it a stable part of the access token. (#1434)
  * chore(deps): bump base64 from 0.13.1 to 0.21.0 (#1350)
  * chore(deps): bump serde_json from 1.0.93 to 1.0.94 (#1427)
  * chore(deps-dev): bump pytest from 7.2.1 to 7.2.2 in /pykanidm (#1431)
  * chore(deps-dev): bump pylint-pydantic from 0.1.6 to 0.1.7 in /pykanidm (#1430)
  * chore(deps-dev): bump ruff from 0.0.253 to 0.0.254 in /pykanidm (#1429)
  * chore(deps-dev): bump mkdocs-material from 9.0.15 to 9.1.1 in /pykanidm (#1428)
  * Openssl build fix (#1422)
  * 1399 some async cleanup (#1421)
  * Web UI: Sort group memberships of profile (#1410)
  * Update the dev docs to flow nicer (#1420)
  * chore(deps): bump dyn-clone from 1.0.10 to 1.0.11 (#1417)
  * chore(deps): bump tokio from 1.25.0 to 1.26.0 (#1418)
  * chore(deps-dev): bump coverage from 7.1.0 to 7.2.1 in /pykanidm (#1405)
  * chore(deps-dev): bump ruff from 0.0.230 to 0.0.253 in /pykanidm (#1419)
  * 1399 cleanup cli docs (#1413)
  * 1399 cleanup reorg (#1412)
  * 1399 cleanup (#1409)
  * Version  output for 4 unix_int tools (#1408)
  * Windows build fixes (#1388)
  * chore(deps): bump num_enum from 0.5.10 to 0.5.11 (#1404)
  * chore(deps-dev): bump types-toml from 0.10.8.4 to 0.10.8.5 in /pykanidm (#1407)
  * chore(deps): bump syn from 1.0.107 to 1.0.109 (#1406)
  * chore(deps-dev): bump mkdocs-material from 9.0.13 to 9.0.15 in /pykanidm (#1403)
  * Mention my Recursing of the Passport (#1402)
  * Start to add reauth capabilities (#1398)
  * Add Recursive Logos (#1401)
  * Prevent invalidation of api tokens (#1397)
  * chore(deps): bump tokio-util from 0.7.4 to 0.7.7 (#1378)
  * chore(deps): bump web-sys from 0.3.60 to 0.3.61 (#1362)
  * chore(deps): bump filetime from 0.2.19 to 0.2.20 (#1375)
  * chore(deps): bump pydantic from 1.10.4 to 1.10.5 in /pykanidm (#1392)
  * chore(deps-dev): bump mkdocs-material from 9.0.12 to 9.0.13 in /pykanidm (#1394)
  * chore(deps): bump num_enum from 0.5.9 to 0.5.10 (#1391)
  * chore(deps-dev): bump types-toml from 0.10.8.3 to 0.10.8.4 in /pykanidm (#1395)
  * chore(deps-dev): bump mypy from 1.0.0 to 1.0.1 in /pykanidm (#1390)
  * chore(deps): bump csv from 1.1.6 to 1.2.0 (#1393)
  * chore(deps): bump base64urlsafedata from 0.1.2 to 0.1.3 (#1389)
  * 20230220 passkey cleanup (#1396)
  * 1115 store credential ids per session (#1386)
  * Reduce the number of cow cells in idm (#1385)
  * 1355 docker builds (#1384)
  * chore(deps): bump proc-macro2 from 1.0.50 to 1.0.51 (#1369)
  * Improve some small behaviours of login and key management (#1383)
  * 967 oauth2 implicit search (#1382)
  * chore(deps): bump wasm-bindgen-test from 0.3.33 to 0.3.34 (#1364)
  * chore(deps): bump serde_json from 1.0.91 to 1.0.93 (#1376)
  * chore(deps-dev): bump black from 22.12.0 to 23.1.0 in /pykanidm (#1367)
  * chore(deps-dev): bump pylint-pydantic from 0.1.5 to 0.1.6 in /pykanidm (#1351)
  * chore(deps-dev): bump coverage from 7.0.5 to 7.1.0 in /pykanidm (#1352)
  * 20230130 hackweek replication (#1358)
  * Improve some diagnostic messages in console (#1381)
  * chore(deps): bump docker/build-push-action from 3 to 4 (#1360)
  * chore(deps): bump aiohttp from 3.8.3 to 3.8.4 in /pykanidm (#1377)
  * chore(deps-dev): bump mypy from 0.991 to 1.0.0 in /pykanidm (#1380)
  * chore(deps): bump uuid from 1.2.2 to 1.3.0 (#1368)
  * chore(deps-dev): bump mkdocs-material from 9.0.6 to 9.0.12 in /pykanidm (#1379)
  * chore(deps-dev): bump types-toml from 0.10.8.1 to 0.10.8.3 in /pykanidm (#1374)
  * chore(deps): bump cryptography from 39.0.0 to 39.0.1 in /pykanidm (#1371)
  * Update release docs to prevent forgetting a release step (#1370)
  * 1355 docker builds (#1357)
  * Update to 12 dev (#1356)</changelog>
  <changelog author="william.brown@suse.com" date="1690891200">- Update to version 1.1.0~beta13~git2.5d1e2f9:
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)
  * Release 1.1.0-beta.13 (#1922)
  * 20230731 release (#1921)
  * Improve default shells for distros (#1920)
  * 20230728 techdebt paydown (#1909)
  * chasing weirdness (#1910)
  * chore(deps-dev): bump mkdocs-material from 9.1.19 to 9.1.21 in /pykanidm (#1918)
  * chore(deps): bump serde_json from 1.0.103 to 1.0.104 (#1917)
  * chore(deps): bump serde from 1.0.174 to 1.0.178 (#1916)
  * chore(deps): bump tikv-jemallocator from 0.5.0 to 0.5.4 (#1915)
  * chore(deps-dev): bump mkdocs from 1.4.3 to 1.5.1 in /pykanidm (#1913)
  * chore(deps-dev): bump pylint-pydantic from 0.2.3 to 0.2.4 in /pykanidm (#1912)
  * chore(deps): bump pydantic from 2.0.3 to 2.1.1 in /pykanidm (#1911)
  * 20230727 unix int modularity (#1907)
  * bumping action version (#1908)
  * 68 20230720 replication improvements (#1905)
  * Resolve compilation issue with tpm enabled on linux (#1902)
  * Improve service file for host installs (#1901)
  * 20230720 unix int modular (#1881)
  * fixing up pydantic things (#1885)
  * 1788 admin unix socket (#1880)
  * chore(deps-dev): bump pylint-pydantic from 0.2.1 to 0.2.3 in /pykanidm (#1900)
  * chore(deps-dev): bump ruff from 0.0.278 to 0.0.280 in /pykanidm (#1899)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1898)
  * chore(deps-dev): bump mkdocs-material from 9.1.18 to 9.1.19 in /pykanidm (#1897)
  * chore(deps): bump async-trait from 0.1.71 to 0.1.72 (#1895)
  * chore(deps-dev): bump types-toml from 0.10.8.6 to 0.10.8.7 in /pykanidm (#1896)
  * chore(deps): bump axum from 0.6.18 to 0.6.19 (#1894)
  * chore(deps): bump clap from 4.3.12 to 4.3.19 (#1893)
  * chore(deps): bump axum-macros from 0.3.7 to 0.3.8 (#1892)
  * chore(deps): bump serde from 1.0.171 to 1.0.174 (#1891)
  * chore(deps): bump uuid from 1.4.0 to 1.4.1 (#1890)
  * chore(deps): bump quote from 1.0.31 to 1.0.32 (#1889)
  * chore(deps): bump tower-http from 0.4.1 to 0.4.3 (#1888)
  * chore(deps): bump syn from 2.0.26 to 2.0.27 (#1887)
  * chore(deps): bump urlencoding from 2.1.2 to 2.1.3 (#1886)
  * added hsts header middleware (#1882)
  * chore(deps): bump aiohttp from 3.8.4 to 3.8.5 in /pykanidm (#1883)
  * 1785 allow sync attr yielding via partial write admin (#1879)
  * Alter filter generation to exclude empty conditions (#1877)
  * Revert to opensuse based radius container. (#1878)
  * Unix gid duplicate fix (#1876)
  * Refactor docker_build_kanidm to be more isolated (v13) (#1872)
  * Sync account import improvements (#1873)
  * chore(deps): bump quote from 1.0.29 to 1.0.31 (#1870)
  * chore(deps-dev): bump black from 23.3.0 to 23.7.0 in /pykanidm (#1859)
  * Add a newline to fix links in LLDAP section of the README (#1871)
  * chore(deps): bump dyn-clone from 1.0.11 to 1.0.12 (#1869)
  * chore(deps): bump pydantic from 1.10.11 to 2.0.3 in /pykanidm (#1858)
  * chore(deps): bump serde_json from 1.0.102 to 1.0.103 (#1868)
  * Fix missing slash in tag (#1853)
  * chore(deps): bump argon2 from 0.5.0 to 0.5.1 (#1867)
  * chore(deps): bump syn from 2.0.25 to 2.0.26 (#1866)
  * chore(deps): bump paste from 1.0.13 to 1.0.14 (#1864)
  * chore(deps-dev): bump pylint-pydantic from 0.2.0 to 0.2.1 in /pykanidm (#1863)
  * chore(deps): bump clap from 4.3.11 to 4.3.12 (#1862)
  * chore(deps-dev): bump pytest-asyncio from 0.21.0 to 0.21.1 in /pykanidm (#1861)
  * chore(deps): bump proc-macro2 from 1.0.64 to 1.0.66 (#1860)
  * chore(deps-dev): bump ruff from 0.0.277 to 0.0.278 in /pykanidm (#1857)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1856)
  * chore(deps): bump actions/upload-pages-artifact from 1 to 2 (#1855)
  * Revert "something something token permissions (#1850)" (#1852)
  * something something token permissions (#1850)
  * Upgraded clap, removing atty as a dependency (#1849)
  * Ensure we dont use std hashmaps (#1848)
  * Improve selinux in tasks daemon (#1847)
  * Resolve issue with order of operations causing group memberships to disappear (#1845)
  * headless webdriver testing, starting on brotli feature (#1844)
  * chore(deps-dev): bump mkdocs-material from 9.1.17 to 9.1.18 in /pykanidm (#1835)
  * chore(deps): bump serde from 1.0.166 to 1.0.170 (#1843)
  * Fix a typo in the unix daemon debug (#1822)
  * chore(deps-dev): bump ruff from 0.0.275 to 0.0.277 in /pykanidm (#1833)
  * chore(deps): bump serde-wasm-bindgen from 0.4.5 to 0.5.0 (#1842)
  * chore(deps): bump proc-macro2 from 1.0.63 to 1.0.64 (#1841)
  * chore(deps): bump syn from 2.0.23 to 2.0.25 (#1840)
  * chore(deps): bump async-trait from 0.1.69 to 0.1.71 (#1839)
  * chore(deps): bump regex from 1.8.4 to 1.9.1 (#1838)
  * chore(deps): bump is-terminal from 0.4.8 to 0.4.9 (#1837)
  * chore(deps): bump serde_json from 1.0.99 to 1.0.100 (#1836)
  * Allow Authorization header in CORS preflight response (#1831)
  * chore(deps): bump pydantic from 1.10.10 to 1.10.11 in /pykanidm (#1834)
  * chore(deps-dev): bump pylint-pydantic from 0.1.8 to 0.2.0 in /pykanidm (#1832)
  * Add preflight headers (#1829)
  * Persist nonce through refresh to support client (#1826)
  * Cleanup spa handling (#1825)
  * 1792 public oauth clients (#1821)
  * 1812 1813 post axum cleanup (#1817)
  * Fix diagram colours (#1815)
  * Converting from tide to axum (#1797)
  * Add client UX for redirecting to an external portal for synced accounts (#1791)
  * Add cors policy (#1807)
  * Improve tasks daemon shutdown (#1806)
  * Improve durability of migrations (#1804)
  * clippy-izing an unsafe in pam (#1795)
  * chore(deps): bump pydantic from 1.10.9 to 1.10.10 in /pykanidm (#1803)
  * chore(deps): bump uuid from 1.3.4 to 1.4.0 (#1802)
  * chore(deps): bump tokio from 1.28.2 to 1.29.1 (#1801)
  * chore(deps): bump syn from 2.0.20 to 2.0.23 (#1800)
  * chore(deps): bump whoami from 1.4.0 to 1.4.1 (#1799)
  * chore(deps): bump quote from 1.0.28 to 1.0.29 (#1798)
  * 20230629 tpm keygen ... again (#1793)
  * Fixing the kanidmd healthcheck (#1789)
  * Name change history (#1727)
  * 20230628 tpm minor issue with key regen (#1790)
  * Still trying to fix the docs. (#1709)
  * Improve cli to support multi-domain handling. (#1786)
  * Started chasing noise, found some code to delete... (#1768)
  * Improve tpm key generation - improve unix config for tpms. (#1782)
  * chore(deps-dev): bump pytest from 7.3.2 to 7.4.0 in /pykanidm (#1771)
  * chore(deps-dev): bump mkdocs-material from 9.1.16 to 9.1.17 in /pykanidm (#1773)
  * chore(deps-dev): bump mypy from 1.3.0 to 1.4.1 in /pykanidm (#1784)
  * chore(deps): bump serde_json from 1.0.97 to 1.0.99 (#1778)
  * chore(deps): bump syn from 2.0.18 to 2.0.20 (#1779)
  * chore(deps): bump authlib from 1.2.0 to 1.2.1 in /pykanidm (#1777)
  * chore(deps): bump proc-macro2 from 1.0.60 to 1.0.63 (#1776)
  * chore(deps): bump libc from 0.2.146 to 0.2.147 (#1774)
  * chore(deps): bump gloo-net from 0.2.6 to 0.3.0 (#1772)
  * chore(deps-dev): bump ruff from 0.0.272 to 0.0.275 in /pykanidm (#1770)
  * Fix debian packaging (#1742)
  * Remove r2d2 - sad beep noises (#1766)
  * Kanidmd is a bit noisy (#1765)
  * Ux improvements - Allow enrolling other devices (#1764)
  * Make argon2id default pw hasher - improve parameter detection (#1762)
  * chore(deps): bump openssl from 0.10.54 to 0.10.55 (#1761)
  * Implement tpm binding of cached password hashes (#1754)
  * Mention client configuration in tool installation guide (#1756)
  * Remove scripts that are no longer required (#1759)
  * OAuth2 secret JSON (#1758)
  * Allow account locking with expire-at 'epoch' and 'now' (#1757)
  * Resolve codespell issues (#1753)
  * Add tls generator to main kanidmd (#1743)
  * Fix block_on in ssh authorised keys (#1752)
  * chore(deps-dev): bump mkdocs-material from 9.1.15 to 9.1.16 in /pykanidm (#1751)
  * chore(deps): bump gloo from 0.8.0 to 0.8.1 (#1750)
  * chore(deps-dev): bump pytest-mock from 3.10.0 to 3.11.1 in /pykanidm (#1749)
  * chore(deps): bump hashbrown from 0.13.2 to 0.14.0 (#1748)
  * 1737 1739 sync - map uidnumbers mail (#1741)
  * Add support for argon2id (#1736)
  * Disable neon on linux (#1740)
  * 20230614 unix account security - move account name deny to unixd (#1733)
  * fixed return value of add_ava_int (#1735)
  * unix_integration: also check running SELinux mode (#1704)
  * added pre_cand entries to both pre_modify and pre_batch_modify plugin functions (#1732)
  * 20230608 ldap sync (#1728)
  * Add acp allowing service accounts to clear their own sessions (#1731)
  * Declare when no applications are available (#1730)
  * Fix ip addr parse (#1729)
  * X-Forwarded-For catcher - improve ip addr parsing (#1725)
  * chore(deps): bump proc-macro2 from 1.0.59 to 1.0.60 (#1723)
  * chore(deps): bump url from 2.3.1 to 2.4.0 (#1722)
  * chore(deps-dev): bump pytest from 7.3.1 to 7.3.2 in /pykanidm (#1719)
  * chore(deps): bump libc from 0.2.145 to 0.2.146 (#1721)
  * chore(deps-dev): bump ruff from 0.0.270 to 0.0.272 in /pykanidm (#1720)
  * docs: fix typo in sync concepts (#1715)
  * chore(deps): bump regex from 1.8.3 to 1.8.4 (#1718)
  * chore(deps): bump pydantic from 1.10.8 to 1.10.9 in /pykanidm (#1717)
  * chore(deps): bump serde from 1.0.163 to 1.0.164 (#1716)
  * Absolutely minimal implementation (#1711)
  * Add further incremental replication tests (#1707)
  * Save two more kay strokes (#1708)
  * Documentation root directory 404 (#1706)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1697)
  * Improve diagnostic and docs of ldap bind requiring posix password (#1702)
  * #1680 redux - trying to fix docs again (#1692)
  * Automatically login &amp; reauth (#1691)
  * chore(deps-dev): bump coverage from 7.2.6 to 7.2.7 in /pykanidm (#1698)
  * chore(deps): bump libc from 0.2.144 to 0.2.145 (#1701)
  * chore(deps): bump openssl from 0.10.52 to 0.10.54 (#1700)
  * chore(deps): bump csv from 1.2.1 to 1.2.2 (#1699)
  * chore(deps): bump syn from 2.0.17 to 2.0.18 (#1696)
  * chore(deps): bump chrono from 0.4.24 to 0.4.26 (#1695)
  * chore(deps-dev): bump mkdocs-material from 9.1.14 to 9.1.15 in /pykanidm (#1694)
  * chore(deps): bump openssl-sys from 0.9.87 to 0.9.88 (#1693)
  * Documentation root directory 404 (#1681)
  * Crono expression parser fix (#1682)
  * Document OpenID connect setup for Miniflux (#1683)
  * chore(deps): bump cryptography from 39.0.1 to 41.0.0 in /pykanidm (#1684)
  * Improve the readme (#1679)
  * Move the socket startup to localise it to the acceptor (#1678)
  * SELinux support for kanidm-unixd-tasks daemon (#1661)
  * Resolve ability to delete ssh keys with spaces in tags (#1674)
  * Adding mdbook-template back for bookgen (#1660)
  * chore(deps-dev): bump coverage from 7.2.5 to 7.2.6 in /pykanidm (#1669)
  * chore(deps-dev): bump mkdocstrings from 0.21.2 to 0.22.0 in /pykanidm (#1671)
  * 20230526 incremental replication improvements (#1659)
  * chore(deps): bump regex from 1.8.1 to 1.8.3 (#1670)
  * chore(deps): bump hashbrown from 0.12.3 to 0.13.2 (#1668)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1667)
  * chore(deps): bump tokio from 1.28.1 to 1.28.2 (#1666)
  * chore(deps-dev): bump ruff from 0.0.269 to 0.0.270 in /pykanidm (#1665)
  * chore(deps): bump quote from 1.0.27 to 1.0.28 (#1664)
  * chore(deps): bump pydantic from 1.10.7 to 1.10.8 in /pykanidm (#1663)
  * fixing get-tags-action in book build (#1657)
  * Add more replication tests, improve some handling of tombstones. (#1656)
  * Bring back CpuOptLevel x86_64_v1 (#1590)
  * Doc fixes (#1658)
  * Identifiable tokens (#1623)
  * Add version tag to makefile images (#1654)
  * during service account recovery, remove incompatible credentials (#1650)
  * signal handling for tasks daemon (#1651)
  * Time travelling (#1648)
  * chore(deps): bump requests from 2.28.2 to 2.31.0 in /pykanidm (#1649)
  * 20230508 replication incremental (#1620)
  * chore(deps-dev): bump mkdocs-material from 9.1.12 to 9.1.14 in /pykanidm (#1642)
  * chore(deps): bump wasm-bindgen from 0.2.85 to 0.2.86 (#1647)
  * chore(deps): bump js-sys from 0.3.62 to 0.3.63 (#1646)
  * chore(deps): bump uuid from 1.3.2 to 1.3.3 (#1645)
  * chore(deps): bump proc-macro2 from 1.0.56 to 1.0.58 (#1644)
  * chore(deps): bump reqwest from 0.11.17 to 0.11.18 (#1643)
  * chore(deps-dev): bump ruff from 0.0.267 to 0.0.269 in /pykanidm (#1641)
  * Fix use-reset-token command hint (#1639)
  * chore(deps): bump pymdown-extensions from 9.9.2 to 10.0 in /pykanidm (#1638)
  * chore(deps-dev): bump mypy from 1.2.0 to 1.3.0 in /pykanidm (#1636)
  * chore(deps): bump wasm-bindgen-test from 0.3.34 to 0.3.35 (#1635)
  * chore(deps-dev): bump ruff from 0.0.265 to 0.0.267 in /pykanidm (#1634)
  * chore(deps): bump syn from 2.0.15 to 2.0.16 (#1633)
  * chore(deps): bump quote from 1.0.26 to 1.0.27 (#1628)
  * chore(deps): bump serde from 1.0.162 to 1.0.163 (#1632)
  * chore(deps-dev): bump mkdocs-material from 9.1.9 to 9.1.12 in /pykanidm (#1631)
  * chore(deps): bump tokio from 1.28.0 to 1.28.1 (#1629)
  * chore(deps): bump web-sys from 0.3.61 to 0.3.62 (#1627)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1626)
  * chore(deps): bump libc from 0.2.143 to 0.2.144 (#1625)
  * chore(deps): bump js-sys from 0.3.61 to 0.3.62 (#1624)
  * Update policy (#1619)
  * fixing up some spelling errors (#1618)
  * Update RELEASE_NOTES.md (#1616)
  * 20230505 replication groundwork - ruv consistency improvements (#1606)
  * chore(deps-dev): bump ruff from 0.0.263 to 0.0.265 in /pykanidm (#1608)
  * chore(deps-dev): bump mkdocs-material from 9.1.8 to 9.1.9 in /pykanidm (#1609)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1611)
  * chore(deps): bump serde from 1.0.160 to 1.0.162 (#1613)
  * chore(deps): bump libc from 0.2.142 to 0.2.143 (#1612)
  * chore(deps): bump pkg-config from 0.3.26 to 0.3.27 (#1610)
  * chore(deps-dev): bump mkdocs from 1.4.2 to 1.4.3 in /pykanidm (#1607)
  * github pages ... something is definitely going weird. (#1605)
  * token permissions! (#1604)
  * Using github actions might actually push a change (#1603)
  * looks like that's a bug (#1602)
  * fix things (#1601)
  * 20230506 ignore some references (#1600)
  * Harden migrate session to prevent duplicate migration errors (#1599)
  * reducing action concurrency load (#1598)
  * more testing cleanup (#1595)
  * Document that you need to tell Nginx or other proxies to use HTTP 1.1… (#1592)
  * sccache github actions fixes (#1593)
  * Start next dev cycle (#1589)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
</package>
<package pkgid="b84c20689b5499df690c329f8b0c95ebb49ab896d3e10c4a67971d51b40873a9" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.3.3~git0.f075d13" rel="bp156.4.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1681473600">- bsc#1210356 - CVE-2023-26964 - hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames</changelog>
  <changelog author="william.brown@suse.com" date="1682942400">- Update to version 1.1.0~alpha12~git0.bcdbb18:
  * Release 1.1.0-alpha.12 (#1588)
  * chore(deps): bump tokio-util from 0.7.7 to 0.7.8 (#1587)
  * chore(deps): bump reqwest from 0.11.16 to 0.11.17 (#1586)
  * chore(deps): bump tokio from 1.27.0 to 1.28.0 (#1585)
  * chore(deps): bump uuid from 1.3.1 to 1.3.2 (#1584)
  * chore(deps): bump clap from 3.2.23 to 3.2.25 (#1583)
  * chore(deps-dev): bump coverage from 7.2.3 to 7.2.5 in /pykanidm (#1582)
  * Correctly prevent start up when https sockets in use (#1579)
  * Filter rdns and dns for ldap filters (#1576)
  * use sccache, merge "test" actions into "build", remove homebrew caching (#1578)
  * Cleanup incorrect log errors of denied entries (#1577)
  * 20230424 clippppppppppppyyyyyyyy (#1574)
  * Add exclusive process lock to Kanidm to prevent accidental duplicate commands. (#1575)
  * more more more unixd build fixes (#1573)
  * chore(deps-dev): bump mkdocs-material from 9.1.7 to 9.1.8 in /pykanidm (#1572)
  * chore(deps): bump openssl from 0.10.51 to 0.10.52 (#1571)
  * chore(deps): bump openssl-sys from 0.9.86 to 0.9.87 (#1570)
  * chore(deps-dev): bump ruff from 0.0.262 to 0.0.263 in /pykanidm (#1569)
  * more-merge unixd commands (#1568)
  * Consolidate unix tools (#1566)
  * 1553 pam remote or local detection (#1565)
  * chore(deps): bump openssl from 0.10.50 to 0.10.51 (#1563)
  * Improve user experince of refreshing with intent tokens during cred update (#1556)
  * chore(deps): bump tracing-subscriber from 0.3.16 to 0.3.17 (#1562)
  * chore(deps): bump regex from 1.7.3 to 1.8.1 (#1561)
  * chore(deps): bump libc from 0.2.141 to 0.2.142 (#1560)
  * chore(deps-dev): bump ruff from 0.0.261 to 0.0.262 in /pykanidm (#1559)
  * chore(deps-dev): bump mkdocs-material from 9.1.6 to 9.1.7 in /pykanidm (#1558)
  * chore(deps): bump actions/upload-artifact from 1 to 3 (#1557)
  * Fix incompatible future warnings by removing older crates (#1554)
  * 20230330 oauth2 refresh tokens (#1502)
  * Sorting documentation builds (#1551)
  * Add troubleshooting step for pam home dirs (#1550)
  * AuthSession non empty vec part 2 (#1543)
  * chore(deps): bump openssl from 0.10.49 to 0.10.50 (#1548)
  * chore(deps): bump serde from 1.0.159 to 1.0.160 (#1547)
  * chore(deps): bump syn from 2.0.13 to 2.0.15 (#1546)
  * chore(deps): bump serde_json from 1.0.95 to 1.0.96 (#1545)
  * chore(deps-dev): bump pytest from 7.3.0 to 7.3.1 in /pykanidm (#1544)
  * chore(deps): bump h2 from 0.3.15 to 0.3.17 (#1540)
  * Improve unicode control character detection (#1539)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1533)
  * chore(deps-dev): bump mypy from 1.0.1 to 1.2.0 in /pykanidm (#1532)
  * chore(deps): bump filetime from 0.2.20 to 0.2.21 (#1529)
  * chore(deps-dev): bump mkdocstrings from 0.20.0 to 0.21.2 in /pykanidm (#1536)
  * chore(deps-dev): bump mkdocs-material from 9.1.5 to 9.1.6 in /pykanidm (#1535)
  * chore(deps-dev): bump ruff from 0.0.260 to 0.0.261 in /pykanidm (#1534)
  * chore(deps-dev): bump coverage from 7.2.2 to 7.2.3 in /pykanidm (#1530)
  * chore(deps): bump uuid from 1.3.0 to 1.3.1 (#1531)
  * chore(deps): bump syn from 2.0.12 to 2.0.13 (#1527)
  * chore(deps): bump dialoguer from 0.10.3 to 0.10.4 (#1526)
  * chore(deps-dev): bump pytest from 7.2.2 to 7.3.0 in /pykanidm (#1528)
  * chore(deps): bump libc from 0.2.140 to 0.2.141 (#1525)
  * chore(deps): bump fernet from 0.2.0 to 0.2.1 (#1524)
  * Authsession non empty vec (#1522)
  * chore(deps-dev): bump ruff from 0.0.259 to 0.0.260 in /pykanidm (#1506)
  * chore(deps-dev): bump mkdocs-material from 9.1.4 to 9.1.5 in /pykanidm (#1510)
  * chore(deps): bump serde from 1.0.158 to 1.0.159 (#1515)
  * chore(deps): bump openssl from 0.10.48 to 0.10.49 (#1513)
  * chore(deps): bump tokio from 1.26.0 to 1.27.0 (#1505)
  * chore(deps): bump openssl-sys from 0.9.83 to 0.9.84 (#1507)
  * chore(deps): bump futures from 0.3.27 to 0.3.28 (#1509)
  * chore(deps): bump reqwest from 0.11.15 to 0.11.16 (#1517)
  * chore(deps-dev): bump black from 23.1.0 to 23.3.0 in /pykanidm (#1514)
  * changing from merge to squash (#1521)
  * chore(deps): bump proc-macro2 from 1.0.54 to 1.0.56
  * fixing up auto-merge (#1519)
  * chore(deps): bump syn from 2.0.10 to 2.0.12 (#1511)
  * chore(deps-dev): bump types-toml from 0.10.8.5 to 0.10.8.6 in /pykanidm (#1504)
  * chore(deps): bump serde_json from 1.0.94 to 1.0.95 (#1516)
  * chore(deps): bump ldap3_proto from 0.3.1 to 0.3.2 (#1518)
  * chore(deps): bump syn from 1.0.109 to 2.0.10 (#1499)
  * Be non empty vec (#1501)
  * 1496 ldap basedn config (#1500)
  * chore(deps): bump proc-macro2 from 1.0.52 to 1.0.54 (#1494)
  * chore(deps): bump regex from 1.7.1 to 1.7.3 (#1491)
  * chore(deps): bump pydantic from 1.10.6 to 1.10.7 in /pykanidm (#1492)
  * chore(deps-dev): bump mkdocs-material from 9.1.3 to 9.1.4 in /pykanidm (#1487)
  * chore(deps): bump async-trait from 0.1.67 to 0.1.68 (#1488)
  * Improve string validation (#1497)
  * chore(deps): bump reqwest from 0.11.14 to 0.11.15 (#1493)
  * chore(deps-dev): bump ruff from 0.0.257 to 0.0.259 in /pykanidm (#1489)
  * chore(deps): bump serde from 1.0.157 to 1.0.158 (#1490)
  * Adding an auto-merger for dependabot updates (#1486)
  * Make examples in ldap chapter consistent (#1495)
  * 1115 priv (reauth, sudo) mode (#1479)
  * chore(deps): bump openssl from 0.10.47 to 0.10.48 (#1484)
  * Server daemon logging and exit codes (#1475)
  * Fix path-relative links in documentation (#1478)
  * chore(deps): bump openssl from 0.10.45 to 0.10.47 (#1471)
  * chore(deps): bump serde from 1.0.155 to 1.0.157 (#1473)
  * chore(deps-dev): bump mkdocs-material from 9.1.2 to 9.1.3 in /pykanidm (#1468)
  * chore(deps-dev): bump pylint-pydantic from 0.1.7 to 0.1.8 in /pykanidm (#1469)
  * chore(deps-dev): bump coverage from 7.2.1 to 7.2.2 in /pykanidm (#1463)
  * chore(deps-dev): bump ruff from 0.0.254 to 0.0.257 in /pykanidm (#1466)
  * chore(deps): bump async-trait from 0.1.66 to 0.1.67 (#1461)
  * chore(deps): bump whoami from 1.3.0 to 1.4.0 (#1460)
  * chore(deps): bump zxcvbn from 2.2.1 to 2.2.2 (#1464)
  * chore(deps): bump openssl-sys from 0.9.80 to 0.9.82 (#1470)
  * chore(deps-dev): bump pytest-asyncio from 0.20.3 to 0.21.0 in /pykanidm (#1459)
  * Add unixd exit code (#1453)
  * Unixd daemon improvement (#1454)
  * chore(deps): bump walkdir from 2.3.2 to 2.3.3 (#1458)
  * checks for a minimum number of arguments (#1452)
  * chore(deps): bump chrono from 0.4.23 to 0.4.24 (#1444)
  * chore(deps): bump futures from 0.3.26 to 0.3.27 (#1447)
  * chore(deps): bump paste from 1.0.11 to 1.0.12 (#1449)
  * chore(deps-dev): bump mkdocs-material from 9.1.1 to 9.1.2 in /pykanidm (#1450)
  * chore(deps): bump csv from 1.2.0 to 1.2.1 (#1443)
  * chore(deps): bump libc from 0.2.139 to 0.2.140 (#1442)
  * chore(deps): bump serde from 1.0.152 to 1.0.155 (#1446)
  * chore(deps): bump pydantic from 1.10.5 to 1.10.6 in /pykanidm (#1448)
  * Image fixes in the build (#1441)
  * Fix RADIUS docker image file permissions (#1439)
  * User auth token session display implementation (#1415)
  * RADIUS container fixes (#1424)
  * Update book - OAuth2 integration step (#1437)
  * chore(deps): bump async-trait from 0.1.64 to 0.1.66 (#1433)
  * Hopefully fix exp issues by making it a stable part of the access token. (#1434)
  * chore(deps): bump base64 from 0.13.1 to 0.21.0 (#1350)
  * chore(deps): bump serde_json from 1.0.93 to 1.0.94 (#1427)
  * chore(deps-dev): bump pytest from 7.2.1 to 7.2.2 in /pykanidm (#1431)
  * chore(deps-dev): bump pylint-pydantic from 0.1.6 to 0.1.7 in /pykanidm (#1430)
  * chore(deps-dev): bump ruff from 0.0.253 to 0.0.254 in /pykanidm (#1429)
  * chore(deps-dev): bump mkdocs-material from 9.0.15 to 9.1.1 in /pykanidm (#1428)
  * Openssl build fix (#1422)
  * 1399 some async cleanup (#1421)
  * Web UI: Sort group memberships of profile (#1410)
  * Update the dev docs to flow nicer (#1420)
  * chore(deps): bump dyn-clone from 1.0.10 to 1.0.11 (#1417)
  * chore(deps): bump tokio from 1.25.0 to 1.26.0 (#1418)
  * chore(deps-dev): bump coverage from 7.1.0 to 7.2.1 in /pykanidm (#1405)
  * chore(deps-dev): bump ruff from 0.0.230 to 0.0.253 in /pykanidm (#1419)
  * 1399 cleanup cli docs (#1413)
  * 1399 cleanup reorg (#1412)
  * 1399 cleanup (#1409)
  * Version  output for 4 unix_int tools (#1408)
  * Windows build fixes (#1388)
  * chore(deps): bump num_enum from 0.5.10 to 0.5.11 (#1404)
  * chore(deps-dev): bump types-toml from 0.10.8.4 to 0.10.8.5 in /pykanidm (#1407)
  * chore(deps): bump syn from 1.0.107 to 1.0.109 (#1406)
  * chore(deps-dev): bump mkdocs-material from 9.0.13 to 9.0.15 in /pykanidm (#1403)
  * Mention my Recursing of the Passport (#1402)
  * Start to add reauth capabilities (#1398)
  * Add Recursive Logos (#1401)
  * Prevent invalidation of api tokens (#1397)
  * chore(deps): bump tokio-util from 0.7.4 to 0.7.7 (#1378)
  * chore(deps): bump web-sys from 0.3.60 to 0.3.61 (#1362)
  * chore(deps): bump filetime from 0.2.19 to 0.2.20 (#1375)
  * chore(deps): bump pydantic from 1.10.4 to 1.10.5 in /pykanidm (#1392)
  * chore(deps-dev): bump mkdocs-material from 9.0.12 to 9.0.13 in /pykanidm (#1394)
  * chore(deps): bump num_enum from 0.5.9 to 0.5.10 (#1391)
  * chore(deps-dev): bump types-toml from 0.10.8.3 to 0.10.8.4 in /pykanidm (#1395)
  * chore(deps-dev): bump mypy from 1.0.0 to 1.0.1 in /pykanidm (#1390)
  * chore(deps): bump csv from 1.1.6 to 1.2.0 (#1393)
  * chore(deps): bump base64urlsafedata from 0.1.2 to 0.1.3 (#1389)
  * 20230220 passkey cleanup (#1396)
  * 1115 store credential ids per session (#1386)
  * Reduce the number of cow cells in idm (#1385)
  * 1355 docker builds (#1384)
  * chore(deps): bump proc-macro2 from 1.0.50 to 1.0.51 (#1369)
  * Improve some small behaviours of login and key management (#1383)
  * 967 oauth2 implicit search (#1382)
  * chore(deps): bump wasm-bindgen-test from 0.3.33 to 0.3.34 (#1364)
  * chore(deps): bump serde_json from 1.0.91 to 1.0.93 (#1376)
  * chore(deps-dev): bump black from 22.12.0 to 23.1.0 in /pykanidm (#1367)
  * chore(deps-dev): bump pylint-pydantic from 0.1.5 to 0.1.6 in /pykanidm (#1351)
  * chore(deps-dev): bump coverage from 7.0.5 to 7.1.0 in /pykanidm (#1352)
  * 20230130 hackweek replication (#1358)
  * Improve some diagnostic messages in console (#1381)
  * chore(deps): bump docker/build-push-action from 3 to 4 (#1360)
  * chore(deps): bump aiohttp from 3.8.3 to 3.8.4 in /pykanidm (#1377)
  * chore(deps-dev): bump mypy from 0.991 to 1.0.0 in /pykanidm (#1380)
  * chore(deps): bump uuid from 1.2.2 to 1.3.0 (#1368)
  * chore(deps-dev): bump mkdocs-material from 9.0.6 to 9.0.12 in /pykanidm (#1379)
  * chore(deps-dev): bump types-toml from 0.10.8.1 to 0.10.8.3 in /pykanidm (#1374)
  * chore(deps): bump cryptography from 39.0.0 to 39.0.1 in /pykanidm (#1371)
  * Update release docs to prevent forgetting a release step (#1370)
  * 1355 docker builds (#1357)
  * Update to 12 dev (#1356)</changelog>
  <changelog author="william.brown@suse.com" date="1690891200">- Update to version 1.1.0~beta13~git2.5d1e2f9:
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)
  * Release 1.1.0-beta.13 (#1922)
  * 20230731 release (#1921)
  * Improve default shells for distros (#1920)
  * 20230728 techdebt paydown (#1909)
  * chasing weirdness (#1910)
  * chore(deps-dev): bump mkdocs-material from 9.1.19 to 9.1.21 in /pykanidm (#1918)
  * chore(deps): bump serde_json from 1.0.103 to 1.0.104 (#1917)
  * chore(deps): bump serde from 1.0.174 to 1.0.178 (#1916)
  * chore(deps): bump tikv-jemallocator from 0.5.0 to 0.5.4 (#1915)
  * chore(deps-dev): bump mkdocs from 1.4.3 to 1.5.1 in /pykanidm (#1913)
  * chore(deps-dev): bump pylint-pydantic from 0.2.3 to 0.2.4 in /pykanidm (#1912)
  * chore(deps): bump pydantic from 2.0.3 to 2.1.1 in /pykanidm (#1911)
  * 20230727 unix int modularity (#1907)
  * bumping action version (#1908)
  * 68 20230720 replication improvements (#1905)
  * Resolve compilation issue with tpm enabled on linux (#1902)
  * Improve service file for host installs (#1901)
  * 20230720 unix int modular (#1881)
  * fixing up pydantic things (#1885)
  * 1788 admin unix socket (#1880)
  * chore(deps-dev): bump pylint-pydantic from 0.2.1 to 0.2.3 in /pykanidm (#1900)
  * chore(deps-dev): bump ruff from 0.0.278 to 0.0.280 in /pykanidm (#1899)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1898)
  * chore(deps-dev): bump mkdocs-material from 9.1.18 to 9.1.19 in /pykanidm (#1897)
  * chore(deps): bump async-trait from 0.1.71 to 0.1.72 (#1895)
  * chore(deps-dev): bump types-toml from 0.10.8.6 to 0.10.8.7 in /pykanidm (#1896)
  * chore(deps): bump axum from 0.6.18 to 0.6.19 (#1894)
  * chore(deps): bump clap from 4.3.12 to 4.3.19 (#1893)
  * chore(deps): bump axum-macros from 0.3.7 to 0.3.8 (#1892)
  * chore(deps): bump serde from 1.0.171 to 1.0.174 (#1891)
  * chore(deps): bump uuid from 1.4.0 to 1.4.1 (#1890)
  * chore(deps): bump quote from 1.0.31 to 1.0.32 (#1889)
  * chore(deps): bump tower-http from 0.4.1 to 0.4.3 (#1888)
  * chore(deps): bump syn from 2.0.26 to 2.0.27 (#1887)
  * chore(deps): bump urlencoding from 2.1.2 to 2.1.3 (#1886)
  * added hsts header middleware (#1882)
  * chore(deps): bump aiohttp from 3.8.4 to 3.8.5 in /pykanidm (#1883)
  * 1785 allow sync attr yielding via partial write admin (#1879)
  * Alter filter generation to exclude empty conditions (#1877)
  * Revert to opensuse based radius container. (#1878)
  * Unix gid duplicate fix (#1876)
  * Refactor docker_build_kanidm to be more isolated (v13) (#1872)
  * Sync account import improvements (#1873)
  * chore(deps): bump quote from 1.0.29 to 1.0.31 (#1870)
  * chore(deps-dev): bump black from 23.3.0 to 23.7.0 in /pykanidm (#1859)
  * Add a newline to fix links in LLDAP section of the README (#1871)
  * chore(deps): bump dyn-clone from 1.0.11 to 1.0.12 (#1869)
  * chore(deps): bump pydantic from 1.10.11 to 2.0.3 in /pykanidm (#1858)
  * chore(deps): bump serde_json from 1.0.102 to 1.0.103 (#1868)
  * Fix missing slash in tag (#1853)
  * chore(deps): bump argon2 from 0.5.0 to 0.5.1 (#1867)
  * chore(deps): bump syn from 2.0.25 to 2.0.26 (#1866)
  * chore(deps): bump paste from 1.0.13 to 1.0.14 (#1864)
  * chore(deps-dev): bump pylint-pydantic from 0.2.0 to 0.2.1 in /pykanidm (#1863)
  * chore(deps): bump clap from 4.3.11 to 4.3.12 (#1862)
  * chore(deps-dev): bump pytest-asyncio from 0.21.0 to 0.21.1 in /pykanidm (#1861)
  * chore(deps): bump proc-macro2 from 1.0.64 to 1.0.66 (#1860)
  * chore(deps-dev): bump ruff from 0.0.277 to 0.0.278 in /pykanidm (#1857)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1856)
  * chore(deps): bump actions/upload-pages-artifact from 1 to 2 (#1855)
  * Revert "something something token permissions (#1850)" (#1852)
  * something something token permissions (#1850)
  * Upgraded clap, removing atty as a dependency (#1849)
  * Ensure we dont use std hashmaps (#1848)
  * Improve selinux in tasks daemon (#1847)
  * Resolve issue with order of operations causing group memberships to disappear (#1845)
  * headless webdriver testing, starting on brotli feature (#1844)
  * chore(deps-dev): bump mkdocs-material from 9.1.17 to 9.1.18 in /pykanidm (#1835)
  * chore(deps): bump serde from 1.0.166 to 1.0.170 (#1843)
  * Fix a typo in the unix daemon debug (#1822)
  * chore(deps-dev): bump ruff from 0.0.275 to 0.0.277 in /pykanidm (#1833)
  * chore(deps): bump serde-wasm-bindgen from 0.4.5 to 0.5.0 (#1842)
  * chore(deps): bump proc-macro2 from 1.0.63 to 1.0.64 (#1841)
  * chore(deps): bump syn from 2.0.23 to 2.0.25 (#1840)
  * chore(deps): bump async-trait from 0.1.69 to 0.1.71 (#1839)
  * chore(deps): bump regex from 1.8.4 to 1.9.1 (#1838)
  * chore(deps): bump is-terminal from 0.4.8 to 0.4.9 (#1837)
  * chore(deps): bump serde_json from 1.0.99 to 1.0.100 (#1836)
  * Allow Authorization header in CORS preflight response (#1831)
  * chore(deps): bump pydantic from 1.10.10 to 1.10.11 in /pykanidm (#1834)
  * chore(deps-dev): bump pylint-pydantic from 0.1.8 to 0.2.0 in /pykanidm (#1832)
  * Add preflight headers (#1829)
  * Persist nonce through refresh to support client (#1826)
  * Cleanup spa handling (#1825)
  * 1792 public oauth clients (#1821)
  * 1812 1813 post axum cleanup (#1817)
  * Fix diagram colours (#1815)
  * Converting from tide to axum (#1797)
  * Add client UX for redirecting to an external portal for synced accounts (#1791)
  * Add cors policy (#1807)
  * Improve tasks daemon shutdown (#1806)
  * Improve durability of migrations (#1804)
  * clippy-izing an unsafe in pam (#1795)
  * chore(deps): bump pydantic from 1.10.9 to 1.10.10 in /pykanidm (#1803)
  * chore(deps): bump uuid from 1.3.4 to 1.4.0 (#1802)
  * chore(deps): bump tokio from 1.28.2 to 1.29.1 (#1801)
  * chore(deps): bump syn from 2.0.20 to 2.0.23 (#1800)
  * chore(deps): bump whoami from 1.4.0 to 1.4.1 (#1799)
  * chore(deps): bump quote from 1.0.28 to 1.0.29 (#1798)
  * 20230629 tpm keygen ... again (#1793)
  * Fixing the kanidmd healthcheck (#1789)
  * Name change history (#1727)
  * 20230628 tpm minor issue with key regen (#1790)
  * Still trying to fix the docs. (#1709)
  * Improve cli to support multi-domain handling. (#1786)
  * Started chasing noise, found some code to delete... (#1768)
  * Improve tpm key generation - improve unix config for tpms. (#1782)
  * chore(deps-dev): bump pytest from 7.3.2 to 7.4.0 in /pykanidm (#1771)
  * chore(deps-dev): bump mkdocs-material from 9.1.16 to 9.1.17 in /pykanidm (#1773)
  * chore(deps-dev): bump mypy from 1.3.0 to 1.4.1 in /pykanidm (#1784)
  * chore(deps): bump serde_json from 1.0.97 to 1.0.99 (#1778)
  * chore(deps): bump syn from 2.0.18 to 2.0.20 (#1779)
  * chore(deps): bump authlib from 1.2.0 to 1.2.1 in /pykanidm (#1777)
  * chore(deps): bump proc-macro2 from 1.0.60 to 1.0.63 (#1776)
  * chore(deps): bump libc from 0.2.146 to 0.2.147 (#1774)
  * chore(deps): bump gloo-net from 0.2.6 to 0.3.0 (#1772)
  * chore(deps-dev): bump ruff from 0.0.272 to 0.0.275 in /pykanidm (#1770)
  * Fix debian packaging (#1742)
  * Remove r2d2 - sad beep noises (#1766)
  * Kanidmd is a bit noisy (#1765)
  * Ux improvements - Allow enrolling other devices (#1764)
  * Make argon2id default pw hasher - improve parameter detection (#1762)
  * chore(deps): bump openssl from 0.10.54 to 0.10.55 (#1761)
  * Implement tpm binding of cached password hashes (#1754)
  * Mention client configuration in tool installation guide (#1756)
  * Remove scripts that are no longer required (#1759)
  * OAuth2 secret JSON (#1758)
  * Allow account locking with expire-at 'epoch' and 'now' (#1757)
  * Resolve codespell issues (#1753)
  * Add tls generator to main kanidmd (#1743)
  * Fix block_on in ssh authorised keys (#1752)
  * chore(deps-dev): bump mkdocs-material from 9.1.15 to 9.1.16 in /pykanidm (#1751)
  * chore(deps): bump gloo from 0.8.0 to 0.8.1 (#1750)
  * chore(deps-dev): bump pytest-mock from 3.10.0 to 3.11.1 in /pykanidm (#1749)
  * chore(deps): bump hashbrown from 0.13.2 to 0.14.0 (#1748)
  * 1737 1739 sync - map uidnumbers mail (#1741)
  * Add support for argon2id (#1736)
  * Disable neon on linux (#1740)
  * 20230614 unix account security - move account name deny to unixd (#1733)
  * fixed return value of add_ava_int (#1735)
  * unix_integration: also check running SELinux mode (#1704)
  * added pre_cand entries to both pre_modify and pre_batch_modify plugin functions (#1732)
  * 20230608 ldap sync (#1728)
  * Add acp allowing service accounts to clear their own sessions (#1731)
  * Declare when no applications are available (#1730)
  * Fix ip addr parse (#1729)
  * X-Forwarded-For catcher - improve ip addr parsing (#1725)
  * chore(deps): bump proc-macro2 from 1.0.59 to 1.0.60 (#1723)
  * chore(deps): bump url from 2.3.1 to 2.4.0 (#1722)
  * chore(deps-dev): bump pytest from 7.3.1 to 7.3.2 in /pykanidm (#1719)
  * chore(deps): bump libc from 0.2.145 to 0.2.146 (#1721)
  * chore(deps-dev): bump ruff from 0.0.270 to 0.0.272 in /pykanidm (#1720)
  * docs: fix typo in sync concepts (#1715)
  * chore(deps): bump regex from 1.8.3 to 1.8.4 (#1718)
  * chore(deps): bump pydantic from 1.10.8 to 1.10.9 in /pykanidm (#1717)
  * chore(deps): bump serde from 1.0.163 to 1.0.164 (#1716)
  * Absolutely minimal implementation (#1711)
  * Add further incremental replication tests (#1707)
  * Save two more kay strokes (#1708)
  * Documentation root directory 404 (#1706)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1697)
  * Improve diagnostic and docs of ldap bind requiring posix password (#1702)
  * #1680 redux - trying to fix docs again (#1692)
  * Automatically login &amp; reauth (#1691)
  * chore(deps-dev): bump coverage from 7.2.6 to 7.2.7 in /pykanidm (#1698)
  * chore(deps): bump libc from 0.2.144 to 0.2.145 (#1701)
  * chore(deps): bump openssl from 0.10.52 to 0.10.54 (#1700)
  * chore(deps): bump csv from 1.2.1 to 1.2.2 (#1699)
  * chore(deps): bump syn from 2.0.17 to 2.0.18 (#1696)
  * chore(deps): bump chrono from 0.4.24 to 0.4.26 (#1695)
  * chore(deps-dev): bump mkdocs-material from 9.1.14 to 9.1.15 in /pykanidm (#1694)
  * chore(deps): bump openssl-sys from 0.9.87 to 0.9.88 (#1693)
  * Documentation root directory 404 (#1681)
  * Crono expression parser fix (#1682)
  * Document OpenID connect setup for Miniflux (#1683)
  * chore(deps): bump cryptography from 39.0.1 to 41.0.0 in /pykanidm (#1684)
  * Improve the readme (#1679)
  * Move the socket startup to localise it to the acceptor (#1678)
  * SELinux support for kanidm-unixd-tasks daemon (#1661)
  * Resolve ability to delete ssh keys with spaces in tags (#1674)
  * Adding mdbook-template back for bookgen (#1660)
  * chore(deps-dev): bump coverage from 7.2.5 to 7.2.6 in /pykanidm (#1669)
  * chore(deps-dev): bump mkdocstrings from 0.21.2 to 0.22.0 in /pykanidm (#1671)
  * 20230526 incremental replication improvements (#1659)
  * chore(deps): bump regex from 1.8.1 to 1.8.3 (#1670)
  * chore(deps): bump hashbrown from 0.12.3 to 0.13.2 (#1668)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1667)
  * chore(deps): bump tokio from 1.28.1 to 1.28.2 (#1666)
  * chore(deps-dev): bump ruff from 0.0.269 to 0.0.270 in /pykanidm (#1665)
  * chore(deps): bump quote from 1.0.27 to 1.0.28 (#1664)
  * chore(deps): bump pydantic from 1.10.7 to 1.10.8 in /pykanidm (#1663)
  * fixing get-tags-action in book build (#1657)
  * Add more replication tests, improve some handling of tombstones. (#1656)
  * Bring back CpuOptLevel x86_64_v1 (#1590)
  * Doc fixes (#1658)
  * Identifiable tokens (#1623)
  * Add version tag to makefile images (#1654)
  * during service account recovery, remove incompatible credentials (#1650)
  * signal handling for tasks daemon (#1651)
  * Time travelling (#1648)
  * chore(deps): bump requests from 2.28.2 to 2.31.0 in /pykanidm (#1649)
  * 20230508 replication incremental (#1620)
  * chore(deps-dev): bump mkdocs-material from 9.1.12 to 9.1.14 in /pykanidm (#1642)
  * chore(deps): bump wasm-bindgen from 0.2.85 to 0.2.86 (#1647)
  * chore(deps): bump js-sys from 0.3.62 to 0.3.63 (#1646)
  * chore(deps): bump uuid from 1.3.2 to 1.3.3 (#1645)
  * chore(deps): bump proc-macro2 from 1.0.56 to 1.0.58 (#1644)
  * chore(deps): bump reqwest from 0.11.17 to 0.11.18 (#1643)
  * chore(deps-dev): bump ruff from 0.0.267 to 0.0.269 in /pykanidm (#1641)
  * Fix use-reset-token command hint (#1639)
  * chore(deps): bump pymdown-extensions from 9.9.2 to 10.0 in /pykanidm (#1638)
  * chore(deps-dev): bump mypy from 1.2.0 to 1.3.0 in /pykanidm (#1636)
  * chore(deps): bump wasm-bindgen-test from 0.3.34 to 0.3.35 (#1635)
  * chore(deps-dev): bump ruff from 0.0.265 to 0.0.267 in /pykanidm (#1634)
  * chore(deps): bump syn from 2.0.15 to 2.0.16 (#1633)
  * chore(deps): bump quote from 1.0.26 to 1.0.27 (#1628)
  * chore(deps): bump serde from 1.0.162 to 1.0.163 (#1632)
  * chore(deps-dev): bump mkdocs-material from 9.1.9 to 9.1.12 in /pykanidm (#1631)
  * chore(deps): bump tokio from 1.28.0 to 1.28.1 (#1629)
  * chore(deps): bump web-sys from 0.3.61 to 0.3.62 (#1627)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1626)
  * chore(deps): bump libc from 0.2.143 to 0.2.144 (#1625)
  * chore(deps): bump js-sys from 0.3.61 to 0.3.62 (#1624)
  * Update policy (#1619)
  * fixing up some spelling errors (#1618)
  * Update RELEASE_NOTES.md (#1616)
  * 20230505 replication groundwork - ruv consistency improvements (#1606)
  * chore(deps-dev): bump ruff from 0.0.263 to 0.0.265 in /pykanidm (#1608)
  * chore(deps-dev): bump mkdocs-material from 9.1.8 to 9.1.9 in /pykanidm (#1609)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1611)
  * chore(deps): bump serde from 1.0.160 to 1.0.162 (#1613)
  * chore(deps): bump libc from 0.2.142 to 0.2.143 (#1612)
  * chore(deps): bump pkg-config from 0.3.26 to 0.3.27 (#1610)
  * chore(deps-dev): bump mkdocs from 1.4.2 to 1.4.3 in /pykanidm (#1607)
  * github pages ... something is definitely going weird. (#1605)
  * token permissions! (#1604)
  * Using github actions might actually push a change (#1603)
  * looks like that's a bug (#1602)
  * fix things (#1601)
  * 20230506 ignore some references (#1600)
  * Harden migrate session to prevent duplicate migration errors (#1599)
  * reducing action concurrency load (#1598)
  * more testing cleanup (#1595)
  * Document that you need to tell Nginx or other proxies to use HTTP 1.1… (#1592)
  * sccache github actions fixes (#1593)
  * Start next dev cycle (#1589)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
</package>
<package pkgid="8c1b03cafa785ed44154eae1f147ec8a3057ee78444790ae207d3eff5fbc87d9" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.4.0~git2.770efa8" rel="bp156.7.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
</package>
<package pkgid="a6b1978b756b20507a727e70b1d356821f7813f98753d9b315483b4023d5db34" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.4.0~git2.770efa8" rel="bp156.7.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1692014400">- Resolve issues with fedora/centos build</changelog>
  <changelog author="william.brown@suse.com" date="1692619200">- Update to version 1.1.0~beta13~git7.1fb34a9:
  * Resolve incorrect time units on timeout (#2014)
  * Update cargo lock, docker fixes
  * 1982 service account access (#1985)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)</changelog>
  <changelog author="william.brown@suse.com" date="1698753600">- Update to version 1.1.0~rc15~git2.74f5c0f:
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)
  * Release 1.1.0-rc.15-dev
  * started writing docs and ended up in another rabbit hole (#2267)
  * CLI integration test beginnings (#2261)
  * chore(deps): bump the all group with 7 updates (#2266)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
  * Add book chapter + cli
  * Cargo fmt and clippy checks
  * Restrict posix passwords on ldap bind with config
  * Splitting the SPAs (#2219)
  * Bug chasing (#2257)
  * cargo fmt + clippy (#2241)
  * service-account or person validity show returns for non-existing identity (#2258)
  * don't need write if we are not writing (#2256)
  * adding service account patch methods (#2255)
  * .deb package build and docs fixes (#2252)
  * Auth flow docs (#2249)
  * pykanidm test code (#2202)
  * chore(deps): bump the all group with 5 updates (#2247)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
  * 20231019 1122 account policy basics (#2245)
  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
  * 20231014 account policy (#2218)
  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
  * Fix incorrect references to LDAP in sync (#2239)
  * Remove unused crate users (#2240)
  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
  * Windows build fixes and test coverage (#2220)
  * more space checks (#2234)
  * Fixing dependabot and its mistakes (#2232)
  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
  * OpenAPI/swagger docs autogen (#2175)
  * 20231012 346 name deny list (#2214)
  * Add file diagnosis (#2210)
  * fix RUV on startup, improve filter output (#2211)
  * Chasing yaks down dark alleyways (#2207)
  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
  * 20231008 remove expect used (#2191)
  * Thread naming and display (#2190)
  * Replication tweaks - try the most recent successful one and error less (#2189)
  * Chasing wooly quadrapeds again (#2163)
  * 68 20230929 replication finalisation (#2160)
  * In-system image storage (#2112)
  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
  * fix credential update intent defaults (#2162)
  * 68 20230919 replication configuration (#2131)
  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
  * Enforce TLS key size minimums (#2145)
  * bindaddress default doesn't match documentation (#2150)
  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
  * minor changes to speed up WASM tests (#2133)
  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
  * Typo (#2125)
  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
  * Yaleman/issue989 (#2111)
  * Cinco de yakko (#2108)
  * 68 20230912 session consistency (#2110)
  * Fix typo (#2109)
  * Implement DeviceAuthorizationGrant for MFA (#2079)
  * Schema dooby doo ... yon (#2103)
  * sqlite3 doesn't need to be installed on dev machines (#2104)
  * 68 20230908 replication attrunique (#2086)
  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
  * move from git2 to gix (#2085)
  * Schema-dooby-doo-part-trois (#2082)
  * CLI and test things (#2080)
  * 68 20230907 replication (#2081)
  * minor tweaks to Orca (#2077)
  * Changing build targets for debs (#2076)
  * Removing default features from git2 package (#2078)
  * 68 20230829 replication referential integrity (#2048)
  * Schema dooby doo part two (#2071)
  * 68 20230831 design replication coordinator (#2051)
  * improve wording of webauthn cli interaction (#2073)
  * When an empty body was returned, do request would error incorrectly (#2074)
  * update bug template, closes #2054 (#2055)
  * Yak hassling (#2059)
  * docs: api tokens are managed by idm_admin (#2072)
  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
  * Check in missing users crate for SELinux integration (#2050)
  * Add tests for X-Forwarded-For header (kinda) (#1957)
  * docs: fix miniflux oauth example (#2046)
  * Clear cache before verify on some low-level tests (#2044)
  * 68 20230828 replication of schema (#2045)
  * Update compact jwt (#2043)
  * Allow patching of crates from related projects (#2042)
  * pam multistep auth state machine (#2022)
  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
  * Authentication shortcut to get a RW session (#1993)
  * wopsies, missing imports (#2023)
  * idv cli (#2001)
  * Trying to fix the (current) container build failures (#2021)
  * pykanidm updoots (#2019)
  * 68 20230821 replication (#2020)
  * Configurable session timeouts (#1965)
  * fix: output an array in json mode for `kanidm group list` (#2016)
  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
  * docs: Update missed add_members command (#2018)
  * Less human strings more enums (#1989)
  * Resolve incorrect time units on timeout (#2014)
  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
  * reordering layers so the web server works in non-debug-mode (#1999)
  * 20230817 idv migration (#1992)
  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
  * Resolve issues with dyngroup members (#1986)
  * Revert "sqlite where IN for id entry (#1988)" (#1991)
  * sqlite where IN for id entry (#1988)
  * Identity verification feature (#1819)
  * 1982 service account access (#1985)
  * Fixing test release (#1983)
  * error handling and web server logging fixes (#1960)
  * Struct-ifying schema things (#1971)
  * Orca tweaks (#1963)
  * Fighting with zypper, tagging our images (#1964)
  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
  * Are we JSON yet? Kinda. But we're closer. (#1967)
  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
  * docs: Fix outdated oauth2 subcommands (#1969)
  * Allow one-character usernames (#1941)
  * resolver: Himmelblau needs old token for refresh (#1962)
  * updating python packages to close dependabot securiity alerts (#1956)
  * providing server configuration in the testkit::test macro (#1953)
  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
  * removing debug string (#1937)
  * Final v3 master x book deployment fix (#1936)
  * trying a different ref (#1935)
  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
  * another book round (#1933)
  * trying again (#1931)
  * fixed serialization of oauth2 token scope (#1930)
  * added compression layer for the pkg route (#1928)
  * Resolve build failiures when selinux is enabled (#1927)
  * Resolve issue with publishing (#1925)
  * Set dev version (#1924)</changelog>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
</package>
<package pkgid="1328272234f42f80eacb76625f01ceb58b05155ca7650adf8d4387b87abbdb3d" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.4.3~git1.078625c" rel="bp156.10.1"/>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
</package>
<package pkgid="e963d8a59ec6fd09ca5e373808f4cab9c53fa78b3dfe60303815ecf78ce490a9" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.4.3~git1.078625c" rel="bp156.10.1"/>
  <changelog author="william.brown@suse.com" date="1706097600">- Update to version 1.1.0~rc15~git8.122b6af:
  * Remove unused import that breaks builds on newer rust versions
  * Update to latest webauthn-rs version
  * fix version
  * Fix maint branch versions
  * Disable inconsistent test (#2278)</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
</package>
<package pkgid="7acc9c8a1e31114b47e1c72770e09addfdd5d1ecec3a6f89b8b4c5a11b389bdd" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.4.4~git0.c3dbf83" rel="bp156.13.1"/>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
</package>
<package pkgid="17ac372adf26ab23f03d463327d1c9d55429ae8d95f7e06193178ea08da83682" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.4.4~git0.c3dbf83" rel="bp156.13.1"/>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 1.1.0~rc16~git1.a917291:
  * Correct cargo versions
  * Release 1.1.0-rc.16 (#2483)
  * Fix for incorrect domain migration rollbacks (#2482)
  * Add tools for remigration and domain level raising (#2481)
  * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
  * Support SPN in groups claim (#2474)
  * Credential update tweaks (#2475)
  * Oauth2 pkce faq (#2473)
  * Fix debian versioning (#2472)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
  * chore(deps): bump the all group with 1 update (#2478)
  * Fix RUV trim (#2466)
  * 20240125 2217 client credentials grant (#2456)
  * docs: Add application passwords design document (#2427)
  * handling master docs (#2465)
  * update the artifact name in the download step (#2464)
  * Book SUMMARY.md: Fix part titles according to mdbook (#2463)
  * Update chat link, add keywords (#2462)
  * PyKanidm updates and testing (#2301)
  * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
  * 1222 what rights does anonymous have (#2436)
  * Fix inverted key/chain logic from TLS error improvement (#2453)
  * Improve TLS configuration errors (#2447)
  * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
  * chore(deps): bump the all group with 1 update (#2441)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
  * Return sshkey label to cli fields (#2440)
  * Add rfc8414 metadata (#2434)
  * Add test for delete referer invalid (#2435)
  * Clarify role of WebUI in README.md (#2431)
  * Adding max_ber_size option in config for ldap sync (#2416)
  * Debian build fixes (also the book) (#2400)
  * 2390 1980 allow native applications (#2428)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430)
  * cookies (#2426)
  * Clean RUV (#2424)
  * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425)
  * Upgrade replication to use anchors (#2423)
  * Minor fixes for oidc with single page applications (#2420)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421)
  * Use case insensitive match on substrings in line with ldap (#2419)
  * Change OAuth2 RS Origin from the CLI (#2418)
  * Add design diagrams (#2332)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410)
  * Fix deb release flow to find the matrix split artifacts (#2406)
  * 20231222 piv authentication (#2398)
  * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405)
  * Build the kanidm cli tools deb as well (#2402)
  * Force apply idm migrations to apply access controls (#2401)
  * fixing up the integration script (#2392)
  * chore(deps): bump the all group in /pykanidm with 8 updates (#2396)
  * chore(deps): bump the all group with 2 updates (#2395)
  * fix backup filename and regexp pattern for cleanup (#2386)
  * idprovider: Provide the keystore during auth (#2385)
  * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389)
  * daemon: Fix inverted logic on cache dir check (#2388)
  * Add improved domain migration framework and default MFA (#2382)
  * Trim and lowecase usernames (#2380)
  * Add DN as a virtual ldap attr (#2379)
  * fixing default for oauth2 request_parameter_supported metadata (#2378)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2375)
  * 20231218 ipa sync unix password (#2374)
  * chore(deps): bump the all group with 2 updates (#2372)
  * 1481 2024 access control rework (#2366)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368)
  * chore(deps): bump the all group with 3 updates (#2363)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362)
  * 249 2024 managed by syntax (#2359)
  * typo (#2356)
  * 20231204 ipa sync minor improvements (#2357)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355)
  * Unixd build/debugging updates (#2350)
  * 20231129 webauthn attestation (#2351)
  * Fix handling of TPM in some trait contexts (#2347)
  * docs: miniflux added pkce support (#2352)
  * Using proper axum http headers lib for compatibility (#2348)
  * Bearer should send with same caps we accept (#2345)
  * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341)
  * docs: improve grammar for book/src/developers/faq.md (#2343)
  * Expose machine key in auth phase (#2340)
  * 20231128 freeipa migration (#2338)
  * Unix crossbuild scripts and docs (#2326)
  * Expose TPM in more interface places (#2334)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2336)
  * Adding kanidm client config docs and notes ref #2248 (#2333)
  * Update to the latest compact-jwt version (#2331)
  * Adding env var configs for the server (#2329)
  * Better errors when TPM PIN file not found (#2330)
  * 20231120 2320 sssd compat (#2328)
  * Resolve future send issue with keystore (#2311)
  * chore(deps): bump the all group in /pykanidm with 6 updates (#2325)
  * chore(deps): bump the all group with 3 updates (#2324)
  * Add test (#2323)
  * OAuth2 scopes validation logging missing details (#2317)
  * Add systemd deps for unixd (#2314)
  * 20231115 oauth2 authreq (#2310)
  * Docs - Bump Fedora 36 to Fedora 38 (#2309)
  * chore(deps): bump the all group with 4 updates (#2306)
  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305)
  * Remove serde json from wasm (#2304)
  * Fix spelling (#2303)
  * 20231109 1122 credential class (#2300)
  * Moving daemon tracing to OpenTelemetry (#2292)
  * 20231101 add id cert to unixint (#2284)
  * Docs fixes for #2296 (#2297)
  * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294)
  * chore(deps): bump the all group with 8 updates (#2293)
  * pw min length in account policy (#2289)
  * WASM troubleshooting docs closes #2286 (#2291)
  * oauth2 typo (#2290)
  * Update notes to avoid some possible interpretation errors (#2288)
  * Feature: kanidm CLI pulling OpenAPI schema (#2285)
  * Feature: configurable replication poll interval (#2283)
  * Minor improvements to incoming replication (#2279)
  * Problems with bash completion autocomplete (#2281)
  * Remove unused imports and clippy lint (#2276)
  * Rework ldap bind routine (#2268)
  * Disable inconsistent test (#2278)
  * make versions consistent
  * 1.1.0 rc.15 dev post-release (#2271)</changelog>
  <changelog author="william.brown@suse.com" date="1708430400">- Add ipa-sync service
- Update to version 1.1.0~rc16~git2.6fb4fac:
  * List of supported features (#2499)</changelog>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
</package>
<package pkgid="c903555a31b8d89fc2d21d46fa0ccfad0f546802c51d76d8399496c9ba57e6c0" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.4.5~git0.a7fabde" rel="bp156.18.1"/>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
</package>
<package pkgid="69ad02dff31189a23f067d81a11d249c1cff565c450bf7f6b4bab4f979c690bf" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.4.5~git0.a7fabde" rel="bp156.18.1"/>
  <changelog author="william.brown@suse.com" date="1709035200">- Update to version 1.1.0~rc16~git3.81298e8:
  * Allow /dev/tpmrm0 on older systemd versions (#2587)</changelog>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
</package>
<package pkgid="53954be544e3b4a7037f8623bbf4463f80ffb3a6ef9d3aec4fe6e4c0e3c4ed91" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.4.6~git0.3ce4e0f" rel="bp156.21.1"/>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
</package>
<package pkgid="db6067ce5f6120a877dda87e2e8c139b9def19a0f077221fd0a66bc8e2ab10d2" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.4.6~git0.3ce4e0f" rel="bp156.21.1"/>
  <changelog author="william.brown@suse.com" date="1709121600">- Update to version 1.1.0~rc16~git4.d407844:
  * Remove zstd feature</changelog>
  <changelog author="william.brown@suse.com" date="1711454400">- Update to version 1.1.0~rc16~git6.e51d0de:
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * return consent map to service account (#2604)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
</package>
<package pkgid="e6b3cc35288bf4f17c8c5a6f4b1f358363c9192771c233c7b8828e757b6fb4ea" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.5.0~git1.0fa57fc" rel="bp156.24.1"/>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
</package>
<package pkgid="810bfeb65f4242cd1fd642b23fdc972626f22853686df7cf3ad9b2498bd50027" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.5.0~git1.0fa57fc" rel="bp156.24.1"/>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 1.1.0~rc16~git7.8a1b7b5:
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)</changelog>
  <changelog author="william.brown@suse.com" date="1714564800">- Update to version 1.2.0~git0.9efa91a:
  * Release 1.2.0 (#2733)
  * Prepare 1.2.0
  * Release 1.2.0 prep (#2724)
  * Minor upgrade fixes (#2722)
  * Resolve OAuth2 client/rs confusion (#2719)
  * Improve access control doc to describe privilege access mode (#2721)
  * Support 1.1 attribute in LDAP (#2720)
  * Add mail support to groups (#2718)
  * Add session limit (#2714)
  * added profile and `memberof` search to the basic model (#2712)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
  * Fix typo in oauth2 error message (#2715)
  * 20240409 rework orca markov (#2699)
  * Begin the basis of the key provider model (#2640)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
  * chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
  * chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
  * fix(TotpDigits): fix typo in TryFrom impl (#2702)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
  * chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
  * Windows Hello Authentication requirements (#2688)
  * chore(deps): bump the all group with 1 update (#2690)
  * chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
  * Require kanidm-unixd before kanidm-unixd-tasks (#2687)
  * kanidm unixd mfa capabilities (#2672)
  * Add Grafana integration to OAuth2 documentation (#2685)
  * [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
  * ldap-sync: allow to use attrs more than once (#2676)
  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
  * chore(deps): bump the all group with 1 update (#2682)
  * fix(docs): packaging section improved (#2677)
  * Fix developer ethics link (#2674)
  * fix(docs): filename, header and title mismatch fixes (#2660)
  * 20240312 concread upgrade (#2668)
  * fix(docs): capitalization fixes (#2659)
  * fix(docs): links corrected (#2661)
  * fix api typo (#2657)
  * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2662)
  * chore(deps): bump the all group in /pykanidm with 9 updates (#2656)
  * Update bootstrap 5.0.2 to 5.3.3 &amp; minor UI fixes (#2650)
  * fix(docs): typos, grammar and broken link fixes (#2644)
  * increase severity for "{:?} !⊆ allowed: {:?}" (#2648)
  * Add instructions on how to enable PKCE in Nextcloud (#2647)
  * 20230224 2437 orca remodel (#2591)
  * Add initial design for key domains (#2564)
  * Add upgrade process, improve developer readme (#2635)
  * Doc unix client support (#2633)
  * 20240301 systemd uid (#2602)
  * expose group patch for parity (#2628)
  * Adding a builtin class for all built-in things (#2603)
  * apidoc tag fixes (#2625)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#2620)
  * Fix missing entry managed by on anonymouns (#2623)
  * Notes on privilege-expiry (#2622)
  * SPAs really are stupid sometimes (#2609)
  * apidoc fixes (#2614)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2615)
  * Typo fixes (#2610)
  * Return consent scope to service account (#2605)
  * OpenAPI schema fixes (#2590)
  * WASM test fixing (#2595)
  * Feature object graph (#2518)
  * Add domain version test framework (#2576)
  * Fix the miniflux oauth2 example (#2598)
  * docs(monitoring): Fix syntax for OpenTelemetry config (#2594)
  * 20240221 2489 cleanup api v1 (#2573)
  * Changing to allow startup without a config file (#2582)
  * Allow /dev/tpmrm0 on older systemd versions (#2587)
  * Adjust output of claim maps for better parsing (#2566)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2585)
  * improved error description for commit_credential_update (#2579)
  * Make /status less noisy (#2574)
  * chore(deps): bump cryptography from 42.0.2 to 42.0.4 in /pykanidm (#2567)
  * Add system range protection (#2565)
  * Fix string comparison in Debian build script (#2409)
  * of course I started looking at clippy things and now I can't stop (#2560)
  * 20240216 308 resource limits (#2559)
  * fix(oauth2): typo in basic path (#2562)
  * Adding duplicate-finder script (#2550)
  * prctl compile-time fixes, also chasing lints (#2558)
  * Removing unused constant and updating docstring for LDAP bind address (#2556)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2553)
  * Support Policy Updates (#2536)
  * chore(deps): bump cryptography from 42.0.0 to 42.0.2 in /pykanidm (#2548)
  * Re-enable HW tpm support (#2531)
  * Add further hardening for system services (#2542)
  * fixing the test script (#2547)
  * when the HTTPS server fails, handle that gracefully (#2546)
  * Fix update intent ttl parameters (#2540)
  * radius build workflow fixes (#2541)
  * Conflict nscd, start before sshd (#2539)
  * Fix incorrect documentation elements (#2533)
  * Remove replication is in dev flag (#2535)
  * Ordering auth methods in the CLI (#2508)
  * Set lowercase owner name in tag (#2534)
  * Add code_challenge_methods_supported to OIDC discovery (#2525)
  * Himmelblau requires the machine key for unix_user_get (#2523)
  * Extend on Apache example (#2524)
  * chore(deps): bump the all group in /pykanidm with 4 updates (#2520)
  * List of supported features (#2499)
  * Update to latest dev version (#2486)</changelog>
  <changelog author="william.brown@suse.com" date="1716033600">- Update to version 1.2.1~git0.ba82b1a:
  * 2756 - resolve dyngroups not loading correctly at startup (#2778)</changelog>
  <changelog author="william.brown@suse.com" date="1717070400">- Update to version 1.2.2~git0.c4153c9:
  * Resolve incorrect handling of tokens in logout flow (#2795) (#2803)</changelog>
  <changelog author="william.brown@suse.com" date="1723032000">- Update to version 1.3.0~git0.e2a563f:
  * Release 1.3.0 (#2941)
  * New orca models (#2909)
  * Run rust_build CI between multiple Rust versions (#2939)
  * Bump the all group across 1 directory with 9 updates (#2938)
  * Bump the all group in /pykanidm with 4 updates (#2937)
  * fixing println bug (#2935)
  * Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
  * clippying all the things (#2931)
  * docs reordering and cleanup (#2932)
  * Add scim proto to kanidm, refactor to improve serde performance. (#2933)
  * 20240725 allow connection to older servers (#2930)
  * Ubuntu/Debian buildy scripty tweaky things (#2928)
  * kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
  * Improve workflow when account policy isnt satisfied (#2927)
  * Docs rework (#2919)
  * Bump the all group in /pykanidm with 4 updates (#2924)
  * Bump the all group with 5 updates (#2925)
  * Substring Indexing (#2905)
  * Oauth2 in htmx (#2912)
  * Strict redirect URL enforcement (#2917)
  * Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
  * fix typos (#2908)
  * Add missing groups scope to Grafana example scope-map (#2914)
  * build profiles: rename release_suse_generic to release_linux (#2907)
  * 20240716 check mkdir (#2906)
  * Fix issues with suspend reported by himmelblau (#2911)
  * Implement home_mount_path logic (#2894)
  * Forcing the http2 feature on hyper, but also chasing some out of date packages (#2896)
  * Updating service type per kanidm/kanidm#2892 (#2898)
  * making the internals of kanidmclientconfig public for other users (#2895)
  * enable build htmx in docker (#2893)
  * Fixes the logout flow in htmx and improves the login error dialog (#2889)
  * htmx logout tidy up (#2884)
  * Tidy up replication poll interval (#2883)
  * Bump the all group with 8 updates (#2899)
  * Bump the all group in /pykanidm with 2 updates (#2900)
  * Add a migration for future versions that will notify and warn about the removal of security keys. (#2885)
  * Update mtls cert lifetime (#2886)
  * Bump zipp from 3.16.2 to 3.19.1 in /pykanidm in the pip group (#2888)
  * [htmx] Apps page (#2868)
  * Bump the all group in /pykanidm with 3 updates (#2879)
  * Bump the all group across 1 directory with 10 updates (#2881)
  * 20240703 htmx (#2870)
  * Bump certifi from 2023.7.22 to 2024.7.4 in /pykanidm (#2877)
  * Offer configuration of images for Oauth2 resources  (#2665)
  * 2818 2511 oauth2 urls (#2867)
  * Vale Edits 0.1 (#2869)
  * added orca docker file, make target and credential reset capabilities (#2846)
  * 20240620 htmx (#2854)
  * Bump the all group in /pykanidm with 2 updates (#2864)
  * Bump the all group with 5 updates (#2865)
  * Fixed link to the developers guide (#2862)
  * Tweaks to make the makefile make things make easier.
  * Update sssd.md
  * adding freebsd target_os
  * Bump the all group across 1 directory with 8 updates (#2852)
  * Bump the all group in /pykanidm with 3 updates (#2849)
  * Bump the all group with 2 updates (#2850)
  * Configurable thread count (#2847)
  * 20240613 performance improvements (#2844)
  * Bump urllib3 from 2.0.7 to 2.2.2 in /pykanidm (#2843)
  * Allow providers to be box dyn (#2794)
  * Bump the all group in /pykanidm with 2 updates (#2842)
  * illumos support (#2838)
  * 20240611 performance (#2836)
  * Bump the all group across 1 directory with 3 updates (#2837)
  * Bump the all group across 1 directory with 5 updates (#2835)
  * 20240607 2417 piv (#2829)
  * fix: typos in OpenApi (#2827)
  * Bump authlib from 1.3.0 to 1.3.1 in /pykanidm (#2834)
  * Bump the all group with 7 updates (#2811)
  * Double shutdown doesn't help! (#2828)
  * Stats collection improvements and a bunch of other stuff (#2820)
  * Add development taint flag to prevent mismatch of server versions (#2821)
  * Remove small ambiguity in docs (#2823)
  * lowering "access search" security log levels (#2819)
  * Better WebAuthn and other error responses (#2608)
  * Update examples/server_container.toml (#2814)
  * Bump the all group in /pykanidm with 3 updates (#2812)
  * 20240530 nightly warnings (#2806)
  * Regrets Dot Pee Enn Gee (#2804)
  * Resolve incorrect handling of tokens in logout flow (#2795)
  * 2756 - resolve invalid loading of dyngroups at startup (#2779)
  * WIP: serialization and domain info setting wonkiness (#2791)
  * Bump the all group in /pykanidm with 3 updates (#2799)
  * fix DB_PATH variable propagation (#2797)
  * feat: add support for ldap compare request (#2780)
  * Add ACP checking to exists operations. (#2790)
  * Allow name write privileges to be withheld (#2773)
  * Check for same version with backup/restore (#2789)
  * Revive Cookies. (#2788)
  * Fixing up the docs deploy script (#2787)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2781)
  * Update our domain TGT level (#2776)
  * Fix PIN and MFA Code pam prompts (#2759)
  * Update design for KRC (#2713)
  * Add some extra comparisons to the readme (#2768)
  * strip out some debug messages unless *really* debugging. (#2767)
  * Update dev version (#2726)
  * Don't need to check versions when there's an intermediary reporting connectivity issues (#2758)
  * updating text to fix typo, add more info (#2761)
  * Changing TOTP "copy" box from form field to code block. (#2765)
  * chore(deps-dev): bump ruff in /pykanidm in the all group (#2763)
  * Use fully qualified container URLS (#2754)
  * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2747)
  * chore(deps-dev): bump jinja2 from 3.1.3 to 3.1.4 in /pykanidm (#2752)
  * Fixing up build for rust 1.78, hiding things behind cfg(test) etc. (#2753)
  * Fix broken links in &lt;details&gt; sections (#2737)
  * Update Webauthn and Base64 (#2734)
  * Add some metadata for lib macros (#2735)
  * chore(deps): bump the all group in /pykanidm with 7 updates (#2729)
  * Clean up utils password rand generation. (#2727)</changelog>
  <changelog author="william.brown@suse.com" date="1723118400">- Update to version 1.3.1~git0.eed7c07:
  * Fix incorrect logic in cred update flow (#2956)
  * Resolve maintainer bikeshedding</changelog>
  <changelog author="william.brown@suse.com" date="1723291200">- Update to version 1.3.2~git0.229b0cc:
  * Release 1.3.2
  * Prevent bug in pam (#2960)
  * Reduce client logging noise
  * Improve migration error message (#2959)</changelog>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
</package>
<package pkgid="7817121c3189ec752778cfc02eec7446f8f80506c1487ad670263d6fa03ef3a8" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.6.2~git0.a20663ea8" rel="bp156.29.1"/>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
</package>
<package pkgid="602e9b35108bdc0c59eb9478b9a14d316279e261053ea308d0f8af6f51869e13" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.6.2~git0.a20663ea8" rel="bp156.29.1"/>
  <changelog author="william.brown@suse.com" date="1724155200">- Update to version 1.3.3~git0.f075d13:
  * Release 1.3.3
  * Mail substr index (#2981)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
</package>
<package pkgid="ebeef7014fb4ebd521a901617d3fcc28c610e5ec7e68b158bc5aa4a1ec347034" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.6.3~git0.389493eb1" rel="bp156.32.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
</package>
<package pkgid="9bb254ece09034fddf928d3b37afab72d305dd7a01cb6a3ac33deebbd2e13885" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.6.3~git0.389493eb1" rel="bp156.32.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="william.brown@suse.com" date="1730462400">- Update to version 1.4.0~git1.c297c3f:
  * Docker makefile latest
  * Release 1.4.0
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Fix release note date and typos (#3153)
  * Release 1.4.0-pre
  * Release Notes (#3149)
  * Remove WASM (#3148)
  * Rewrite "choosing a domain", add other considerations (#3147)
  * Harmonize UI and remove unused css (#3033)
  * ripping out some extra packages (#3146)
  * OAuth2 Device flow foundations (#3098)
  * htmx by default (#3145)
  * Support reloading via systemd (#3144)
  * Chore: Refactor Groups to be more generic (#3136)
  * 20241024 1271 cert reload on SIGHUP (#3140)
  * Update docs, improve locking (#3141)
  * 2856 - use tags for containers on build (#3139)
  * Fix image when too smol (#3138)
  * yale's rabbit-hole-chasing-htmx-fixing-megapatch (#3135)
  * ipinfo should be single value (#3137)
  * Tidy the reauth ui (#3130)
  * Add missing schemas to get OpenAPI validation to pass. (#3129)
  * Change some OperationError into HTTP Bad Request (400). (#3125)
  * Bump the all group with 11 updates (#3127)
  * Bump the all group in /pykanidm with 5 updates (#3128)
  * Fill in some Swagger API docs for a few v1 endpoints. (#3126)
  * Diagram Improvements in Book (#3124)
  * Fix passkey auth flow redirects (#3123)
  * Improve handling of inaccesible shadow file (#3122)
  * Log HTTP Not Found (404) as info log level. (#3119)
  * more errors for the people (#3121)
  * 20241017 unixd home (#3113)
  * 20241017 3107 token ttl (#3114)
  * docs: Update kanidm_ppa instructions for new repo logic (#3117)
  * fix(lint) minor lint fix for unnecessary match use (#3118)
  * Totp input changes (#3115)
  * Add the strict flag on client creates for developers (#3111)
  * Working scim entry get for person (#3088)
  * Add nss testframework and fallback when daemon offline (#3093)
  * Improve deb packaging, add aarch64 (#3083)
  * Cache buster buster (#3091)
  * fix(http): status content type should be JSON (#3096)
  * Bump the all group across 1 directory with 7 updates (#3106)
  * Bump the all group across 1 directory with 10 updates (#3103)
  * 20241012 attr name SCIM fix (#3102)
  * Scim add EntryReference  (#3079)
  * Bump the all group across 1 directory with 3 updates (#3094)
  * Fix Increment Replication Post Upgrade (#3089)
  * Remove white background from square logo (#3087)
  * Add support for group extension (#3081)
  * 20240921 ssh keys and unix password in credential update session (#3056)
  * Fix landing and redirect URLs for GitLab, add some useful links (#3055)
  * [htmx] Make it harder to miss the save button on the cred update page (#3013)
  * Add example Outline config (#3076)
  * 20240925 cleanups (#3060)
  * Add instructions for unlinking Homebrew Rust on macOS (#3085)
  * Don't reprompt for login when no session exists in cli (#3082)
  * Make good on some TechDebt (#3084)
  * Feat: Adding POSIX Password fallback (#3067)
  * Bump the all group across 1 directory with 13 updates (#3080)
  * Complete the implementation of the posix account cache (#3041)
  * 20240926 tech debt (#3066)
  * Fix migration of last mod cid (#3065)
  * Increase totp secret size (#3061)
  * Bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 in the all group (#3075)
  * Improve pipe handling on linux (#3069)
  * reformat oauth2 URL list, highlight legacy bits (#3062)
  * scim_proto: fix incorrect language tag (#3064)
  * Add ownCloud example config (#3059)
  * Add example config for JetBrains Hub / YouTrack (#3058)
  * Bump the all group with 8 updates (#3053)
  * Bump the all group in /pykanidm with 3 updates (#3054)
  * Document basic authenticating GitLab to Kanidm (#3050)
  * fix(doc): updating docker container ref (#3049)
  * Resolve incorrect SCIM Sync serialisation (#3047)
  * CLI image error nicening (#3037)
  * Add rfc7009 and rfc7662 metadata to oidc discovery (#3046)
  * More openapi tweaks (#3038)
  * Bump the all group with 6 updates (#3044)
  * Bump the all group in /pykanidm with 3 updates (#3043)
  * fix(docs): make it clearer that bearer auth is a thing (#3031)
  * implements additional traits for filter types (#3036)
  * 20240810 SCIM entry basic (#3032)
  * CreatedAt/ModifiedAt fix (#3034)
  * Pykanidm fixes (#3030)
  * 20240906 Attribute as an Enum Type (#3025)
  * Bump the all group with 9 updates (#3029)
  * Bump the all group in /pykanidm with 4 updates (#3028)
  * Credentials page/Self cred update flow UI improvements (#3012)
  * 20240828 Support Larger Images, Allow Custom Domain Icons (#3016)
  * MemberOf in search implies DirectMemberOf (#3024)
  * fix(kanidm): don't allow empty string fields on CLI (#3018)
  * Bump cryptography from 42.0.4 to 43.0.1 in /pykanidm in the pip group (#3023)
  * generate completions for elvish and fish (#3015)
  * Bump the all group with 4 updates (#3021)
  * Bump the all group in /pykanidm with 3 updates (#3022)
  * 20240820 SCIM value (#2992)
  * fix(daemon): handling IPv6 addresses in healthcheck (#3004)
  * fix(webui): Javascript errors after server-side update blocking login. Fixed after cache invalidating (#3011)
  * OAuth2 Token Type (#3008)
  * Bump the all group in /pykanidm with 4 updates (#3007)
  * Bump the all group with 8 updates (#3006)
  * Spattering of oauth2 stuff (#3000)
  * Doc multi instance (#2997)
  * Expose group rename (#2999)
  * feat: self cred update flow (#2995)
  * Better Error Message (#2998)
  * Add missing group for application admin (#2991)
  * enforcen den clippen (#2990)
  * 20240817 group mail acp (#2982)
  * 20240810 application passwords (#2968)
  * Bump the all group with 17 updates (#2986)
  * Bump the all group in /pykanidm with 3 updates (#2985)
  * Mail substr index (#2981)
  * Doc format, add api-token section (#2975)
  * [HTMX] small profile improvements (#2974)
  * Foundations of pam/nss multi resolver
  * TLS, no seriously. (#2963)
  * Update suse.md to avoid Authentication token manipulation error (#2973)
  * Add Alpine Linux installation instructions (#2871)
  * Bump the all group across 1 directory with 10 updates (#2966)
  * [HTMX] User settings (#2929)
  * Bump the all group in /pykanidm with 2 updates (#2965)
  * Docs updates (#2961)
  * Bump aiohttp from 3.10.0 to 3.10.2 in /pykanidm in the pip group (#2962)
  * Prevent bug in pam (#2960)
  * Improve migration error message (#2959)
  * Fix incorrect logic in cred update flow (#2956)
  * Docker-and-docs-fixes (#2954)
  * Bump the all group in /pykanidm with 5 updates (#2952)
  * Bump the all group with 10 updates (#2953)
  * Added orca flag to extend privileged authentication expiry (#2949)
  * In honour of SebaT, error on db lock acq timeout (#2947)
  * Add measurement of lock acquisition (#2946)
  * [htmx] Credential Update page  (#2897)
  * Update to 1.4.0-dev (#2943)</changelog>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
</package>
<package pkgid="b4a359b7fe9a021adb0d9329c59f88d2021d78e235025c06e13d8c9f2958601d" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.6.4~git2.a4b3b0f7b" rel="bp156.35.1"/>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
</package>
<package pkgid="dde2b11d6fb9dcbcba044314dd2d04f2846072b03c550d6a1db2c720adac893a" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.6.4~git2.a4b3b0f7b" rel="bp156.35.1"/>
  <changelog author="william.brown@suse.com" date="1730635200">- Update to version 1.4.0~git2.770efa8:
  * Resolve incorrect handling of rhost in pam (#3171)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Update to version 1.4.1~git0.ad93202:
  * Release 1.4.1
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)</changelog>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
</package>
<package pkgid="ae0bbed96e0100ed6456fd79a704a7f44e9c41e658119511d0ed02acb76aac64" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.7.0~git0.621ac7be0" rel="bp156.38.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
</package>
<package pkgid="348c3442c5d2ae969bd5f40838fb664ce0c5c68cc23c75b0f7d43f707830de2b" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.7.0~git0.621ac7be0" rel="bp156.38.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git0.fb00176:
  * Release 1.4.3
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Release 1.4.2
  * Re-migrate all acps to force updating (#3184)
  * security - low - fault in migrations (#3182)</changelog>
  <changelog author="william.brown@suse.com" date="1732276801">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
</package>
<package pkgid="8bfb0174dd7e87018f86d7d71a4e54a950f193ee3c983c9f3d4d984760021f9d" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.7.1~git0.130a31d29" rel="bp156.41.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
</package>
<package pkgid="f51ce95b0ff7bc1d4275833b6fbf941348b97b706a8003e1132579f607a24731" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.7.1~git0.130a31d29" rel="bp156.41.1"/>
  <changelog author="william.brown@suse.com" date="1732276800">- Update to version 1.4.3~git1.078625c:
  * Update to latest fido-mds-tool (#3230)</changelog>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
</package>
<package pkgid="d07ce8e3f3f9a483b570bc7d39bed3c36aa8bae42669a4ae2f8374d9092c8546" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.7.2~git0.d331ea986" rel="bp156.44.1"/>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
</package>
<package pkgid="9c3b5fed02cb270c132eb2d66e367613b64c30ddaf0a41d477774d1c774396e8" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.7.2~git0.d331ea986" rel="bp156.44.1"/>
  <changelog author="william.brown@suse.com" date="1733227200">- Update to version 1.4.4~git0.c3dbf83:
  * Release 1.4.4
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * Clear invalid tokens from unix resolver (#3256)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Yaleman/issue3229 (#3239)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
</package>
<package pkgid="0ca9718b745e5a420ed09b4cfa65f4ada856400530195d52fb9a2c11ff478ae4" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.7.3~git0.10847190e" rel="bp156.47.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
</package>
<package pkgid="48b8d18d338ee88156ff4b2b1b40e2c1c2ca2d814a227768a774e31dbdc1d491" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.7.3~git0.10847190e" rel="bp156.47.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1733918400">- Require system-user-nobody to prevent install ordering issue with
  invalid rpc/statd users</changelog>
  <changelog author="william.brown@suse.com" date="1734782400">- Update to version 1.4.5~git0.a7fabde:
  * Release 1.4.5
  * nss/pam resolver should reauth faster (#3309)
  * Further SCIM sync testing, minor fixes (#3305)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Add CORS headers to jwks and userinfo (#3283)</changelog>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
</package>
<package pkgid="2e31fe71b06a683846ddaeec3f47ebc04dd51615a7e5df8841274303efcb3cad" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.8.0~git0.42d0e864c" rel="bp156.50.1"/>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
</package>
<package pkgid="e112cb1798091f37fd299ba062c3e07a636305e7192c5bc490d398998e43a771" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.8.0~git0.42d0e864c" rel="bp156.50.1"/>
  <changelog author="william.brown@suse.com" date="1737633600">- Update to version 1.4.6~git0.3ce4e0f:
  * Release 1.4.6
  * Small UI updates. (#3361)
  * Allow modification of password minimum length (#3345)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * cookies don't clear unless you set domain (#3332)</changelog>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
</package>
<package pkgid="c2c290af14195fe02daa90fe11e8749939c0ccdea9f7b7a8a46c178e24bde068" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.8.1~git0.3d1bdfd13" rel="bp156.53.1"/>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
</package>
<package pkgid="522dbdb62181d9dfa3f4c65ba3028d410bd8af88055ea67df4524d522ee42006" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.8.1~git0.3d1bdfd13" rel="bp156.53.1"/>
  <changelog author="william.brown@suse.com" date="1739275200">- Update to version 1.4.6~git1.3f47d7f:
  * fix: PAM on Debian, enable use_first_pass by default (#3326)</changelog>
  <changelog author="william.brown@suse.com" date="1739275201">- Update to version 1.5.0~git1.0fa57fc:
  * Update makefile for docker
  * Release 1.5.0
  * 20250209 pre release (#3409)
  * 20250206 freebsd ports (#3404)
  * Resolve kanidm-unix auth-test bug (#3405)
  * chore: Remove empty scopemaps (#3170)
  * Feat: Allowing spn query with non-spn structured data in LDAP (#3400)
  * SSH Keys in Credentials Update (#3027)
  * 20250205 3369 firefox pin (#3403)
  * Correctly return that uuid2spn changed on domain rename (#3402)
  * Fix the password reset form and possible resolver issue (#3398)
  * Add handle_group_error to cli client (#3399)
  * Improve spans in unixd (#3397)
  * Allow OAuth2 with empty state parameter (#3396)
  * #3387 - RADIUS Startup fixin's (#3388)
  * Allow POST on oauth userinfo (#3395)
  * OpenBSD support (#3381)
  * Bump openssl from 0.10.69 to 0.10.70 in the cargo group (#3391)
  * Add /.well-known/change-password endpoint (#3382)
  * Bump the all group across 1 directory with 7 updates (#3385)
  * extend oauth2 examples with gitea (#3351)
  * Bump the all group with 22 updates (#3376)
  * Book: Added small section on primary cred fallback (#3365)
  * Added shell.nix to create dev environment (#3362)
  * fix(ci): Add setup-oras step to include ORAS CLI for container builds on ubuntu-24.04. (#3368)
  * 20250114 3325 SCIM access control (#3359)
  * Small UI updates. (#3361)
  * Bump the all group in /pykanidm with 2 updates (#3366)
  * Repair systemd reload notifications (#3355)
  * fix: unrecoverable error page doesn't include logo or domain name (#3352)
  * Bump jinja2 from 3.1.4 to 3.1.5 in /pykanidm in the pip group (#3358)
  * Bump the all group in /pykanidm with 4 updates (#3356)
  * 20250110 eo fixes (#3353)
  * fix(server/config): reduce string allocations (#3350)
  * Add ssh_publickeys as a claim for oauth2 (#3346)
  * Allow modification of password minimum length (#3345)
  * Add OAuth2 `response_mode=fragment` (#3335)
  * Resolve passkey regression (#3343)
  * Renaming "TOTP" in the login flow (#3338)
  * Bump the all group in /pykanidm with 3 updates (#3339)
  * Bump actions/checkout from 2 to 4 in the all group (#3341)
  * Add support for prefers-color-scheme using Bootstrap classes. (#3327)
  * Fix /var/run/kanidm-unixd permission (#3342)
  * Javascript linting (#3329)
  * Ignore anonymous in oauth2 read allow access (#3336)
  * cookies don't clear unless you set domain (#3332)
  * 20250102 freebsd client (#3333)
  * fix: PAM on Debian, enable use_first_pass by default (#3326)
  * Bump the all group with 6 updates (#3324)
  * Bump the all group in /pykanidm with 2 updates (#3323)
  * Bump the all group with 3 updates (#3317)
  * Bump the all group in /pykanidm with 7 updates (#3316)
  * nss/pam resolver should reauth faster (#3309)
  * Update to latest webauthn-rs/time (#3315)
  * kanidm-unixd example config enfixening (#3314)
  * Further SCIM sync testing, minor fixes (#3305)
  * book: explain how to use fido-mds-tool (#3231)
  * client: read attestation CA list JSON from file (#3232)
  * Automatically trigger passkeys on login view (#3307)
  * Re-add enrol another device flow
  * Improved Cookie Removal
  * Allow opt-in of easter eggs (#3308)
  * Allow reseting account policy values to defaults (#3306)
  * Incorrect member name in groups (#3302)
  * SCIM Sync Missing Annotation (#3300)
  * Ignore system users for UPG synthesiseation (#3297)
  * Limit OAuth2 resumption to session (#3296)
  * Use specific errors for intent token revoked (#3291)
  * Autocomplete password during reauth with TOTP (#3290)
  * Bump the all group with 6 updates (#3294)
  * Bump mozilla-actions/sccache-action from 0.0.6 to 0.0.7 in the all group (#3295)
  * Bump the all group in /pykanidm with 2 updates (#3293)
  * remove unused webauthn features. (#3286)
  * Add CORS headers to jwks and userinfo (#3283)
  * Cleanup webauthn features (#3285)
  * Minor tweaks to cred reset ui (#3284)
  * Bump the all group across 1 directory with 6 updates (#3280)
  * Allow group managers to modify entry-managed-by (#3272)
  * pykanidm: Make a little dry. (#3281)
  * Bump the all group with 5 updates (#3278)
  * pykanidm: Add retrieving credential reset token for a person. (#3279)
  * Cleanup of println and other outputs (#3266)
  * Canonicalize path for user shell check (#3265)
  * Check DNS on replication loop start not at task start (#3243)
  * Work around systemd race condition (#3262)
  * fix(docstrings): minor lack of formatting breaking things (#3260)
  * Devcontainertainertainer (#3251)
  * grafana: update example to work with strict redirect uri checking (#3259)
  * Bump the all group in /pykanidm with 5 updates (#3257)
  * Bump the all group with 6 updates (#3258)
  * 20240927 SCIM put (#3151)
  * Clear invalid tokens from unix resolver (#3256)
  * Clippy Lints (#3255)
  * Allow OAuth2 loopback redirects if the path matches (#3252)
  * Correctly display domain name on login (#3254)
  * Display account_id during success/deny paths in unixd (#3253)
  * s/idm_people_self_write_mail/idm_people_self_mail_write/g (#3250)
  * handle missing map_group setting in config (#3242)
  * owncloud: Add SameSite=Lax config for cross-domain auth (#3245)
  * Bump the all group across 1 directory with 7 updates (#3238)
  * Yaleman/issue3229 (#3239)
  * Bump the all group across 1 directory with 12 updates (#3235)
  * Update to latest fido-mds-tool (#3230)
  * Warn when v2 options are used in v1 unixd config (#3228)
  * Bump aiohttp from 3.10.10 to 3.10.11 in /pykanidm in the pip group (#3223)
  * Resolve UI Auth Loop with OAuth2 (#3226)
  * Harden transport in pam unixd (#3227)
  * Improve warning around invalid JWT deserialisation (#3224)
  * Update and fix server config files in examples. (#3225)
  * Change CLI oauth2 command from set-display-name to set-displayname for consistency. (#3212)
  * Add docs on customising Kanidm. (#3209)
  * Correct spelling of occurred (#3222)
  * Bump the all group across 1 directory with 13 updates (#3202)
  * UI/Feature polish (#3191)
  * Prevent Invalid MFA Reg States (#3194)
  * Change CSS for applications so SVG scales nicely in Firefox. (#3200)
  * 20241109 3185 max age (#3196)
  * Hoist max_age to prevent incorrect deserialisation (#3190)
  * Use correct oauth2 manage acp (#3186)
  * Re-migrate all acps to force updating (#3184)
  * Bump the all group across 1 directory with 2 updates (#3180)
  * security - low - fault in migrations (#3182)
  * fix(kanidmd): Print replication cert to stdout (#3179)
  * Correct missing CSP header (#3177)
  * Resolve pam services not always having a tty (#3176)
  * Resolve incorrect handling of rhost in pam (#3171)
  * chore: Made oauth2 scopes required in CLI (#3165)
  * More "choosing a domain" revision (#3161)
  * Bump jsonschema from 0.21.0 to 0.26.0 in the all group (#3157)
  * Update missing inputmode numeric when adding a new TOTP. (#3160)
  * Improve OAuth2 authorisation ux (#3158)
  * Fix attribute scim sync attribute naming (#3159)
  * Change to text input and use numeric mode for TOTP prompts. (#3154)
  * Bump the all group in /pykanidm with 3 updates (#3156)
  * Fix release note date and typos (#3153)
  * Begin 1.5.0 Development Cycle (#3150)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1739620800">- Fix building on CentOS_9</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
</package>
<package pkgid="15ea13b5123430e977162eef91302d3076877dfdb1ff197f4407558aa8d2c18b" name="kanidm-unixd-clients" arch="aarch64">
  <version epoch="0" ver="1.8.4~git0.2449805e3" rel="bp156.58.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
  <changelog author="william.brown@suse.com" date="1764331200">- Update to version 1.8.2~git0.387e2ce61:
  * Release 1.8.2
  * Prevent deprecation warnings affecting release
  * Ignore CredentialTypeMinimum during migrations (#3991)
  * Report correct client IP in request log (#3990)
  * Ensure that privileged sessions expirations are synced (#3984)
  * Missing constraint on skip upgrade process (#3983)
  * Document the upgrade process through versions. (#3982)
  * lib crypto should not depend on proto (#3975)
  * Change AttributeUniqueness to yield BAD_REQUEST (#3974)
  * fix: kanidm_build_profiles has unwrap which can cause builds to fail (#3973)</changelog>
  <changelog author="william.brown@suse.com" date="1764331201">- Update to version 1.8.3~git0.471c021f2:
  * Release 1.8.3
  * Resolve infinite reauth loop</changelog>
  <changelog author="william.brown@suse.com" date="1765368000">- Update to version 1.8.4~git0.2449805e3:
  * Release 1.8.4
  * Handle concurrent pam sessions. (#4001)
  * fix: correcting parsing of backup compression input (#3995)
  * fixing up docs builds (#4006)</changelog>
</package>
<package pkgid="c79de0b72ddb7371bddf27f697811ce8f31fcf14442e33c5542630444a741d60" name="kanidm-unixd-clients" arch="x86_64">
  <version epoch="0" ver="1.8.4~git0.2449805e3" rel="bp156.58.1"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1740139200">- Enable aarch64 for Fedora/Centos</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 1.5.0~git2.21c2a1bd0:
  * fix: documentation fail (#3555)</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- Update to version 1.6.0~git0.d7ae0f336:
  * Release 1.6.0
  * Avoid openssl for md4
  * Fixes #3586, inverts the navbar button color (#3593)
  * Release 1.6.0-pre
  * chore: Release Notes (#3588)
  * Do not require instances to exist during optional config load (#3591)
  * Fix std::fmt::Display for some objects (#3587)
  * Drop fernet in favour of JWE (#3577)
  * docs: document how to configure oauth2 for opkssh (#3566)
  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)
  * Bump the all group in /pykanidm with 2 updates (#3581)
  * Update dependencies, fix a bunch of clippy lints (#3576)
  * Support spaces in ssh key comments (#3575)
  * 20250402 3423 proxy protocol (#3542)
  * fix(web): Preserve SSH key content on form validation error (#3574)
  * Bump the all group in /pykanidm with 3 updates (#3572)
  * Bump the all group in /pykanidm with 2 updates (#3564)
  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  * Improve token handling (#3553)
  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  * Update fs4 and improve klock handling (#3551)
  * Less footguns (#3552)
  * Unify unix config parser (#3533)
  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  * Bump the all group in /pykanidm with 8 updates (#3547)
  * implement notify-reload protocol (#3540)
  * Allow versioning of server configs (#3515)
  * 20250314 remove protected plugin (#3504)
  * Bump the all group with 10 updates (#3539)
  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  * Bump the all group in /pykanidm with 4 updates (#3537)
  * Add max_ber_size to freeipa sync (#3530)
  * Bump the all group in /pykanidm with 5 updates (#3524)
  * Update Concread
  * Update developer_ethics.md (#3520)
  * Update examples.md (#3519)
  * Make schema indexing a boolean instead of index types (#3517)
  * Add missing lld dependency and fix syntax typo (#3490)
  * Update shell.nix to work with stable nixpkgs (#3514)
  * Improve unixd tasks channel comments (#3510)
  * Update kanidm_ppa_automation reference to latest (#3512)
  * Add set-description to group tooling (#3511)
  * packaging: Add kanidmd deb package, update documentation (#3506)
  * Bump the all group in /pykanidm with 5 updates (#3508)
  * 20250313 unixd system cache (#3501)
  * Support rfc2307 memberUid in sync operations. (#3466)
  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  * Update Traefik config example to remove invalid label (#3500)
  * Add uid/gid allocation table (#3498)
  * 20250225 ldap testing in testkit (#3460)
  * Bump the all group in /pykanidm with 5 updates (#3494)
  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  * Handle form-post as a response mode (#3467)
  * book: fix english (#3487)
  * Correct paths with Kanidm Tools Container (#3486)
  * 20250225 improve test performance (#3459)
  * Bump the all group in /pykanidm with 8 updates (#3484)
  * Use lld by default on linux (#3477)
  * 20250213 patch used wrong acp (#3432)
  * Android support (#3475)
  * Changed all CI/CD builds to locked (#3471)
  * Make it a bit clearer that providers are needed (#3468)
  * Fix incorrect credential generation in radius docs (#3465)
  * Add crypt formats for password import (#3458)
  * build: Create daemon image from scratch (#3452)
  * address webfinger doc feedbacks (#3446)
  * Bump the all group across 1 directory with 5 updates (#3453)
  * [htmx] Admin ui for groups and users management (#3019)
  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  * Accept invalid certs and fix token_cache_path (#3439)
  * Accept lowercase ldap pwd hashes (#3444)
  * TOTP label verification (#3419)
  * Rewrite WebFinger docs (#3443)
  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  * book: add OAuth2 Proxy example (#3434)
  * Exempt idm_admin and admin from denied names. (#3429)
  * Book fixes (#3433)
  * ci: uniform Docker builds (#3430)
  * 20240213 3413 domain displayname (#3425)
  * Correct path to kanidm config example in documentation. (#3424)
  * Support redirect uris with query parameters (#3422)
  * Update to 1.6.0-dev (#3418)
  * Remove white background from square logo. (#3417)
  * feat: Added webfinger implementation (#3410)
  * Bump the all group in /pykanidm with 7 updates (#3412)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1746619202">- bsc#1242642 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1746705600">- Update to version 1.6.1~git0.2e4429eca:
  * Release 1.6.1
  * Resolve reload of oauth2 on startup (#3604)</changelog>
  <changelog author="william.brown@suse.com" date="1746792000">- Update to version 1.6.2~git0.a20663ea8:
  * Release 1.6.2
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings</changelog>
  <changelog author="william.brown@suse.com" date="1747224000">- Update to version 1.6.3~git0.389493eb1:
  * Release 1.6.3
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * cargo publish (#3613)</changelog>
  <changelog author="william.brown@suse.com" date="1749643200">- Update to version 1.6.4~git0.e1d26ed10:
  * Release 1.6.4
  * Allow deferring spans in unixd
  * Dark mode improvements (#3660)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Fix healthcheck to use ENV for config path (#3656)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- Update to version 1.6.4~git2.a4b3b0f7b:
  * Remove dead code
  * OpenSUSE build fix</changelog>
  <changelog author="william.brown@suse.com" date="1753963200">- Update to version 1.7.0-pre~git0.7d9da9dc8:
  * Release 1.7.0-pre
  * 20250729 pre release (#3756)
  * Helps to enable features like defer spans (#3755)
  * Downgrade notify-debouncer (#3747)
  * Reduce memory usage on unixd (#3754)
  * Bump the all group with 4 updates (#3753)
  * 20250723 application passwords again (#3748)
  * Docs oauth2 examples (#3750)
  * Groups WebUI, modify description (#3734)
  * Improve replication logging (#3746)
  * 20250711 type migrations (#3741)
  * Bump the all group with 3 updates (#3743)
  * Use constants for /etc/shadow and related paths (#3740)
  * fix: don't show people's whole tokens in debugs (#3742)
  * Updates to makefile (#3736)
  * Add a new paragraph in the installation quickstart for installing required client tools, and clarify the client tool setup paragraph (#3735)
  * Bump the all group with 4 updates (#3737)
  * Add ppc64le support for docker images (#3733)
  * Basic interface to get and regenerate the RADIUS password (#3728)
  * book: fix command example in pam_and_nsswitch.md (#3732)
  * fix docgen (#3731)
  * Fix for Failed to deserialize query: missing field 'state' (#3726)
  * Add user facing SCIM pagination / sorting (#3725)
  * Admin UI Group name modification (#3717)
  * fix typo in documentation: tls_path to tls_key (#3727)
  * Pre-validate and extract UAT into ClientAuthInfo (#3714)
  * Security policy updates (re: #3719) (#3722)
  * Fix using wrong template when setting POSIX password (#3719) (#3720)
  * Resolve startup failure with client TLS certificates (#3712)
  * Bump the all group with 2 updates (#3718)
  * Simple group list (#3713)
  * Update repos (#3711)
  * 20250621 application passwords (#3700)
  * Update docs, doc fmt (#3710)
  * Apply review feedback
  * Correctly log connection information
  * Refactor middleware/extractors
  * [htmx] basic profile updating (#2994)
  * Correct 389DS command (#3707)
  * Schema again (#3706)
  * examples: small grammar fix (#3705)
  * Clippy (#3702)
  * 20250627 update hsm crypto (#3701)
  * Update 389 content sync instructions (#3699)
  * Corrections to radius examples (#3697)
  * fix: wording (#3696)
  * Update radius.md (Explain: NAS == Network Access Server) (#3691)
  * updating docs around packages (#3695)
  * 20250618 rustls (#3687)
  * fix: error message that wasn't an error (#3690)
  * Only generate passwords on service accounts (#3688)
  * Add hmac 256 for cryptography operations (#3663)
  * Update Nextcloud example (#3683)
  * Bump the all group with 8 updates (#3684)
  * Allow deferring spans in unixd (#3680)
  * OpenSUSE build fix (#3681)
  * Dark mode improvements (#3660)
  * Add port examples for server.toml (#3679)
  * Fix SCIM filter parser for quoted values with spaces and escaped quotes (#3673)
  * fix: strip comments from UNIX files before parsing (#3674)
  * Bump the all group across 1 directory with 11 updates (#3675)
  * Start to implement SCIM apis (#3535)
  * Fix healthcheck to use ENV for config path (#3656)
  * maint: rewrite crypto Password::try_from (#3637)
  * doc(book): Add  option to Nextcloud Oauth2.0 example (#3654)
  * Bump the all group with 4 updates (#3655)
  * Make it clearer that the http address section is needed (#3652)
  * TODO trimming (#3641)
  * Investigate and reduce memory consumption of unixd (#3645)
  * Swap bytes mut at buffer limits (#3651)
  * Clippy for 1.87 (#3644)
  * fix: Improve unixd &amp; unixd-tasks startup coupling (#3638)
  * Bump the all group with 2 updates (#3648)
  * reload schema before verify (#3643)
  * Defend against split_at panic (#3636)
  * Fix minor issue with untagged version handling (#3634)
  * Move shadow processing out of task event loop (#3631)
  * Dont specify config path in container (#3630)
  * Accept SSHA with different salt lengths (#3629)
  * Bye poetry, hi uv for python things (#3627)
  * Resolve flaw with ssh key parse if the key has no comment (#3628)
  * Indicate that this is an ip list, not a range (#3626)
  * Test for corrupted unicode in SSH keys, keep the key title on error/resubmit (#3618)
  * Reduce replication logging verbosity
  * Bump the all group across 1 directory with 7 updates (#3623)
  * Bump the all group in /pykanidm with 2 updates (#3621)
  * cargo publish (#3613)
  * fix: clippy
  * maint: typo in log message
  * Set kid manually to prevent divergence
  * Order keys in application JWKS / Fix rotation bug
  * Fix toml issues with strings
  * OAuth2 Client ID's should be processed as lowercase (#3605)
  * Resolve reload of oauth2 on startup (#3604)
  * Bump petgraph from 0.7.1 to 0.8.1 in the all group (#3595)
  * Bump the all group in /pykanidm with 2 updates (#3596)
  * Avoid openssl for md4 (#3594)
  * Fixes #3586, inverts the navbar button color (#3593)
  * Update to 1.7.0-dev (#3592)</changelog>
  <changelog author="william.brown@suse.com" date="1754049600">- Update to version 1.7.0~git0.621ac7be0:
  * Release 1.7.0
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)</changelog>
  <changelog author="william.brown@suse.com" date="1754481600">- Update to version 1.7.1~git0.130a31d29:
  * Release 1.7.1
  * Update tracing-forest
  * Handle SEC1 private key (#3761)</changelog>
  <changelog author="william.brown@suse.com" date="1755259200">- Update to version 1.7.2~git0.d331ea986:
  * Release 1.7.2
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Break-glass account disable command (#3780)
  * Make it clearer why the user can't login with unixd (#3778)
  * Improve argon2id parameter search speed (#3768)</changelog>
  <changelog author="william.brown@suse.com" date="1755864000">- Update to version 1.7.3~git0.10847190e:
  * Release 1.7.3
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)</changelog>
  <changelog author="william.brown@suse.com" date="1762948800">- Update to version 1.8.0~git0.42d0e864c:
  * Release 1.8.0
  * 20251108 lld (#3944)
  * Improve uid/gid overlap message during IAM migration (#3943)
  * Release 1.8.0-pre
  * Release Prep (#3938)
  * 20251029 hmac name uniqueness (#3931)
  * sssshhhhh quiet there. (#3906)
  * Add support for proxyv1 (#3935)
  * 20251031 nss sync conn persist (#3921)
  * Improve offline authentication (#3934)
  * 20251005 multiple accept (#3933)
  * Add CSS to support forced-colors on the toggle switch (#3932)
  * Prevent replication certificate renewal deadlock
  * fix: ensure CLI exits with non-zero code on HTTP client errors (#3929)
  * Bump the all group with 5 updates (#3927)
  * 20251015 OIDC auth source (#3905)
  * Bump the all group with 2 updates (#3913)
  * Bump the all group with 2 updates (#3914)
  * Prevent users saving their credentials if there are none (#3805)
  * Fix passkey typos (#3907)
  * fix: Replace letter "d" by sink (#3909)
  * Bump the all group with 33 updates (#3898)
  * Fix: set OAuth2 JTI to session ID  (#3901)
  * Open app links in new tabs (#3899)
  * 20251009 account/group schema changes (#3880)
  * [fix] Mail attribute on service accounts not accessible (#3893)
  * Correct RADIUS API token generation examples (#3890)
  * Foundations of message sending (#3878)
  * 20251010 drop eckeys (#3882)
  * Remove systemd notify-reload. (#3885)
  * Bump the all group with 3 updates (#3884)
  * 20250801 reference entries (#3863)
  * 20251009 3829 OIDC groups (#3879)
  * Bump the all group with 5 updates (#3876)
  * 20251003 im silly (#3874)
  * When no upgrade checks are performed, issue a status: PASS (#3873)
  * Example of ipv4 to ipv6 addr mapping. (#3871)
  * 20250919 csp again (#3856)
  * client_secret_post auth for oauth2 endpoints (#3833)
  * Fix some CLI things (#3870)
  * Bump the all group with 6 updates (#3869)
  * Use connection address for Proxy::Local Requests (#3868)
  * Dont prevalidate UAT on oauth2 routes (#3865)
  * Backup Compression (#3821)
  * fix: always throw error when pam_allowed_login_groups is empty in Kanidm unixd (#3840)
  * update oauth2 outline config example (#3826)
  * Syntax errors in openapi.json (#3859)
  * fix: stop duplicating logs in otel mode (#3704)
  * Update fedora docs, start to add authselect profile (#3806)
  * Document oauth2 shortnames in book (#3857)
  * Bump the all group with 9 updates (#3861)
  * fix: Revert adding fetching ui hints to the reset-credentials flow. (#3831)
  * 20250912 unixd performance (#3846)
  * Fix readme file for better readability (#3775)
  * Updates for rust 1.90 (#3855)
  * Add password check api (#3847)
  * Bump the all group with 3 updates (#3853)
  * Add form-action localhost to csp (#3849)
  * Bump the all group across 1 directory with 8 updates (#3845)
  * Bump actions/setup-python from 5 to 6 in the all group (#3842)
  * docs: Don't enable unixd Kanidm provider in safe default config (#3839)
  * Add yescrypt support (#3844)
  * fix: spelling (#3841)
  * Bump the all group with 2 updates (#3836)
  * Bump tracing-subscriber from 0.3.19 to 0.3.20 in the cargo group (#3832)
  * CLI gardening (#3819)
  * Bump the all group with 7 updates (#3823)
  * Bump actions/upload-pages-artifact from 3 to 4 in the all group (#3824)
  * Prevent memory exhaustion on freebsd builds (#3818)
  * Make it clearer why acceptor isnt available (#3812)
  * Minor: reduce logging verbosity during debug (#3810)
  * Handle IP addresses in replication SAN field (#3811)
  * Update to use the codec properly (#3807)
  * Show the admin page in the navbar when the user has experiment ui hint. (#3793)
  * Bump actions/checkout from 4 to 5 in the all group (#3803)
  * Bump the all group with 5 updates (#3804)
  * Update whatwg email validation regex (#3797)
  * Fix account recover-disable edge case (#3796)
  * Dynamic version for centos/fedora repository (#3794)
  * Resolve replication show-cert issue (#3792)
  * Add json codec wrapper for unix integration (#3789)
  * Break-glass account disable command (#3780)
  * Bump the all group across 1 directory with 11 updates (#3790)
  * Bump slab from 0.4.10 to 0.4.11 in the cargo group (#3788)
  * [webui] add members to group (#3786)
  * Bump actions/download-artifact from 4 to 5 in the all group (#3785)
  * Make it clearer why the user can't login with unixd (#3778)
  * fix: bump HSTS age to 2 years + 1 second (#3779)
  * updating packages (#3774)
  * Improve argon2id parameter search speed (#3768)
  * Improve error messages during server startup to identify failing cert… (#3771)
  * Update docs re PA and google (#3772)
  * Forget username if user no longer wants to be remembered (#3770)
  * 20250802 handle sec1 keys (#3769)
  * Trying to clean up order of operations in kanidm_unixd_tasks (#3762)
  * Bump the all group with 7 updates (#3764)
  * Provide correct access for RADIUS service accounts (#3759)
  * Fix a couple of commands in the OAuth2 Proxy examples (#3758)
  * Design doc for email messaging (#3729)
  * 20250725 unixd access token (#3751)
  * 20250729 dev version (#3757)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1763035200">- Resolve Leap:15 build issues</changelog>
  <changelog author="william.brown@suse.com" date="1763553600">- Update to version 1.8.1~git0.3d1bdfd13:
  * Release 1.8.1
  * Small fixes (#3965)
  * Make log messages more verbose for issues with resources server (#3954)
  * unixd_tasks: update home alias symlink conditionally and atomically (#3947)
  * Manually handle form bytes to allow optional encoding (#3968)
  * Improve handling of ready event (#3967)
  * Fix typo in kanidm-ldap-sync (#3964)</changelog>
  <changelog author="william.brown@suse.com" date="1764331200">- Update to version 1.8.2~git0.387e2ce61:
  * Release 1.8.2
  * Prevent deprecation warnings affecting release
  * Ignore CredentialTypeMinimum during migrations (#3991)
  * Report correct client IP in request log (#3990)
  * Ensure that privileged sessions expirations are synced (#3984)
  * Missing constraint on skip upgrade process (#3983)
  * Document the upgrade process through versions. (#3982)
  * lib crypto should not depend on proto (#3975)
  * Change AttributeUniqueness to yield BAD_REQUEST (#3974)
  * fix: kanidm_build_profiles has unwrap which can cause builds to fail (#3973)</changelog>
  <changelog author="william.brown@suse.com" date="1764331201">- Update to version 1.8.3~git0.471c021f2:
  * Release 1.8.3
  * Resolve infinite reauth loop</changelog>
  <changelog author="william.brown@suse.com" date="1765368000">- Update to version 1.8.4~git0.2449805e3:
  * Release 1.8.4
  * Handle concurrent pam sessions. (#4001)
  * fix: correcting parsing of backup compression input (#3995)
  * fixing up docs builds (#4006)</changelog>
</package>
<package pkgid="e3fe6967eaea02f9aa864c64343333a553a1d6c35e0603c15c9fdb47f55f83c3" name="kbfs" arch="aarch64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="5140e41c14f66d7bd931d8821144be5db7d70e551a4a00178fa2adb7ce3c51b2" name="kbfs" arch="i586">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="328dc33dac36372259e6f5e0b9320eb6bd5588f9393e502ba619b072c716af16" name="kbfs" arch="ppc64le">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="1eab5ebda6050b2f998e4c983078c4cbd0b61ed8a063fc94607c75b861134497" name="kbfs" arch="s390x">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="471e796e3330dfe57d3d64cf93dbcbcbb5cd6566dd07b526e33cc8702afe99a8" name="kbfs" arch="x86_64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="cbb433587a4faf775c51e007e031b95fe39d734c943fba550310bab1fe21b0d7" name="kbfs" arch="aarch64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="59fa76b07a3eb30a602e6d40bfc47a25ae8b60ea843daf1a57131043a78a5567" name="kbfs" arch="i586">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="4173178d5cd15045972dfa2e0d173d017c724eb17a029f71284947e010d41186" name="kbfs" arch="ppc64le">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="dbed19f9e0b67a87f42333300d8053d71b7b4a19c9fb4e2dcaa33abc85f65f52" name="kbfs" arch="s390x">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="7f533f70d8f17180a92ce612cccbbb932d4d14d98ee969d1ed83657156929090" name="kbfs" arch="x86_64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="50482e47423dfe5f898fdb028492e3cfece7ba55ae9a3c741ed584292a0a56a6" name="kbfs-git" arch="aarch64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="be0f1353dee6df640f1de567acd2a2d4f83dcbdc465d6cd35844954714337295" name="kbfs-git" arch="i586">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="c3a1318e4ba71d8b8907029b5f5a012591d83d3122566dedb897e7ec5db7d957" name="kbfs-git" arch="ppc64le">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="5b3fd0fea28ac1858f14acf22db3e0da18d61c111d85b6b4fe5113440763282b" name="kbfs-git" arch="s390x">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="ffd99a097b702b84cecb6a6c74767e2120230e728bd85bb0badb771a9737e2ea" name="kbfs-git" arch="x86_64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="7c4b4b1830616a9cef9a837062f0671d4cc375cceda77a32cf16e436c8dc47fe" name="kbfs-git" arch="aarch64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="9fa6d6196107afde6341dbbeaefeac8578bdae8afef8bf3752c3017468cb8d6a" name="kbfs-git" arch="i586">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="aa92d610548db19f59c800f3316eaa65c965350ba674a1bf12a575d8612dd98b" name="kbfs-git" arch="ppc64le">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="5039ff3ab9707b820e3da9d78825428d2926f9cd485f70cf102179d9f1314df2" name="kbfs-git" arch="s390x">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="a72e283bf76dcf04dda9eb6958e7d20a24926b9fad69f7b55a502d0326fdf8b9" name="kbfs-git" arch="x86_64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="d397af2fb8788e2ad55bf97bb9a4a15c38a0e3f56ddf7ef2306d369602eb57dd" name="kbfs-tool" arch="aarch64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="19d20a480b8bed4a51af13571e5621f513e2965a9f9bda4b0852636d8bb3aef8" name="kbfs-tool" arch="i586">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="f4d2e021371d16333f3d1bdb29b6d6dd28c3e3b1f1c28cd3bf9b875ff3c2f37e" name="kbfs-tool" arch="ppc64le">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="0f56068368d1b977ba5fad71b1711267442ae15bcb0c1fb961960b582888321c" name="kbfs-tool" arch="s390x">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="1a3e8eae011066791a319c103dc769e87f60a6829173035a1b1b6a8f25019114" name="kbfs-tool" arch="x86_64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="751a716a1bca1716af95ece25487b5ef51c52b49e9f414d46efc687472d1a70d" name="kbfs-tool" arch="aarch64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="a06be4f4ef04159b72a5f1bedf5464789eb9dc6a7873ba5075d19e792161ba61" name="kbfs-tool" arch="i586">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="ec0f3059b4db691299c7af075bedc786dfdb630aa051658dbcf8f40a66a3e4e1" name="kbfs-tool" arch="ppc64le">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="6f3b209a3af5037cdde95c0ad33deaad7e16abac28ed463484381811159f38ab" name="kbfs-tool" arch="s390x">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="6b76ebaf5664db99e8c6b64a9a3dbbf93b7fdafea61c1ffdf26d3b3c350506e6" name="kbfs-tool" arch="x86_64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="ad11aa858516f405eed17dfe34bec9cb9e014126568f1c20fb28a5680106c6b1" name="kbuild" arch="aarch64">
  <version epoch="0" ver="0.1.9998+svn3613" rel="bp156.2.3.1"/>
  <changelog author="dvaleev@suse.com" date="1434110400">- Rework ppc64le patch. Previous one was totally wrong.
- Modified patch ppc64le.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1435320000">- Update to version 0.1.9998svn2784:
  many changes detailed in upstream url from svn 2720 to 2784.
  http://trac.netlabs.org/kbuild/timeline?from=2015-06-26&amp;daysback=365
  http://trac.netlabs.org/kbuild/changeset?old_path=%2F&amp;old=2784&amp;new_path=%2F&amp;new=2720
- Dropped patches:
  kbuild-kmk-makefile-am.patch
- Rebased patches:
  kbuild-glob.patch
  ppc64le.patch
  kbuild-timestamps.diff
  kbuild-pthread.diff
- All above changes allow to build package for ppc64/ppc64le archs</changelog>
  <changelog author="luizluca@tre-sc.jus.br" date="1469102400">- Update to version 0.1.9998svn2814:
  Changes detailed in upstream url from svn 2784 to 2814.
  http://trac.netlabs.org/kbuild/changeset?old_path=%2F&amp;old=2784&amp;new_path=%2F&amp;new=2814
- Rebased patches:
  ppc64le.patch</changelog>
  <changelog author="ro@suse.de" date="1478952000">- add aarch64.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Add kbuild-gcc7.patch: Fix build with GCC7 (boo#1039375): we also
  need the definition of strlcpy on Linux; only *BSD has this by
  default.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1508673600">- Update to version 0.1.9998svn3110. VirtualBox 5.2.0 needs this one to build.
  Changes detailed in upstream url from svn 2815 to 3110.
- Rebased patches
- Removed test for openSUSE 12.3 from spec file.</changelog>
  <changelog author="dmueller@suse.com" date="1519128000">- add use-alloca.patch (bsc#1079838)</changelog>
  <changelog author="schwab@suse.de" date="1519128001">- glob-lstat.patch: Do not assume glibc glob internals
- glob-interface.patch: Support GLIBC glob interface version 2</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1549713600">- Add libreadline6 to the BuildRequires list.
- Changed %doc to %license for COPYING as directed by osc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1549800000">- Changed spec file to require readline-devel, not a specific libreadline version.
  Thanks to Jan Engelhardt &lt;jengelh@inai.de&gt; for suggestion.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1549800001">- Returned changelist back to a %doc.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1576584000">- Modernise spec file</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1585915200">- Add gcc10-fno-common-fix.patch in order to fix boo#1160274.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1598875200">- strsignal.patch: use strsignal instead of sys_siglist (bsc#1175268)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598875201">- update to svn3427:
  * 3 years of changes, see http://trac.netlabs.org/kbuild/timeline
- remove patches:
  gcc10-fno-common-fix.patch, glob-interface.patch,
  use-alloca.patch, kbuild-gcc7.patch, kbuild-glob.patch,
  strsignal.patch: upstream or obsolete</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598961600">- Add byacc to BuildRequires fixes problems with bison 3.7 (bsc#1175268)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1717761600">- Make kbuild buildable with GCC 14 (boo#1225792)
  * Changes to configure machinery so that it does not fail and detect
    what it has detected with previous GCC versions.
    (kBuild-configure-c99.patch, kBuild-configure-c99-2.patch)
  * Add many missing includes (kBuild-c99.patch).
  * Fix an actual bug in a call to eval_buffer that also manifests as
    a C99 violation (kBuild-c99-2.patch).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1726833600">- Update to snapshot 0.1.9998+svn3613
  * Qt6 support
- Switch all patches to the same patch level (p1)
- Delete kbuild-armv7l.diff (nonsensical change),
  kBuild-configure-c99.patch, kBuild-configure-c99-2.patch,
  kBuild-c99.patch, kBuild-c99-2.patch (obsolete)
- Rework ppc64le.patch: reuse ppc64 arch enumerator value;
  implement unconditional trap macro
- Rework aarch64.patch: define aarch64 as a full alias of arm64</changelog>
</package>
<package pkgid="911e954f1b89413131fbbb87e6c3620f3027f2d19dad87e51cdc63da0761d613" name="kbuild" arch="ppc64le">
  <version epoch="0" ver="0.1.9998+svn3613" rel="bp156.2.3.1"/>
  <changelog author="dvaleev@suse.com" date="1434110400">- Rework ppc64le patch. Previous one was totally wrong.
- Modified patch ppc64le.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1435320000">- Update to version 0.1.9998svn2784:
  many changes detailed in upstream url from svn 2720 to 2784.
  http://trac.netlabs.org/kbuild/timeline?from=2015-06-26&amp;daysback=365
  http://trac.netlabs.org/kbuild/changeset?old_path=%2F&amp;old=2784&amp;new_path=%2F&amp;new=2720
- Dropped patches:
  kbuild-kmk-makefile-am.patch
- Rebased patches:
  kbuild-glob.patch
  ppc64le.patch
  kbuild-timestamps.diff
  kbuild-pthread.diff
- All above changes allow to build package for ppc64/ppc64le archs</changelog>
  <changelog author="luizluca@tre-sc.jus.br" date="1469102400">- Update to version 0.1.9998svn2814:
  Changes detailed in upstream url from svn 2784 to 2814.
  http://trac.netlabs.org/kbuild/changeset?old_path=%2F&amp;old=2784&amp;new_path=%2F&amp;new=2814
- Rebased patches:
  ppc64le.patch</changelog>
  <changelog author="ro@suse.de" date="1478952000">- add aarch64.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Add kbuild-gcc7.patch: Fix build with GCC7 (boo#1039375): we also
  need the definition of strlcpy on Linux; only *BSD has this by
  default.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1508673600">- Update to version 0.1.9998svn3110. VirtualBox 5.2.0 needs this one to build.
  Changes detailed in upstream url from svn 2815 to 3110.
- Rebased patches
- Removed test for openSUSE 12.3 from spec file.</changelog>
  <changelog author="dmueller@suse.com" date="1519128000">- add use-alloca.patch (bsc#1079838)</changelog>
  <changelog author="schwab@suse.de" date="1519128001">- glob-lstat.patch: Do not assume glibc glob internals
- glob-interface.patch: Support GLIBC glob interface version 2</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1549713600">- Add libreadline6 to the BuildRequires list.
- Changed %doc to %license for COPYING as directed by osc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1549800000">- Changed spec file to require readline-devel, not a specific libreadline version.
  Thanks to Jan Engelhardt &lt;jengelh@inai.de&gt; for suggestion.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1549800001">- Returned changelist back to a %doc.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1576584000">- Modernise spec file</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1585915200">- Add gcc10-fno-common-fix.patch in order to fix boo#1160274.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1598875200">- strsignal.patch: use strsignal instead of sys_siglist (bsc#1175268)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598875201">- update to svn3427:
  * 3 years of changes, see http://trac.netlabs.org/kbuild/timeline
- remove patches:
  gcc10-fno-common-fix.patch, glob-interface.patch,
  use-alloca.patch, kbuild-gcc7.patch, kbuild-glob.patch,
  strsignal.patch: upstream or obsolete</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598961600">- Add byacc to BuildRequires fixes problems with bison 3.7 (bsc#1175268)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1717761600">- Make kbuild buildable with GCC 14 (boo#1225792)
  * Changes to configure machinery so that it does not fail and detect
    what it has detected with previous GCC versions.
    (kBuild-configure-c99.patch, kBuild-configure-c99-2.patch)
  * Add many missing includes (kBuild-c99.patch).
  * Fix an actual bug in a call to eval_buffer that also manifests as
    a C99 violation (kBuild-c99-2.patch).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1726833600">- Update to snapshot 0.1.9998+svn3613
  * Qt6 support
- Switch all patches to the same patch level (p1)
- Delete kbuild-armv7l.diff (nonsensical change),
  kBuild-configure-c99.patch, kBuild-configure-c99-2.patch,
  kBuild-c99.patch, kBuild-c99-2.patch (obsolete)
- Rework ppc64le.patch: reuse ppc64 arch enumerator value;
  implement unconditional trap macro
- Rework aarch64.patch: define aarch64 as a full alias of arm64</changelog>
</package>
<package pkgid="2ff53eaaffb4d72bf3432e491d8557d11bdb326979a8aa90613a7f4643f86ce5" name="kbuild" arch="src">
  <version epoch="0" ver="0.1.9998+svn3613" rel="bp156.2.3.1"/>
  <changelog author="speilicke@suse.com" date="1389960000">- Update to version 0.1.9998svn2720:
  + VirtualBox-4.3.6 requires revision 2689 or later
- Dropped patches:
  + warnings.diff (obsolete)
  + glibc-2.10.diff (solved differently upstream)
  + kbuild-func_missing_args.diff (obsolete)
- Rebased patches:
  + kbuild-pthread.diff (only offset)
  + kbuild-timestamps.diff (only offset)
  + kbuild-armv7l.diff (only offset)
  + kbuild-dummy_noreturn.diff (manually)
- Add patches:
  + kbuild-glob.patch: Include local glob implementation
  + kbuild-kmk-makefile-am.patch: Fix wrong file list</changelog>
  <changelog author="dvaleev@suse.com" date="1434110400">- Rework ppc64le patch. Previous one was totally wrong.
- Modified patch ppc64le.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1435320000">- Update to version 0.1.9998svn2784:
  many changes detailed in upstream url from svn 2720 to 2784.
  http://trac.netlabs.org/kbuild/timeline?from=2015-06-26&amp;daysback=365
  http://trac.netlabs.org/kbuild/changeset?old_path=%2F&amp;old=2784&amp;new_path=%2F&amp;new=2720
- Dropped patches:
  kbuild-kmk-makefile-am.patch
- Rebased patches:
  kbuild-glob.patch
  ppc64le.patch
  kbuild-timestamps.diff
  kbuild-pthread.diff
- All above changes allow to build package for ppc64/ppc64le archs</changelog>
  <changelog author="luizluca@tre-sc.jus.br" date="1469102400">- Update to version 0.1.9998svn2814:
  Changes detailed in upstream url from svn 2784 to 2814.
  http://trac.netlabs.org/kbuild/changeset?old_path=%2F&amp;old=2784&amp;new_path=%2F&amp;new=2814
- Rebased patches:
  ppc64le.patch</changelog>
  <changelog author="ro@suse.de" date="1478952000">- add aarch64.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Add kbuild-gcc7.patch: Fix build with GCC7 (boo#1039375): we also
  need the definition of strlcpy on Linux; only *BSD has this by
  default.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1508673600">- Update to version 0.1.9998svn3110. VirtualBox 5.2.0 needs this one to build.
  Changes detailed in upstream url from svn 2815 to 3110.
- Rebased patches
- Removed test for openSUSE 12.3 from spec file.</changelog>
  <changelog author="dmueller@suse.com" date="1519128000">- add use-alloca.patch (bsc#1079838)</changelog>
  <changelog author="schwab@suse.de" date="1519128001">- glob-lstat.patch: Do not assume glibc glob internals
- glob-interface.patch: Support GLIBC glob interface version 2</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1549713600">- Add libreadline6 to the BuildRequires list.
- Changed %doc to %license for COPYING as directed by osc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1549800000">- Changed spec file to require readline-devel, not a specific libreadline version.
  Thanks to Jan Engelhardt &lt;jengelh@inai.de&gt; for suggestion.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1549800001">- Returned changelist back to a %doc.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1576584000">- Modernise spec file</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1585915200">- Add gcc10-fno-common-fix.patch in order to fix boo#1160274.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1598875200">- strsignal.patch: use strsignal instead of sys_siglist (bsc#1175268)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598875201">- update to svn3427:
  * 3 years of changes, see http://trac.netlabs.org/kbuild/timeline
- remove patches:
  gcc10-fno-common-fix.patch, glob-interface.patch,
  use-alloca.patch, kbuild-gcc7.patch, kbuild-glob.patch,
  strsignal.patch: upstream or obsolete</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598961600">- Add byacc to BuildRequires fixes problems with bison 3.7 (bsc#1175268)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1717761600">- Make kbuild buildable with GCC 14 (boo#1225792)
  * Changes to configure machinery so that it does not fail and detect
    what it has detected with previous GCC versions.
    (kBuild-configure-c99.patch, kBuild-configure-c99-2.patch)
  * Add many missing includes (kBuild-c99.patch).
  * Fix an actual bug in a call to eval_buffer that also manifests as
    a C99 violation (kBuild-c99-2.patch).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1726833600">- Update to snapshot 0.1.9998+svn3613
  * Qt6 support
- Switch all patches to the same patch level (p1)
- Delete kbuild-armv7l.diff (nonsensical change),
  kBuild-configure-c99.patch, kBuild-configure-c99-2.patch,
  kBuild-c99.patch, kBuild-c99-2.patch (obsolete)
- Rework ppc64le.patch: reuse ppc64 arch enumerator value;
  implement unconditional trap macro
- Rework aarch64.patch: define aarch64 as a full alias of arm64</changelog>
</package>
<package pkgid="45dd81bb34a844761c3ac388c6f5eb8f5d266158a84b33cc476b938d61c52796" name="kbuild" arch="x86_64">
  <version epoch="0" ver="0.1.9998+svn3613" rel="bp156.2.3.1"/>
  <changelog author="dvaleev@suse.com" date="1434110400">- Rework ppc64le patch. Previous one was totally wrong.
- Modified patch ppc64le.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1435320000">- Update to version 0.1.9998svn2784:
  many changes detailed in upstream url from svn 2720 to 2784.
  http://trac.netlabs.org/kbuild/timeline?from=2015-06-26&amp;daysback=365
  http://trac.netlabs.org/kbuild/changeset?old_path=%2F&amp;old=2784&amp;new_path=%2F&amp;new=2720
- Dropped patches:
  kbuild-kmk-makefile-am.patch
- Rebased patches:
  kbuild-glob.patch
  ppc64le.patch
  kbuild-timestamps.diff
  kbuild-pthread.diff
- All above changes allow to build package for ppc64/ppc64le archs</changelog>
  <changelog author="luizluca@tre-sc.jus.br" date="1469102400">- Update to version 0.1.9998svn2814:
  Changes detailed in upstream url from svn 2784 to 2814.
  http://trac.netlabs.org/kbuild/changeset?old_path=%2F&amp;old=2784&amp;new_path=%2F&amp;new=2814
- Rebased patches:
  ppc64le.patch</changelog>
  <changelog author="ro@suse.de" date="1478952000">- add aarch64.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Add kbuild-gcc7.patch: Fix build with GCC7 (boo#1039375): we also
  need the definition of strlcpy on Linux; only *BSD has this by
  default.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1508673600">- Update to version 0.1.9998svn3110. VirtualBox 5.2.0 needs this one to build.
  Changes detailed in upstream url from svn 2815 to 3110.
- Rebased patches
- Removed test for openSUSE 12.3 from spec file.</changelog>
  <changelog author="dmueller@suse.com" date="1519128000">- add use-alloca.patch (bsc#1079838)</changelog>
  <changelog author="schwab@suse.de" date="1519128001">- glob-lstat.patch: Do not assume glibc glob internals
- glob-interface.patch: Support GLIBC glob interface version 2</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1549713600">- Add libreadline6 to the BuildRequires list.
- Changed %doc to %license for COPYING as directed by osc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1549800000">- Changed spec file to require readline-devel, not a specific libreadline version.
  Thanks to Jan Engelhardt &lt;jengelh@inai.de&gt; for suggestion.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1549800001">- Returned changelist back to a %doc.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1576584000">- Modernise spec file</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1585915200">- Add gcc10-fno-common-fix.patch in order to fix boo#1160274.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1598875200">- strsignal.patch: use strsignal instead of sys_siglist (bsc#1175268)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598875201">- update to svn3427:
  * 3 years of changes, see http://trac.netlabs.org/kbuild/timeline
- remove patches:
  gcc10-fno-common-fix.patch, glob-interface.patch,
  use-alloca.patch, kbuild-gcc7.patch, kbuild-glob.patch,
  strsignal.patch: upstream or obsolete</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598961600">- Add byacc to BuildRequires fixes problems with bison 3.7 (bsc#1175268)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1717761600">- Make kbuild buildable with GCC 14 (boo#1225792)
  * Changes to configure machinery so that it does not fail and detect
    what it has detected with previous GCC versions.
    (kBuild-configure-c99.patch, kBuild-configure-c99-2.patch)
  * Add many missing includes (kBuild-c99.patch).
  * Fix an actual bug in a call to eval_buffer that also manifests as
    a C99 violation (kBuild-c99-2.patch).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1726833600">- Update to snapshot 0.1.9998+svn3613
  * Qt6 support
- Switch all patches to the same patch level (p1)
- Delete kbuild-armv7l.diff (nonsensical change),
  kBuild-configure-c99.patch, kBuild-configure-c99-2.patch,
  kBuild-c99.patch, kBuild-c99-2.patch (obsolete)
- Rework ppc64le.patch: reuse ppc64 arch enumerator value;
  implement unconditional trap macro
- Rework aarch64.patch: define aarch64 as a full alias of arm64</changelog>
</package>
<package pkgid="b6cedaab865859eb150078f76a153a1e7ded3cda204f3bce1a74794ee202e7a4" name="keepassxc" arch="aarch64">
  <version epoch="0" ver="2.7.10" rel="bp156.2.9.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1737460800">- build with Botan 3 on Leap 16</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- update to 2.7.10:
  - Changes
  - Allow adjusting application font size [#11567]
  - Add Proton Pass importer [#11197]
  - Support KeePass2 TOTP settings [#11229]
  - Add New/Preview Entry Attachments dialog and functionality
    [#11637, #11699, #11650]
  - Add database name, color, and icon options for unlock view
    [#10819, #11725]
  - Show entry background color as column [#6798]
  - Use icons for password strength [#9844]
  - Add "Group Full Path" column in entry view [#10278]
  - Passphrase "MIXED case" Type [#11255]
  - Allow deleting extension plugin data from Browser Statistics
    [#11218]
  - Add --minimized option to keepassxc [#11693]
  - Implement T-CONV and T-REPLACE-RX entry placeholders [#11453]
  - Option to disable opening browser when URL field
    double-clicked [#11332]
  - Overhaul action states and add icons to toolbar [#11047]
  - Show character count in password generator dialog [#10940]
  - Add ability to expire entries from context menu [#8731]
  - Add copy field shortcuts to Auto-Type select dialog [#11518]
  - Passkeys: Add support for selecting group on creation
    [#11260]
  - Browser: Refactor Access Control Dialog [#9607]
  - Browser: Add support for URL wildcards and exact URL [#9835,
    [#11752]]
  - Browser: Allow groups to restrict by browser integration key
    [#9852]
  - CLI: Add -d dry-run shortcut to merge command [#11192]
  - CLI: HTML export [#11590]
  - macOS: Add option to disable database lock when switching
    user [#9707]
  - SSH Agent: Implement feature to clear all identities [#10649]
  - Fixes
  - Major enhancements to documentation [#11745, #10875]
  - Various UI and style fixes [#11535, #11672, #11511, #11445,
    [#11426], #11273, #11455, #11321, #11594, #11539, #11351,
    [#11354], #10748, #11602, #11303, #11291, #10091, #9417]
  - Various improvements to tags [#11676, #11652, #11625]
  - Reset splitter sizes on database unlock [#11014]
  - Remember sort order in Auto-type popup dialog [#9508]
  - Fix database password clearing when modifying key file /
    hardware key [#11001]
  - Fix issues with reloading and handling of externally modified
    db file [#10612]
  - Support passkeys with Bitwarden import [#11401]
  - Fix various quirks with CSV import [#11787]
  - Show Auto-Type select dialog even if window title is empty
    [#11603]
  - Refactor hardware key code to avoid deadlock [#11703, #10872]
  - Show a clear error if hardware key is found slots are not
    configured [#11609]
  - Fix signal/slot disconnect when opening import wizard
    [#11039]
  - Fix setting window title as modified [#11542]
  - Fix assert hit when viewing entry history [#11413]
  - Fix multiple crashes on Linux [#11513]
  - Fix backup file path time substitution [#10834]
  - Prevent long-running threads from deadlocking the program
    with only 1 CPU [#11155]
  - Hide the menubar when menus lose focus (if toggled off)
    [#11355, #11605]
  - CLI: Restore the original codepage on windows [#11470]
  - Passkeys: Various fixes [#10934, #10951]
  - Browser: Fix cancel with database unlock dialog [#11435]
  - Browser: Resolve references in Access Confirm dialog [#11055]
  - SSH Agent: Add timeout to streams to prevent deadlock
    [#11290]
  - macOS: Replace legacy code for screen recording permissions
    [#11428]
  - macOS: Implement Secure Input Mode [#11623]
  - macOS: Fix showing ambigious name in settings [#11373]
  - macOS: Fix copy-to-clipboard shortcut in entry preview widget
    [#10966]
  - Linux: Prevent multiple lock requests [#11306]
  - Snap: Prevent need for snap helper script to configure
    browser extension [#10924]
  - Windows: Detect outdated VC Redist with MSI installer
    [#11469]
  - Windows: Additional exclusion fields for clipboard [#11521]
- drop 43904d87b7ae7339e393ce9de465556e3da52d3c.patch</changelog>
</package>
<package pkgid="f4ec2985db30ef612891f6575764d8789e2547124a9731d363581024b4650eec" name="keepassxc" arch="i586">
  <version epoch="0" ver="2.7.10" rel="bp156.2.9.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1737460800">- build with Botan 3 on Leap 16</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- update to 2.7.10:
  - Changes
  - Allow adjusting application font size [#11567]
  - Add Proton Pass importer [#11197]
  - Support KeePass2 TOTP settings [#11229]
  - Add New/Preview Entry Attachments dialog and functionality
    [#11637, #11699, #11650]
  - Add database name, color, and icon options for unlock view
    [#10819, #11725]
  - Show entry background color as column [#6798]
  - Use icons for password strength [#9844]
  - Add "Group Full Path" column in entry view [#10278]
  - Passphrase "MIXED case" Type [#11255]
  - Allow deleting extension plugin data from Browser Statistics
    [#11218]
  - Add --minimized option to keepassxc [#11693]
  - Implement T-CONV and T-REPLACE-RX entry placeholders [#11453]
  - Option to disable opening browser when URL field
    double-clicked [#11332]
  - Overhaul action states and add icons to toolbar [#11047]
  - Show character count in password generator dialog [#10940]
  - Add ability to expire entries from context menu [#8731]
  - Add copy field shortcuts to Auto-Type select dialog [#11518]
  - Passkeys: Add support for selecting group on creation
    [#11260]
  - Browser: Refactor Access Control Dialog [#9607]
  - Browser: Add support for URL wildcards and exact URL [#9835,
    [#11752]]
  - Browser: Allow groups to restrict by browser integration key
    [#9852]
  - CLI: Add -d dry-run shortcut to merge command [#11192]
  - CLI: HTML export [#11590]
  - macOS: Add option to disable database lock when switching
    user [#9707]
  - SSH Agent: Implement feature to clear all identities [#10649]
  - Fixes
  - Major enhancements to documentation [#11745, #10875]
  - Various UI and style fixes [#11535, #11672, #11511, #11445,
    [#11426], #11273, #11455, #11321, #11594, #11539, #11351,
    [#11354], #10748, #11602, #11303, #11291, #10091, #9417]
  - Various improvements to tags [#11676, #11652, #11625]
  - Reset splitter sizes on database unlock [#11014]
  - Remember sort order in Auto-type popup dialog [#9508]
  - Fix database password clearing when modifying key file /
    hardware key [#11001]
  - Fix issues with reloading and handling of externally modified
    db file [#10612]
  - Support passkeys with Bitwarden import [#11401]
  - Fix various quirks with CSV import [#11787]
  - Show Auto-Type select dialog even if window title is empty
    [#11603]
  - Refactor hardware key code to avoid deadlock [#11703, #10872]
  - Show a clear error if hardware key is found slots are not
    configured [#11609]
  - Fix signal/slot disconnect when opening import wizard
    [#11039]
  - Fix setting window title as modified [#11542]
  - Fix assert hit when viewing entry history [#11413]
  - Fix multiple crashes on Linux [#11513]
  - Fix backup file path time substitution [#10834]
  - Prevent long-running threads from deadlocking the program
    with only 1 CPU [#11155]
  - Hide the menubar when menus lose focus (if toggled off)
    [#11355, #11605]
  - CLI: Restore the original codepage on windows [#11470]
  - Passkeys: Various fixes [#10934, #10951]
  - Browser: Fix cancel with database unlock dialog [#11435]
  - Browser: Resolve references in Access Confirm dialog [#11055]
  - SSH Agent: Add timeout to streams to prevent deadlock
    [#11290]
  - macOS: Replace legacy code for screen recording permissions
    [#11428]
  - macOS: Implement Secure Input Mode [#11623]
  - macOS: Fix showing ambigious name in settings [#11373]
  - macOS: Fix copy-to-clipboard shortcut in entry preview widget
    [#10966]
  - Linux: Prevent multiple lock requests [#11306]
  - Snap: Prevent need for snap helper script to configure
    browser extension [#10924]
  - Windows: Detect outdated VC Redist with MSI installer
    [#11469]
  - Windows: Additional exclusion fields for clipboard [#11521]
- drop 43904d87b7ae7339e393ce9de465556e3da52d3c.patch</changelog>
</package>
<package pkgid="1f3398632cbc932e896d481d233e5cbed5a39d66c868f168fa06b9604e25e150" name="keepassxc" arch="ppc64le">
  <version epoch="0" ver="2.7.10" rel="bp156.2.9.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1737460800">- build with Botan 3 on Leap 16</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- update to 2.7.10:
  - Changes
  - Allow adjusting application font size [#11567]
  - Add Proton Pass importer [#11197]
  - Support KeePass2 TOTP settings [#11229]
  - Add New/Preview Entry Attachments dialog and functionality
    [#11637, #11699, #11650]
  - Add database name, color, and icon options for unlock view
    [#10819, #11725]
  - Show entry background color as column [#6798]
  - Use icons for password strength [#9844]
  - Add "Group Full Path" column in entry view [#10278]
  - Passphrase "MIXED case" Type [#11255]
  - Allow deleting extension plugin data from Browser Statistics
    [#11218]
  - Add --minimized option to keepassxc [#11693]
  - Implement T-CONV and T-REPLACE-RX entry placeholders [#11453]
  - Option to disable opening browser when URL field
    double-clicked [#11332]
  - Overhaul action states and add icons to toolbar [#11047]
  - Show character count in password generator dialog [#10940]
  - Add ability to expire entries from context menu [#8731]
  - Add copy field shortcuts to Auto-Type select dialog [#11518]
  - Passkeys: Add support for selecting group on creation
    [#11260]
  - Browser: Refactor Access Control Dialog [#9607]
  - Browser: Add support for URL wildcards and exact URL [#9835,
    [#11752]]
  - Browser: Allow groups to restrict by browser integration key
    [#9852]
  - CLI: Add -d dry-run shortcut to merge command [#11192]
  - CLI: HTML export [#11590]
  - macOS: Add option to disable database lock when switching
    user [#9707]
  - SSH Agent: Implement feature to clear all identities [#10649]
  - Fixes
  - Major enhancements to documentation [#11745, #10875]
  - Various UI and style fixes [#11535, #11672, #11511, #11445,
    [#11426], #11273, #11455, #11321, #11594, #11539, #11351,
    [#11354], #10748, #11602, #11303, #11291, #10091, #9417]
  - Various improvements to tags [#11676, #11652, #11625]
  - Reset splitter sizes on database unlock [#11014]
  - Remember sort order in Auto-type popup dialog [#9508]
  - Fix database password clearing when modifying key file /
    hardware key [#11001]
  - Fix issues with reloading and handling of externally modified
    db file [#10612]
  - Support passkeys with Bitwarden import [#11401]
  - Fix various quirks with CSV import [#11787]
  - Show Auto-Type select dialog even if window title is empty
    [#11603]
  - Refactor hardware key code to avoid deadlock [#11703, #10872]
  - Show a clear error if hardware key is found slots are not
    configured [#11609]
  - Fix signal/slot disconnect when opening import wizard
    [#11039]
  - Fix setting window title as modified [#11542]
  - Fix assert hit when viewing entry history [#11413]
  - Fix multiple crashes on Linux [#11513]
  - Fix backup file path time substitution [#10834]
  - Prevent long-running threads from deadlocking the program
    with only 1 CPU [#11155]
  - Hide the menubar when menus lose focus (if toggled off)
    [#11355, #11605]
  - CLI: Restore the original codepage on windows [#11470]
  - Passkeys: Various fixes [#10934, #10951]
  - Browser: Fix cancel with database unlock dialog [#11435]
  - Browser: Resolve references in Access Confirm dialog [#11055]
  - SSH Agent: Add timeout to streams to prevent deadlock
    [#11290]
  - macOS: Replace legacy code for screen recording permissions
    [#11428]
  - macOS: Implement Secure Input Mode [#11623]
  - macOS: Fix showing ambigious name in settings [#11373]
  - macOS: Fix copy-to-clipboard shortcut in entry preview widget
    [#10966]
  - Linux: Prevent multiple lock requests [#11306]
  - Snap: Prevent need for snap helper script to configure
    browser extension [#10924]
  - Windows: Detect outdated VC Redist with MSI installer
    [#11469]
  - Windows: Additional exclusion fields for clipboard [#11521]
- drop 43904d87b7ae7339e393ce9de465556e3da52d3c.patch</changelog>
</package>
<package pkgid="3c0699bedd682bd8f4679d06aea9dfc52255e0720ee593bf62f3e8f3fa182c4a" name="keepassxc" arch="s390x">
  <version epoch="0" ver="2.7.10" rel="bp156.2.9.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1737460800">- build with Botan 3 on Leap 16</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- update to 2.7.10:
  - Changes
  - Allow adjusting application font size [#11567]
  - Add Proton Pass importer [#11197]
  - Support KeePass2 TOTP settings [#11229]
  - Add New/Preview Entry Attachments dialog and functionality
    [#11637, #11699, #11650]
  - Add database name, color, and icon options for unlock view
    [#10819, #11725]
  - Show entry background color as column [#6798]
  - Use icons for password strength [#9844]
  - Add "Group Full Path" column in entry view [#10278]
  - Passphrase "MIXED case" Type [#11255]
  - Allow deleting extension plugin data from Browser Statistics
    [#11218]
  - Add --minimized option to keepassxc [#11693]
  - Implement T-CONV and T-REPLACE-RX entry placeholders [#11453]
  - Option to disable opening browser when URL field
    double-clicked [#11332]
  - Overhaul action states and add icons to toolbar [#11047]
  - Show character count in password generator dialog [#10940]
  - Add ability to expire entries from context menu [#8731]
  - Add copy field shortcuts to Auto-Type select dialog [#11518]
  - Passkeys: Add support for selecting group on creation
    [#11260]
  - Browser: Refactor Access Control Dialog [#9607]
  - Browser: Add support for URL wildcards and exact URL [#9835,
    [#11752]]
  - Browser: Allow groups to restrict by browser integration key
    [#9852]
  - CLI: Add -d dry-run shortcut to merge command [#11192]
  - CLI: HTML export [#11590]
  - macOS: Add option to disable database lock when switching
    user [#9707]
  - SSH Agent: Implement feature to clear all identities [#10649]
  - Fixes
  - Major enhancements to documentation [#11745, #10875]
  - Various UI and style fixes [#11535, #11672, #11511, #11445,
    [#11426], #11273, #11455, #11321, #11594, #11539, #11351,
    [#11354], #10748, #11602, #11303, #11291, #10091, #9417]
  - Various improvements to tags [#11676, #11652, #11625]
  - Reset splitter sizes on database unlock [#11014]
  - Remember sort order in Auto-type popup dialog [#9508]
  - Fix database password clearing when modifying key file /
    hardware key [#11001]
  - Fix issues with reloading and handling of externally modified
    db file [#10612]
  - Support passkeys with Bitwarden import [#11401]
  - Fix various quirks with CSV import [#11787]
  - Show Auto-Type select dialog even if window title is empty
    [#11603]
  - Refactor hardware key code to avoid deadlock [#11703, #10872]
  - Show a clear error if hardware key is found slots are not
    configured [#11609]
  - Fix signal/slot disconnect when opening import wizard
    [#11039]
  - Fix setting window title as modified [#11542]
  - Fix assert hit when viewing entry history [#11413]
  - Fix multiple crashes on Linux [#11513]
  - Fix backup file path time substitution [#10834]
  - Prevent long-running threads from deadlocking the program
    with only 1 CPU [#11155]
  - Hide the menubar when menus lose focus (if toggled off)
    [#11355, #11605]
  - CLI: Restore the original codepage on windows [#11470]
  - Passkeys: Various fixes [#10934, #10951]
  - Browser: Fix cancel with database unlock dialog [#11435]
  - Browser: Resolve references in Access Confirm dialog [#11055]
  - SSH Agent: Add timeout to streams to prevent deadlock
    [#11290]
  - macOS: Replace legacy code for screen recording permissions
    [#11428]
  - macOS: Implement Secure Input Mode [#11623]
  - macOS: Fix showing ambigious name in settings [#11373]
  - macOS: Fix copy-to-clipboard shortcut in entry preview widget
    [#10966]
  - Linux: Prevent multiple lock requests [#11306]
  - Snap: Prevent need for snap helper script to configure
    browser extension [#10924]
  - Windows: Detect outdated VC Redist with MSI installer
    [#11469]
  - Windows: Additional exclusion fields for clipboard [#11521]
- drop 43904d87b7ae7339e393ce9de465556e3da52d3c.patch</changelog>
</package>
<package pkgid="0bdc6183b2952c4a016adf364e0fd1567cc5e05f7c5d8f34563d618eeabf2480" name="keepassxc" arch="src">
  <version epoch="0" ver="2.7.10" rel="bp156.2.9.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1737460800">- build with Botan 3 on Leap 16</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- update to 2.7.10:
  - Changes
  - Allow adjusting application font size [#11567]
  - Add Proton Pass importer [#11197]
  - Support KeePass2 TOTP settings [#11229]
  - Add New/Preview Entry Attachments dialog and functionality
    [#11637, #11699, #11650]
  - Add database name, color, and icon options for unlock view
    [#10819, #11725]
  - Show entry background color as column [#6798]
  - Use icons for password strength [#9844]
  - Add "Group Full Path" column in entry view [#10278]
  - Passphrase "MIXED case" Type [#11255]
  - Allow deleting extension plugin data from Browser Statistics
    [#11218]
  - Add --minimized option to keepassxc [#11693]
  - Implement T-CONV and T-REPLACE-RX entry placeholders [#11453]
  - Option to disable opening browser when URL field
    double-clicked [#11332]
  - Overhaul action states and add icons to toolbar [#11047]
  - Show character count in password generator dialog [#10940]
  - Add ability to expire entries from context menu [#8731]
  - Add copy field shortcuts to Auto-Type select dialog [#11518]
  - Passkeys: Add support for selecting group on creation
    [#11260]
  - Browser: Refactor Access Control Dialog [#9607]
  - Browser: Add support for URL wildcards and exact URL [#9835,
    [#11752]]
  - Browser: Allow groups to restrict by browser integration key
    [#9852]
  - CLI: Add -d dry-run shortcut to merge command [#11192]
  - CLI: HTML export [#11590]
  - macOS: Add option to disable database lock when switching
    user [#9707]
  - SSH Agent: Implement feature to clear all identities [#10649]
  - Fixes
  - Major enhancements to documentation [#11745, #10875]
  - Various UI and style fixes [#11535, #11672, #11511, #11445,
    [#11426], #11273, #11455, #11321, #11594, #11539, #11351,
    [#11354], #10748, #11602, #11303, #11291, #10091, #9417]
  - Various improvements to tags [#11676, #11652, #11625]
  - Reset splitter sizes on database unlock [#11014]
  - Remember sort order in Auto-type popup dialog [#9508]
  - Fix database password clearing when modifying key file /
    hardware key [#11001]
  - Fix issues with reloading and handling of externally modified
    db file [#10612]
  - Support passkeys with Bitwarden import [#11401]
  - Fix various quirks with CSV import [#11787]
  - Show Auto-Type select dialog even if window title is empty
    [#11603]
  - Refactor hardware key code to avoid deadlock [#11703, #10872]
  - Show a clear error if hardware key is found slots are not
    configured [#11609]
  - Fix signal/slot disconnect when opening import wizard
    [#11039]
  - Fix setting window title as modified [#11542]
  - Fix assert hit when viewing entry history [#11413]
  - Fix multiple crashes on Linux [#11513]
  - Fix backup file path time substitution [#10834]
  - Prevent long-running threads from deadlocking the program
    with only 1 CPU [#11155]
  - Hide the menubar when menus lose focus (if toggled off)
    [#11355, #11605]
  - CLI: Restore the original codepage on windows [#11470]
  - Passkeys: Various fixes [#10934, #10951]
  - Browser: Fix cancel with database unlock dialog [#11435]
  - Browser: Resolve references in Access Confirm dialog [#11055]
  - SSH Agent: Add timeout to streams to prevent deadlock
    [#11290]
  - macOS: Replace legacy code for screen recording permissions
    [#11428]
  - macOS: Implement Secure Input Mode [#11623]
  - macOS: Fix showing ambigious name in settings [#11373]
  - macOS: Fix copy-to-clipboard shortcut in entry preview widget
    [#10966]
  - Linux: Prevent multiple lock requests [#11306]
  - Snap: Prevent need for snap helper script to configure
    browser extension [#10924]
  - Windows: Detect outdated VC Redist with MSI installer
    [#11469]
  - Windows: Additional exclusion fields for clipboard [#11521]
- drop 43904d87b7ae7339e393ce9de465556e3da52d3c.patch</changelog>
</package>
<package pkgid="d84b49e36b25f743090e5618f9f2aaa2af585cfe5d2b1962c50340673c002678" name="keepassxc" arch="x86_64">
  <version epoch="0" ver="2.7.10" rel="bp156.2.9.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1737460800">- build with Botan 3 on Leap 16</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- update to 2.7.10:
  - Changes
  - Allow adjusting application font size [#11567]
  - Add Proton Pass importer [#11197]
  - Support KeePass2 TOTP settings [#11229]
  - Add New/Preview Entry Attachments dialog and functionality
    [#11637, #11699, #11650]
  - Add database name, color, and icon options for unlock view
    [#10819, #11725]
  - Show entry background color as column [#6798]
  - Use icons for password strength [#9844]
  - Add "Group Full Path" column in entry view [#10278]
  - Passphrase "MIXED case" Type [#11255]
  - Allow deleting extension plugin data from Browser Statistics
    [#11218]
  - Add --minimized option to keepassxc [#11693]
  - Implement T-CONV and T-REPLACE-RX entry placeholders [#11453]
  - Option to disable opening browser when URL field
    double-clicked [#11332]
  - Overhaul action states and add icons to toolbar [#11047]
  - Show character count in password generator dialog [#10940]
  - Add ability to expire entries from context menu [#8731]
  - Add copy field shortcuts to Auto-Type select dialog [#11518]
  - Passkeys: Add support for selecting group on creation
    [#11260]
  - Browser: Refactor Access Control Dialog [#9607]
  - Browser: Add support for URL wildcards and exact URL [#9835,
    [#11752]]
  - Browser: Allow groups to restrict by browser integration key
    [#9852]
  - CLI: Add -d dry-run shortcut to merge command [#11192]
  - CLI: HTML export [#11590]
  - macOS: Add option to disable database lock when switching
    user [#9707]
  - SSH Agent: Implement feature to clear all identities [#10649]
  - Fixes
  - Major enhancements to documentation [#11745, #10875]
  - Various UI and style fixes [#11535, #11672, #11511, #11445,
    [#11426], #11273, #11455, #11321, #11594, #11539, #11351,
    [#11354], #10748, #11602, #11303, #11291, #10091, #9417]
  - Various improvements to tags [#11676, #11652, #11625]
  - Reset splitter sizes on database unlock [#11014]
  - Remember sort order in Auto-type popup dialog [#9508]
  - Fix database password clearing when modifying key file /
    hardware key [#11001]
  - Fix issues with reloading and handling of externally modified
    db file [#10612]
  - Support passkeys with Bitwarden import [#11401]
  - Fix various quirks with CSV import [#11787]
  - Show Auto-Type select dialog even if window title is empty
    [#11603]
  - Refactor hardware key code to avoid deadlock [#11703, #10872]
  - Show a clear error if hardware key is found slots are not
    configured [#11609]
  - Fix signal/slot disconnect when opening import wizard
    [#11039]
  - Fix setting window title as modified [#11542]
  - Fix assert hit when viewing entry history [#11413]
  - Fix multiple crashes on Linux [#11513]
  - Fix backup file path time substitution [#10834]
  - Prevent long-running threads from deadlocking the program
    with only 1 CPU [#11155]
  - Hide the menubar when menus lose focus (if toggled off)
    [#11355, #11605]
  - CLI: Restore the original codepage on windows [#11470]
  - Passkeys: Various fixes [#10934, #10951]
  - Browser: Fix cancel with database unlock dialog [#11435]
  - Browser: Resolve references in Access Confirm dialog [#11055]
  - SSH Agent: Add timeout to streams to prevent deadlock
    [#11290]
  - macOS: Replace legacy code for screen recording permissions
    [#11428]
  - macOS: Implement Secure Input Mode [#11623]
  - macOS: Fix showing ambigious name in settings [#11373]
  - macOS: Fix copy-to-clipboard shortcut in entry preview widget
    [#10966]
  - Linux: Prevent multiple lock requests [#11306]
  - Snap: Prevent need for snap helper script to configure
    browser extension [#10924]
  - Windows: Detect outdated VC Redist with MSI installer
    [#11469]
  - Windows: Additional exclusion fields for clipboard [#11521]
- drop 43904d87b7ae7339e393ce9de465556e3da52d3c.patch</changelog>
</package>
<package pkgid="8b23952ad15cbb0886ca83b5959b0127ad7864c979b8723fc641ec1fc8fb1dba" name="keepassxc" arch="aarch64">
  <version epoch="0" ver="2.7.9" rel="bp156.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don’t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    “best-matching credentials” [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
</package>
<package pkgid="5fe188f16ae0dec708b5acc29e0a2cb4961495d5ff8d1508231b38bfc8f22037" name="keepassxc" arch="ppc64le">
  <version epoch="0" ver="2.7.9" rel="bp156.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don’t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    “best-matching credentials” [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
</package>
<package pkgid="d38574cec5ace4e97ffe464795a78143d504fe9f1ef81232982eb2a1c42e3eae" name="keepassxc" arch="s390x">
  <version epoch="0" ver="2.7.9" rel="bp156.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don’t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    “best-matching credentials” [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
</package>
<package pkgid="e08206f096fdcdc12e0bf5a863984a2e40c8b46a40dce34f0a0f0b4af44f0052" name="keepassxc" arch="src">
  <version epoch="0" ver="2.7.9" rel="bp156.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don’t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    “best-matching credentials” [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
</package>
<package pkgid="c675997fa1861ea938389611670e5e76916da45028cc4925df27ed248970ca42" name="keepassxc" arch="x86_64">
  <version epoch="0" ver="2.7.9" rel="bp156.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don’t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    “best-matching credentials” [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
</package>
<package pkgid="25b44e30a559f64d3231d5c3d11e1839ecfa243d876c57743f32ceac69973bab" name="keepassxc" arch="aarch64">
  <version epoch="0" ver="2.7.9" rel="bp156.2.6.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
</package>
<package pkgid="e61fde5794e13f7ce4c3cef02a61774084d8611237d768b7d74a82e5c9adf74b" name="keepassxc" arch="i586">
  <version epoch="0" ver="2.7.9" rel="bp156.2.6.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
</package>
<package pkgid="3a2056bb772ce08936d7199fb22a9d7dc89b0754549e98784778fa03a958346a" name="keepassxc" arch="ppc64le">
  <version epoch="0" ver="2.7.9" rel="bp156.2.6.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
</package>
<package pkgid="9f9a0b8ce7cfb98670f9ae3b98f039df5f239972d1a40a149552f82bbc927234" name="keepassxc" arch="s390x">
  <version epoch="0" ver="2.7.9" rel="bp156.2.6.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
</package>
<package pkgid="a6393e578c1a263e5b5fdfc9a583b257f5baee461f8fd01619df60dd0de1c5aa" name="keepassxc" arch="src">
  <version epoch="0" ver="2.7.9" rel="bp156.2.6.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
</package>
<package pkgid="d042a7ba036873ef33d8f1791a78070b677adc938dc74a54d4545f6ec067917d" name="keepassxc" arch="x86_64">
  <version epoch="0" ver="2.7.9" rel="bp156.2.6.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
</package>
<package pkgid="40633b4ebd6c7bbb8f561b0f0ed44f2c20b094eee733f27eaa4ee752772900c1" name="keepassxc-lang" arch="noarch">
  <version epoch="0" ver="2.7.10" rel="bp156.2.9.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1737460800">- build with Botan 3 on Leap 16</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- update to 2.7.10:
  - Changes
  - Allow adjusting application font size [#11567]
  - Add Proton Pass importer [#11197]
  - Support KeePass2 TOTP settings [#11229]
  - Add New/Preview Entry Attachments dialog and functionality
    [#11637, #11699, #11650]
  - Add database name, color, and icon options for unlock view
    [#10819, #11725]
  - Show entry background color as column [#6798]
  - Use icons for password strength [#9844]
  - Add "Group Full Path" column in entry view [#10278]
  - Passphrase "MIXED case" Type [#11255]
  - Allow deleting extension plugin data from Browser Statistics
    [#11218]
  - Add --minimized option to keepassxc [#11693]
  - Implement T-CONV and T-REPLACE-RX entry placeholders [#11453]
  - Option to disable opening browser when URL field
    double-clicked [#11332]
  - Overhaul action states and add icons to toolbar [#11047]
  - Show character count in password generator dialog [#10940]
  - Add ability to expire entries from context menu [#8731]
  - Add copy field shortcuts to Auto-Type select dialog [#11518]
  - Passkeys: Add support for selecting group on creation
    [#11260]
  - Browser: Refactor Access Control Dialog [#9607]
  - Browser: Add support for URL wildcards and exact URL [#9835,
    [#11752]]
  - Browser: Allow groups to restrict by browser integration key
    [#9852]
  - CLI: Add -d dry-run shortcut to merge command [#11192]
  - CLI: HTML export [#11590]
  - macOS: Add option to disable database lock when switching
    user [#9707]
  - SSH Agent: Implement feature to clear all identities [#10649]
  - Fixes
  - Major enhancements to documentation [#11745, #10875]
  - Various UI and style fixes [#11535, #11672, #11511, #11445,
    [#11426], #11273, #11455, #11321, #11594, #11539, #11351,
    [#11354], #10748, #11602, #11303, #11291, #10091, #9417]
  - Various improvements to tags [#11676, #11652, #11625]
  - Reset splitter sizes on database unlock [#11014]
  - Remember sort order in Auto-type popup dialog [#9508]
  - Fix database password clearing when modifying key file /
    hardware key [#11001]
  - Fix issues with reloading and handling of externally modified
    db file [#10612]
  - Support passkeys with Bitwarden import [#11401]
  - Fix various quirks with CSV import [#11787]
  - Show Auto-Type select dialog even if window title is empty
    [#11603]
  - Refactor hardware key code to avoid deadlock [#11703, #10872]
  - Show a clear error if hardware key is found slots are not
    configured [#11609]
  - Fix signal/slot disconnect when opening import wizard
    [#11039]
  - Fix setting window title as modified [#11542]
  - Fix assert hit when viewing entry history [#11413]
  - Fix multiple crashes on Linux [#11513]
  - Fix backup file path time substitution [#10834]
  - Prevent long-running threads from deadlocking the program
    with only 1 CPU [#11155]
  - Hide the menubar when menus lose focus (if toggled off)
    [#11355, #11605]
  - CLI: Restore the original codepage on windows [#11470]
  - Passkeys: Various fixes [#10934, #10951]
  - Browser: Fix cancel with database unlock dialog [#11435]
  - Browser: Resolve references in Access Confirm dialog [#11055]
  - SSH Agent: Add timeout to streams to prevent deadlock
    [#11290]
  - macOS: Replace legacy code for screen recording permissions
    [#11428]
  - macOS: Implement Secure Input Mode [#11623]
  - macOS: Fix showing ambigious name in settings [#11373]
  - macOS: Fix copy-to-clipboard shortcut in entry preview widget
    [#10966]
  - Linux: Prevent multiple lock requests [#11306]
  - Snap: Prevent need for snap helper script to configure
    browser extension [#10924]
  - Windows: Detect outdated VC Redist with MSI installer
    [#11469]
  - Windows: Additional exclusion fields for clipboard [#11521]
- drop 43904d87b7ae7339e393ce9de465556e3da52d3c.patch</changelog>
</package>
<package pkgid="9d97cd9226b27b4cc2c9954e0dc66019167d47859db59aee9442be4bb9b51e39" name="keepassxc-lang" arch="noarch">
  <version epoch="0" ver="2.7.9" rel="bp156.2.3.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don’t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    “best-matching credentials” [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
</package>
<package pkgid="44d7f2b4f9e150ec7bcfac0527d7b7883aa5baebba2de2e0af1fe95a5b3a7d15" name="keepassxc-lang" arch="noarch">
  <version epoch="0" ver="2.7.9" rel="bp156.2.6.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931200">- Update to 2.6.6
  - Fixed
  - Fix focusing search when pressing hotkey #6603
  - Trim whitespace from TOTP key input prior to processing #6604
  - Fix building on macOS #6598
  - Resolve compiler warnings for unused return values #6607
- Changes from 2.6.5
  - Added
  - Show search bar when toolbar is hidden or in overflow #6279
  - Show countdown for clipboard clearing in status bar #6333
  - Command line option to lock all open databases #6511
  - Allow CSV import of bare TOTP secrets #6211
  - Retain file creation time when saving database #6576
  - Set permissions of saved attachments to be private to the
    current user #6363
  - OPVault: Use Text instead of Name for attribute names #6334
  - Changed
  - Reports: Allow resizing of reports columns #6435
  - Reports: Toggle showing expired entries #6534
  - Save Always on Top setting #6236
  - Password generator can exclude additional lookalike
    characters (6/G, 8/B) #6196
  - Fixed
  - Allow setting MSI properties in unattended install #6196
  - Update MainWindow minimum size to enable smaller verticle
    space #6196
  - Use application font size when setting default or monospace
    fonts #6332
  - Fix notes not clearing in entry preview panel in some cases
    [#6481]
  - macOS: Correct window activation when restoring from tray
    [#6575]
  - macOS: Better handling of minimize after unlock when using
    browser integration #6338
  - Linux: Start after the system tray is available on LXQt #6216
  - Linux: Allow selection of modal dialogs on X11 in Auto-Type
    [#6204]
  - KeeShare: prevent crash when file extension is missing #6174</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1623931201">- newer version of fedora now have the sane cmake macros too.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1634126400">- add https://patch-diff.githubusercontent.com/raw/keepassxreboot/keepassxc/pull/7045.patch
  and adapt it for 2.6.6: This allows us building with LTO</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1648123200">- Update to 2.7.0
  - Major Additions
  - Implement KDBX 4.1 [#7114]
  - Add direct write save option for cloud storage and GVFS
    [#6594]
  - Prevent screen capture on Windows and macOS [#6030]
  - Support quick unlock using Windows Hello [#7384]
  - Support quick unlock using Apple Watch [#5526]
  - Allow specifying database backup paths [#7035]
  - Add tag functionality [#6487][#7436][#7446]
  - Add password rating column to entry view [#4797]
  - Add group clone action [#6124]
  - Show modifications between entry history items [#6789]
  - Ability to bulk-delete and purge unused custom icons [#5970]
  - Support adding custom passphrase wordlists [#6799]
  - Support passphrase wordlists in numbered and PGP-signed
    formats [#6791]
  - Implement support for hardware keys via wireless NFC [#6895]
  - SSH Agent: Add support for OpenSSH 8.2 FIDO/U2F keys [#6371]
  - CLI: Implement attachment handling [#5538]
  - CLI: Add support for okon in offline HIBP checks [#5478]
  - CLI: Implement search command and remove locate [#6805]
  - CLI: Add db statistic output to db-info command [#7032]
  - CLI: Add -i/--include option to generate command. [#7112]
  - CLI: Add a -n (--notes) option to add and edit commands
    [#4646]
  - CLI: Add keyfile option to import command [#5402]
  - CLI: Adding a best option to clip to copy a password of the
    best match [#4489]
  - Browser: Add Microsoft Edge support on Linux [#7100]
  - Browser: Support native password generator from the extension
    [#6529]
  - Browser: Add group settings [#4180]
  - Browser: Add feature to ignore entries for HTTP-Auth Logins
    [#5394]
  - Browser: Support triggering Auto-Type from browser extension
    [#6272]
  - Browser: Add delete-entry command to API [#6899]
  - Browser: Add search 'by-path' url to API [#5535]
  - Browser: search for entries by UUID to API [#4763]
  - Browser: Support auto-download of favicon on entry addition
    [#7179]
  - Auto-Type: Major improvements to Auto-Type
    [#5864][#7463][#7435][#7391][#7129][#6400][#6364][#6361][#5283][#7507]
  - Auto-Type: Fix typing to virtual machines on Windows [#7366]
  - Auto-Type: Re-implement X11 keysym emulation [#7098]
  - Auto-Type: Support multiple Xkb layouts [#6247]
  - Auto-Type: Abort keystroke if modifiers held on X11
    [#6351][#6357]
  - Auto-Type: Add TOTP option to entry level Auto-Type menu
    [#6675]
  - FdoSecrets: Major Refactor and Code Consolidation
    [#5747][#5660][#7043][#6915]
  - FdoSecrets: Implement unlock before search [#6943]
  - Reports: Add browser statistics report [#7197]
  - Major Changes
  - Port crypto backend to Botan [#6209]
  - Improve attachment handling and security
    [#6606][#5034][#7083]
  - Allow selecting any open database in unlock dialog [#5427]
  - KeeShare: Remove checking signed container and QuaZip
    dependency [#7223]
  - Introduce security option to enable copy on double click
    (default off) [#6433]
  - Add 'delete entry without confirm' functionality [#5812]
  - Improve macOS and Windows platform integration [#5851]
  - Lock only the current database by default [#6652]
  - Show expired entries on DB unlock [#7290]
  - Update D-Bus adaptor interface class name to match definition
    file [#7523]
  - Other Changes and Fixes
  - Add countdown progress bar to TOTP preview [#6930]
  - Enter favicon url directly on icons page [#6614]
  - Set C++17 as standard in the build system [#7180]
  - Internalize ykcore into code base [#6654]
  - Transition to Visual Studio builds on Windows [#5874]
  - Ability to delete entries from health check reports [#6537]
  - Enhance remembering last-used directories [#6711]
  - Implement org.freedesktop.appearance.color-scheme support on
    Linux [#7422]
  - Support sorting HTML export [#7011]
  - Add display number of characters in passphrases [#5449]
  - Use Alt+Tab on macOS to switch between databases [#5407]
  - Add feature to sort groups using shortcut keys [#6999]
  - Add CTRL+Enter to apply password generator changes [#6414]
  - Display Database created timestamp on statistics report
    [#6876]
  - Browser: Improve best matching credentials setting [#6893]
  - SSH Agent: Use both Pageant and OpenSSH agent simultaneously
    on Windows [#6288]
  - SSH Agent: Allow using database path to resolve keys [#6365]
  - SSH Agent: Show correct error messages in main window [#7166]
  - Multiple fixes for MSI installer [#6630]
  - Fix tab order for CSV import dialog to match screen order
    [#7315]
  - Don't mark kdbx:// urls as invalid [#7221]
  - Make selected text copyable instead of copying password
    [#7209]
  - Detect timestamp resolution for CSV files [#7196]
  - Fix crash while downloading favicon [#7104]
  - Correct naming of newly generated keyx files [#7010]
  - Place the 'Recycle Bin' at the bottom of the list when groups
    are sorted [#7004]
  - Handle tilde with custom browser paths [#6659]
  - Don't scroll up when deleting an entry [#6833]
  - Set the MIME-Type to text/plain when using wl-copy on wayland
    [#6832]
  - Fix adaptive icon painting [#5989][#6033]
  - Fix favicon download from URL with non-standard port [#5509]
  - Ignore recycle bin on KeePassHTTP migration [#5481]
  - Fix keepassxc-cr-recovery utility [#7521]
  - Fix Auto-Type not working when audio recording indicator is
    active on macOS 12.2+ [#7526]
- drop 7045.patch
- adapt build requires to the new version</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649505600">- update to 2.7.1:
  * Show when tags are changed in entry history
  * Improve tags editing and allow spaces in tags
  * Improve layout of entry preview panel
  * Incorporate patches to support Flatpak distribution
  * Add expiration presets for 12 and 24 hours
  * Fix crash when building history change list
  * Fix hiding password on database unlock
  * Fix AES KDF slow transform speed
  * Auto-Type: Correct timing issue on macOS and Linux that prevented typing
  * Auto-Type: Fix use of Ctrl/Alt/Shift/Win modifiers on Windows
  * Auto-Type: Reduce/eliminate delay when searching for entries
  * Auto-Type: Map ASCII dead keys on Linux for international keyboards
  * CLI: Fix detection of hardware keys (YubiKey)
  * CLI: Add missing parameter -c to add/edit entries command
  * Secret Service: Fix crash when multiple prompts are shown
  * SSH Agent: Fix default agent selection on Windows
  * Fix database unlock dialog not being the top window on Linux
  * Fix drag/drop entries between tabs on Wayland
  * Fix compiling with minizip-ng</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1666612800">- update to 2.7.3:
  Due to a bug in macOS window behavior, 2.7.2 has been immediately
  superseded by 2.7.3.
  - Changes
  - Enhance Tags Support and Add Saved Searches [#8435, #8607]
  - Significant improvements to entry preview panel [#7993]
  - Add password strength indicator to all password fields [#7885]
  - Limit zxcvbn entropy estimation length to 128 characters [#7748]
  - Try full URL path when fetching favicon [#8565]
  - Hide usernames in preview panel when hidden in entry view [#8608]
  - Enable dark title bar on windows when accent color is not used [#8498]
  - Add option to display passwords in color in preview panel [#7097]
  - Add XML Export option to GUI [#8524]
  - Increase entropy required for a "good" password rating to 75 [#8523]
  - Add shortcut to copy password with TOTP appended [#8443]
  - Show entry count in status bar [#8435]
  - Allow KeePassXC to be built without X11 [#8147]
  - Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
  - Add setting for number of recent files [#8239]
  - Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
  - Replace offensive words in eff_large.wordlist [#7968]
  - Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
  - Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
  - Add config variable to specify default database file name [#8042]
  - Support numeric aware sorting on Windows and macOS [#8363]
  - CLI: Add db-edit command [#8400]
  - CLI: Add option to display all attributes with show command [#8256]
  - CLI: Show UUID and tags with show and clip commands [#8241]
  - Browser: Move socket into separate directory on Linux [#8030]
  - Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
  - FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
  - FdoSecrets: Skip entries in recycle bin when searching [#8021]
  - Fixes
  - Fix potential deadlock in UI when saving [#8606]
  - Fix newlines when copying notes from preview panel [#8542]
  - Fix dark mode detection on Linux [#8477]
  - Fix crash when deleting items in recycle bin while searching [#8117]
  - Fix crash when trying to close database during unlock [#8144]
  - Fix tabbing around the interface [#8435, #8520]
  - Fix OPVault import when there are multiple OTP fields [#8436]
  - Fix various Windows Hello bugs [#8354]
  - Fix use of Apple Watch for Quick Unlock [#8311]
  - Better handling of "Lock on Minimize" setting [#8202]
  - Check for write permission before entering portable mode [#8447]
  - Correct regex escape logic to prevent parse errors [#7778]
  - Normalize slashes and file case for last used databases [#7864, #7214]
  - Link ykcore against pthread [#7807]
  - Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
  - Auto-Type: Fix use of modifiers under macOS [#8111]
  - CLI: Fix output when using clip with the -t flag [#8271]
  - Browser: Use asynchronous access confirm dialog [#8273]
  - Browser: Always send database locked/unlocked status [#8114]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1667217600">- update to 2.7.4:
  - Changes
  - Add 2 months expiration preset [#8687]
  - CLI: Add Unicode support on Windows [#8618]
  - Fixes
  - Fix crash on macOS when unlocking database [#8676]
  - Fix display of passwords in preview panel [#8633]
  - Fix clicking links in entry preview panel [#8644]
  - Prevent expired entries search if no results returned [#8643]
  - Browser: Revert code causing connection problems [#8665]
  - Browser: Fix socket file symbolic link on Linux [#8656]
  - Flatpak: Fix launching browser proxy service [#8680]
  - SSH Agent: Fix paegent support on Windows [#8619]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1684238400">- update to 2.7.5:
  - Changes
  - Add menu option to allow screenshots [#8841]
  - Add support for Botan 3 [#9388]
  - Increase max TOTP step to 24 hours [#9149]
  - Improve HTML export layout [#8987]
  - Turn search reset off by default [#9153]
  - Use QClipboard::clear() instead of setting blank text [#9148]
  - Hide group column header choice when not in search [#9171]
  - Improve look of KeePassXC logo and icons [#9355]
  - Add keyboard shortcuts for app and database settings [#9007]
  - Hide rename button from attachments preview panel [#8842]
  - Linux: Set SingleMainWindow in .desktop file [#7430]
  - Fixes
  - Fix crash when search clears while creating new entry [#9230]
  - Fix crash when using Windows Hello in a Remote Desktop
    session [#9006]
  - Fix crash in Group Edit after enabling Browser Integration
    [#8778]
  - Fix canceling quick unlock when it is unavailable [#9034]
  - Set password input field font correctly [#8732]
  - Greatly improve performance when rendering entry view [#9398]
  - Fix various accessibility issues [#9138]
  - Fix arrows size when expand/collapse a group [#9096]
  - Select the clone instead of the original after cloning an
    entry [#9070]
  - Fix bugs with preview widget [#9170]
  - Fix status bar update when switching to other DB [#9073]
  - Fix database settings spin box bug [#9101]
  - Fix Ctrl+Tab shortcut to cycle databases in unlock dialog
    [#8839]
  - Fix TOTP QR code maintaining square ratio [#9027]
  - Fix Auto-Type configuration page on custom sequence selection
    [#8752]
  - Fix unexpected behavior of --lock when KeePassXC is not
    running [#8889]
  - Make open folder icon exempt from "Apply group icon to entry"
    [#9205]
  - Allow setting default file open directory with env var
    [#9192]
  - SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
  - Browser: Fix Native Messaging script path with BSD OS's
    [#8835]
  - MacOS: Fix text selection for Auto-Type clear field [#9066]
  - MacOS: Don't rely on AppleInterfaceStyle for theme switching
    [#8615]
  - Windows: Remove registry detection of desktop shortcut
    [#9380]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1692360000">- update to 2.7.6:
  - Changes
  - Significant improvement to visual when drag/drop entries
    [#9698]
  - Automatically prompt for Quick Unlock when showing unlock
    dialog [#9697]
  - Improve colorful lock icon and fix file MIME icon on KDE
    [#9632]
  - Ability to search by entry UUID [#9571]
  - Add challenge-response support for NitroKey 3 [#9631]
  - Auto-Type: Disable entry level Auto-Type when disabled at
    group/entry [#9672]
  - Browser: Show warning when adding duplicate URL's to entry
    [#9588][#9635]
  - Browser: Improve error message when proxy cannot be found
    [#9385]
  - Fixes
  - Fix crash on exit on macOS [#9620]
  - Fix crash on search if entry doesn't have a group [#9633]
  - Fix several issues with Quick Unlock [#9697]
  - Enable save button when not auto-saving non-data changes
    [#9634]
  - Several UI/UX fixes [#9647]
  - Move toolbar back to top of window when disabling movement
    [#9699]
  - Browser: Fix handling of expired credentials [#9595]
  - Windows: Prevent white flicker when launching application
    [#9637]
  - Linux: Fix warning message about allow screencapture [#9638]
  - FdoSecrets: Fix access confirmation dialog showing even when
    disabled [#9690]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1702987200">- enable building of utils/keepassxc-cr-recovery for openSUSE
  this adds buildrequires for golang-packaging/golang/zst</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710072000">- update to 2.7.7:
  - Changes
  - Support USB Hotplug for Hardware Key interface [#10092]
  - Support 1PUX and Bitwarden import [#9815]
  - Browser: Add support for PassKeys [#8825, #9987, #10318]
  - Build System: Move to vcpkg manifest mode [#10088]
  - Fixes
  - Fix multiple TOTP issues [#9874]
  - Fix focus loss on save when the editor is not visible anymore
    [#10075]
  - Fix visual when removing entry from history [#9947]
  - Fix first entry is not selected when a search is performed
    [#9868]
  - Prevent scrollbars on entry drag/drop [#9747]
  - Prevent duplicate characters in "Also choose from" field of
    password generator [#9803]
  - Security: Prevent byte-by-byte and attachment inference side
    channel attacks [#10266]
  - Browser: Fix raising Update Entry messagebox [#9853]
  - Browser: Fix bugs when returning credentials [#9136]
  - Browser: Fix crash on database open from browser [#9939]
  - Browser: Fix support for referenced URL fields [#8788]
  - MacOS: Fix crash when changing highlight/accent color
    [#10348]
  - MacOS: Fix TouchID appearing even though lid is closed
    [#10092]
  - Windows: Fix terminating KeePassXC processes with MSI
    installer [#9822]
  - FdoSecrets: Fix database merge crash when enabled [#10136]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1710417600">- do not list _contraints and _service files as source as the
  source validator does not handle this atm.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714996800">- update to 2.7.8:
  - Changes
  - Add hotkey for showing search help [#10591]
  - Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown)
    [#10625]
  - Add per-database auto-save delay setting [#9100]
  - Add configurable password strength check on database password
    [#9782]
  - Add setting to hide menubar [#10341]
  - Improve Bitwarden 1PUX import and support organization
    collections [#10499]
  - Show advanced settings checkbox only for settings that have
    them [#6513]
  - Remove obsolete setting for requiring repeated password entry
    [#9722]
  - Passkeys: Allow registering Passkeys to existing entries
    [#10408]
  - Passkeys: Show warning about data being unencrypted before
    Passkey export [#10411]
  - Passkeys: Support NFC and USB transports [#10402]
  - Passkeys: Pass extension JSON data to browser [#10615]
  - SSH Agent: Do not use entries from recycle bin [#10518]
  - Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type
    [#10008]
  - Windows: Improve DACL memory access protection [#10618]
  - Fixes
  - Fix crash when deleting history items [#10451]
  - Fix crash on screen lock or computer sleep [#10458]
  - Fix search field not being focused after unlock [#10459]
  - Fix loss of window focus when Auto-Type needs to unlock a
    database [#10555]
  - Fix inconsistent TOTP visibility on unlock [#10009]
  - Fix CSV import skipping over single-name groups [#10575]
  - Fix key file folder being remembered even if disabled in
    settings [#10636]
  - Fix issues with entry editing and database locking [#10667]
  - Fix key file text when provided on command line [#10642]
  - Fix issues with hardware key auto detection [#10663]
  - Do not override monospace font size [#10282]
  - Perform group sort only when group view is in focus [#10202]
  - Do not show decimals for attachment sizes in Bytes [#10595]
  - Prevent merging of global custom data when merging databases
    [#10452]
  - Fix minor translation issues [#10635]
  - Passkeys: Fix StrongBox incompatibility [#10420]
  - Passkeys: Set RP ID to effective domain if unset instead of
    returning an error [#10384]
  - Passkeys: Various UI fixes and improvements [#10427, #10608,
    [#10609]]
  - AppImage: Fix URL opening [#10624]
  - Flatpak: Fix application autostart [#10563]
  - Linux/macOS: Fix button sizes on modal alert popups [#10500]
  - Linux: Fix clipboard clear on Wayland [#10500]
  - Windows: Preserve file-hidden attribute [#10343]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1718798400">- update to 2.7.9:
  - Changes
  - Passkeys: Ability to easily remove a passkey from an entry
    [#10777]
  - Snap: Use new desktop portal for native messaging integration
    [#10906]
  - Fixes
  - Improve entry placeholder/reference feature [#10846]
  - Improve CSV importing when title field isn't specified
    [#10843]
  - Improve encrypted Bitwarden importing [#10800]
  - Improve database settings UX [#10821]
  - Improve handling of clipboard actions from entry preview
    [#10810]
  - Improve group/entry view resize behavior and set sensible
    defaults [#10641]
  - Passkeys: Fix incorrect username fill [#10874]
  - Passkeys: Return additional data to the extension [#10857]
  - Fix password clear timer inconsistency on unlock view
    [#10708]
  - Fix portability check [#10760]
  - Fix page overflow on HTML exports [#10735]
  - Fix broken builds when using system provided zxcvbn [#10717]
  - Fix copy password button when text is selected [#10853]
  - Fix tab ordering on application settings pages [#10907]
  - SSH Agent: Fix broken decrypt button [#10638]
  - Windows: Fix ALT Auto-Type modifier [#10795]
  - Windows: Fix wrong DACL memory size allocation [#10712]
  - macOS: Fix monospace font sizing [#10739]
  - Flatpak: Fix configuration settings off-by-one error [#10688]
  - BSD: Fix compiling with libusb implementation [#10736]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1722686400">- build with Botan 3 on Tumbleweed (boo#1228824)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1723896000">- build with Botan 3 on Leap 15.7</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730548800">- Backports 43904d87b7ae7339e393ce9de465556e3da52d3c.patch:
  integrate changes from SR#1181559</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730721600">- drop runtime dependency on update-desktop-files</changelog>
</package>
<package pkgid="a3599a6ab81bd9986e10b73fff3ae3135e4b5e7da9dbfb4ce9190cbf7d27e90d" name="keybase-client" arch="aarch64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="ab95d571869b388fe7fdf87bd995e864313ad1c3968cd19ef4a095cbc996a4cb" name="keybase-client" arch="i586">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="1b4dbf876c28790e32820146a09dfca67aa3ba379ad834f7defd6d1519e29186" name="keybase-client" arch="ppc64le">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="008b6feb84c95e4cf81b2be4602d3226cbd6f13ffe6fcbd09a7159f37a2ad5fb" name="keybase-client" arch="s390x">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="5c8140c37356a8752a11f4812f1de45a8544e3f8e22cb605e2e59781901d687c" name="keybase-client" arch="src">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="8868a0dd08536e2c497a4396745392e5691ca0a9f67637f0e2bfc7946568ad7c" name="keybase-client" arch="x86_64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.3.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1566043200">- Upgrade to version 4.3.1
  * Replies will automatically notify who you're replying to.
  * Support user lookup by phone number.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
</package>
<package pkgid="f9959d800259a0b075e7e9b8f978a43c57f96fa84fa31b14571d074ee3c0695a" name="keybase-client" arch="aarch64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="e2d392d6fa234d6adf45e94ef2f1fcbcd499104864919a4d3bcafcc085d13186" name="keybase-client" arch="i586">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="025fd2527ea8569b8014df587dcd95d5ac436d457c964ebd33c693e74fd68f52" name="keybase-client" arch="ppc64le">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="4f3cc0227809a9e5b0325683d0feb7e3f8a6722ce8ee5efc694a7b78a01e9885" name="keybase-client" arch="s390x">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="373af27304fc00a2e311f3e588b9548d5a22d6acf52d5623f9dc97e90140f119" name="keybase-client" arch="src">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="5066c2b947132b25fe7c500b88a81d6582e369265511ec7e1907651b6002c2d0" name="keybase-client" arch="x86_64">
  <version epoch="0" ver="6.2.8" rel="bp156.2.6.1"/>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1570968000">- Upgrade to version 4.6.0
  * Added bot managment commands.
  * Better support for federated addresses in Stellar feature.
  * Miscellaneous bug fixes.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1572350400">- Upgrade to version 4.7.2
  * Fix an issue with device provisioning.
  * Fix account deletion.
  * Better account-reset workflow.
  * Faster inbox loading.</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1577448000">- Upgrade to version 5.1.1
  * Enabled blocking users from their profile
- Upgrade to version 5.1.0
  * New features for blocking and reporting bad people
  * Large File Storage in git
  * Various bug fixes around team management
  * Dark mode fixes
  * Smaller bug fixes and performance improvements
- Upgrade to version 5.0.0
  * Switch between multiple accounts quickly
  * Send short audio snippets in chat in mobile
  * Sync KBFS files to your device for offline access
  * Keybase FM: Learn about new features in each release in the app
  * Better location sharing in chat
  * Removed navigation while in chat in mobile
  * Dark mode fixes
  * Faster startup time
  * Improved animations</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1580731200">- Upgrade to version 5.2.0
  * Bots: you can now install bots into your conversations. Kick
    off a meeting with Google Meet Bot, watch for commits with
    GitHub Bot, create new issues in JIRA, and more, all without
    leaving Keybase.
- Limit source file to the `go` subdirectory of the repository as
  we only build the command line client and the GUI sources contain
  files with problematic licenses.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1589544000">- Upgrade to version 5.4.1
  * You can now search for open teams using chat search.
  * KBFS performance fixed.
  * Many performance improvements and bug fixes.
- Explicity use go1.14 as the client won't build with older
  versions.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1591531200">- Upgrade to version 5.5.1
  * Improved file sharing with email addresses
  * Fix a panic when KEYBASE_DISABLE_FAVORITES is set. This should
    not affect typical use cases.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1602936000">- Upgrade to version 5.5.2
  * Miscellaneous bugfixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1608811200">- Make package conform to spec-cleaner</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.6.1" date="1612699200">- Upgrade to version 5.6.1
  * Various bug fixes, security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1624536000">- Upgrade to version 5.7.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.8.1" date="1633176000">- Upgrade to version 5.8.1
  * Security enhancements</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.0" date="1640865600">- Upgrade to version 5.9.0
  * Security enhancements
- Upgrade Go version used for compilation to 1.16
- Added vendor-5.9.0.tar.xz providing vendored dependencies, as
  upstream no longer vendors them.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 5.9.1" date="1642852800">- Upgrade to version 5.9.1
  * Fix issue where the KBFS mountpoint would be disconnected after
    restarting Keybase (Transport endpoint is not connected).</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1656244800">- Upgrade to version 6.0.2
  * Bug fixes</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674302400">- Integrate KBFS packages previously build via own source package
  * Upstream integrated these into the same source.
  * Also includes adding kbfs-related patches
    ensure-mount-dir-exists.patch and
    ensure-service-stop-unmounts-filesystem.patch.
- Upgrade Go version used for compilation to 1.19.
- Use Systemd unit file from upstream source.
- Replace deprecated tar_scm source service by obs_scm.
- Drop the no longer required go_nostrip macro.
- Drop unnessecary use of gofilelist macro.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.0.2" date="1674648000">- Limit parallel test execution as that seems to cause failing
  builds on OBS that don't occur locally.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1690459200">- Upgrade to version 6.2.2
  * No change log provided</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 6.2.2" date="1691236800">- Update the Image dependency to address CVE-2023-29408 /
  bsc#1213928. This is done via the new update-image-tiff.patch.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1718884800">- Update to version 6.2.8
  * Update client CA
  * Fix incomplete locking in config file handling.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1721822400">- Update the Image dependency to address CVE-2024-24792 /
  bsc#1227167. This is done via an update of
  update-image-tiff.patch.</changelog>
</package>
<package pkgid="bcea49728bfec25009555970fd01f764756ba82bb42d7a86621c8008dce0dfe1" name="keybinder-3.0" arch="src">
  <version epoch="0" ver="0.3.2" rel="bp156.4.2.1"/>
  <changelog author="rsalevsky@suse.com" date="1383134400">- Create package.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1407499200">- Clean up spec file for inclusion into factory.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to vesion 0.3.1
- rename package to keybinder-3.0
- fix version number (it's 0.3.1, not 3.0)
- ugly obsoletes hacks to fix that versioning error</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1503144000">- update to version 0.3.2:
  * Fix ``keybinder_bind`` and others to not crash on non-X11
    displays. It simply returns FALSE, failing to bind the key.
  * Add new API:
    gboolean keybinder_supported()
    Return TRUE if on key bindings are implemented for this
    configuration.
  * Fix deprecated directives in build system</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update summaries. Replace ancient RPM macros by new constructs.</changelog>
</package>
<package pkgid="fcfb1a6770f01fd8ba1f8252995eac1529dcb499a289b726cfa65d118a1da991" name="keybinder-3.0-devel" arch="aarch64">
  <version epoch="0" ver="0.3.2" rel="bp156.4.2.1"/>
  <changelog author="rsalevsky@suse.com" date="1383134400">- Create package.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1407499200">- Clean up spec file for inclusion into factory.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to vesion 0.3.1
- rename package to keybinder-3.0
- fix version number (it's 0.3.1, not 3.0)
- ugly obsoletes hacks to fix that versioning error</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1503144000">- update to version 0.3.2:
  * Fix ``keybinder_bind`` and others to not crash on non-X11
    displays. It simply returns FALSE, failing to bind the key.
  * Add new API:
    gboolean keybinder_supported()
    Return TRUE if on key bindings are implemented for this
    configuration.
  * Fix deprecated directives in build system</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update summaries. Replace ancient RPM macros by new constructs.</changelog>
</package>
<package pkgid="e0fb1acc76c2700b063fc33e3f5ffdba910eb155e2683c34d59bcbee2f43e666" name="keybinder-3.0-devel" arch="i586">
  <version epoch="0" ver="0.3.2" rel="bp156.4.2.1"/>
  <changelog author="rsalevsky@suse.com" date="1383134400">- Create package.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1407499200">- Clean up spec file for inclusion into factory.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to vesion 0.3.1
- rename package to keybinder-3.0
- fix version number (it's 0.3.1, not 3.0)
- ugly obsoletes hacks to fix that versioning error</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1503144000">- update to version 0.3.2:
  * Fix ``keybinder_bind`` and others to not crash on non-X11
    displays. It simply returns FALSE, failing to bind the key.
  * Add new API:
    gboolean keybinder_supported()
    Return TRUE if on key bindings are implemented for this
    configuration.
  * Fix deprecated directives in build system</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update summaries. Replace ancient RPM macros by new constructs.</changelog>
</package>
<package pkgid="7b5a25a7991285f8be96f76abe22b7ea7807c8b459e5a6e8eb147db6543d4631" name="keybinder-3.0-devel" arch="ppc64le">
  <version epoch="0" ver="0.3.2" rel="bp156.4.2.1"/>
  <changelog author="rsalevsky@suse.com" date="1383134400">- Create package.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1407499200">- Clean up spec file for inclusion into factory.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to vesion 0.3.1
- rename package to keybinder-3.0
- fix version number (it's 0.3.1, not 3.0)
- ugly obsoletes hacks to fix that versioning error</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1503144000">- update to version 0.3.2:
  * Fix ``keybinder_bind`` and others to not crash on non-X11
    displays. It simply returns FALSE, failing to bind the key.
  * Add new API:
    gboolean keybinder_supported()
    Return TRUE if on key bindings are implemented for this
    configuration.
  * Fix deprecated directives in build system</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update summaries. Replace ancient RPM macros by new constructs.</changelog>
</package>
<package pkgid="96b0e998274eea20cd4f97f1eb07a23ec1ce32e659814c6c3b1d81d15bc9d338" name="keybinder-3.0-devel" arch="s390x">
  <version epoch="0" ver="0.3.2" rel="bp156.4.2.1"/>
  <changelog author="rsalevsky@suse.com" date="1383134400">- Create package.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1407499200">- Clean up spec file for inclusion into factory.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to vesion 0.3.1
- rename package to keybinder-3.0
- fix version number (it's 0.3.1, not 3.0)
- ugly obsoletes hacks to fix that versioning error</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1503144000">- update to version 0.3.2:
  * Fix ``keybinder_bind`` and others to not crash on non-X11
    displays. It simply returns FALSE, failing to bind the key.
  * Add new API:
    gboolean keybinder_supported()
    Return TRUE if on key bindings are implemented for this
    configuration.
  * Fix deprecated directives in build system</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update summaries. Replace ancient RPM macros by new constructs.</changelog>
</package>
<package pkgid="1e43737267a39a7ac8ecc0a802f9b99da50bbfcd4ae4c0a44bcb00ffc689af25" name="keybinder-3.0-devel" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="bp156.4.2.1"/>
  <changelog author="rsalevsky@suse.com" date="1383134400">- Create package.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1407499200">- Clean up spec file for inclusion into factory.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to vesion 0.3.1
- rename package to keybinder-3.0
- fix version number (it's 0.3.1, not 3.0)
- ugly obsoletes hacks to fix that versioning error</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1503144000">- update to version 0.3.2:
  * Fix ``keybinder_bind`` and others to not crash on non-X11
    displays. It simply returns FALSE, failing to bind the key.
  * Add new API:
    gboolean keybinder_supported()
    Return TRUE if on key bindings are implemented for this
    configuration.
  * Fix deprecated directives in build system</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update summaries. Replace ancient RPM macros by new constructs.</changelog>
</package>
<package pkgid="684bd919d0983420480dbc1dcadb7e0ebc0c9ea88f562bf6843f988106bb539a" name="kmail-account-wizard" arch="aarch64">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- No code change since 23.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Link against KWallet explicitly
  * Adapt to KMailTransportAkonadi being moved into AkonadiMime</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1730116800">- Add patch (CVE-2024-50624, boo#1232454, kde#487882)
  * CVE-2024-50624.patch</changelog>
</package>
<package pkgid="815d158a179cab0a320ac4a884a959e58bb663b3620d24e8bd033439a614bedd" name="kmail-account-wizard" arch="src">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- No code change since 23.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Link against KWallet explicitly
  * Adapt to KMailTransportAkonadi being moved into AkonadiMime</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1730116800">- Add patch (CVE-2024-50624, boo#1232454, kde#487882)
  * CVE-2024-50624.patch</changelog>
</package>
<package pkgid="6b3c44a3846ac7eb3a89a172a1d05b9ef313fd684d7862d669c58d7f461a5f4a" name="kmail-account-wizard" arch="x86_64">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- No code change since 23.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Link against KWallet explicitly
  * Adapt to KMailTransportAkonadi being moved into AkonadiMime</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1730116800">- Add patch (CVE-2024-50624, boo#1232454, kde#487882)
  * CVE-2024-50624.patch</changelog>
</package>
<package pkgid="bd2dfd364442a9eaaaca2d696fa15398bbedd35bae10ed03ccd4bb08aa091d9a" name="kmail-account-wizard-lang" arch="noarch">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- No code change since 23.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Link against KWallet explicitly
  * Adapt to KMailTransportAkonadi being moved into AkonadiMime</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1730116800">- Add patch (CVE-2024-50624, boo#1232454, kde#487882)
  * CVE-2024-50624.patch</changelog>
</package>
<package pkgid="b8b3563d28ee611f729d617fa414efe009620bc293d9ba27ad15852e0c2ff67f" name="kmozillahelper" arch="aarch64">
  <version epoch="0" ver="5.0.6" rel="bp156.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1484568000">- Add initial package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913600">- Update to 4.9.10 to fix build with Leap 42.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913601">- Update to 4.9.11 to fix default file dialog location and filename</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485259200">- Update to 4.9.12 to implement setting dialogs modal for firefox</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485604800">- Update to 4.9.13 to disallow simultaneous commands from multiple
  firefox windows</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485777600">- Update to 4.9.14 to fix 100% CPU consumption after quitting firefox
  and also handle fake mimetypes for protocols (x-scheme-handler/...)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485864000">- Update to 4.9.15 to fix the default directory selected in
  file dialogs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486555200">- Bump version to 5.0.0, ready for factory submission</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486814400">- Update to 5.0.1:
  * Fix crash with missing filetype description gh#kmozillahelper/9
  * Fix excessive CPU use in some cases</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516363200">- Update to 5.0.2:
  * Workaround for file dialogs failing to deliver the result
    under some circumstances</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1544270400">- Update to 5.0.3:
  * Improve HiDPI support
- Add %license</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1563451200">- Update to 5.0.4:
  * Cache helper protocols (boo#1037806)
  * Use new style connect
  * Don't use deprecated KRun:runUrl without flags, use with flags</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1564660800">- Update to 5.0.5:
  * Recognize if started from Thunderbird</changelog>
  <changelog author="Tom Warnke &lt;tom@toromtomtom.com&gt;" date="1594987200">- Supplement not only MozillaFirefox, but also MozillaThunderbird</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1602936000">- Update to 5.0.6:
  * Exclude kmozillahelper from session management (boo#1176852)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704369600">- BuildRequire rpm_macro(cmake_kf5): we call cmake_kf5 to build and
  thus need to ensure the macro to be known.
- Add extra-cmake-modules BuildRequires: fix build after recent KDE
  Frameworks update.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1707912000">- Remove rpm_macro(cmake_kf5) BR, not supported on Leap and
  extra-cmke-modules already takes care of that.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1753963200">- Drop the requirement on mozilla-kde4-version. It's only provided
  by old versions of MozillaFirefox and MozillaThunderbird, which
  we don't want to pull in (boo#1247369)</changelog>
</package>
<package pkgid="01cf327e344c90c6347668ce8804444979ea327df10111912050b321e95d62e3" name="kmozillahelper" arch="i586">
  <version epoch="0" ver="5.0.6" rel="bp156.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1484568000">- Add initial package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913600">- Update to 4.9.10 to fix build with Leap 42.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913601">- Update to 4.9.11 to fix default file dialog location and filename</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485259200">- Update to 4.9.12 to implement setting dialogs modal for firefox</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485604800">- Update to 4.9.13 to disallow simultaneous commands from multiple
  firefox windows</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485777600">- Update to 4.9.14 to fix 100% CPU consumption after quitting firefox
  and also handle fake mimetypes for protocols (x-scheme-handler/...)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485864000">- Update to 4.9.15 to fix the default directory selected in
  file dialogs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486555200">- Bump version to 5.0.0, ready for factory submission</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486814400">- Update to 5.0.1:
  * Fix crash with missing filetype description gh#kmozillahelper/9
  * Fix excessive CPU use in some cases</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516363200">- Update to 5.0.2:
  * Workaround for file dialogs failing to deliver the result
    under some circumstances</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1544270400">- Update to 5.0.3:
  * Improve HiDPI support
- Add %license</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1563451200">- Update to 5.0.4:
  * Cache helper protocols (boo#1037806)
  * Use new style connect
  * Don't use deprecated KRun:runUrl without flags, use with flags</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1564660800">- Update to 5.0.5:
  * Recognize if started from Thunderbird</changelog>
  <changelog author="Tom Warnke &lt;tom@toromtomtom.com&gt;" date="1594987200">- Supplement not only MozillaFirefox, but also MozillaThunderbird</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1602936000">- Update to 5.0.6:
  * Exclude kmozillahelper from session management (boo#1176852)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704369600">- BuildRequire rpm_macro(cmake_kf5): we call cmake_kf5 to build and
  thus need to ensure the macro to be known.
- Add extra-cmake-modules BuildRequires: fix build after recent KDE
  Frameworks update.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1707912000">- Remove rpm_macro(cmake_kf5) BR, not supported on Leap and
  extra-cmke-modules already takes care of that.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1753963200">- Drop the requirement on mozilla-kde4-version. It's only provided
  by old versions of MozillaFirefox and MozillaThunderbird, which
  we don't want to pull in (boo#1247369)</changelog>
</package>
<package pkgid="00c7825088d741cc0c2e3785dfffa6388221db575fa5f9d7f721c66e68aa3b6b" name="kmozillahelper" arch="ppc64le">
  <version epoch="0" ver="5.0.6" rel="bp156.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1484568000">- Add initial package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913600">- Update to 4.9.10 to fix build with Leap 42.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913601">- Update to 4.9.11 to fix default file dialog location and filename</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485259200">- Update to 4.9.12 to implement setting dialogs modal for firefox</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485604800">- Update to 4.9.13 to disallow simultaneous commands from multiple
  firefox windows</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485777600">- Update to 4.9.14 to fix 100% CPU consumption after quitting firefox
  and also handle fake mimetypes for protocols (x-scheme-handler/...)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485864000">- Update to 4.9.15 to fix the default directory selected in
  file dialogs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486555200">- Bump version to 5.0.0, ready for factory submission</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486814400">- Update to 5.0.1:
  * Fix crash with missing filetype description gh#kmozillahelper/9
  * Fix excessive CPU use in some cases</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516363200">- Update to 5.0.2:
  * Workaround for file dialogs failing to deliver the result
    under some circumstances</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1544270400">- Update to 5.0.3:
  * Improve HiDPI support
- Add %license</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1563451200">- Update to 5.0.4:
  * Cache helper protocols (boo#1037806)
  * Use new style connect
  * Don't use deprecated KRun:runUrl without flags, use with flags</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1564660800">- Update to 5.0.5:
  * Recognize if started from Thunderbird</changelog>
  <changelog author="Tom Warnke &lt;tom@toromtomtom.com&gt;" date="1594987200">- Supplement not only MozillaFirefox, but also MozillaThunderbird</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1602936000">- Update to 5.0.6:
  * Exclude kmozillahelper from session management (boo#1176852)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704369600">- BuildRequire rpm_macro(cmake_kf5): we call cmake_kf5 to build and
  thus need to ensure the macro to be known.
- Add extra-cmake-modules BuildRequires: fix build after recent KDE
  Frameworks update.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1707912000">- Remove rpm_macro(cmake_kf5) BR, not supported on Leap and
  extra-cmke-modules already takes care of that.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1753963200">- Drop the requirement on mozilla-kde4-version. It's only provided
  by old versions of MozillaFirefox and MozillaThunderbird, which
  we don't want to pull in (boo#1247369)</changelog>
</package>
<package pkgid="0a6cf145e60fbfdd6541b822cf4d58088e2cb8c922891619d8cf5fa945dd8166" name="kmozillahelper" arch="s390x">
  <version epoch="0" ver="5.0.6" rel="bp156.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1484568000">- Add initial package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913600">- Update to 4.9.10 to fix build with Leap 42.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913601">- Update to 4.9.11 to fix default file dialog location and filename</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485259200">- Update to 4.9.12 to implement setting dialogs modal for firefox</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485604800">- Update to 4.9.13 to disallow simultaneous commands from multiple
  firefox windows</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485777600">- Update to 4.9.14 to fix 100% CPU consumption after quitting firefox
  and also handle fake mimetypes for protocols (x-scheme-handler/...)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485864000">- Update to 4.9.15 to fix the default directory selected in
  file dialogs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486555200">- Bump version to 5.0.0, ready for factory submission</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486814400">- Update to 5.0.1:
  * Fix crash with missing filetype description gh#kmozillahelper/9
  * Fix excessive CPU use in some cases</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516363200">- Update to 5.0.2:
  * Workaround for file dialogs failing to deliver the result
    under some circumstances</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1544270400">- Update to 5.0.3:
  * Improve HiDPI support
- Add %license</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1563451200">- Update to 5.0.4:
  * Cache helper protocols (boo#1037806)
  * Use new style connect
  * Don't use deprecated KRun:runUrl without flags, use with flags</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1564660800">- Update to 5.0.5:
  * Recognize if started from Thunderbird</changelog>
  <changelog author="Tom Warnke &lt;tom@toromtomtom.com&gt;" date="1594987200">- Supplement not only MozillaFirefox, but also MozillaThunderbird</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1602936000">- Update to 5.0.6:
  * Exclude kmozillahelper from session management (boo#1176852)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704369600">- BuildRequire rpm_macro(cmake_kf5): we call cmake_kf5 to build and
  thus need to ensure the macro to be known.
- Add extra-cmake-modules BuildRequires: fix build after recent KDE
  Frameworks update.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1707912000">- Remove rpm_macro(cmake_kf5) BR, not supported on Leap and
  extra-cmke-modules already takes care of that.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1753963200">- Drop the requirement on mozilla-kde4-version. It's only provided
  by old versions of MozillaFirefox and MozillaThunderbird, which
  we don't want to pull in (boo#1247369)</changelog>
</package>
<package pkgid="ea2d2523c62fa1ac717271b5b3a9b8ff816c002217806b1925a3b5a69e123b2e" name="kmozillahelper" arch="src">
  <version epoch="0" ver="5.0.6" rel="bp156.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1484568000">- Add initial package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913600">- Update to 4.9.10 to fix build with Leap 42.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913601">- Update to 4.9.11 to fix default file dialog location and filename</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485259200">- Update to 4.9.12 to implement setting dialogs modal for firefox</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485604800">- Update to 4.9.13 to disallow simultaneous commands from multiple
  firefox windows</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485777600">- Update to 4.9.14 to fix 100% CPU consumption after quitting firefox
  and also handle fake mimetypes for protocols (x-scheme-handler/...)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485864000">- Update to 4.9.15 to fix the default directory selected in
  file dialogs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486555200">- Bump version to 5.0.0, ready for factory submission</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486814400">- Update to 5.0.1:
  * Fix crash with missing filetype description gh#kmozillahelper/9
  * Fix excessive CPU use in some cases</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516363200">- Update to 5.0.2:
  * Workaround for file dialogs failing to deliver the result
    under some circumstances</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1544270400">- Update to 5.0.3:
  * Improve HiDPI support
- Add %license</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1563451200">- Update to 5.0.4:
  * Cache helper protocols (boo#1037806)
  * Use new style connect
  * Don't use deprecated KRun:runUrl without flags, use with flags</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1564660800">- Update to 5.0.5:
  * Recognize if started from Thunderbird</changelog>
  <changelog author="Tom Warnke &lt;tom@toromtomtom.com&gt;" date="1594987200">- Supplement not only MozillaFirefox, but also MozillaThunderbird</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1602936000">- Update to 5.0.6:
  * Exclude kmozillahelper from session management (boo#1176852)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704369600">- BuildRequire rpm_macro(cmake_kf5): we call cmake_kf5 to build and
  thus need to ensure the macro to be known.
- Add extra-cmake-modules BuildRequires: fix build after recent KDE
  Frameworks update.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1707912000">- Remove rpm_macro(cmake_kf5) BR, not supported on Leap and
  extra-cmke-modules already takes care of that.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1753963200">- Drop the requirement on mozilla-kde4-version. It's only provided
  by old versions of MozillaFirefox and MozillaThunderbird, which
  we don't want to pull in (boo#1247369)</changelog>
</package>
<package pkgid="f700a7da448bb28b8041237c0da511ef7c185c300d424e0a9b0d5fe907c9e6aa" name="kmozillahelper" arch="x86_64">
  <version epoch="0" ver="5.0.6" rel="bp156.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1484568000">- Add initial package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913600">- Update to 4.9.10 to fix build with Leap 42.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913601">- Update to 4.9.11 to fix default file dialog location and filename</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485259200">- Update to 4.9.12 to implement setting dialogs modal for firefox</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485604800">- Update to 4.9.13 to disallow simultaneous commands from multiple
  firefox windows</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485777600">- Update to 4.9.14 to fix 100% CPU consumption after quitting firefox
  and also handle fake mimetypes for protocols (x-scheme-handler/...)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485864000">- Update to 4.9.15 to fix the default directory selected in
  file dialogs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486555200">- Bump version to 5.0.0, ready for factory submission</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486814400">- Update to 5.0.1:
  * Fix crash with missing filetype description gh#kmozillahelper/9
  * Fix excessive CPU use in some cases</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516363200">- Update to 5.0.2:
  * Workaround for file dialogs failing to deliver the result
    under some circumstances</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1544270400">- Update to 5.0.3:
  * Improve HiDPI support
- Add %license</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1563451200">- Update to 5.0.4:
  * Cache helper protocols (boo#1037806)
  * Use new style connect
  * Don't use deprecated KRun:runUrl without flags, use with flags</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1564660800">- Update to 5.0.5:
  * Recognize if started from Thunderbird</changelog>
  <changelog author="Tom Warnke &lt;tom@toromtomtom.com&gt;" date="1594987200">- Supplement not only MozillaFirefox, but also MozillaThunderbird</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1602936000">- Update to 5.0.6:
  * Exclude kmozillahelper from session management (boo#1176852)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704369600">- BuildRequire rpm_macro(cmake_kf5): we call cmake_kf5 to build and
  thus need to ensure the macro to be known.
- Add extra-cmake-modules BuildRequires: fix build after recent KDE
  Frameworks update.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1707912000">- Remove rpm_macro(cmake_kf5) BR, not supported on Leap and
  extra-cmke-modules already takes care of that.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1753963200">- Drop the requirement on mozilla-kde4-version. It's only provided
  by old versions of MozillaFirefox and MozillaThunderbird, which
  we don't want to pull in (boo#1247369)</changelog>
</package>
<package pkgid="0e6e7572bafd5581166f37907f65f7da2cf11d0e17903a081119b0732872ce65" name="knot" arch="aarch64">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="7a5206598fa019aed134baea8c92248f93986ceba07ed66bcfe3a48a8eb1d5b7" name="knot" arch="i586">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="82a24f7b5c4908e6f70e28acf15d83ead97ec6916037dc68a54101bab8bf1726" name="knot" arch="ppc64le">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="f31f786c3908cd3c9d69d55009ad1f771f183bff3b412bd00a1cd7cd5343b0d2" name="knot" arch="s390x">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="3be334431fe9ac23de1e45700317fbc36b74352bcd908e04bddcde49cce968bc" name="knot" arch="src">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="c3b21eb78a37e48856f46e36923d137aecc7310c84554c756844cfbab1da5252" name="knot" arch="x86_64">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="362e06a2dd700a562384983e33fc2d121e8e7ad8bcba97c0ef2496e3259cf3ee" name="knot-devel" arch="aarch64">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="43c04c9a521539c111f7089afdaf65ab87199291e96c2ec96408b7f340558ca5" name="knot-devel" arch="i586">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="22ba91462db8e04b0157dda6bde8f4554b744341e0cd31208adba918195ace2e" name="knot-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="26cebbe2c7b65983592a2fe36bdf61c0afa3f8d2850c9f5f22896c5cf01442ad" name="knot-devel" arch="s390x">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="0aed60537a9b4fa97429be75a148625800843f56ddb037b58500819d46701d3d" name="knot-devel" arch="x86_64">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="67c029a65061e377c5dc158c794427262f76cdda2f41a107c535e72494908d29" name="knot-utils" arch="aarch64">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="b70afd30cd9cf1f1dbfdf59c4011c8a705cc1744ca479d76a01fb1d5139baea2" name="knot-utils" arch="i586">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="45e0e0f48f2c034f2938d55d8b11d58c82c519476c02b6f3662e3cf8bae9638f" name="knot-utils" arch="ppc64le">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="33daee98a4b4c9c6b174be8dda9ab89d1bdc97aa72906fb3d3dcee0c09059778" name="knot-utils" arch="s390x">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="78ebd6c08f6cd3236a172ec69389f604d9826701ca94f7a5ac2c08bad8926445" name="knot-utils" arch="x86_64">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="001d1cb6d800267a7eb33a08a8beff44c8f8d2135e3e0dfd3964b0bde01e9922" name="konsole" arch="aarch64">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- Changes since 23.04.0:
  * Invalidate selection reference points on resize (kde#464040)
  * Fix kglobalaccel integration
  * Draw selected background for right half of double width char if selected (kde#468465)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Add tests to check fix of invalid parent in profile
  * Do not allow an invalid parent to be set in profiles (kde#467790)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Tab bar settings: fix MIME type filtering of custom CSS file picker
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Too many changes since 23.04.3, only listing bugfixes:
  * Fixed search bar false positive after clear scrollback (and reset) (kde#407317)
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)
  * Eliminate compilation warnings for plugins from using QAction::setShortcut(s) (kde#462615)
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Disable keyboard selection mode on resize (kde#467872)
  * Do not allow an invalid parent to be set in profiles (kde#467790)
  * Invalidate selection reference points on resize (kde#464040)
  * Draw selected background for right half of double width char if selected (kde#468465)
  * Fix crash in ProfileSettings (kde#423136)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- Changes since 23.07.90:
  * ScreenWindow::updateCurrentLine:  Better bound currentLine</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1693828800">- Add upstream crash fix (kde#473043)
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- Changes since 23.08.0:
  * Fix crashes in testTerminalInterface (kde#473043)
- Drop patch, merged upstream:
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * snapcraft: initial import snapcraft files.
  * Fix signed integer overflow due to uninitialized vars warning
  * Account for CJK wide chars in copyLineToStream
  * Add test case for block selection of CJK chars
  * Don't select half a CJK character (kde#474055)
  * Don't require FreeBSD/Qt5 tests to pass
  * Don't try to free terminalPart.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- Changes since 23.08.3:
  * Apply split view icons to the session context menu too.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1702641600">- Require extra-cmake-modules at build time</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * Show wallpaper on non-translucent top-levels (kde#477800)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749816000">- Add upstream security fix (CVE-2025-49091, boo#1244569)
  * 0001-Clear-the-arguments-if-the-command-is-not-found.patch</changelog>
</package>
<package pkgid="63e22a3ec7c7df1625eee821e9810ba1d89136defa6b440a9e011a55f1b3327b" name="konsole" arch="ppc64le">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- Changes since 23.04.0:
  * Invalidate selection reference points on resize (kde#464040)
  * Fix kglobalaccel integration
  * Draw selected background for right half of double width char if selected (kde#468465)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Add tests to check fix of invalid parent in profile
  * Do not allow an invalid parent to be set in profiles (kde#467790)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Tab bar settings: fix MIME type filtering of custom CSS file picker
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Too many changes since 23.04.3, only listing bugfixes:
  * Fixed search bar false positive after clear scrollback (and reset) (kde#407317)
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)
  * Eliminate compilation warnings for plugins from using QAction::setShortcut(s) (kde#462615)
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Disable keyboard selection mode on resize (kde#467872)
  * Do not allow an invalid parent to be set in profiles (kde#467790)
  * Invalidate selection reference points on resize (kde#464040)
  * Draw selected background for right half of double width char if selected (kde#468465)
  * Fix crash in ProfileSettings (kde#423136)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- Changes since 23.07.90:
  * ScreenWindow::updateCurrentLine:  Better bound currentLine</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1693828800">- Add upstream crash fix (kde#473043)
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- Changes since 23.08.0:
  * Fix crashes in testTerminalInterface (kde#473043)
- Drop patch, merged upstream:
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * snapcraft: initial import snapcraft files.
  * Fix signed integer overflow due to uninitialized vars warning
  * Account for CJK wide chars in copyLineToStream
  * Add test case for block selection of CJK chars
  * Don't select half a CJK character (kde#474055)
  * Don't require FreeBSD/Qt5 tests to pass
  * Don't try to free terminalPart.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- Changes since 23.08.3:
  * Apply split view icons to the session context menu too.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1702641600">- Require extra-cmake-modules at build time</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * Show wallpaper on non-translucent top-levels (kde#477800)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749816000">- Add upstream security fix (CVE-2025-49091, boo#1244569)
  * 0001-Clear-the-arguments-if-the-command-is-not-found.patch</changelog>
</package>
<package pkgid="ed1a89cd42f8f0de0b17a61370b0cedeb213106e68d84dfb6f6c3befbd3ed66a" name="konsole" arch="s390x">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- Changes since 23.04.0:
  * Invalidate selection reference points on resize (kde#464040)
  * Fix kglobalaccel integration
  * Draw selected background for right half of double width char if selected (kde#468465)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Add tests to check fix of invalid parent in profile
  * Do not allow an invalid parent to be set in profiles (kde#467790)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Tab bar settings: fix MIME type filtering of custom CSS file picker
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Too many changes since 23.04.3, only listing bugfixes:
  * Fixed search bar false positive after clear scrollback (and reset) (kde#407317)
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)
  * Eliminate compilation warnings for plugins from using QAction::setShortcut(s) (kde#462615)
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Disable keyboard selection mode on resize (kde#467872)
  * Do not allow an invalid parent to be set in profiles (kde#467790)
  * Invalidate selection reference points on resize (kde#464040)
  * Draw selected background for right half of double width char if selected (kde#468465)
  * Fix crash in ProfileSettings (kde#423136)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- Changes since 23.07.90:
  * ScreenWindow::updateCurrentLine:  Better bound currentLine</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1693828800">- Add upstream crash fix (kde#473043)
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- Changes since 23.08.0:
  * Fix crashes in testTerminalInterface (kde#473043)
- Drop patch, merged upstream:
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * snapcraft: initial import snapcraft files.
  * Fix signed integer overflow due to uninitialized vars warning
  * Account for CJK wide chars in copyLineToStream
  * Add test case for block selection of CJK chars
  * Don't select half a CJK character (kde#474055)
  * Don't require FreeBSD/Qt5 tests to pass
  * Don't try to free terminalPart.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- Changes since 23.08.3:
  * Apply split view icons to the session context menu too.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1702641600">- Require extra-cmake-modules at build time</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * Show wallpaper on non-translucent top-levels (kde#477800)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749816000">- Add upstream security fix (CVE-2025-49091, boo#1244569)
  * 0001-Clear-the-arguments-if-the-command-is-not-found.patch</changelog>
</package>
<package pkgid="39897082ddeb31428dc31dd2faf03b65e311f589088feb3d54ac4c79a071df92" name="konsole" arch="src">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- Changes since 23.04.0:
  * Invalidate selection reference points on resize (kde#464040)
  * Fix kglobalaccel integration
  * Draw selected background for right half of double width char if selected (kde#468465)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Add tests to check fix of invalid parent in profile
  * Do not allow an invalid parent to be set in profiles (kde#467790)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Tab bar settings: fix MIME type filtering of custom CSS file picker
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Too many changes since 23.04.3, only listing bugfixes:
  * Fixed search bar false positive after clear scrollback (and reset) (kde#407317)
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)
  * Eliminate compilation warnings for plugins from using QAction::setShortcut(s) (kde#462615)
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Disable keyboard selection mode on resize (kde#467872)
  * Do not allow an invalid parent to be set in profiles (kde#467790)
  * Invalidate selection reference points on resize (kde#464040)
  * Draw selected background for right half of double width char if selected (kde#468465)
  * Fix crash in ProfileSettings (kde#423136)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- Changes since 23.07.90:
  * ScreenWindow::updateCurrentLine:  Better bound currentLine</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1693828800">- Add upstream crash fix (kde#473043)
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- Changes since 23.08.0:
  * Fix crashes in testTerminalInterface (kde#473043)
- Drop patch, merged upstream:
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * snapcraft: initial import snapcraft files.
  * Fix signed integer overflow due to uninitialized vars warning
  * Account for CJK wide chars in copyLineToStream
  * Add test case for block selection of CJK chars
  * Don't select half a CJK character (kde#474055)
  * Don't require FreeBSD/Qt5 tests to pass
  * Don't try to free terminalPart.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- Changes since 23.08.3:
  * Apply split view icons to the session context menu too.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1702641600">- Require extra-cmake-modules at build time</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * Show wallpaper on non-translucent top-levels (kde#477800)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749816000">- Add upstream security fix (CVE-2025-49091, boo#1244569)
  * 0001-Clear-the-arguments-if-the-command-is-not-found.patch</changelog>
</package>
<package pkgid="cb2f7699913c1e295654723ba6ae3db85aa7e0145c3dbd87ab074ca1d244874d" name="konsole" arch="x86_64">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- Changes since 23.04.0:
  * Invalidate selection reference points on resize (kde#464040)
  * Fix kglobalaccel integration
  * Draw selected background for right half of double width char if selected (kde#468465)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Add tests to check fix of invalid parent in profile
  * Do not allow an invalid parent to be set in profiles (kde#467790)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Tab bar settings: fix MIME type filtering of custom CSS file picker
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Too many changes since 23.04.3, only listing bugfixes:
  * Fixed search bar false positive after clear scrollback (and reset) (kde#407317)
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)
  * Eliminate compilation warnings for plugins from using QAction::setShortcut(s) (kde#462615)
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Disable keyboard selection mode on resize (kde#467872)
  * Do not allow an invalid parent to be set in profiles (kde#467790)
  * Invalidate selection reference points on resize (kde#464040)
  * Draw selected background for right half of double width char if selected (kde#468465)
  * Fix crash in ProfileSettings (kde#423136)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- Changes since 23.07.90:
  * ScreenWindow::updateCurrentLine:  Better bound currentLine</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1693828800">- Add upstream crash fix (kde#473043)
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- Changes since 23.08.0:
  * Fix crashes in testTerminalInterface (kde#473043)
- Drop patch, merged upstream:
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * snapcraft: initial import snapcraft files.
  * Fix signed integer overflow due to uninitialized vars warning
  * Account for CJK wide chars in copyLineToStream
  * Add test case for block selection of CJK chars
  * Don't select half a CJK character (kde#474055)
  * Don't require FreeBSD/Qt5 tests to pass
  * Don't try to free terminalPart.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- Changes since 23.08.3:
  * Apply split view icons to the session context menu too.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1702641600">- Require extra-cmake-modules at build time</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * Show wallpaper on non-translucent top-levels (kde#477800)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749816000">- Add upstream security fix (CVE-2025-49091, boo#1244569)
  * 0001-Clear-the-arguments-if-the-command-is-not-found.patch</changelog>
</package>
<package pkgid="a1dbdcc9a32b9e3de796ee960579baeaf955c6595d3fd090477bbca3edc67364" name="konsole-part" arch="aarch64">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- Changes since 23.04.0:
  * Invalidate selection reference points on resize (kde#464040)
  * Fix kglobalaccel integration
  * Draw selected background for right half of double width char if selected (kde#468465)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Add tests to check fix of invalid parent in profile
  * Do not allow an invalid parent to be set in profiles (kde#467790)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Tab bar settings: fix MIME type filtering of custom CSS file picker
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Too many changes since 23.04.3, only listing bugfixes:
  * Fixed search bar false positive after clear scrollback (and reset) (kde#407317)
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)
  * Eliminate compilation warnings for plugins from using QAction::setShortcut(s) (kde#462615)
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Disable keyboard selection mode on resize (kde#467872)
  * Do not allow an invalid parent to be set in profiles (kde#467790)
  * Invalidate selection reference points on resize (kde#464040)
  * Draw selected background for right half of double width char if selected (kde#468465)
  * Fix crash in ProfileSettings (kde#423136)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- Changes since 23.07.90:
  * ScreenWindow::updateCurrentLine:  Better bound currentLine</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1693828800">- Add upstream crash fix (kde#473043)
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- Changes since 23.08.0:
  * Fix crashes in testTerminalInterface (kde#473043)
- Drop patch, merged upstream:
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * snapcraft: initial import snapcraft files.
  * Fix signed integer overflow due to uninitialized vars warning
  * Account for CJK wide chars in copyLineToStream
  * Add test case for block selection of CJK chars
  * Don't select half a CJK character (kde#474055)
  * Don't require FreeBSD/Qt5 tests to pass
  * Don't try to free terminalPart.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- Changes since 23.08.3:
  * Apply split view icons to the session context menu too.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1702641600">- Require extra-cmake-modules at build time</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * Show wallpaper on non-translucent top-levels (kde#477800)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749816000">- Add upstream security fix (CVE-2025-49091, boo#1244569)
  * 0001-Clear-the-arguments-if-the-command-is-not-found.patch</changelog>
</package>
<package pkgid="a064d70fdfca8a9f59ff521322f2521b215569003fb8157d0f6fc2d2186e8b2c" name="konsole-part" arch="ppc64le">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- Changes since 23.04.0:
  * Invalidate selection reference points on resize (kde#464040)
  * Fix kglobalaccel integration
  * Draw selected background for right half of double width char if selected (kde#468465)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Add tests to check fix of invalid parent in profile
  * Do not allow an invalid parent to be set in profiles (kde#467790)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Tab bar settings: fix MIME type filtering of custom CSS file picker
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Too many changes since 23.04.3, only listing bugfixes:
  * Fixed search bar false positive after clear scrollback (and reset) (kde#407317)
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)
  * Eliminate compilation warnings for plugins from using QAction::setShortcut(s) (kde#462615)
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Disable keyboard selection mode on resize (kde#467872)
  * Do not allow an invalid parent to be set in profiles (kde#467790)
  * Invalidate selection reference points on resize (kde#464040)
  * Draw selected background for right half of double width char if selected (kde#468465)
  * Fix crash in ProfileSettings (kde#423136)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- Changes since 23.07.90:
  * ScreenWindow::updateCurrentLine:  Better bound currentLine</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1693828800">- Add upstream crash fix (kde#473043)
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- Changes since 23.08.0:
  * Fix crashes in testTerminalInterface (kde#473043)
- Drop patch, merged upstream:
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * snapcraft: initial import snapcraft files.
  * Fix signed integer overflow due to uninitialized vars warning
  * Account for CJK wide chars in copyLineToStream
  * Add test case for block selection of CJK chars
  * Don't select half a CJK character (kde#474055)
  * Don't require FreeBSD/Qt5 tests to pass
  * Don't try to free terminalPart.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- Changes since 23.08.3:
  * Apply split view icons to the session context menu too.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1702641600">- Require extra-cmake-modules at build time</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * Show wallpaper on non-translucent top-levels (kde#477800)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749816000">- Add upstream security fix (CVE-2025-49091, boo#1244569)
  * 0001-Clear-the-arguments-if-the-command-is-not-found.patch</changelog>
</package>
<package pkgid="a99dfb18ccdd2aa9a7941721058056748d30e77ad03556b219e52a6894f30f4c" name="konsole-part" arch="s390x">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- Changes since 23.04.0:
  * Invalidate selection reference points on resize (kde#464040)
  * Fix kglobalaccel integration
  * Draw selected background for right half of double width char if selected (kde#468465)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Add tests to check fix of invalid parent in profile
  * Do not allow an invalid parent to be set in profiles (kde#467790)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Tab bar settings: fix MIME type filtering of custom CSS file picker
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Too many changes since 23.04.3, only listing bugfixes:
  * Fixed search bar false positive after clear scrollback (and reset) (kde#407317)
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)
  * Eliminate compilation warnings for plugins from using QAction::setShortcut(s) (kde#462615)
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Disable keyboard selection mode on resize (kde#467872)
  * Do not allow an invalid parent to be set in profiles (kde#467790)
  * Invalidate selection reference points on resize (kde#464040)
  * Draw selected background for right half of double width char if selected (kde#468465)
  * Fix crash in ProfileSettings (kde#423136)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- Changes since 23.07.90:
  * ScreenWindow::updateCurrentLine:  Better bound currentLine</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1693828800">- Add upstream crash fix (kde#473043)
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- Changes since 23.08.0:
  * Fix crashes in testTerminalInterface (kde#473043)
- Drop patch, merged upstream:
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * snapcraft: initial import snapcraft files.
  * Fix signed integer overflow due to uninitialized vars warning
  * Account for CJK wide chars in copyLineToStream
  * Add test case for block selection of CJK chars
  * Don't select half a CJK character (kde#474055)
  * Don't require FreeBSD/Qt5 tests to pass
  * Don't try to free terminalPart.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- Changes since 23.08.3:
  * Apply split view icons to the session context menu too.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1702641600">- Require extra-cmake-modules at build time</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * Show wallpaper on non-translucent top-levels (kde#477800)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749816000">- Add upstream security fix (CVE-2025-49091, boo#1244569)
  * 0001-Clear-the-arguments-if-the-command-is-not-found.patch</changelog>
</package>
<package pkgid="93a3ba1df6d60d25cf830404daf2d9248fd0476b8d7921b552ef9645dd75235b" name="konsole-part" arch="x86_64">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- Changes since 23.04.0:
  * Invalidate selection reference points on resize (kde#464040)
  * Fix kglobalaccel integration
  * Draw selected background for right half of double width char if selected (kde#468465)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Add tests to check fix of invalid parent in profile
  * Do not allow an invalid parent to be set in profiles (kde#467790)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Tab bar settings: fix MIME type filtering of custom CSS file picker
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Too many changes since 23.04.3, only listing bugfixes:
  * Fixed search bar false positive after clear scrollback (and reset) (kde#407317)
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)
  * Eliminate compilation warnings for plugins from using QAction::setShortcut(s) (kde#462615)
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Disable keyboard selection mode on resize (kde#467872)
  * Do not allow an invalid parent to be set in profiles (kde#467790)
  * Invalidate selection reference points on resize (kde#464040)
  * Draw selected background for right half of double width char if selected (kde#468465)
  * Fix crash in ProfileSettings (kde#423136)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- Changes since 23.07.90:
  * ScreenWindow::updateCurrentLine:  Better bound currentLine</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1693828800">- Add upstream crash fix (kde#473043)
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- Changes since 23.08.0:
  * Fix crashes in testTerminalInterface (kde#473043)
- Drop patch, merged upstream:
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * snapcraft: initial import snapcraft files.
  * Fix signed integer overflow due to uninitialized vars warning
  * Account for CJK wide chars in copyLineToStream
  * Add test case for block selection of CJK chars
  * Don't select half a CJK character (kde#474055)
  * Don't require FreeBSD/Qt5 tests to pass
  * Don't try to free terminalPart.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- Changes since 23.08.3:
  * Apply split view icons to the session context menu too.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1702641600">- Require extra-cmake-modules at build time</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * Show wallpaper on non-translucent top-levels (kde#477800)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749816000">- Add upstream security fix (CVE-2025-49091, boo#1244569)
  * 0001-Clear-the-arguments-if-the-command-is-not-found.patch</changelog>
</package>
<package pkgid="51ef6e316087eaf4a5148149876a3176ab9a4297b3b8b99e8e86e3153a684e0f" name="konsole-part-lang" arch="noarch">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- Changes since 23.04.0:
  * Invalidate selection reference points on resize (kde#464040)
  * Fix kglobalaccel integration
  * Draw selected background for right half of double width char if selected (kde#468465)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Add tests to check fix of invalid parent in profile
  * Do not allow an invalid parent to be set in profiles (kde#467790)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Tab bar settings: fix MIME type filtering of custom CSS file picker
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Too many changes since 23.04.3, only listing bugfixes:
  * Fixed search bar false positive after clear scrollback (and reset) (kde#407317)
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)
  * Eliminate compilation warnings for plugins from using QAction::setShortcut(s) (kde#462615)
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Disable keyboard selection mode on resize (kde#467872)
  * Do not allow an invalid parent to be set in profiles (kde#467790)
  * Invalidate selection reference points on resize (kde#464040)
  * Draw selected background for right half of double width char if selected (kde#468465)
  * Fix crash in ProfileSettings (kde#423136)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- Changes since 23.07.90:
  * ScreenWindow::updateCurrentLine:  Better bound currentLine</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1693828800">- Add upstream crash fix (kde#473043)
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- Changes since 23.08.0:
  * Fix crashes in testTerminalInterface (kde#473043)
- Drop patch, merged upstream:
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * snapcraft: initial import snapcraft files.
  * Fix signed integer overflow due to uninitialized vars warning
  * Account for CJK wide chars in copyLineToStream
  * Add test case for block selection of CJK chars
  * Don't select half a CJK character (kde#474055)
  * Don't require FreeBSD/Qt5 tests to pass
  * Don't try to free terminalPart.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- Changes since 23.08.3:
  * Apply split view icons to the session context menu too.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1702641600">- Require extra-cmake-modules at build time</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * Show wallpaper on non-translucent top-levels (kde#477800)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749816000">- Add upstream security fix (CVE-2025-49091, boo#1244569)
  * 0001-Clear-the-arguments-if-the-command-is-not-found.patch</changelog>
</package>
<package pkgid="774313a2ba6e04ab7641d3e256a100811922ace6d7d8c31fdd53b41beaf19e5f" name="konsole-zsh-completion" arch="noarch">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- Changes since 23.04.0:
  * Invalidate selection reference points on resize (kde#464040)
  * Fix kglobalaccel integration
  * Draw selected background for right half of double width char if selected (kde#468465)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Add tests to check fix of invalid parent in profile
  * Do not allow an invalid parent to be set in profiles (kde#467790)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Tab bar settings: fix MIME type filtering of custom CSS file picker
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Too many changes since 23.04.3, only listing bugfixes:
  * Fixed search bar false positive after clear scrollback (and reset) (kde#407317)
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)
  * Eliminate compilation warnings for plugins from using QAction::setShortcut(s) (kde#462615)
  * Adjust selection point coords when scrollback shrinks (kde#470346)
  * Disable keyboard selection mode on resize (kde#467872)
  * Do not allow an invalid parent to be set in profiles (kde#467790)
  * Invalidate selection reference points on resize (kde#464040)
  * Draw selected background for right half of double width char if selected (kde#468465)
  * Fix crash in ProfileSettings (kde#423136)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- Changes since 23.07.90:
  * ScreenWindow::updateCurrentLine:  Better bound currentLine</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1693828800">- Add upstream crash fix (kde#473043)
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- Changes since 23.08.0:
  * Fix crashes in testTerminalInterface (kde#473043)
- Drop patch, merged upstream:
  * 0001-Fix-crashes-in-testTerminalInterface.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- Changes since 23.08.2:
  * snapcraft: initial import snapcraft files.
  * Fix signed integer overflow due to uninitialized vars warning
  * Account for CJK wide chars in copyLineToStream
  * Add test case for block selection of CJK chars
  * Don't select half a CJK character (kde#474055)
  * Don't require FreeBSD/Qt5 tests to pass
  * Don't try to free terminalPart.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- Changes since 23.08.3:
  * Apply split view icons to the session context menu too.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1702641600">- Require extra-cmake-modules at build time</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- Changes since 23.08.4:
  * Show wallpaper on non-translucent top-levels (kde#477800)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749816000">- Add upstream security fix (CVE-2025-49091, boo#1244569)
  * 0001-Clear-the-arguments-if-the-command-is-not-found.patch</changelog>
</package>
<package pkgid="4eceffd3722d28b3aeab0a8d357b3c09fd718829e1d07e256deb3f24d4c18654" name="ksanecore" arch="src">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Crop the image after a scan finished (kde#457097)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Add explicit moc includes to sources for moc-covered headers
  * Crop the image after a scan finished (kde#457097)
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Have export macros header include version header (Qt6-only)
  * Support reading the gamma table</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Javier Llorente &lt;javier@opensuse.org&gt;" date="1723982400">- Add fix-scanner-search-crash.patch (kde#444987)</changelog>
</package>
<package pkgid="2c2efb44b585633c06bf2340ea4f33b3a175641ce81c9c9ca2c1429cda3b8f1a" name="ksanecore-devel" arch="aarch64">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Crop the image after a scan finished (kde#457097)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Add explicit moc includes to sources for moc-covered headers
  * Crop the image after a scan finished (kde#457097)
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Have export macros header include version header (Qt6-only)
  * Support reading the gamma table</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Javier Llorente &lt;javier@opensuse.org&gt;" date="1723982400">- Add fix-scanner-search-crash.patch (kde#444987)</changelog>
</package>
<package pkgid="13f86f3325731e490f2f1a08e046b8a31fd29057cbf19906cc3a6b14049b10cf" name="ksanecore-devel" arch="i586">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Crop the image after a scan finished (kde#457097)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Add explicit moc includes to sources for moc-covered headers
  * Crop the image after a scan finished (kde#457097)
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Have export macros header include version header (Qt6-only)
  * Support reading the gamma table</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Javier Llorente &lt;javier@opensuse.org&gt;" date="1723982400">- Add fix-scanner-search-crash.patch (kde#444987)</changelog>
</package>
<package pkgid="4a1847b94537da36aa17b52db81cf199c903d2c41e26c8d10052e718d71c5d03" name="ksanecore-devel" arch="ppc64le">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Crop the image after a scan finished (kde#457097)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Add explicit moc includes to sources for moc-covered headers
  * Crop the image after a scan finished (kde#457097)
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Have export macros header include version header (Qt6-only)
  * Support reading the gamma table</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Javier Llorente &lt;javier@opensuse.org&gt;" date="1723982400">- Add fix-scanner-search-crash.patch (kde#444987)</changelog>
</package>
<package pkgid="84486b0da4f1beeae4de9d8894e687c52c2da0701dc8b11964914c9c01c4c972" name="ksanecore-devel" arch="s390x">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Crop the image after a scan finished (kde#457097)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Add explicit moc includes to sources for moc-covered headers
  * Crop the image after a scan finished (kde#457097)
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Have export macros header include version header (Qt6-only)
  * Support reading the gamma table</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Javier Llorente &lt;javier@opensuse.org&gt;" date="1723982400">- Add fix-scanner-search-crash.patch (kde#444987)</changelog>
</package>
<package pkgid="5ca86da02cb77baf2a05d57703ec612bb678e72cd4203bd04acf44d63efc34ce" name="ksanecore-devel" arch="x86_64">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Crop the image after a scan finished (kde#457097)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Add explicit moc includes to sources for moc-covered headers
  * Crop the image after a scan finished (kde#457097)
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Have export macros header include version header (Qt6-only)
  * Support reading the gamma table</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Javier Llorente &lt;javier@opensuse.org&gt;" date="1723982400">- Add fix-scanner-search-crash.patch (kde#444987)</changelog>
</package>
<package pkgid="56f0804182cc65ba13554bdbb1bd80614e738903339946113ab84b82e51f5df6" name="ksanecore-lang" arch="noarch">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Crop the image after a scan finished (kde#457097)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Add explicit moc includes to sources for moc-covered headers
  * Crop the image after a scan finished (kde#457097)
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Have export macros header include version header (Qt6-only)
  * Support reading the gamma table</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Javier Llorente &lt;javier@opensuse.org&gt;" date="1723982400">- Add fix-scanner-search-crash.patch (kde#444987)</changelog>
</package>
<package pkgid="8fbd3028ad77d946904634607410d51ad4ac9d420c443fbcf5e2b380ea4d87b1" name="ksh" arch="aarch64">
  <version epoch="0" ver="93vu" rel="bp156.6.3.1"/>
  <changelog author="schwab@suse.de" date="1434024000">- cpp.patch: fix use of cc -E without -P</changelog>
  <changelog author="mls@suse.de" date="1434110400">- go back to ksh93u to have a stable version in SLE-12
  use 93vu as version so that the software stack sees this
  as an update. (FATE#319107, bsc#939252)
- add back the following patches:
  * astksh_builtin_poll20120806_001.diff
  * ksh93-backticks.dif
  * ksh93-crashes.dif
  * ksh93-dttree-crash.dif
  * ksh93-fdstatus.dif
  * ksh93-heredoclex.dif
  * ksh93-jobs.dif
  * ksh93-sfio.dif
  * ksh93-uninitialized.dif
- fix stk aliasing code [bnc#844071]
  new patch: ksh93-stkalias.dif
- fix stk restoration in sh_exec [bnc#844071]
  new patch: ksh93-stkfreeze.dif
- make a unknown location fatal in stkset so that we get a core
  dump right away instead of later in an unrelated part of code
  new patch: ksh93-stkset-abort.dif
- fix build with std malloc
  new patch: ksh93-malloc-hook.dif
- backport job locking code fix
  new patch: ksh93-joblock.dif
- disable vfork, use fork instead
  new patch: ksh93-disable-vfork.dif
- fix crash when the subshell number overflows [bnc#893031]
  new patch: ksh93-longenv.dif
- fix path normalization in cd command [bnc#867401]
  new patch: ksh93-cdpwd.dif
- fix segfault in dirname when cwd is gone [bnc#852160]
  new patch: ksh93-subshellpwd.dif
- Fix ksh using wrong files is some elements in the path do not
  exist [bnc#899014]
  new patch: ksh93-path-skip.dif</changelog>
  <changelog author="mls@suse.de" date="1442318400">- fix freeing memory twice if an array is turned into an
  compound variable and then unset [bnc#924043]
  new patch: ksh93-nvtree-free.dif
- backport fix for segmentation fault with 'typeset -RF'
  new patch: ksh93-int16double.dif
- backport hanging command substitution with large output fix from
  upstream [bnc#887320] [bnc#926172] [bnc#934437]
  new patch: ksh93-backtick.dif
- backport job list corruption fix from ksg93v [bnc#924318]
  new patch: ksh93-jpold.dif</changelog>
  <changelog author="mls@suse.de" date="1450267200">- add ast suffix to optbin manpages to prevent file conflicts
- fix fd leak when doing redirects in a subshell [bnc#954856]
  new patch: ksh93-redirectleak.dif
- rewrite ksh93-backtick.dif to a more correct version
  [bnc#953533] [bnc#955221]
- also tweak ksh93-backtick.dif so that the pipe is drained after
  io_restore is called.</changelog>
  <changelog author="mls@suse.de" date="1467720000">- own the ksh files in /etc/alternatives [bnc#987362] [bnc#962069]
- fix leak in optimize processing [bnc#982423]
  new patch: ksh93-optimizeleak.dif
- fix editor prediction code garbling input [bnc#964966]
  new patch: ksh93-edpredict.dif</changelog>
  <changelog author="mls@suse.de" date="1476273600">- fix locking error in spawn implementation [bnc#988213]
  new patch: ksh93-spawnlock.dif
- make patch ordering the same as in sle-11</changelog>
  <changelog author="mls@suse.de" date="1513771200">- fix build with new glibc versions
  new patch: ksh93-filedefined.dif</changelog>
  <changelog author="mls@suse.de" date="1567771200">- fix build by removing -Werror=return-type and using
  - ffat-lto-objects</changelog>
  <changelog author="mls@suse.de" date="1605268800">- remove sys/sysctl.h include as it no longer exists in linux
  new patch: ksh93-no-sysctl.dif</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- remove pwdutils buildrequires, it's not needed and pwdutils got
  dropped many years ago</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1611748800">- prepare usrmerge (boo#1029961)
- clean up SLE11 compat sections</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1617192000">- Remove BuildRequires: bind-libs. Requiring libs this way
  is just wrong.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mls@suse.de" date="1715601600">- remove no longer needed qemu workaround
  deleted patch: ksh-qemu.patch
- do not use posix_spawn as it lacks proper job handling [bsc#1224057]
  new patch: ksh93-no-posix_spawn.dif</changelog>
  <changelog author="mls@suse.de" date="1722513600">- fix segfault in variable substitution [bsc#1129288]
  new patch: ksh93-putval.dif
- fix untrusted environment execution [bsc#1160796] [CVE-2019-14868]
  new patch: ksh93-untrustedenv.dif</changelog>
</package>
<package pkgid="372d2b14018f551ad2f161a0e83f661a1476c0d3625837358b18aa5da1f254bc" name="ksh" arch="i586">
  <version epoch="0" ver="93vu" rel="bp156.6.3.1"/>
  <changelog author="schwab@suse.de" date="1434024000">- cpp.patch: fix use of cc -E without -P</changelog>
  <changelog author="mls@suse.de" date="1434110400">- go back to ksh93u to have a stable version in SLE-12
  use 93vu as version so that the software stack sees this
  as an update. (FATE#319107, bsc#939252)
- add back the following patches:
  * astksh_builtin_poll20120806_001.diff
  * ksh93-backticks.dif
  * ksh93-crashes.dif
  * ksh93-dttree-crash.dif
  * ksh93-fdstatus.dif
  * ksh93-heredoclex.dif
  * ksh93-jobs.dif
  * ksh93-sfio.dif
  * ksh93-uninitialized.dif
- fix stk aliasing code [bnc#844071]
  new patch: ksh93-stkalias.dif
- fix stk restoration in sh_exec [bnc#844071]
  new patch: ksh93-stkfreeze.dif
- make a unknown location fatal in stkset so that we get a core
  dump right away instead of later in an unrelated part of code
  new patch: ksh93-stkset-abort.dif
- fix build with std malloc
  new patch: ksh93-malloc-hook.dif
- backport job locking code fix
  new patch: ksh93-joblock.dif
- disable vfork, use fork instead
  new patch: ksh93-disable-vfork.dif
- fix crash when the subshell number overflows [bnc#893031]
  new patch: ksh93-longenv.dif
- fix path normalization in cd command [bnc#867401]
  new patch: ksh93-cdpwd.dif
- fix segfault in dirname when cwd is gone [bnc#852160]
  new patch: ksh93-subshellpwd.dif
- Fix ksh using wrong files is some elements in the path do not
  exist [bnc#899014]
  new patch: ksh93-path-skip.dif</changelog>
  <changelog author="mls@suse.de" date="1442318400">- fix freeing memory twice if an array is turned into an
  compound variable and then unset [bnc#924043]
  new patch: ksh93-nvtree-free.dif
- backport fix for segmentation fault with 'typeset -RF'
  new patch: ksh93-int16double.dif
- backport hanging command substitution with large output fix from
  upstream [bnc#887320] [bnc#926172] [bnc#934437]
  new patch: ksh93-backtick.dif
- backport job list corruption fix from ksg93v [bnc#924318]
  new patch: ksh93-jpold.dif</changelog>
  <changelog author="mls@suse.de" date="1450267200">- add ast suffix to optbin manpages to prevent file conflicts
- fix fd leak when doing redirects in a subshell [bnc#954856]
  new patch: ksh93-redirectleak.dif
- rewrite ksh93-backtick.dif to a more correct version
  [bnc#953533] [bnc#955221]
- also tweak ksh93-backtick.dif so that the pipe is drained after
  io_restore is called.</changelog>
  <changelog author="mls@suse.de" date="1467720000">- own the ksh files in /etc/alternatives [bnc#987362] [bnc#962069]
- fix leak in optimize processing [bnc#982423]
  new patch: ksh93-optimizeleak.dif
- fix editor prediction code garbling input [bnc#964966]
  new patch: ksh93-edpredict.dif</changelog>
  <changelog author="mls@suse.de" date="1476273600">- fix locking error in spawn implementation [bnc#988213]
  new patch: ksh93-spawnlock.dif
- make patch ordering the same as in sle-11</changelog>
  <changelog author="mls@suse.de" date="1513771200">- fix build with new glibc versions
  new patch: ksh93-filedefined.dif</changelog>
  <changelog author="mls@suse.de" date="1567771200">- fix build by removing -Werror=return-type and using
  - ffat-lto-objects</changelog>
  <changelog author="mls@suse.de" date="1605268800">- remove sys/sysctl.h include as it no longer exists in linux
  new patch: ksh93-no-sysctl.dif</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- remove pwdutils buildrequires, it's not needed and pwdutils got
  dropped many years ago</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1611748800">- prepare usrmerge (boo#1029961)
- clean up SLE11 compat sections</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1617192000">- Remove BuildRequires: bind-libs. Requiring libs this way
  is just wrong.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mls@suse.de" date="1715601600">- remove no longer needed qemu workaround
  deleted patch: ksh-qemu.patch
- do not use posix_spawn as it lacks proper job handling [bsc#1224057]
  new patch: ksh93-no-posix_spawn.dif</changelog>
  <changelog author="mls@suse.de" date="1722513600">- fix segfault in variable substitution [bsc#1129288]
  new patch: ksh93-putval.dif
- fix untrusted environment execution [bsc#1160796] [CVE-2019-14868]
  new patch: ksh93-untrustedenv.dif</changelog>
</package>
<package pkgid="be2af1b968a21dc0460e84e293d08ca2506dda6f477d6fb6241e30c1acb88fee" name="ksh" arch="ppc64le">
  <version epoch="0" ver="93vu" rel="bp156.6.3.1"/>
  <changelog author="schwab@suse.de" date="1434024000">- cpp.patch: fix use of cc -E without -P</changelog>
  <changelog author="mls@suse.de" date="1434110400">- go back to ksh93u to have a stable version in SLE-12
  use 93vu as version so that the software stack sees this
  as an update. (FATE#319107, bsc#939252)
- add back the following patches:
  * astksh_builtin_poll20120806_001.diff
  * ksh93-backticks.dif
  * ksh93-crashes.dif
  * ksh93-dttree-crash.dif
  * ksh93-fdstatus.dif
  * ksh93-heredoclex.dif
  * ksh93-jobs.dif
  * ksh93-sfio.dif
  * ksh93-uninitialized.dif
- fix stk aliasing code [bnc#844071]
  new patch: ksh93-stkalias.dif
- fix stk restoration in sh_exec [bnc#844071]
  new patch: ksh93-stkfreeze.dif
- make a unknown location fatal in stkset so that we get a core
  dump right away instead of later in an unrelated part of code
  new patch: ksh93-stkset-abort.dif
- fix build with std malloc
  new patch: ksh93-malloc-hook.dif
- backport job locking code fix
  new patch: ksh93-joblock.dif
- disable vfork, use fork instead
  new patch: ksh93-disable-vfork.dif
- fix crash when the subshell number overflows [bnc#893031]
  new patch: ksh93-longenv.dif
- fix path normalization in cd command [bnc#867401]
  new patch: ksh93-cdpwd.dif
- fix segfault in dirname when cwd is gone [bnc#852160]
  new patch: ksh93-subshellpwd.dif
- Fix ksh using wrong files is some elements in the path do not
  exist [bnc#899014]
  new patch: ksh93-path-skip.dif</changelog>
  <changelog author="mls@suse.de" date="1442318400">- fix freeing memory twice if an array is turned into an
  compound variable and then unset [bnc#924043]
  new patch: ksh93-nvtree-free.dif
- backport fix for segmentation fault with 'typeset -RF'
  new patch: ksh93-int16double.dif
- backport hanging command substitution with large output fix from
  upstream [bnc#887320] [bnc#926172] [bnc#934437]
  new patch: ksh93-backtick.dif
- backport job list corruption fix from ksg93v [bnc#924318]
  new patch: ksh93-jpold.dif</changelog>
  <changelog author="mls@suse.de" date="1450267200">- add ast suffix to optbin manpages to prevent file conflicts
- fix fd leak when doing redirects in a subshell [bnc#954856]
  new patch: ksh93-redirectleak.dif
- rewrite ksh93-backtick.dif to a more correct version
  [bnc#953533] [bnc#955221]
- also tweak ksh93-backtick.dif so that the pipe is drained after
  io_restore is called.</changelog>
  <changelog author="mls@suse.de" date="1467720000">- own the ksh files in /etc/alternatives [bnc#987362] [bnc#962069]
- fix leak in optimize processing [bnc#982423]
  new patch: ksh93-optimizeleak.dif
- fix editor prediction code garbling input [bnc#964966]
  new patch: ksh93-edpredict.dif</changelog>
  <changelog author="mls@suse.de" date="1476273600">- fix locking error in spawn implementation [bnc#988213]
  new patch: ksh93-spawnlock.dif
- make patch ordering the same as in sle-11</changelog>
  <changelog author="mls@suse.de" date="1513771200">- fix build with new glibc versions
  new patch: ksh93-filedefined.dif</changelog>
  <changelog author="mls@suse.de" date="1567771200">- fix build by removing -Werror=return-type and using
  - ffat-lto-objects</changelog>
  <changelog author="mls@suse.de" date="1605268800">- remove sys/sysctl.h include as it no longer exists in linux
  new patch: ksh93-no-sysctl.dif</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- remove pwdutils buildrequires, it's not needed and pwdutils got
  dropped many years ago</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1611748800">- prepare usrmerge (boo#1029961)
- clean up SLE11 compat sections</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1617192000">- Remove BuildRequires: bind-libs. Requiring libs this way
  is just wrong.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mls@suse.de" date="1715601600">- remove no longer needed qemu workaround
  deleted patch: ksh-qemu.patch
- do not use posix_spawn as it lacks proper job handling [bsc#1224057]
  new patch: ksh93-no-posix_spawn.dif</changelog>
  <changelog author="mls@suse.de" date="1722513600">- fix segfault in variable substitution [bsc#1129288]
  new patch: ksh93-putval.dif
- fix untrusted environment execution [bsc#1160796] [CVE-2019-14868]
  new patch: ksh93-untrustedenv.dif</changelog>
</package>
<package pkgid="145e5de9460ec7fdb54154d35db7644c9ccbf383bf9154b0fed94db688893309" name="ksh" arch="s390x">
  <version epoch="0" ver="93vu" rel="bp156.6.3.1"/>
  <changelog author="schwab@suse.de" date="1434024000">- cpp.patch: fix use of cc -E without -P</changelog>
  <changelog author="mls@suse.de" date="1434110400">- go back to ksh93u to have a stable version in SLE-12
  use 93vu as version so that the software stack sees this
  as an update. (FATE#319107, bsc#939252)
- add back the following patches:
  * astksh_builtin_poll20120806_001.diff
  * ksh93-backticks.dif
  * ksh93-crashes.dif
  * ksh93-dttree-crash.dif
  * ksh93-fdstatus.dif
  * ksh93-heredoclex.dif
  * ksh93-jobs.dif
  * ksh93-sfio.dif
  * ksh93-uninitialized.dif
- fix stk aliasing code [bnc#844071]
  new patch: ksh93-stkalias.dif
- fix stk restoration in sh_exec [bnc#844071]
  new patch: ksh93-stkfreeze.dif
- make a unknown location fatal in stkset so that we get a core
  dump right away instead of later in an unrelated part of code
  new patch: ksh93-stkset-abort.dif
- fix build with std malloc
  new patch: ksh93-malloc-hook.dif
- backport job locking code fix
  new patch: ksh93-joblock.dif
- disable vfork, use fork instead
  new patch: ksh93-disable-vfork.dif
- fix crash when the subshell number overflows [bnc#893031]
  new patch: ksh93-longenv.dif
- fix path normalization in cd command [bnc#867401]
  new patch: ksh93-cdpwd.dif
- fix segfault in dirname when cwd is gone [bnc#852160]
  new patch: ksh93-subshellpwd.dif
- Fix ksh using wrong files is some elements in the path do not
  exist [bnc#899014]
  new patch: ksh93-path-skip.dif</changelog>
  <changelog author="mls@suse.de" date="1442318400">- fix freeing memory twice if an array is turned into an
  compound variable and then unset [bnc#924043]
  new patch: ksh93-nvtree-free.dif
- backport fix for segmentation fault with 'typeset -RF'
  new patch: ksh93-int16double.dif
- backport hanging command substitution with large output fix from
  upstream [bnc#887320] [bnc#926172] [bnc#934437]
  new patch: ksh93-backtick.dif
- backport job list corruption fix from ksg93v [bnc#924318]
  new patch: ksh93-jpold.dif</changelog>
  <changelog author="mls@suse.de" date="1450267200">- add ast suffix to optbin manpages to prevent file conflicts
- fix fd leak when doing redirects in a subshell [bnc#954856]
  new patch: ksh93-redirectleak.dif
- rewrite ksh93-backtick.dif to a more correct version
  [bnc#953533] [bnc#955221]
- also tweak ksh93-backtick.dif so that the pipe is drained after
  io_restore is called.</changelog>
  <changelog author="mls@suse.de" date="1467720000">- own the ksh files in /etc/alternatives [bnc#987362] [bnc#962069]
- fix leak in optimize processing [bnc#982423]
  new patch: ksh93-optimizeleak.dif
- fix editor prediction code garbling input [bnc#964966]
  new patch: ksh93-edpredict.dif</changelog>
  <changelog author="mls@suse.de" date="1476273600">- fix locking error in spawn implementation [bnc#988213]
  new patch: ksh93-spawnlock.dif
- make patch ordering the same as in sle-11</changelog>
  <changelog author="mls@suse.de" date="1513771200">- fix build with new glibc versions
  new patch: ksh93-filedefined.dif</changelog>
  <changelog author="mls@suse.de" date="1567771200">- fix build by removing -Werror=return-type and using
  - ffat-lto-objects</changelog>
  <changelog author="mls@suse.de" date="1605268800">- remove sys/sysctl.h include as it no longer exists in linux
  new patch: ksh93-no-sysctl.dif</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- remove pwdutils buildrequires, it's not needed and pwdutils got
  dropped many years ago</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1611748800">- prepare usrmerge (boo#1029961)
- clean up SLE11 compat sections</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1617192000">- Remove BuildRequires: bind-libs. Requiring libs this way
  is just wrong.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mls@suse.de" date="1715601600">- remove no longer needed qemu workaround
  deleted patch: ksh-qemu.patch
- do not use posix_spawn as it lacks proper job handling [bsc#1224057]
  new patch: ksh93-no-posix_spawn.dif</changelog>
  <changelog author="mls@suse.de" date="1722513600">- fix segfault in variable substitution [bsc#1129288]
  new patch: ksh93-putval.dif
- fix untrusted environment execution [bsc#1160796] [CVE-2019-14868]
  new patch: ksh93-untrustedenv.dif</changelog>
</package>
<package pkgid="b34197b7a37f18eddc7243c539a1a947d690c8d7b8bcd0a5cf4f1936f5617e92" name="ksh" arch="src">
  <version epoch="0" ver="93vu" rel="bp156.6.3.1"/>
  <changelog author="werner@suse.de" date="1405684800">-  Add patch ksh93-backticks.dif to allow the ksh to use more than
  65536 characters in the output of old fashion `...` commands (bnc#887320)</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="werner@suse.de" date="1406894400">- Disable patch ksh93-backticks.dif as it breaks several test cases</changelog>
  <changelog author="schwab@suse.de" date="1434024000">- cpp.patch: fix use of cc -E without -P</changelog>
  <changelog author="mls@suse.de" date="1434110400">- go back to ksh93u to have a stable version in SLE-12
  use 93vu as version so that the software stack sees this
  as an update. (FATE#319107, bsc#939252)
- add back the following patches:
  * astksh_builtin_poll20120806_001.diff
  * ksh93-backticks.dif
  * ksh93-crashes.dif
  * ksh93-dttree-crash.dif
  * ksh93-fdstatus.dif
  * ksh93-heredoclex.dif
  * ksh93-jobs.dif
  * ksh93-sfio.dif
  * ksh93-uninitialized.dif
- fix stk aliasing code [bnc#844071]
  new patch: ksh93-stkalias.dif
- fix stk restoration in sh_exec [bnc#844071]
  new patch: ksh93-stkfreeze.dif
- make a unknown location fatal in stkset so that we get a core
  dump right away instead of later in an unrelated part of code
  new patch: ksh93-stkset-abort.dif
- fix build with std malloc
  new patch: ksh93-malloc-hook.dif
- backport job locking code fix
  new patch: ksh93-joblock.dif
- disable vfork, use fork instead
  new patch: ksh93-disable-vfork.dif
- fix crash when the subshell number overflows [bnc#893031]
  new patch: ksh93-longenv.dif
- fix path normalization in cd command [bnc#867401]
  new patch: ksh93-cdpwd.dif
- fix segfault in dirname when cwd is gone [bnc#852160]
  new patch: ksh93-subshellpwd.dif
- Fix ksh using wrong files is some elements in the path do not
  exist [bnc#899014]
  new patch: ksh93-path-skip.dif</changelog>
  <changelog author="mls@suse.de" date="1442318400">- fix freeing memory twice if an array is turned into an
  compound variable and then unset [bnc#924043]
  new patch: ksh93-nvtree-free.dif
- backport fix for segmentation fault with 'typeset -RF'
  new patch: ksh93-int16double.dif
- backport hanging command substitution with large output fix from
  upstream [bnc#887320] [bnc#926172] [bnc#934437]
  new patch: ksh93-backtick.dif
- backport job list corruption fix from ksg93v [bnc#924318]
  new patch: ksh93-jpold.dif</changelog>
  <changelog author="mls@suse.de" date="1450267200">- add ast suffix to optbin manpages to prevent file conflicts
- fix fd leak when doing redirects in a subshell [bnc#954856]
  new patch: ksh93-redirectleak.dif
- rewrite ksh93-backtick.dif to a more correct version
  [bnc#953533] [bnc#955221]
- also tweak ksh93-backtick.dif so that the pipe is drained after
  io_restore is called.</changelog>
  <changelog author="mls@suse.de" date="1467720000">- own the ksh files in /etc/alternatives [bnc#987362] [bnc#962069]
- fix leak in optimize processing [bnc#982423]
  new patch: ksh93-optimizeleak.dif
- fix editor prediction code garbling input [bnc#964966]
  new patch: ksh93-edpredict.dif</changelog>
  <changelog author="mls@suse.de" date="1476273600">- fix locking error in spawn implementation [bnc#988213]
  new patch: ksh93-spawnlock.dif
- make patch ordering the same as in sle-11</changelog>
  <changelog author="mls@suse.de" date="1513771200">- fix build with new glibc versions
  new patch: ksh93-filedefined.dif</changelog>
  <changelog author="mls@suse.de" date="1567771200">- fix build by removing -Werror=return-type and using
  - ffat-lto-objects</changelog>
  <changelog author="mls@suse.de" date="1605268800">- remove sys/sysctl.h include as it no longer exists in linux
  new patch: ksh93-no-sysctl.dif</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- remove pwdutils buildrequires, it's not needed and pwdutils got
  dropped many years ago</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1611748800">- prepare usrmerge (boo#1029961)
- clean up SLE11 compat sections</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1617192000">- Remove BuildRequires: bind-libs. Requiring libs this way
  is just wrong.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mls@suse.de" date="1715601600">- remove no longer needed qemu workaround
  deleted patch: ksh-qemu.patch
- do not use posix_spawn as it lacks proper job handling [bsc#1224057]
  new patch: ksh93-no-posix_spawn.dif</changelog>
  <changelog author="mls@suse.de" date="1722513600">- fix segfault in variable substitution [bsc#1129288]
  new patch: ksh93-putval.dif
- fix untrusted environment execution [bsc#1160796] [CVE-2019-14868]
  new patch: ksh93-untrustedenv.dif</changelog>
</package>
<package pkgid="c96f6377e34f7e9a5dfc5df3c7f9cef25e4be7ca3752a4a44ad276e695cd5df4" name="ksh" arch="x86_64">
  <version epoch="0" ver="93vu" rel="bp156.6.3.1"/>
  <changelog author="schwab@suse.de" date="1434024000">- cpp.patch: fix use of cc -E without -P</changelog>
  <changelog author="mls@suse.de" date="1434110400">- go back to ksh93u to have a stable version in SLE-12
  use 93vu as version so that the software stack sees this
  as an update. (FATE#319107, bsc#939252)
- add back the following patches:
  * astksh_builtin_poll20120806_001.diff
  * ksh93-backticks.dif
  * ksh93-crashes.dif
  * ksh93-dttree-crash.dif
  * ksh93-fdstatus.dif
  * ksh93-heredoclex.dif
  * ksh93-jobs.dif
  * ksh93-sfio.dif
  * ksh93-uninitialized.dif
- fix stk aliasing code [bnc#844071]
  new patch: ksh93-stkalias.dif
- fix stk restoration in sh_exec [bnc#844071]
  new patch: ksh93-stkfreeze.dif
- make a unknown location fatal in stkset so that we get a core
  dump right away instead of later in an unrelated part of code
  new patch: ksh93-stkset-abort.dif
- fix build with std malloc
  new patch: ksh93-malloc-hook.dif
- backport job locking code fix
  new patch: ksh93-joblock.dif
- disable vfork, use fork instead
  new patch: ksh93-disable-vfork.dif
- fix crash when the subshell number overflows [bnc#893031]
  new patch: ksh93-longenv.dif
- fix path normalization in cd command [bnc#867401]
  new patch: ksh93-cdpwd.dif
- fix segfault in dirname when cwd is gone [bnc#852160]
  new patch: ksh93-subshellpwd.dif
- Fix ksh using wrong files is some elements in the path do not
  exist [bnc#899014]
  new patch: ksh93-path-skip.dif</changelog>
  <changelog author="mls@suse.de" date="1442318400">- fix freeing memory twice if an array is turned into an
  compound variable and then unset [bnc#924043]
  new patch: ksh93-nvtree-free.dif
- backport fix for segmentation fault with 'typeset -RF'
  new patch: ksh93-int16double.dif
- backport hanging command substitution with large output fix from
  upstream [bnc#887320] [bnc#926172] [bnc#934437]
  new patch: ksh93-backtick.dif
- backport job list corruption fix from ksg93v [bnc#924318]
  new patch: ksh93-jpold.dif</changelog>
  <changelog author="mls@suse.de" date="1450267200">- add ast suffix to optbin manpages to prevent file conflicts
- fix fd leak when doing redirects in a subshell [bnc#954856]
  new patch: ksh93-redirectleak.dif
- rewrite ksh93-backtick.dif to a more correct version
  [bnc#953533] [bnc#955221]
- also tweak ksh93-backtick.dif so that the pipe is drained after
  io_restore is called.</changelog>
  <changelog author="mls@suse.de" date="1467720000">- own the ksh files in /etc/alternatives [bnc#987362] [bnc#962069]
- fix leak in optimize processing [bnc#982423]
  new patch: ksh93-optimizeleak.dif
- fix editor prediction code garbling input [bnc#964966]
  new patch: ksh93-edpredict.dif</changelog>
  <changelog author="mls@suse.de" date="1476273600">- fix locking error in spawn implementation [bnc#988213]
  new patch: ksh93-spawnlock.dif
- make patch ordering the same as in sle-11</changelog>
  <changelog author="mls@suse.de" date="1513771200">- fix build with new glibc versions
  new patch: ksh93-filedefined.dif</changelog>
  <changelog author="mls@suse.de" date="1567771200">- fix build by removing -Werror=return-type and using
  - ffat-lto-objects</changelog>
  <changelog author="mls@suse.de" date="1605268800">- remove sys/sysctl.h include as it no longer exists in linux
  new patch: ksh93-no-sysctl.dif</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- remove pwdutils buildrequires, it's not needed and pwdutils got
  dropped many years ago</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1611748800">- prepare usrmerge (boo#1029961)
- clean up SLE11 compat sections</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1617192000">- Remove BuildRequires: bind-libs. Requiring libs this way
  is just wrong.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mls@suse.de" date="1715601600">- remove no longer needed qemu workaround
  deleted patch: ksh-qemu.patch
- do not use posix_spawn as it lacks proper job handling [bsc#1224057]
  new patch: ksh93-no-posix_spawn.dif</changelog>
  <changelog author="mls@suse.de" date="1722513600">- fix segfault in variable substitution [bsc#1129288]
  new patch: ksh93-putval.dif
- fix untrusted environment execution [bsc#1160796] [CVE-2019-14868]
  new patch: ksh93-untrustedenv.dif</changelog>
</package>
<package pkgid="39bf6596caed37c806b361eff394cb72401eeaf6a44b366a069bd558adefd279" name="ksh-devel" arch="aarch64">
  <version epoch="0" ver="93vu" rel="bp156.6.3.1"/>
  <changelog author="schwab@suse.de" date="1434024000">- cpp.patch: fix use of cc -E without -P</changelog>
  <changelog author="mls@suse.de" date="1434110400">- go back to ksh93u to have a stable version in SLE-12
  use 93vu as version so that the software stack sees this
  as an update. (FATE#319107, bsc#939252)
- add back the following patches:
  * astksh_builtin_poll20120806_001.diff
  * ksh93-backticks.dif
  * ksh93-crashes.dif
  * ksh93-dttree-crash.dif
  * ksh93-fdstatus.dif
  * ksh93-heredoclex.dif
  * ksh93-jobs.dif
  * ksh93-sfio.dif
  * ksh93-uninitialized.dif
- fix stk aliasing code [bnc#844071]
  new patch: ksh93-stkalias.dif
- fix stk restoration in sh_exec [bnc#844071]
  new patch: ksh93-stkfreeze.dif
- make a unknown location fatal in stkset so that we get a core
  dump right away instead of later in an unrelated part of code
  new patch: ksh93-stkset-abort.dif
- fix build with std malloc
  new patch: ksh93-malloc-hook.dif
- backport job locking code fix
  new patch: ksh93-joblock.dif
- disable vfork, use fork instead
  new patch: ksh93-disable-vfork.dif
- fix crash when the subshell number overflows [bnc#893031]
  new patch: ksh93-longenv.dif
- fix path normalization in cd command [bnc#867401]
  new patch: ksh93-cdpwd.dif
- fix segfault in dirname when cwd is gone [bnc#852160]
  new patch: ksh93-subshellpwd.dif
- Fix ksh using wrong files is some elements in the path do not
  exist [bnc#899014]
  new patch: ksh93-path-skip.dif</changelog>
  <changelog author="mls@suse.de" date="1442318400">- fix freeing memory twice if an array is turned into an
  compound variable and then unset [bnc#924043]
  new patch: ksh93-nvtree-free.dif
- backport fix for segmentation fault with 'typeset -RF'
  new patch: ksh93-int16double.dif
- backport hanging command substitution with large output fix from
  upstream [bnc#887320] [bnc#926172] [bnc#934437]
  new patch: ksh93-backtick.dif
- backport job list corruption fix from ksg93v [bnc#924318]
  new patch: ksh93-jpold.dif</changelog>
  <changelog author="mls@suse.de" date="1450267200">- add ast suffix to optbin manpages to prevent file conflicts
- fix fd leak when doing redirects in a subshell [bnc#954856]
  new patch: ksh93-redirectleak.dif
- rewrite ksh93-backtick.dif to a more correct version
  [bnc#953533] [bnc#955221]
- also tweak ksh93-backtick.dif so that the pipe is drained after
  io_restore is called.</changelog>
  <changelog author="mls@suse.de" date="1467720000">- own the ksh files in /etc/alternatives [bnc#987362] [bnc#962069]
- fix leak in optimize processing [bnc#982423]
  new patch: ksh93-optimizeleak.dif
- fix editor prediction code garbling input [bnc#964966]
  new patch: ksh93-edpredict.dif</changelog>
  <changelog author="mls@suse.de" date="1476273600">- fix locking error in spawn implementation [bnc#988213]
  new patch: ksh93-spawnlock.dif
- make patch ordering the same as in sle-11</changelog>
  <changelog author="mls@suse.de" date="1513771200">- fix build with new glibc versions
  new patch: ksh93-filedefined.dif</changelog>
  <changelog author="mls@suse.de" date="1567771200">- fix build by removing -Werror=return-type and using
  - ffat-lto-objects</changelog>
  <changelog author="mls@suse.de" date="1605268800">- remove sys/sysctl.h include as it no longer exists in linux
  new patch: ksh93-no-sysctl.dif</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- remove pwdutils buildrequires, it's not needed and pwdutils got
  dropped many years ago</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1611748800">- prepare usrmerge (boo#1029961)
- clean up SLE11 compat sections</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1617192000">- Remove BuildRequires: bind-libs. Requiring libs this way
  is just wrong.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mls@suse.de" date="1715601600">- remove no longer needed qemu workaround
  deleted patch: ksh-qemu.patch
- do not use posix_spawn as it lacks proper job handling [bsc#1224057]
  new patch: ksh93-no-posix_spawn.dif</changelog>
  <changelog author="mls@suse.de" date="1722513600">- fix segfault in variable substitution [bsc#1129288]
  new patch: ksh93-putval.dif
- fix untrusted environment execution [bsc#1160796] [CVE-2019-14868]
  new patch: ksh93-untrustedenv.dif</changelog>
</package>
<package pkgid="abb2240aef0dfabf8a21ab1215b8aef7edf84170d93b15a8681915eb756ba16d" name="ksh-devel" arch="i586">
  <version epoch="0" ver="93vu" rel="bp156.6.3.1"/>
  <changelog author="schwab@suse.de" date="1434024000">- cpp.patch: fix use of cc -E without -P</changelog>
  <changelog author="mls@suse.de" date="1434110400">- go back to ksh93u to have a stable version in SLE-12
  use 93vu as version so that the software stack sees this
  as an update. (FATE#319107, bsc#939252)
- add back the following patches:
  * astksh_builtin_poll20120806_001.diff
  * ksh93-backticks.dif
  * ksh93-crashes.dif
  * ksh93-dttree-crash.dif
  * ksh93-fdstatus.dif
  * ksh93-heredoclex.dif
  * ksh93-jobs.dif
  * ksh93-sfio.dif
  * ksh93-uninitialized.dif
- fix stk aliasing code [bnc#844071]
  new patch: ksh93-stkalias.dif
- fix stk restoration in sh_exec [bnc#844071]
  new patch: ksh93-stkfreeze.dif
- make a unknown location fatal in stkset so that we get a core
  dump right away instead of later in an unrelated part of code
  new patch: ksh93-stkset-abort.dif
- fix build with std malloc
  new patch: ksh93-malloc-hook.dif
- backport job locking code fix
  new patch: ksh93-joblock.dif
- disable vfork, use fork instead
  new patch: ksh93-disable-vfork.dif
- fix crash when the subshell number overflows [bnc#893031]
  new patch: ksh93-longenv.dif
- fix path normalization in cd command [bnc#867401]
  new patch: ksh93-cdpwd.dif
- fix segfault in dirname when cwd is gone [bnc#852160]
  new patch: ksh93-subshellpwd.dif
- Fix ksh using wrong files is some elements in the path do not
  exist [bnc#899014]
  new patch: ksh93-path-skip.dif</changelog>
  <changelog author="mls@suse.de" date="1442318400">- fix freeing memory twice if an array is turned into an
  compound variable and then unset [bnc#924043]
  new patch: ksh93-nvtree-free.dif
- backport fix for segmentation fault with 'typeset -RF'
  new patch: ksh93-int16double.dif
- backport hanging command substitution with large output fix from
  upstream [bnc#887320] [bnc#926172] [bnc#934437]
  new patch: ksh93-backtick.dif
- backport job list corruption fix from ksg93v [bnc#924318]
  new patch: ksh93-jpold.dif</changelog>
  <changelog author="mls@suse.de" date="1450267200">- add ast suffix to optbin manpages to prevent file conflicts
- fix fd leak when doing redirects in a subshell [bnc#954856]
  new patch: ksh93-redirectleak.dif
- rewrite ksh93-backtick.dif to a more correct version
  [bnc#953533] [bnc#955221]
- also tweak ksh93-backtick.dif so that the pipe is drained after
  io_restore is called.</changelog>
  <changelog author="mls@suse.de" date="1467720000">- own the ksh files in /etc/alternatives [bnc#987362] [bnc#962069]
- fix leak in optimize processing [bnc#982423]
  new patch: ksh93-optimizeleak.dif
- fix editor prediction code garbling input [bnc#964966]
  new patch: ksh93-edpredict.dif</changelog>
  <changelog author="mls@suse.de" date="1476273600">- fix locking error in spawn implementation [bnc#988213]
  new patch: ksh93-spawnlock.dif
- make patch ordering the same as in sle-11</changelog>
  <changelog author="mls@suse.de" date="1513771200">- fix build with new glibc versions
  new patch: ksh93-filedefined.dif</changelog>
  <changelog author="mls@suse.de" date="1567771200">- fix build by removing -Werror=return-type and using
  - ffat-lto-objects</changelog>
  <changelog author="mls@suse.de" date="1605268800">- remove sys/sysctl.h include as it no longer exists in linux
  new patch: ksh93-no-sysctl.dif</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- remove pwdutils buildrequires, it's not needed and pwdutils got
  dropped many years ago</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1611748800">- prepare usrmerge (boo#1029961)
- clean up SLE11 compat sections</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1617192000">- Remove BuildRequires: bind-libs. Requiring libs this way
  is just wrong.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mls@suse.de" date="1715601600">- remove no longer needed qemu workaround
  deleted patch: ksh-qemu.patch
- do not use posix_spawn as it lacks proper job handling [bsc#1224057]
  new patch: ksh93-no-posix_spawn.dif</changelog>
  <changelog author="mls@suse.de" date="1722513600">- fix segfault in variable substitution [bsc#1129288]
  new patch: ksh93-putval.dif
- fix untrusted environment execution [bsc#1160796] [CVE-2019-14868]
  new patch: ksh93-untrustedenv.dif</changelog>
</package>
<package pkgid="aa5a46ea84f452b76795eea8ac7af5800a4ad7b776653b5882348222619babe9" name="ksh-devel" arch="ppc64le">
  <version epoch="0" ver="93vu" rel="bp156.6.3.1"/>
  <changelog author="schwab@suse.de" date="1434024000">- cpp.patch: fix use of cc -E without -P</changelog>
  <changelog author="mls@suse.de" date="1434110400">- go back to ksh93u to have a stable version in SLE-12
  use 93vu as version so that the software stack sees this
  as an update. (FATE#319107, bsc#939252)
- add back the following patches:
  * astksh_builtin_poll20120806_001.diff
  * ksh93-backticks.dif
  * ksh93-crashes.dif
  * ksh93-dttree-crash.dif
  * ksh93-fdstatus.dif
  * ksh93-heredoclex.dif
  * ksh93-jobs.dif
  * ksh93-sfio.dif
  * ksh93-uninitialized.dif
- fix stk aliasing code [bnc#844071]
  new patch: ksh93-stkalias.dif
- fix stk restoration in sh_exec [bnc#844071]
  new patch: ksh93-stkfreeze.dif
- make a unknown location fatal in stkset so that we get a core
  dump right away instead of later in an unrelated part of code
  new patch: ksh93-stkset-abort.dif
- fix build with std malloc
  new patch: ksh93-malloc-hook.dif
- backport job locking code fix
  new patch: ksh93-joblock.dif
- disable vfork, use fork instead
  new patch: ksh93-disable-vfork.dif
- fix crash when the subshell number overflows [bnc#893031]
  new patch: ksh93-longenv.dif
- fix path normalization in cd command [bnc#867401]
  new patch: ksh93-cdpwd.dif
- fix segfault in dirname when cwd is gone [bnc#852160]
  new patch: ksh93-subshellpwd.dif
- Fix ksh using wrong files is some elements in the path do not
  exist [bnc#899014]
  new patch: ksh93-path-skip.dif</changelog>
  <changelog author="mls@suse.de" date="1442318400">- fix freeing memory twice if an array is turned into an
  compound variable and then unset [bnc#924043]
  new patch: ksh93-nvtree-free.dif
- backport fix for segmentation fault with 'typeset -RF'
  new patch: ksh93-int16double.dif
- backport hanging command substitution with large output fix from
  upstream [bnc#887320] [bnc#926172] [bnc#934437]
  new patch: ksh93-backtick.dif
- backport job list corruption fix from ksg93v [bnc#924318]
  new patch: ksh93-jpold.dif</changelog>
  <changelog author="mls@suse.de" date="1450267200">- add ast suffix to optbin manpages to prevent file conflicts
- fix fd leak when doing redirects in a subshell [bnc#954856]
  new patch: ksh93-redirectleak.dif
- rewrite ksh93-backtick.dif to a more correct version
  [bnc#953533] [bnc#955221]
- also tweak ksh93-backtick.dif so that the pipe is drained after
  io_restore is called.</changelog>
  <changelog author="mls@suse.de" date="1467720000">- own the ksh files in /etc/alternatives [bnc#987362] [bnc#962069]
- fix leak in optimize processing [bnc#982423]
  new patch: ksh93-optimizeleak.dif
- fix editor prediction code garbling input [bnc#964966]
  new patch: ksh93-edpredict.dif</changelog>
  <changelog author="mls@suse.de" date="1476273600">- fix locking error in spawn implementation [bnc#988213]
  new patch: ksh93-spawnlock.dif
- make patch ordering the same as in sle-11</changelog>
  <changelog author="mls@suse.de" date="1513771200">- fix build with new glibc versions
  new patch: ksh93-filedefined.dif</changelog>
  <changelog author="mls@suse.de" date="1567771200">- fix build by removing -Werror=return-type and using
  - ffat-lto-objects</changelog>
  <changelog author="mls@suse.de" date="1605268800">- remove sys/sysctl.h include as it no longer exists in linux
  new patch: ksh93-no-sysctl.dif</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- remove pwdutils buildrequires, it's not needed and pwdutils got
  dropped many years ago</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1611748800">- prepare usrmerge (boo#1029961)
- clean up SLE11 compat sections</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1617192000">- Remove BuildRequires: bind-libs. Requiring libs this way
  is just wrong.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mls@suse.de" date="1715601600">- remove no longer needed qemu workaround
  deleted patch: ksh-qemu.patch
- do not use posix_spawn as it lacks proper job handling [bsc#1224057]
  new patch: ksh93-no-posix_spawn.dif</changelog>
  <changelog author="mls@suse.de" date="1722513600">- fix segfault in variable substitution [bsc#1129288]
  new patch: ksh93-putval.dif
- fix untrusted environment execution [bsc#1160796] [CVE-2019-14868]
  new patch: ksh93-untrustedenv.dif</changelog>
</package>
<package pkgid="92a8677aad3eb613ee02f8d195f790edc7c23925c83de50dbf23d618b7adc33c" name="ksh-devel" arch="s390x">
  <version epoch="0" ver="93vu" rel="bp156.6.3.1"/>
  <changelog author="schwab@suse.de" date="1434024000">- cpp.patch: fix use of cc -E without -P</changelog>
  <changelog author="mls@suse.de" date="1434110400">- go back to ksh93u to have a stable version in SLE-12
  use 93vu as version so that the software stack sees this
  as an update. (FATE#319107, bsc#939252)
- add back the following patches:
  * astksh_builtin_poll20120806_001.diff
  * ksh93-backticks.dif
  * ksh93-crashes.dif
  * ksh93-dttree-crash.dif
  * ksh93-fdstatus.dif
  * ksh93-heredoclex.dif
  * ksh93-jobs.dif
  * ksh93-sfio.dif
  * ksh93-uninitialized.dif
- fix stk aliasing code [bnc#844071]
  new patch: ksh93-stkalias.dif
- fix stk restoration in sh_exec [bnc#844071]
  new patch: ksh93-stkfreeze.dif
- make a unknown location fatal in stkset so that we get a core
  dump right away instead of later in an unrelated part of code
  new patch: ksh93-stkset-abort.dif
- fix build with std malloc
  new patch: ksh93-malloc-hook.dif
- backport job locking code fix
  new patch: ksh93-joblock.dif
- disable vfork, use fork instead
  new patch: ksh93-disable-vfork.dif
- fix crash when the subshell number overflows [bnc#893031]
  new patch: ksh93-longenv.dif
- fix path normalization in cd command [bnc#867401]
  new patch: ksh93-cdpwd.dif
- fix segfault in dirname when cwd is gone [bnc#852160]
  new patch: ksh93-subshellpwd.dif
- Fix ksh using wrong files is some elements in the path do not
  exist [bnc#899014]
  new patch: ksh93-path-skip.dif</changelog>
  <changelog author="mls@suse.de" date="1442318400">- fix freeing memory twice if an array is turned into an
  compound variable and then unset [bnc#924043]
  new patch: ksh93-nvtree-free.dif
- backport fix for segmentation fault with 'typeset -RF'
  new patch: ksh93-int16double.dif
- backport hanging command substitution with large output fix from
  upstream [bnc#887320] [bnc#926172] [bnc#934437]
  new patch: ksh93-backtick.dif
- backport job list corruption fix from ksg93v [bnc#924318]
  new patch: ksh93-jpold.dif</changelog>
  <changelog author="mls@suse.de" date="1450267200">- add ast suffix to optbin manpages to prevent file conflicts
- fix fd leak when doing redirects in a subshell [bnc#954856]
  new patch: ksh93-redirectleak.dif
- rewrite ksh93-backtick.dif to a more correct version
  [bnc#953533] [bnc#955221]
- also tweak ksh93-backtick.dif so that the pipe is drained after
  io_restore is called.</changelog>
  <changelog author="mls@suse.de" date="1467720000">- own the ksh files in /etc/alternatives [bnc#987362] [bnc#962069]
- fix leak in optimize processing [bnc#982423]
  new patch: ksh93-optimizeleak.dif
- fix editor prediction code garbling input [bnc#964966]
  new patch: ksh93-edpredict.dif</changelog>
  <changelog author="mls@suse.de" date="1476273600">- fix locking error in spawn implementation [bnc#988213]
  new patch: ksh93-spawnlock.dif
- make patch ordering the same as in sle-11</changelog>
  <changelog author="mls@suse.de" date="1513771200">- fix build with new glibc versions
  new patch: ksh93-filedefined.dif</changelog>
  <changelog author="mls@suse.de" date="1567771200">- fix build by removing -Werror=return-type and using
  - ffat-lto-objects</changelog>
  <changelog author="mls@suse.de" date="1605268800">- remove sys/sysctl.h include as it no longer exists in linux
  new patch: ksh93-no-sysctl.dif</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- remove pwdutils buildrequires, it's not needed and pwdutils got
  dropped many years ago</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1611748800">- prepare usrmerge (boo#1029961)
- clean up SLE11 compat sections</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1617192000">- Remove BuildRequires: bind-libs. Requiring libs this way
  is just wrong.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mls@suse.de" date="1715601600">- remove no longer needed qemu workaround
  deleted patch: ksh-qemu.patch
- do not use posix_spawn as it lacks proper job handling [bsc#1224057]
  new patch: ksh93-no-posix_spawn.dif</changelog>
  <changelog author="mls@suse.de" date="1722513600">- fix segfault in variable substitution [bsc#1129288]
  new patch: ksh93-putval.dif
- fix untrusted environment execution [bsc#1160796] [CVE-2019-14868]
  new patch: ksh93-untrustedenv.dif</changelog>
</package>
<package pkgid="1640db096937d97a27db1df901af3dbe5598c826a59e8343ed595ca8414a073e" name="ksh-devel" arch="x86_64">
  <version epoch="0" ver="93vu" rel="bp156.6.3.1"/>
  <changelog author="schwab@suse.de" date="1434024000">- cpp.patch: fix use of cc -E without -P</changelog>
  <changelog author="mls@suse.de" date="1434110400">- go back to ksh93u to have a stable version in SLE-12
  use 93vu as version so that the software stack sees this
  as an update. (FATE#319107, bsc#939252)
- add back the following patches:
  * astksh_builtin_poll20120806_001.diff
  * ksh93-backticks.dif
  * ksh93-crashes.dif
  * ksh93-dttree-crash.dif
  * ksh93-fdstatus.dif
  * ksh93-heredoclex.dif
  * ksh93-jobs.dif
  * ksh93-sfio.dif
  * ksh93-uninitialized.dif
- fix stk aliasing code [bnc#844071]
  new patch: ksh93-stkalias.dif
- fix stk restoration in sh_exec [bnc#844071]
  new patch: ksh93-stkfreeze.dif
- make a unknown location fatal in stkset so that we get a core
  dump right away instead of later in an unrelated part of code
  new patch: ksh93-stkset-abort.dif
- fix build with std malloc
  new patch: ksh93-malloc-hook.dif
- backport job locking code fix
  new patch: ksh93-joblock.dif
- disable vfork, use fork instead
  new patch: ksh93-disable-vfork.dif
- fix crash when the subshell number overflows [bnc#893031]
  new patch: ksh93-longenv.dif
- fix path normalization in cd command [bnc#867401]
  new patch: ksh93-cdpwd.dif
- fix segfault in dirname when cwd is gone [bnc#852160]
  new patch: ksh93-subshellpwd.dif
- Fix ksh using wrong files is some elements in the path do not
  exist [bnc#899014]
  new patch: ksh93-path-skip.dif</changelog>
  <changelog author="mls@suse.de" date="1442318400">- fix freeing memory twice if an array is turned into an
  compound variable and then unset [bnc#924043]
  new patch: ksh93-nvtree-free.dif
- backport fix for segmentation fault with 'typeset -RF'
  new patch: ksh93-int16double.dif
- backport hanging command substitution with large output fix from
  upstream [bnc#887320] [bnc#926172] [bnc#934437]
  new patch: ksh93-backtick.dif
- backport job list corruption fix from ksg93v [bnc#924318]
  new patch: ksh93-jpold.dif</changelog>
  <changelog author="mls@suse.de" date="1450267200">- add ast suffix to optbin manpages to prevent file conflicts
- fix fd leak when doing redirects in a subshell [bnc#954856]
  new patch: ksh93-redirectleak.dif
- rewrite ksh93-backtick.dif to a more correct version
  [bnc#953533] [bnc#955221]
- also tweak ksh93-backtick.dif so that the pipe is drained after
  io_restore is called.</changelog>
  <changelog author="mls@suse.de" date="1467720000">- own the ksh files in /etc/alternatives [bnc#987362] [bnc#962069]
- fix leak in optimize processing [bnc#982423]
  new patch: ksh93-optimizeleak.dif
- fix editor prediction code garbling input [bnc#964966]
  new patch: ksh93-edpredict.dif</changelog>
  <changelog author="mls@suse.de" date="1476273600">- fix locking error in spawn implementation [bnc#988213]
  new patch: ksh93-spawnlock.dif
- make patch ordering the same as in sle-11</changelog>
  <changelog author="mls@suse.de" date="1513771200">- fix build with new glibc versions
  new patch: ksh93-filedefined.dif</changelog>
  <changelog author="mls@suse.de" date="1567771200">- fix build by removing -Werror=return-type and using
  - ffat-lto-objects</changelog>
  <changelog author="mls@suse.de" date="1605268800">- remove sys/sysctl.h include as it no longer exists in linux
  new patch: ksh93-no-sysctl.dif</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- remove pwdutils buildrequires, it's not needed and pwdutils got
  dropped many years ago</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1611748800">- prepare usrmerge (boo#1029961)
- clean up SLE11 compat sections</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1617192000">- Remove BuildRequires: bind-libs. Requiring libs this way
  is just wrong.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mls@suse.de" date="1715601600">- remove no longer needed qemu workaround
  deleted patch: ksh-qemu.patch
- do not use posix_spawn as it lacks proper job handling [bsc#1224057]
  new patch: ksh93-no-posix_spawn.dif</changelog>
  <changelog author="mls@suse.de" date="1722513600">- fix segfault in variable substitution [bsc#1129288]
  new patch: ksh93-putval.dif
- fix untrusted environment execution [bsc#1160796] [CVE-2019-14868]
  new patch: ksh93-untrustedenv.dif</changelog>
</package>
<package pkgid="b9c12b32db0821eea87725b902a188dfb09738797e8d8a7bb77cde84bb02d9c9" name="kstars" arch="aarch64">
  <version epoch="0" ver="3.7.4" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1657108800">- Explicitly recommend dbus-send. The program is needed by the
  scripting tool.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659268800">- Update to 3.6.0:
  * Add linear 1 pass focus algorithm.
  * Polar alignment V3.
  * Add image ROI statistics.
  * Revamped profile scripts.
  * Geographic map update.
  * Show number of clipped pixels on fitsviewer status bar if show-clipping is enabled.
  * Improve tooltips for GPG expert settings.
  * Various fixes and improvements related to DSO catalogs and visibility.
- Remove upstreamed fix-eigen3.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1664452800">- Update to 3.6.1:
  * See https://invent.kde.org/education/kstars/-/blob/stable-3.6.1/ChangeLog
- Add lower_qt_version.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664539200">- Update constraints. Newer kstar versions need more disk space
  and memory</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1670587200">- Update to 3.6.2:
  * See https://invent.kde.org/education/kstars/-/blob/stable-3.6.2/ChangeLog
- Remove lower_qt_version.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675166400">- Update to 3.6.3:
  * Optical trains editor reworked
  * Add mount altitude constraint to scheduler altitude check
  * Focus timer bug version 2
  * Update to support INDI v2.0.0
  * Auto focus overscan
  * Fix major calculation error in calculating DSLR field of view
  * Full changelog: https://invent.kde.org/education/kstars/-/blob/stable-3.6.3/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Backport multiple fixes from the master branch, because there won't be
  a new release for the next two months:
  * Add fix-dir-separator.patch
  * Add fix-indi-timestamp.patch
  * Add fix-placeholder-path-part1.patch
  * Add fix-placeholder-path-part2.patch
  * Add fix-scheduler.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680696000">- Sync changes from the unstable package</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681992000">- Update to 3.6.4:
  * Fix range for reducer/barlow
  * Fix separator replacement mistake
  * Fix setting optical train reducer
  * Fix asteroid visual magnitude calculation
  * Support for XISF
  * Controlling EKOS with external Sky Maps
  * Update target position angle when a meridian flip is detected so that
    it does not cause uncommanded rotation post MF
  * Fix file overwriting issue
  * Max dark guide threshold Default is 1 sec
  * Fix dark library cache issue
  * Bugfix for mount model
- Drop fix-indi-timestamp.patch
- Drop fix-dir-separator.patch
- Drop fix-scheduler.patch
- Drop fix-placeholder-path-part1.patch
- Drop fix-placeholder-path-part2.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 3.6.5:
  * Sky Map Rotation
  * NEW Optimal Sub-Exposure Calculator
  * Rotator Dialog Improvments
  * Linear 1 Pass Focus improvements including FWHM &amp; Fourier Power focusing
  * Focus Aberration Inspector
  * Daily Supernovae updates
  * Multiple fixes
- Add fix-list.patch
- Add fix-status.patch
- Use GCC11 on Leap, otherwise compilation will fail.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1690977600">- Update to 3.6.6:
  * Add histogram stretch controls to fitstab
  * Bugfix parking for darks and bias frames
  * Fix bug computing histograms for float/double images
  * Add histogram tooltips
  * Refactoring capture module
  * Speedup scheduler with large number of jobs
  * Scheduler option for repeating the entire schedule
  * HiPS FITS Viewer overlay
  * Analyze/Capture stats were using default StellarSolver values. Now HFRProfiles.
  * Retire classic scheduler algorithm
- Drop upstreamed patches:
  * fix-list.patch
  * fix-status.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696852800">- Update to 3.6.7:
  * Added custom image overlays support
  * Rotator dialog improvements
  * More file placeholders
  * Lots of bugs fixed
  * Docs updated</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1701691200">- Update to 3.6.8:
  * Added Aberration Inspector.
  * Improved Sub-exposure Calculator.
  * Added FITSViewer Solver.
  * Make "Set Coordinates Manually" dialog more intuitive.
  * Telescope name specified in the optical trains are now saved in the FITS header (the mount name was saved before).
  * New placeholders for ISO, binning and pure exposure time added.
  * Add a new not-default scheduler option to disable greedy scheduling.
  * Reduce latency between captures, especially when guiding / dithering.
  * Fix issue with differential slewing.
  * Separate Business Logic from UI in Scheduler.
  * Fix bug in estimating job time, capture delays were misinterpreted.
  * Fixed guide start deviation was not saved properly in esq file.
  * Bugfix in one-pulse dither. Dither pulses were going the wrong way.
  * Fix Scheduler hangs when Focus does not signal Autofocus start failure.
  * Focus Guide Settle Bug.
- Add fix-crash.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1706788800">- Update to version 3.6.9:
  * Bug fix for unknown camera temperature, gain or offset
  * Focus UI Refactor
  * Always show and edit scheduler job properties
  * Allow deleting of scheduler jobs and appending to scheduler queue while running other jobs.
  * In Sequence HFR Check Refactor
  * Add capture time delay estimate for rotator movements
  * Various fixes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer1@a1.net&gt;" date="1707825600">- Fix build for Leap</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1712059200">- Update to version 3.7.0:
  * Fix satellites loading error thanks to updated list by Own.
  * Fix rare crash when opening search dialog due to unused AsyncDBManager in FindDialog
  * Fix focus profile index bug
  * Fix crash if sequence file was loaded with filter selection but active train does not have a filter wheel
  * Separating Business Logic from UI in Scheduler
  * Add blinking capabilities to FITS Viewer and Analyze.
  * Focus 2 Tick Bugfix
  * Use correct state after PHD2 complete dithering
  * Adding the delay to the first image in the sequence
  * Overhaul "differential slewing"
  * Allow the user to mirror the sky map
  * Add option for shoting skyflats
  * Add edit profile button in FITS Viewer Solver and in Image Overlays
  * Add option to render image overlays below catalogs.
  * In Sequence Focus Phase 2
  * Introduce Views: A way to quickly reorient the sky-map to match the view through an instrument]</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1718020800">- Update to 3.7.1:
  * New mount panel
  * Add support to obtain all object names
  * Multiple cameras support (still ongoing)
  * Various bugs fixed
  * Full changelog: https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1722859200">- Update to 3.7.2:
  * Multi-camera support.
  * Focus Advisor v4
  * Lots of fixes. Full changelog: https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1728561600">- Update to 3.7.3:
  * https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1733745600">- Update to 3.7.4:
  * https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
</package>
<package pkgid="0a1b0d606b5cb791691edfe68897c62c4f28f6db5e7e51dc47619f21f83058d3" name="kstars" arch="ppc64le">
  <version epoch="0" ver="3.7.4" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1657108800">- Explicitly recommend dbus-send. The program is needed by the
  scripting tool.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659268800">- Update to 3.6.0:
  * Add linear 1 pass focus algorithm.
  * Polar alignment V3.
  * Add image ROI statistics.
  * Revamped profile scripts.
  * Geographic map update.
  * Show number of clipped pixels on fitsviewer status bar if show-clipping is enabled.
  * Improve tooltips for GPG expert settings.
  * Various fixes and improvements related to DSO catalogs and visibility.
- Remove upstreamed fix-eigen3.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1664452800">- Update to 3.6.1:
  * See https://invent.kde.org/education/kstars/-/blob/stable-3.6.1/ChangeLog
- Add lower_qt_version.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664539200">- Update constraints. Newer kstar versions need more disk space
  and memory</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1670587200">- Update to 3.6.2:
  * See https://invent.kde.org/education/kstars/-/blob/stable-3.6.2/ChangeLog
- Remove lower_qt_version.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675166400">- Update to 3.6.3:
  * Optical trains editor reworked
  * Add mount altitude constraint to scheduler altitude check
  * Focus timer bug version 2
  * Update to support INDI v2.0.0
  * Auto focus overscan
  * Fix major calculation error in calculating DSLR field of view
  * Full changelog: https://invent.kde.org/education/kstars/-/blob/stable-3.6.3/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Backport multiple fixes from the master branch, because there won't be
  a new release for the next two months:
  * Add fix-dir-separator.patch
  * Add fix-indi-timestamp.patch
  * Add fix-placeholder-path-part1.patch
  * Add fix-placeholder-path-part2.patch
  * Add fix-scheduler.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680696000">- Sync changes from the unstable package</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681992000">- Update to 3.6.4:
  * Fix range for reducer/barlow
  * Fix separator replacement mistake
  * Fix setting optical train reducer
  * Fix asteroid visual magnitude calculation
  * Support for XISF
  * Controlling EKOS with external Sky Maps
  * Update target position angle when a meridian flip is detected so that
    it does not cause uncommanded rotation post MF
  * Fix file overwriting issue
  * Max dark guide threshold Default is 1 sec
  * Fix dark library cache issue
  * Bugfix for mount model
- Drop fix-indi-timestamp.patch
- Drop fix-dir-separator.patch
- Drop fix-scheduler.patch
- Drop fix-placeholder-path-part1.patch
- Drop fix-placeholder-path-part2.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 3.6.5:
  * Sky Map Rotation
  * NEW Optimal Sub-Exposure Calculator
  * Rotator Dialog Improvments
  * Linear 1 Pass Focus improvements including FWHM &amp; Fourier Power focusing
  * Focus Aberration Inspector
  * Daily Supernovae updates
  * Multiple fixes
- Add fix-list.patch
- Add fix-status.patch
- Use GCC11 on Leap, otherwise compilation will fail.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1690977600">- Update to 3.6.6:
  * Add histogram stretch controls to fitstab
  * Bugfix parking for darks and bias frames
  * Fix bug computing histograms for float/double images
  * Add histogram tooltips
  * Refactoring capture module
  * Speedup scheduler with large number of jobs
  * Scheduler option for repeating the entire schedule
  * HiPS FITS Viewer overlay
  * Analyze/Capture stats were using default StellarSolver values. Now HFRProfiles.
  * Retire classic scheduler algorithm
- Drop upstreamed patches:
  * fix-list.patch
  * fix-status.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696852800">- Update to 3.6.7:
  * Added custom image overlays support
  * Rotator dialog improvements
  * More file placeholders
  * Lots of bugs fixed
  * Docs updated</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1701691200">- Update to 3.6.8:
  * Added Aberration Inspector.
  * Improved Sub-exposure Calculator.
  * Added FITSViewer Solver.
  * Make "Set Coordinates Manually" dialog more intuitive.
  * Telescope name specified in the optical trains are now saved in the FITS header (the mount name was saved before).
  * New placeholders for ISO, binning and pure exposure time added.
  * Add a new not-default scheduler option to disable greedy scheduling.
  * Reduce latency between captures, especially when guiding / dithering.
  * Fix issue with differential slewing.
  * Separate Business Logic from UI in Scheduler.
  * Fix bug in estimating job time, capture delays were misinterpreted.
  * Fixed guide start deviation was not saved properly in esq file.
  * Bugfix in one-pulse dither. Dither pulses were going the wrong way.
  * Fix Scheduler hangs when Focus does not signal Autofocus start failure.
  * Focus Guide Settle Bug.
- Add fix-crash.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1706788800">- Update to version 3.6.9:
  * Bug fix for unknown camera temperature, gain or offset
  * Focus UI Refactor
  * Always show and edit scheduler job properties
  * Allow deleting of scheduler jobs and appending to scheduler queue while running other jobs.
  * In Sequence HFR Check Refactor
  * Add capture time delay estimate for rotator movements
  * Various fixes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer1@a1.net&gt;" date="1707825600">- Fix build for Leap</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1712059200">- Update to version 3.7.0:
  * Fix satellites loading error thanks to updated list by Own.
  * Fix rare crash when opening search dialog due to unused AsyncDBManager in FindDialog
  * Fix focus profile index bug
  * Fix crash if sequence file was loaded with filter selection but active train does not have a filter wheel
  * Separating Business Logic from UI in Scheduler
  * Add blinking capabilities to FITS Viewer and Analyze.
  * Focus 2 Tick Bugfix
  * Use correct state after PHD2 complete dithering
  * Adding the delay to the first image in the sequence
  * Overhaul "differential slewing"
  * Allow the user to mirror the sky map
  * Add option for shoting skyflats
  * Add edit profile button in FITS Viewer Solver and in Image Overlays
  * Add option to render image overlays below catalogs.
  * In Sequence Focus Phase 2
  * Introduce Views: A way to quickly reorient the sky-map to match the view through an instrument]</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1718020800">- Update to 3.7.1:
  * New mount panel
  * Add support to obtain all object names
  * Multiple cameras support (still ongoing)
  * Various bugs fixed
  * Full changelog: https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1722859200">- Update to 3.7.2:
  * Multi-camera support.
  * Focus Advisor v4
  * Lots of fixes. Full changelog: https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1728561600">- Update to 3.7.3:
  * https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1733745600">- Update to 3.7.4:
  * https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
</package>
<package pkgid="368712d9cf697b293c525d37c9360cdd9a1fcc6166409fd51c2855340f1bc6ad" name="kstars" arch="s390x">
  <version epoch="0" ver="3.7.4" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1657108800">- Explicitly recommend dbus-send. The program is needed by the
  scripting tool.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659268800">- Update to 3.6.0:
  * Add linear 1 pass focus algorithm.
  * Polar alignment V3.
  * Add image ROI statistics.
  * Revamped profile scripts.
  * Geographic map update.
  * Show number of clipped pixels on fitsviewer status bar if show-clipping is enabled.
  * Improve tooltips for GPG expert settings.
  * Various fixes and improvements related to DSO catalogs and visibility.
- Remove upstreamed fix-eigen3.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1664452800">- Update to 3.6.1:
  * See https://invent.kde.org/education/kstars/-/blob/stable-3.6.1/ChangeLog
- Add lower_qt_version.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664539200">- Update constraints. Newer kstar versions need more disk space
  and memory</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1670587200">- Update to 3.6.2:
  * See https://invent.kde.org/education/kstars/-/blob/stable-3.6.2/ChangeLog
- Remove lower_qt_version.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675166400">- Update to 3.6.3:
  * Optical trains editor reworked
  * Add mount altitude constraint to scheduler altitude check
  * Focus timer bug version 2
  * Update to support INDI v2.0.0
  * Auto focus overscan
  * Fix major calculation error in calculating DSLR field of view
  * Full changelog: https://invent.kde.org/education/kstars/-/blob/stable-3.6.3/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Backport multiple fixes from the master branch, because there won't be
  a new release for the next two months:
  * Add fix-dir-separator.patch
  * Add fix-indi-timestamp.patch
  * Add fix-placeholder-path-part1.patch
  * Add fix-placeholder-path-part2.patch
  * Add fix-scheduler.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680696000">- Sync changes from the unstable package</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681992000">- Update to 3.6.4:
  * Fix range for reducer/barlow
  * Fix separator replacement mistake
  * Fix setting optical train reducer
  * Fix asteroid visual magnitude calculation
  * Support for XISF
  * Controlling EKOS with external Sky Maps
  * Update target position angle when a meridian flip is detected so that
    it does not cause uncommanded rotation post MF
  * Fix file overwriting issue
  * Max dark guide threshold Default is 1 sec
  * Fix dark library cache issue
  * Bugfix for mount model
- Drop fix-indi-timestamp.patch
- Drop fix-dir-separator.patch
- Drop fix-scheduler.patch
- Drop fix-placeholder-path-part1.patch
- Drop fix-placeholder-path-part2.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 3.6.5:
  * Sky Map Rotation
  * NEW Optimal Sub-Exposure Calculator
  * Rotator Dialog Improvments
  * Linear 1 Pass Focus improvements including FWHM &amp; Fourier Power focusing
  * Focus Aberration Inspector
  * Daily Supernovae updates
  * Multiple fixes
- Add fix-list.patch
- Add fix-status.patch
- Use GCC11 on Leap, otherwise compilation will fail.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1690977600">- Update to 3.6.6:
  * Add histogram stretch controls to fitstab
  * Bugfix parking for darks and bias frames
  * Fix bug computing histograms for float/double images
  * Add histogram tooltips
  * Refactoring capture module
  * Speedup scheduler with large number of jobs
  * Scheduler option for repeating the entire schedule
  * HiPS FITS Viewer overlay
  * Analyze/Capture stats were using default StellarSolver values. Now HFRProfiles.
  * Retire classic scheduler algorithm
- Drop upstreamed patches:
  * fix-list.patch
  * fix-status.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696852800">- Update to 3.6.7:
  * Added custom image overlays support
  * Rotator dialog improvements
  * More file placeholders
  * Lots of bugs fixed
  * Docs updated</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1701691200">- Update to 3.6.8:
  * Added Aberration Inspector.
  * Improved Sub-exposure Calculator.
  * Added FITSViewer Solver.
  * Make "Set Coordinates Manually" dialog more intuitive.
  * Telescope name specified in the optical trains are now saved in the FITS header (the mount name was saved before).
  * New placeholders for ISO, binning and pure exposure time added.
  * Add a new not-default scheduler option to disable greedy scheduling.
  * Reduce latency between captures, especially when guiding / dithering.
  * Fix issue with differential slewing.
  * Separate Business Logic from UI in Scheduler.
  * Fix bug in estimating job time, capture delays were misinterpreted.
  * Fixed guide start deviation was not saved properly in esq file.
  * Bugfix in one-pulse dither. Dither pulses were going the wrong way.
  * Fix Scheduler hangs when Focus does not signal Autofocus start failure.
  * Focus Guide Settle Bug.
- Add fix-crash.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1706788800">- Update to version 3.6.9:
  * Bug fix for unknown camera temperature, gain or offset
  * Focus UI Refactor
  * Always show and edit scheduler job properties
  * Allow deleting of scheduler jobs and appending to scheduler queue while running other jobs.
  * In Sequence HFR Check Refactor
  * Add capture time delay estimate for rotator movements
  * Various fixes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer1@a1.net&gt;" date="1707825600">- Fix build for Leap</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1712059200">- Update to version 3.7.0:
  * Fix satellites loading error thanks to updated list by Own.
  * Fix rare crash when opening search dialog due to unused AsyncDBManager in FindDialog
  * Fix focus profile index bug
  * Fix crash if sequence file was loaded with filter selection but active train does not have a filter wheel
  * Separating Business Logic from UI in Scheduler
  * Add blinking capabilities to FITS Viewer and Analyze.
  * Focus 2 Tick Bugfix
  * Use correct state after PHD2 complete dithering
  * Adding the delay to the first image in the sequence
  * Overhaul "differential slewing"
  * Allow the user to mirror the sky map
  * Add option for shoting skyflats
  * Add edit profile button in FITS Viewer Solver and in Image Overlays
  * Add option to render image overlays below catalogs.
  * In Sequence Focus Phase 2
  * Introduce Views: A way to quickly reorient the sky-map to match the view through an instrument]</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1718020800">- Update to 3.7.1:
  * New mount panel
  * Add support to obtain all object names
  * Multiple cameras support (still ongoing)
  * Various bugs fixed
  * Full changelog: https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1722859200">- Update to 3.7.2:
  * Multi-camera support.
  * Focus Advisor v4
  * Lots of fixes. Full changelog: https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1728561600">- Update to 3.7.3:
  * https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1733745600">- Update to 3.7.4:
  * https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
</package>
<package pkgid="214b2380ec47598a1fa69721cf98bb52e6136293078196c6a4ce83412733c20f" name="kstars" arch="src">
  <version epoch="0" ver="3.7.4" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1657108800">- Explicitly recommend dbus-send. The program is needed by the
  scripting tool.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659268800">- Update to 3.6.0:
  * Add linear 1 pass focus algorithm.
  * Polar alignment V3.
  * Add image ROI statistics.
  * Revamped profile scripts.
  * Geographic map update.
  * Show number of clipped pixels on fitsviewer status bar if show-clipping is enabled.
  * Improve tooltips for GPG expert settings.
  * Various fixes and improvements related to DSO catalogs and visibility.
- Remove upstreamed fix-eigen3.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1664452800">- Update to 3.6.1:
  * See https://invent.kde.org/education/kstars/-/blob/stable-3.6.1/ChangeLog
- Add lower_qt_version.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664539200">- Update constraints. Newer kstar versions need more disk space
  and memory</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1670587200">- Update to 3.6.2:
  * See https://invent.kde.org/education/kstars/-/blob/stable-3.6.2/ChangeLog
- Remove lower_qt_version.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675166400">- Update to 3.6.3:
  * Optical trains editor reworked
  * Add mount altitude constraint to scheduler altitude check
  * Focus timer bug version 2
  * Update to support INDI v2.0.0
  * Auto focus overscan
  * Fix major calculation error in calculating DSLR field of view
  * Full changelog: https://invent.kde.org/education/kstars/-/blob/stable-3.6.3/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Backport multiple fixes from the master branch, because there won't be
  a new release for the next two months:
  * Add fix-dir-separator.patch
  * Add fix-indi-timestamp.patch
  * Add fix-placeholder-path-part1.patch
  * Add fix-placeholder-path-part2.patch
  * Add fix-scheduler.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680696000">- Sync changes from the unstable package</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681992000">- Update to 3.6.4:
  * Fix range for reducer/barlow
  * Fix separator replacement mistake
  * Fix setting optical train reducer
  * Fix asteroid visual magnitude calculation
  * Support for XISF
  * Controlling EKOS with external Sky Maps
  * Update target position angle when a meridian flip is detected so that
    it does not cause uncommanded rotation post MF
  * Fix file overwriting issue
  * Max dark guide threshold Default is 1 sec
  * Fix dark library cache issue
  * Bugfix for mount model
- Drop fix-indi-timestamp.patch
- Drop fix-dir-separator.patch
- Drop fix-scheduler.patch
- Drop fix-placeholder-path-part1.patch
- Drop fix-placeholder-path-part2.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 3.6.5:
  * Sky Map Rotation
  * NEW Optimal Sub-Exposure Calculator
  * Rotator Dialog Improvments
  * Linear 1 Pass Focus improvements including FWHM &amp; Fourier Power focusing
  * Focus Aberration Inspector
  * Daily Supernovae updates
  * Multiple fixes
- Add fix-list.patch
- Add fix-status.patch
- Use GCC11 on Leap, otherwise compilation will fail.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1690977600">- Update to 3.6.6:
  * Add histogram stretch controls to fitstab
  * Bugfix parking for darks and bias frames
  * Fix bug computing histograms for float/double images
  * Add histogram tooltips
  * Refactoring capture module
  * Speedup scheduler with large number of jobs
  * Scheduler option for repeating the entire schedule
  * HiPS FITS Viewer overlay
  * Analyze/Capture stats were using default StellarSolver values. Now HFRProfiles.
  * Retire classic scheduler algorithm
- Drop upstreamed patches:
  * fix-list.patch
  * fix-status.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696852800">- Update to 3.6.7:
  * Added custom image overlays support
  * Rotator dialog improvements
  * More file placeholders
  * Lots of bugs fixed
  * Docs updated</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1701691200">- Update to 3.6.8:
  * Added Aberration Inspector.
  * Improved Sub-exposure Calculator.
  * Added FITSViewer Solver.
  * Make "Set Coordinates Manually" dialog more intuitive.
  * Telescope name specified in the optical trains are now saved in the FITS header (the mount name was saved before).
  * New placeholders for ISO, binning and pure exposure time added.
  * Add a new not-default scheduler option to disable greedy scheduling.
  * Reduce latency between captures, especially when guiding / dithering.
  * Fix issue with differential slewing.
  * Separate Business Logic from UI in Scheduler.
  * Fix bug in estimating job time, capture delays were misinterpreted.
  * Fixed guide start deviation was not saved properly in esq file.
  * Bugfix in one-pulse dither. Dither pulses were going the wrong way.
  * Fix Scheduler hangs when Focus does not signal Autofocus start failure.
  * Focus Guide Settle Bug.
- Add fix-crash.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1706788800">- Update to version 3.6.9:
  * Bug fix for unknown camera temperature, gain or offset
  * Focus UI Refactor
  * Always show and edit scheduler job properties
  * Allow deleting of scheduler jobs and appending to scheduler queue while running other jobs.
  * In Sequence HFR Check Refactor
  * Add capture time delay estimate for rotator movements
  * Various fixes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer1@a1.net&gt;" date="1707825600">- Fix build for Leap</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1712059200">- Update to version 3.7.0:
  * Fix satellites loading error thanks to updated list by Own.
  * Fix rare crash when opening search dialog due to unused AsyncDBManager in FindDialog
  * Fix focus profile index bug
  * Fix crash if sequence file was loaded with filter selection but active train does not have a filter wheel
  * Separating Business Logic from UI in Scheduler
  * Add blinking capabilities to FITS Viewer and Analyze.
  * Focus 2 Tick Bugfix
  * Use correct state after PHD2 complete dithering
  * Adding the delay to the first image in the sequence
  * Overhaul "differential slewing"
  * Allow the user to mirror the sky map
  * Add option for shoting skyflats
  * Add edit profile button in FITS Viewer Solver and in Image Overlays
  * Add option to render image overlays below catalogs.
  * In Sequence Focus Phase 2
  * Introduce Views: A way to quickly reorient the sky-map to match the view through an instrument]</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1718020800">- Update to 3.7.1:
  * New mount panel
  * Add support to obtain all object names
  * Multiple cameras support (still ongoing)
  * Various bugs fixed
  * Full changelog: https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1722859200">- Update to 3.7.2:
  * Multi-camera support.
  * Focus Advisor v4
  * Lots of fixes. Full changelog: https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1728561600">- Update to 3.7.3:
  * https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1733745600">- Update to 3.7.4:
  * https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
</package>
<package pkgid="3485ecc3eca50160b1d8d0ef048d278c326d13db979d22036b00a6b9e61d6b38" name="kstars" arch="x86_64">
  <version epoch="0" ver="3.7.4" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1657108800">- Explicitly recommend dbus-send. The program is needed by the
  scripting tool.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659268800">- Update to 3.6.0:
  * Add linear 1 pass focus algorithm.
  * Polar alignment V3.
  * Add image ROI statistics.
  * Revamped profile scripts.
  * Geographic map update.
  * Show number of clipped pixels on fitsviewer status bar if show-clipping is enabled.
  * Improve tooltips for GPG expert settings.
  * Various fixes and improvements related to DSO catalogs and visibility.
- Remove upstreamed fix-eigen3.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1664452800">- Update to 3.6.1:
  * See https://invent.kde.org/education/kstars/-/blob/stable-3.6.1/ChangeLog
- Add lower_qt_version.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664539200">- Update constraints. Newer kstar versions need more disk space
  and memory</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1670587200">- Update to 3.6.2:
  * See https://invent.kde.org/education/kstars/-/blob/stable-3.6.2/ChangeLog
- Remove lower_qt_version.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675166400">- Update to 3.6.3:
  * Optical trains editor reworked
  * Add mount altitude constraint to scheduler altitude check
  * Focus timer bug version 2
  * Update to support INDI v2.0.0
  * Auto focus overscan
  * Fix major calculation error in calculating DSLR field of view
  * Full changelog: https://invent.kde.org/education/kstars/-/blob/stable-3.6.3/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Backport multiple fixes from the master branch, because there won't be
  a new release for the next two months:
  * Add fix-dir-separator.patch
  * Add fix-indi-timestamp.patch
  * Add fix-placeholder-path-part1.patch
  * Add fix-placeholder-path-part2.patch
  * Add fix-scheduler.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680696000">- Sync changes from the unstable package</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681992000">- Update to 3.6.4:
  * Fix range for reducer/barlow
  * Fix separator replacement mistake
  * Fix setting optical train reducer
  * Fix asteroid visual magnitude calculation
  * Support for XISF
  * Controlling EKOS with external Sky Maps
  * Update target position angle when a meridian flip is detected so that
    it does not cause uncommanded rotation post MF
  * Fix file overwriting issue
  * Max dark guide threshold Default is 1 sec
  * Fix dark library cache issue
  * Bugfix for mount model
- Drop fix-indi-timestamp.patch
- Drop fix-dir-separator.patch
- Drop fix-scheduler.patch
- Drop fix-placeholder-path-part1.patch
- Drop fix-placeholder-path-part2.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 3.6.5:
  * Sky Map Rotation
  * NEW Optimal Sub-Exposure Calculator
  * Rotator Dialog Improvments
  * Linear 1 Pass Focus improvements including FWHM &amp; Fourier Power focusing
  * Focus Aberration Inspector
  * Daily Supernovae updates
  * Multiple fixes
- Add fix-list.patch
- Add fix-status.patch
- Use GCC11 on Leap, otherwise compilation will fail.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1690977600">- Update to 3.6.6:
  * Add histogram stretch controls to fitstab
  * Bugfix parking for darks and bias frames
  * Fix bug computing histograms for float/double images
  * Add histogram tooltips
  * Refactoring capture module
  * Speedup scheduler with large number of jobs
  * Scheduler option for repeating the entire schedule
  * HiPS FITS Viewer overlay
  * Analyze/Capture stats were using default StellarSolver values. Now HFRProfiles.
  * Retire classic scheduler algorithm
- Drop upstreamed patches:
  * fix-list.patch
  * fix-status.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696852800">- Update to 3.6.7:
  * Added custom image overlays support
  * Rotator dialog improvements
  * More file placeholders
  * Lots of bugs fixed
  * Docs updated</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1701691200">- Update to 3.6.8:
  * Added Aberration Inspector.
  * Improved Sub-exposure Calculator.
  * Added FITSViewer Solver.
  * Make "Set Coordinates Manually" dialog more intuitive.
  * Telescope name specified in the optical trains are now saved in the FITS header (the mount name was saved before).
  * New placeholders for ISO, binning and pure exposure time added.
  * Add a new not-default scheduler option to disable greedy scheduling.
  * Reduce latency between captures, especially when guiding / dithering.
  * Fix issue with differential slewing.
  * Separate Business Logic from UI in Scheduler.
  * Fix bug in estimating job time, capture delays were misinterpreted.
  * Fixed guide start deviation was not saved properly in esq file.
  * Bugfix in one-pulse dither. Dither pulses were going the wrong way.
  * Fix Scheduler hangs when Focus does not signal Autofocus start failure.
  * Focus Guide Settle Bug.
- Add fix-crash.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1706788800">- Update to version 3.6.9:
  * Bug fix for unknown camera temperature, gain or offset
  * Focus UI Refactor
  * Always show and edit scheduler job properties
  * Allow deleting of scheduler jobs and appending to scheduler queue while running other jobs.
  * In Sequence HFR Check Refactor
  * Add capture time delay estimate for rotator movements
  * Various fixes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer1@a1.net&gt;" date="1707825600">- Fix build for Leap</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1712059200">- Update to version 3.7.0:
  * Fix satellites loading error thanks to updated list by Own.
  * Fix rare crash when opening search dialog due to unused AsyncDBManager in FindDialog
  * Fix focus profile index bug
  * Fix crash if sequence file was loaded with filter selection but active train does not have a filter wheel
  * Separating Business Logic from UI in Scheduler
  * Add blinking capabilities to FITS Viewer and Analyze.
  * Focus 2 Tick Bugfix
  * Use correct state after PHD2 complete dithering
  * Adding the delay to the first image in the sequence
  * Overhaul "differential slewing"
  * Allow the user to mirror the sky map
  * Add option for shoting skyflats
  * Add edit profile button in FITS Viewer Solver and in Image Overlays
  * Add option to render image overlays below catalogs.
  * In Sequence Focus Phase 2
  * Introduce Views: A way to quickly reorient the sky-map to match the view through an instrument]</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1718020800">- Update to 3.7.1:
  * New mount panel
  * Add support to obtain all object names
  * Multiple cameras support (still ongoing)
  * Various bugs fixed
  * Full changelog: https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1722859200">- Update to 3.7.2:
  * Multi-camera support.
  * Focus Advisor v4
  * Lots of fixes. Full changelog: https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1728561600">- Update to 3.7.3:
  * https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1733745600">- Update to 3.7.4:
  * https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
</package>
<package pkgid="19e4732f6cb6057258b9b9f054a48ca21448a66b5e9f13020e32fbde60168fce" name="kstars-lang" arch="noarch">
  <version epoch="0" ver="3.7.4" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1657108800">- Explicitly recommend dbus-send. The program is needed by the
  scripting tool.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659268800">- Update to 3.6.0:
  * Add linear 1 pass focus algorithm.
  * Polar alignment V3.
  * Add image ROI statistics.
  * Revamped profile scripts.
  * Geographic map update.
  * Show number of clipped pixels on fitsviewer status bar if show-clipping is enabled.
  * Improve tooltips for GPG expert settings.
  * Various fixes and improvements related to DSO catalogs and visibility.
- Remove upstreamed fix-eigen3.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1664452800">- Update to 3.6.1:
  * See https://invent.kde.org/education/kstars/-/blob/stable-3.6.1/ChangeLog
- Add lower_qt_version.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664539200">- Update constraints. Newer kstar versions need more disk space
  and memory</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1670587200">- Update to 3.6.2:
  * See https://invent.kde.org/education/kstars/-/blob/stable-3.6.2/ChangeLog
- Remove lower_qt_version.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675166400">- Update to 3.6.3:
  * Optical trains editor reworked
  * Add mount altitude constraint to scheduler altitude check
  * Focus timer bug version 2
  * Update to support INDI v2.0.0
  * Auto focus overscan
  * Fix major calculation error in calculating DSLR field of view
  * Full changelog: https://invent.kde.org/education/kstars/-/blob/stable-3.6.3/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Backport multiple fixes from the master branch, because there won't be
  a new release for the next two months:
  * Add fix-dir-separator.patch
  * Add fix-indi-timestamp.patch
  * Add fix-placeholder-path-part1.patch
  * Add fix-placeholder-path-part2.patch
  * Add fix-scheduler.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680696000">- Sync changes from the unstable package</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681992000">- Update to 3.6.4:
  * Fix range for reducer/barlow
  * Fix separator replacement mistake
  * Fix setting optical train reducer
  * Fix asteroid visual magnitude calculation
  * Support for XISF
  * Controlling EKOS with external Sky Maps
  * Update target position angle when a meridian flip is detected so that
    it does not cause uncommanded rotation post MF
  * Fix file overwriting issue
  * Max dark guide threshold Default is 1 sec
  * Fix dark library cache issue
  * Bugfix for mount model
- Drop fix-indi-timestamp.patch
- Drop fix-dir-separator.patch
- Drop fix-scheduler.patch
- Drop fix-placeholder-path-part1.patch
- Drop fix-placeholder-path-part2.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 3.6.5:
  * Sky Map Rotation
  * NEW Optimal Sub-Exposure Calculator
  * Rotator Dialog Improvments
  * Linear 1 Pass Focus improvements including FWHM &amp; Fourier Power focusing
  * Focus Aberration Inspector
  * Daily Supernovae updates
  * Multiple fixes
- Add fix-list.patch
- Add fix-status.patch
- Use GCC11 on Leap, otherwise compilation will fail.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1690977600">- Update to 3.6.6:
  * Add histogram stretch controls to fitstab
  * Bugfix parking for darks and bias frames
  * Fix bug computing histograms for float/double images
  * Add histogram tooltips
  * Refactoring capture module
  * Speedup scheduler with large number of jobs
  * Scheduler option for repeating the entire schedule
  * HiPS FITS Viewer overlay
  * Analyze/Capture stats were using default StellarSolver values. Now HFRProfiles.
  * Retire classic scheduler algorithm
- Drop upstreamed patches:
  * fix-list.patch
  * fix-status.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696852800">- Update to 3.6.7:
  * Added custom image overlays support
  * Rotator dialog improvements
  * More file placeholders
  * Lots of bugs fixed
  * Docs updated</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1701691200">- Update to 3.6.8:
  * Added Aberration Inspector.
  * Improved Sub-exposure Calculator.
  * Added FITSViewer Solver.
  * Make "Set Coordinates Manually" dialog more intuitive.
  * Telescope name specified in the optical trains are now saved in the FITS header (the mount name was saved before).
  * New placeholders for ISO, binning and pure exposure time added.
  * Add a new not-default scheduler option to disable greedy scheduling.
  * Reduce latency between captures, especially when guiding / dithering.
  * Fix issue with differential slewing.
  * Separate Business Logic from UI in Scheduler.
  * Fix bug in estimating job time, capture delays were misinterpreted.
  * Fixed guide start deviation was not saved properly in esq file.
  * Bugfix in one-pulse dither. Dither pulses were going the wrong way.
  * Fix Scheduler hangs when Focus does not signal Autofocus start failure.
  * Focus Guide Settle Bug.
- Add fix-crash.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1706788800">- Update to version 3.6.9:
  * Bug fix for unknown camera temperature, gain or offset
  * Focus UI Refactor
  * Always show and edit scheduler job properties
  * Allow deleting of scheduler jobs and appending to scheduler queue while running other jobs.
  * In Sequence HFR Check Refactor
  * Add capture time delay estimate for rotator movements
  * Various fixes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer1@a1.net&gt;" date="1707825600">- Fix build for Leap</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1712059200">- Update to version 3.7.0:
  * Fix satellites loading error thanks to updated list by Own.
  * Fix rare crash when opening search dialog due to unused AsyncDBManager in FindDialog
  * Fix focus profile index bug
  * Fix crash if sequence file was loaded with filter selection but active train does not have a filter wheel
  * Separating Business Logic from UI in Scheduler
  * Add blinking capabilities to FITS Viewer and Analyze.
  * Focus 2 Tick Bugfix
  * Use correct state after PHD2 complete dithering
  * Adding the delay to the first image in the sequence
  * Overhaul "differential slewing"
  * Allow the user to mirror the sky map
  * Add option for shoting skyflats
  * Add edit profile button in FITS Viewer Solver and in Image Overlays
  * Add option to render image overlays below catalogs.
  * In Sequence Focus Phase 2
  * Introduce Views: A way to quickly reorient the sky-map to match the view through an instrument]</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1718020800">- Update to 3.7.1:
  * New mount panel
  * Add support to obtain all object names
  * Multiple cameras support (still ongoing)
  * Various bugs fixed
  * Full changelog: https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1722859200">- Update to 3.7.2:
  * Multi-camera support.
  * Focus Advisor v4
  * Lots of fixes. Full changelog: https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1728561600">- Update to 3.7.3:
  * https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1733745600">- Update to 3.7.4:
  * https://invent.kde.org/education/kstars/-/blob/master/ChangeLog</changelog>
</package>
<package pkgid="5fb687c577709d0b4b21c82c2458bb1c23b437ff96014ef31512a6f0cbd6e431" name="kubo" arch="aarch64">
  <version epoch="0" ver="0.32.1" rel="bp156.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1601467200">- Update to 0.7.0
  * Drop upstream 7331.patch
  * Default to Ed25519 keys
  * Secio is now disabled by default
  * IPNS paths now encode the key name as a base36 CIDv1 by default
  * Multiaddresses now accept PeerIDs encoded as CIDv1
  * dag stat command shows size and number of blocks</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1607601600">- Update to 0.8.0
  * Add Remote pinning services: ipfs pin remote
  * Faster local pinning and unpinning
  * update quic-go to support QUIC draft-32</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1624536000">- Update to 0.9.0
  * Exporting of DAGs via Gateways
  * Custom DNS Resolvers
  * Support for non-ICANN DNSLink names
  * Updated to the latest WebUI
  * IPNS keys can now be exported via the CLI without stopping the daemon
  * Experimental DHT Client and Provider System
  * Deprecations
    + The ipfs object commands are now deprecated
    + X-Ipfs-Gateway-Prefix is now deprecated
    + Proquints support removed
    + SECIO support removed</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
</package>
<package pkgid="4cd015537f240811efab36dfb7e13fb3c6790b641905b925b7d45dc431740b0d" name="kubo" arch="i586">
  <version epoch="0" ver="0.32.1" rel="bp156.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1601467200">- Update to 0.7.0
  * Drop upstream 7331.patch
  * Default to Ed25519 keys
  * Secio is now disabled by default
  * IPNS paths now encode the key name as a base36 CIDv1 by default
  * Multiaddresses now accept PeerIDs encoded as CIDv1
  * dag stat command shows size and number of blocks</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1607601600">- Update to 0.8.0
  * Add Remote pinning services: ipfs pin remote
  * Faster local pinning and unpinning
  * update quic-go to support QUIC draft-32</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1624536000">- Update to 0.9.0
  * Exporting of DAGs via Gateways
  * Custom DNS Resolvers
  * Support for non-ICANN DNSLink names
  * Updated to the latest WebUI
  * IPNS keys can now be exported via the CLI without stopping the daemon
  * Experimental DHT Client and Provider System
  * Deprecations
    + The ipfs object commands are now deprecated
    + X-Ipfs-Gateway-Prefix is now deprecated
    + Proquints support removed
    + SECIO support removed</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
</package>
<package pkgid="54d2ed8e8d544f8702ce138f068a9b2b311c3734c704aba74a6623fb7b3ecb1a" name="kubo" arch="ppc64le">
  <version epoch="0" ver="0.32.1" rel="bp156.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1601467200">- Update to 0.7.0
  * Drop upstream 7331.patch
  * Default to Ed25519 keys
  * Secio is now disabled by default
  * IPNS paths now encode the key name as a base36 CIDv1 by default
  * Multiaddresses now accept PeerIDs encoded as CIDv1
  * dag stat command shows size and number of blocks</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1607601600">- Update to 0.8.0
  * Add Remote pinning services: ipfs pin remote
  * Faster local pinning and unpinning
  * update quic-go to support QUIC draft-32</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1624536000">- Update to 0.9.0
  * Exporting of DAGs via Gateways
  * Custom DNS Resolvers
  * Support for non-ICANN DNSLink names
  * Updated to the latest WebUI
  * IPNS keys can now be exported via the CLI without stopping the daemon
  * Experimental DHT Client and Provider System
  * Deprecations
    + The ipfs object commands are now deprecated
    + X-Ipfs-Gateway-Prefix is now deprecated
    + Proquints support removed
    + SECIO support removed</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
</package>
<package pkgid="9fae1440d1523b97d7d29e8d06d13b013edd4b1afd7feb646f977808ed38d937" name="kubo" arch="s390x">
  <version epoch="0" ver="0.32.1" rel="bp156.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1601467200">- Update to 0.7.0
  * Drop upstream 7331.patch
  * Default to Ed25519 keys
  * Secio is now disabled by default
  * IPNS paths now encode the key name as a base36 CIDv1 by default
  * Multiaddresses now accept PeerIDs encoded as CIDv1
  * dag stat command shows size and number of blocks</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1607601600">- Update to 0.8.0
  * Add Remote pinning services: ipfs pin remote
  * Faster local pinning and unpinning
  * update quic-go to support QUIC draft-32</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1624536000">- Update to 0.9.0
  * Exporting of DAGs via Gateways
  * Custom DNS Resolvers
  * Support for non-ICANN DNSLink names
  * Updated to the latest WebUI
  * IPNS keys can now be exported via the CLI without stopping the daemon
  * Experimental DHT Client and Provider System
  * Deprecations
    + The ipfs object commands are now deprecated
    + X-Ipfs-Gateway-Prefix is now deprecated
    + Proquints support removed
    + SECIO support removed</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
</package>
<package pkgid="c408ebb19bafc07a4e21dc7e91439b7564ce934e3a43d3afe17e6190ad3feac7" name="kubo" arch="src">
  <version epoch="0" ver="0.32.1" rel="bp156.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1601467200">- Update to 0.7.0
  * Drop upstream 7331.patch
  * Default to Ed25519 keys
  * Secio is now disabled by default
  * IPNS paths now encode the key name as a base36 CIDv1 by default
  * Multiaddresses now accept PeerIDs encoded as CIDv1
  * dag stat command shows size and number of blocks</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1607601600">- Update to 0.8.0
  * Add Remote pinning services: ipfs pin remote
  * Faster local pinning and unpinning
  * update quic-go to support QUIC draft-32</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1624536000">- Update to 0.9.0
  * Exporting of DAGs via Gateways
  * Custom DNS Resolvers
  * Support for non-ICANN DNSLink names
  * Updated to the latest WebUI
  * IPNS keys can now be exported via the CLI without stopping the daemon
  * Experimental DHT Client and Provider System
  * Deprecations
    + The ipfs object commands are now deprecated
    + X-Ipfs-Gateway-Prefix is now deprecated
    + Proquints support removed
    + SECIO support removed</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
</package>
<package pkgid="a8fe27418dca93a8827d7aa1279a1c7d527ca569e9c416b3e06c37e57a6a84f9" name="kubo" arch="x86_64">
  <version epoch="0" ver="0.32.1" rel="bp156.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1601467200">- Update to 0.7.0
  * Drop upstream 7331.patch
  * Default to Ed25519 keys
  * Secio is now disabled by default
  * IPNS paths now encode the key name as a base36 CIDv1 by default
  * Multiaddresses now accept PeerIDs encoded as CIDv1
  * dag stat command shows size and number of blocks</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1607601600">- Update to 0.8.0
  * Add Remote pinning services: ipfs pin remote
  * Faster local pinning and unpinning
  * update quic-go to support QUIC draft-32</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1624536000">- Update to 0.9.0
  * Exporting of DAGs via Gateways
  * Custom DNS Resolvers
  * Support for non-ICANN DNSLink names
  * Updated to the latest WebUI
  * IPNS keys can now be exported via the CLI without stopping the daemon
  * Experimental DHT Client and Provider System
  * Deprecations
    + The ipfs object commands are now deprecated
    + X-Ipfs-Gateway-Prefix is now deprecated
    + Proquints support removed
    + SECIO support removed</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
</package>
<package pkgid="21dabbdc337962a15b070e0bd469e97a4f7148de2464ba84415348df7b2673de" name="kubo" arch="aarch64">
  <version epoch="0" ver="0.35.0" rel="bp156.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1739793600">- Update to 0.33.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.1
  * Bitswap improvements from Boxo
  * Improved IPNS interop
- Update to 0.33.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.0
  * Shared TCP listeners: Kubo now supports sharing the same TCP
    port (4001 by default) by both raw TCP and WebSockets libp2p
    transports.
  * AutoTLS takes care of Secure WebSockets setup: It is no longer
    necessary to manually add /tcp/../ws listeners to
    Addresses.Swarm when AutoTLS.Enabled is set to true. Kubo will
    detect if /ws listener is missing and add one on the same port
    as pre-existing TCP (e.g. /tcp/4001), removing the need for any
    extra configuration.
  * Bitswap improvements from Boxo
  * Using default libp2p_rcmgr metrics: Bespoke rcmgr metrics were
    removed, Kubo now exposes only the default libp2p_rcmgr metrics
    from go-libp2p.
  * Flatfs does not sync on each write: New repositories
    initialized with flatfs in Datastore.Spec will have sync set to
    false.
  * ipfs add --to-files no longer works with --wrap
  * ipfs --api supports HTTPS RPC endpoints
  * New options for faster writes: WriteThrough, BlockKeyCacheSize,
    BatchMaxNodes, BatchMaxSize
  * MFS stability with large number of writes
  * New DoH resolvers for non-ICANN DNSLinks: .eth and .crypto
  * Reliability improvements to the WebRTC Direct listener
  * Fix: Escape Redirect URL for Directory</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1743508800">- Build with -v flag
- Update to 0.34.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.1
  * Dependency updates
- Update to 0.34.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.0
  * AutoTLS now enabled by default for nodes with 1 hour uptime
  * New WebUI features: CAR file import and QR code sharing
  * RPC and CLI command changes
    ~ ipfs config is now validating json fields
    ~ Deprecated the bitswap reprovide command
    ~ The stats reprovide command now shows additional stats
    ~ ipfs files cp now performs basic codec check
  * Bitswap improvements from Boxo
  * IPNS publishing TTL change
    ~ we’ve lowered the default IPNS Record TTL during publishing
    to 5 minutes
  * IPFS_LOG_LEVEL deprecated
  * Pebble datastore format update
  * Badger datastore update
  * Datastore Implementation Updates
  * Datastore Implementation Updates
  * Fix hanging pinset operations during reprovides
  * Important dependency updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1747915200">- 0.35.0
  * Opt-in HTTP Retrieval client
  * Dedicated Reprovider.Strategy for MFS
  * Experimental support for MFS as a FUSE mount point
  * Grid view in WebUI
  * Enhanced DAG-Shaping Controls
  * Datastore Metrics Now Opt-In
  * Improved performance of data onboarding
  * Optimized, dedicated queue for providing fresh CIDs
  * New Provider configuration options
  * Deprecated ipfs stats provider
  * New Bitswap configuration options
  * Bitswap.Libp2pEnabled
  * Bitswap.ServerEnabled
  * Internal.Bitswap.ProviderSearchMaxResults
  * New Routing configuration options
  * Routing.IgnoreProviders
  * Routing.DelegatedRouters
  * New Pebble database format config
  * New environment variables
  * Improved Log Output Setting
  * New Repo Lock Optional Wait
  * Updated golang.org/x/net to 0.39.0 (boo#1241776, CVE-2025-22872)</changelog>
</package>
<package pkgid="272abcea3bfc6f32ab9789a341cc1e0d029e5f14f0125e9777b1cf7038655837" name="kubo" arch="i586">
  <version epoch="0" ver="0.35.0" rel="bp156.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1739793600">- Update to 0.33.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.1
  * Bitswap improvements from Boxo
  * Improved IPNS interop
- Update to 0.33.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.0
  * Shared TCP listeners: Kubo now supports sharing the same TCP
    port (4001 by default) by both raw TCP and WebSockets libp2p
    transports.
  * AutoTLS takes care of Secure WebSockets setup: It is no longer
    necessary to manually add /tcp/../ws listeners to
    Addresses.Swarm when AutoTLS.Enabled is set to true. Kubo will
    detect if /ws listener is missing and add one on the same port
    as pre-existing TCP (e.g. /tcp/4001), removing the need for any
    extra configuration.
  * Bitswap improvements from Boxo
  * Using default libp2p_rcmgr metrics: Bespoke rcmgr metrics were
    removed, Kubo now exposes only the default libp2p_rcmgr metrics
    from go-libp2p.
  * Flatfs does not sync on each write: New repositories
    initialized with flatfs in Datastore.Spec will have sync set to
    false.
  * ipfs add --to-files no longer works with --wrap
  * ipfs --api supports HTTPS RPC endpoints
  * New options for faster writes: WriteThrough, BlockKeyCacheSize,
    BatchMaxNodes, BatchMaxSize
  * MFS stability with large number of writes
  * New DoH resolvers for non-ICANN DNSLinks: .eth and .crypto
  * Reliability improvements to the WebRTC Direct listener
  * Fix: Escape Redirect URL for Directory</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1743508800">- Build with -v flag
- Update to 0.34.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.1
  * Dependency updates
- Update to 0.34.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.0
  * AutoTLS now enabled by default for nodes with 1 hour uptime
  * New WebUI features: CAR file import and QR code sharing
  * RPC and CLI command changes
    ~ ipfs config is now validating json fields
    ~ Deprecated the bitswap reprovide command
    ~ The stats reprovide command now shows additional stats
    ~ ipfs files cp now performs basic codec check
  * Bitswap improvements from Boxo
  * IPNS publishing TTL change
    ~ we’ve lowered the default IPNS Record TTL during publishing
    to 5 minutes
  * IPFS_LOG_LEVEL deprecated
  * Pebble datastore format update
  * Badger datastore update
  * Datastore Implementation Updates
  * Datastore Implementation Updates
  * Fix hanging pinset operations during reprovides
  * Important dependency updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1747915200">- 0.35.0
  * Opt-in HTTP Retrieval client
  * Dedicated Reprovider.Strategy for MFS
  * Experimental support for MFS as a FUSE mount point
  * Grid view in WebUI
  * Enhanced DAG-Shaping Controls
  * Datastore Metrics Now Opt-In
  * Improved performance of data onboarding
  * Optimized, dedicated queue for providing fresh CIDs
  * New Provider configuration options
  * Deprecated ipfs stats provider
  * New Bitswap configuration options
  * Bitswap.Libp2pEnabled
  * Bitswap.ServerEnabled
  * Internal.Bitswap.ProviderSearchMaxResults
  * New Routing configuration options
  * Routing.IgnoreProviders
  * Routing.DelegatedRouters
  * New Pebble database format config
  * New environment variables
  * Improved Log Output Setting
  * New Repo Lock Optional Wait
  * Updated golang.org/x/net to 0.39.0 (boo#1241776, CVE-2025-22872)</changelog>
</package>
<package pkgid="143d9219d02edafcbc701eed399219c18cb59909748a15e7ad59e7d21ff6a87c" name="kubo" arch="ppc64le">
  <version epoch="0" ver="0.35.0" rel="bp156.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1739793600">- Update to 0.33.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.1
  * Bitswap improvements from Boxo
  * Improved IPNS interop
- Update to 0.33.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.0
  * Shared TCP listeners: Kubo now supports sharing the same TCP
    port (4001 by default) by both raw TCP and WebSockets libp2p
    transports.
  * AutoTLS takes care of Secure WebSockets setup: It is no longer
    necessary to manually add /tcp/../ws listeners to
    Addresses.Swarm when AutoTLS.Enabled is set to true. Kubo will
    detect if /ws listener is missing and add one on the same port
    as pre-existing TCP (e.g. /tcp/4001), removing the need for any
    extra configuration.
  * Bitswap improvements from Boxo
  * Using default libp2p_rcmgr metrics: Bespoke rcmgr metrics were
    removed, Kubo now exposes only the default libp2p_rcmgr metrics
    from go-libp2p.
  * Flatfs does not sync on each write: New repositories
    initialized with flatfs in Datastore.Spec will have sync set to
    false.
  * ipfs add --to-files no longer works with --wrap
  * ipfs --api supports HTTPS RPC endpoints
  * New options for faster writes: WriteThrough, BlockKeyCacheSize,
    BatchMaxNodes, BatchMaxSize
  * MFS stability with large number of writes
  * New DoH resolvers for non-ICANN DNSLinks: .eth and .crypto
  * Reliability improvements to the WebRTC Direct listener
  * Fix: Escape Redirect URL for Directory</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1743508800">- Build with -v flag
- Update to 0.34.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.1
  * Dependency updates
- Update to 0.34.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.0
  * AutoTLS now enabled by default for nodes with 1 hour uptime
  * New WebUI features: CAR file import and QR code sharing
  * RPC and CLI command changes
    ~ ipfs config is now validating json fields
    ~ Deprecated the bitswap reprovide command
    ~ The stats reprovide command now shows additional stats
    ~ ipfs files cp now performs basic codec check
  * Bitswap improvements from Boxo
  * IPNS publishing TTL change
    ~ we’ve lowered the default IPNS Record TTL during publishing
    to 5 minutes
  * IPFS_LOG_LEVEL deprecated
  * Pebble datastore format update
  * Badger datastore update
  * Datastore Implementation Updates
  * Datastore Implementation Updates
  * Fix hanging pinset operations during reprovides
  * Important dependency updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1747915200">- 0.35.0
  * Opt-in HTTP Retrieval client
  * Dedicated Reprovider.Strategy for MFS
  * Experimental support for MFS as a FUSE mount point
  * Grid view in WebUI
  * Enhanced DAG-Shaping Controls
  * Datastore Metrics Now Opt-In
  * Improved performance of data onboarding
  * Optimized, dedicated queue for providing fresh CIDs
  * New Provider configuration options
  * Deprecated ipfs stats provider
  * New Bitswap configuration options
  * Bitswap.Libp2pEnabled
  * Bitswap.ServerEnabled
  * Internal.Bitswap.ProviderSearchMaxResults
  * New Routing configuration options
  * Routing.IgnoreProviders
  * Routing.DelegatedRouters
  * New Pebble database format config
  * New environment variables
  * Improved Log Output Setting
  * New Repo Lock Optional Wait
  * Updated golang.org/x/net to 0.39.0 (boo#1241776, CVE-2025-22872)</changelog>
</package>
<package pkgid="277575f01723cd5a96eb67350bd928fc5decb385557be752047a3ce77cd77e0f" name="kubo" arch="s390x">
  <version epoch="0" ver="0.35.0" rel="bp156.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1739793600">- Update to 0.33.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.1
  * Bitswap improvements from Boxo
  * Improved IPNS interop
- Update to 0.33.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.0
  * Shared TCP listeners: Kubo now supports sharing the same TCP
    port (4001 by default) by both raw TCP and WebSockets libp2p
    transports.
  * AutoTLS takes care of Secure WebSockets setup: It is no longer
    necessary to manually add /tcp/../ws listeners to
    Addresses.Swarm when AutoTLS.Enabled is set to true. Kubo will
    detect if /ws listener is missing and add one on the same port
    as pre-existing TCP (e.g. /tcp/4001), removing the need for any
    extra configuration.
  * Bitswap improvements from Boxo
  * Using default libp2p_rcmgr metrics: Bespoke rcmgr metrics were
    removed, Kubo now exposes only the default libp2p_rcmgr metrics
    from go-libp2p.
  * Flatfs does not sync on each write: New repositories
    initialized with flatfs in Datastore.Spec will have sync set to
    false.
  * ipfs add --to-files no longer works with --wrap
  * ipfs --api supports HTTPS RPC endpoints
  * New options for faster writes: WriteThrough, BlockKeyCacheSize,
    BatchMaxNodes, BatchMaxSize
  * MFS stability with large number of writes
  * New DoH resolvers for non-ICANN DNSLinks: .eth and .crypto
  * Reliability improvements to the WebRTC Direct listener
  * Fix: Escape Redirect URL for Directory</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1743508800">- Build with -v flag
- Update to 0.34.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.1
  * Dependency updates
- Update to 0.34.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.0
  * AutoTLS now enabled by default for nodes with 1 hour uptime
  * New WebUI features: CAR file import and QR code sharing
  * RPC and CLI command changes
    ~ ipfs config is now validating json fields
    ~ Deprecated the bitswap reprovide command
    ~ The stats reprovide command now shows additional stats
    ~ ipfs files cp now performs basic codec check
  * Bitswap improvements from Boxo
  * IPNS publishing TTL change
    ~ we’ve lowered the default IPNS Record TTL during publishing
    to 5 minutes
  * IPFS_LOG_LEVEL deprecated
  * Pebble datastore format update
  * Badger datastore update
  * Datastore Implementation Updates
  * Datastore Implementation Updates
  * Fix hanging pinset operations during reprovides
  * Important dependency updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1747915200">- 0.35.0
  * Opt-in HTTP Retrieval client
  * Dedicated Reprovider.Strategy for MFS
  * Experimental support for MFS as a FUSE mount point
  * Grid view in WebUI
  * Enhanced DAG-Shaping Controls
  * Datastore Metrics Now Opt-In
  * Improved performance of data onboarding
  * Optimized, dedicated queue for providing fresh CIDs
  * New Provider configuration options
  * Deprecated ipfs stats provider
  * New Bitswap configuration options
  * Bitswap.Libp2pEnabled
  * Bitswap.ServerEnabled
  * Internal.Bitswap.ProviderSearchMaxResults
  * New Routing configuration options
  * Routing.IgnoreProviders
  * Routing.DelegatedRouters
  * New Pebble database format config
  * New environment variables
  * Improved Log Output Setting
  * New Repo Lock Optional Wait
  * Updated golang.org/x/net to 0.39.0 (boo#1241776, CVE-2025-22872)</changelog>
</package>
<package pkgid="1e09c688a876a0e5a6c9595423085336328151b5e32225554e2cfbb1a0e6e1d1" name="kubo" arch="src">
  <version epoch="0" ver="0.35.0" rel="bp156.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1739793600">- Update to 0.33.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.1
  * Bitswap improvements from Boxo
  * Improved IPNS interop
- Update to 0.33.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.0
  * Shared TCP listeners: Kubo now supports sharing the same TCP
    port (4001 by default) by both raw TCP and WebSockets libp2p
    transports.
  * AutoTLS takes care of Secure WebSockets setup: It is no longer
    necessary to manually add /tcp/../ws listeners to
    Addresses.Swarm when AutoTLS.Enabled is set to true. Kubo will
    detect if /ws listener is missing and add one on the same port
    as pre-existing TCP (e.g. /tcp/4001), removing the need for any
    extra configuration.
  * Bitswap improvements from Boxo
  * Using default libp2p_rcmgr metrics: Bespoke rcmgr metrics were
    removed, Kubo now exposes only the default libp2p_rcmgr metrics
    from go-libp2p.
  * Flatfs does not sync on each write: New repositories
    initialized with flatfs in Datastore.Spec will have sync set to
    false.
  * ipfs add --to-files no longer works with --wrap
  * ipfs --api supports HTTPS RPC endpoints
  * New options for faster writes: WriteThrough, BlockKeyCacheSize,
    BatchMaxNodes, BatchMaxSize
  * MFS stability with large number of writes
  * New DoH resolvers for non-ICANN DNSLinks: .eth and .crypto
  * Reliability improvements to the WebRTC Direct listener
  * Fix: Escape Redirect URL for Directory</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1743508800">- Build with -v flag
- Update to 0.34.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.1
  * Dependency updates
- Update to 0.34.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.0
  * AutoTLS now enabled by default for nodes with 1 hour uptime
  * New WebUI features: CAR file import and QR code sharing
  * RPC and CLI command changes
    ~ ipfs config is now validating json fields
    ~ Deprecated the bitswap reprovide command
    ~ The stats reprovide command now shows additional stats
    ~ ipfs files cp now performs basic codec check
  * Bitswap improvements from Boxo
  * IPNS publishing TTL change
    ~ we’ve lowered the default IPNS Record TTL during publishing
    to 5 minutes
  * IPFS_LOG_LEVEL deprecated
  * Pebble datastore format update
  * Badger datastore update
  * Datastore Implementation Updates
  * Datastore Implementation Updates
  * Fix hanging pinset operations during reprovides
  * Important dependency updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1747915200">- 0.35.0
  * Opt-in HTTP Retrieval client
  * Dedicated Reprovider.Strategy for MFS
  * Experimental support for MFS as a FUSE mount point
  * Grid view in WebUI
  * Enhanced DAG-Shaping Controls
  * Datastore Metrics Now Opt-In
  * Improved performance of data onboarding
  * Optimized, dedicated queue for providing fresh CIDs
  * New Provider configuration options
  * Deprecated ipfs stats provider
  * New Bitswap configuration options
  * Bitswap.Libp2pEnabled
  * Bitswap.ServerEnabled
  * Internal.Bitswap.ProviderSearchMaxResults
  * New Routing configuration options
  * Routing.IgnoreProviders
  * Routing.DelegatedRouters
  * New Pebble database format config
  * New environment variables
  * Improved Log Output Setting
  * New Repo Lock Optional Wait
  * Updated golang.org/x/net to 0.39.0 (boo#1241776, CVE-2025-22872)</changelog>
</package>
<package pkgid="5913b2ab79edf3eb06046d17f799d897383072e8de3ce7893ed77dbd7622a5bb" name="kubo" arch="x86_64">
  <version epoch="0" ver="0.35.0" rel="bp156.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1739793600">- Update to 0.33.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.1
  * Bitswap improvements from Boxo
  * Improved IPNS interop
- Update to 0.33.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.0
  * Shared TCP listeners: Kubo now supports sharing the same TCP
    port (4001 by default) by both raw TCP and WebSockets libp2p
    transports.
  * AutoTLS takes care of Secure WebSockets setup: It is no longer
    necessary to manually add /tcp/../ws listeners to
    Addresses.Swarm when AutoTLS.Enabled is set to true. Kubo will
    detect if /ws listener is missing and add one on the same port
    as pre-existing TCP (e.g. /tcp/4001), removing the need for any
    extra configuration.
  * Bitswap improvements from Boxo
  * Using default libp2p_rcmgr metrics: Bespoke rcmgr metrics were
    removed, Kubo now exposes only the default libp2p_rcmgr metrics
    from go-libp2p.
  * Flatfs does not sync on each write: New repositories
    initialized with flatfs in Datastore.Spec will have sync set to
    false.
  * ipfs add --to-files no longer works with --wrap
  * ipfs --api supports HTTPS RPC endpoints
  * New options for faster writes: WriteThrough, BlockKeyCacheSize,
    BatchMaxNodes, BatchMaxSize
  * MFS stability with large number of writes
  * New DoH resolvers for non-ICANN DNSLinks: .eth and .crypto
  * Reliability improvements to the WebRTC Direct listener
  * Fix: Escape Redirect URL for Directory</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1743508800">- Build with -v flag
- Update to 0.34.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.1
  * Dependency updates
- Update to 0.34.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.0
  * AutoTLS now enabled by default for nodes with 1 hour uptime
  * New WebUI features: CAR file import and QR code sharing
  * RPC and CLI command changes
    ~ ipfs config is now validating json fields
    ~ Deprecated the bitswap reprovide command
    ~ The stats reprovide command now shows additional stats
    ~ ipfs files cp now performs basic codec check
  * Bitswap improvements from Boxo
  * IPNS publishing TTL change
    ~ we’ve lowered the default IPNS Record TTL during publishing
    to 5 minutes
  * IPFS_LOG_LEVEL deprecated
  * Pebble datastore format update
  * Badger datastore update
  * Datastore Implementation Updates
  * Datastore Implementation Updates
  * Fix hanging pinset operations during reprovides
  * Important dependency updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1747915200">- 0.35.0
  * Opt-in HTTP Retrieval client
  * Dedicated Reprovider.Strategy for MFS
  * Experimental support for MFS as a FUSE mount point
  * Grid view in WebUI
  * Enhanced DAG-Shaping Controls
  * Datastore Metrics Now Opt-In
  * Improved performance of data onboarding
  * Optimized, dedicated queue for providing fresh CIDs
  * New Provider configuration options
  * Deprecated ipfs stats provider
  * New Bitswap configuration options
  * Bitswap.Libp2pEnabled
  * Bitswap.ServerEnabled
  * Internal.Bitswap.ProviderSearchMaxResults
  * New Routing configuration options
  * Routing.IgnoreProviders
  * Routing.DelegatedRouters
  * New Pebble database format config
  * New environment variables
  * Improved Log Output Setting
  * New Repo Lock Optional Wait
  * Updated golang.org/x/net to 0.39.0 (boo#1241776, CVE-2025-22872)</changelog>
</package>
<package pkgid="851396c9f3a585bc32d9e68df775bf9aad9452e3cf061e9018cceb67386b3dc7" name="kubo" arch="aarch64">
  <version epoch="0" ver="0.35.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1739793600">- Update to 0.33.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.1
  * Bitswap improvements from Boxo
  * Improved IPNS interop
- Update to 0.33.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.0
  * Shared TCP listeners: Kubo now supports sharing the same TCP
    port (4001 by default) by both raw TCP and WebSockets libp2p
    transports.
  * AutoTLS takes care of Secure WebSockets setup: It is no longer
    necessary to manually add /tcp/../ws listeners to
    Addresses.Swarm when AutoTLS.Enabled is set to true. Kubo will
    detect if /ws listener is missing and add one on the same port
    as pre-existing TCP (e.g. /tcp/4001), removing the need for any
    extra configuration.
  * Bitswap improvements from Boxo
  * Using default libp2p_rcmgr metrics: Bespoke rcmgr metrics were
    removed, Kubo now exposes only the default libp2p_rcmgr metrics
    from go-libp2p.
  * Flatfs does not sync on each write: New repositories
    initialized with flatfs in Datastore.Spec will have sync set to
    false.
  * ipfs add --to-files no longer works with --wrap
  * ipfs --api supports HTTPS RPC endpoints
  * New options for faster writes: WriteThrough, BlockKeyCacheSize,
    BatchMaxNodes, BatchMaxSize
  * MFS stability with large number of writes
  * New DoH resolvers for non-ICANN DNSLinks: .eth and .crypto
  * Reliability improvements to the WebRTC Direct listener
  * Fix: Escape Redirect URL for Directory</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1743508800">- Build with -v flag
- Update to 0.34.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.1
  * Dependency updates
- Update to 0.34.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.0
  * AutoTLS now enabled by default for nodes with 1 hour uptime
  * New WebUI features: CAR file import and QR code sharing
  * RPC and CLI command changes
    ~ ipfs config is now validating json fields
    ~ Deprecated the bitswap reprovide command
    ~ The stats reprovide command now shows additional stats
    ~ ipfs files cp now performs basic codec check
  * Bitswap improvements from Boxo
  * IPNS publishing TTL change
    ~ we’ve lowered the default IPNS Record TTL during publishing
    to 5 minutes
  * IPFS_LOG_LEVEL deprecated
  * Pebble datastore format update
  * Badger datastore update
  * Datastore Implementation Updates
  * Datastore Implementation Updates
  * Fix hanging pinset operations during reprovides
  * Important dependency updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1747915200">- 0.35.0
  * Opt-in HTTP Retrieval client
  * Dedicated Reprovider.Strategy for MFS
  * Experimental support for MFS as a FUSE mount point
  * Grid view in WebUI
  * Enhanced DAG-Shaping Controls
  * Datastore Metrics Now Opt-In
  * Improved performance of data onboarding
  * Optimized, dedicated queue for providing fresh CIDs
  * New Provider configuration options
  * Deprecated ipfs stats provider
  * New Bitswap configuration options
  * Bitswap.Libp2pEnabled
  * Bitswap.ServerEnabled
  * Internal.Bitswap.ProviderSearchMaxResults
  * New Routing configuration options
  * Routing.IgnoreProviders
  * Routing.DelegatedRouters
  * New Pebble database format config
  * New environment variables
  * Improved Log Output Setting
  * New Repo Lock Optional Wait
  * Updated golang.org/x/net to 0.39.0 (boo#1241776, CVE-2025-22872)</changelog>
</package>
<package pkgid="bf6004e39403661e38f026854ead737c2853b791a3b85c2c95001b748fea6370" name="kubo" arch="i586">
  <version epoch="0" ver="0.35.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1739793600">- Update to 0.33.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.1
  * Bitswap improvements from Boxo
  * Improved IPNS interop
- Update to 0.33.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.0
  * Shared TCP listeners: Kubo now supports sharing the same TCP
    port (4001 by default) by both raw TCP and WebSockets libp2p
    transports.
  * AutoTLS takes care of Secure WebSockets setup: It is no longer
    necessary to manually add /tcp/../ws listeners to
    Addresses.Swarm when AutoTLS.Enabled is set to true. Kubo will
    detect if /ws listener is missing and add one on the same port
    as pre-existing TCP (e.g. /tcp/4001), removing the need for any
    extra configuration.
  * Bitswap improvements from Boxo
  * Using default libp2p_rcmgr metrics: Bespoke rcmgr metrics were
    removed, Kubo now exposes only the default libp2p_rcmgr metrics
    from go-libp2p.
  * Flatfs does not sync on each write: New repositories
    initialized with flatfs in Datastore.Spec will have sync set to
    false.
  * ipfs add --to-files no longer works with --wrap
  * ipfs --api supports HTTPS RPC endpoints
  * New options for faster writes: WriteThrough, BlockKeyCacheSize,
    BatchMaxNodes, BatchMaxSize
  * MFS stability with large number of writes
  * New DoH resolvers for non-ICANN DNSLinks: .eth and .crypto
  * Reliability improvements to the WebRTC Direct listener
  * Fix: Escape Redirect URL for Directory</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1743508800">- Build with -v flag
- Update to 0.34.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.1
  * Dependency updates
- Update to 0.34.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.0
  * AutoTLS now enabled by default for nodes with 1 hour uptime
  * New WebUI features: CAR file import and QR code sharing
  * RPC and CLI command changes
    ~ ipfs config is now validating json fields
    ~ Deprecated the bitswap reprovide command
    ~ The stats reprovide command now shows additional stats
    ~ ipfs files cp now performs basic codec check
  * Bitswap improvements from Boxo
  * IPNS publishing TTL change
    ~ we’ve lowered the default IPNS Record TTL during publishing
    to 5 minutes
  * IPFS_LOG_LEVEL deprecated
  * Pebble datastore format update
  * Badger datastore update
  * Datastore Implementation Updates
  * Datastore Implementation Updates
  * Fix hanging pinset operations during reprovides
  * Important dependency updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1747915200">- 0.35.0
  * Opt-in HTTP Retrieval client
  * Dedicated Reprovider.Strategy for MFS
  * Experimental support for MFS as a FUSE mount point
  * Grid view in WebUI
  * Enhanced DAG-Shaping Controls
  * Datastore Metrics Now Opt-In
  * Improved performance of data onboarding
  * Optimized, dedicated queue for providing fresh CIDs
  * New Provider configuration options
  * Deprecated ipfs stats provider
  * New Bitswap configuration options
  * Bitswap.Libp2pEnabled
  * Bitswap.ServerEnabled
  * Internal.Bitswap.ProviderSearchMaxResults
  * New Routing configuration options
  * Routing.IgnoreProviders
  * Routing.DelegatedRouters
  * New Pebble database format config
  * New environment variables
  * Improved Log Output Setting
  * New Repo Lock Optional Wait
  * Updated golang.org/x/net to 0.39.0 (boo#1241776, CVE-2025-22872)</changelog>
</package>
<package pkgid="cafe847a13ce6290a4468c8b5640d8e7723f25d7aed5af4bf096f9f768783f40" name="kubo" arch="ppc64le">
  <version epoch="0" ver="0.35.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1739793600">- Update to 0.33.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.1
  * Bitswap improvements from Boxo
  * Improved IPNS interop
- Update to 0.33.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.0
  * Shared TCP listeners: Kubo now supports sharing the same TCP
    port (4001 by default) by both raw TCP and WebSockets libp2p
    transports.
  * AutoTLS takes care of Secure WebSockets setup: It is no longer
    necessary to manually add /tcp/../ws listeners to
    Addresses.Swarm when AutoTLS.Enabled is set to true. Kubo will
    detect if /ws listener is missing and add one on the same port
    as pre-existing TCP (e.g. /tcp/4001), removing the need for any
    extra configuration.
  * Bitswap improvements from Boxo
  * Using default libp2p_rcmgr metrics: Bespoke rcmgr metrics were
    removed, Kubo now exposes only the default libp2p_rcmgr metrics
    from go-libp2p.
  * Flatfs does not sync on each write: New repositories
    initialized with flatfs in Datastore.Spec will have sync set to
    false.
  * ipfs add --to-files no longer works with --wrap
  * ipfs --api supports HTTPS RPC endpoints
  * New options for faster writes: WriteThrough, BlockKeyCacheSize,
    BatchMaxNodes, BatchMaxSize
  * MFS stability with large number of writes
  * New DoH resolvers for non-ICANN DNSLinks: .eth and .crypto
  * Reliability improvements to the WebRTC Direct listener
  * Fix: Escape Redirect URL for Directory</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1743508800">- Build with -v flag
- Update to 0.34.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.1
  * Dependency updates
- Update to 0.34.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.0
  * AutoTLS now enabled by default for nodes with 1 hour uptime
  * New WebUI features: CAR file import and QR code sharing
  * RPC and CLI command changes
    ~ ipfs config is now validating json fields
    ~ Deprecated the bitswap reprovide command
    ~ The stats reprovide command now shows additional stats
    ~ ipfs files cp now performs basic codec check
  * Bitswap improvements from Boxo
  * IPNS publishing TTL change
    ~ we’ve lowered the default IPNS Record TTL during publishing
    to 5 minutes
  * IPFS_LOG_LEVEL deprecated
  * Pebble datastore format update
  * Badger datastore update
  * Datastore Implementation Updates
  * Datastore Implementation Updates
  * Fix hanging pinset operations during reprovides
  * Important dependency updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1747915200">- 0.35.0
  * Opt-in HTTP Retrieval client
  * Dedicated Reprovider.Strategy for MFS
  * Experimental support for MFS as a FUSE mount point
  * Grid view in WebUI
  * Enhanced DAG-Shaping Controls
  * Datastore Metrics Now Opt-In
  * Improved performance of data onboarding
  * Optimized, dedicated queue for providing fresh CIDs
  * New Provider configuration options
  * Deprecated ipfs stats provider
  * New Bitswap configuration options
  * Bitswap.Libp2pEnabled
  * Bitswap.ServerEnabled
  * Internal.Bitswap.ProviderSearchMaxResults
  * New Routing configuration options
  * Routing.IgnoreProviders
  * Routing.DelegatedRouters
  * New Pebble database format config
  * New environment variables
  * Improved Log Output Setting
  * New Repo Lock Optional Wait
  * Updated golang.org/x/net to 0.39.0 (boo#1241776, CVE-2025-22872)</changelog>
</package>
<package pkgid="3171fb22fdc79794e98e6144e25fa0465968198dc77702398386496914fdb8bb" name="kubo" arch="s390x">
  <version epoch="0" ver="0.35.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1739793600">- Update to 0.33.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.1
  * Bitswap improvements from Boxo
  * Improved IPNS interop
- Update to 0.33.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.0
  * Shared TCP listeners: Kubo now supports sharing the same TCP
    port (4001 by default) by both raw TCP and WebSockets libp2p
    transports.
  * AutoTLS takes care of Secure WebSockets setup: It is no longer
    necessary to manually add /tcp/../ws listeners to
    Addresses.Swarm when AutoTLS.Enabled is set to true. Kubo will
    detect if /ws listener is missing and add one on the same port
    as pre-existing TCP (e.g. /tcp/4001), removing the need for any
    extra configuration.
  * Bitswap improvements from Boxo
  * Using default libp2p_rcmgr metrics: Bespoke rcmgr metrics were
    removed, Kubo now exposes only the default libp2p_rcmgr metrics
    from go-libp2p.
  * Flatfs does not sync on each write: New repositories
    initialized with flatfs in Datastore.Spec will have sync set to
    false.
  * ipfs add --to-files no longer works with --wrap
  * ipfs --api supports HTTPS RPC endpoints
  * New options for faster writes: WriteThrough, BlockKeyCacheSize,
    BatchMaxNodes, BatchMaxSize
  * MFS stability with large number of writes
  * New DoH resolvers for non-ICANN DNSLinks: .eth and .crypto
  * Reliability improvements to the WebRTC Direct listener
  * Fix: Escape Redirect URL for Directory</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1743508800">- Build with -v flag
- Update to 0.34.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.1
  * Dependency updates
- Update to 0.34.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.0
  * AutoTLS now enabled by default for nodes with 1 hour uptime
  * New WebUI features: CAR file import and QR code sharing
  * RPC and CLI command changes
    ~ ipfs config is now validating json fields
    ~ Deprecated the bitswap reprovide command
    ~ The stats reprovide command now shows additional stats
    ~ ipfs files cp now performs basic codec check
  * Bitswap improvements from Boxo
  * IPNS publishing TTL change
    ~ we’ve lowered the default IPNS Record TTL during publishing
    to 5 minutes
  * IPFS_LOG_LEVEL deprecated
  * Pebble datastore format update
  * Badger datastore update
  * Datastore Implementation Updates
  * Datastore Implementation Updates
  * Fix hanging pinset operations during reprovides
  * Important dependency updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1747915200">- 0.35.0
  * Opt-in HTTP Retrieval client
  * Dedicated Reprovider.Strategy for MFS
  * Experimental support for MFS as a FUSE mount point
  * Grid view in WebUI
  * Enhanced DAG-Shaping Controls
  * Datastore Metrics Now Opt-In
  * Improved performance of data onboarding
  * Optimized, dedicated queue for providing fresh CIDs
  * New Provider configuration options
  * Deprecated ipfs stats provider
  * New Bitswap configuration options
  * Bitswap.Libp2pEnabled
  * Bitswap.ServerEnabled
  * Internal.Bitswap.ProviderSearchMaxResults
  * New Routing configuration options
  * Routing.IgnoreProviders
  * Routing.DelegatedRouters
  * New Pebble database format config
  * New environment variables
  * Improved Log Output Setting
  * New Repo Lock Optional Wait
  * Updated golang.org/x/net to 0.39.0 (boo#1241776, CVE-2025-22872)</changelog>
</package>
<package pkgid="5bb77eb2ef8a8fd15aacd993df1fd26490b1ba1197687b385957d2bbd2451062" name="kubo" arch="src">
  <version epoch="0" ver="0.35.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1739793600">- Update to 0.33.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.1
  * Bitswap improvements from Boxo
  * Improved IPNS interop
- Update to 0.33.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.0
  * Shared TCP listeners: Kubo now supports sharing the same TCP
    port (4001 by default) by both raw TCP and WebSockets libp2p
    transports.
  * AutoTLS takes care of Secure WebSockets setup: It is no longer
    necessary to manually add /tcp/../ws listeners to
    Addresses.Swarm when AutoTLS.Enabled is set to true. Kubo will
    detect if /ws listener is missing and add one on the same port
    as pre-existing TCP (e.g. /tcp/4001), removing the need for any
    extra configuration.
  * Bitswap improvements from Boxo
  * Using default libp2p_rcmgr metrics: Bespoke rcmgr metrics were
    removed, Kubo now exposes only the default libp2p_rcmgr metrics
    from go-libp2p.
  * Flatfs does not sync on each write: New repositories
    initialized with flatfs in Datastore.Spec will have sync set to
    false.
  * ipfs add --to-files no longer works with --wrap
  * ipfs --api supports HTTPS RPC endpoints
  * New options for faster writes: WriteThrough, BlockKeyCacheSize,
    BatchMaxNodes, BatchMaxSize
  * MFS stability with large number of writes
  * New DoH resolvers for non-ICANN DNSLinks: .eth and .crypto
  * Reliability improvements to the WebRTC Direct listener
  * Fix: Escape Redirect URL for Directory</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1743508800">- Build with -v flag
- Update to 0.34.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.1
  * Dependency updates
- Update to 0.34.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.0
  * AutoTLS now enabled by default for nodes with 1 hour uptime
  * New WebUI features: CAR file import and QR code sharing
  * RPC and CLI command changes
    ~ ipfs config is now validating json fields
    ~ Deprecated the bitswap reprovide command
    ~ The stats reprovide command now shows additional stats
    ~ ipfs files cp now performs basic codec check
  * Bitswap improvements from Boxo
  * IPNS publishing TTL change
    ~ we’ve lowered the default IPNS Record TTL during publishing
    to 5 minutes
  * IPFS_LOG_LEVEL deprecated
  * Pebble datastore format update
  * Badger datastore update
  * Datastore Implementation Updates
  * Datastore Implementation Updates
  * Fix hanging pinset operations during reprovides
  * Important dependency updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1747915200">- 0.35.0
  * Opt-in HTTP Retrieval client
  * Dedicated Reprovider.Strategy for MFS
  * Experimental support for MFS as a FUSE mount point
  * Grid view in WebUI
  * Enhanced DAG-Shaping Controls
  * Datastore Metrics Now Opt-In
  * Improved performance of data onboarding
  * Optimized, dedicated queue for providing fresh CIDs
  * New Provider configuration options
  * Deprecated ipfs stats provider
  * New Bitswap configuration options
  * Bitswap.Libp2pEnabled
  * Bitswap.ServerEnabled
  * Internal.Bitswap.ProviderSearchMaxResults
  * New Routing configuration options
  * Routing.IgnoreProviders
  * Routing.DelegatedRouters
  * New Pebble database format config
  * New environment variables
  * Improved Log Output Setting
  * New Repo Lock Optional Wait
  * Updated golang.org/x/net to 0.39.0 (boo#1241776, CVE-2025-22872)</changelog>
</package>
<package pkgid="44db2b43087eae8760571a342e903dd4e590d8c06afd395505beb0f994c84689" name="kubo" arch="x86_64">
  <version epoch="0" ver="0.35.0" rel="bp156.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1639137600">- Update to 0.11.0
  * UnixFS sharding is now automatic and enabled by default
  * can no longer act as a Circuit Relay v1
  * HTTP RPC wire format for experimental commands at /api/v0/pubsub changed
  * Circuit Relay v2
  * New configuration flags:
    + Addresses.AppendAnnounce
    + Pubsub.Enabled
  * changed ipfs dag get
  * changed ipfs dag put
  * UnixFS refactor
  * Add ipfs multibase command
  * Bitswap now supports greater configurability
  * Programmatic shell completions command
  * Profile collection command
  * Add Peering command</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1645185600">- Update to 0.12.0
  * change how data blocks are stored -&gt; needs migration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1654862400">- Update to 0.13.0
  * Can now limit how much resource usage libp2p consumes
  * Improve connecting with nodes behind NATs and Firewalls
  * Improve HTTP gateway to allow making faster CDNs
  * Add Gateway.FastDirIndexThreshold configuration, for fast listings
    of big directories, without the linear slowdown caused by reading
    size metadata from child nodes.
  * Improve Etag and If-None-Match
  * Add X-Ipfs-Roots for smarter HTTP caches
  * Added metrics per response type
  * OpenTelemetry tracing
  * Expand diag profile command
  * Support for PEM/PKCS8 for key import/export
  * Use standard IPLD codec names across the CLI/HTTP API
  * Prioritize Yamux over Mplex stream multiplexer
  * https://github.com/ipfs/go-ipfs/releases/tag/v0.13.0 for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1670587200">- Update to 0.17.0 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.17.0
  * https://github.com/ipfs/kubo/releases/tag/v0.16.0
  * https://github.com/ipfs/kubo/releases/tag/v0.15.0
  * https://github.com/ipfs/kubo/releases/tag/v0.14.0
  * libp2p resource management enabled by default
  * Implicit connection manager limits
  * TAR Response Format on Gateways
  * Dialling /wss peer behind a reverse proxy
  * More configurable delegated routing system
  * WebTransport new experimental Transport
  * Hardened IPNS record verification
  * Web Gateways now support _redirects files
  * Add files to MFS with ipfs add --to-files
  * Blake 3 support
  * Fx Options plugin
  * $IPFS_PATH/gateway file
  * Removed mdns_legacy implementation
  * Delegated Routing
  * ipfs repo migrate
  * Emoji support in Multibase</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1675512000">- Update to 0.18.1 - for details see:
  * https://github.com/ipfs/kubo/releases/tag/v0.18.1
  * https://github.com/ipfs/kubo/releases/tag/v0.18.0
  * Support InterPlanetary Network Indexers
  * Support DAG-JSON and DAG-CBOR in gateways
  * Enable WebTransport by default
  * Improve libp2p resource management integration</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1688558400">- Update to 0.21.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.21.0
  * Saving previously seen nodes for later bootstrapping
  * Gateway: DeserializedResponses config flag
  * Gateway: DAG-CBOR/-JSON previews and improved error pages
  * Gateway: subdomain redirects are now text/html
  * Gateway: support for partial CAR export parameters
  * ipfs dag stat deduping statistics
  * Accelerated DHT Client is no longer experimental
  * client/rpc migration of go-ipfs-http-client</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1689940800">- Rename from go-ipfs to kubo to follow upsteam git repo rename</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1691582400">- Update to 0.22.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.22.0
  * Gateway: support for order= and dups= parameters (IPIP-412)
  * ipfs name publish now supports V2 only IPNS records
  * IPNS name resolution has been fixed
  * go-libp2p v0.29.0 update with smart dialing</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1696593600">- Update to 0.23.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.23.0
  * Mplex deprecation
  * Gateway: meaningful CAR responses on Not Found errors
  * Gateway: added Gateway.DisableHTMLErrors configuration option
  * Binary characters in file names: no longer works with old clients and new Kubo servers
  * Self-hosting /routing/v1 endpoint for delegated routing needs
  * Trustless Gateway Over Libp2p Experiment
  * Removal of /quic (Draft 29) support
  * Better Caching of multiaddresses for providers in DHT servers
  * Fixed FUSE multiblock structures</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Update to 0.24.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.24.0
  * Support for content blocking
  * Gateway: the root of the CARs are no longer meaningful
  * IPNS: improved publishing defaults
  * IPNS: record TTL is used for caching
  * Experimental Transport: WebRTC Direct</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1701864000">- Add 10243.patch to fix FUSE mounts</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1706356800">- Update to 0.26.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.26.0
  * Removed several deprecated commands
  * Support optional pin names
  * jaeger trace exporter has been removed
  * fix quic-go memory exhaustion attack (boo#1235162, CVE-2023-49295)
- Update to 0.25.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.25.0
  * WebUI: Updated Peers View
  * Kubo RPC API now supports optional HTTP Authorization.
  * MPLEX Removal
  * Graphsync Experiment Removal
  * Commands ipfs key sign and ipfs key verify</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712232000">- Update to 0.27.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.27.0
  * Gateway: support for /api/v0 is deprecated
  * IPNS resolver cache's TTL can now be configured via Ipns.MaxCacheTTL
  * RPC client: deprecated DHT API, added Routing API
  * Deprecated DHT commands removed from /api/v0/dht
  * Repository migrations are now trustless
- Let .service files wait for network-online.target (boo#1222194)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1712577600">- Add kubo-0.27.0-CVE-2024-22189.patch to avoid
  quic-go memory exhaustion attack (boo#1222479, CVE-2024-22189)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1718107200">- Update to 0.29.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.29.0
  * Add search functionality for pin names
  * Customizing ipfs add defaults
- drop upstream 10243.patch
- drop upstream kubo-0.27.0-CVE-2024-22189.patch</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729857600">- Update to 0.31.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.31.0
  * Experimental Pebble Datastore
  * New metrics
  * lowpower profile no longer breaks DHT announcements
  * go 1.23, boxo 0.24 and go-libp2p 0.36.5
- Update to 0.30.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.30.0
  * Improved P2P connectivity
  * Refactored Bitswap and dag-pb chunker
  * WebRTC-Direct Transport enabled by default
  * UnixFS 1.5: Mode and Modification Time Support
  * AutoNAT V2 Service Introduced Alongside V1
  * Automated ipfs version check
  * Version Suffix Configuration
  * /unix/ socket support in Addresses.API
  * Cleaned Up ipfs daemon Startup Log
  * Commands Preserve Specified Hostname</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1736424000">- Update to 0.32.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.32.1
  * AutoTLS: Automatic Certificates for libp2p WebSockets via libp2p.direct
  * Dependency updates
    + ipfs-webui to v4.4.0
    + boxo to v0.24.3
    + go-libp2p to v0.37.0
    + go-libp2p-kad-dht to v0.28.1
    + go-libp2p-pubsub to v0.12.0
    + p2p-forge/client to v0.0.2</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1739793600">- Update to 0.33.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.1
  * Bitswap improvements from Boxo
  * Improved IPNS interop
- Update to 0.33.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.33.0
  * Shared TCP listeners: Kubo now supports sharing the same TCP
    port (4001 by default) by both raw TCP and WebSockets libp2p
    transports.
  * AutoTLS takes care of Secure WebSockets setup: It is no longer
    necessary to manually add /tcp/../ws listeners to
    Addresses.Swarm when AutoTLS.Enabled is set to true. Kubo will
    detect if /ws listener is missing and add one on the same port
    as pre-existing TCP (e.g. /tcp/4001), removing the need for any
    extra configuration.
  * Bitswap improvements from Boxo
  * Using default libp2p_rcmgr metrics: Bespoke rcmgr metrics were
    removed, Kubo now exposes only the default libp2p_rcmgr metrics
    from go-libp2p.
  * Flatfs does not sync on each write: New repositories
    initialized with flatfs in Datastore.Spec will have sync set to
    false.
  * ipfs add --to-files no longer works with --wrap
  * ipfs --api supports HTTPS RPC endpoints
  * New options for faster writes: WriteThrough, BlockKeyCacheSize,
    BatchMaxNodes, BatchMaxSize
  * MFS stability with large number of writes
  * New DoH resolvers for non-ICANN DNSLinks: .eth and .crypto
  * Reliability improvements to the WebRTC Direct listener
  * Fix: Escape Redirect URL for Directory</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1743508800">- Build with -v flag
- Update to 0.34.1 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.1
  * Dependency updates
- Update to 0.34.0 - for details see
  * https://github.com/ipfs/kubo/releases/tag/v0.34.0
  * AutoTLS now enabled by default for nodes with 1 hour uptime
  * New WebUI features: CAR file import and QR code sharing
  * RPC and CLI command changes
    ~ ipfs config is now validating json fields
    ~ Deprecated the bitswap reprovide command
    ~ The stats reprovide command now shows additional stats
    ~ ipfs files cp now performs basic codec check
  * Bitswap improvements from Boxo
  * IPNS publishing TTL change
    ~ we’ve lowered the default IPNS Record TTL during publishing
    to 5 minutes
  * IPFS_LOG_LEVEL deprecated
  * Pebble datastore format update
  * Badger datastore update
  * Datastore Implementation Updates
  * Datastore Implementation Updates
  * Fix hanging pinset operations during reprovides
  * Important dependency updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1747915200">- 0.35.0
  * Opt-in HTTP Retrieval client
  * Dedicated Reprovider.Strategy for MFS
  * Experimental support for MFS as a FUSE mount point
  * Grid view in WebUI
  * Enhanced DAG-Shaping Controls
  * Datastore Metrics Now Opt-In
  * Improved performance of data onboarding
  * Optimized, dedicated queue for providing fresh CIDs
  * New Provider configuration options
  * Deprecated ipfs stats provider
  * New Bitswap configuration options
  * Bitswap.Libp2pEnabled
  * Bitswap.ServerEnabled
  * Internal.Bitswap.ProviderSearchMaxResults
  * New Routing configuration options
  * Routing.IgnoreProviders
  * Routing.DelegatedRouters
  * New Pebble database format config
  * New environment variables
  * Improved Log Output Setting
  * New Repo Lock Optional Wait
  * Updated golang.org/x/net to 0.39.0 (boo#1241776, CVE-2025-22872)</changelog>
</package>
<package pkgid="a836a5ab7936d5a0dc2c8cac9a48d447de7ef2352449272d6bda3d9419b4f4df" name="libKSaneCore1" arch="aarch64">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Crop the image after a scan finished (kde#457097)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Add explicit moc includes to sources for moc-covered headers
  * Crop the image after a scan finished (kde#457097)
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Have export macros header include version header (Qt6-only)
  * Support reading the gamma table</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Javier Llorente &lt;javier@opensuse.org&gt;" date="1723982400">- Add fix-scanner-search-crash.patch (kde#444987)</changelog>
</package>
<package pkgid="0eb53fa15dae5c223d4e8d5a39b797c058abbe7b553a7f2809762eb6c8173c21" name="libKSaneCore1" arch="i586">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Crop the image after a scan finished (kde#457097)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Add explicit moc includes to sources for moc-covered headers
  * Crop the image after a scan finished (kde#457097)
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Have export macros header include version header (Qt6-only)
  * Support reading the gamma table</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Javier Llorente &lt;javier@opensuse.org&gt;" date="1723982400">- Add fix-scanner-search-crash.patch (kde#444987)</changelog>
</package>
<package pkgid="5f601ccb3610553852933c83dc1893b99a7083c7024a341db0e3b17e03ebdcad" name="libKSaneCore1" arch="ppc64le">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Crop the image after a scan finished (kde#457097)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Add explicit moc includes to sources for moc-covered headers
  * Crop the image after a scan finished (kde#457097)
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Have export macros header include version header (Qt6-only)
  * Support reading the gamma table</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Javier Llorente &lt;javier@opensuse.org&gt;" date="1723982400">- Add fix-scanner-search-crash.patch (kde#444987)</changelog>
</package>
<package pkgid="d34d396495e029a0769ce30aa89cc999666d9b657fdb0d78124a9337f32d00fe" name="libKSaneCore1" arch="s390x">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Crop the image after a scan finished (kde#457097)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Add explicit moc includes to sources for moc-covered headers
  * Crop the image after a scan finished (kde#457097)
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Have export macros header include version header (Qt6-only)
  * Support reading the gamma table</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Javier Llorente &lt;javier@opensuse.org&gt;" date="1723982400">- Add fix-scanner-search-crash.patch (kde#444987)</changelog>
</package>
<package pkgid="05bbd6018d274b9b943bab091f86f89ce4ce8640f553ea9d1763aea9be15db88" name="libKSaneCore1" arch="x86_64">
  <version epoch="0" ver="23.08.5" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1669464000">- Update to 22.11.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1669982400">- Update to 22.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1672747200">- Update to 22.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.1/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1675166400">- Update to 22.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.2/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1677585600">- Update to 22.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/22.12.3/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1679054400">- Update to 23.03.80
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680264000">- Update to 23.03.90
  * New feature release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1681560000">- Update to 23.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.0/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683633600">- Update to 23.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.1/
- No code change since 23.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1686052800">- Update to 23.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.2/
- Changes since 23.04.1:
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Crop the image after a scan finished (kde#457097)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688472000">- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1690891200">- Update to 23.07.80
  * New feature release
- Changes since 23.04.3:
  * Add explicit moc includes to sources for moc-covered headers
  * Crop the image after a scan finished (kde#457097)
  * Also call renewImage() for 8-bit Gray images (kde#469683)
  * Have export macros header include version header (Qt6-only)
  * Support reading the gamma table</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692014400">- Update to 23.07.90
  * New feature release
- No code change since 23.07.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1692532800">- Update to 23.08.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.0/
- No code change since 23.07.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694520000">- Update to 23.08.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.1/
- No code change since 23.08.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 23.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.2/
- No code change since 23.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699358400">- Update to 23.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.3/
- No code change since 23.08.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 23.08.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.4/
- No code change since 23.08.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 23.08.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.08.5/
- No code change since 23.08.4</changelog>
  <changelog author="Javier Llorente &lt;javier@opensuse.org&gt;" date="1723982400">- Add fix-scanner-search-crash.patch (kde#444987)</changelog>
</package>
<package pkgid="8e39f3fe597fda538332d45e1056fedf0453617859ceb3e841ddc991322c8b5f" name="libLLVM19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="6d65b15679cf7383fa8e47a2a34bf92dae68e84d93d6a9da5f98c93ae0a970f9" name="libLLVM19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="6875e5073777c93dc76eca99ca57a1803aa63e8022d8c646caf0a8b6ee6bb5df" name="libLLVM19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="508f27fc278bb53e4c545870f68f6b4b62c8143c1326ce011b44ac4f6a361cf3" name="libLLVM19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="0bee433fdde82602672a97b2c0a2e28032e5a339e88ba75ff17c60aafc0c99db" name="libLLVM19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="df242615d6c574ed5a515a463802d35c90cdf29ec186075ad37f236aece6cf9f" name="libLLVM19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="55526c196ec06acf17983536cee86e3ec4528be7e7e486045b6df75dd8b5b774" name="libLLVM19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="2a91a981f1ddce047074bcb6923433af37ebcd18108143c1265c91398cc70707" name="libLLVM19" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="de38443068cc106c5862d627eba0e3d76cc509347b9a973b2d443b5046768a6c" name="libLLVM19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="9cb1ba28f77a6237d38ccb91793c21683d849e932624a2ee05cf0ce6c892350a" name="libLLVM19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="3691ae1fb84af924071948523732d7049f97e6b1fbfe7e8d8fc45a9a984fe676" name="libLLVM19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="b9beb6a66a1a5764f5d24a590f5bd1d03b435854c6d1936792a09f7e82991820" name="libLLVM19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="7d2ebec1d772629e766fb51c656843a212066462a1f12612005566cce6dc514e" name="libLLVM19" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="3b458debc01868101bfafb9c78f15330978b463d59508aebc4397e7b5f1cf4c7" name="libLLVM19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="f570036b1d4b066907921772cc106c8f79ed6a0a653b0cf6b5634863e05029ee" name="libLLVM19-32bit" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="f71ffd9ad6ab7c1b7648c083ec20cc1b8cb56480b73d83fcf1bd8064a9216212" name="libLLVM19-32bit" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="3b46aaabcfd0b60eebdcb3cdaad3ecb992456a1ff8389280c0ae8a4208423a1c" name="libLLVM19-32bit" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="756789091f1fe069023f587290da11dd0648b975a210b206320409aac63f8392" name="libLLVM19-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="1518c96764edbf56ffed0da951b7283179a9107cd6329d0eaea9dba6d9cd4cd1" name="libLLVM19-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="744852c0344777e42d409cf76504f723786aec0a60bc06287549518e1f444b7d" name="libLLVM19-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="e03cd8276acd7f592bfd0093e1027713416ef56f596f1b586320c243ed08d2ec" name="libLTO19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="145f0deba5cb84b6887005a1382988691fb35bb1ed9007b536469149c49d0c5c" name="libLTO19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="97e2bcd55e17b82929e99c61966c8d889cccc4c323429ab9097d970cd20f7cf9" name="libLTO19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="3ee80da1efc61bef426ba38afef199048196cc551f517a1f848ce1cbd5e8411a" name="libLTO19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="997893a53861782a4291cece8270281b90ab54dfc5628c2ca28e69a2f8da281b" name="libLTO19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="2b0aca9f659bbb021092450a9ec31cc7dc4fd48d8fe54387c1bedfd8f4ed0565" name="libLTO19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="e60a63ad2199ad9f45e6a4cbfd7fb9bb1cb4468618bfcbef5d22f9f050a869c2" name="libLTO19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="3dd2e2f52e31a54a678b137c43a332b970c0b66caea1b498877edb4bc58c6bc3" name="libLTO19" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="0d3cafed2491b1fa51949455ee2fffcac2767abf4f478a12ef103e054dab8467" name="libLTO19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="041a165a1f51474463521313c4c2889d81728acb65b75d9deaa9114e4b1f09b7" name="libLTO19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="d7ba5891e97d9eee8c980069ab2825f4c1a33ffa50841f3d61f82c06bbfd08ff" name="libLTO19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="cb14857e37119c87cab25e49dce2e63b61ddc4a3ed7702f84943c9041d719bbf" name="libLTO19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="507e2edd08afd2f283e754a9413cb91677ae837f9cf9826023b36bc26395fec5" name="libLTO19" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="88c0c53a4ce3f9268552d66b00b6697cef34cc2c0ac33c4a3dc17e7951ec7e88" name="libLTO19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="1ded08f243b6d4a3f70bbc61355cfe23c321f9283dc427226f3073b42b40403e" name="libQt6Bluetooth6" arch="aarch64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648555200">- Update to 6.3.0-rc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1737547200">- Add security fix (CVE-2025-23050, boo#1236237)
  * 0001-QLowEnergyControllerPrivateBluez-guard-against-malfo.patch</changelog>
</package>
<package pkgid="b42d72d80555ef4beafbede13b5fc111352be16c50681e4f1c790030bf9c20be" name="libQt6Bluetooth6" arch="i586">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648555200">- Update to 6.3.0-rc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1737547200">- Add security fix (CVE-2025-23050, boo#1236237)
  * 0001-QLowEnergyControllerPrivateBluez-guard-against-malfo.patch</changelog>
</package>
<package pkgid="81231cc478e13a4db953bce2caa004813dcbe4c95468ab62e6c14deba6f699ad" name="libQt6Bluetooth6" arch="ppc64le">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648555200">- Update to 6.3.0-rc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1737547200">- Add security fix (CVE-2025-23050, boo#1236237)
  * 0001-QLowEnergyControllerPrivateBluez-guard-against-malfo.patch</changelog>
</package>
<package pkgid="5afc745cae81371b4f43f0dd72505fcbbb372ab8c2dcf114d272b34df2ecf39a" name="libQt6Bluetooth6" arch="s390x">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648555200">- Update to 6.3.0-rc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1737547200">- Add security fix (CVE-2025-23050, boo#1236237)
  * 0001-QLowEnergyControllerPrivateBluez-guard-against-malfo.patch</changelog>
</package>
<package pkgid="d11555e83551c3f5fcc33b8a4a0ae64c67e52bdbab57464bbaf5dfc4d563d86d" name="libQt6Bluetooth6" arch="x86_64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648555200">- Update to 6.3.0-rc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1737547200">- Add security fix (CVE-2025-23050, boo#1236237)
  * 0001-QLowEnergyControllerPrivateBluez-guard-against-malfo.patch</changelog>
</package>
<package pkgid="03315d3682ebea7b706881742ac83fbbba82e2971cb9d7ec6e6125452544ec93" name="libQt6Nfc6" arch="aarch64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648555200">- Update to 6.3.0-rc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1737547200">- Add security fix (CVE-2025-23050, boo#1236237)
  * 0001-QLowEnergyControllerPrivateBluez-guard-against-malfo.patch</changelog>
</package>
<package pkgid="a6046efbc8aceb1b24f79a5809663b7dee5a081771b139a575523cc79cd9c323" name="libQt6Nfc6" arch="i586">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648555200">- Update to 6.3.0-rc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1737547200">- Add security fix (CVE-2025-23050, boo#1236237)
  * 0001-QLowEnergyControllerPrivateBluez-guard-against-malfo.patch</changelog>
</package>
<package pkgid="86b486a6bbd2327640ac4cc11c30b8af97406beb2a264c19341c84e6bdb9273e" name="libQt6Nfc6" arch="ppc64le">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648555200">- Update to 6.3.0-rc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1737547200">- Add security fix (CVE-2025-23050, boo#1236237)
  * 0001-QLowEnergyControllerPrivateBluez-guard-against-malfo.patch</changelog>
</package>
<package pkgid="502dcef978569220cffa7af658a064f7ae578d3a878e80fce4ed741bc59455ae" name="libQt6Nfc6" arch="s390x">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648555200">- Update to 6.3.0-rc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1737547200">- Add security fix (CVE-2025-23050, boo#1236237)
  * 0001-QLowEnergyControllerPrivateBluez-guard-against-malfo.patch</changelog>
</package>
<package pkgid="24645786fa2e5a0712d0599a311b35602effcb21252b071c68e1517a09838ad3" name="libQt6Nfc6" arch="x86_64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648555200">- Update to 6.3.0-rc</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1737547200">- Add security fix (CVE-2025-23050, boo#1236237)
  * 0001-QLowEnergyControllerPrivateBluez-guard-against-malfo.patch</changelog>
</package>
<package pkgid="fe2efaca287e121b037f6491ce8d0ea3072a5bdc95ba61d3a1d2f6778fff15a9" name="libQt6Pdf6" arch="aarch64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1664884800">- Update disk constraints for qt6-webengine:docs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680004800">- Add upstream change:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released
- Drop patch, merged upstream:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Build with older re2 release on Tumbleweed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1703073600">- Add patch to force pdf_attributions.qdoc to be generated before
  qtpdf, fixing a race condition that made the docs subpackage
  build not reproducible (boo#1217774):
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1703246400">- On Leap build with re2-10 even when re2-11 is available (bsc#1217257).
  re2-11 pulls in system abseil which is incompatible with bundled abseil
  causing build failure.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released
- Drop patch, issue fixed upstream:
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735214400">- Add patch to avoid CVE-2024-40896 (boo#1234820)
  * 0001-Build-system-remove-libxml2-compilation-test.patch</changelog>
</package>
<package pkgid="15de7740a958a6b91ecbcf918b55de0335e6d546e837863d34a2afe1acfbcb5f" name="libQt6Pdf6" arch="x86_64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1664884800">- Update disk constraints for qt6-webengine:docs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680004800">- Add upstream change:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released
- Drop patch, merged upstream:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Build with older re2 release on Tumbleweed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1703073600">- Add patch to force pdf_attributions.qdoc to be generated before
  qtpdf, fixing a race condition that made the docs subpackage
  build not reproducible (boo#1217774):
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1703246400">- On Leap build with re2-10 even when re2-11 is available (bsc#1217257).
  re2-11 pulls in system abseil which is incompatible with bundled abseil
  causing build failure.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released
- Drop patch, issue fixed upstream:
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735214400">- Add patch to avoid CVE-2024-40896 (boo#1234820)
  * 0001-Build-system-remove-libxml2-compilation-test.patch</changelog>
</package>
<package pkgid="c30958472435cbd6e7c97db9b9ba98b454e07acdb8cf67f333ce678a8d63a36b" name="libQt6PdfQuick6" arch="aarch64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1664884800">- Update disk constraints for qt6-webengine:docs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680004800">- Add upstream change:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released
- Drop patch, merged upstream:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Build with older re2 release on Tumbleweed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1703073600">- Add patch to force pdf_attributions.qdoc to be generated before
  qtpdf, fixing a race condition that made the docs subpackage
  build not reproducible (boo#1217774):
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1703246400">- On Leap build with re2-10 even when re2-11 is available (bsc#1217257).
  re2-11 pulls in system abseil which is incompatible with bundled abseil
  causing build failure.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released
- Drop patch, issue fixed upstream:
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735214400">- Add patch to avoid CVE-2024-40896 (boo#1234820)
  * 0001-Build-system-remove-libxml2-compilation-test.patch</changelog>
</package>
<package pkgid="03c36769efe2eb1f85e4d50a2104fa3c4dc8850b94091786e20b4f3066add80f" name="libQt6PdfQuick6" arch="x86_64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1664884800">- Update disk constraints for qt6-webengine:docs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680004800">- Add upstream change:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released
- Drop patch, merged upstream:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Build with older re2 release on Tumbleweed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1703073600">- Add patch to force pdf_attributions.qdoc to be generated before
  qtpdf, fixing a race condition that made the docs subpackage
  build not reproducible (boo#1217774):
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1703246400">- On Leap build with re2-10 even when re2-11 is available (bsc#1217257).
  re2-11 pulls in system abseil which is incompatible with bundled abseil
  causing build failure.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released
- Drop patch, issue fixed upstream:
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735214400">- Add patch to avoid CVE-2024-40896 (boo#1234820)
  * 0001-Build-system-remove-libxml2-compilation-test.patch</changelog>
</package>
<package pkgid="397946042f176a620b3ed1408b3802d45045c8873cf561e6918a1bd130636e60" name="libQt6PdfWidgets6" arch="aarch64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1664884800">- Update disk constraints for qt6-webengine:docs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680004800">- Add upstream change:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released
- Drop patch, merged upstream:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Build with older re2 release on Tumbleweed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1703073600">- Add patch to force pdf_attributions.qdoc to be generated before
  qtpdf, fixing a race condition that made the docs subpackage
  build not reproducible (boo#1217774):
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1703246400">- On Leap build with re2-10 even when re2-11 is available (bsc#1217257).
  re2-11 pulls in system abseil which is incompatible with bundled abseil
  causing build failure.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released
- Drop patch, issue fixed upstream:
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735214400">- Add patch to avoid CVE-2024-40896 (boo#1234820)
  * 0001-Build-system-remove-libxml2-compilation-test.patch</changelog>
</package>
<package pkgid="bd8065dba86c315e5b7ad78502dbdae63eb7c725c3e6607fbf57deeb9c4be362" name="libQt6PdfWidgets6" arch="x86_64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1664884800">- Update disk constraints for qt6-webengine:docs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680004800">- Add upstream change:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released
- Drop patch, merged upstream:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Build with older re2 release on Tumbleweed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1703073600">- Add patch to force pdf_attributions.qdoc to be generated before
  qtpdf, fixing a race condition that made the docs subpackage
  build not reproducible (boo#1217774):
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1703246400">- On Leap build with re2-10 even when re2-11 is available (bsc#1217257).
  re2-11 pulls in system abseil which is incompatible with bundled abseil
  causing build failure.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released
- Drop patch, issue fixed upstream:
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735214400">- Add patch to avoid CVE-2024-40896 (boo#1234820)
  * 0001-Build-system-remove-libxml2-compilation-test.patch</changelog>
</package>
<package pkgid="8576785357d9ed1cfedd2b4a38b33398cd440fa8a6efba2470ef83737cd89cd2" name="libQt6WebEngineCore6" arch="aarch64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1664884800">- Update disk constraints for qt6-webengine:docs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680004800">- Add upstream change:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released
- Drop patch, merged upstream:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Build with older re2 release on Tumbleweed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1703073600">- Add patch to force pdf_attributions.qdoc to be generated before
  qtpdf, fixing a race condition that made the docs subpackage
  build not reproducible (boo#1217774):
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1703246400">- On Leap build with re2-10 even when re2-11 is available (bsc#1217257).
  re2-11 pulls in system abseil which is incompatible with bundled abseil
  causing build failure.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released
- Drop patch, issue fixed upstream:
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735214400">- Add patch to avoid CVE-2024-40896 (boo#1234820)
  * 0001-Build-system-remove-libxml2-compilation-test.patch</changelog>
</package>
<package pkgid="1863aa325d933e2d6f28f33ce69138a488d8c0d2c67de034642143b96db3b086" name="libQt6WebEngineCore6" arch="x86_64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1664884800">- Update disk constraints for qt6-webengine:docs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680004800">- Add upstream change:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released
- Drop patch, merged upstream:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Build with older re2 release on Tumbleweed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1703073600">- Add patch to force pdf_attributions.qdoc to be generated before
  qtpdf, fixing a race condition that made the docs subpackage
  build not reproducible (boo#1217774):
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1703246400">- On Leap build with re2-10 even when re2-11 is available (bsc#1217257).
  re2-11 pulls in system abseil which is incompatible with bundled abseil
  causing build failure.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released
- Drop patch, issue fixed upstream:
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735214400">- Add patch to avoid CVE-2024-40896 (boo#1234820)
  * 0001-Build-system-remove-libxml2-compilation-test.patch</changelog>
</package>
<package pkgid="cc56c65fc13bf4579aa5ac51863d02005e48252ef6b42d62b9e307694e3de79b" name="libQt6WebEngineQuick6" arch="aarch64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1664884800">- Update disk constraints for qt6-webengine:docs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680004800">- Add upstream change:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released
- Drop patch, merged upstream:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Build with older re2 release on Tumbleweed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1703073600">- Add patch to force pdf_attributions.qdoc to be generated before
  qtpdf, fixing a race condition that made the docs subpackage
  build not reproducible (boo#1217774):
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1703246400">- On Leap build with re2-10 even when re2-11 is available (bsc#1217257).
  re2-11 pulls in system abseil which is incompatible with bundled abseil
  causing build failure.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released
- Drop patch, issue fixed upstream:
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735214400">- Add patch to avoid CVE-2024-40896 (boo#1234820)
  * 0001-Build-system-remove-libxml2-compilation-test.patch</changelog>
</package>
<package pkgid="e60a4f9606217a34d0c895e1ad3ea76fddda1cd9012df5790ec952e05b541df9" name="libQt6WebEngineQuick6" arch="x86_64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1664884800">- Update disk constraints for qt6-webengine:docs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680004800">- Add upstream change:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released
- Drop patch, merged upstream:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Build with older re2 release on Tumbleweed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1703073600">- Add patch to force pdf_attributions.qdoc to be generated before
  qtpdf, fixing a race condition that made the docs subpackage
  build not reproducible (boo#1217774):
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1703246400">- On Leap build with re2-10 even when re2-11 is available (bsc#1217257).
  re2-11 pulls in system abseil which is incompatible with bundled abseil
  causing build failure.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released
- Drop patch, issue fixed upstream:
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735214400">- Add patch to avoid CVE-2024-40896 (boo#1234820)
  * 0001-Build-system-remove-libxml2-compilation-test.patch</changelog>
</package>
<package pkgid="837eac162aca4c4b3e2a8916fa387cdd2b9ec065889d4370058f05097cfca1fa" name="libQt6WebEngineWidgets6" arch="aarch64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1664884800">- Update disk constraints for qt6-webengine:docs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680004800">- Add upstream change:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released
- Drop patch, merged upstream:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Build with older re2 release on Tumbleweed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1703073600">- Add patch to force pdf_attributions.qdoc to be generated before
  qtpdf, fixing a race condition that made the docs subpackage
  build not reproducible (boo#1217774):
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1703246400">- On Leap build with re2-10 even when re2-11 is available (bsc#1217257).
  re2-11 pulls in system abseil which is incompatible with bundled abseil
  causing build failure.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released
- Drop patch, issue fixed upstream:
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735214400">- Add patch to avoid CVE-2024-40896 (boo#1234820)
  * 0001-Build-system-remove-libxml2-compilation-test.patch</changelog>
</package>
<package pkgid="caac280edb14fac13e43b37c8126a9f7c425382194c34690dc23aa8573512993" name="libQt6WebEngineWidgets6" arch="x86_64">
  <version epoch="0" ver="6.6.3" rel="bp156.2.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1664884800">- Update disk constraints for qt6-webengine:docs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1678968000">- Update to 6.4.3:
  * https://www.qt.io/blog/qt-6.4.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680004800">- Add upstream change:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1680523200">- Update to 6.5.0
  * https://www.qt.io/blog/qt-6.5-lts-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1684929600">- Update to 6.5.1
  * https://www.qt.io/blog/qt-6.5.1-released
- Drop patch, merged upstream:
  * qtwebengine-gcc13.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688126400">- Update subpackages requirements</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1689854400">- Update to 6.5.2
  * https://www.qt.io/blog/qt-6.5.2-released-1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Build with older re2 release on Tumbleweed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1695902400">- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696939200">- Update to 6.6.0
  * https://www.qt.io/blog/qt-6.6-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701086400">- Update to 6.6.1:
  * https://www.qt.io/blog/qt-6.6.1-released</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1703073600">- Add patch to force pdf_attributions.qdoc to be generated before
  qtpdf, fixing a race condition that made the docs subpackage
  build not reproducible (boo#1217774):
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1703246400">- On Leap build with re2-10 even when re2-11 is available (bsc#1217257).
  re2-11 pulls in system abseil which is incompatible with bundled abseil
  causing build failure.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707912000">- Update to 6.6.2
  * https://www.qt.io/blog/qt-6.6.2-released
- Drop patch, issue fixed upstream:
  * 0001-Fix-race-condition-generating-docs.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711454400">- Update to 6.6.3:
  * https://www.qt.io/blog/qt-6.6.3-released</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735214400">- Add patch to avoid CVE-2024-40896 (boo#1234820)
  * 0001-Build-system-remove-libxml2-compilation-test.patch</changelog>
</package>
<package pkgid="cc2f26e9268e8c166365dea981b99bbc93eeb6d21970e3a222ad0ddb37aa95fc" name="libSDL2_sound2" arch="aarch64">
  <version epoch="0" ver="2.0.4" rel="bp156.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648296000">- New package SDL2_sound for build.opensuse.org. In comparison to
  SDL_sound (1.x):
  * Removed support for QuickTime, Speex and MikMod
  * SDL_sound 2's public API has not changed at all from 1.x
  * SDL_sound.h requires SDL2 now (can't mix SDL2_sound with SDL1)
  * The library name changed to -lSDL2_sound
- Drop SDL_sound-1.0.3-nompglib.patch, no longer applies
- Drop baselibs.conf</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Move to 2.0.1.g17 (df3fc77)
  * Resolve build failures on Leap 15.3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687694400">- Update to snapshot 2.0.1+g60 (53f66a30)
  * Avoid division by zero with certain uncompressed WAV files
  * A pkgconfig file was added</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Update to release 2.0.2
  * No further changes from the last snapshot 2.0.1+g60</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1736769600">- Update to release 2.0.4
  * Update bundled stb_vorbis to address CVE-2023-45676,
    CVE-2023-45677, CVE-2023-45679, CVE-2023-45680,
    CVE-2023-45681, CVE-2023-45682.</changelog>
</package>
<package pkgid="88e72c7954d3525f24014f41f5e871bb8ecbfbc311b5a0ca588de8c0e606313d" name="libSDL2_sound2" arch="i586">
  <version epoch="0" ver="2.0.4" rel="bp156.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648296000">- New package SDL2_sound for build.opensuse.org. In comparison to
  SDL_sound (1.x):
  * Removed support for QuickTime, Speex and MikMod
  * SDL_sound 2's public API has not changed at all from 1.x
  * SDL_sound.h requires SDL2 now (can't mix SDL2_sound with SDL1)
  * The library name changed to -lSDL2_sound
- Drop SDL_sound-1.0.3-nompglib.patch, no longer applies
- Drop baselibs.conf</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Move to 2.0.1.g17 (df3fc77)
  * Resolve build failures on Leap 15.3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687694400">- Update to snapshot 2.0.1+g60 (53f66a30)
  * Avoid division by zero with certain uncompressed WAV files
  * A pkgconfig file was added</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Update to release 2.0.2
  * No further changes from the last snapshot 2.0.1+g60</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1736769600">- Update to release 2.0.4
  * Update bundled stb_vorbis to address CVE-2023-45676,
    CVE-2023-45677, CVE-2023-45679, CVE-2023-45680,
    CVE-2023-45681, CVE-2023-45682.</changelog>
</package>
<package pkgid="d20406cfd1838f0138b8deb3f1028a19a6ee2d66ed7ccc9852d3b75c71e19acb" name="libSDL2_sound2" arch="ppc64le">
  <version epoch="0" ver="2.0.4" rel="bp156.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648296000">- New package SDL2_sound for build.opensuse.org. In comparison to
  SDL_sound (1.x):
  * Removed support for QuickTime, Speex and MikMod
  * SDL_sound 2's public API has not changed at all from 1.x
  * SDL_sound.h requires SDL2 now (can't mix SDL2_sound with SDL1)
  * The library name changed to -lSDL2_sound
- Drop SDL_sound-1.0.3-nompglib.patch, no longer applies
- Drop baselibs.conf</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Move to 2.0.1.g17 (df3fc77)
  * Resolve build failures on Leap 15.3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687694400">- Update to snapshot 2.0.1+g60 (53f66a30)
  * Avoid division by zero with certain uncompressed WAV files
  * A pkgconfig file was added</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Update to release 2.0.2
  * No further changes from the last snapshot 2.0.1+g60</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1736769600">- Update to release 2.0.4
  * Update bundled stb_vorbis to address CVE-2023-45676,
    CVE-2023-45677, CVE-2023-45679, CVE-2023-45680,
    CVE-2023-45681, CVE-2023-45682.</changelog>
</package>
<package pkgid="cbae4200c0f05197b1d9fafdf821d3e46ad7d7e1749192fd19d0927dd748f2fd" name="libSDL2_sound2" arch="s390x">
  <version epoch="0" ver="2.0.4" rel="bp156.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648296000">- New package SDL2_sound for build.opensuse.org. In comparison to
  SDL_sound (1.x):
  * Removed support for QuickTime, Speex and MikMod
  * SDL_sound 2's public API has not changed at all from 1.x
  * SDL_sound.h requires SDL2 now (can't mix SDL2_sound with SDL1)
  * The library name changed to -lSDL2_sound
- Drop SDL_sound-1.0.3-nompglib.patch, no longer applies
- Drop baselibs.conf</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Move to 2.0.1.g17 (df3fc77)
  * Resolve build failures on Leap 15.3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687694400">- Update to snapshot 2.0.1+g60 (53f66a30)
  * Avoid division by zero with certain uncompressed WAV files
  * A pkgconfig file was added</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Update to release 2.0.2
  * No further changes from the last snapshot 2.0.1+g60</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1736769600">- Update to release 2.0.4
  * Update bundled stb_vorbis to address CVE-2023-45676,
    CVE-2023-45677, CVE-2023-45679, CVE-2023-45680,
    CVE-2023-45681, CVE-2023-45682.</changelog>
</package>
<package pkgid="4d66d1f01edb5fef8df70e17396a14ccc0fde45e4eb72e44d0133351e082ed50" name="libSDL2_sound2" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="bp156.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648296000">- New package SDL2_sound for build.opensuse.org. In comparison to
  SDL_sound (1.x):
  * Removed support for QuickTime, Speex and MikMod
  * SDL_sound 2's public API has not changed at all from 1.x
  * SDL_sound.h requires SDL2 now (can't mix SDL2_sound with SDL1)
  * The library name changed to -lSDL2_sound
- Drop SDL_sound-1.0.3-nompglib.patch, no longer applies
- Drop baselibs.conf</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Move to 2.0.1.g17 (df3fc77)
  * Resolve build failures on Leap 15.3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687694400">- Update to snapshot 2.0.1+g60 (53f66a30)
  * Avoid division by zero with certain uncompressed WAV files
  * A pkgconfig file was added</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Update to release 2.0.2
  * No further changes from the last snapshot 2.0.1+g60</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1736769600">- Update to release 2.0.4
  * Update bundled stb_vorbis to address CVE-2023-45676,
    CVE-2023-45677, CVE-2023-45679, CVE-2023-45680,
    CVE-2023-45681, CVE-2023-45682.</changelog>
</package>
<package pkgid="645965206b008b5d46bf0b2e42dc8d688ed265a83e690495deba7a14dfacc336" name="libXISF" arch="src">
  <version epoch="0" ver="0.2.12+git5.d00de20" rel="bp156.2.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Initial OBS release.
- Add set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675944000">- Update to 0.1.1:
  * properly set soversion in CMakeLists.txt
- Drop set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676030400">- Update to 0.1.2:
  * Add readPixel param to getImage()
  * Add option to disable shared lib</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676894400">- Update to 0.1.3:
  * Fix that compression override would produce incorrect images
  * Write pixelStorage attribute
  * Write ICCProfile
- Add fix-projver.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678708800">- Update to 0.2.0 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678795200">- Disable hwcaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1678795201">- Use noun phrase for descriptions. Avoid miniscule main package
  by moving documentation to subpackages.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1679313600">- Update to 0.2.1 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681300800">- Update to 0.2.3:
  * Fix issue with ColorFilterArray.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685016000">- Update to 0.2.5:
  * Add method to for ICC profile
  * Add StreamBuffer to optimize save/load from memory
  * Add support for thumbnail
- Add fix-pkgconfig.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 0.2.6:
  * Fix "string sub-command REPLACE requires at least four arguments"
  * Fix generating pkgconfig file
- Rebase patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686657600">- Update to 0.2.7:
  * Fix reading ICCprofile
- Add 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686744000">- Update to 0.2.8:
  * Remove linking against zstd
- Drop 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 0.2.9:
  * Support for ZSTD</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696507200">- Use better GCC macro.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697630400">- Update to 0.2.10:
  * Fix incorrect header size.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1704801600">- Update to 0.2.11:
  * Convert aperture and focal length from mm to meters.
  * Fix not loading String properties.
- Add fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711540800">- Update to 0.2.12:
  * Don't use replace to update attachement position
  * Add support for subblocks to handle +2GiB compressed images
  * Fix bug with writing ICCProfile
  * Add F32Matrix and F64Matrix into toString
- Drop fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1720008000">- Update to 0.2.12+git5.d00de20:
  * Add new XISFModify class to edit FITSKeywords
  * Make compression level 0-100
  * Fix calculation of compression level for ZSTD</changelog>
</package>
<package pkgid="0ed844e6448d910d343e2ac124a3524f3901349ad8884c21356d31d48bbc270b" name="libXISF-devel" arch="aarch64">
  <version epoch="0" ver="0.2.12+git5.d00de20" rel="bp156.2.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Initial OBS release.
- Add set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675944000">- Update to 0.1.1:
  * properly set soversion in CMakeLists.txt
- Drop set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676030400">- Update to 0.1.2:
  * Add readPixel param to getImage()
  * Add option to disable shared lib</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676894400">- Update to 0.1.3:
  * Fix that compression override would produce incorrect images
  * Write pixelStorage attribute
  * Write ICCProfile
- Add fix-projver.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678708800">- Update to 0.2.0 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678795200">- Disable hwcaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1678795201">- Use noun phrase for descriptions. Avoid miniscule main package
  by moving documentation to subpackages.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1679313600">- Update to 0.2.1 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681300800">- Update to 0.2.3:
  * Fix issue with ColorFilterArray.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685016000">- Update to 0.2.5:
  * Add method to for ICC profile
  * Add StreamBuffer to optimize save/load from memory
  * Add support for thumbnail
- Add fix-pkgconfig.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 0.2.6:
  * Fix "string sub-command REPLACE requires at least four arguments"
  * Fix generating pkgconfig file
- Rebase patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686657600">- Update to 0.2.7:
  * Fix reading ICCprofile
- Add 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686744000">- Update to 0.2.8:
  * Remove linking against zstd
- Drop 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 0.2.9:
  * Support for ZSTD</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696507200">- Use better GCC macro.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697630400">- Update to 0.2.10:
  * Fix incorrect header size.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1704801600">- Update to 0.2.11:
  * Convert aperture and focal length from mm to meters.
  * Fix not loading String properties.
- Add fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711540800">- Update to 0.2.12:
  * Don't use replace to update attachement position
  * Add support for subblocks to handle +2GiB compressed images
  * Fix bug with writing ICCProfile
  * Add F32Matrix and F64Matrix into toString
- Drop fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1720008000">- Update to 0.2.12+git5.d00de20:
  * Add new XISFModify class to edit FITSKeywords
  * Make compression level 0-100
  * Fix calculation of compression level for ZSTD</changelog>
</package>
<package pkgid="9794c862e46a0612392e0bc87eef9f91be46d566c7c4d815cc8a7ac936b1cbb6" name="libXISF-devel" arch="ppc64le">
  <version epoch="0" ver="0.2.12+git5.d00de20" rel="bp156.2.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Initial OBS release.
- Add set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675944000">- Update to 0.1.1:
  * properly set soversion in CMakeLists.txt
- Drop set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676030400">- Update to 0.1.2:
  * Add readPixel param to getImage()
  * Add option to disable shared lib</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676894400">- Update to 0.1.3:
  * Fix that compression override would produce incorrect images
  * Write pixelStorage attribute
  * Write ICCProfile
- Add fix-projver.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678708800">- Update to 0.2.0 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678795200">- Disable hwcaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1678795201">- Use noun phrase for descriptions. Avoid miniscule main package
  by moving documentation to subpackages.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1679313600">- Update to 0.2.1 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681300800">- Update to 0.2.3:
  * Fix issue with ColorFilterArray.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685016000">- Update to 0.2.5:
  * Add method to for ICC profile
  * Add StreamBuffer to optimize save/load from memory
  * Add support for thumbnail
- Add fix-pkgconfig.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 0.2.6:
  * Fix "string sub-command REPLACE requires at least four arguments"
  * Fix generating pkgconfig file
- Rebase patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686657600">- Update to 0.2.7:
  * Fix reading ICCprofile
- Add 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686744000">- Update to 0.2.8:
  * Remove linking against zstd
- Drop 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 0.2.9:
  * Support for ZSTD</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696507200">- Use better GCC macro.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697630400">- Update to 0.2.10:
  * Fix incorrect header size.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1704801600">- Update to 0.2.11:
  * Convert aperture and focal length from mm to meters.
  * Fix not loading String properties.
- Add fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711540800">- Update to 0.2.12:
  * Don't use replace to update attachement position
  * Add support for subblocks to handle +2GiB compressed images
  * Fix bug with writing ICCProfile
  * Add F32Matrix and F64Matrix into toString
- Drop fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1720008000">- Update to 0.2.12+git5.d00de20:
  * Add new XISFModify class to edit FITSKeywords
  * Make compression level 0-100
  * Fix calculation of compression level for ZSTD</changelog>
</package>
<package pkgid="4e6f25051b307164c18894fb1f61d2035b7a0bf01a6d8fcada8a3d1eb586c4da" name="libXISF-devel" arch="s390x">
  <version epoch="0" ver="0.2.12+git5.d00de20" rel="bp156.2.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Initial OBS release.
- Add set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675944000">- Update to 0.1.1:
  * properly set soversion in CMakeLists.txt
- Drop set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676030400">- Update to 0.1.2:
  * Add readPixel param to getImage()
  * Add option to disable shared lib</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676894400">- Update to 0.1.3:
  * Fix that compression override would produce incorrect images
  * Write pixelStorage attribute
  * Write ICCProfile
- Add fix-projver.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678708800">- Update to 0.2.0 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678795200">- Disable hwcaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1678795201">- Use noun phrase for descriptions. Avoid miniscule main package
  by moving documentation to subpackages.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1679313600">- Update to 0.2.1 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681300800">- Update to 0.2.3:
  * Fix issue with ColorFilterArray.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685016000">- Update to 0.2.5:
  * Add method to for ICC profile
  * Add StreamBuffer to optimize save/load from memory
  * Add support for thumbnail
- Add fix-pkgconfig.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 0.2.6:
  * Fix "string sub-command REPLACE requires at least four arguments"
  * Fix generating pkgconfig file
- Rebase patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686657600">- Update to 0.2.7:
  * Fix reading ICCprofile
- Add 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686744000">- Update to 0.2.8:
  * Remove linking against zstd
- Drop 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 0.2.9:
  * Support for ZSTD</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696507200">- Use better GCC macro.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697630400">- Update to 0.2.10:
  * Fix incorrect header size.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1704801600">- Update to 0.2.11:
  * Convert aperture and focal length from mm to meters.
  * Fix not loading String properties.
- Add fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711540800">- Update to 0.2.12:
  * Don't use replace to update attachement position
  * Add support for subblocks to handle +2GiB compressed images
  * Fix bug with writing ICCProfile
  * Add F32Matrix and F64Matrix into toString
- Drop fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1720008000">- Update to 0.2.12+git5.d00de20:
  * Add new XISFModify class to edit FITSKeywords
  * Make compression level 0-100
  * Fix calculation of compression level for ZSTD</changelog>
</package>
<package pkgid="3c4717d465590461cc4dc2a1db3d2ec0f8df7a95f75eb37d0a5c85f172a04db9" name="libXISF-devel" arch="x86_64">
  <version epoch="0" ver="0.2.12+git5.d00de20" rel="bp156.2.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Initial OBS release.
- Add set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675944000">- Update to 0.1.1:
  * properly set soversion in CMakeLists.txt
- Drop set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676030400">- Update to 0.1.2:
  * Add readPixel param to getImage()
  * Add option to disable shared lib</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676894400">- Update to 0.1.3:
  * Fix that compression override would produce incorrect images
  * Write pixelStorage attribute
  * Write ICCProfile
- Add fix-projver.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678708800">- Update to 0.2.0 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678795200">- Disable hwcaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1678795201">- Use noun phrase for descriptions. Avoid miniscule main package
  by moving documentation to subpackages.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1679313600">- Update to 0.2.1 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681300800">- Update to 0.2.3:
  * Fix issue with ColorFilterArray.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685016000">- Update to 0.2.5:
  * Add method to for ICC profile
  * Add StreamBuffer to optimize save/load from memory
  * Add support for thumbnail
- Add fix-pkgconfig.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 0.2.6:
  * Fix "string sub-command REPLACE requires at least four arguments"
  * Fix generating pkgconfig file
- Rebase patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686657600">- Update to 0.2.7:
  * Fix reading ICCprofile
- Add 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686744000">- Update to 0.2.8:
  * Remove linking against zstd
- Drop 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 0.2.9:
  * Support for ZSTD</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696507200">- Use better GCC macro.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697630400">- Update to 0.2.10:
  * Fix incorrect header size.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1704801600">- Update to 0.2.11:
  * Convert aperture and focal length from mm to meters.
  * Fix not loading String properties.
- Add fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711540800">- Update to 0.2.12:
  * Don't use replace to update attachement position
  * Add support for subblocks to handle +2GiB compressed images
  * Fix bug with writing ICCProfile
  * Add F32Matrix and F64Matrix into toString
- Drop fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1720008000">- Update to 0.2.12+git5.d00de20:
  * Add new XISFModify class to edit FITSKeywords
  * Make compression level 0-100
  * Fix calculation of compression level for ZSTD</changelog>
</package>
<package pkgid="77e6cb4e22d888d3510d3da379ba710aa298fde59c182654fee143523987d5ce" name="libXISF0" arch="aarch64">
  <version epoch="0" ver="0.2.12+git5.d00de20" rel="bp156.2.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Initial OBS release.
- Add set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675944000">- Update to 0.1.1:
  * properly set soversion in CMakeLists.txt
- Drop set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676030400">- Update to 0.1.2:
  * Add readPixel param to getImage()
  * Add option to disable shared lib</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676894400">- Update to 0.1.3:
  * Fix that compression override would produce incorrect images
  * Write pixelStorage attribute
  * Write ICCProfile
- Add fix-projver.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678708800">- Update to 0.2.0 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678795200">- Disable hwcaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1678795201">- Use noun phrase for descriptions. Avoid miniscule main package
  by moving documentation to subpackages.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1679313600">- Update to 0.2.1 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681300800">- Update to 0.2.3:
  * Fix issue with ColorFilterArray.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685016000">- Update to 0.2.5:
  * Add method to for ICC profile
  * Add StreamBuffer to optimize save/load from memory
  * Add support for thumbnail
- Add fix-pkgconfig.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 0.2.6:
  * Fix "string sub-command REPLACE requires at least four arguments"
  * Fix generating pkgconfig file
- Rebase patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686657600">- Update to 0.2.7:
  * Fix reading ICCprofile
- Add 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686744000">- Update to 0.2.8:
  * Remove linking against zstd
- Drop 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 0.2.9:
  * Support for ZSTD</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696507200">- Use better GCC macro.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697630400">- Update to 0.2.10:
  * Fix incorrect header size.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1704801600">- Update to 0.2.11:
  * Convert aperture and focal length from mm to meters.
  * Fix not loading String properties.
- Add fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711540800">- Update to 0.2.12:
  * Don't use replace to update attachement position
  * Add support for subblocks to handle +2GiB compressed images
  * Fix bug with writing ICCProfile
  * Add F32Matrix and F64Matrix into toString
- Drop fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1720008000">- Update to 0.2.12+git5.d00de20:
  * Add new XISFModify class to edit FITSKeywords
  * Make compression level 0-100
  * Fix calculation of compression level for ZSTD</changelog>
</package>
<package pkgid="704f3b6b949b6d3ba3b82e8b64ba39e4c73f3196e86b614062c5b024828e94b2" name="libXISF0" arch="ppc64le">
  <version epoch="0" ver="0.2.12+git5.d00de20" rel="bp156.2.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Initial OBS release.
- Add set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675944000">- Update to 0.1.1:
  * properly set soversion in CMakeLists.txt
- Drop set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676030400">- Update to 0.1.2:
  * Add readPixel param to getImage()
  * Add option to disable shared lib</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676894400">- Update to 0.1.3:
  * Fix that compression override would produce incorrect images
  * Write pixelStorage attribute
  * Write ICCProfile
- Add fix-projver.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678708800">- Update to 0.2.0 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678795200">- Disable hwcaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1678795201">- Use noun phrase for descriptions. Avoid miniscule main package
  by moving documentation to subpackages.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1679313600">- Update to 0.2.1 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681300800">- Update to 0.2.3:
  * Fix issue with ColorFilterArray.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685016000">- Update to 0.2.5:
  * Add method to for ICC profile
  * Add StreamBuffer to optimize save/load from memory
  * Add support for thumbnail
- Add fix-pkgconfig.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 0.2.6:
  * Fix "string sub-command REPLACE requires at least four arguments"
  * Fix generating pkgconfig file
- Rebase patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686657600">- Update to 0.2.7:
  * Fix reading ICCprofile
- Add 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686744000">- Update to 0.2.8:
  * Remove linking against zstd
- Drop 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 0.2.9:
  * Support for ZSTD</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696507200">- Use better GCC macro.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697630400">- Update to 0.2.10:
  * Fix incorrect header size.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1704801600">- Update to 0.2.11:
  * Convert aperture and focal length from mm to meters.
  * Fix not loading String properties.
- Add fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711540800">- Update to 0.2.12:
  * Don't use replace to update attachement position
  * Add support for subblocks to handle +2GiB compressed images
  * Fix bug with writing ICCProfile
  * Add F32Matrix and F64Matrix into toString
- Drop fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1720008000">- Update to 0.2.12+git5.d00de20:
  * Add new XISFModify class to edit FITSKeywords
  * Make compression level 0-100
  * Fix calculation of compression level for ZSTD</changelog>
</package>
<package pkgid="7e0b6003d62cf4eee3ce2a327f748cd3d5b01e7e271786809eb71278795cdd20" name="libXISF0" arch="s390x">
  <version epoch="0" ver="0.2.12+git5.d00de20" rel="bp156.2.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Initial OBS release.
- Add set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675944000">- Update to 0.1.1:
  * properly set soversion in CMakeLists.txt
- Drop set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676030400">- Update to 0.1.2:
  * Add readPixel param to getImage()
  * Add option to disable shared lib</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676894400">- Update to 0.1.3:
  * Fix that compression override would produce incorrect images
  * Write pixelStorage attribute
  * Write ICCProfile
- Add fix-projver.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678708800">- Update to 0.2.0 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678795200">- Disable hwcaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1678795201">- Use noun phrase for descriptions. Avoid miniscule main package
  by moving documentation to subpackages.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1679313600">- Update to 0.2.1 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681300800">- Update to 0.2.3:
  * Fix issue with ColorFilterArray.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685016000">- Update to 0.2.5:
  * Add method to for ICC profile
  * Add StreamBuffer to optimize save/load from memory
  * Add support for thumbnail
- Add fix-pkgconfig.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 0.2.6:
  * Fix "string sub-command REPLACE requires at least four arguments"
  * Fix generating pkgconfig file
- Rebase patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686657600">- Update to 0.2.7:
  * Fix reading ICCprofile
- Add 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686744000">- Update to 0.2.8:
  * Remove linking against zstd
- Drop 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 0.2.9:
  * Support for ZSTD</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696507200">- Use better GCC macro.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697630400">- Update to 0.2.10:
  * Fix incorrect header size.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1704801600">- Update to 0.2.11:
  * Convert aperture and focal length from mm to meters.
  * Fix not loading String properties.
- Add fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711540800">- Update to 0.2.12:
  * Don't use replace to update attachement position
  * Add support for subblocks to handle +2GiB compressed images
  * Fix bug with writing ICCProfile
  * Add F32Matrix and F64Matrix into toString
- Drop fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1720008000">- Update to 0.2.12+git5.d00de20:
  * Add new XISFModify class to edit FITSKeywords
  * Make compression level 0-100
  * Fix calculation of compression level for ZSTD</changelog>
</package>
<package pkgid="3b0403657a6bea4e4164a80bd56ecda7757c700644b173ac225450a7034f3e1d" name="libXISF0" arch="x86_64">
  <version epoch="0" ver="0.2.12+git5.d00de20" rel="bp156.2.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Initial OBS release.
- Add set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675944000">- Update to 0.1.1:
  * properly set soversion in CMakeLists.txt
- Drop set-sover.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676030400">- Update to 0.1.2:
  * Add readPixel param to getImage()
  * Add option to disable shared lib</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676894400">- Update to 0.1.3:
  * Fix that compression override would produce incorrect images
  * Write pixelStorage attribute
  * Write ICCProfile
- Add fix-projver.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678708800">- Update to 0.2.0 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678795200">- Disable hwcaps.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1678795201">- Use noun phrase for descriptions. Avoid miniscule main package
  by moving documentation to subpackages.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1679313600">- Update to 0.2.1 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1681300800">- Update to 0.2.3:
  * Fix issue with ColorFilterArray.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685016000">- Update to 0.2.5:
  * Add method to for ICC profile
  * Add StreamBuffer to optimize save/load from memory
  * Add support for thumbnail
- Add fix-pkgconfig.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1685880000">- Update to 0.2.6:
  * Fix "string sub-command REPLACE requires at least four arguments"
  * Fix generating pkgconfig file
- Rebase patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686657600">- Update to 0.2.7:
  * Fix reading ICCprofile
- Add 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686744000">- Update to 0.2.8:
  * Remove linking against zstd
- Drop 6028354c61d230bf2ee85d90cef5d1464da9c5a1.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 0.2.9:
  * Support for ZSTD</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696507200">- Use better GCC macro.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697630400">- Update to 0.2.10:
  * Fix incorrect header size.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1704801600">- Update to 0.2.11:
  * Convert aperture and focal length from mm to meters.
  * Fix not loading String properties.
- Add fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711540800">- Update to 0.2.12:
  * Don't use replace to update attachement position
  * Add support for subblocks to handle +2GiB compressed images
  * Fix bug with writing ICCProfile
  * Add F32Matrix and F64Matrix into toString
- Drop fix-projver.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1720008000">- Update to 0.2.12+git5.d00de20:
  * Add new XISFModify class to edit FITSKeywords
  * Make compression level 0-100
  * Fix calculation of compression level for ZSTD</changelog>
</package>
<package pkgid="ea8d38bd81e82e10c48ac3fbfe9a20f3cb2e53ea6bc6e15011245bbd4ab9c9fb" name="libassimp5" arch="aarch64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1769083200">- Adding CVE-2025-3548.patch to address CVE-2025-3548 / bsc#1241367
  * This .patch takes the spirit of https://github.com/assimp/assimp/pull/6073
    as mentioned in the bug; adjusted to the code as it stands in the version
    of assimp (5.3.1) in use for openSUSE:Backports:SLE-15-SP6:Update</changelog>
</package>
<package pkgid="9795d87e3a37399608f2381c572823d7a4ab1a9be6c0bfb85ac90660dfadd0a1" name="libassimp5" arch="ppc64le">
  <version epoch="0" ver="5.3.1" rel="bp156.3.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1769083200">- Adding CVE-2025-3548.patch to address CVE-2025-3548 / bsc#1241367
  * This .patch takes the spirit of https://github.com/assimp/assimp/pull/6073
    as mentioned in the bug; adjusted to the code as it stands in the version
    of assimp (5.3.1) in use for openSUSE:Backports:SLE-15-SP6:Update</changelog>
</package>
<package pkgid="c3d5304b6114bf6b6d11d1880c4a1051796ca76de597cf9707f2e5bf1f1118bc" name="libassimp5" arch="s390x">
  <version epoch="0" ver="5.3.1" rel="bp156.3.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1769083200">- Adding CVE-2025-3548.patch to address CVE-2025-3548 / bsc#1241367
  * This .patch takes the spirit of https://github.com/assimp/assimp/pull/6073
    as mentioned in the bug; adjusted to the code as it stands in the version
    of assimp (5.3.1) in use for openSUSE:Backports:SLE-15-SP6:Update</changelog>
</package>
<package pkgid="2621f90d79f5f157e686c2080daea693a8e8bfa3ac6bc02e8bec0a16568b2a34" name="libassimp5" arch="x86_64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1769083200">- Adding CVE-2025-3548.patch to address CVE-2025-3548 / bsc#1241367
  * This .patch takes the spirit of https://github.com/assimp/assimp/pull/6073
    as mentioned in the bug; adjusted to the code as it stands in the version
    of assimp (5.3.1) in use for openSUSE:Backports:SLE-15-SP6:Update</changelog>
</package>
<package pkgid="ffafb513ee74625b1e60c23ca032161ae0b7df99768f2efd73a68cad242498e0" name="libassimp5" arch="aarch64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Add patch to fix build with GCC11:
  * 0001-Fix-build-with-GCC-11.patch (boo#1181859)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
</package>
<package pkgid="4dba50a9c4fa3022ecdce5f3aa64a5ba3b8dce5f9c329b49c05bae68254f79cf" name="libassimp5" arch="ppc64le">
  <version epoch="0" ver="5.3.1" rel="bp156.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Add patch to fix build with GCC11:
  * 0001-Fix-build-with-GCC-11.patch (boo#1181859)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
</package>
<package pkgid="8de0ab730f49340337f51d9f47934ee5e2b89bff6b3e88ce6afa2e482d1064d4" name="libassimp5" arch="s390x">
  <version epoch="0" ver="5.3.1" rel="bp156.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Add patch to fix build with GCC11:
  * 0001-Fix-build-with-GCC-11.patch (boo#1181859)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
</package>
<package pkgid="89dbceff842d58a3022d3c7e75fffdacf43ec4991969add04c92201130874243" name="libassimp5" arch="x86_64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.3.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612785600">- Add patch to fix build with GCC11:
  * 0001-Fix-build-with-GCC-11.patch (boo#1181859)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
</package>
<package pkgid="eea4f45188f92b3ed41730e92d84a5785b3509995031cbf0a9c8985280e51116" name="libassimp5" arch="aarch64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.6.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
</package>
<package pkgid="d6a3984c68af8059d39bbb06ea407c197102fea0e91aef93ed028ce12ce83218" name="libassimp5" arch="ppc64le">
  <version epoch="0" ver="5.3.1" rel="bp156.3.6.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
</package>
<package pkgid="118403e8ab8eea14f53d6f2ecee17c015ea85ccc64c4cf805afca93195b7e74c" name="libassimp5" arch="s390x">
  <version epoch="0" ver="5.3.1" rel="bp156.3.6.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
</package>
<package pkgid="f20953860c7ce67245639f3f476efc7a56739f2237cb2779800e78e769b3dd25" name="libassimp5" arch="x86_64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.6.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1636804800">- Update to 5.1.0
  * Check https://github.com/assimp/assimp/releases/tag/v5.1.0
    for the full list of changes
- Drop do-not-install-irrXML.patch. No longer needed.
- Drop obsolete patches:
  * 0001-Fix-build-with-GCC-11.patch
  * 0001-use-GNUInstallDirs-where-possible.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
</package>
<package pkgid="43fced68aa1274b221a9b55b592fabbf5cc0b1605ec2ecf46528b67c54fad7a2" name="libassimp5" arch="aarch64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.9.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
</package>
<package pkgid="b67050070bc1b16b0dd0e8c373f8c149ac58c198279f54f5729401d10b21bcb3" name="libassimp5" arch="ppc64le">
  <version epoch="0" ver="5.3.1" rel="bp156.3.9.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
</package>
<package pkgid="7f963d0718ca54da90bc2219e70b3b32ced59dfc2af4ff6169c6cb9cd8af4ca3" name="libassimp5" arch="s390x">
  <version epoch="0" ver="5.3.1" rel="bp156.3.9.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
</package>
<package pkgid="2f8a7c352efcab85056b7ba5f25679547cc05c6200c3351d0e5e6a549c76ff21" name="libassimp5" arch="x86_64">
  <version epoch="0" ver="5.3.1" rel="bp156.3.9.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638446400">- Update to 5.1.2. Changes since 5.1.0:
  * Fixed an incorrect indeiciesType in the glTF2 sparse accessor.
  * Prevent out-of-range memory writes by sparse accessors
  * Delete test/models/3DS/UVTransformTest directory
  * Do not build ziplib when 3MF exporter is disabled.
  * Collada: Read value, not attribute
  * Redefine deprecated glTF-specific PBR material macros
- Fix assimp-devel dependencies. minizip is required.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1638705600">- Update to 5.1.3
  * Update blender importer to work with Blender 2.8+ files
  * Added checks for out of bounds data access/writing
  * Interpolate euler rotations for quaternion animations
  * Fix file-extension check for X3D-files
  * Update CMakeLists.txt</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640606400">- update to 5.1.4:
  * Fix division
  * Fix nullptr dereferencing from std::shared_ptr
  * Revert "FBXConverter : Fix timescales of FBX animations"
  * Use correct XmlParser-methods and add some missing casts
  * Bug: Export crashes when any of the meshes contains texture
    coordinate names #4243
  * Bugfix/import crashes
  * Fix a typo in the Visual-Studio Dll-Versions
  * Enable C++11 and C99
  * Fixed cmake error: No known features for C compiler when using
    the assimp library from another project
  * fix test/models/3DS/IMAGE1.bmp: is jpg
  * Fix compile error when ASSIMP_BUILD_NO_X3D_IMPORTER is define.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641297600">- Update to 5.1.5:
  * Make sure no overflow can happen
  * LWS-Import: Avoid access to empty string token
  * MDL: Do not try to copy empty embedded texture
  * Add console progresshandler
  * CMake: Replace CMAKE_COMPILER_IS_MINGW by MINGW
  * fix fbx import metalness
  * RFC: BlenderScene: use explicit namespace instead of using
    namespace
  * Support PBR properties/maps in Obj importer</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1641816000">- Update to 5.1.6:
  * Add link to used enum for a better understandability
  * Fix fuzzer crashes
  * Fix nullptr-dereferencing
  * Fix bone fitted check in gltf2 exporter
- Add patch:
  * 0001-Fix-build-with-zlib.patch (gh#assimp/assimp#4334)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643112000">- Update to 5.2.0
  * Update copyrights
  * Fix imported target include directory
  * Assimp Patch Android LTS NDK 23 Fix
  * Allow dlclose of so library by avoiding unique symbols.
  * Move Base64 encode/decode functionality to the common folder
  * Locale independent meter scale
  * add Inter-Quake Model (IQM) Importer
  * Collada: Read all instance_material child nodes
  * Krishty new file detection
  * ASE: Fix material parsing
  * IFC Reading: Fix opening reading.
  * CMAKE: Respect top-level CMAKE_*_OUTPUT_DIRECTORY variables</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1643803200">- Add patch to fix build in big endian archs:
  * 0001-use-fully-qualified-namespace-in-byteswap-macros.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1644235200">- Update to 5.2.1
  * ASE: Fix warning unreachable code
  * HMP: Fix override during copying position data
  * use fully qualified namespace in byteswap macros
  * fix compilation with clangcl on windows
  * Delete .travis.sh by @kimkulling
  * Update ccpp.yml by @kimkulling
  * LWO: validate enum value before parsing it
- Drop 0001-use-fully-qualified-namespace-in-byteswap-macros.patch
  Merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1645444800">- Update to 5.2.2
  * Fix missing include for size_t
  * introduce compression
  * Refactoring: add usage of ai_epsilon to FBX-Importer.
  * CMake: Fix Assimp target install rule fully specifying component
  * Fix stat for 32-bit Linux
  * Update the calculation and orthogonalization for bitangent
  * Update CMakeLists.txt
  * Added support for "map_Bump -bm"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1647777600">- Update to 5.2.3:
  * Show warning when assimp_viewer cannot be build on
    target platform
  * Fix ordering of member initialization
  * Fix possible negative array access
  * Expose the original OBJ "illum" value
  * Optimize the problem of excessive memory allocation in
    FBX import
  * Update version of Hunter to v0.24.0 that supports VS 2022
  * update LWO importer(available lwo3)
  * Reinstate a deprecated gltfpbr macro: AI_MATKEY_GLTF_PBRSPECULARGLOSSINESS
  * Fix parsing OBJ with free-form curve/surface body statements
  * Fix missing members and do some small refactorings.
  * Fix 'i &gt;= 0' always true
  * Update AI_TEXTURE_TYPE_MAX
  * Fix getting anisotropy in obj
  * glTF2: Metallic roughness split
  * Add properties information on assimp info command line
  * Added missing ObjMaterial.h to CMakeLists
  * Update version in doxy-config
  * add ifndef guard for resolve to fails to compil
  * Add USE_STATIC_CRT option
  * Fix nullptr dereferencing
  * Fix stack-overflow in MDLLoader
  * GLTF2 attribute name/parse bug</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652270400">- Don't use -Werror to prevent build issues with GCC 12</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652875200">- Update to 5.2.4
  * Use static runtime only when the option is selected
  * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
  * Detect Roughness factor exported by Blender
  * Updated Android build script
  * Prevent nullptr access to normals-array in bitangent computation
  * Avoid setting PBR properties when they are not found on mtl file
  * Fix ogre xml serializer
  * Fix draco building error when import assimp with cmake add_subdirectory
  * FbxConverter: update bone mOffsetMatrix
  * Some Windows/MSYS2-specific fixes
  * Document fuzz folder
  * Fix out-of-range access in ASE-Parser
  * Disable assertion tests floating point against inf for Intel oneAPI
  * Delete README
  * Rename TextureTypeToString() to aiTextureTypeToString()
  * Fixed library names for MinGW/MSYS2
  * Update pugixml dependency to v1.12.1
  * Add an option to treat warnings as errors
  * Minor updates to ASSIMP Viewer
  * Add badge to show open issue in percentage
  * Clang-Tidy performance fixes (make values const-ref where needed)
  * MMD (pmx) fixes
  * Resource script updates
  * Accelerate the Merge vertex post processing step</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1721476800">- Add upstream fix (boo#1228142, CVE-2024-40724)
  * 0001-Fix-out-of-bound-access-5651.patch
- Disable tests on s390x (related to boo#1218474)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738152000">- Add security fix (CVE-2024-45679, boo#1230679)
  * 0001-Ply-Importer-Fix-vulnerability-5739.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Backport upstream changes:
  * 0001-SplitLargeMeshes-Fix-crash-5799.patch (boo#1232324, CVE-2024-48425)
  * 0001-Fix-leak-5762.patch
  * CVE-2024-48423.patch (boo#1232322, CVE-2024-48423)
  * CVE-2024-48424.patch (boo#1232323, CVE-2024-48424)
  * CVE-2024-53425.patch (boo#1233633, CVE-2024-53425)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (CVE-2025-2592, boo#1239916, gh#assimp/assimp#6010)
  * 0001-ASE-Fix-possible-out-of-bound-access.patch (CVE-2025-3015, boo#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (CVE-2025-3016, boo#1240413, gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (CVE-2025-2591, boo#1239920, gh#assimp/assimp#6009)
  * CVE-2025-2151.patch (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)</changelog>
</package>
<package pkgid="4c865f30a0391619b68b14f2baa910136c240ebbea2906b72fb48b6a13642317" name="libbotan-2-19" arch="aarch64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="94edfb00d6579454df7f3cbeb54b6802d030c1f5e3ea0cbba03d0d549f1f6247" name="libbotan-2-19" arch="i586">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="0ae6c758326588472eca6b3fce584e010b268b1c35cb2e75ed6a1fe1ebac1259" name="libbotan-2-19" arch="ppc64le">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="fac78d45da028bc4fc23ab209ca6b7bde9b11d36aa7d24db1e5b6094db29831b" name="libbotan-2-19" arch="s390x">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="cc52ae0dbd8df29d359c964cc75a4b426f03c72ef1a3810885ba1ef9f10ba387" name="libbotan-2-19" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="6dcb219b0fa5fa7b4709de3c5bb2db7a06c41fe11894d649ddda5379eb073c3a" name="libbotan-2-19" arch="aarch64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="5de28880cefebf7787c1375c07e4a14a194bad8aae67bb58001fca587d156edb" name="libbotan-2-19" arch="i586">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="832b5b9f6af4b650c4d67331ed091074c61eb548cc24fa90edb4dbe7c546ce0d" name="libbotan-2-19" arch="ppc64le">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="c140741777f544ca2a18edbc3f7922b3c2e0921875a7ec65db8597c9a2de907d" name="libbotan-2-19" arch="s390x">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="4ea9d42199a0863817a5886693ebf9f3e3779eb7dbc07b5d7361442d8298462f" name="libbotan-2-19" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="838c2e61efc4027532b129f5fe54c61e417a422e5bc3a8847d4c7ca2cffd7d01" name="libbotan-2-19-32bit" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="00001171015f618c57274ea08ff5944626e2017ccdc582d21fe25e6ff6943c59" name="libbotan-2-19-32bit" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="cf93b8a3a73f1b071a005a10fbb6418d67a131d09ef60db67b2738b16981f1f2" name="libbotan-2-19-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="f1c3219bce179a61982303c5bfdc3898d963db8dcc0f48c7a39244802a6e527f" name="libbotan-2-19-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="f81e7996ad67748224df32720c8896139cd4ab9a808be769453787bccf319bb7" name="libbotan-devel" arch="aarch64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="d1c0d5599a0b963be39ecb4f8c4090168a860b376f6dc46ac39b5e9bdfc25d24" name="libbotan-devel" arch="i586">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="ccc8c9f8ce7c5bc6fb1ff104af3aacd178ea88db35ac1e808d7546439895d527" name="libbotan-devel" arch="ppc64le">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="1f18353682a536cdfc1dcb0fb86ec231b724d16d54cea90b7e8c992f68bd52a1" name="libbotan-devel" arch="s390x">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="be70f64779f0eea613c5748ee84b7c5dc25318b493e09712c11be967d67b9ac5" name="libbotan-devel" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="274d4035960546932d2eac4441a903bf1d6ac81c29d2710ea8c9dc44219476d9" name="libbotan-devel" arch="aarch64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="2e420b5c5542d9c85fc3ba2ac2d9192e40a42b60237bf38beced05192318556b" name="libbotan-devel" arch="i586">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="a23531a5f05b8a448ad788e42ef7f96e6ef0b2c472f270f3ae12b30ffa9f2421" name="libbotan-devel" arch="ppc64le">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="f36e1f805f0874cb741d715d287c94ae9419d9804d0ce650796883bc9d7831de" name="libbotan-devel" arch="s390x">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="c33c0fca96d343df0c0f0d76206db256c5ce5717d68538193b892ccc2283fcbc" name="libbotan-devel" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="4e2f2a126550e3740b3c62c77e13329e8cebeb82402d86ba6b26b53893405410" name="libbotan-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="ac5fe950ae1930c27b5c1b93b8a65f4b3c8e037543159a4c724c7c55760b13ef" name="libbotan-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="880b8b117ca41e1caa89349071e9725041af90b899ff2d6284c03374ba3af6e3" name="libbotan-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.19.5" rel="bp156.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang’s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add –enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
</package>
<package pkgid="f16c7a503196f11000ce1b964ac8f696bd71d63928cb69d39ad2fa2d9b0fb160" name="libbotan-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.19.5" rel="bp156.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC’s –sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC’s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1586347200">- Update to Botan 2.14:
  * Add support for using POWER8+ VPSUMD instruction to accelerate GCM (GH #2247)
  * Optimize the vector permute AES implementation, especially improving
    performance on ARMv7, Aarch64, and POWER. (GH #2243)
  * Use a new algorithm for modular inversions which is both faster
    and more resistant to side channel attacks. (GH #2287 #2296 #2301)
  * Address an issue in CBC padding which would leak the length of the plaintext
    which was being padded. Unpadding during decryption was not affected.
  * Optimize NIST prime field reductions, improving ECDSA by 3-9% (GH #2295)
  * Increase the size of the ECC blinding mask and scale it based on the
    size of the group order. (GH #880 #893 #2308)
  * Add server side support for the TLS asio wrapper. (GH #2229)
  * Add support for using Windows certificate store on MinGW (GH #2280)
  * Add a CLI utility cpu_clock which estimates the speed of the processor cycle counter.
  * Add Roughtime client (GH #2143 #1842)
  * Add support for XMSS X.509 certificates (GH #2172)
  * Add support for X.509 CRLs in FFI layer and Python wrapper (GH #2213)
  * Add AVX2 implementation of SHACAL2 (GH #2196)
  * Support more functionality for X.509 in the Python API (GH #2165)
  * Add generic CPU target useful when building for some new or unusual platform.
  * Disable MD5 in BSI or NIST modes (GH #2188)
  * Many currently public headers are being deprecated. If any such header is included by
    an application, a warning is issued at compile time.
    Headers issuing this warning will be made internal in a future major release.
  * RSA signature performance improvements (GH #2068 #2070)
  * Performance improvements for GCM (GH #2024 #2099 #2119), OCB (#2122), XTS (#2123) and
    ChaCha20Poly1305 (GH #2117), especially for small messages.
  * Add support for constant time AES using NEON and AltiVec (GH #2093 #2095 #2100)
  * Improve performance of POWER8 AES instructions (GH #2096)
  * Add support for the POWER9 hardware random number generator (GH #2026)
  * Add support for 64-bit version of RDRAND, doubling performance on x86-64 (GH #934 #2022)
  * In DTLS server, support a client crashing and then reconnecting from the same
    source port, as described in RFC 6347 sec 4.2.8 (GH #2029)
  * Optimize DTLS MTU splitting to split precisely to the set MTU (GH #2042)
  * Add support for the TLS v1.3 downgrade indicator. (GH #2027)
  * Add Argon2 PBKDF and password hash (GH #459 #1981 #1987)
  * Add Bcrypt-PBKDF (GH #1990)
  * Add server side support for issuing DTLS HelloVerifyRequest messages (GH #1999)
  * Add support for the TLS v1.3 supported_versions extension. (GH #1976)
  * Add Ed25519ph compatible with RFC 8032 (GH #1699 #2000)
  * Add support for OCSP stapling on server side. (GH #1703 #1967)
  * Add a boost::asio TLS stream compatible with boost::asio::ssl. (GH #1839 #1927 #1992)
  * Add a certificate store for Linux/Unix systems. (GH #1885 #1936)
  * Various Fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 2.15:
  Fix a bug where the name constraint extension did not constrain the alternative
  DN field which can be included in a subject alternative name. This would allow
  a corrupted sub-CA which was otherwise constrained by a name constraint to
  issue a certificate with a prohibited DN.
  Fix a bug in the TLS server during client authentication where where if a
  (disabled by default) static RSA ciphersuite was selected, then no certificate
  request would be sent. This would have an equivalent effect to a client which
  simply replied with an empty Certificate message. (GH #2367)
  Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As
  a result AES is now constant time on all processors. (GH #2346 #2348 #2353
  [#2329] #2355)
  In TLS, enforce that the key usage given in the server certificate allows the
  operation being performed in the ciphersuite. (GH #2367)
  In X.509 certificates, verify that the algorithm parameters are the expected
  NULL or empty. (GH #2367)
  Change the HMAC key schedule to attempt to reduce the information leaked from
  the key schedule with regards to the length of the key, as this is at times (as
  for example in PBKDF2) sensitive information. (GH #2362)
  Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The
  previous RDRAND_RNG interface is deprecated. (GH #2352)
  The documentation claimed that mlocked pages were created with a guard page
  both before and after. However only a trailing guard page was used. Add a
  leading guard page. (GH #2334)
  Add support for generating and verifying DER-encoded ECDSA signatures in the C
  and Python interfaces. (GH #2357 #2356)
  Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH
  [#2322])
  When building documentation using Sphinx avoid parallel builds with version 3.0
  due to a bug in that version (GH #2326 #2324)
  Fix a memory leak in the CommonCrypto block cipher calls (GH #2371)
  Fix a flaky test that would occasionally fail when running the tests with a
  large number of threads. (GH #2325 #2197)
  Additional algorithms are now deprecated: XTEA, GOST, and Tiger. They will be
  removed in a future major release.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Update to 2.16.0:
  * Now userspace PRNG objects (such as AutoSeeded_RNG and HMAC_DRBG)
    use an internal lock, which allows safe concurrent use. This
    however is purely a precaution in case of accidental sharing of
    such RNG objects; for performance reasons it is always preferable
    to use a RNG per thread if a userspace RNG is needed.
  * DL_Group and EC_Group objects now track if they were created
    from a known trusted group (such as P-256 or an IPsec DH
    parameter). If so, then verification tests can be relaxed, as
    compared to parameters which may have been maliciously
    constructed in order to pass primality checks.
  * RandomNumberGenerator::add_entropy_T assumed its input was a POD
    type but did not verify this.
  * Support OCSP responders that live on a non-standard port.
  * Add support for Solaris sandbox.
  * Support suffixes on release numbers for alpha/beta releases.
  * Fix a bug in EAX which allowed requesting a 0 length tag, which
    had the effect of using a full length tag. Instead omit the
    length field, or request the full tag length explicitly.
  * Fix a memory leak in GCM where if passed an unsuitable block
    cipher (eg not 128 bit) it would throw an exception and leak
    the cipher object.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1604750400">- Botan 2.17.1:
  * Fix bugs in ECDSA signature generation and verifications under
    specific circumstances
  * developer visible changes, including deprecation with warnings
  * optimization in the non-hardware assisted AES key generation
  * Add more detection logic for AVX-512 features
  * Fix a bug parsing deeply nested cipher names
  * Prevent requesting DER encoding of signatures when the
    algorithm did not support it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605268800">- Botan 2.17.2:
  * Fix build problem on ppc64
  * Resolve an issue in the modular square root algorithm</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- Botan 2.17.3:
  * Harden against side-channels from decoding secret values by
    changing the base64, base58, base32, and hex encoding and
    decoding opearations to run in constant time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Botan 2.18.0
  * Add support for implementing custom RNG objects through the FFI
    interface
  * Improve safegcd bounds, improving runtime performance
  * Reject non-TLS messages as quickly as possible without waiting
    for a full record.
  * Fixes for TLS::Stream::async_shutdown
- Removed unneeded GNU MP build requirement, support was dropped
  with version 1.11.10
- Enabled check target, verify integrity of build library</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620648000">- Botan 2.18.1:
  * Fix a build regression in 2.18.0 which caused linker flags
    which contain -l within them (such as -fuse-linker-plugin)
    to be misinterpreted
  * Fix a bug which caused decoding a certificate which contained
    more than one name in a single RDN
  * Fix a bug which caused OID lookup failures when run in a locale
    which uses thousands separators (pt_BR was reported as having
    this issue)
  * DNS names in name constraints were compared with case
    sensitivity, which could cause valid certificates to be
    rejected
  * X.509 name constraint extensions were rejected if non-critical.
    RFC 5280 requires conforming CAs issue such extensions as
    critical, but not all certificates are compliant, and all other
    known implementations do not require this
  * X.509 name constraints were incorrectly applied to the
    certificate which included the constraint
- build with lzma compression support
- build with SQLite support
- build with TPM support
- fix SLE 12 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1729857600">- Fix CVE-2024-50382, CVE-2024-50383 - compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan
  * Added Botan-CVE-2024-50382.patch</changelog>
</package>
<package pkgid="e59813c54ed7e282720b6cedad538b16fba9dc77a15022f1c17f97c3903d3043" name="libc++-devel" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="3a643b8393f8cac29d7163982fa87125210cadc8396cfeed9bf3b303c8983cc6" name="libc++-devel" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="9ed4db12754a2d20a63bdfcec1722b91a3b5cf72f9a4b0eca28f11392101c197" name="libc++-devel" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="80928a853a946a63eafad9fa197436110672dfbf680786eb072fe3fe07126947" name="libc++-devel" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="8a426b8bc37f627073dbda57c8c1cadb1368004f6da7c6da35a183efd5b05849" name="libc++-devel" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="f682866ee56a65e1aa2c1a08cf4cfdbee9c7e1fc6d910ec40d8b1d0348ac71e8" name="libc++1" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="6418c5e0a7d782ffc0cc58235c88fa6eafa5b976523267fcd79cfe9b03f7d75e" name="libc++1" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="5001638b4f54f7106bdb030dba5bc226c5f36792c385a38d4ab610a9a8038c2b" name="libc++1" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="670bd5a185d1c876f722207020d6c9ce2f9e1858e5fc3c09a5482817db061c01" name="libc++1" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="a12f6c86a186712a2873c54754c385b5ee1a9f50e3981a0d51ed4e2d895ad76d" name="libc++1" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="a450539a6337504e7f5eaa91ff97076791bd99f51c31b4ed96a90bfe03fb372e" name="libc++abi-devel" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="a39bb2928a61847b8c9841f309ff796d4143ba0182b6d8c47d524c64e7e35130" name="libc++abi-devel" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="6971cb6b75424708cb921c4b59dd751fab1d377201e15b5f2033a0996ef61195" name="libc++abi-devel" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="e62146b8b572adc66f651274ede0f2383bb1752ed196cb52685b219951b6188f" name="libc++abi-devel" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="6c32312c9e889aadabb8240f172e41ee9abd05a55e8ef6bea673c4ec39eab371" name="libc++abi-devel" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="0714065586946ae40582dee185b1edadaeb6c809e4ee78fe875d00cb06d499ad" name="libc++abi1" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="4dd068b46db1d5f667389ecb0f224300f24967829b32fa54d03f9966d90a6e42" name="libc++abi1" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="5c026cd940ac0a1627aea32538982c62f3bb2c4391a43d185ed945ce7e93a58a" name="libc++abi1" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="16ceab7202d44d6e73ccf0c62c529946b805e0a4d2f7a7d27b9f1cba3f978998" name="libc++abi1" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="e36f3b26a52a369e7825ed4fef88ae503d614b463efdf0dce4caed1644254655" name="libc++abi1" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="a6c5a60bf0edd78b0720f63dec7e74ed70bacdf2ec0b0967926f6534b49d1001" name="libchafa0" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="5ba0c2aec73af140be1e50080ae6b56c4bc25b51feb2beb135722327f7403468" name="libchafa0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="2d064442015737b83f497c1403ce2a11280aba87f40fe76dd2863e20ea3e6c64" name="libchafa0" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="ec9f1276d6b78a9000557653d7170229e343c922226a5656d0c1cdcfb283a30c" name="libchafa0" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="4058d38bbdf9f40d24c90e91b380cf0caa14a5ff233b0884a80489c63fb926a6" name="libchafa0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="bp156.2.3.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1647864000">- Update to 0.10.0:
  * New option: --animate &lt;bool&gt;. On by default. Can be turned off
    to replace animations with a still frame #79.
  * New option: --center &lt;bool&gt; or -C &lt;bool&gt;. Off by default. Can
    be turned on to center images #83.
  * New options: --margin-bottom &lt;n&gt; and --margin-right &lt;n&gt;. These
    permit using all available space (with --margin-bottom 0) or some
    smaller amount #61.
  * New option: --polite &lt;bool&gt;. On by default. Can be turned off to
    correct issues caused by previous terminal state (e.g. no sixel scrolling)
    and improve presentation (e.g. by temporarily hiding the cursor). This can
    leave the terminal in an altered state, which is somewhat rude.
  * New option: --threads &lt;n&gt;. Allows manually specifying the number of threads to
    use. Defaults to one per detected logical CPU core.
  * When invoked with redirected input and no arguments, act like a
    filter as if invoked with -.
  * If input or output is being redirected, default to playing animations only once
    instead of looping forever. This can be overridden with -d inf.
  * Replaced obsolete Autoconf macros.
  * Improved image loaders:
    + GIF: Load GIF87a images as well as GIF89a.
    + PNG: Add an internal copy of LodePNG, bypassing ImageMagick.
    This improves performance and helps with eventually phasing out the latter.
    + XWD: Support images generated by convert.
  * Improved terminal support:
    + Contour: Enable sixel support.
    + foot: Open-ended TERM string matching.
    + Konsole: Enable sixel support.
    + WezTerm: Enable sixel support.
  * Bug fixes:
    + #76 Smolscale uses too much stack space.
    + #81 Chafa --version is returned to stderr, not stdout.
    + [unfiled] Potential memory overrun when using Floyd-Steinberg dithering
    in symbols mode.
    + [unfiled] iTerm2 compatibility issue with WezTerm and possi</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 0.10.1:
  * #87 Garbled last row of pixels on some images
  * [unfiled] Correctly label new functions since 1.10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 1.10.2:
  * Added disclosure guidelines in SECURITY.md
  * Fix huntr.dev: Null pointer dereference in libnsgif with crafted GIF file
  * [unfiled] File magic would not effectively rule out internal loaders.
  * [unfiled] Very big images could cause absurd allocation requests
    triggering an abort in the loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651752000">- Update to 1.10.3:
  * Improved input validation in the XWD loader.
  * huntr.dev: Buffer over-read when compiled with -O0 or non-x86 target</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654516800">- Update to 1.12.0:
  * The ImageMagick dependency is now optional and deprecated.
    Packagers are encouraged to drop the ImageMagick dependency (--without-imagemagick)
    and add direct dependencies on relevant image codecs.
    ImageMagick support will be removed in a future release.
  * Added image loaders for the following formats: JPEG, SVG, TIFF, WebP.
    Like the existing GIF, PNG and XWD loaders, these are much faster and
    generally safer than their ImageMagick counterparts. If ImageMagick is
    enabled, it will be used as a fallback. Supported image loaders will
    be listed in the --version output.
  * Implemented a 16/8 mode producing 8 colors and an additional 8 bright
    foreground-only colors for a total of 16 foreground and 8 background colors.
    When using ANSI escape sequences in symbol mode, the sequence for bold
    text is used to enable bright colors. This scheme corresponds to that of
    the IBM PC's VGA hardware text modes and was popular with terminal
    emulators in the late 1980s to early 2000s.
    With a few tweaks, output from this mode can be turned into ANSI art scene
    .ANS files compatible with utilities like the wonderful Ansilove[2], e.g:
    $ chafa -f symbols -c 16/8 -s 80 --symbols space+solid+half --fill stipple \
    in.jpg | tr -d '\n' | iconv -c -f utf8 -t cp437 &gt; out.ans
    $ ansilove out.ans -o out.png
  * New builtin Latin symbols (available with --symbols latin). This class
    comprises most of the symbols from the Latin-1 Supplement, Latin Extended-A
    and -B, IPA Extensions and Spacing Modifier Letters plus a few Latin-like
    symbols from other ranges, using Terminus as the reference font.
    The ASCII class is also a subset of this class.
  * Reworked ASCII symbols to be more representative of modern terminal fonts.
    As with the other Latin ranges, the reference font is now Terminus.
  * New option: --scale &lt;n&gt;. This takes a real number specifying the on-screen
    scaling factor relative to the input's pixel size, respecting the terminal
    size. The special argument 'max' will fit the output to the terminal.
    The defaults are 1.0 for iTerm, Kitty and sixels, and 4.0 for symbols. #84
  * Deprecated option: --zoom. Use --scale max instead.
  * Added a battery of simple tests that can be run with make check.
  * Made configure friendlier. It's now more lenient with dependencies, and the
    summary is more detailed and colorized if possible.
  * Bug fixes:
  - #62 Too big alloc on bogus terminal dimensions
  - huntr.dev: Null pointer dereference caused by calling post_func on unused
    batch entries
  - [unfiled] Small memory leaks when using iTerm and Kitty formats.
  - [unfiled] Wide symbol coverages leaked in symbol map destructor.
  - [unfiled] No error code if files failed to load.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655726400">- Update to 1.12.1:
  * Increased GLib minimum version to 2.20.
  * Added 12 new test inputs, including bad inputs to handle gracefully.
  * Added a few symbols to API documentation that were accidentally left out.
  * Bug fixes:
    + huntr.dev CVE-2022-2061: Out-of-bounds read in libnsgif's lzw_decode()
    + [unfiled] Undefined behavior in libnsgif due to uninitialized frame fields.
    + [unfiled] Signed integer overflow in chafa_pack_color().
    + [unfiled] Integer overflow in normalization pass on some images.
    + [unfiled] Potential unaligned access with corrupt XWD images.
    + [unfiled] Integer overflow in quantization on some images.
    + [unfiled] Calculating offset from NULL pointer in LodePNG.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1730635200">- Update to 1.14.5:
  Fixes:
  * Improve sixel and general terminal support inside tmux
  * Support JPEGs with CMYK color space
  * Fix --font-ratio doing nothing
  * Ensure CLI tool gets linked with libm.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865600">- Update to 1.16.0:
  * Added terminal probing. Currently we can determine geometry, colors
  and sixel capabilities this way. This supplements the existing heuristics.
  * The internal terminal database and heuristics were refactored for
  clarity, with new API added to simplify the configuration process.
  * I/O is now threaded, resulting in improved responsiveness and pipelining.
  * New option: --grid=WxH, --grid=[auto|on|off] or -g. This lays out
  multiple images in a grid for easy browsing.
  * New option: --label=[on|off] or -l. Labels each image with its filename.
  Works in both continuous and grid layouts.
  * New option: --probe=[auto|on|off]. Controls whether to actively probe the
  terminal. Can take a real number denoting how long to wait for a response.
  * Sixel quality improved significantly. The quantizer was reimplemented with modern algorithms
  (#174), and blue noise dithering was introduced (#238).
  * The new blue noise dithering is also available in symbols mode, and can be turned on with
  - -dither noise. It can be turned off with --dither none.
  * Numerous small improvements were made to sixel handling:
  + Terminal cursor placement quirks are now represented and handled.
  + Images can now cover their cell extents completely.
  + Workaround for animations "walking up the screen" on quirky terminals.
  * The JPEG XL loader was improved with optional memory mapping and better container support
  * Enabled wildcard expansion in Windows builds (#266).
  * Added completions for the fish shell and updated those for zsh.
  * Bug fixes:
  + #111 Provide auto detection of background for perception of transparency
  + #228 Sixel capability not detected in foot + tmux
  + #236 Ghostty shows pwd/lock indicator when using Chafa
  + #238 Sixel image quality significantly different from img2sixel and ImageMagick
  + #239 Chafa leaves echo on
  + #245 JPEG file not recognized
  + #246 Examples using deprecated functions
  + #249 Sixel detection doesn't set default values
  + #254 -t 1 doesn't work with -f iterm
  + #255 Animations scroll/walk up the screen
  + #265 Enable Kitty image protocol for Warp
  + #266 On Windows, in a cmd.exe window, filename wildcard expansion is broken
  + #273 -t 1 messes up some images
  + #274 -f {kitty,iterm} swaps BG color channels for SVG
  + #278 Images not always padded to cell boundary
  + [unfiled] Fix broken bashisms resulting in logic failure
  + [unfiled] Small leak in chafa_canvas_print_rows()
  + [unfiled] Uninitialized histogram in nearest-neighbor interp.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1748865601">- Update to 1.16.1:
  * Bug fixes:
    [#282] Fish completion not included in release tarball
    [#283] Piping and redirection are broken in Windows</changelog>
</package>
<package pkgid="8fa2e56e563e6d747bbf1867984544be44dc6c17c9a9dac62f7ce57c546aeea1" name="libchm0" arch="aarch64">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="cf12759fbcd035b0e301fca9aa18340d8bf79c94cde4258da371024ba3ce7b3b" name="libchm0" arch="i586">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="faa7a519a7d39aacb09647bd85eaf284d502bb7ffbdf02a8c0b90b126962f8ab" name="libchm0" arch="ppc64le">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="7d2c743abb35de9253340cb3da5faa55d6700ba420ede5256abb0fe4bb701bc8" name="libchm0" arch="s390x">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="6972616205d3b94bce908b0b98a4f670c031c704879533d852e494fd0d75af81" name="libchm0" arch="x86_64">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="eb61b4ad2edc5a512e5b9f99f0a6b6d7576e6e05933780a2e943016964bae35e" name="libchm0-32bit" arch="x86_64">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="45da8ae04052a3d55577cad50fd567be36e0fb9f4b1fa7aa73ad3acdc2d93721" name="libchm0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.40" rel="bp156.5.3.1"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch</changelog>
</package>
<package pkgid="193bca3ea978f659997b3958e22e1f4190d20797d7912a4d1040a8c93223eac4" name="libclang-cpp19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="21bf1356914902c741515b1cc650c486d61595543939ebf5f727b0128d7f92b0" name="libclang-cpp19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="f9503be6dfbc46858ebc1a543d04483e340eaf976a59e99dcef3a14d8876c0da" name="libclang-cpp19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="caa3786bfeed23803863a3023f10e5fb58009faf5c616ff030d40132f710688f" name="libclang-cpp19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="6de4743286fcea3c06722bb7c2a543b224db088a1fa22bf79ce1d623b6efbc5e" name="libclang-cpp19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="43f5e9c11e59df3952bf543b5136a3f85d64cff3a43a33bdff52f2967140a97a" name="libclang-cpp19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="25c90308508b602bdacde8caf7705cab24b7b10b35c39661f60ebcf736c31ea1" name="libclang-cpp19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="4458b43a9b6510711e9f58860225e47b23639be50bf5120941bcbf7118e4e20d" name="libclang-cpp19" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="b059c99c3b75930f2a14db64e7c4f556c3879f31ec365034125a2ea8b8a91d14" name="libclang-cpp19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="ed06497c241d2b076f96aa38772940e4d6706c79dc821abc72e4b6fe445511c6" name="libclang-cpp19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="47b0dadc50127005aeba05506523179e4624f3a3e5a4e179f61268aa87514903" name="libclang-cpp19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="d0046cce265865ff6297641474b52470d5e471c29b2df7fe1e43383e63ad9d12" name="libclang-cpp19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="ee118340c8ce11fd1fa58382975c098b875be7e637be1e85c701025ebf9c88ea" name="libclang-cpp19" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="3b18a09e7b945b4dd595bbeaaf079c3e7ea35ab2b5f497b49bf5d953958a3170" name="libclang-cpp19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="5f983c3f1ebcc7e9217f3af41fb3e9494a9088296d7676501ff7b47ea4f43bb7" name="libclang-cpp19-32bit" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="8e04ac1946be48e3fe1de147f62777a866df9f7e1a09778fa539f0cda2ffcfd2" name="libclang-cpp19-32bit" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="5d044a116e9fd30a01c1bc482595226e23c45af4566e25d011aca01ef9f1937e" name="libclang-cpp19-32bit" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="128430ea670987c4459e444b646fc5cea5dcadca8192a059c7d29ae6f9893357" name="libclang-cpp19-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="6515998381c5626ab1832dd6f7595d7954ae4fa1200eb7947b6f1b5720af7d65" name="libclang-cpp19-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="231e7ee24a94fe38fe703954429ebfe6d22fb4954807e8a9317c4f9f6290cf81" name="libclang-cpp19-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="86568684b608a6e0a646479cda6ebeacc50883dd1add7b3f0500f33fe32540f2" name="libclang13" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="ad9cb038e01a7777b7cf1d5eb2b3dc710aa1cff0eeda1b6cd0caa4e08a1e3d78" name="libclang13" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="b81bf620074a05cd0179662ad47ed871fa19b79f839baf07d70cbdb5881a8dd3" name="libclang13" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="40f150ab1314c5d8c765541747f902f7fe60df2a0246566b1aca4d9df762a2fa" name="libclang13" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="2ce9057cf0aa7c9ff42ba928e40fc987732f905bcbd4bd33dfcd92141031d0eb" name="libclang13" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="913271ef0173e56d6b1b9e2cbf237730dd58f3a7a3a2014650ada10c89ebd55e" name="libclang13" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="d24d5f2c957ee3ba86161f92bb27acd07ef443d46da3995d7e5c545db227f4c6" name="libclang13" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="460d6c0c05d4c5a6479941ac42eaab987cbffcee74852cc402a566b4a4719544" name="libclang13" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="7c6caf7f2c0339f358560c9605382d5559751d154e96be559efef7da904ce29d" name="libclang13" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="3e41b7cffd4a4d02820a198eaa9c0536d947a46b5b143fac574c1eb263f8f25a" name="libclang13" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="44fcf5fdfe0a4de6d6732cb2768507b2b7972c02fceeb8918b72cd662639fe43" name="libclang_rt19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="8562c68aa2934d2d509464e28b3b7b2dfba35e55a3cf2e124c4a28a759bf0256" name="libclang_rt19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="fe564df445bbc52bf7f71b642b701dec0c1173b66cbeb32c06049be2692f6117" name="libclang_rt19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="072a3390306169936abdb04259bf539d8423029e2ef315c73f5b0bd22be298ae" name="libclang_rt19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.2.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="585a7d6e871ac1edce9bceda5917f54ffc2a669b15feeca60bb3ba277a707b19" name="libclang_rt19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="9be2d542bf012c1b847e35ebcf66d6659d034ff3893823340eb2a87e8215c822" name="libclang_rt19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="06ab0501eeb5e6f302f4f353980df705c4c4eb737ef7afdf962831553f0f1487" name="libclang_rt19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="155db6ba05678c2374b55ed006ff922d31ecd5e1f856d9944765fb998477e159" name="libclang_rt19" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="450da3efb8473d16994781b2e2c12bce43b7b69f4b6dc461432746dea7b6f7ce" name="libclang_rt19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.4.2"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1711195200">- Update to version 18.1.2.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-normally-versioned-libllvm.patch
- Prefer ld.bfd for now to get THP-compatible section layout.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1712232000">- Update to version 18.1.3.
  * Fixes ThreadSanitizer failures for glibc's LoongArch and
    certain RISC-V ports when fstat is used.
  * `transform.structured.convert_to_loops` now properly deletes
    its target op.
  * Fix a `llvm.usub.with.overflow.i128` wrong code generation
    regression that was introduced with LLVM 18.1.0.
  * MemorySanitizer on Linux can now run even when maximum-entropy
    address-space layout randomization is configured globally (as
    is becoming increasingly common). MemorySanitizer can
    automatically re-exec ASLR-off for the process if needed,
    instead of aborting.
  * Fixed a Clang 18.x regression which increased binary size and
    stack usage with `-ftrivial-auto-var-init`.
- Set directories for configuration files: /etc/clang for system-
  wide configuration and ~/.config/clang for users. For details see
  https://clang.llvm.org/docs/UsersManual.html#configuration-files.
- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713441600">- Update to version 18.1.4.
  * Fixes an issue with Arm64EC code generation where calls to some
    intrinsics implemented in compiler-rt used the wrong name
    mangling, eventually resulting in unresolved symbol errors
    during linking.
  * Fixed an incorrect poison-generating flag preservation in
    `InstSimplify`. It will fix a miscompilation on RISCV, which
    turns the incorrect `or disjoint` into an `add`.
  * Save/restore routines for RV32E/RV64E are added to compiler-rt.
  * Fix regressions introduced in LLVM 18.1.3 in MIPS atomicrmw
    min/max codegen.
- Include module files for libc++ in libc++-devel.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730116800">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
</package>
<package pkgid="e42592966201f12416af7a1176781d682ced6a8c4de3b31c220f194d18b8f34a" name="libclang_rt19" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="da0d56044238a6fcaf208f9049baa5267853cd2c4c797ebbd6464a313464900b" name="libclang_rt19" arch="i586">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="a49d8d7e0d186083f04895c26518bfb62022bac3b6ffed552a02a1d4ffed70cc" name="libclang_rt19" arch="ppc64le">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="b52258b370490bdcee048b96bb0572525578f0857fcb90b7819dd37b53fdc94c" name="libclang_rt19" arch="s390x">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="8bd9f8d7246f9723cc4123d56602553a20cb7df13eae3a51a24215fc2b0fce84" name="libclang_rt19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="bp156.7.1"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;martin.liska@hey.com&gt;" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="644608f94360121cfe373441a770467ad694979a518e0908e3773a57a1e890ee" name="libcpp-httplib0_12" arch="aarch64">
  <version epoch="0" ver="0.12.5" rel="bp156.2.3.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
</package>
<package pkgid="de56eab8be110538e815a6d8dc19804dd039292400cf14171da84adba66daa4a" name="libcpp-httplib0_12" arch="i586">
  <version epoch="0" ver="0.12.5" rel="bp156.2.3.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
</package>
<package pkgid="75a4b6a2a9491b1d69101f3b99e58097bbdcbdea8780c00dc559192f68f7464e" name="libcpp-httplib0_12" arch="ppc64le">
  <version epoch="0" ver="0.12.5" rel="bp156.2.3.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
</package>
<package pkgid="49037b903c3e882ffb65631bb98fdfe2451fedc5f33b6b20b687b1e48d42b4f7" name="libcpp-httplib0_12" arch="s390x">
  <version epoch="0" ver="0.12.5" rel="bp156.2.3.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
</package>
<package pkgid="b4cd4b453f794903e3e51561a75eb2ce255c92080de64dd79eb06ee31887ba7e" name="libcpp-httplib0_12" arch="x86_64">
  <version epoch="0" ver="0.12.5" rel="bp156.2.3.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
</package>
<package pkgid="4869a7af90c446080b8a5413a55af5af43f0d1eea6fd1936218b26af0e514350" name="libcpp-httplib0_12" arch="aarch64">
  <version epoch="0" ver="0.12.5" rel="bp156.2.6.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- security update
- added patches
  CVE-2025-46728 [bsc#1242777], Unbounded Memory Allocation in Chunked/No-Length Requests
  + cpp-httplib-CVE-2025-46728.patch</changelog>
</package>
<package pkgid="efd31fd29b6ad7f9b72d8646a8b7f88ed2a46bf169c7ad2bf482288e50f3e81d" name="libcpp-httplib0_12" arch="i586">
  <version epoch="0" ver="0.12.5" rel="bp156.2.6.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- security update
- added patches
  CVE-2025-46728 [bsc#1242777], Unbounded Memory Allocation in Chunked/No-Length Requests
  + cpp-httplib-CVE-2025-46728.patch</changelog>
</package>
<package pkgid="e22ba9a1c43428a67bf08fb2bc3db76e090d44eabd3324b67e57377757c4496f" name="libcpp-httplib0_12" arch="ppc64le">
  <version epoch="0" ver="0.12.5" rel="bp156.2.6.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- security update
- added patches
  CVE-2025-46728 [bsc#1242777], Unbounded Memory Allocation in Chunked/No-Length Requests
  + cpp-httplib-CVE-2025-46728.patch</changelog>
</package>
<package pkgid="605a768940b59bcd7bc83daf005227302bff0b3d37632ea8f6b4d72dfb97d4b8" name="libcpp-httplib0_12" arch="s390x">
  <version epoch="0" ver="0.12.5" rel="bp156.2.6.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- security update
- added patches
  CVE-2025-46728 [bsc#1242777], Unbounded Memory Allocation in Chunked/No-Length Requests
  + cpp-httplib-CVE-2025-46728.patch</changelog>
</package>
<package pkgid="66f0024d1456f2740242b1a60c52426e16402852d216a8dba8b99b8b052e768a" name="libcpp-httplib0_12" arch="x86_64">
  <version epoch="0" ver="0.12.5" rel="bp156.2.6.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- security update
- added patches
  fix CVE-2025-0825 [bsc#1236790], fails to filter CRLF characters when those are prefixed with a null byte
  + cpp-httplib-CVE-2025-0825.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- security update
- added patches
  CVE-2025-46728 [bsc#1242777], Unbounded Memory Allocation in Chunked/No-Length Requests
  + cpp-httplib-CVE-2025-46728.patch</changelog>
</package>
<package pkgid="1208c2d78f506315de8d1d5aebfe7fca037253b6c0a6be9d1e1bd86621954562" name="libcpp-httplib0_20" arch="aarch64">
  <version epoch="0" ver="0.20.1" rel="bp156.2.9.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1706875200">- Update to version 0.15.1:
  * Malicious requests for many overlapping byte ranges of large files risk OOM #1766
  * Add missing #include for strcasecmp #1744
  * ThreadPool: optional limit for jobs queue (#1741)
  * Fix #1628 (OpenSSL 1.1.1 End of Life on September 11, 2023)
  * Fix Windows std::max macro problem #1750
  * Fix select() return code for fd &gt;= 1024 (#1757)
  * Add a getter for a bearer token from a request (#1755)
  * Support move semantics for Response::set_content() (#1764)
  * Treat paths with embedded NUL bytes as invalid (#1765)
  * Fix usage of rand() is not seeded and depends on seeding by parent program #1747
  * Fix check request range and fix response Content-Range. #1694
  * Fix: Query parameter including query delimiter ('?') not being parsed properly (#1713)
  * Fix #1736
  * Fix #1665
  * Change some of status messages based on RFC 9110 (#1740)
  * Add StatusCode enum (#1739)
  * Fix #1738
  * Fix #1685
  * Fix #1724
  * Add optional user defined header writer #1683
  * Fix CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR (#1634)
  * Avoid a -Warray-bounds false positive in GCC 13. (#1639)
  * Fix #1638
  * Removed unnecessary CRLF at the end of multipart ranges data
  * Fix #1559
  * Use memory mapped file for static file server (#1632)
  * Fix #1519
  * Fix #1590 (#1630)
  * Fix #1619
  * Fix #1624
  * Compiler freezes on Debian 10 (buster) with GCC 8.3.0 #1613
  * Don't overwrite the last redirected location (#1589) # This is a breaking change.
  * Fix #1607
  * Add named path parameters parsing (Implements #1587) (#1608)
  * Result: allow default constructor (#1609)
  * Add support for zOS (#1581)
  * Provide a CMake option to disable C++ exceptions (#1580)
  * Load in-memory CA certificates (#1579)
- Requires OpenSSL version to 3.0 or later</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1727006400">- update to 0.18.0:
  * httplib.h: support LibreSSL
  * Nice way to call "handle_file_request" from user code
  * How to diagnose the infamous read error 4
  * Made default server and client read/write timeout settings separately
  * Slow performance caused by get_remote_ip_and_port and get_local_ip_and_port
  * Provides a way to ignore host verify
  * add API support for verify certificate manually
- update to 0.17.3:
  * Accessing Directory
  * ‘constexpr’ error
  * Only match path params that span full path segment
  * Fix KeepAliveTest.SSLClientReconnectionPost problem
- update to 0.17.2:
  * Fix incorrect handling of Expect: 100-continue
  * Peformance improvement by removing tolower function call
- update to 0.17.1:
  * Header parser incorrectly accepts NUL and CR within header values
  * Fix problem with Abstract Namespace Unix Domain
  * Fix SIGINT problem in Docker image
- update to 0.17.0:
  * Changed CPPHTTPLIB_KEEPALIVE_MAX_COUNT to 100
  * Add Dockerfile for static file server
  * Breaking Change!: get_header_ methods on Request and Response now take…
  * Add sleep in handle_EINTR
  * Added set_ipv6_v6only method
  * impossible to shut down the server safely
  * Performance: reserve body to avoid frequent reallocations and copies
- update to 0.16.3:
  * Fixed set_connection_timeout() unexpected results
  * Fix KeepAliveTest.SSLClientReconnectionPost
- update to 0.16.2:
  * threadsafe CLOEXEC on platforms that support it
  * BoringSSL compatibility fixes
- update to 0.16.1:
  * detail::is_socket_alive() is not work for https connection
  * avoid memory leaks if linked with static openssl libs
  * Allow hex for ipv6 literal addr in redirect
  * Fix build on Windows with no WINAPI_PARTITION_APP support
  * test: fix GetRangeWithMaxLongLength on 32 bit machines
  * Require a minimum of TLS 1.2
- update to 0.16.0:
  * Use final keyword for devirtualization
  * FindBrotli cleanup &amp; fixes
  * client can't open the encrypted private key
  * build(meson): generate new test PEMs
  * Fix range parser when parsing too many ranges
  * fix: increase default receive buffer to 16kb
  * Removed excess usage of std::move
  * Merge branch 'HerrCai0907-fix'
  * Highlight notes using markdown features
  * Added progress to POST, PUT, PATCH and DELETE requests
  * Tweak CI &amp; fix macOS prefix
  * New function SSLServer::update_certs. Allows to update certificates while server is running
  * Change library name to cpp-httplib
- update to 0.15.3:
  * Breaking change in handling requests with Range in v0.15.1 and v0.15.2
- update to 0.15.2:
  * Severe directory traversal vulnerability (dotdotslash)
- switch to cmake build system</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1727438400">- Small specfile refactoring</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730289600">- Update to 0.18.1:
  * SSLClientServerTest.* tests fail with OpenSSL 3.2.1 (#1798)
  * Feat: add CPack support (#1950)
  * Keep alive is slowing down shutdown (#1959)
  * Allow empty header values (#1965)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1737374400">- Update to 0.18.3:
  * Bug fixes:
  - Regression: Client keep-alive subsequent requests very slow #1997
  - 304 Not Modified response stalls until timeout #1998
- Update to 0.18.2:
  * Bug fixes:
  - Fix the problem that CreateFile2 in mmap::open fails to... #1973
  - Default Accept-Encoding header for the client #1975
  - SSLClientReconnection fails on Windows #1980
  - delay in keep_alive due to sleep #1969
  - missing query pararm in httplib::Client::send #1985</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- version update to 0.18.6
  * Resolve #2033
  * Port/Address re-use #2011
  * Invalid Content-Length values should be rejected #2014
  * Feature request: ability to check if the connection is still alive #2017
  * Changed to use non-blocking socket in is_ssl_peer_could_be_closed (258992a)
  * Treat out-of-range last_pos as the end of the content #2009
  * fix:set_file_content with range request return 416. #2010
  * Fix HTTP Response Splitting Vulnerability (9c36aae)
- added patches
  fix https://github.com/yhirose/cpp-httplib/issues/2042
  + cpp-httplib-test-issue2004-online.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- version update to 0.20.1
  0.20.1 (CVE-2025-46728 [bsc#1242777])
  * Add AF_UNIX support on windows #2115
  * Support zstd also via pkg-config #2121
  * Fix #2113
  * Fix "Unbounded Memory Allocation in Chunked/No-Length Requests"
  0.20.0
  * server_certificate_verifier extended to reuse built-in verifier #2064
  * Assertion failed when destroying httplib::Client
  * #2068
  * Spaces incorrectly allowed in header field names #2096
  * build(meson): copy MountTest.MultibytesPathName files #2098
  * Remove SSLInit #2102
  * Add zstd support #2088
  * Question the behavior of method read_content_without_length #2109
  * Crash when calling std::exit while server running or client requests in flight #2097
  0.19.0
  * Global timeout feature (same as "--max-time" curl option) #2034
  * Fix check for URI length to prevent incorrect HTTP 414 errors
  0.18.7
  * Potential memory corruption in stream_line_reader #2028
- deleted patches
  - cpp-httplib-test-issue2004-online.patch (upstreamed)</changelog>
  <changelog author="Marius Grossu &lt;marius.grossu@suse.com&gt;" date="1762344000">- Fix CVE-2025-53629, header can allocate memory arbitrarily in the server, potentially leading to its exhaustion
  (CVE-2025-53628, bsc#1246471)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-53628, HTTP header smuggling due to insecure trailers merge
  (CVE-2025-53628, bsc#1246468)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-52887, number of HTTP header fields not limited, which can lead to potential exhaustion of system memory
  (CVE-2025-52887, bsc#1245414)
  * CVE-2025-52887.patch</changelog>
</package>
<package pkgid="7fe3d171a24b5704e108da80963aa51a770898f0deabab68b91381a8021e1cca" name="libcpp-httplib0_20" arch="i586">
  <version epoch="0" ver="0.20.1" rel="bp156.2.9.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1706875200">- Update to version 0.15.1:
  * Malicious requests for many overlapping byte ranges of large files risk OOM #1766
  * Add missing #include for strcasecmp #1744
  * ThreadPool: optional limit for jobs queue (#1741)
  * Fix #1628 (OpenSSL 1.1.1 End of Life on September 11, 2023)
  * Fix Windows std::max macro problem #1750
  * Fix select() return code for fd &gt;= 1024 (#1757)
  * Add a getter for a bearer token from a request (#1755)
  * Support move semantics for Response::set_content() (#1764)
  * Treat paths with embedded NUL bytes as invalid (#1765)
  * Fix usage of rand() is not seeded and depends on seeding by parent program #1747
  * Fix check request range and fix response Content-Range. #1694
  * Fix: Query parameter including query delimiter ('?') not being parsed properly (#1713)
  * Fix #1736
  * Fix #1665
  * Change some of status messages based on RFC 9110 (#1740)
  * Add StatusCode enum (#1739)
  * Fix #1738
  * Fix #1685
  * Fix #1724
  * Add optional user defined header writer #1683
  * Fix CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR (#1634)
  * Avoid a -Warray-bounds false positive in GCC 13. (#1639)
  * Fix #1638
  * Removed unnecessary CRLF at the end of multipart ranges data
  * Fix #1559
  * Use memory mapped file for static file server (#1632)
  * Fix #1519
  * Fix #1590 (#1630)
  * Fix #1619
  * Fix #1624
  * Compiler freezes on Debian 10 (buster) with GCC 8.3.0 #1613
  * Don't overwrite the last redirected location (#1589) # This is a breaking change.
  * Fix #1607
  * Add named path parameters parsing (Implements #1587) (#1608)
  * Result: allow default constructor (#1609)
  * Add support for zOS (#1581)
  * Provide a CMake option to disable C++ exceptions (#1580)
  * Load in-memory CA certificates (#1579)
- Requires OpenSSL version to 3.0 or later</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1727006400">- update to 0.18.0:
  * httplib.h: support LibreSSL
  * Nice way to call "handle_file_request" from user code
  * How to diagnose the infamous read error 4
  * Made default server and client read/write timeout settings separately
  * Slow performance caused by get_remote_ip_and_port and get_local_ip_and_port
  * Provides a way to ignore host verify
  * add API support for verify certificate manually
- update to 0.17.3:
  * Accessing Directory
  * ‘constexpr’ error
  * Only match path params that span full path segment
  * Fix KeepAliveTest.SSLClientReconnectionPost problem
- update to 0.17.2:
  * Fix incorrect handling of Expect: 100-continue
  * Peformance improvement by removing tolower function call
- update to 0.17.1:
  * Header parser incorrectly accepts NUL and CR within header values
  * Fix problem with Abstract Namespace Unix Domain
  * Fix SIGINT problem in Docker image
- update to 0.17.0:
  * Changed CPPHTTPLIB_KEEPALIVE_MAX_COUNT to 100
  * Add Dockerfile for static file server
  * Breaking Change!: get_header_ methods on Request and Response now take…
  * Add sleep in handle_EINTR
  * Added set_ipv6_v6only method
  * impossible to shut down the server safely
  * Performance: reserve body to avoid frequent reallocations and copies
- update to 0.16.3:
  * Fixed set_connection_timeout() unexpected results
  * Fix KeepAliveTest.SSLClientReconnectionPost
- update to 0.16.2:
  * threadsafe CLOEXEC on platforms that support it
  * BoringSSL compatibility fixes
- update to 0.16.1:
  * detail::is_socket_alive() is not work for https connection
  * avoid memory leaks if linked with static openssl libs
  * Allow hex for ipv6 literal addr in redirect
  * Fix build on Windows with no WINAPI_PARTITION_APP support
  * test: fix GetRangeWithMaxLongLength on 32 bit machines
  * Require a minimum of TLS 1.2
- update to 0.16.0:
  * Use final keyword for devirtualization
  * FindBrotli cleanup &amp; fixes
  * client can't open the encrypted private key
  * build(meson): generate new test PEMs
  * Fix range parser when parsing too many ranges
  * fix: increase default receive buffer to 16kb
  * Removed excess usage of std::move
  * Merge branch 'HerrCai0907-fix'
  * Highlight notes using markdown features
  * Added progress to POST, PUT, PATCH and DELETE requests
  * Tweak CI &amp; fix macOS prefix
  * New function SSLServer::update_certs. Allows to update certificates while server is running
  * Change library name to cpp-httplib
- update to 0.15.3:
  * Breaking change in handling requests with Range in v0.15.1 and v0.15.2
- update to 0.15.2:
  * Severe directory traversal vulnerability (dotdotslash)
- switch to cmake build system</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1727438400">- Small specfile refactoring</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730289600">- Update to 0.18.1:
  * SSLClientServerTest.* tests fail with OpenSSL 3.2.1 (#1798)
  * Feat: add CPack support (#1950)
  * Keep alive is slowing down shutdown (#1959)
  * Allow empty header values (#1965)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1737374400">- Update to 0.18.3:
  * Bug fixes:
  - Regression: Client keep-alive subsequent requests very slow #1997
  - 304 Not Modified response stalls until timeout #1998
- Update to 0.18.2:
  * Bug fixes:
  - Fix the problem that CreateFile2 in mmap::open fails to... #1973
  - Default Accept-Encoding header for the client #1975
  - SSLClientReconnection fails on Windows #1980
  - delay in keep_alive due to sleep #1969
  - missing query pararm in httplib::Client::send #1985</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- version update to 0.18.6
  * Resolve #2033
  * Port/Address re-use #2011
  * Invalid Content-Length values should be rejected #2014
  * Feature request: ability to check if the connection is still alive #2017
  * Changed to use non-blocking socket in is_ssl_peer_could_be_closed (258992a)
  * Treat out-of-range last_pos as the end of the content #2009
  * fix:set_file_content with range request return 416. #2010
  * Fix HTTP Response Splitting Vulnerability (9c36aae)
- added patches
  fix https://github.com/yhirose/cpp-httplib/issues/2042
  + cpp-httplib-test-issue2004-online.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- version update to 0.20.1
  0.20.1 (CVE-2025-46728 [bsc#1242777])
  * Add AF_UNIX support on windows #2115
  * Support zstd also via pkg-config #2121
  * Fix #2113
  * Fix "Unbounded Memory Allocation in Chunked/No-Length Requests"
  0.20.0
  * server_certificate_verifier extended to reuse built-in verifier #2064
  * Assertion failed when destroying httplib::Client
  * #2068
  * Spaces incorrectly allowed in header field names #2096
  * build(meson): copy MountTest.MultibytesPathName files #2098
  * Remove SSLInit #2102
  * Add zstd support #2088
  * Question the behavior of method read_content_without_length #2109
  * Crash when calling std::exit while server running or client requests in flight #2097
  0.19.0
  * Global timeout feature (same as "--max-time" curl option) #2034
  * Fix check for URI length to prevent incorrect HTTP 414 errors
  0.18.7
  * Potential memory corruption in stream_line_reader #2028
- deleted patches
  - cpp-httplib-test-issue2004-online.patch (upstreamed)</changelog>
  <changelog author="Marius Grossu &lt;marius.grossu@suse.com&gt;" date="1762344000">- Fix CVE-2025-53629, header can allocate memory arbitrarily in the server, potentially leading to its exhaustion
  (CVE-2025-53628, bsc#1246471)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-53628, HTTP header smuggling due to insecure trailers merge
  (CVE-2025-53628, bsc#1246468)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-52887, number of HTTP header fields not limited, which can lead to potential exhaustion of system memory
  (CVE-2025-52887, bsc#1245414)
  * CVE-2025-52887.patch</changelog>
</package>
<package pkgid="6e0c13d6190def9cf6f7f954cfba75aac0bf060162d24580cbd9c02b4284ad6f" name="libcpp-httplib0_20" arch="ppc64le">
  <version epoch="0" ver="0.20.1" rel="bp156.2.9.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1706875200">- Update to version 0.15.1:
  * Malicious requests for many overlapping byte ranges of large files risk OOM #1766
  * Add missing #include for strcasecmp #1744
  * ThreadPool: optional limit for jobs queue (#1741)
  * Fix #1628 (OpenSSL 1.1.1 End of Life on September 11, 2023)
  * Fix Windows std::max macro problem #1750
  * Fix select() return code for fd &gt;= 1024 (#1757)
  * Add a getter for a bearer token from a request (#1755)
  * Support move semantics for Response::set_content() (#1764)
  * Treat paths with embedded NUL bytes as invalid (#1765)
  * Fix usage of rand() is not seeded and depends on seeding by parent program #1747
  * Fix check request range and fix response Content-Range. #1694
  * Fix: Query parameter including query delimiter ('?') not being parsed properly (#1713)
  * Fix #1736
  * Fix #1665
  * Change some of status messages based on RFC 9110 (#1740)
  * Add StatusCode enum (#1739)
  * Fix #1738
  * Fix #1685
  * Fix #1724
  * Add optional user defined header writer #1683
  * Fix CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR (#1634)
  * Avoid a -Warray-bounds false positive in GCC 13. (#1639)
  * Fix #1638
  * Removed unnecessary CRLF at the end of multipart ranges data
  * Fix #1559
  * Use memory mapped file for static file server (#1632)
  * Fix #1519
  * Fix #1590 (#1630)
  * Fix #1619
  * Fix #1624
  * Compiler freezes on Debian 10 (buster) with GCC 8.3.0 #1613
  * Don't overwrite the last redirected location (#1589) # This is a breaking change.
  * Fix #1607
  * Add named path parameters parsing (Implements #1587) (#1608)
  * Result: allow default constructor (#1609)
  * Add support for zOS (#1581)
  * Provide a CMake option to disable C++ exceptions (#1580)
  * Load in-memory CA certificates (#1579)
- Requires OpenSSL version to 3.0 or later</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1727006400">- update to 0.18.0:
  * httplib.h: support LibreSSL
  * Nice way to call "handle_file_request" from user code
  * How to diagnose the infamous read error 4
  * Made default server and client read/write timeout settings separately
  * Slow performance caused by get_remote_ip_and_port and get_local_ip_and_port
  * Provides a way to ignore host verify
  * add API support for verify certificate manually
- update to 0.17.3:
  * Accessing Directory
  * ‘constexpr’ error
  * Only match path params that span full path segment
  * Fix KeepAliveTest.SSLClientReconnectionPost problem
- update to 0.17.2:
  * Fix incorrect handling of Expect: 100-continue
  * Peformance improvement by removing tolower function call
- update to 0.17.1:
  * Header parser incorrectly accepts NUL and CR within header values
  * Fix problem with Abstract Namespace Unix Domain
  * Fix SIGINT problem in Docker image
- update to 0.17.0:
  * Changed CPPHTTPLIB_KEEPALIVE_MAX_COUNT to 100
  * Add Dockerfile for static file server
  * Breaking Change!: get_header_ methods on Request and Response now take…
  * Add sleep in handle_EINTR
  * Added set_ipv6_v6only method
  * impossible to shut down the server safely
  * Performance: reserve body to avoid frequent reallocations and copies
- update to 0.16.3:
  * Fixed set_connection_timeout() unexpected results
  * Fix KeepAliveTest.SSLClientReconnectionPost
- update to 0.16.2:
  * threadsafe CLOEXEC on platforms that support it
  * BoringSSL compatibility fixes
- update to 0.16.1:
  * detail::is_socket_alive() is not work for https connection
  * avoid memory leaks if linked with static openssl libs
  * Allow hex for ipv6 literal addr in redirect
  * Fix build on Windows with no WINAPI_PARTITION_APP support
  * test: fix GetRangeWithMaxLongLength on 32 bit machines
  * Require a minimum of TLS 1.2
- update to 0.16.0:
  * Use final keyword for devirtualization
  * FindBrotli cleanup &amp; fixes
  * client can't open the encrypted private key
  * build(meson): generate new test PEMs
  * Fix range parser when parsing too many ranges
  * fix: increase default receive buffer to 16kb
  * Removed excess usage of std::move
  * Merge branch 'HerrCai0907-fix'
  * Highlight notes using markdown features
  * Added progress to POST, PUT, PATCH and DELETE requests
  * Tweak CI &amp; fix macOS prefix
  * New function SSLServer::update_certs. Allows to update certificates while server is running
  * Change library name to cpp-httplib
- update to 0.15.3:
  * Breaking change in handling requests with Range in v0.15.1 and v0.15.2
- update to 0.15.2:
  * Severe directory traversal vulnerability (dotdotslash)
- switch to cmake build system</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1727438400">- Small specfile refactoring</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730289600">- Update to 0.18.1:
  * SSLClientServerTest.* tests fail with OpenSSL 3.2.1 (#1798)
  * Feat: add CPack support (#1950)
  * Keep alive is slowing down shutdown (#1959)
  * Allow empty header values (#1965)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1737374400">- Update to 0.18.3:
  * Bug fixes:
  - Regression: Client keep-alive subsequent requests very slow #1997
  - 304 Not Modified response stalls until timeout #1998
- Update to 0.18.2:
  * Bug fixes:
  - Fix the problem that CreateFile2 in mmap::open fails to... #1973
  - Default Accept-Encoding header for the client #1975
  - SSLClientReconnection fails on Windows #1980
  - delay in keep_alive due to sleep #1969
  - missing query pararm in httplib::Client::send #1985</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- version update to 0.18.6
  * Resolve #2033
  * Port/Address re-use #2011
  * Invalid Content-Length values should be rejected #2014
  * Feature request: ability to check if the connection is still alive #2017
  * Changed to use non-blocking socket in is_ssl_peer_could_be_closed (258992a)
  * Treat out-of-range last_pos as the end of the content #2009
  * fix:set_file_content with range request return 416. #2010
  * Fix HTTP Response Splitting Vulnerability (9c36aae)
- added patches
  fix https://github.com/yhirose/cpp-httplib/issues/2042
  + cpp-httplib-test-issue2004-online.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- version update to 0.20.1
  0.20.1 (CVE-2025-46728 [bsc#1242777])
  * Add AF_UNIX support on windows #2115
  * Support zstd also via pkg-config #2121
  * Fix #2113
  * Fix "Unbounded Memory Allocation in Chunked/No-Length Requests"
  0.20.0
  * server_certificate_verifier extended to reuse built-in verifier #2064
  * Assertion failed when destroying httplib::Client
  * #2068
  * Spaces incorrectly allowed in header field names #2096
  * build(meson): copy MountTest.MultibytesPathName files #2098
  * Remove SSLInit #2102
  * Add zstd support #2088
  * Question the behavior of method read_content_without_length #2109
  * Crash when calling std::exit while server running or client requests in flight #2097
  0.19.0
  * Global timeout feature (same as "--max-time" curl option) #2034
  * Fix check for URI length to prevent incorrect HTTP 414 errors
  0.18.7
  * Potential memory corruption in stream_line_reader #2028
- deleted patches
  - cpp-httplib-test-issue2004-online.patch (upstreamed)</changelog>
  <changelog author="Marius Grossu &lt;marius.grossu@suse.com&gt;" date="1762344000">- Fix CVE-2025-53629, header can allocate memory arbitrarily in the server, potentially leading to its exhaustion
  (CVE-2025-53628, bsc#1246471)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-53628, HTTP header smuggling due to insecure trailers merge
  (CVE-2025-53628, bsc#1246468)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-52887, number of HTTP header fields not limited, which can lead to potential exhaustion of system memory
  (CVE-2025-52887, bsc#1245414)
  * CVE-2025-52887.patch</changelog>
</package>
<package pkgid="67b8c91a18d24c5a1e0fc018009b84f7eee015bd86fa36b88cd48741242ba946" name="libcpp-httplib0_20" arch="x86_64">
  <version epoch="0" ver="0.20.1" rel="bp156.2.9.1"/>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1671796800">- Initial release</changelog>
  <changelog author="svalx@svalx.net" date="1672056000">- Update to version 0.11.3:
  * Fix #1426
  * Fix #1437
  * Windows CMake directory install fix (#1434)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1672056001">- Move README.md to devel subpackage</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1672660800">- Redo description so it does not rely on monospace formatting.</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673870400">- Move LICENSE file to the library package
- Drop cmake BuildRequires and linker additional "-s" flag</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1673956800">- Update to version 0.11.4:
  * add support for requests with both MultipartFormDataItems and Content Providers (#1454)
  * Add EINTR and EAGAIN judge for accept (#1438)
  * Updated unit test
  * std::condition_variable::notify_one/all() should be called after unlocking mutex (#1448)
  * Support LOCAL_ADDR and LOCAL_PORT header in client Request (#1450)
  * Fix #1442
  * Removed code for upsupported OpenSSL
- Combined multibuild cpp-httplib and cpp-httplib-headers packages
- Remove unneeded BuildRequires for cpp-httplib-headers</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1674561600">- Migrate from obscpio to classical tar.gz sources archive for properly
  debugsource package building</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675684800">- For an explicit choice when buildtime dependencies resolving
  added an unique pkgconfig files aliases for both shipped library
  flavors: cpp-httplib-headers.pc and cpp-httplib-shared.pc
- Enable tests performing for compiled flavor</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675857600">- Switch to meson tests
- Add examples to headers package</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1675944000">- Update to version 0.12.0:
  * Removed is_writable() from DataSink (Resolve #1478, too) (#1483)
  * Fix #1479
  * Removed incorrect comment
  * Support CTest (#1468)
  * Issue 52666: cpp-httplib:server_fuzzer: Timeout in server_fuzzer
  * add to_human_string (#1467)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1676548800">- Move examples to devel subpackage
- Drop headers-only flavor and remove aliases for pkg-config files
  (gh#yhirose/cpp-httplib#1491)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1706875200">- Update to version 0.15.1:
  * Malicious requests for many overlapping byte ranges of large files risk OOM #1766
  * Add missing #include for strcasecmp #1744
  * ThreadPool: optional limit for jobs queue (#1741)
  * Fix #1628 (OpenSSL 1.1.1 End of Life on September 11, 2023)
  * Fix Windows std::max macro problem #1750
  * Fix select() return code for fd &gt;= 1024 (#1757)
  * Add a getter for a bearer token from a request (#1755)
  * Support move semantics for Response::set_content() (#1764)
  * Treat paths with embedded NUL bytes as invalid (#1765)
  * Fix usage of rand() is not seeded and depends on seeding by parent program #1747
  * Fix check request range and fix response Content-Range. #1694
  * Fix: Query parameter including query delimiter ('?') not being parsed properly (#1713)
  * Fix #1736
  * Fix #1665
  * Change some of status messages based on RFC 9110 (#1740)
  * Add StatusCode enum (#1739)
  * Fix #1738
  * Fix #1685
  * Fix #1724
  * Add optional user defined header writer #1683
  * Fix CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR (#1634)
  * Avoid a -Warray-bounds false positive in GCC 13. (#1639)
  * Fix #1638
  * Removed unnecessary CRLF at the end of multipart ranges data
  * Fix #1559
  * Use memory mapped file for static file server (#1632)
  * Fix #1519
  * Fix #1590 (#1630)
  * Fix #1619
  * Fix #1624
  * Compiler freezes on Debian 10 (buster) with GCC 8.3.0 #1613
  * Don't overwrite the last redirected location (#1589) # This is a breaking change.
  * Fix #1607
  * Add named path parameters parsing (Implements #1587) (#1608)
  * Result: allow default constructor (#1609)
  * Add support for zOS (#1581)
  * Provide a CMake option to disable C++ exceptions (#1580)
  * Load in-memory CA certificates (#1579)
- Requires OpenSSL version to 3.0 or later</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1727006400">- update to 0.18.0:
  * httplib.h: support LibreSSL
  * Nice way to call "handle_file_request" from user code
  * How to diagnose the infamous read error 4
  * Made default server and client read/write timeout settings separately
  * Slow performance caused by get_remote_ip_and_port and get_local_ip_and_port
  * Provides a way to ignore host verify
  * add API support for verify certificate manually
- update to 0.17.3:
  * Accessing Directory
  * ‘constexpr’ error
  * Only match path params that span full path segment
  * Fix KeepAliveTest.SSLClientReconnectionPost problem
- update to 0.17.2:
  * Fix incorrect handling of Expect: 100-continue
  * Peformance improvement by removing tolower function call
- update to 0.17.1:
  * Header parser incorrectly accepts NUL and CR within header values
  * Fix problem with Abstract Namespace Unix Domain
  * Fix SIGINT problem in Docker image
- update to 0.17.0:
  * Changed CPPHTTPLIB_KEEPALIVE_MAX_COUNT to 100
  * Add Dockerfile for static file server
  * Breaking Change!: get_header_ methods on Request and Response now take…
  * Add sleep in handle_EINTR
  * Added set_ipv6_v6only method
  * impossible to shut down the server safely
  * Performance: reserve body to avoid frequent reallocations and copies
- update to 0.16.3:
  * Fixed set_connection_timeout() unexpected results
  * Fix KeepAliveTest.SSLClientReconnectionPost
- update to 0.16.2:
  * threadsafe CLOEXEC on platforms that support it
  * BoringSSL compatibility fixes
- update to 0.16.1:
  * detail::is_socket_alive() is not work for https connection
  * avoid memory leaks if linked with static openssl libs
  * Allow hex for ipv6 literal addr in redirect
  * Fix build on Windows with no WINAPI_PARTITION_APP support
  * test: fix GetRangeWithMaxLongLength on 32 bit machines
  * Require a minimum of TLS 1.2
- update to 0.16.0:
  * Use final keyword for devirtualization
  * FindBrotli cleanup &amp; fixes
  * client can't open the encrypted private key
  * build(meson): generate new test PEMs
  * Fix range parser when parsing too many ranges
  * fix: increase default receive buffer to 16kb
  * Removed excess usage of std::move
  * Merge branch 'HerrCai0907-fix'
  * Highlight notes using markdown features
  * Added progress to POST, PUT, PATCH and DELETE requests
  * Tweak CI &amp; fix macOS prefix
  * New function SSLServer::update_certs. Allows to update certificates while server is running
  * Change library name to cpp-httplib
- update to 0.15.3:
  * Breaking change in handling requests with Range in v0.15.1 and v0.15.2
- update to 0.15.2:
  * Severe directory traversal vulnerability (dotdotslash)
- switch to cmake build system</changelog>
  <changelog author="Alexey Svistunov &lt;svalx@svalx.net&gt;" date="1727438400">- Small specfile refactoring</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730289600">- Update to 0.18.1:
  * SSLClientServerTest.* tests fail with OpenSSL 3.2.1 (#1798)
  * Feat: add CPack support (#1950)
  * Keep alive is slowing down shutdown (#1959)
  * Allow empty header values (#1965)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1737374400">- Update to 0.18.3:
  * Bug fixes:
  - Regression: Client keep-alive subsequent requests very slow #1997
  - 304 Not Modified response stalls until timeout #1998
- Update to 0.18.2:
  * Bug fixes:
  - Fix the problem that CreateFile2 in mmap::open fails to... #1973
  - Default Accept-Encoding header for the client #1975
  - SSLClientReconnection fails on Windows #1980
  - delay in keep_alive due to sleep #1969
  - missing query pararm in httplib::Client::send #1985</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- version update to 0.18.6
  * Resolve #2033
  * Port/Address re-use #2011
  * Invalid Content-Length values should be rejected #2014
  * Feature request: ability to check if the connection is still alive #2017
  * Changed to use non-blocking socket in is_ssl_peer_could_be_closed (258992a)
  * Treat out-of-range last_pos as the end of the content #2009
  * fix:set_file_content with range request return 416. #2010
  * Fix HTTP Response Splitting Vulnerability (9c36aae)
- added patches
  fix https://github.com/yhirose/cpp-httplib/issues/2042
  + cpp-httplib-test-issue2004-online.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- version update to 0.20.1
  0.20.1 (CVE-2025-46728 [bsc#1242777])
  * Add AF_UNIX support on windows #2115
  * Support zstd also via pkg-config #2121
  * Fix #2113
  * Fix "Unbounded Memory Allocation in Chunked/No-Length Requests"
  0.20.0
  * server_certificate_verifier extended to reuse built-in verifier #2064
  * Assertion failed when destroying httplib::Client
  * #2068
  * Spaces incorrectly allowed in header field names #2096
  * build(meson): copy MountTest.MultibytesPathName files #2098
  * Remove SSLInit #2102
  * Add zstd support #2088
  * Question the behavior of method read_content_without_length #2109
  * Crash when calling std::exit while server running or client requests in flight #2097
  0.19.0
  * Global timeout feature (same as "--max-time" curl option) #2034
  * Fix check for URI length to prevent incorrect HTTP 414 errors
  0.18.7
  * Potential memory corruption in stream_line_reader #2028
- deleted patches
  - cpp-httplib-test-issue2004-online.patch (upstreamed)</changelog>
  <changelog author="Marius Grossu &lt;marius.grossu@suse.com&gt;" date="1762344000">- Fix CVE-2025-53629, header can allocate memory arbitrarily in the server, potentially leading to its exhaustion
  (CVE-2025-53628, bsc#1246471)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-53628, HTTP header smuggling due to insecure trailers merge
  (CVE-2025-53628, bsc#1246468)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-52887, number of HTTP header fields not limited, which can lead to potential exhaustion of system memory
  (CVE-2025-52887, bsc#1245414)
  * CVE-2025-52887.patch</changelog>
</package>
<package pkgid="f3556cb3db3ec9c32589aad973cc51617635fc0caace2d701a132828a65ee4a5" name="libcpuid" arch="src">
  <version epoch="0" ver="0.7.1" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1480334400">- Update to version 0.4.0:
  * A backwards-incompatible change, since the sizeof
    cpu_raw_data_t and cpu_id_t are now different.
  * Better detection of AMD clock multiplier with msrinfo.
  * Support for Intel SGX detection
- Some packaging cleanups
  * Use url as source
  * Split binary from devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Enable internal tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 0.4.1:
  * Better support for Skylake Core i5 (#76)
  * Misdiagnosis microarchitecture for i3-3220T (#81)
  * Ability to dump MSR values to a file (PR #82)
  * AMD Ryzen support (#86)
  * Support for Coffee and Kaby Lake (#104)
  * Support for Raven Ridge and Threadripper (#106)
  * Support for Pinnacle Ridge (#111)
  * Fix P-III Celeron misdetection
  * Support for Skylake-X (#116)
  * Support for Zen+ Threadripper</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550232000">- Use noun phrase in summaries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579780800">- Update to version 0.4.1+git.20200102:
  * DB: Add Threadripper (Castle Peak)
  * Fix compilation on non-x86/ARM architectures.
  * Add support for get_total_cpus on Haiku.
  * Some typo fixes in human readable text.
  * Add Xeon CLX (Cascade lake-based) using data from PR #129
  * add support to feature intel avx512_vnni
  * AARCH64 stub
  * Ignore convert_instlatx64 binary
  * add Hygon Dhyana C86 7seris test file
  * Add Hygon Dhyana detect support
- Switch to _service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version v0.5.0+git.20200526:
  * CI: remove 'v' prefix in assets
  * CI: checkout sources before making release
  * Release version 0.5.0 (#146)
  * Add GitHub workflows for CI/CD - CI: it will check code consistency and run tests for all events (except for tags) - CD: it will build all assets and create a draft Close #122
  * check-consistency: return error count
  * Fix code consistency Result before this patch:
  * CMake: fix include directory
  * CMake: fix build on Windows
  * CMake: fix install target's export
  * tests: fix unused-result warning in convert_instlatx64 tool
  * Update .gitignore
  * CMake: fix Unix install and format
  * Add config file for cmake-format It formats CMakeLists.txt files See https://github.com/cheshirekow/cmake_format
  * Doxygen: upgrade Doxyfile to avoid warnings warning: Tag 'PERL_PATH' at line 1032 of file '/libcpuid/build/libcpuid/Doxyfile' has become obsolete. To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u" warning: argument 'a4wide' for option PAPER_TYPE is not a valid enum value Using the default: a4!
  * Doxygen: turn on quiet mode It is too noisy with CMake
  * Detect AVX512VBMI and AVX512VBMI2 features on Intel CPUs More information: https://en.wikichip.org/wiki/x86/avx-512 Resolve #134
  * Detect ABM feature on Intel CPUs Resolve #144
  * Detect RDSEED/ADX/SHA_NI features on AMD CPUs These x86 instruction set extensions are present since Zen micro-architecture Resolve #145
  * Update cpuid_main.c
  * DB: add Ivy Bridge-E (Xeon)
  * Tests: update all tests to add fields for L1I
  * Tests: update to add L1I information Related to 25d0614811991c855ce7db0d898dbc6200dfa840 Dump of Core i5 520m from CPU-X#119
  * Add L1 Instruction Cache information Some CPUs does not have the same associativity for L1D and L1I, as reported in X0rg/CPU-X#119 It adds l1_instruction_assoc and l1_instruction_cacheline in cpu_id_t To avoid confusing, also adds l1_data_assoc and l1_data_cacheline l1_assoc and l1_cacheline are leave untouched for backward compatibility
  * Ignore .vscode directory Yes, 0b05f45e03b0aa39a65eba9451b59c9381e8474c was about VS Code
  * Tests: add amd_fn8000001dh subleaf See e562798cecf4af852fdfef4b0e7bf159a5d9b4de
  * Tests: parse subleafs in convert_instlatx64 Also, it adds 0xffffffff when data is not available, so all lines are presents
  * Re-fix L3 cache associativity detection on AMD Zen 2 CPUs Previous commit: 848394ee460c70298f91569d33f2c156bddb0f6c
  * Applied a patch from @tavplubix
  * Use constant for registers name It helps when reading technical documentation and it avoids 'magic values'
  * Remove all trailling spaces It is annoying with some text editors
  * DB: fix Rome extended model
  * DB: add Renoir APUs
  * Tests: add Core i5 8250U Related to X0rg/CPU-X#129
  * DB: add Ice Lake CPUs
  * DB: add Comet Lake CPUs
  * DB: add Coffee Lake Refresh It differs from Coffee Lake by stepping Core i5 9400 and 9500 will still be detected as Coffee Lake because it only differs by revision...
  * DB: add Coffee Lake-U It differs from Kaby Lake-U by stepping
  * DB: add Cannon Lake CPUs
  * DB: clarify Intel Generations
  * tests: remove duplicate addresses in RAW part
  * tests: fix convert_instlatx64 tool
  * Fix L3 cache associativity detection on AMD Zen 2 CPUs
  * Fix CMake
  * Add CMake
  * Add CMake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597320000">- Update to version 0.5.0+git.20200528:
  * Related to c2645d0. Convert all python scripts to Python 3.
  * Add Downloads section on Readme.md Close #140
  * Add I-Nex to the users list</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 0.5.0+git.20201019:
  * Fixes issue #148: CMake build script not in 0.5.0 tarball release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606219200">- Update to version 0.5.0+git.20201114:
  * Tests: fix path for cpuid_tool When we use CMake, the 'cpuid_tool' binary is in the 'build' directory
  * DB: add Vermeer https://en.wikichip.org/wiki/amd/cores/vermeer Test file converted from http://users.atw.hu/instlatx64/AuthenticAMD/AuthenticAMD0A20F10_K19_Vermeer_CPUID1.txt
  * DB: add Gemini Lake https://en.wikichip.org/wiki/intel/cores/gemini_lake Reported in X0rg/CPU-X#164
  * DB: add Comet Lake-U https://en.wikipedia.org/wiki/Comet_Lake_(microprocessor)#U-series_(Medium_power) Reported in X0rg/CPU-X#162
  * DB: add Kaby Lake-G https://en.wikichip.org/wiki/intel/cores/kaby_lake_g Test file converted from http://users.atw.hu/instlatx64/GenuineIntel/GenuineIntel00906E9_KabylakeG_CPUID.txt
  * DB: add Kaby Lake Refresh https://en.wikichip.org/wiki/intel/cores/kaby_lake_r Core i5 8250U was detected as Coffee Lake wrongly. Reported in X0rg/CPU-X#161</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616760000">- Update to version 0.5.1+git.1616323866:
  * Doxygen: remove deprecated option
  * Release version 0.5.1 (#151)
  * Tests: fix truncation warnings in convert_instlatx64
  * Fix warning with a comment
  * DB: add Rocket Lake
  * DB: add Milan
  * Tests: fix --create argument in convert_instlatx64 tool
  * DB: add Cezanne
  * DB: add Xeon E3 1275
  * CI: use microsoft/setup-msbuild@v1.0.2
  * CI: fix deprecated commands
  * Tests: add Core i5 8265U (Whiskey Lake-U)
  * DB: add Whiskey Lake-U</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1630065600">- Update to version 0.5.1+git.1626502835:
  * CMake: reduce min cmake requirement 3.14 -&gt; 3.13
  * Fix failing CI builds introduced by cb5fdd1
  * Use popcount64 from libc when available (#152)
  * allow to build either static or shared (#156)
  * cmake: allow libcpuid to be added as a CMake subproject (#155)
  * fix installation of BUNDLE if iOS (#154)
  * cmake: add an option to build tests (#153)
  * Fix #150: CPU Family/Model is used as Ext.Family/Model
  * DB: add Tiger Lake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644408000">- Update to version 0.5.1+git.1644144775:
  * Tests: add more Zen2 tests from InstLatx64
  * DB: add Lucienne
  * Report memory allocation failures without segfaulting. (#160)
  * Don't link with msrdriver.c on non-Windows platform. (#159)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 0.6.0:
  * Support for AMD Rembrandt
  * Support for AMD Warhol
  * Remove Debian package from source tree (#165)
  * Fix build under Clang 15 (#167)
  * Support for AMD Athlon Godavari
  * Support for hybrid CPU like Intel Alder Lake (#166)
  * Detect presence of hypervisor (#169)
  * Decode deterministic cache info for AMD CPUs (#168)
  * Add cache instances field in cpu_id_t and system_id_t (#168)
  * Support AMD Bald Eagle
  * Support for more AMD Godavari (Athlon)
  * Rename AMD Bulldozer to Zambezi
  * Support for AMD Interlagos
  * Support for AMD Abu Dhabi
  * Support for AMD Beema
  * Support for AMD Steppe Eagle
  * Support for more AMD Kabini (Sempron + Athlon)
  * Improve msr_serialize_raw_data()
  * Support for AMD Zen 2 custom APU for Steam Deck</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665576000">- Add missing dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- update to 0.6.2:
  * Support for AMD Raphael
  * Support for AMD Dali
  * Support for AMD Van Gogh
  * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172)
  * Remove AMD Warhol from DB (Zen3+ cancelled)
  * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175)
  * Fix shared library symlinks with CMake (#174)
  * Support for Intel Raptor Lake-S
  * Fix segmentation fault in cpu_identify_all() for single-core CPUs
  * Support for Intel Penryn L
  * Support for Intel Tremont
  * Support for AMD Mendocino
  * Support for Intel Ice Lake (Xeon-D)
  * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S)
  * Support for AMD Athlon 64 Sherman</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682424000">- Update to version 0.6.3:
  * Support for Intel Pentium and Celeron for Alder Lake-S
  * Support for Intel Alder Lake-HX
  * Support for Intel Alder Lake-X
  * Fix detection of Intel Alder Lake-P
  * Fix infinite loop in set_cpu_affinity() on macOS
  * Fix a misprint of extended CPUID in cpuid_basic_identify()
  * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184)
  * Query CPU info at least once even if set_cpu_affinity() fails
  * Support for AMD 19h family MSRs
  * Fix detection of Intel Core i5 Lynnfield
  * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188)
  * Support for Intel Alder Lake-N
  * Support for AMD Rembrandt with Radeon Graphics
  * Support for Intel Raptor Lake-S with "Golden Cove" cores
  * Support for Intel Raptor Lake-P
  * Support for Intel Raptor Lake-U
  * Support for Intel Rocket Lake-E</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 0.6.4
  * Support for AMD Genoa, Phoenix, Dragon Range, Ryzen Z1
  * Support for Intel Sapphire Rapids-WS, Skylake (server),
    Cascade Lake, Ice-Lake (server), Sapphire Rapids-SP,
    Raptor Lake-H/HX, Apollo lake
  * Improve support for Arrandale, Alder-Lake and Raptor-Lake P/U
  * Initial support for Centaur CPUs (VIA and Zhaoxin)</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719576000">- update to release 0.6.5
  * Support for Intel Bay Trail-M
  * Support for Intel Bay Trail-T
  * Support for Intel Bay Trail-D
  * Support for AMD Storm Peak
  * Support for Intel Raport Lake Refresh
  * Support heterogeneous RAW dumps in cpu_identify_all()
  * Support for Intel Meteor Lake, including detection of LP E-Cores
  * Support for Intel Emerald Rapids-SP
  * Support for more AMD Van Gogh</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1725796800">- update to 0.7.0:
  * Version 0.7.0 (2024-08-26):
  * Fix handle leaks in rdmsr.c (#199)
  * Fix cpuid_get_hypervisor when NULL data is provided (#199)
  * Prevent intel_fn11 array overruns (#199)
  * Support for AMD Hawk Point
  * Support for more AMD Phoenix (8000 series)
  * Add cpu_clock_by_tsc() function to the library (#124)
  * Check x86 CPUs MSR support (#185)
  * Add support for ARM CPUs (AArch32 + AArch64) (#200)
  * Add cpu_feature_level_t enumerated values for x86 CPUs (#177)
  * Support up to 4 subleaf entries for CPUID leaf 0x80000026
    (#189)
  * Support for Extended CPU topology subleaf in
    cpuid_identify_purpose_amd() (#189)
  * Support CPU purpose for AMD x86 CPUs (#189)
  * Add cpuid Linux and FreeBSD kernel modules for ARM CPUs
  * Improve errors handling in cpuid_get_all_raw_data() and
    cpuid_get_raw_data_core() (#202)
  * Support get_total_cpus() on DragonFly BSD
  * Improve set_cpu_affinity() on NetBSD
  * Fix build on OpenBSD
  * Improve behavior when CPU affinity cannot be set
  * Fix a regression in cpuid_tool about arguments doing nothing
    (like --rdmsr or --cpuid)
  * Fix a segmentation fault when using --quiet in cpuid_tool
  * Improve error handling in cpu_identify_all()
  * Add Python bindings (#197)
  * Support for AMD Granite Ridge
  * Support for AMD Strix Point
  * Detect x2APIC and AVX512 features for AMD x86 CPUs</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1733313600">- Update to version 0.7.1:
  * Fix cpuid kernel module build on ARM
  * Return ERR_NO_CPUID when cpuid kernel module cannot be used on AArch32
  * state
  * Refactor the build of the bindings (#203)
  * Fix build error on AArch64 when HWCAP_CPUID is not defined (#205)
  * Fix build on Windows ARM with MSVC (206)
  * Fix detection of Intel Meteor Lake
  * Support for Intel Arrow Lake
  * Support for AMD Turin</changelog>
</package>
<package pkgid="9d6f61e918b8d269e7b1914d508ee1285f5adfed93e0b1cc9c3a9df68cec05e4" name="libcpuid-devel" arch="aarch64">
  <version epoch="0" ver="0.7.1" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1480334400">- Update to version 0.4.0:
  * A backwards-incompatible change, since the sizeof
    cpu_raw_data_t and cpu_id_t are now different.
  * Better detection of AMD clock multiplier with msrinfo.
  * Support for Intel SGX detection
- Some packaging cleanups
  * Use url as source
  * Split binary from devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Enable internal tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 0.4.1:
  * Better support for Skylake Core i5 (#76)
  * Misdiagnosis microarchitecture for i3-3220T (#81)
  * Ability to dump MSR values to a file (PR #82)
  * AMD Ryzen support (#86)
  * Support for Coffee and Kaby Lake (#104)
  * Support for Raven Ridge and Threadripper (#106)
  * Support for Pinnacle Ridge (#111)
  * Fix P-III Celeron misdetection
  * Support for Skylake-X (#116)
  * Support for Zen+ Threadripper</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550232000">- Use noun phrase in summaries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579780800">- Update to version 0.4.1+git.20200102:
  * DB: Add Threadripper (Castle Peak)
  * Fix compilation on non-x86/ARM architectures.
  * Add support for get_total_cpus on Haiku.
  * Some typo fixes in human readable text.
  * Add Xeon CLX (Cascade lake-based) using data from PR #129
  * add support to feature intel avx512_vnni
  * AARCH64 stub
  * Ignore convert_instlatx64 binary
  * add Hygon Dhyana C86 7seris test file
  * Add Hygon Dhyana detect support
- Switch to _service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version v0.5.0+git.20200526:
  * CI: remove 'v' prefix in assets
  * CI: checkout sources before making release
  * Release version 0.5.0 (#146)
  * Add GitHub workflows for CI/CD - CI: it will check code consistency and run tests for all events (except for tags) - CD: it will build all assets and create a draft Close #122
  * check-consistency: return error count
  * Fix code consistency Result before this patch:
  * CMake: fix include directory
  * CMake: fix build on Windows
  * CMake: fix install target's export
  * tests: fix unused-result warning in convert_instlatx64 tool
  * Update .gitignore
  * CMake: fix Unix install and format
  * Add config file for cmake-format It formats CMakeLists.txt files See https://github.com/cheshirekow/cmake_format
  * Doxygen: upgrade Doxyfile to avoid warnings warning: Tag 'PERL_PATH' at line 1032 of file '/libcpuid/build/libcpuid/Doxyfile' has become obsolete. To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u" warning: argument 'a4wide' for option PAPER_TYPE is not a valid enum value Using the default: a4!
  * Doxygen: turn on quiet mode It is too noisy with CMake
  * Detect AVX512VBMI and AVX512VBMI2 features on Intel CPUs More information: https://en.wikichip.org/wiki/x86/avx-512 Resolve #134
  * Detect ABM feature on Intel CPUs Resolve #144
  * Detect RDSEED/ADX/SHA_NI features on AMD CPUs These x86 instruction set extensions are present since Zen micro-architecture Resolve #145
  * Update cpuid_main.c
  * DB: add Ivy Bridge-E (Xeon)
  * Tests: update all tests to add fields for L1I
  * Tests: update to add L1I information Related to 25d0614811991c855ce7db0d898dbc6200dfa840 Dump of Core i5 520m from CPU-X#119
  * Add L1 Instruction Cache information Some CPUs does not have the same associativity for L1D and L1I, as reported in X0rg/CPU-X#119 It adds l1_instruction_assoc and l1_instruction_cacheline in cpu_id_t To avoid confusing, also adds l1_data_assoc and l1_data_cacheline l1_assoc and l1_cacheline are leave untouched for backward compatibility
  * Ignore .vscode directory Yes, 0b05f45e03b0aa39a65eba9451b59c9381e8474c was about VS Code
  * Tests: add amd_fn8000001dh subleaf See e562798cecf4af852fdfef4b0e7bf159a5d9b4de
  * Tests: parse subleafs in convert_instlatx64 Also, it adds 0xffffffff when data is not available, so all lines are presents
  * Re-fix L3 cache associativity detection on AMD Zen 2 CPUs Previous commit: 848394ee460c70298f91569d33f2c156bddb0f6c
  * Applied a patch from @tavplubix
  * Use constant for registers name It helps when reading technical documentation and it avoids 'magic values'
  * Remove all trailling spaces It is annoying with some text editors
  * DB: fix Rome extended model
  * DB: add Renoir APUs
  * Tests: add Core i5 8250U Related to X0rg/CPU-X#129
  * DB: add Ice Lake CPUs
  * DB: add Comet Lake CPUs
  * DB: add Coffee Lake Refresh It differs from Coffee Lake by stepping Core i5 9400 and 9500 will still be detected as Coffee Lake because it only differs by revision...
  * DB: add Coffee Lake-U It differs from Kaby Lake-U by stepping
  * DB: add Cannon Lake CPUs
  * DB: clarify Intel Generations
  * tests: remove duplicate addresses in RAW part
  * tests: fix convert_instlatx64 tool
  * Fix L3 cache associativity detection on AMD Zen 2 CPUs
  * Fix CMake
  * Add CMake
  * Add CMake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597320000">- Update to version 0.5.0+git.20200528:
  * Related to c2645d0. Convert all python scripts to Python 3.
  * Add Downloads section on Readme.md Close #140
  * Add I-Nex to the users list</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 0.5.0+git.20201019:
  * Fixes issue #148: CMake build script not in 0.5.0 tarball release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606219200">- Update to version 0.5.0+git.20201114:
  * Tests: fix path for cpuid_tool When we use CMake, the 'cpuid_tool' binary is in the 'build' directory
  * DB: add Vermeer https://en.wikichip.org/wiki/amd/cores/vermeer Test file converted from http://users.atw.hu/instlatx64/AuthenticAMD/AuthenticAMD0A20F10_K19_Vermeer_CPUID1.txt
  * DB: add Gemini Lake https://en.wikichip.org/wiki/intel/cores/gemini_lake Reported in X0rg/CPU-X#164
  * DB: add Comet Lake-U https://en.wikipedia.org/wiki/Comet_Lake_(microprocessor)#U-series_(Medium_power) Reported in X0rg/CPU-X#162
  * DB: add Kaby Lake-G https://en.wikichip.org/wiki/intel/cores/kaby_lake_g Test file converted from http://users.atw.hu/instlatx64/GenuineIntel/GenuineIntel00906E9_KabylakeG_CPUID.txt
  * DB: add Kaby Lake Refresh https://en.wikichip.org/wiki/intel/cores/kaby_lake_r Core i5 8250U was detected as Coffee Lake wrongly. Reported in X0rg/CPU-X#161</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616760000">- Update to version 0.5.1+git.1616323866:
  * Doxygen: remove deprecated option
  * Release version 0.5.1 (#151)
  * Tests: fix truncation warnings in convert_instlatx64
  * Fix warning with a comment
  * DB: add Rocket Lake
  * DB: add Milan
  * Tests: fix --create argument in convert_instlatx64 tool
  * DB: add Cezanne
  * DB: add Xeon E3 1275
  * CI: use microsoft/setup-msbuild@v1.0.2
  * CI: fix deprecated commands
  * Tests: add Core i5 8265U (Whiskey Lake-U)
  * DB: add Whiskey Lake-U</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1630065600">- Update to version 0.5.1+git.1626502835:
  * CMake: reduce min cmake requirement 3.14 -&gt; 3.13
  * Fix failing CI builds introduced by cb5fdd1
  * Use popcount64 from libc when available (#152)
  * allow to build either static or shared (#156)
  * cmake: allow libcpuid to be added as a CMake subproject (#155)
  * fix installation of BUNDLE if iOS (#154)
  * cmake: add an option to build tests (#153)
  * Fix #150: CPU Family/Model is used as Ext.Family/Model
  * DB: add Tiger Lake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644408000">- Update to version 0.5.1+git.1644144775:
  * Tests: add more Zen2 tests from InstLatx64
  * DB: add Lucienne
  * Report memory allocation failures without segfaulting. (#160)
  * Don't link with msrdriver.c on non-Windows platform. (#159)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 0.6.0:
  * Support for AMD Rembrandt
  * Support for AMD Warhol
  * Remove Debian package from source tree (#165)
  * Fix build under Clang 15 (#167)
  * Support for AMD Athlon Godavari
  * Support for hybrid CPU like Intel Alder Lake (#166)
  * Detect presence of hypervisor (#169)
  * Decode deterministic cache info for AMD CPUs (#168)
  * Add cache instances field in cpu_id_t and system_id_t (#168)
  * Support AMD Bald Eagle
  * Support for more AMD Godavari (Athlon)
  * Rename AMD Bulldozer to Zambezi
  * Support for AMD Interlagos
  * Support for AMD Abu Dhabi
  * Support for AMD Beema
  * Support for AMD Steppe Eagle
  * Support for more AMD Kabini (Sempron + Athlon)
  * Improve msr_serialize_raw_data()
  * Support for AMD Zen 2 custom APU for Steam Deck</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665576000">- Add missing dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- update to 0.6.2:
  * Support for AMD Raphael
  * Support for AMD Dali
  * Support for AMD Van Gogh
  * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172)
  * Remove AMD Warhol from DB (Zen3+ cancelled)
  * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175)
  * Fix shared library symlinks with CMake (#174)
  * Support for Intel Raptor Lake-S
  * Fix segmentation fault in cpu_identify_all() for single-core CPUs
  * Support for Intel Penryn L
  * Support for Intel Tremont
  * Support for AMD Mendocino
  * Support for Intel Ice Lake (Xeon-D)
  * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S)
  * Support for AMD Athlon 64 Sherman</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682424000">- Update to version 0.6.3:
  * Support for Intel Pentium and Celeron for Alder Lake-S
  * Support for Intel Alder Lake-HX
  * Support for Intel Alder Lake-X
  * Fix detection of Intel Alder Lake-P
  * Fix infinite loop in set_cpu_affinity() on macOS
  * Fix a misprint of extended CPUID in cpuid_basic_identify()
  * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184)
  * Query CPU info at least once even if set_cpu_affinity() fails
  * Support for AMD 19h family MSRs
  * Fix detection of Intel Core i5 Lynnfield
  * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188)
  * Support for Intel Alder Lake-N
  * Support for AMD Rembrandt with Radeon Graphics
  * Support for Intel Raptor Lake-S with "Golden Cove" cores
  * Support for Intel Raptor Lake-P
  * Support for Intel Raptor Lake-U
  * Support for Intel Rocket Lake-E</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 0.6.4
  * Support for AMD Genoa, Phoenix, Dragon Range, Ryzen Z1
  * Support for Intel Sapphire Rapids-WS, Skylake (server),
    Cascade Lake, Ice-Lake (server), Sapphire Rapids-SP,
    Raptor Lake-H/HX, Apollo lake
  * Improve support for Arrandale, Alder-Lake and Raptor-Lake P/U
  * Initial support for Centaur CPUs (VIA and Zhaoxin)</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719576000">- update to release 0.6.5
  * Support for Intel Bay Trail-M
  * Support for Intel Bay Trail-T
  * Support for Intel Bay Trail-D
  * Support for AMD Storm Peak
  * Support for Intel Raport Lake Refresh
  * Support heterogeneous RAW dumps in cpu_identify_all()
  * Support for Intel Meteor Lake, including detection of LP E-Cores
  * Support for Intel Emerald Rapids-SP
  * Support for more AMD Van Gogh</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1725796800">- update to 0.7.0:
  * Version 0.7.0 (2024-08-26):
  * Fix handle leaks in rdmsr.c (#199)
  * Fix cpuid_get_hypervisor when NULL data is provided (#199)
  * Prevent intel_fn11 array overruns (#199)
  * Support for AMD Hawk Point
  * Support for more AMD Phoenix (8000 series)
  * Add cpu_clock_by_tsc() function to the library (#124)
  * Check x86 CPUs MSR support (#185)
  * Add support for ARM CPUs (AArch32 + AArch64) (#200)
  * Add cpu_feature_level_t enumerated values for x86 CPUs (#177)
  * Support up to 4 subleaf entries for CPUID leaf 0x80000026
    (#189)
  * Support for Extended CPU topology subleaf in
    cpuid_identify_purpose_amd() (#189)
  * Support CPU purpose for AMD x86 CPUs (#189)
  * Add cpuid Linux and FreeBSD kernel modules for ARM CPUs
  * Improve errors handling in cpuid_get_all_raw_data() and
    cpuid_get_raw_data_core() (#202)
  * Support get_total_cpus() on DragonFly BSD
  * Improve set_cpu_affinity() on NetBSD
  * Fix build on OpenBSD
  * Improve behavior when CPU affinity cannot be set
  * Fix a regression in cpuid_tool about arguments doing nothing
    (like --rdmsr or --cpuid)
  * Fix a segmentation fault when using --quiet in cpuid_tool
  * Improve error handling in cpu_identify_all()
  * Add Python bindings (#197)
  * Support for AMD Granite Ridge
  * Support for AMD Strix Point
  * Detect x2APIC and AVX512 features for AMD x86 CPUs</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1733313600">- Update to version 0.7.1:
  * Fix cpuid kernel module build on ARM
  * Return ERR_NO_CPUID when cpuid kernel module cannot be used on AArch32
  * state
  * Refactor the build of the bindings (#203)
  * Fix build error on AArch64 when HWCAP_CPUID is not defined (#205)
  * Fix build on Windows ARM with MSVC (206)
  * Fix detection of Intel Meteor Lake
  * Support for Intel Arrow Lake
  * Support for AMD Turin</changelog>
</package>
<package pkgid="d7c4ea4040a67a772ea737629d3d9900a61ddaa378f0ad2618470c7e4923d7be" name="libcpuid-devel" arch="i586">
  <version epoch="0" ver="0.7.1" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1480334400">- Update to version 0.4.0:
  * A backwards-incompatible change, since the sizeof
    cpu_raw_data_t and cpu_id_t are now different.
  * Better detection of AMD clock multiplier with msrinfo.
  * Support for Intel SGX detection
- Some packaging cleanups
  * Use url as source
  * Split binary from devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Enable internal tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 0.4.1:
  * Better support for Skylake Core i5 (#76)
  * Misdiagnosis microarchitecture for i3-3220T (#81)
  * Ability to dump MSR values to a file (PR #82)
  * AMD Ryzen support (#86)
  * Support for Coffee and Kaby Lake (#104)
  * Support for Raven Ridge and Threadripper (#106)
  * Support for Pinnacle Ridge (#111)
  * Fix P-III Celeron misdetection
  * Support for Skylake-X (#116)
  * Support for Zen+ Threadripper</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550232000">- Use noun phrase in summaries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579780800">- Update to version 0.4.1+git.20200102:
  * DB: Add Threadripper (Castle Peak)
  * Fix compilation on non-x86/ARM architectures.
  * Add support for get_total_cpus on Haiku.
  * Some typo fixes in human readable text.
  * Add Xeon CLX (Cascade lake-based) using data from PR #129
  * add support to feature intel avx512_vnni
  * AARCH64 stub
  * Ignore convert_instlatx64 binary
  * add Hygon Dhyana C86 7seris test file
  * Add Hygon Dhyana detect support
- Switch to _service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version v0.5.0+git.20200526:
  * CI: remove 'v' prefix in assets
  * CI: checkout sources before making release
  * Release version 0.5.0 (#146)
  * Add GitHub workflows for CI/CD - CI: it will check code consistency and run tests for all events (except for tags) - CD: it will build all assets and create a draft Close #122
  * check-consistency: return error count
  * Fix code consistency Result before this patch:
  * CMake: fix include directory
  * CMake: fix build on Windows
  * CMake: fix install target's export
  * tests: fix unused-result warning in convert_instlatx64 tool
  * Update .gitignore
  * CMake: fix Unix install and format
  * Add config file for cmake-format It formats CMakeLists.txt files See https://github.com/cheshirekow/cmake_format
  * Doxygen: upgrade Doxyfile to avoid warnings warning: Tag 'PERL_PATH' at line 1032 of file '/libcpuid/build/libcpuid/Doxyfile' has become obsolete. To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u" warning: argument 'a4wide' for option PAPER_TYPE is not a valid enum value Using the default: a4!
  * Doxygen: turn on quiet mode It is too noisy with CMake
  * Detect AVX512VBMI and AVX512VBMI2 features on Intel CPUs More information: https://en.wikichip.org/wiki/x86/avx-512 Resolve #134
  * Detect ABM feature on Intel CPUs Resolve #144
  * Detect RDSEED/ADX/SHA_NI features on AMD CPUs These x86 instruction set extensions are present since Zen micro-architecture Resolve #145
  * Update cpuid_main.c
  * DB: add Ivy Bridge-E (Xeon)
  * Tests: update all tests to add fields for L1I
  * Tests: update to add L1I information Related to 25d0614811991c855ce7db0d898dbc6200dfa840 Dump of Core i5 520m from CPU-X#119
  * Add L1 Instruction Cache information Some CPUs does not have the same associativity for L1D and L1I, as reported in X0rg/CPU-X#119 It adds l1_instruction_assoc and l1_instruction_cacheline in cpu_id_t To avoid confusing, also adds l1_data_assoc and l1_data_cacheline l1_assoc and l1_cacheline are leave untouched for backward compatibility
  * Ignore .vscode directory Yes, 0b05f45e03b0aa39a65eba9451b59c9381e8474c was about VS Code
  * Tests: add amd_fn8000001dh subleaf See e562798cecf4af852fdfef4b0e7bf159a5d9b4de
  * Tests: parse subleafs in convert_instlatx64 Also, it adds 0xffffffff when data is not available, so all lines are presents
  * Re-fix L3 cache associativity detection on AMD Zen 2 CPUs Previous commit: 848394ee460c70298f91569d33f2c156bddb0f6c
  * Applied a patch from @tavplubix
  * Use constant for registers name It helps when reading technical documentation and it avoids 'magic values'
  * Remove all trailling spaces It is annoying with some text editors
  * DB: fix Rome extended model
  * DB: add Renoir APUs
  * Tests: add Core i5 8250U Related to X0rg/CPU-X#129
  * DB: add Ice Lake CPUs
  * DB: add Comet Lake CPUs
  * DB: add Coffee Lake Refresh It differs from Coffee Lake by stepping Core i5 9400 and 9500 will still be detected as Coffee Lake because it only differs by revision...
  * DB: add Coffee Lake-U It differs from Kaby Lake-U by stepping
  * DB: add Cannon Lake CPUs
  * DB: clarify Intel Generations
  * tests: remove duplicate addresses in RAW part
  * tests: fix convert_instlatx64 tool
  * Fix L3 cache associativity detection on AMD Zen 2 CPUs
  * Fix CMake
  * Add CMake
  * Add CMake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597320000">- Update to version 0.5.0+git.20200528:
  * Related to c2645d0. Convert all python scripts to Python 3.
  * Add Downloads section on Readme.md Close #140
  * Add I-Nex to the users list</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 0.5.0+git.20201019:
  * Fixes issue #148: CMake build script not in 0.5.0 tarball release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606219200">- Update to version 0.5.0+git.20201114:
  * Tests: fix path for cpuid_tool When we use CMake, the 'cpuid_tool' binary is in the 'build' directory
  * DB: add Vermeer https://en.wikichip.org/wiki/amd/cores/vermeer Test file converted from http://users.atw.hu/instlatx64/AuthenticAMD/AuthenticAMD0A20F10_K19_Vermeer_CPUID1.txt
  * DB: add Gemini Lake https://en.wikichip.org/wiki/intel/cores/gemini_lake Reported in X0rg/CPU-X#164
  * DB: add Comet Lake-U https://en.wikipedia.org/wiki/Comet_Lake_(microprocessor)#U-series_(Medium_power) Reported in X0rg/CPU-X#162
  * DB: add Kaby Lake-G https://en.wikichip.org/wiki/intel/cores/kaby_lake_g Test file converted from http://users.atw.hu/instlatx64/GenuineIntel/GenuineIntel00906E9_KabylakeG_CPUID.txt
  * DB: add Kaby Lake Refresh https://en.wikichip.org/wiki/intel/cores/kaby_lake_r Core i5 8250U was detected as Coffee Lake wrongly. Reported in X0rg/CPU-X#161</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616760000">- Update to version 0.5.1+git.1616323866:
  * Doxygen: remove deprecated option
  * Release version 0.5.1 (#151)
  * Tests: fix truncation warnings in convert_instlatx64
  * Fix warning with a comment
  * DB: add Rocket Lake
  * DB: add Milan
  * Tests: fix --create argument in convert_instlatx64 tool
  * DB: add Cezanne
  * DB: add Xeon E3 1275
  * CI: use microsoft/setup-msbuild@v1.0.2
  * CI: fix deprecated commands
  * Tests: add Core i5 8265U (Whiskey Lake-U)
  * DB: add Whiskey Lake-U</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1630065600">- Update to version 0.5.1+git.1626502835:
  * CMake: reduce min cmake requirement 3.14 -&gt; 3.13
  * Fix failing CI builds introduced by cb5fdd1
  * Use popcount64 from libc when available (#152)
  * allow to build either static or shared (#156)
  * cmake: allow libcpuid to be added as a CMake subproject (#155)
  * fix installation of BUNDLE if iOS (#154)
  * cmake: add an option to build tests (#153)
  * Fix #150: CPU Family/Model is used as Ext.Family/Model
  * DB: add Tiger Lake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644408000">- Update to version 0.5.1+git.1644144775:
  * Tests: add more Zen2 tests from InstLatx64
  * DB: add Lucienne
  * Report memory allocation failures without segfaulting. (#160)
  * Don't link with msrdriver.c on non-Windows platform. (#159)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 0.6.0:
  * Support for AMD Rembrandt
  * Support for AMD Warhol
  * Remove Debian package from source tree (#165)
  * Fix build under Clang 15 (#167)
  * Support for AMD Athlon Godavari
  * Support for hybrid CPU like Intel Alder Lake (#166)
  * Detect presence of hypervisor (#169)
  * Decode deterministic cache info for AMD CPUs (#168)
  * Add cache instances field in cpu_id_t and system_id_t (#168)
  * Support AMD Bald Eagle
  * Support for more AMD Godavari (Athlon)
  * Rename AMD Bulldozer to Zambezi
  * Support for AMD Interlagos
  * Support for AMD Abu Dhabi
  * Support for AMD Beema
  * Support for AMD Steppe Eagle
  * Support for more AMD Kabini (Sempron + Athlon)
  * Improve msr_serialize_raw_data()
  * Support for AMD Zen 2 custom APU for Steam Deck</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665576000">- Add missing dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- update to 0.6.2:
  * Support for AMD Raphael
  * Support for AMD Dali
  * Support for AMD Van Gogh
  * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172)
  * Remove AMD Warhol from DB (Zen3+ cancelled)
  * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175)
  * Fix shared library symlinks with CMake (#174)
  * Support for Intel Raptor Lake-S
  * Fix segmentation fault in cpu_identify_all() for single-core CPUs
  * Support for Intel Penryn L
  * Support for Intel Tremont
  * Support for AMD Mendocino
  * Support for Intel Ice Lake (Xeon-D)
  * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S)
  * Support for AMD Athlon 64 Sherman</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682424000">- Update to version 0.6.3:
  * Support for Intel Pentium and Celeron for Alder Lake-S
  * Support for Intel Alder Lake-HX
  * Support for Intel Alder Lake-X
  * Fix detection of Intel Alder Lake-P
  * Fix infinite loop in set_cpu_affinity() on macOS
  * Fix a misprint of extended CPUID in cpuid_basic_identify()
  * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184)
  * Query CPU info at least once even if set_cpu_affinity() fails
  * Support for AMD 19h family MSRs
  * Fix detection of Intel Core i5 Lynnfield
  * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188)
  * Support for Intel Alder Lake-N
  * Support for AMD Rembrandt with Radeon Graphics
  * Support for Intel Raptor Lake-S with "Golden Cove" cores
  * Support for Intel Raptor Lake-P
  * Support for Intel Raptor Lake-U
  * Support for Intel Rocket Lake-E</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 0.6.4
  * Support for AMD Genoa, Phoenix, Dragon Range, Ryzen Z1
  * Support for Intel Sapphire Rapids-WS, Skylake (server),
    Cascade Lake, Ice-Lake (server), Sapphire Rapids-SP,
    Raptor Lake-H/HX, Apollo lake
  * Improve support for Arrandale, Alder-Lake and Raptor-Lake P/U
  * Initial support for Centaur CPUs (VIA and Zhaoxin)</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719576000">- update to release 0.6.5
  * Support for Intel Bay Trail-M
  * Support for Intel Bay Trail-T
  * Support for Intel Bay Trail-D
  * Support for AMD Storm Peak
  * Support for Intel Raport Lake Refresh
  * Support heterogeneous RAW dumps in cpu_identify_all()
  * Support for Intel Meteor Lake, including detection of LP E-Cores
  * Support for Intel Emerald Rapids-SP
  * Support for more AMD Van Gogh</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1725796800">- update to 0.7.0:
  * Version 0.7.0 (2024-08-26):
  * Fix handle leaks in rdmsr.c (#199)
  * Fix cpuid_get_hypervisor when NULL data is provided (#199)
  * Prevent intel_fn11 array overruns (#199)
  * Support for AMD Hawk Point
  * Support for more AMD Phoenix (8000 series)
  * Add cpu_clock_by_tsc() function to the library (#124)
  * Check x86 CPUs MSR support (#185)
  * Add support for ARM CPUs (AArch32 + AArch64) (#200)
  * Add cpu_feature_level_t enumerated values for x86 CPUs (#177)
  * Support up to 4 subleaf entries for CPUID leaf 0x80000026
    (#189)
  * Support for Extended CPU topology subleaf in
    cpuid_identify_purpose_amd() (#189)
  * Support CPU purpose for AMD x86 CPUs (#189)
  * Add cpuid Linux and FreeBSD kernel modules for ARM CPUs
  * Improve errors handling in cpuid_get_all_raw_data() and
    cpuid_get_raw_data_core() (#202)
  * Support get_total_cpus() on DragonFly BSD
  * Improve set_cpu_affinity() on NetBSD
  * Fix build on OpenBSD
  * Improve behavior when CPU affinity cannot be set
  * Fix a regression in cpuid_tool about arguments doing nothing
    (like --rdmsr or --cpuid)
  * Fix a segmentation fault when using --quiet in cpuid_tool
  * Improve error handling in cpu_identify_all()
  * Add Python bindings (#197)
  * Support for AMD Granite Ridge
  * Support for AMD Strix Point
  * Detect x2APIC and AVX512 features for AMD x86 CPUs</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1733313600">- Update to version 0.7.1:
  * Fix cpuid kernel module build on ARM
  * Return ERR_NO_CPUID when cpuid kernel module cannot be used on AArch32
  * state
  * Refactor the build of the bindings (#203)
  * Fix build error on AArch64 when HWCAP_CPUID is not defined (#205)
  * Fix build on Windows ARM with MSVC (206)
  * Fix detection of Intel Meteor Lake
  * Support for Intel Arrow Lake
  * Support for AMD Turin</changelog>
</package>
<package pkgid="f8ad9fce9a24ea66a3639e8f8caa8edd2a44d2bdd10ebabc9ac2f55488b62aab" name="libcpuid-devel" arch="ppc64le">
  <version epoch="0" ver="0.7.1" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1480334400">- Update to version 0.4.0:
  * A backwards-incompatible change, since the sizeof
    cpu_raw_data_t and cpu_id_t are now different.
  * Better detection of AMD clock multiplier with msrinfo.
  * Support for Intel SGX detection
- Some packaging cleanups
  * Use url as source
  * Split binary from devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Enable internal tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 0.4.1:
  * Better support for Skylake Core i5 (#76)
  * Misdiagnosis microarchitecture for i3-3220T (#81)
  * Ability to dump MSR values to a file (PR #82)
  * AMD Ryzen support (#86)
  * Support for Coffee and Kaby Lake (#104)
  * Support for Raven Ridge and Threadripper (#106)
  * Support for Pinnacle Ridge (#111)
  * Fix P-III Celeron misdetection
  * Support for Skylake-X (#116)
  * Support for Zen+ Threadripper</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550232000">- Use noun phrase in summaries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579780800">- Update to version 0.4.1+git.20200102:
  * DB: Add Threadripper (Castle Peak)
  * Fix compilation on non-x86/ARM architectures.
  * Add support for get_total_cpus on Haiku.
  * Some typo fixes in human readable text.
  * Add Xeon CLX (Cascade lake-based) using data from PR #129
  * add support to feature intel avx512_vnni
  * AARCH64 stub
  * Ignore convert_instlatx64 binary
  * add Hygon Dhyana C86 7seris test file
  * Add Hygon Dhyana detect support
- Switch to _service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version v0.5.0+git.20200526:
  * CI: remove 'v' prefix in assets
  * CI: checkout sources before making release
  * Release version 0.5.0 (#146)
  * Add GitHub workflows for CI/CD - CI: it will check code consistency and run tests for all events (except for tags) - CD: it will build all assets and create a draft Close #122
  * check-consistency: return error count
  * Fix code consistency Result before this patch:
  * CMake: fix include directory
  * CMake: fix build on Windows
  * CMake: fix install target's export
  * tests: fix unused-result warning in convert_instlatx64 tool
  * Update .gitignore
  * CMake: fix Unix install and format
  * Add config file for cmake-format It formats CMakeLists.txt files See https://github.com/cheshirekow/cmake_format
  * Doxygen: upgrade Doxyfile to avoid warnings warning: Tag 'PERL_PATH' at line 1032 of file '/libcpuid/build/libcpuid/Doxyfile' has become obsolete. To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u" warning: argument 'a4wide' for option PAPER_TYPE is not a valid enum value Using the default: a4!
  * Doxygen: turn on quiet mode It is too noisy with CMake
  * Detect AVX512VBMI and AVX512VBMI2 features on Intel CPUs More information: https://en.wikichip.org/wiki/x86/avx-512 Resolve #134
  * Detect ABM feature on Intel CPUs Resolve #144
  * Detect RDSEED/ADX/SHA_NI features on AMD CPUs These x86 instruction set extensions are present since Zen micro-architecture Resolve #145
  * Update cpuid_main.c
  * DB: add Ivy Bridge-E (Xeon)
  * Tests: update all tests to add fields for L1I
  * Tests: update to add L1I information Related to 25d0614811991c855ce7db0d898dbc6200dfa840 Dump of Core i5 520m from CPU-X#119
  * Add L1 Instruction Cache information Some CPUs does not have the same associativity for L1D and L1I, as reported in X0rg/CPU-X#119 It adds l1_instruction_assoc and l1_instruction_cacheline in cpu_id_t To avoid confusing, also adds l1_data_assoc and l1_data_cacheline l1_assoc and l1_cacheline are leave untouched for backward compatibility
  * Ignore .vscode directory Yes, 0b05f45e03b0aa39a65eba9451b59c9381e8474c was about VS Code
  * Tests: add amd_fn8000001dh subleaf See e562798cecf4af852fdfef4b0e7bf159a5d9b4de
  * Tests: parse subleafs in convert_instlatx64 Also, it adds 0xffffffff when data is not available, so all lines are presents
  * Re-fix L3 cache associativity detection on AMD Zen 2 CPUs Previous commit: 848394ee460c70298f91569d33f2c156bddb0f6c
  * Applied a patch from @tavplubix
  * Use constant for registers name It helps when reading technical documentation and it avoids 'magic values'
  * Remove all trailling spaces It is annoying with some text editors
  * DB: fix Rome extended model
  * DB: add Renoir APUs
  * Tests: add Core i5 8250U Related to X0rg/CPU-X#129
  * DB: add Ice Lake CPUs
  * DB: add Comet Lake CPUs
  * DB: add Coffee Lake Refresh It differs from Coffee Lake by stepping Core i5 9400 and 9500 will still be detected as Coffee Lake because it only differs by revision...
  * DB: add Coffee Lake-U It differs from Kaby Lake-U by stepping
  * DB: add Cannon Lake CPUs
  * DB: clarify Intel Generations
  * tests: remove duplicate addresses in RAW part
  * tests: fix convert_instlatx64 tool
  * Fix L3 cache associativity detection on AMD Zen 2 CPUs
  * Fix CMake
  * Add CMake
  * Add CMake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597320000">- Update to version 0.5.0+git.20200528:
  * Related to c2645d0. Convert all python scripts to Python 3.
  * Add Downloads section on Readme.md Close #140
  * Add I-Nex to the users list</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 0.5.0+git.20201019:
  * Fixes issue #148: CMake build script not in 0.5.0 tarball release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606219200">- Update to version 0.5.0+git.20201114:
  * Tests: fix path for cpuid_tool When we use CMake, the 'cpuid_tool' binary is in the 'build' directory
  * DB: add Vermeer https://en.wikichip.org/wiki/amd/cores/vermeer Test file converted from http://users.atw.hu/instlatx64/AuthenticAMD/AuthenticAMD0A20F10_K19_Vermeer_CPUID1.txt
  * DB: add Gemini Lake https://en.wikichip.org/wiki/intel/cores/gemini_lake Reported in X0rg/CPU-X#164
  * DB: add Comet Lake-U https://en.wikipedia.org/wiki/Comet_Lake_(microprocessor)#U-series_(Medium_power) Reported in X0rg/CPU-X#162
  * DB: add Kaby Lake-G https://en.wikichip.org/wiki/intel/cores/kaby_lake_g Test file converted from http://users.atw.hu/instlatx64/GenuineIntel/GenuineIntel00906E9_KabylakeG_CPUID.txt
  * DB: add Kaby Lake Refresh https://en.wikichip.org/wiki/intel/cores/kaby_lake_r Core i5 8250U was detected as Coffee Lake wrongly. Reported in X0rg/CPU-X#161</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616760000">- Update to version 0.5.1+git.1616323866:
  * Doxygen: remove deprecated option
  * Release version 0.5.1 (#151)
  * Tests: fix truncation warnings in convert_instlatx64
  * Fix warning with a comment
  * DB: add Rocket Lake
  * DB: add Milan
  * Tests: fix --create argument in convert_instlatx64 tool
  * DB: add Cezanne
  * DB: add Xeon E3 1275
  * CI: use microsoft/setup-msbuild@v1.0.2
  * CI: fix deprecated commands
  * Tests: add Core i5 8265U (Whiskey Lake-U)
  * DB: add Whiskey Lake-U</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1630065600">- Update to version 0.5.1+git.1626502835:
  * CMake: reduce min cmake requirement 3.14 -&gt; 3.13
  * Fix failing CI builds introduced by cb5fdd1
  * Use popcount64 from libc when available (#152)
  * allow to build either static or shared (#156)
  * cmake: allow libcpuid to be added as a CMake subproject (#155)
  * fix installation of BUNDLE if iOS (#154)
  * cmake: add an option to build tests (#153)
  * Fix #150: CPU Family/Model is used as Ext.Family/Model
  * DB: add Tiger Lake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644408000">- Update to version 0.5.1+git.1644144775:
  * Tests: add more Zen2 tests from InstLatx64
  * DB: add Lucienne
  * Report memory allocation failures without segfaulting. (#160)
  * Don't link with msrdriver.c on non-Windows platform. (#159)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 0.6.0:
  * Support for AMD Rembrandt
  * Support for AMD Warhol
  * Remove Debian package from source tree (#165)
  * Fix build under Clang 15 (#167)
  * Support for AMD Athlon Godavari
  * Support for hybrid CPU like Intel Alder Lake (#166)
  * Detect presence of hypervisor (#169)
  * Decode deterministic cache info for AMD CPUs (#168)
  * Add cache instances field in cpu_id_t and system_id_t (#168)
  * Support AMD Bald Eagle
  * Support for more AMD Godavari (Athlon)
  * Rename AMD Bulldozer to Zambezi
  * Support for AMD Interlagos
  * Support for AMD Abu Dhabi
  * Support for AMD Beema
  * Support for AMD Steppe Eagle
  * Support for more AMD Kabini (Sempron + Athlon)
  * Improve msr_serialize_raw_data()
  * Support for AMD Zen 2 custom APU for Steam Deck</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665576000">- Add missing dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- update to 0.6.2:
  * Support for AMD Raphael
  * Support for AMD Dali
  * Support for AMD Van Gogh
  * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172)
  * Remove AMD Warhol from DB (Zen3+ cancelled)
  * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175)
  * Fix shared library symlinks with CMake (#174)
  * Support for Intel Raptor Lake-S
  * Fix segmentation fault in cpu_identify_all() for single-core CPUs
  * Support for Intel Penryn L
  * Support for Intel Tremont
  * Support for AMD Mendocino
  * Support for Intel Ice Lake (Xeon-D)
  * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S)
  * Support for AMD Athlon 64 Sherman</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682424000">- Update to version 0.6.3:
  * Support for Intel Pentium and Celeron for Alder Lake-S
  * Support for Intel Alder Lake-HX
  * Support for Intel Alder Lake-X
  * Fix detection of Intel Alder Lake-P
  * Fix infinite loop in set_cpu_affinity() on macOS
  * Fix a misprint of extended CPUID in cpuid_basic_identify()
  * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184)
  * Query CPU info at least once even if set_cpu_affinity() fails
  * Support for AMD 19h family MSRs
  * Fix detection of Intel Core i5 Lynnfield
  * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188)
  * Support for Intel Alder Lake-N
  * Support for AMD Rembrandt with Radeon Graphics
  * Support for Intel Raptor Lake-S with "Golden Cove" cores
  * Support for Intel Raptor Lake-P
  * Support for Intel Raptor Lake-U
  * Support for Intel Rocket Lake-E</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 0.6.4
  * Support for AMD Genoa, Phoenix, Dragon Range, Ryzen Z1
  * Support for Intel Sapphire Rapids-WS, Skylake (server),
    Cascade Lake, Ice-Lake (server), Sapphire Rapids-SP,
    Raptor Lake-H/HX, Apollo lake
  * Improve support for Arrandale, Alder-Lake and Raptor-Lake P/U
  * Initial support for Centaur CPUs (VIA and Zhaoxin)</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719576000">- update to release 0.6.5
  * Support for Intel Bay Trail-M
  * Support for Intel Bay Trail-T
  * Support for Intel Bay Trail-D
  * Support for AMD Storm Peak
  * Support for Intel Raport Lake Refresh
  * Support heterogeneous RAW dumps in cpu_identify_all()
  * Support for Intel Meteor Lake, including detection of LP E-Cores
  * Support for Intel Emerald Rapids-SP
  * Support for more AMD Van Gogh</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1725796800">- update to 0.7.0:
  * Version 0.7.0 (2024-08-26):
  * Fix handle leaks in rdmsr.c (#199)
  * Fix cpuid_get_hypervisor when NULL data is provided (#199)
  * Prevent intel_fn11 array overruns (#199)
  * Support for AMD Hawk Point
  * Support for more AMD Phoenix (8000 series)
  * Add cpu_clock_by_tsc() function to the library (#124)
  * Check x86 CPUs MSR support (#185)
  * Add support for ARM CPUs (AArch32 + AArch64) (#200)
  * Add cpu_feature_level_t enumerated values for x86 CPUs (#177)
  * Support up to 4 subleaf entries for CPUID leaf 0x80000026
    (#189)
  * Support for Extended CPU topology subleaf in
    cpuid_identify_purpose_amd() (#189)
  * Support CPU purpose for AMD x86 CPUs (#189)
  * Add cpuid Linux and FreeBSD kernel modules for ARM CPUs
  * Improve errors handling in cpuid_get_all_raw_data() and
    cpuid_get_raw_data_core() (#202)
  * Support get_total_cpus() on DragonFly BSD
  * Improve set_cpu_affinity() on NetBSD
  * Fix build on OpenBSD
  * Improve behavior when CPU affinity cannot be set
  * Fix a regression in cpuid_tool about arguments doing nothing
    (like --rdmsr or --cpuid)
  * Fix a segmentation fault when using --quiet in cpuid_tool
  * Improve error handling in cpu_identify_all()
  * Add Python bindings (#197)
  * Support for AMD Granite Ridge
  * Support for AMD Strix Point
  * Detect x2APIC and AVX512 features for AMD x86 CPUs</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1733313600">- Update to version 0.7.1:
  * Fix cpuid kernel module build on ARM
  * Return ERR_NO_CPUID when cpuid kernel module cannot be used on AArch32
  * state
  * Refactor the build of the bindings (#203)
  * Fix build error on AArch64 when HWCAP_CPUID is not defined (#205)
  * Fix build on Windows ARM with MSVC (206)
  * Fix detection of Intel Meteor Lake
  * Support for Intel Arrow Lake
  * Support for AMD Turin</changelog>
</package>
<package pkgid="b18b61a7cd49b7607b1ac6094077d4795a7f953e6964995fe1255883b3da141d" name="libcpuid-devel" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1480334400">- Update to version 0.4.0:
  * A backwards-incompatible change, since the sizeof
    cpu_raw_data_t and cpu_id_t are now different.
  * Better detection of AMD clock multiplier with msrinfo.
  * Support for Intel SGX detection
- Some packaging cleanups
  * Use url as source
  * Split binary from devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Enable internal tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 0.4.1:
  * Better support for Skylake Core i5 (#76)
  * Misdiagnosis microarchitecture for i3-3220T (#81)
  * Ability to dump MSR values to a file (PR #82)
  * AMD Ryzen support (#86)
  * Support for Coffee and Kaby Lake (#104)
  * Support for Raven Ridge and Threadripper (#106)
  * Support for Pinnacle Ridge (#111)
  * Fix P-III Celeron misdetection
  * Support for Skylake-X (#116)
  * Support for Zen+ Threadripper</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550232000">- Use noun phrase in summaries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579780800">- Update to version 0.4.1+git.20200102:
  * DB: Add Threadripper (Castle Peak)
  * Fix compilation on non-x86/ARM architectures.
  * Add support for get_total_cpus on Haiku.
  * Some typo fixes in human readable text.
  * Add Xeon CLX (Cascade lake-based) using data from PR #129
  * add support to feature intel avx512_vnni
  * AARCH64 stub
  * Ignore convert_instlatx64 binary
  * add Hygon Dhyana C86 7seris test file
  * Add Hygon Dhyana detect support
- Switch to _service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version v0.5.0+git.20200526:
  * CI: remove 'v' prefix in assets
  * CI: checkout sources before making release
  * Release version 0.5.0 (#146)
  * Add GitHub workflows for CI/CD - CI: it will check code consistency and run tests for all events (except for tags) - CD: it will build all assets and create a draft Close #122
  * check-consistency: return error count
  * Fix code consistency Result before this patch:
  * CMake: fix include directory
  * CMake: fix build on Windows
  * CMake: fix install target's export
  * tests: fix unused-result warning in convert_instlatx64 tool
  * Update .gitignore
  * CMake: fix Unix install and format
  * Add config file for cmake-format It formats CMakeLists.txt files See https://github.com/cheshirekow/cmake_format
  * Doxygen: upgrade Doxyfile to avoid warnings warning: Tag 'PERL_PATH' at line 1032 of file '/libcpuid/build/libcpuid/Doxyfile' has become obsolete. To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u" warning: argument 'a4wide' for option PAPER_TYPE is not a valid enum value Using the default: a4!
  * Doxygen: turn on quiet mode It is too noisy with CMake
  * Detect AVX512VBMI and AVX512VBMI2 features on Intel CPUs More information: https://en.wikichip.org/wiki/x86/avx-512 Resolve #134
  * Detect ABM feature on Intel CPUs Resolve #144
  * Detect RDSEED/ADX/SHA_NI features on AMD CPUs These x86 instruction set extensions are present since Zen micro-architecture Resolve #145
  * Update cpuid_main.c
  * DB: add Ivy Bridge-E (Xeon)
  * Tests: update all tests to add fields for L1I
  * Tests: update to add L1I information Related to 25d0614811991c855ce7db0d898dbc6200dfa840 Dump of Core i5 520m from CPU-X#119
  * Add L1 Instruction Cache information Some CPUs does not have the same associativity for L1D and L1I, as reported in X0rg/CPU-X#119 It adds l1_instruction_assoc and l1_instruction_cacheline in cpu_id_t To avoid confusing, also adds l1_data_assoc and l1_data_cacheline l1_assoc and l1_cacheline are leave untouched for backward compatibility
  * Ignore .vscode directory Yes, 0b05f45e03b0aa39a65eba9451b59c9381e8474c was about VS Code
  * Tests: add amd_fn8000001dh subleaf See e562798cecf4af852fdfef4b0e7bf159a5d9b4de
  * Tests: parse subleafs in convert_instlatx64 Also, it adds 0xffffffff when data is not available, so all lines are presents
  * Re-fix L3 cache associativity detection on AMD Zen 2 CPUs Previous commit: 848394ee460c70298f91569d33f2c156bddb0f6c
  * Applied a patch from @tavplubix
  * Use constant for registers name It helps when reading technical documentation and it avoids 'magic values'
  * Remove all trailling spaces It is annoying with some text editors
  * DB: fix Rome extended model
  * DB: add Renoir APUs
  * Tests: add Core i5 8250U Related to X0rg/CPU-X#129
  * DB: add Ice Lake CPUs
  * DB: add Comet Lake CPUs
  * DB: add Coffee Lake Refresh It differs from Coffee Lake by stepping Core i5 9400 and 9500 will still be detected as Coffee Lake because it only differs by revision...
  * DB: add Coffee Lake-U It differs from Kaby Lake-U by stepping
  * DB: add Cannon Lake CPUs
  * DB: clarify Intel Generations
  * tests: remove duplicate addresses in RAW part
  * tests: fix convert_instlatx64 tool
  * Fix L3 cache associativity detection on AMD Zen 2 CPUs
  * Fix CMake
  * Add CMake
  * Add CMake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597320000">- Update to version 0.5.0+git.20200528:
  * Related to c2645d0. Convert all python scripts to Python 3.
  * Add Downloads section on Readme.md Close #140
  * Add I-Nex to the users list</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 0.5.0+git.20201019:
  * Fixes issue #148: CMake build script not in 0.5.0 tarball release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606219200">- Update to version 0.5.0+git.20201114:
  * Tests: fix path for cpuid_tool When we use CMake, the 'cpuid_tool' binary is in the 'build' directory
  * DB: add Vermeer https://en.wikichip.org/wiki/amd/cores/vermeer Test file converted from http://users.atw.hu/instlatx64/AuthenticAMD/AuthenticAMD0A20F10_K19_Vermeer_CPUID1.txt
  * DB: add Gemini Lake https://en.wikichip.org/wiki/intel/cores/gemini_lake Reported in X0rg/CPU-X#164
  * DB: add Comet Lake-U https://en.wikipedia.org/wiki/Comet_Lake_(microprocessor)#U-series_(Medium_power) Reported in X0rg/CPU-X#162
  * DB: add Kaby Lake-G https://en.wikichip.org/wiki/intel/cores/kaby_lake_g Test file converted from http://users.atw.hu/instlatx64/GenuineIntel/GenuineIntel00906E9_KabylakeG_CPUID.txt
  * DB: add Kaby Lake Refresh https://en.wikichip.org/wiki/intel/cores/kaby_lake_r Core i5 8250U was detected as Coffee Lake wrongly. Reported in X0rg/CPU-X#161</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616760000">- Update to version 0.5.1+git.1616323866:
  * Doxygen: remove deprecated option
  * Release version 0.5.1 (#151)
  * Tests: fix truncation warnings in convert_instlatx64
  * Fix warning with a comment
  * DB: add Rocket Lake
  * DB: add Milan
  * Tests: fix --create argument in convert_instlatx64 tool
  * DB: add Cezanne
  * DB: add Xeon E3 1275
  * CI: use microsoft/setup-msbuild@v1.0.2
  * CI: fix deprecated commands
  * Tests: add Core i5 8265U (Whiskey Lake-U)
  * DB: add Whiskey Lake-U</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1630065600">- Update to version 0.5.1+git.1626502835:
  * CMake: reduce min cmake requirement 3.14 -&gt; 3.13
  * Fix failing CI builds introduced by cb5fdd1
  * Use popcount64 from libc when available (#152)
  * allow to build either static or shared (#156)
  * cmake: allow libcpuid to be added as a CMake subproject (#155)
  * fix installation of BUNDLE if iOS (#154)
  * cmake: add an option to build tests (#153)
  * Fix #150: CPU Family/Model is used as Ext.Family/Model
  * DB: add Tiger Lake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644408000">- Update to version 0.5.1+git.1644144775:
  * Tests: add more Zen2 tests from InstLatx64
  * DB: add Lucienne
  * Report memory allocation failures without segfaulting. (#160)
  * Don't link with msrdriver.c on non-Windows platform. (#159)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 0.6.0:
  * Support for AMD Rembrandt
  * Support for AMD Warhol
  * Remove Debian package from source tree (#165)
  * Fix build under Clang 15 (#167)
  * Support for AMD Athlon Godavari
  * Support for hybrid CPU like Intel Alder Lake (#166)
  * Detect presence of hypervisor (#169)
  * Decode deterministic cache info for AMD CPUs (#168)
  * Add cache instances field in cpu_id_t and system_id_t (#168)
  * Support AMD Bald Eagle
  * Support for more AMD Godavari (Athlon)
  * Rename AMD Bulldozer to Zambezi
  * Support for AMD Interlagos
  * Support for AMD Abu Dhabi
  * Support for AMD Beema
  * Support for AMD Steppe Eagle
  * Support for more AMD Kabini (Sempron + Athlon)
  * Improve msr_serialize_raw_data()
  * Support for AMD Zen 2 custom APU for Steam Deck</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665576000">- Add missing dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- update to 0.6.2:
  * Support for AMD Raphael
  * Support for AMD Dali
  * Support for AMD Van Gogh
  * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172)
  * Remove AMD Warhol from DB (Zen3+ cancelled)
  * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175)
  * Fix shared library symlinks with CMake (#174)
  * Support for Intel Raptor Lake-S
  * Fix segmentation fault in cpu_identify_all() for single-core CPUs
  * Support for Intel Penryn L
  * Support for Intel Tremont
  * Support for AMD Mendocino
  * Support for Intel Ice Lake (Xeon-D)
  * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S)
  * Support for AMD Athlon 64 Sherman</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682424000">- Update to version 0.6.3:
  * Support for Intel Pentium and Celeron for Alder Lake-S
  * Support for Intel Alder Lake-HX
  * Support for Intel Alder Lake-X
  * Fix detection of Intel Alder Lake-P
  * Fix infinite loop in set_cpu_affinity() on macOS
  * Fix a misprint of extended CPUID in cpuid_basic_identify()
  * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184)
  * Query CPU info at least once even if set_cpu_affinity() fails
  * Support for AMD 19h family MSRs
  * Fix detection of Intel Core i5 Lynnfield
  * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188)
  * Support for Intel Alder Lake-N
  * Support for AMD Rembrandt with Radeon Graphics
  * Support for Intel Raptor Lake-S with "Golden Cove" cores
  * Support for Intel Raptor Lake-P
  * Support for Intel Raptor Lake-U
  * Support for Intel Rocket Lake-E</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 0.6.4
  * Support for AMD Genoa, Phoenix, Dragon Range, Ryzen Z1
  * Support for Intel Sapphire Rapids-WS, Skylake (server),
    Cascade Lake, Ice-Lake (server), Sapphire Rapids-SP,
    Raptor Lake-H/HX, Apollo lake
  * Improve support for Arrandale, Alder-Lake and Raptor-Lake P/U
  * Initial support for Centaur CPUs (VIA and Zhaoxin)</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719576000">- update to release 0.6.5
  * Support for Intel Bay Trail-M
  * Support for Intel Bay Trail-T
  * Support for Intel Bay Trail-D
  * Support for AMD Storm Peak
  * Support for Intel Raport Lake Refresh
  * Support heterogeneous RAW dumps in cpu_identify_all()
  * Support for Intel Meteor Lake, including detection of LP E-Cores
  * Support for Intel Emerald Rapids-SP
  * Support for more AMD Van Gogh</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1725796800">- update to 0.7.0:
  * Version 0.7.0 (2024-08-26):
  * Fix handle leaks in rdmsr.c (#199)
  * Fix cpuid_get_hypervisor when NULL data is provided (#199)
  * Prevent intel_fn11 array overruns (#199)
  * Support for AMD Hawk Point
  * Support for more AMD Phoenix (8000 series)
  * Add cpu_clock_by_tsc() function to the library (#124)
  * Check x86 CPUs MSR support (#185)
  * Add support for ARM CPUs (AArch32 + AArch64) (#200)
  * Add cpu_feature_level_t enumerated values for x86 CPUs (#177)
  * Support up to 4 subleaf entries for CPUID leaf 0x80000026
    (#189)
  * Support for Extended CPU topology subleaf in
    cpuid_identify_purpose_amd() (#189)
  * Support CPU purpose for AMD x86 CPUs (#189)
  * Add cpuid Linux and FreeBSD kernel modules for ARM CPUs
  * Improve errors handling in cpuid_get_all_raw_data() and
    cpuid_get_raw_data_core() (#202)
  * Support get_total_cpus() on DragonFly BSD
  * Improve set_cpu_affinity() on NetBSD
  * Fix build on OpenBSD
  * Improve behavior when CPU affinity cannot be set
  * Fix a regression in cpuid_tool about arguments doing nothing
    (like --rdmsr or --cpuid)
  * Fix a segmentation fault when using --quiet in cpuid_tool
  * Improve error handling in cpu_identify_all()
  * Add Python bindings (#197)
  * Support for AMD Granite Ridge
  * Support for AMD Strix Point
  * Detect x2APIC and AVX512 features for AMD x86 CPUs</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1733313600">- Update to version 0.7.1:
  * Fix cpuid kernel module build on ARM
  * Return ERR_NO_CPUID when cpuid kernel module cannot be used on AArch32
  * state
  * Refactor the build of the bindings (#203)
  * Fix build error on AArch64 when HWCAP_CPUID is not defined (#205)
  * Fix build on Windows ARM with MSVC (206)
  * Fix detection of Intel Meteor Lake
  * Support for Intel Arrow Lake
  * Support for AMD Turin</changelog>
</package>
<package pkgid="05403011000b9243d6c2ec50481ed77bc98f0e3c1a2641d98f61a21851056430" name="libcpuid-tools" arch="aarch64">
  <version epoch="0" ver="0.7.1" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1480334400">- Update to version 0.4.0:
  * A backwards-incompatible change, since the sizeof
    cpu_raw_data_t and cpu_id_t are now different.
  * Better detection of AMD clock multiplier with msrinfo.
  * Support for Intel SGX detection
- Some packaging cleanups
  * Use url as source
  * Split binary from devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Enable internal tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 0.4.1:
  * Better support for Skylake Core i5 (#76)
  * Misdiagnosis microarchitecture for i3-3220T (#81)
  * Ability to dump MSR values to a file (PR #82)
  * AMD Ryzen support (#86)
  * Support for Coffee and Kaby Lake (#104)
  * Support for Raven Ridge and Threadripper (#106)
  * Support for Pinnacle Ridge (#111)
  * Fix P-III Celeron misdetection
  * Support for Skylake-X (#116)
  * Support for Zen+ Threadripper</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550232000">- Use noun phrase in summaries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579780800">- Update to version 0.4.1+git.20200102:
  * DB: Add Threadripper (Castle Peak)
  * Fix compilation on non-x86/ARM architectures.
  * Add support for get_total_cpus on Haiku.
  * Some typo fixes in human readable text.
  * Add Xeon CLX (Cascade lake-based) using data from PR #129
  * add support to feature intel avx512_vnni
  * AARCH64 stub
  * Ignore convert_instlatx64 binary
  * add Hygon Dhyana C86 7seris test file
  * Add Hygon Dhyana detect support
- Switch to _service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version v0.5.0+git.20200526:
  * CI: remove 'v' prefix in assets
  * CI: checkout sources before making release
  * Release version 0.5.0 (#146)
  * Add GitHub workflows for CI/CD - CI: it will check code consistency and run tests for all events (except for tags) - CD: it will build all assets and create a draft Close #122
  * check-consistency: return error count
  * Fix code consistency Result before this patch:
  * CMake: fix include directory
  * CMake: fix build on Windows
  * CMake: fix install target's export
  * tests: fix unused-result warning in convert_instlatx64 tool
  * Update .gitignore
  * CMake: fix Unix install and format
  * Add config file for cmake-format It formats CMakeLists.txt files See https://github.com/cheshirekow/cmake_format
  * Doxygen: upgrade Doxyfile to avoid warnings warning: Tag 'PERL_PATH' at line 1032 of file '/libcpuid/build/libcpuid/Doxyfile' has become obsolete. To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u" warning: argument 'a4wide' for option PAPER_TYPE is not a valid enum value Using the default: a4!
  * Doxygen: turn on quiet mode It is too noisy with CMake
  * Detect AVX512VBMI and AVX512VBMI2 features on Intel CPUs More information: https://en.wikichip.org/wiki/x86/avx-512 Resolve #134
  * Detect ABM feature on Intel CPUs Resolve #144
  * Detect RDSEED/ADX/SHA_NI features on AMD CPUs These x86 instruction set extensions are present since Zen micro-architecture Resolve #145
  * Update cpuid_main.c
  * DB: add Ivy Bridge-E (Xeon)
  * Tests: update all tests to add fields for L1I
  * Tests: update to add L1I information Related to 25d0614811991c855ce7db0d898dbc6200dfa840 Dump of Core i5 520m from CPU-X#119
  * Add L1 Instruction Cache information Some CPUs does not have the same associativity for L1D and L1I, as reported in X0rg/CPU-X#119 It adds l1_instruction_assoc and l1_instruction_cacheline in cpu_id_t To avoid confusing, also adds l1_data_assoc and l1_data_cacheline l1_assoc and l1_cacheline are leave untouched for backward compatibility
  * Ignore .vscode directory Yes, 0b05f45e03b0aa39a65eba9451b59c9381e8474c was about VS Code
  * Tests: add amd_fn8000001dh subleaf See e562798cecf4af852fdfef4b0e7bf159a5d9b4de
  * Tests: parse subleafs in convert_instlatx64 Also, it adds 0xffffffff when data is not available, so all lines are presents
  * Re-fix L3 cache associativity detection on AMD Zen 2 CPUs Previous commit: 848394ee460c70298f91569d33f2c156bddb0f6c
  * Applied a patch from @tavplubix
  * Use constant for registers name It helps when reading technical documentation and it avoids 'magic values'
  * Remove all trailling spaces It is annoying with some text editors
  * DB: fix Rome extended model
  * DB: add Renoir APUs
  * Tests: add Core i5 8250U Related to X0rg/CPU-X#129
  * DB: add Ice Lake CPUs
  * DB: add Comet Lake CPUs
  * DB: add Coffee Lake Refresh It differs from Coffee Lake by stepping Core i5 9400 and 9500 will still be detected as Coffee Lake because it only differs by revision...
  * DB: add Coffee Lake-U It differs from Kaby Lake-U by stepping
  * DB: add Cannon Lake CPUs
  * DB: clarify Intel Generations
  * tests: remove duplicate addresses in RAW part
  * tests: fix convert_instlatx64 tool
  * Fix L3 cache associativity detection on AMD Zen 2 CPUs
  * Fix CMake
  * Add CMake
  * Add CMake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597320000">- Update to version 0.5.0+git.20200528:
  * Related to c2645d0. Convert all python scripts to Python 3.
  * Add Downloads section on Readme.md Close #140
  * Add I-Nex to the users list</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 0.5.0+git.20201019:
  * Fixes issue #148: CMake build script not in 0.5.0 tarball release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606219200">- Update to version 0.5.0+git.20201114:
  * Tests: fix path for cpuid_tool When we use CMake, the 'cpuid_tool' binary is in the 'build' directory
  * DB: add Vermeer https://en.wikichip.org/wiki/amd/cores/vermeer Test file converted from http://users.atw.hu/instlatx64/AuthenticAMD/AuthenticAMD0A20F10_K19_Vermeer_CPUID1.txt
  * DB: add Gemini Lake https://en.wikichip.org/wiki/intel/cores/gemini_lake Reported in X0rg/CPU-X#164
  * DB: add Comet Lake-U https://en.wikipedia.org/wiki/Comet_Lake_(microprocessor)#U-series_(Medium_power) Reported in X0rg/CPU-X#162
  * DB: add Kaby Lake-G https://en.wikichip.org/wiki/intel/cores/kaby_lake_g Test file converted from http://users.atw.hu/instlatx64/GenuineIntel/GenuineIntel00906E9_KabylakeG_CPUID.txt
  * DB: add Kaby Lake Refresh https://en.wikichip.org/wiki/intel/cores/kaby_lake_r Core i5 8250U was detected as Coffee Lake wrongly. Reported in X0rg/CPU-X#161</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616760000">- Update to version 0.5.1+git.1616323866:
  * Doxygen: remove deprecated option
  * Release version 0.5.1 (#151)
  * Tests: fix truncation warnings in convert_instlatx64
  * Fix warning with a comment
  * DB: add Rocket Lake
  * DB: add Milan
  * Tests: fix --create argument in convert_instlatx64 tool
  * DB: add Cezanne
  * DB: add Xeon E3 1275
  * CI: use microsoft/setup-msbuild@v1.0.2
  * CI: fix deprecated commands
  * Tests: add Core i5 8265U (Whiskey Lake-U)
  * DB: add Whiskey Lake-U</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1630065600">- Update to version 0.5.1+git.1626502835:
  * CMake: reduce min cmake requirement 3.14 -&gt; 3.13
  * Fix failing CI builds introduced by cb5fdd1
  * Use popcount64 from libc when available (#152)
  * allow to build either static or shared (#156)
  * cmake: allow libcpuid to be added as a CMake subproject (#155)
  * fix installation of BUNDLE if iOS (#154)
  * cmake: add an option to build tests (#153)
  * Fix #150: CPU Family/Model is used as Ext.Family/Model
  * DB: add Tiger Lake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644408000">- Update to version 0.5.1+git.1644144775:
  * Tests: add more Zen2 tests from InstLatx64
  * DB: add Lucienne
  * Report memory allocation failures without segfaulting. (#160)
  * Don't link with msrdriver.c on non-Windows platform. (#159)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 0.6.0:
  * Support for AMD Rembrandt
  * Support for AMD Warhol
  * Remove Debian package from source tree (#165)
  * Fix build under Clang 15 (#167)
  * Support for AMD Athlon Godavari
  * Support for hybrid CPU like Intel Alder Lake (#166)
  * Detect presence of hypervisor (#169)
  * Decode deterministic cache info for AMD CPUs (#168)
  * Add cache instances field in cpu_id_t and system_id_t (#168)
  * Support AMD Bald Eagle
  * Support for more AMD Godavari (Athlon)
  * Rename AMD Bulldozer to Zambezi
  * Support for AMD Interlagos
  * Support for AMD Abu Dhabi
  * Support for AMD Beema
  * Support for AMD Steppe Eagle
  * Support for more AMD Kabini (Sempron + Athlon)
  * Improve msr_serialize_raw_data()
  * Support for AMD Zen 2 custom APU for Steam Deck</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665576000">- Add missing dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- update to 0.6.2:
  * Support for AMD Raphael
  * Support for AMD Dali
  * Support for AMD Van Gogh
  * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172)
  * Remove AMD Warhol from DB (Zen3+ cancelled)
  * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175)
  * Fix shared library symlinks with CMake (#174)
  * Support for Intel Raptor Lake-S
  * Fix segmentation fault in cpu_identify_all() for single-core CPUs
  * Support for Intel Penryn L
  * Support for Intel Tremont
  * Support for AMD Mendocino
  * Support for Intel Ice Lake (Xeon-D)
  * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S)
  * Support for AMD Athlon 64 Sherman</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682424000">- Update to version 0.6.3:
  * Support for Intel Pentium and Celeron for Alder Lake-S
  * Support for Intel Alder Lake-HX
  * Support for Intel Alder Lake-X
  * Fix detection of Intel Alder Lake-P
  * Fix infinite loop in set_cpu_affinity() on macOS
  * Fix a misprint of extended CPUID in cpuid_basic_identify()
  * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184)
  * Query CPU info at least once even if set_cpu_affinity() fails
  * Support for AMD 19h family MSRs
  * Fix detection of Intel Core i5 Lynnfield
  * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188)
  * Support for Intel Alder Lake-N
  * Support for AMD Rembrandt with Radeon Graphics
  * Support for Intel Raptor Lake-S with "Golden Cove" cores
  * Support for Intel Raptor Lake-P
  * Support for Intel Raptor Lake-U
  * Support for Intel Rocket Lake-E</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 0.6.4
  * Support for AMD Genoa, Phoenix, Dragon Range, Ryzen Z1
  * Support for Intel Sapphire Rapids-WS, Skylake (server),
    Cascade Lake, Ice-Lake (server), Sapphire Rapids-SP,
    Raptor Lake-H/HX, Apollo lake
  * Improve support for Arrandale, Alder-Lake and Raptor-Lake P/U
  * Initial support for Centaur CPUs (VIA and Zhaoxin)</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719576000">- update to release 0.6.5
  * Support for Intel Bay Trail-M
  * Support for Intel Bay Trail-T
  * Support for Intel Bay Trail-D
  * Support for AMD Storm Peak
  * Support for Intel Raport Lake Refresh
  * Support heterogeneous RAW dumps in cpu_identify_all()
  * Support for Intel Meteor Lake, including detection of LP E-Cores
  * Support for Intel Emerald Rapids-SP
  * Support for more AMD Van Gogh</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1725796800">- update to 0.7.0:
  * Version 0.7.0 (2024-08-26):
  * Fix handle leaks in rdmsr.c (#199)
  * Fix cpuid_get_hypervisor when NULL data is provided (#199)
  * Prevent intel_fn11 array overruns (#199)
  * Support for AMD Hawk Point
  * Support for more AMD Phoenix (8000 series)
  * Add cpu_clock_by_tsc() function to the library (#124)
  * Check x86 CPUs MSR support (#185)
  * Add support for ARM CPUs (AArch32 + AArch64) (#200)
  * Add cpu_feature_level_t enumerated values for x86 CPUs (#177)
  * Support up to 4 subleaf entries for CPUID leaf 0x80000026
    (#189)
  * Support for Extended CPU topology subleaf in
    cpuid_identify_purpose_amd() (#189)
  * Support CPU purpose for AMD x86 CPUs (#189)
  * Add cpuid Linux and FreeBSD kernel modules for ARM CPUs
  * Improve errors handling in cpuid_get_all_raw_data() and
    cpuid_get_raw_data_core() (#202)
  * Support get_total_cpus() on DragonFly BSD
  * Improve set_cpu_affinity() on NetBSD
  * Fix build on OpenBSD
  * Improve behavior when CPU affinity cannot be set
  * Fix a regression in cpuid_tool about arguments doing nothing
    (like --rdmsr or --cpuid)
  * Fix a segmentation fault when using --quiet in cpuid_tool
  * Improve error handling in cpu_identify_all()
  * Add Python bindings (#197)
  * Support for AMD Granite Ridge
  * Support for AMD Strix Point
  * Detect x2APIC and AVX512 features for AMD x86 CPUs</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1733313600">- Update to version 0.7.1:
  * Fix cpuid kernel module build on ARM
  * Return ERR_NO_CPUID when cpuid kernel module cannot be used on AArch32
  * state
  * Refactor the build of the bindings (#203)
  * Fix build error on AArch64 when HWCAP_CPUID is not defined (#205)
  * Fix build on Windows ARM with MSVC (206)
  * Fix detection of Intel Meteor Lake
  * Support for Intel Arrow Lake
  * Support for AMD Turin</changelog>
</package>
<package pkgid="1cb8b56adb8c0249b044eb91d71b29cd6902cb75c90a71465be28efe9f76582a" name="libcpuid-tools" arch="i586">
  <version epoch="0" ver="0.7.1" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1480334400">- Update to version 0.4.0:
  * A backwards-incompatible change, since the sizeof
    cpu_raw_data_t and cpu_id_t are now different.
  * Better detection of AMD clock multiplier with msrinfo.
  * Support for Intel SGX detection
- Some packaging cleanups
  * Use url as source
  * Split binary from devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Enable internal tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 0.4.1:
  * Better support for Skylake Core i5 (#76)
  * Misdiagnosis microarchitecture for i3-3220T (#81)
  * Ability to dump MSR values to a file (PR #82)
  * AMD Ryzen support (#86)
  * Support for Coffee and Kaby Lake (#104)
  * Support for Raven Ridge and Threadripper (#106)
  * Support for Pinnacle Ridge (#111)
  * Fix P-III Celeron misdetection
  * Support for Skylake-X (#116)
  * Support for Zen+ Threadripper</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550232000">- Use noun phrase in summaries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579780800">- Update to version 0.4.1+git.20200102:
  * DB: Add Threadripper (Castle Peak)
  * Fix compilation on non-x86/ARM architectures.
  * Add support for get_total_cpus on Haiku.
  * Some typo fixes in human readable text.
  * Add Xeon CLX (Cascade lake-based) using data from PR #129
  * add support to feature intel avx512_vnni
  * AARCH64 stub
  * Ignore convert_instlatx64 binary
  * add Hygon Dhyana C86 7seris test file
  * Add Hygon Dhyana detect support
- Switch to _service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version v0.5.0+git.20200526:
  * CI: remove 'v' prefix in assets
  * CI: checkout sources before making release
  * Release version 0.5.0 (#146)
  * Add GitHub workflows for CI/CD - CI: it will check code consistency and run tests for all events (except for tags) - CD: it will build all assets and create a draft Close #122
  * check-consistency: return error count
  * Fix code consistency Result before this patch:
  * CMake: fix include directory
  * CMake: fix build on Windows
  * CMake: fix install target's export
  * tests: fix unused-result warning in convert_instlatx64 tool
  * Update .gitignore
  * CMake: fix Unix install and format
  * Add config file for cmake-format It formats CMakeLists.txt files See https://github.com/cheshirekow/cmake_format
  * Doxygen: upgrade Doxyfile to avoid warnings warning: Tag 'PERL_PATH' at line 1032 of file '/libcpuid/build/libcpuid/Doxyfile' has become obsolete. To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u" warning: argument 'a4wide' for option PAPER_TYPE is not a valid enum value Using the default: a4!
  * Doxygen: turn on quiet mode It is too noisy with CMake
  * Detect AVX512VBMI and AVX512VBMI2 features on Intel CPUs More information: https://en.wikichip.org/wiki/x86/avx-512 Resolve #134
  * Detect ABM feature on Intel CPUs Resolve #144
  * Detect RDSEED/ADX/SHA_NI features on AMD CPUs These x86 instruction set extensions are present since Zen micro-architecture Resolve #145
  * Update cpuid_main.c
  * DB: add Ivy Bridge-E (Xeon)
  * Tests: update all tests to add fields for L1I
  * Tests: update to add L1I information Related to 25d0614811991c855ce7db0d898dbc6200dfa840 Dump of Core i5 520m from CPU-X#119
  * Add L1 Instruction Cache information Some CPUs does not have the same associativity for L1D and L1I, as reported in X0rg/CPU-X#119 It adds l1_instruction_assoc and l1_instruction_cacheline in cpu_id_t To avoid confusing, also adds l1_data_assoc and l1_data_cacheline l1_assoc and l1_cacheline are leave untouched for backward compatibility
  * Ignore .vscode directory Yes, 0b05f45e03b0aa39a65eba9451b59c9381e8474c was about VS Code
  * Tests: add amd_fn8000001dh subleaf See e562798cecf4af852fdfef4b0e7bf159a5d9b4de
  * Tests: parse subleafs in convert_instlatx64 Also, it adds 0xffffffff when data is not available, so all lines are presents
  * Re-fix L3 cache associativity detection on AMD Zen 2 CPUs Previous commit: 848394ee460c70298f91569d33f2c156bddb0f6c
  * Applied a patch from @tavplubix
  * Use constant for registers name It helps when reading technical documentation and it avoids 'magic values'
  * Remove all trailling spaces It is annoying with some text editors
  * DB: fix Rome extended model
  * DB: add Renoir APUs
  * Tests: add Core i5 8250U Related to X0rg/CPU-X#129
  * DB: add Ice Lake CPUs
  * DB: add Comet Lake CPUs
  * DB: add Coffee Lake Refresh It differs from Coffee Lake by stepping Core i5 9400 and 9500 will still be detected as Coffee Lake because it only differs by revision...
  * DB: add Coffee Lake-U It differs from Kaby Lake-U by stepping
  * DB: add Cannon Lake CPUs
  * DB: clarify Intel Generations
  * tests: remove duplicate addresses in RAW part
  * tests: fix convert_instlatx64 tool
  * Fix L3 cache associativity detection on AMD Zen 2 CPUs
  * Fix CMake
  * Add CMake
  * Add CMake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597320000">- Update to version 0.5.0+git.20200528:
  * Related to c2645d0. Convert all python scripts to Python 3.
  * Add Downloads section on Readme.md Close #140
  * Add I-Nex to the users list</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 0.5.0+git.20201019:
  * Fixes issue #148: CMake build script not in 0.5.0 tarball release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606219200">- Update to version 0.5.0+git.20201114:
  * Tests: fix path for cpuid_tool When we use CMake, the 'cpuid_tool' binary is in the 'build' directory
  * DB: add Vermeer https://en.wikichip.org/wiki/amd/cores/vermeer Test file converted from http://users.atw.hu/instlatx64/AuthenticAMD/AuthenticAMD0A20F10_K19_Vermeer_CPUID1.txt
  * DB: add Gemini Lake https://en.wikichip.org/wiki/intel/cores/gemini_lake Reported in X0rg/CPU-X#164
  * DB: add Comet Lake-U https://en.wikipedia.org/wiki/Comet_Lake_(microprocessor)#U-series_(Medium_power) Reported in X0rg/CPU-X#162
  * DB: add Kaby Lake-G https://en.wikichip.org/wiki/intel/cores/kaby_lake_g Test file converted from http://users.atw.hu/instlatx64/GenuineIntel/GenuineIntel00906E9_KabylakeG_CPUID.txt
  * DB: add Kaby Lake Refresh https://en.wikichip.org/wiki/intel/cores/kaby_lake_r Core i5 8250U was detected as Coffee Lake wrongly. Reported in X0rg/CPU-X#161</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616760000">- Update to version 0.5.1+git.1616323866:
  * Doxygen: remove deprecated option
  * Release version 0.5.1 (#151)
  * Tests: fix truncation warnings in convert_instlatx64
  * Fix warning with a comment
  * DB: add Rocket Lake
  * DB: add Milan
  * Tests: fix --create argument in convert_instlatx64 tool
  * DB: add Cezanne
  * DB: add Xeon E3 1275
  * CI: use microsoft/setup-msbuild@v1.0.2
  * CI: fix deprecated commands
  * Tests: add Core i5 8265U (Whiskey Lake-U)
  * DB: add Whiskey Lake-U</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1630065600">- Update to version 0.5.1+git.1626502835:
  * CMake: reduce min cmake requirement 3.14 -&gt; 3.13
  * Fix failing CI builds introduced by cb5fdd1
  * Use popcount64 from libc when available (#152)
  * allow to build either static or shared (#156)
  * cmake: allow libcpuid to be added as a CMake subproject (#155)
  * fix installation of BUNDLE if iOS (#154)
  * cmake: add an option to build tests (#153)
  * Fix #150: CPU Family/Model is used as Ext.Family/Model
  * DB: add Tiger Lake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644408000">- Update to version 0.5.1+git.1644144775:
  * Tests: add more Zen2 tests from InstLatx64
  * DB: add Lucienne
  * Report memory allocation failures without segfaulting. (#160)
  * Don't link with msrdriver.c on non-Windows platform. (#159)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 0.6.0:
  * Support for AMD Rembrandt
  * Support for AMD Warhol
  * Remove Debian package from source tree (#165)
  * Fix build under Clang 15 (#167)
  * Support for AMD Athlon Godavari
  * Support for hybrid CPU like Intel Alder Lake (#166)
  * Detect presence of hypervisor (#169)
  * Decode deterministic cache info for AMD CPUs (#168)
  * Add cache instances field in cpu_id_t and system_id_t (#168)
  * Support AMD Bald Eagle
  * Support for more AMD Godavari (Athlon)
  * Rename AMD Bulldozer to Zambezi
  * Support for AMD Interlagos
  * Support for AMD Abu Dhabi
  * Support for AMD Beema
  * Support for AMD Steppe Eagle
  * Support for more AMD Kabini (Sempron + Athlon)
  * Improve msr_serialize_raw_data()
  * Support for AMD Zen 2 custom APU for Steam Deck</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665576000">- Add missing dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- update to 0.6.2:
  * Support for AMD Raphael
  * Support for AMD Dali
  * Support for AMD Van Gogh
  * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172)
  * Remove AMD Warhol from DB (Zen3+ cancelled)
  * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175)
  * Fix shared library symlinks with CMake (#174)
  * Support for Intel Raptor Lake-S
  * Fix segmentation fault in cpu_identify_all() for single-core CPUs
  * Support for Intel Penryn L
  * Support for Intel Tremont
  * Support for AMD Mendocino
  * Support for Intel Ice Lake (Xeon-D)
  * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S)
  * Support for AMD Athlon 64 Sherman</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682424000">- Update to version 0.6.3:
  * Support for Intel Pentium and Celeron for Alder Lake-S
  * Support for Intel Alder Lake-HX
  * Support for Intel Alder Lake-X
  * Fix detection of Intel Alder Lake-P
  * Fix infinite loop in set_cpu_affinity() on macOS
  * Fix a misprint of extended CPUID in cpuid_basic_identify()
  * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184)
  * Query CPU info at least once even if set_cpu_affinity() fails
  * Support for AMD 19h family MSRs
  * Fix detection of Intel Core i5 Lynnfield
  * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188)
  * Support for Intel Alder Lake-N
  * Support for AMD Rembrandt with Radeon Graphics
  * Support for Intel Raptor Lake-S with "Golden Cove" cores
  * Support for Intel Raptor Lake-P
  * Support for Intel Raptor Lake-U
  * Support for Intel Rocket Lake-E</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 0.6.4
  * Support for AMD Genoa, Phoenix, Dragon Range, Ryzen Z1
  * Support for Intel Sapphire Rapids-WS, Skylake (server),
    Cascade Lake, Ice-Lake (server), Sapphire Rapids-SP,
    Raptor Lake-H/HX, Apollo lake
  * Improve support for Arrandale, Alder-Lake and Raptor-Lake P/U
  * Initial support for Centaur CPUs (VIA and Zhaoxin)</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719576000">- update to release 0.6.5
  * Support for Intel Bay Trail-M
  * Support for Intel Bay Trail-T
  * Support for Intel Bay Trail-D
  * Support for AMD Storm Peak
  * Support for Intel Raport Lake Refresh
  * Support heterogeneous RAW dumps in cpu_identify_all()
  * Support for Intel Meteor Lake, including detection of LP E-Cores
  * Support for Intel Emerald Rapids-SP
  * Support for more AMD Van Gogh</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1725796800">- update to 0.7.0:
  * Version 0.7.0 (2024-08-26):
  * Fix handle leaks in rdmsr.c (#199)
  * Fix cpuid_get_hypervisor when NULL data is provided (#199)
  * Prevent intel_fn11 array overruns (#199)
  * Support for AMD Hawk Point
  * Support for more AMD Phoenix (8000 series)
  * Add cpu_clock_by_tsc() function to the library (#124)
  * Check x86 CPUs MSR support (#185)
  * Add support for ARM CPUs (AArch32 + AArch64) (#200)
  * Add cpu_feature_level_t enumerated values for x86 CPUs (#177)
  * Support up to 4 subleaf entries for CPUID leaf 0x80000026
    (#189)
  * Support for Extended CPU topology subleaf in
    cpuid_identify_purpose_amd() (#189)
  * Support CPU purpose for AMD x86 CPUs (#189)
  * Add cpuid Linux and FreeBSD kernel modules for ARM CPUs
  * Improve errors handling in cpuid_get_all_raw_data() and
    cpuid_get_raw_data_core() (#202)
  * Support get_total_cpus() on DragonFly BSD
  * Improve set_cpu_affinity() on NetBSD
  * Fix build on OpenBSD
  * Improve behavior when CPU affinity cannot be set
  * Fix a regression in cpuid_tool about arguments doing nothing
    (like --rdmsr or --cpuid)
  * Fix a segmentation fault when using --quiet in cpuid_tool
  * Improve error handling in cpu_identify_all()
  * Add Python bindings (#197)
  * Support for AMD Granite Ridge
  * Support for AMD Strix Point
  * Detect x2APIC and AVX512 features for AMD x86 CPUs</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1733313600">- Update to version 0.7.1:
  * Fix cpuid kernel module build on ARM
  * Return ERR_NO_CPUID when cpuid kernel module cannot be used on AArch32
  * state
  * Refactor the build of the bindings (#203)
  * Fix build error on AArch64 when HWCAP_CPUID is not defined (#205)
  * Fix build on Windows ARM with MSVC (206)
  * Fix detection of Intel Meteor Lake
  * Support for Intel Arrow Lake
  * Support for AMD Turin</changelog>
</package>
<package pkgid="41038c8f61de4473c9b6f882b96abb5af03e8f7747344f14eaa4cef06245bf87" name="libcpuid-tools" arch="ppc64le">
  <version epoch="0" ver="0.7.1" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1480334400">- Update to version 0.4.0:
  * A backwards-incompatible change, since the sizeof
    cpu_raw_data_t and cpu_id_t are now different.
  * Better detection of AMD clock multiplier with msrinfo.
  * Support for Intel SGX detection
- Some packaging cleanups
  * Use url as source
  * Split binary from devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Enable internal tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 0.4.1:
  * Better support for Skylake Core i5 (#76)
  * Misdiagnosis microarchitecture for i3-3220T (#81)
  * Ability to dump MSR values to a file (PR #82)
  * AMD Ryzen support (#86)
  * Support for Coffee and Kaby Lake (#104)
  * Support for Raven Ridge and Threadripper (#106)
  * Support for Pinnacle Ridge (#111)
  * Fix P-III Celeron misdetection
  * Support for Skylake-X (#116)
  * Support for Zen+ Threadripper</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550232000">- Use noun phrase in summaries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579780800">- Update to version 0.4.1+git.20200102:
  * DB: Add Threadripper (Castle Peak)
  * Fix compilation on non-x86/ARM architectures.
  * Add support for get_total_cpus on Haiku.
  * Some typo fixes in human readable text.
  * Add Xeon CLX (Cascade lake-based) using data from PR #129
  * add support to feature intel avx512_vnni
  * AARCH64 stub
  * Ignore convert_instlatx64 binary
  * add Hygon Dhyana C86 7seris test file
  * Add Hygon Dhyana detect support
- Switch to _service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version v0.5.0+git.20200526:
  * CI: remove 'v' prefix in assets
  * CI: checkout sources before making release
  * Release version 0.5.0 (#146)
  * Add GitHub workflows for CI/CD - CI: it will check code consistency and run tests for all events (except for tags) - CD: it will build all assets and create a draft Close #122
  * check-consistency: return error count
  * Fix code consistency Result before this patch:
  * CMake: fix include directory
  * CMake: fix build on Windows
  * CMake: fix install target's export
  * tests: fix unused-result warning in convert_instlatx64 tool
  * Update .gitignore
  * CMake: fix Unix install and format
  * Add config file for cmake-format It formats CMakeLists.txt files See https://github.com/cheshirekow/cmake_format
  * Doxygen: upgrade Doxyfile to avoid warnings warning: Tag 'PERL_PATH' at line 1032 of file '/libcpuid/build/libcpuid/Doxyfile' has become obsolete. To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u" warning: argument 'a4wide' for option PAPER_TYPE is not a valid enum value Using the default: a4!
  * Doxygen: turn on quiet mode It is too noisy with CMake
  * Detect AVX512VBMI and AVX512VBMI2 features on Intel CPUs More information: https://en.wikichip.org/wiki/x86/avx-512 Resolve #134
  * Detect ABM feature on Intel CPUs Resolve #144
  * Detect RDSEED/ADX/SHA_NI features on AMD CPUs These x86 instruction set extensions are present since Zen micro-architecture Resolve #145
  * Update cpuid_main.c
  * DB: add Ivy Bridge-E (Xeon)
  * Tests: update all tests to add fields for L1I
  * Tests: update to add L1I information Related to 25d0614811991c855ce7db0d898dbc6200dfa840 Dump of Core i5 520m from CPU-X#119
  * Add L1 Instruction Cache information Some CPUs does not have the same associativity for L1D and L1I, as reported in X0rg/CPU-X#119 It adds l1_instruction_assoc and l1_instruction_cacheline in cpu_id_t To avoid confusing, also adds l1_data_assoc and l1_data_cacheline l1_assoc and l1_cacheline are leave untouched for backward compatibility
  * Ignore .vscode directory Yes, 0b05f45e03b0aa39a65eba9451b59c9381e8474c was about VS Code
  * Tests: add amd_fn8000001dh subleaf See e562798cecf4af852fdfef4b0e7bf159a5d9b4de
  * Tests: parse subleafs in convert_instlatx64 Also, it adds 0xffffffff when data is not available, so all lines are presents
  * Re-fix L3 cache associativity detection on AMD Zen 2 CPUs Previous commit: 848394ee460c70298f91569d33f2c156bddb0f6c
  * Applied a patch from @tavplubix
  * Use constant for registers name It helps when reading technical documentation and it avoids 'magic values'
  * Remove all trailling spaces It is annoying with some text editors
  * DB: fix Rome extended model
  * DB: add Renoir APUs
  * Tests: add Core i5 8250U Related to X0rg/CPU-X#129
  * DB: add Ice Lake CPUs
  * DB: add Comet Lake CPUs
  * DB: add Coffee Lake Refresh It differs from Coffee Lake by stepping Core i5 9400 and 9500 will still be detected as Coffee Lake because it only differs by revision...
  * DB: add Coffee Lake-U It differs from Kaby Lake-U by stepping
  * DB: add Cannon Lake CPUs
  * DB: clarify Intel Generations
  * tests: remove duplicate addresses in RAW part
  * tests: fix convert_instlatx64 tool
  * Fix L3 cache associativity detection on AMD Zen 2 CPUs
  * Fix CMake
  * Add CMake
  * Add CMake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597320000">- Update to version 0.5.0+git.20200528:
  * Related to c2645d0. Convert all python scripts to Python 3.
  * Add Downloads section on Readme.md Close #140
  * Add I-Nex to the users list</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 0.5.0+git.20201019:
  * Fixes issue #148: CMake build script not in 0.5.0 tarball release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606219200">- Update to version 0.5.0+git.20201114:
  * Tests: fix path for cpuid_tool When we use CMake, the 'cpuid_tool' binary is in the 'build' directory
  * DB: add Vermeer https://en.wikichip.org/wiki/amd/cores/vermeer Test file converted from http://users.atw.hu/instlatx64/AuthenticAMD/AuthenticAMD0A20F10_K19_Vermeer_CPUID1.txt
  * DB: add Gemini Lake https://en.wikichip.org/wiki/intel/cores/gemini_lake Reported in X0rg/CPU-X#164
  * DB: add Comet Lake-U https://en.wikipedia.org/wiki/Comet_Lake_(microprocessor)#U-series_(Medium_power) Reported in X0rg/CPU-X#162
  * DB: add Kaby Lake-G https://en.wikichip.org/wiki/intel/cores/kaby_lake_g Test file converted from http://users.atw.hu/instlatx64/GenuineIntel/GenuineIntel00906E9_KabylakeG_CPUID.txt
  * DB: add Kaby Lake Refresh https://en.wikichip.org/wiki/intel/cores/kaby_lake_r Core i5 8250U was detected as Coffee Lake wrongly. Reported in X0rg/CPU-X#161</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616760000">- Update to version 0.5.1+git.1616323866:
  * Doxygen: remove deprecated option
  * Release version 0.5.1 (#151)
  * Tests: fix truncation warnings in convert_instlatx64
  * Fix warning with a comment
  * DB: add Rocket Lake
  * DB: add Milan
  * Tests: fix --create argument in convert_instlatx64 tool
  * DB: add Cezanne
  * DB: add Xeon E3 1275
  * CI: use microsoft/setup-msbuild@v1.0.2
  * CI: fix deprecated commands
  * Tests: add Core i5 8265U (Whiskey Lake-U)
  * DB: add Whiskey Lake-U</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1630065600">- Update to version 0.5.1+git.1626502835:
  * CMake: reduce min cmake requirement 3.14 -&gt; 3.13
  * Fix failing CI builds introduced by cb5fdd1
  * Use popcount64 from libc when available (#152)
  * allow to build either static or shared (#156)
  * cmake: allow libcpuid to be added as a CMake subproject (#155)
  * fix installation of BUNDLE if iOS (#154)
  * cmake: add an option to build tests (#153)
  * Fix #150: CPU Family/Model is used as Ext.Family/Model
  * DB: add Tiger Lake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644408000">- Update to version 0.5.1+git.1644144775:
  * Tests: add more Zen2 tests from InstLatx64
  * DB: add Lucienne
  * Report memory allocation failures without segfaulting. (#160)
  * Don't link with msrdriver.c on non-Windows platform. (#159)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 0.6.0:
  * Support for AMD Rembrandt
  * Support for AMD Warhol
  * Remove Debian package from source tree (#165)
  * Fix build under Clang 15 (#167)
  * Support for AMD Athlon Godavari
  * Support for hybrid CPU like Intel Alder Lake (#166)
  * Detect presence of hypervisor (#169)
  * Decode deterministic cache info for AMD CPUs (#168)
  * Add cache instances field in cpu_id_t and system_id_t (#168)
  * Support AMD Bald Eagle
  * Support for more AMD Godavari (Athlon)
  * Rename AMD Bulldozer to Zambezi
  * Support for AMD Interlagos
  * Support for AMD Abu Dhabi
  * Support for AMD Beema
  * Support for AMD Steppe Eagle
  * Support for more AMD Kabini (Sempron + Athlon)
  * Improve msr_serialize_raw_data()
  * Support for AMD Zen 2 custom APU for Steam Deck</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665576000">- Add missing dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- update to 0.6.2:
  * Support for AMD Raphael
  * Support for AMD Dali
  * Support for AMD Van Gogh
  * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172)
  * Remove AMD Warhol from DB (Zen3+ cancelled)
  * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175)
  * Fix shared library symlinks with CMake (#174)
  * Support for Intel Raptor Lake-S
  * Fix segmentation fault in cpu_identify_all() for single-core CPUs
  * Support for Intel Penryn L
  * Support for Intel Tremont
  * Support for AMD Mendocino
  * Support for Intel Ice Lake (Xeon-D)
  * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S)
  * Support for AMD Athlon 64 Sherman</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682424000">- Update to version 0.6.3:
  * Support for Intel Pentium and Celeron for Alder Lake-S
  * Support for Intel Alder Lake-HX
  * Support for Intel Alder Lake-X
  * Fix detection of Intel Alder Lake-P
  * Fix infinite loop in set_cpu_affinity() on macOS
  * Fix a misprint of extended CPUID in cpuid_basic_identify()
  * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184)
  * Query CPU info at least once even if set_cpu_affinity() fails
  * Support for AMD 19h family MSRs
  * Fix detection of Intel Core i5 Lynnfield
  * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188)
  * Support for Intel Alder Lake-N
  * Support for AMD Rembrandt with Radeon Graphics
  * Support for Intel Raptor Lake-S with "Golden Cove" cores
  * Support for Intel Raptor Lake-P
  * Support for Intel Raptor Lake-U
  * Support for Intel Rocket Lake-E</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 0.6.4
  * Support for AMD Genoa, Phoenix, Dragon Range, Ryzen Z1
  * Support for Intel Sapphire Rapids-WS, Skylake (server),
    Cascade Lake, Ice-Lake (server), Sapphire Rapids-SP,
    Raptor Lake-H/HX, Apollo lake
  * Improve support for Arrandale, Alder-Lake and Raptor-Lake P/U
  * Initial support for Centaur CPUs (VIA and Zhaoxin)</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719576000">- update to release 0.6.5
  * Support for Intel Bay Trail-M
  * Support for Intel Bay Trail-T
  * Support for Intel Bay Trail-D
  * Support for AMD Storm Peak
  * Support for Intel Raport Lake Refresh
  * Support heterogeneous RAW dumps in cpu_identify_all()
  * Support for Intel Meteor Lake, including detection of LP E-Cores
  * Support for Intel Emerald Rapids-SP
  * Support for more AMD Van Gogh</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1725796800">- update to 0.7.0:
  * Version 0.7.0 (2024-08-26):
  * Fix handle leaks in rdmsr.c (#199)
  * Fix cpuid_get_hypervisor when NULL data is provided (#199)
  * Prevent intel_fn11 array overruns (#199)
  * Support for AMD Hawk Point
  * Support for more AMD Phoenix (8000 series)
  * Add cpu_clock_by_tsc() function to the library (#124)
  * Check x86 CPUs MSR support (#185)
  * Add support for ARM CPUs (AArch32 + AArch64) (#200)
  * Add cpu_feature_level_t enumerated values for x86 CPUs (#177)
  * Support up to 4 subleaf entries for CPUID leaf 0x80000026
    (#189)
  * Support for Extended CPU topology subleaf in
    cpuid_identify_purpose_amd() (#189)
  * Support CPU purpose for AMD x86 CPUs (#189)
  * Add cpuid Linux and FreeBSD kernel modules for ARM CPUs
  * Improve errors handling in cpuid_get_all_raw_data() and
    cpuid_get_raw_data_core() (#202)
  * Support get_total_cpus() on DragonFly BSD
  * Improve set_cpu_affinity() on NetBSD
  * Fix build on OpenBSD
  * Improve behavior when CPU affinity cannot be set
  * Fix a regression in cpuid_tool about arguments doing nothing
    (like --rdmsr or --cpuid)
  * Fix a segmentation fault when using --quiet in cpuid_tool
  * Improve error handling in cpu_identify_all()
  * Add Python bindings (#197)
  * Support for AMD Granite Ridge
  * Support for AMD Strix Point
  * Detect x2APIC and AVX512 features for AMD x86 CPUs</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1733313600">- Update to version 0.7.1:
  * Fix cpuid kernel module build on ARM
  * Return ERR_NO_CPUID when cpuid kernel module cannot be used on AArch32
  * state
  * Refactor the build of the bindings (#203)
  * Fix build error on AArch64 when HWCAP_CPUID is not defined (#205)
  * Fix build on Windows ARM with MSVC (206)
  * Fix detection of Intel Meteor Lake
  * Support for Intel Arrow Lake
  * Support for AMD Turin</changelog>
</package>
<package pkgid="277919b26092abd45d49cc6f465188025f02c853f8452b837e57128aec65f75b" name="libcpuid-tools" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1480334400">- Update to version 0.4.0:
  * A backwards-incompatible change, since the sizeof
    cpu_raw_data_t and cpu_id_t are now different.
  * Better detection of AMD clock multiplier with msrinfo.
  * Support for Intel SGX detection
- Some packaging cleanups
  * Use url as source
  * Split binary from devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Enable internal tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 0.4.1:
  * Better support for Skylake Core i5 (#76)
  * Misdiagnosis microarchitecture for i3-3220T (#81)
  * Ability to dump MSR values to a file (PR #82)
  * AMD Ryzen support (#86)
  * Support for Coffee and Kaby Lake (#104)
  * Support for Raven Ridge and Threadripper (#106)
  * Support for Pinnacle Ridge (#111)
  * Fix P-III Celeron misdetection
  * Support for Skylake-X (#116)
  * Support for Zen+ Threadripper</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550232000">- Use noun phrase in summaries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579780800">- Update to version 0.4.1+git.20200102:
  * DB: Add Threadripper (Castle Peak)
  * Fix compilation on non-x86/ARM architectures.
  * Add support for get_total_cpus on Haiku.
  * Some typo fixes in human readable text.
  * Add Xeon CLX (Cascade lake-based) using data from PR #129
  * add support to feature intel avx512_vnni
  * AARCH64 stub
  * Ignore convert_instlatx64 binary
  * add Hygon Dhyana C86 7seris test file
  * Add Hygon Dhyana detect support
- Switch to _service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version v0.5.0+git.20200526:
  * CI: remove 'v' prefix in assets
  * CI: checkout sources before making release
  * Release version 0.5.0 (#146)
  * Add GitHub workflows for CI/CD - CI: it will check code consistency and run tests for all events (except for tags) - CD: it will build all assets and create a draft Close #122
  * check-consistency: return error count
  * Fix code consistency Result before this patch:
  * CMake: fix include directory
  * CMake: fix build on Windows
  * CMake: fix install target's export
  * tests: fix unused-result warning in convert_instlatx64 tool
  * Update .gitignore
  * CMake: fix Unix install and format
  * Add config file for cmake-format It formats CMakeLists.txt files See https://github.com/cheshirekow/cmake_format
  * Doxygen: upgrade Doxyfile to avoid warnings warning: Tag 'PERL_PATH' at line 1032 of file '/libcpuid/build/libcpuid/Doxyfile' has become obsolete. To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u" warning: argument 'a4wide' for option PAPER_TYPE is not a valid enum value Using the default: a4!
  * Doxygen: turn on quiet mode It is too noisy with CMake
  * Detect AVX512VBMI and AVX512VBMI2 features on Intel CPUs More information: https://en.wikichip.org/wiki/x86/avx-512 Resolve #134
  * Detect ABM feature on Intel CPUs Resolve #144
  * Detect RDSEED/ADX/SHA_NI features on AMD CPUs These x86 instruction set extensions are present since Zen micro-architecture Resolve #145
  * Update cpuid_main.c
  * DB: add Ivy Bridge-E (Xeon)
  * Tests: update all tests to add fields for L1I
  * Tests: update to add L1I information Related to 25d0614811991c855ce7db0d898dbc6200dfa840 Dump of Core i5 520m from CPU-X#119
  * Add L1 Instruction Cache information Some CPUs does not have the same associativity for L1D and L1I, as reported in X0rg/CPU-X#119 It adds l1_instruction_assoc and l1_instruction_cacheline in cpu_id_t To avoid confusing, also adds l1_data_assoc and l1_data_cacheline l1_assoc and l1_cacheline are leave untouched for backward compatibility
  * Ignore .vscode directory Yes, 0b05f45e03b0aa39a65eba9451b59c9381e8474c was about VS Code
  * Tests: add amd_fn8000001dh subleaf See e562798cecf4af852fdfef4b0e7bf159a5d9b4de
  * Tests: parse subleafs in convert_instlatx64 Also, it adds 0xffffffff when data is not available, so all lines are presents
  * Re-fix L3 cache associativity detection on AMD Zen 2 CPUs Previous commit: 848394ee460c70298f91569d33f2c156bddb0f6c
  * Applied a patch from @tavplubix
  * Use constant for registers name It helps when reading technical documentation and it avoids 'magic values'
  * Remove all trailling spaces It is annoying with some text editors
  * DB: fix Rome extended model
  * DB: add Renoir APUs
  * Tests: add Core i5 8250U Related to X0rg/CPU-X#129
  * DB: add Ice Lake CPUs
  * DB: add Comet Lake CPUs
  * DB: add Coffee Lake Refresh It differs from Coffee Lake by stepping Core i5 9400 and 9500 will still be detected as Coffee Lake because it only differs by revision...
  * DB: add Coffee Lake-U It differs from Kaby Lake-U by stepping
  * DB: add Cannon Lake CPUs
  * DB: clarify Intel Generations
  * tests: remove duplicate addresses in RAW part
  * tests: fix convert_instlatx64 tool
  * Fix L3 cache associativity detection on AMD Zen 2 CPUs
  * Fix CMake
  * Add CMake
  * Add CMake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597320000">- Update to version 0.5.0+git.20200528:
  * Related to c2645d0. Convert all python scripts to Python 3.
  * Add Downloads section on Readme.md Close #140
  * Add I-Nex to the users list</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 0.5.0+git.20201019:
  * Fixes issue #148: CMake build script not in 0.5.0 tarball release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606219200">- Update to version 0.5.0+git.20201114:
  * Tests: fix path for cpuid_tool When we use CMake, the 'cpuid_tool' binary is in the 'build' directory
  * DB: add Vermeer https://en.wikichip.org/wiki/amd/cores/vermeer Test file converted from http://users.atw.hu/instlatx64/AuthenticAMD/AuthenticAMD0A20F10_K19_Vermeer_CPUID1.txt
  * DB: add Gemini Lake https://en.wikichip.org/wiki/intel/cores/gemini_lake Reported in X0rg/CPU-X#164
  * DB: add Comet Lake-U https://en.wikipedia.org/wiki/Comet_Lake_(microprocessor)#U-series_(Medium_power) Reported in X0rg/CPU-X#162
  * DB: add Kaby Lake-G https://en.wikichip.org/wiki/intel/cores/kaby_lake_g Test file converted from http://users.atw.hu/instlatx64/GenuineIntel/GenuineIntel00906E9_KabylakeG_CPUID.txt
  * DB: add Kaby Lake Refresh https://en.wikichip.org/wiki/intel/cores/kaby_lake_r Core i5 8250U was detected as Coffee Lake wrongly. Reported in X0rg/CPU-X#161</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616760000">- Update to version 0.5.1+git.1616323866:
  * Doxygen: remove deprecated option
  * Release version 0.5.1 (#151)
  * Tests: fix truncation warnings in convert_instlatx64
  * Fix warning with a comment
  * DB: add Rocket Lake
  * DB: add Milan
  * Tests: fix --create argument in convert_instlatx64 tool
  * DB: add Cezanne
  * DB: add Xeon E3 1275
  * CI: use microsoft/setup-msbuild@v1.0.2
  * CI: fix deprecated commands
  * Tests: add Core i5 8265U (Whiskey Lake-U)
  * DB: add Whiskey Lake-U</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1630065600">- Update to version 0.5.1+git.1626502835:
  * CMake: reduce min cmake requirement 3.14 -&gt; 3.13
  * Fix failing CI builds introduced by cb5fdd1
  * Use popcount64 from libc when available (#152)
  * allow to build either static or shared (#156)
  * cmake: allow libcpuid to be added as a CMake subproject (#155)
  * fix installation of BUNDLE if iOS (#154)
  * cmake: add an option to build tests (#153)
  * Fix #150: CPU Family/Model is used as Ext.Family/Model
  * DB: add Tiger Lake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644408000">- Update to version 0.5.1+git.1644144775:
  * Tests: add more Zen2 tests from InstLatx64
  * DB: add Lucienne
  * Report memory allocation failures without segfaulting. (#160)
  * Don't link with msrdriver.c on non-Windows platform. (#159)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 0.6.0:
  * Support for AMD Rembrandt
  * Support for AMD Warhol
  * Remove Debian package from source tree (#165)
  * Fix build under Clang 15 (#167)
  * Support for AMD Athlon Godavari
  * Support for hybrid CPU like Intel Alder Lake (#166)
  * Detect presence of hypervisor (#169)
  * Decode deterministic cache info for AMD CPUs (#168)
  * Add cache instances field in cpu_id_t and system_id_t (#168)
  * Support AMD Bald Eagle
  * Support for more AMD Godavari (Athlon)
  * Rename AMD Bulldozer to Zambezi
  * Support for AMD Interlagos
  * Support for AMD Abu Dhabi
  * Support for AMD Beema
  * Support for AMD Steppe Eagle
  * Support for more AMD Kabini (Sempron + Athlon)
  * Improve msr_serialize_raw_data()
  * Support for AMD Zen 2 custom APU for Steam Deck</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665576000">- Add missing dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- update to 0.6.2:
  * Support for AMD Raphael
  * Support for AMD Dali
  * Support for AMD Van Gogh
  * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172)
  * Remove AMD Warhol from DB (Zen3+ cancelled)
  * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175)
  * Fix shared library symlinks with CMake (#174)
  * Support for Intel Raptor Lake-S
  * Fix segmentation fault in cpu_identify_all() for single-core CPUs
  * Support for Intel Penryn L
  * Support for Intel Tremont
  * Support for AMD Mendocino
  * Support for Intel Ice Lake (Xeon-D)
  * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S)
  * Support for AMD Athlon 64 Sherman</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682424000">- Update to version 0.6.3:
  * Support for Intel Pentium and Celeron for Alder Lake-S
  * Support for Intel Alder Lake-HX
  * Support for Intel Alder Lake-X
  * Fix detection of Intel Alder Lake-P
  * Fix infinite loop in set_cpu_affinity() on macOS
  * Fix a misprint of extended CPUID in cpuid_basic_identify()
  * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184)
  * Query CPU info at least once even if set_cpu_affinity() fails
  * Support for AMD 19h family MSRs
  * Fix detection of Intel Core i5 Lynnfield
  * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188)
  * Support for Intel Alder Lake-N
  * Support for AMD Rembrandt with Radeon Graphics
  * Support for Intel Raptor Lake-S with "Golden Cove" cores
  * Support for Intel Raptor Lake-P
  * Support for Intel Raptor Lake-U
  * Support for Intel Rocket Lake-E</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 0.6.4
  * Support for AMD Genoa, Phoenix, Dragon Range, Ryzen Z1
  * Support for Intel Sapphire Rapids-WS, Skylake (server),
    Cascade Lake, Ice-Lake (server), Sapphire Rapids-SP,
    Raptor Lake-H/HX, Apollo lake
  * Improve support for Arrandale, Alder-Lake and Raptor-Lake P/U
  * Initial support for Centaur CPUs (VIA and Zhaoxin)</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719576000">- update to release 0.6.5
  * Support for Intel Bay Trail-M
  * Support for Intel Bay Trail-T
  * Support for Intel Bay Trail-D
  * Support for AMD Storm Peak
  * Support for Intel Raport Lake Refresh
  * Support heterogeneous RAW dumps in cpu_identify_all()
  * Support for Intel Meteor Lake, including detection of LP E-Cores
  * Support for Intel Emerald Rapids-SP
  * Support for more AMD Van Gogh</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1725796800">- update to 0.7.0:
  * Version 0.7.0 (2024-08-26):
  * Fix handle leaks in rdmsr.c (#199)
  * Fix cpuid_get_hypervisor when NULL data is provided (#199)
  * Prevent intel_fn11 array overruns (#199)
  * Support for AMD Hawk Point
  * Support for more AMD Phoenix (8000 series)
  * Add cpu_clock_by_tsc() function to the library (#124)
  * Check x86 CPUs MSR support (#185)
  * Add support for ARM CPUs (AArch32 + AArch64) (#200)
  * Add cpu_feature_level_t enumerated values for x86 CPUs (#177)
  * Support up to 4 subleaf entries for CPUID leaf 0x80000026
    (#189)
  * Support for Extended CPU topology subleaf in
    cpuid_identify_purpose_amd() (#189)
  * Support CPU purpose for AMD x86 CPUs (#189)
  * Add cpuid Linux and FreeBSD kernel modules for ARM CPUs
  * Improve errors handling in cpuid_get_all_raw_data() and
    cpuid_get_raw_data_core() (#202)
  * Support get_total_cpus() on DragonFly BSD
  * Improve set_cpu_affinity() on NetBSD
  * Fix build on OpenBSD
  * Improve behavior when CPU affinity cannot be set
  * Fix a regression in cpuid_tool about arguments doing nothing
    (like --rdmsr or --cpuid)
  * Fix a segmentation fault when using --quiet in cpuid_tool
  * Improve error handling in cpu_identify_all()
  * Add Python bindings (#197)
  * Support for AMD Granite Ridge
  * Support for AMD Strix Point
  * Detect x2APIC and AVX512 features for AMD x86 CPUs</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1733313600">- Update to version 0.7.1:
  * Fix cpuid kernel module build on ARM
  * Return ERR_NO_CPUID when cpuid kernel module cannot be used on AArch32
  * state
  * Refactor the build of the bindings (#203)
  * Fix build error on AArch64 when HWCAP_CPUID is not defined (#205)
  * Fix build on Windows ARM with MSVC (206)
  * Fix detection of Intel Meteor Lake
  * Support for Intel Arrow Lake
  * Support for AMD Turin</changelog>
</package>
<package pkgid="ad011abd5927c063fe7d13b942ed7800208109b1e1868ca12f36bd5b795605a7" name="libcpuid17" arch="aarch64">
  <version epoch="0" ver="0.7.1" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1480334400">- Update to version 0.4.0:
  * A backwards-incompatible change, since the sizeof
    cpu_raw_data_t and cpu_id_t are now different.
  * Better detection of AMD clock multiplier with msrinfo.
  * Support for Intel SGX detection
- Some packaging cleanups
  * Use url as source
  * Split binary from devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Enable internal tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 0.4.1:
  * Better support for Skylake Core i5 (#76)
  * Misdiagnosis microarchitecture for i3-3220T (#81)
  * Ability to dump MSR values to a file (PR #82)
  * AMD Ryzen support (#86)
  * Support for Coffee and Kaby Lake (#104)
  * Support for Raven Ridge and Threadripper (#106)
  * Support for Pinnacle Ridge (#111)
  * Fix P-III Celeron misdetection
  * Support for Skylake-X (#116)
  * Support for Zen+ Threadripper</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550232000">- Use noun phrase in summaries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579780800">- Update to version 0.4.1+git.20200102:
  * DB: Add Threadripper (Castle Peak)
  * Fix compilation on non-x86/ARM architectures.
  * Add support for get_total_cpus on Haiku.
  * Some typo fixes in human readable text.
  * Add Xeon CLX (Cascade lake-based) using data from PR #129
  * add support to feature intel avx512_vnni
  * AARCH64 stub
  * Ignore convert_instlatx64 binary
  * add Hygon Dhyana C86 7seris test file
  * Add Hygon Dhyana detect support
- Switch to _service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version v0.5.0+git.20200526:
  * CI: remove 'v' prefix in assets
  * CI: checkout sources before making release
  * Release version 0.5.0 (#146)
  * Add GitHub workflows for CI/CD - CI: it will check code consistency and run tests for all events (except for tags) - CD: it will build all assets and create a draft Close #122
  * check-consistency: return error count
  * Fix code consistency Result before this patch:
  * CMake: fix include directory
  * CMake: fix build on Windows
  * CMake: fix install target's export
  * tests: fix unused-result warning in convert_instlatx64 tool
  * Update .gitignore
  * CMake: fix Unix install and format
  * Add config file for cmake-format It formats CMakeLists.txt files See https://github.com/cheshirekow/cmake_format
  * Doxygen: upgrade Doxyfile to avoid warnings warning: Tag 'PERL_PATH' at line 1032 of file '/libcpuid/build/libcpuid/Doxyfile' has become obsolete. To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u" warning: argument 'a4wide' for option PAPER_TYPE is not a valid enum value Using the default: a4!
  * Doxygen: turn on quiet mode It is too noisy with CMake
  * Detect AVX512VBMI and AVX512VBMI2 features on Intel CPUs More information: https://en.wikichip.org/wiki/x86/avx-512 Resolve #134
  * Detect ABM feature on Intel CPUs Resolve #144
  * Detect RDSEED/ADX/SHA_NI features on AMD CPUs These x86 instruction set extensions are present since Zen micro-architecture Resolve #145
  * Update cpuid_main.c
  * DB: add Ivy Bridge-E (Xeon)
  * Tests: update all tests to add fields for L1I
  * Tests: update to add L1I information Related to 25d0614811991c855ce7db0d898dbc6200dfa840 Dump of Core i5 520m from CPU-X#119
  * Add L1 Instruction Cache information Some CPUs does not have the same associativity for L1D and L1I, as reported in X0rg/CPU-X#119 It adds l1_instruction_assoc and l1_instruction_cacheline in cpu_id_t To avoid confusing, also adds l1_data_assoc and l1_data_cacheline l1_assoc and l1_cacheline are leave untouched for backward compatibility
  * Ignore .vscode directory Yes, 0b05f45e03b0aa39a65eba9451b59c9381e8474c was about VS Code
  * Tests: add amd_fn8000001dh subleaf See e562798cecf4af852fdfef4b0e7bf159a5d9b4de
  * Tests: parse subleafs in convert_instlatx64 Also, it adds 0xffffffff when data is not available, so all lines are presents
  * Re-fix L3 cache associativity detection on AMD Zen 2 CPUs Previous commit: 848394ee460c70298f91569d33f2c156bddb0f6c
  * Applied a patch from @tavplubix
  * Use constant for registers name It helps when reading technical documentation and it avoids 'magic values'
  * Remove all trailling spaces It is annoying with some text editors
  * DB: fix Rome extended model
  * DB: add Renoir APUs
  * Tests: add Core i5 8250U Related to X0rg/CPU-X#129
  * DB: add Ice Lake CPUs
  * DB: add Comet Lake CPUs
  * DB: add Coffee Lake Refresh It differs from Coffee Lake by stepping Core i5 9400 and 9500 will still be detected as Coffee Lake because it only differs by revision...
  * DB: add Coffee Lake-U It differs from Kaby Lake-U by stepping
  * DB: add Cannon Lake CPUs
  * DB: clarify Intel Generations
  * tests: remove duplicate addresses in RAW part
  * tests: fix convert_instlatx64 tool
  * Fix L3 cache associativity detection on AMD Zen 2 CPUs
  * Fix CMake
  * Add CMake
  * Add CMake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597320000">- Update to version 0.5.0+git.20200528:
  * Related to c2645d0. Convert all python scripts to Python 3.
  * Add Downloads section on Readme.md Close #140
  * Add I-Nex to the users list</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 0.5.0+git.20201019:
  * Fixes issue #148: CMake build script not in 0.5.0 tarball release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606219200">- Update to version 0.5.0+git.20201114:
  * Tests: fix path for cpuid_tool When we use CMake, the 'cpuid_tool' binary is in the 'build' directory
  * DB: add Vermeer https://en.wikichip.org/wiki/amd/cores/vermeer Test file converted from http://users.atw.hu/instlatx64/AuthenticAMD/AuthenticAMD0A20F10_K19_Vermeer_CPUID1.txt
  * DB: add Gemini Lake https://en.wikichip.org/wiki/intel/cores/gemini_lake Reported in X0rg/CPU-X#164
  * DB: add Comet Lake-U https://en.wikipedia.org/wiki/Comet_Lake_(microprocessor)#U-series_(Medium_power) Reported in X0rg/CPU-X#162
  * DB: add Kaby Lake-G https://en.wikichip.org/wiki/intel/cores/kaby_lake_g Test file converted from http://users.atw.hu/instlatx64/GenuineIntel/GenuineIntel00906E9_KabylakeG_CPUID.txt
  * DB: add Kaby Lake Refresh https://en.wikichip.org/wiki/intel/cores/kaby_lake_r Core i5 8250U was detected as Coffee Lake wrongly. Reported in X0rg/CPU-X#161</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616760000">- Update to version 0.5.1+git.1616323866:
  * Doxygen: remove deprecated option
  * Release version 0.5.1 (#151)
  * Tests: fix truncation warnings in convert_instlatx64
  * Fix warning with a comment
  * DB: add Rocket Lake
  * DB: add Milan
  * Tests: fix --create argument in convert_instlatx64 tool
  * DB: add Cezanne
  * DB: add Xeon E3 1275
  * CI: use microsoft/setup-msbuild@v1.0.2
  * CI: fix deprecated commands
  * Tests: add Core i5 8265U (Whiskey Lake-U)
  * DB: add Whiskey Lake-U</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1630065600">- Update to version 0.5.1+git.1626502835:
  * CMake: reduce min cmake requirement 3.14 -&gt; 3.13
  * Fix failing CI builds introduced by cb5fdd1
  * Use popcount64 from libc when available (#152)
  * allow to build either static or shared (#156)
  * cmake: allow libcpuid to be added as a CMake subproject (#155)
  * fix installation of BUNDLE if iOS (#154)
  * cmake: add an option to build tests (#153)
  * Fix #150: CPU Family/Model is used as Ext.Family/Model
  * DB: add Tiger Lake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644408000">- Update to version 0.5.1+git.1644144775:
  * Tests: add more Zen2 tests from InstLatx64
  * DB: add Lucienne
  * Report memory allocation failures without segfaulting. (#160)
  * Don't link with msrdriver.c on non-Windows platform. (#159)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 0.6.0:
  * Support for AMD Rembrandt
  * Support for AMD Warhol
  * Remove Debian package from source tree (#165)
  * Fix build under Clang 15 (#167)
  * Support for AMD Athlon Godavari
  * Support for hybrid CPU like Intel Alder Lake (#166)
  * Detect presence of hypervisor (#169)
  * Decode deterministic cache info for AMD CPUs (#168)
  * Add cache instances field in cpu_id_t and system_id_t (#168)
  * Support AMD Bald Eagle
  * Support for more AMD Godavari (Athlon)
  * Rename AMD Bulldozer to Zambezi
  * Support for AMD Interlagos
  * Support for AMD Abu Dhabi
  * Support for AMD Beema
  * Support for AMD Steppe Eagle
  * Support for more AMD Kabini (Sempron + Athlon)
  * Improve msr_serialize_raw_data()
  * Support for AMD Zen 2 custom APU for Steam Deck</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665576000">- Add missing dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- update to 0.6.2:
  * Support for AMD Raphael
  * Support for AMD Dali
  * Support for AMD Van Gogh
  * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172)
  * Remove AMD Warhol from DB (Zen3+ cancelled)
  * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175)
  * Fix shared library symlinks with CMake (#174)
  * Support for Intel Raptor Lake-S
  * Fix segmentation fault in cpu_identify_all() for single-core CPUs
  * Support for Intel Penryn L
  * Support for Intel Tremont
  * Support for AMD Mendocino
  * Support for Intel Ice Lake (Xeon-D)
  * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S)
  * Support for AMD Athlon 64 Sherman</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682424000">- Update to version 0.6.3:
  * Support for Intel Pentium and Celeron for Alder Lake-S
  * Support for Intel Alder Lake-HX
  * Support for Intel Alder Lake-X
  * Fix detection of Intel Alder Lake-P
  * Fix infinite loop in set_cpu_affinity() on macOS
  * Fix a misprint of extended CPUID in cpuid_basic_identify()
  * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184)
  * Query CPU info at least once even if set_cpu_affinity() fails
  * Support for AMD 19h family MSRs
  * Fix detection of Intel Core i5 Lynnfield
  * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188)
  * Support for Intel Alder Lake-N
  * Support for AMD Rembrandt with Radeon Graphics
  * Support for Intel Raptor Lake-S with "Golden Cove" cores
  * Support for Intel Raptor Lake-P
  * Support for Intel Raptor Lake-U
  * Support for Intel Rocket Lake-E</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 0.6.4
  * Support for AMD Genoa, Phoenix, Dragon Range, Ryzen Z1
  * Support for Intel Sapphire Rapids-WS, Skylake (server),
    Cascade Lake, Ice-Lake (server), Sapphire Rapids-SP,
    Raptor Lake-H/HX, Apollo lake
  * Improve support for Arrandale, Alder-Lake and Raptor-Lake P/U
  * Initial support for Centaur CPUs (VIA and Zhaoxin)</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719576000">- update to release 0.6.5
  * Support for Intel Bay Trail-M
  * Support for Intel Bay Trail-T
  * Support for Intel Bay Trail-D
  * Support for AMD Storm Peak
  * Support for Intel Raport Lake Refresh
  * Support heterogeneous RAW dumps in cpu_identify_all()
  * Support for Intel Meteor Lake, including detection of LP E-Cores
  * Support for Intel Emerald Rapids-SP
  * Support for more AMD Van Gogh</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1725796800">- update to 0.7.0:
  * Version 0.7.0 (2024-08-26):
  * Fix handle leaks in rdmsr.c (#199)
  * Fix cpuid_get_hypervisor when NULL data is provided (#199)
  * Prevent intel_fn11 array overruns (#199)
  * Support for AMD Hawk Point
  * Support for more AMD Phoenix (8000 series)
  * Add cpu_clock_by_tsc() function to the library (#124)
  * Check x86 CPUs MSR support (#185)
  * Add support for ARM CPUs (AArch32 + AArch64) (#200)
  * Add cpu_feature_level_t enumerated values for x86 CPUs (#177)
  * Support up to 4 subleaf entries for CPUID leaf 0x80000026
    (#189)
  * Support for Extended CPU topology subleaf in
    cpuid_identify_purpose_amd() (#189)
  * Support CPU purpose for AMD x86 CPUs (#189)
  * Add cpuid Linux and FreeBSD kernel modules for ARM CPUs
  * Improve errors handling in cpuid_get_all_raw_data() and
    cpuid_get_raw_data_core() (#202)
  * Support get_total_cpus() on DragonFly BSD
  * Improve set_cpu_affinity() on NetBSD
  * Fix build on OpenBSD
  * Improve behavior when CPU affinity cannot be set
  * Fix a regression in cpuid_tool about arguments doing nothing
    (like --rdmsr or --cpuid)
  * Fix a segmentation fault when using --quiet in cpuid_tool
  * Improve error handling in cpu_identify_all()
  * Add Python bindings (#197)
  * Support for AMD Granite Ridge
  * Support for AMD Strix Point
  * Detect x2APIC and AVX512 features for AMD x86 CPUs</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1733313600">- Update to version 0.7.1:
  * Fix cpuid kernel module build on ARM
  * Return ERR_NO_CPUID when cpuid kernel module cannot be used on AArch32
  * state
  * Refactor the build of the bindings (#203)
  * Fix build error on AArch64 when HWCAP_CPUID is not defined (#205)
  * Fix build on Windows ARM with MSVC (206)
  * Fix detection of Intel Meteor Lake
  * Support for Intel Arrow Lake
  * Support for AMD Turin</changelog>
</package>
<package pkgid="863d28060662a99a31a26f7958cb89b4e441085ebd4945f73a1bee9eb1bb674b" name="libcpuid17" arch="i586">
  <version epoch="0" ver="0.7.1" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1480334400">- Update to version 0.4.0:
  * A backwards-incompatible change, since the sizeof
    cpu_raw_data_t and cpu_id_t are now different.
  * Better detection of AMD clock multiplier with msrinfo.
  * Support for Intel SGX detection
- Some packaging cleanups
  * Use url as source
  * Split binary from devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Enable internal tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 0.4.1:
  * Better support for Skylake Core i5 (#76)
  * Misdiagnosis microarchitecture for i3-3220T (#81)
  * Ability to dump MSR values to a file (PR #82)
  * AMD Ryzen support (#86)
  * Support for Coffee and Kaby Lake (#104)
  * Support for Raven Ridge and Threadripper (#106)
  * Support for Pinnacle Ridge (#111)
  * Fix P-III Celeron misdetection
  * Support for Skylake-X (#116)
  * Support for Zen+ Threadripper</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550232000">- Use noun phrase in summaries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579780800">- Update to version 0.4.1+git.20200102:
  * DB: Add Threadripper (Castle Peak)
  * Fix compilation on non-x86/ARM architectures.
  * Add support for get_total_cpus on Haiku.
  * Some typo fixes in human readable text.
  * Add Xeon CLX (Cascade lake-based) using data from PR #129
  * add support to feature intel avx512_vnni
  * AARCH64 stub
  * Ignore convert_instlatx64 binary
  * add Hygon Dhyana C86 7seris test file
  * Add Hygon Dhyana detect support
- Switch to _service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version v0.5.0+git.20200526:
  * CI: remove 'v' prefix in assets
  * CI: checkout sources before making release
  * Release version 0.5.0 (#146)
  * Add GitHub workflows for CI/CD - CI: it will check code consistency and run tests for all events (except for tags) - CD: it will build all assets and create a draft Close #122
  * check-consistency: return error count
  * Fix code consistency Result before this patch:
  * CMake: fix include directory
  * CMake: fix build on Windows
  * CMake: fix install target's export
  * tests: fix unused-result warning in convert_instlatx64 tool
  * Update .gitignore
  * CMake: fix Unix install and format
  * Add config file for cmake-format It formats CMakeLists.txt files See https://github.com/cheshirekow/cmake_format
  * Doxygen: upgrade Doxyfile to avoid warnings warning: Tag 'PERL_PATH' at line 1032 of file '/libcpuid/build/libcpuid/Doxyfile' has become obsolete. To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u" warning: argument 'a4wide' for option PAPER_TYPE is not a valid enum value Using the default: a4!
  * Doxygen: turn on quiet mode It is too noisy with CMake
  * Detect AVX512VBMI and AVX512VBMI2 features on Intel CPUs More information: https://en.wikichip.org/wiki/x86/avx-512 Resolve #134
  * Detect ABM feature on Intel CPUs Resolve #144
  * Detect RDSEED/ADX/SHA_NI features on AMD CPUs These x86 instruction set extensions are present since Zen micro-architecture Resolve #145
  * Update cpuid_main.c
  * DB: add Ivy Bridge-E (Xeon)
  * Tests: update all tests to add fields for L1I
  * Tests: update to add L1I information Related to 25d0614811991c855ce7db0d898dbc6200dfa840 Dump of Core i5 520m from CPU-X#119
  * Add L1 Instruction Cache information Some CPUs does not have the same associativity for L1D and L1I, as reported in X0rg/CPU-X#119 It adds l1_instruction_assoc and l1_instruction_cacheline in cpu_id_t To avoid confusing, also adds l1_data_assoc and l1_data_cacheline l1_assoc and l1_cacheline are leave untouched for backward compatibility
  * Ignore .vscode directory Yes, 0b05f45e03b0aa39a65eba9451b59c9381e8474c was about VS Code
  * Tests: add amd_fn8000001dh subleaf See e562798cecf4af852fdfef4b0e7bf159a5d9b4de
  * Tests: parse subleafs in convert_instlatx64 Also, it adds 0xffffffff when data is not available, so all lines are presents
  * Re-fix L3 cache associativity detection on AMD Zen 2 CPUs Previous commit: 848394ee460c70298f91569d33f2c156bddb0f6c
  * Applied a patch from @tavplubix
  * Use constant for registers name It helps when reading technical documentation and it avoids 'magic values'
  * Remove all trailling spaces It is annoying with some text editors
  * DB: fix Rome extended model
  * DB: add Renoir APUs
  * Tests: add Core i5 8250U Related to X0rg/CPU-X#129
  * DB: add Ice Lake CPUs
  * DB: add Comet Lake CPUs
  * DB: add Coffee Lake Refresh It differs from Coffee Lake by stepping Core i5 9400 and 9500 will still be detected as Coffee Lake because it only differs by revision...
  * DB: add Coffee Lake-U It differs from Kaby Lake-U by stepping
  * DB: add Cannon Lake CPUs
  * DB: clarify Intel Generations
  * tests: remove duplicate addresses in RAW part
  * tests: fix convert_instlatx64 tool
  * Fix L3 cache associativity detection on AMD Zen 2 CPUs
  * Fix CMake
  * Add CMake
  * Add CMake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597320000">- Update to version 0.5.0+git.20200528:
  * Related to c2645d0. Convert all python scripts to Python 3.
  * Add Downloads section on Readme.md Close #140
  * Add I-Nex to the users list</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 0.5.0+git.20201019:
  * Fixes issue #148: CMake build script not in 0.5.0 tarball release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606219200">- Update to version 0.5.0+git.20201114:
  * Tests: fix path for cpuid_tool When we use CMake, the 'cpuid_tool' binary is in the 'build' directory
  * DB: add Vermeer https://en.wikichip.org/wiki/amd/cores/vermeer Test file converted from http://users.atw.hu/instlatx64/AuthenticAMD/AuthenticAMD0A20F10_K19_Vermeer_CPUID1.txt
  * DB: add Gemini Lake https://en.wikichip.org/wiki/intel/cores/gemini_lake Reported in X0rg/CPU-X#164
  * DB: add Comet Lake-U https://en.wikipedia.org/wiki/Comet_Lake_(microprocessor)#U-series_(Medium_power) Reported in X0rg/CPU-X#162
  * DB: add Kaby Lake-G https://en.wikichip.org/wiki/intel/cores/kaby_lake_g Test file converted from http://users.atw.hu/instlatx64/GenuineIntel/GenuineIntel00906E9_KabylakeG_CPUID.txt
  * DB: add Kaby Lake Refresh https://en.wikichip.org/wiki/intel/cores/kaby_lake_r Core i5 8250U was detected as Coffee Lake wrongly. Reported in X0rg/CPU-X#161</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616760000">- Update to version 0.5.1+git.1616323866:
  * Doxygen: remove deprecated option
  * Release version 0.5.1 (#151)
  * Tests: fix truncation warnings in convert_instlatx64
  * Fix warning with a comment
  * DB: add Rocket Lake
  * DB: add Milan
  * Tests: fix --create argument in convert_instlatx64 tool
  * DB: add Cezanne
  * DB: add Xeon E3 1275
  * CI: use microsoft/setup-msbuild@v1.0.2
  * CI: fix deprecated commands
  * Tests: add Core i5 8265U (Whiskey Lake-U)
  * DB: add Whiskey Lake-U</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1630065600">- Update to version 0.5.1+git.1626502835:
  * CMake: reduce min cmake requirement 3.14 -&gt; 3.13
  * Fix failing CI builds introduced by cb5fdd1
  * Use popcount64 from libc when available (#152)
  * allow to build either static or shared (#156)
  * cmake: allow libcpuid to be added as a CMake subproject (#155)
  * fix installation of BUNDLE if iOS (#154)
  * cmake: add an option to build tests (#153)
  * Fix #150: CPU Family/Model is used as Ext.Family/Model
  * DB: add Tiger Lake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644408000">- Update to version 0.5.1+git.1644144775:
  * Tests: add more Zen2 tests from InstLatx64
  * DB: add Lucienne
  * Report memory allocation failures without segfaulting. (#160)
  * Don't link with msrdriver.c on non-Windows platform. (#159)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 0.6.0:
  * Support for AMD Rembrandt
  * Support for AMD Warhol
  * Remove Debian package from source tree (#165)
  * Fix build under Clang 15 (#167)
  * Support for AMD Athlon Godavari
  * Support for hybrid CPU like Intel Alder Lake (#166)
  * Detect presence of hypervisor (#169)
  * Decode deterministic cache info for AMD CPUs (#168)
  * Add cache instances field in cpu_id_t and system_id_t (#168)
  * Support AMD Bald Eagle
  * Support for more AMD Godavari (Athlon)
  * Rename AMD Bulldozer to Zambezi
  * Support for AMD Interlagos
  * Support for AMD Abu Dhabi
  * Support for AMD Beema
  * Support for AMD Steppe Eagle
  * Support for more AMD Kabini (Sempron + Athlon)
  * Improve msr_serialize_raw_data()
  * Support for AMD Zen 2 custom APU for Steam Deck</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665576000">- Add missing dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- update to 0.6.2:
  * Support for AMD Raphael
  * Support for AMD Dali
  * Support for AMD Van Gogh
  * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172)
  * Remove AMD Warhol from DB (Zen3+ cancelled)
  * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175)
  * Fix shared library symlinks with CMake (#174)
  * Support for Intel Raptor Lake-S
  * Fix segmentation fault in cpu_identify_all() for single-core CPUs
  * Support for Intel Penryn L
  * Support for Intel Tremont
  * Support for AMD Mendocino
  * Support for Intel Ice Lake (Xeon-D)
  * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S)
  * Support for AMD Athlon 64 Sherman</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682424000">- Update to version 0.6.3:
  * Support for Intel Pentium and Celeron for Alder Lake-S
  * Support for Intel Alder Lake-HX
  * Support for Intel Alder Lake-X
  * Fix detection of Intel Alder Lake-P
  * Fix infinite loop in set_cpu_affinity() on macOS
  * Fix a misprint of extended CPUID in cpuid_basic_identify()
  * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184)
  * Query CPU info at least once even if set_cpu_affinity() fails
  * Support for AMD 19h family MSRs
  * Fix detection of Intel Core i5 Lynnfield
  * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188)
  * Support for Intel Alder Lake-N
  * Support for AMD Rembrandt with Radeon Graphics
  * Support for Intel Raptor Lake-S with "Golden Cove" cores
  * Support for Intel Raptor Lake-P
  * Support for Intel Raptor Lake-U
  * Support for Intel Rocket Lake-E</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 0.6.4
  * Support for AMD Genoa, Phoenix, Dragon Range, Ryzen Z1
  * Support for Intel Sapphire Rapids-WS, Skylake (server),
    Cascade Lake, Ice-Lake (server), Sapphire Rapids-SP,
    Raptor Lake-H/HX, Apollo lake
  * Improve support for Arrandale, Alder-Lake and Raptor-Lake P/U
  * Initial support for Centaur CPUs (VIA and Zhaoxin)</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719576000">- update to release 0.6.5
  * Support for Intel Bay Trail-M
  * Support for Intel Bay Trail-T
  * Support for Intel Bay Trail-D
  * Support for AMD Storm Peak
  * Support for Intel Raport Lake Refresh
  * Support heterogeneous RAW dumps in cpu_identify_all()
  * Support for Intel Meteor Lake, including detection of LP E-Cores
  * Support for Intel Emerald Rapids-SP
  * Support for more AMD Van Gogh</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1725796800">- update to 0.7.0:
  * Version 0.7.0 (2024-08-26):
  * Fix handle leaks in rdmsr.c (#199)
  * Fix cpuid_get_hypervisor when NULL data is provided (#199)
  * Prevent intel_fn11 array overruns (#199)
  * Support for AMD Hawk Point
  * Support for more AMD Phoenix (8000 series)
  * Add cpu_clock_by_tsc() function to the library (#124)
  * Check x86 CPUs MSR support (#185)
  * Add support for ARM CPUs (AArch32 + AArch64) (#200)
  * Add cpu_feature_level_t enumerated values for x86 CPUs (#177)
  * Support up to 4 subleaf entries for CPUID leaf 0x80000026
    (#189)
  * Support for Extended CPU topology subleaf in
    cpuid_identify_purpose_amd() (#189)
  * Support CPU purpose for AMD x86 CPUs (#189)
  * Add cpuid Linux and FreeBSD kernel modules for ARM CPUs
  * Improve errors handling in cpuid_get_all_raw_data() and
    cpuid_get_raw_data_core() (#202)
  * Support get_total_cpus() on DragonFly BSD
  * Improve set_cpu_affinity() on NetBSD
  * Fix build on OpenBSD
  * Improve behavior when CPU affinity cannot be set
  * Fix a regression in cpuid_tool about arguments doing nothing
    (like --rdmsr or --cpuid)
  * Fix a segmentation fault when using --quiet in cpuid_tool
  * Improve error handling in cpu_identify_all()
  * Add Python bindings (#197)
  * Support for AMD Granite Ridge
  * Support for AMD Strix Point
  * Detect x2APIC and AVX512 features for AMD x86 CPUs</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1733313600">- Update to version 0.7.1:
  * Fix cpuid kernel module build on ARM
  * Return ERR_NO_CPUID when cpuid kernel module cannot be used on AArch32
  * state
  * Refactor the build of the bindings (#203)
  * Fix build error on AArch64 when HWCAP_CPUID is not defined (#205)
  * Fix build on Windows ARM with MSVC (206)
  * Fix detection of Intel Meteor Lake
  * Support for Intel Arrow Lake
  * Support for AMD Turin</changelog>
</package>
<package pkgid="b96653f92edf22244bebca6602dbb30beeccd078cfdf2ec2c1e48d07ae16a945" name="libcpuid17" arch="ppc64le">
  <version epoch="0" ver="0.7.1" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1480334400">- Update to version 0.4.0:
  * A backwards-incompatible change, since the sizeof
    cpu_raw_data_t and cpu_id_t are now different.
  * Better detection of AMD clock multiplier with msrinfo.
  * Support for Intel SGX detection
- Some packaging cleanups
  * Use url as source
  * Split binary from devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Enable internal tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 0.4.1:
  * Better support for Skylake Core i5 (#76)
  * Misdiagnosis microarchitecture for i3-3220T (#81)
  * Ability to dump MSR values to a file (PR #82)
  * AMD Ryzen support (#86)
  * Support for Coffee and Kaby Lake (#104)
  * Support for Raven Ridge and Threadripper (#106)
  * Support for Pinnacle Ridge (#111)
  * Fix P-III Celeron misdetection
  * Support for Skylake-X (#116)
  * Support for Zen+ Threadripper</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550232000">- Use noun phrase in summaries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579780800">- Update to version 0.4.1+git.20200102:
  * DB: Add Threadripper (Castle Peak)
  * Fix compilation on non-x86/ARM architectures.
  * Add support for get_total_cpus on Haiku.
  * Some typo fixes in human readable text.
  * Add Xeon CLX (Cascade lake-based) using data from PR #129
  * add support to feature intel avx512_vnni
  * AARCH64 stub
  * Ignore convert_instlatx64 binary
  * add Hygon Dhyana C86 7seris test file
  * Add Hygon Dhyana detect support
- Switch to _service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version v0.5.0+git.20200526:
  * CI: remove 'v' prefix in assets
  * CI: checkout sources before making release
  * Release version 0.5.0 (#146)
  * Add GitHub workflows for CI/CD - CI: it will check code consistency and run tests for all events (except for tags) - CD: it will build all assets and create a draft Close #122
  * check-consistency: return error count
  * Fix code consistency Result before this patch:
  * CMake: fix include directory
  * CMake: fix build on Windows
  * CMake: fix install target's export
  * tests: fix unused-result warning in convert_instlatx64 tool
  * Update .gitignore
  * CMake: fix Unix install and format
  * Add config file for cmake-format It formats CMakeLists.txt files See https://github.com/cheshirekow/cmake_format
  * Doxygen: upgrade Doxyfile to avoid warnings warning: Tag 'PERL_PATH' at line 1032 of file '/libcpuid/build/libcpuid/Doxyfile' has become obsolete. To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u" warning: argument 'a4wide' for option PAPER_TYPE is not a valid enum value Using the default: a4!
  * Doxygen: turn on quiet mode It is too noisy with CMake
  * Detect AVX512VBMI and AVX512VBMI2 features on Intel CPUs More information: https://en.wikichip.org/wiki/x86/avx-512 Resolve #134
  * Detect ABM feature on Intel CPUs Resolve #144
  * Detect RDSEED/ADX/SHA_NI features on AMD CPUs These x86 instruction set extensions are present since Zen micro-architecture Resolve #145
  * Update cpuid_main.c
  * DB: add Ivy Bridge-E (Xeon)
  * Tests: update all tests to add fields for L1I
  * Tests: update to add L1I information Related to 25d0614811991c855ce7db0d898dbc6200dfa840 Dump of Core i5 520m from CPU-X#119
  * Add L1 Instruction Cache information Some CPUs does not have the same associativity for L1D and L1I, as reported in X0rg/CPU-X#119 It adds l1_instruction_assoc and l1_instruction_cacheline in cpu_id_t To avoid confusing, also adds l1_data_assoc and l1_data_cacheline l1_assoc and l1_cacheline are leave untouched for backward compatibility
  * Ignore .vscode directory Yes, 0b05f45e03b0aa39a65eba9451b59c9381e8474c was about VS Code
  * Tests: add amd_fn8000001dh subleaf See e562798cecf4af852fdfef4b0e7bf159a5d9b4de
  * Tests: parse subleafs in convert_instlatx64 Also, it adds 0xffffffff when data is not available, so all lines are presents
  * Re-fix L3 cache associativity detection on AMD Zen 2 CPUs Previous commit: 848394ee460c70298f91569d33f2c156bddb0f6c
  * Applied a patch from @tavplubix
  * Use constant for registers name It helps when reading technical documentation and it avoids 'magic values'
  * Remove all trailling spaces It is annoying with some text editors
  * DB: fix Rome extended model
  * DB: add Renoir APUs
  * Tests: add Core i5 8250U Related to X0rg/CPU-X#129
  * DB: add Ice Lake CPUs
  * DB: add Comet Lake CPUs
  * DB: add Coffee Lake Refresh It differs from Coffee Lake by stepping Core i5 9400 and 9500 will still be detected as Coffee Lake because it only differs by revision...
  * DB: add Coffee Lake-U It differs from Kaby Lake-U by stepping
  * DB: add Cannon Lake CPUs
  * DB: clarify Intel Generations
  * tests: remove duplicate addresses in RAW part
  * tests: fix convert_instlatx64 tool
  * Fix L3 cache associativity detection on AMD Zen 2 CPUs
  * Fix CMake
  * Add CMake
  * Add CMake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597320000">- Update to version 0.5.0+git.20200528:
  * Related to c2645d0. Convert all python scripts to Python 3.
  * Add Downloads section on Readme.md Close #140
  * Add I-Nex to the users list</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 0.5.0+git.20201019:
  * Fixes issue #148: CMake build script not in 0.5.0 tarball release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606219200">- Update to version 0.5.0+git.20201114:
  * Tests: fix path for cpuid_tool When we use CMake, the 'cpuid_tool' binary is in the 'build' directory
  * DB: add Vermeer https://en.wikichip.org/wiki/amd/cores/vermeer Test file converted from http://users.atw.hu/instlatx64/AuthenticAMD/AuthenticAMD0A20F10_K19_Vermeer_CPUID1.txt
  * DB: add Gemini Lake https://en.wikichip.org/wiki/intel/cores/gemini_lake Reported in X0rg/CPU-X#164
  * DB: add Comet Lake-U https://en.wikipedia.org/wiki/Comet_Lake_(microprocessor)#U-series_(Medium_power) Reported in X0rg/CPU-X#162
  * DB: add Kaby Lake-G https://en.wikichip.org/wiki/intel/cores/kaby_lake_g Test file converted from http://users.atw.hu/instlatx64/GenuineIntel/GenuineIntel00906E9_KabylakeG_CPUID.txt
  * DB: add Kaby Lake Refresh https://en.wikichip.org/wiki/intel/cores/kaby_lake_r Core i5 8250U was detected as Coffee Lake wrongly. Reported in X0rg/CPU-X#161</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616760000">- Update to version 0.5.1+git.1616323866:
  * Doxygen: remove deprecated option
  * Release version 0.5.1 (#151)
  * Tests: fix truncation warnings in convert_instlatx64
  * Fix warning with a comment
  * DB: add Rocket Lake
  * DB: add Milan
  * Tests: fix --create argument in convert_instlatx64 tool
  * DB: add Cezanne
  * DB: add Xeon E3 1275
  * CI: use microsoft/setup-msbuild@v1.0.2
  * CI: fix deprecated commands
  * Tests: add Core i5 8265U (Whiskey Lake-U)
  * DB: add Whiskey Lake-U</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1630065600">- Update to version 0.5.1+git.1626502835:
  * CMake: reduce min cmake requirement 3.14 -&gt; 3.13
  * Fix failing CI builds introduced by cb5fdd1
  * Use popcount64 from libc when available (#152)
  * allow to build either static or shared (#156)
  * cmake: allow libcpuid to be added as a CMake subproject (#155)
  * fix installation of BUNDLE if iOS (#154)
  * cmake: add an option to build tests (#153)
  * Fix #150: CPU Family/Model is used as Ext.Family/Model
  * DB: add Tiger Lake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644408000">- Update to version 0.5.1+git.1644144775:
  * Tests: add more Zen2 tests from InstLatx64
  * DB: add Lucienne
  * Report memory allocation failures without segfaulting. (#160)
  * Don't link with msrdriver.c on non-Windows platform. (#159)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 0.6.0:
  * Support for AMD Rembrandt
  * Support for AMD Warhol
  * Remove Debian package from source tree (#165)
  * Fix build under Clang 15 (#167)
  * Support for AMD Athlon Godavari
  * Support for hybrid CPU like Intel Alder Lake (#166)
  * Detect presence of hypervisor (#169)
  * Decode deterministic cache info for AMD CPUs (#168)
  * Add cache instances field in cpu_id_t and system_id_t (#168)
  * Support AMD Bald Eagle
  * Support for more AMD Godavari (Athlon)
  * Rename AMD Bulldozer to Zambezi
  * Support for AMD Interlagos
  * Support for AMD Abu Dhabi
  * Support for AMD Beema
  * Support for AMD Steppe Eagle
  * Support for more AMD Kabini (Sempron + Athlon)
  * Improve msr_serialize_raw_data()
  * Support for AMD Zen 2 custom APU for Steam Deck</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665576000">- Add missing dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- update to 0.6.2:
  * Support for AMD Raphael
  * Support for AMD Dali
  * Support for AMD Van Gogh
  * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172)
  * Remove AMD Warhol from DB (Zen3+ cancelled)
  * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175)
  * Fix shared library symlinks with CMake (#174)
  * Support for Intel Raptor Lake-S
  * Fix segmentation fault in cpu_identify_all() for single-core CPUs
  * Support for Intel Penryn L
  * Support for Intel Tremont
  * Support for AMD Mendocino
  * Support for Intel Ice Lake (Xeon-D)
  * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S)
  * Support for AMD Athlon 64 Sherman</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682424000">- Update to version 0.6.3:
  * Support for Intel Pentium and Celeron for Alder Lake-S
  * Support for Intel Alder Lake-HX
  * Support for Intel Alder Lake-X
  * Fix detection of Intel Alder Lake-P
  * Fix infinite loop in set_cpu_affinity() on macOS
  * Fix a misprint of extended CPUID in cpuid_basic_identify()
  * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184)
  * Query CPU info at least once even if set_cpu_affinity() fails
  * Support for AMD 19h family MSRs
  * Fix detection of Intel Core i5 Lynnfield
  * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188)
  * Support for Intel Alder Lake-N
  * Support for AMD Rembrandt with Radeon Graphics
  * Support for Intel Raptor Lake-S with "Golden Cove" cores
  * Support for Intel Raptor Lake-P
  * Support for Intel Raptor Lake-U
  * Support for Intel Rocket Lake-E</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 0.6.4
  * Support for AMD Genoa, Phoenix, Dragon Range, Ryzen Z1
  * Support for Intel Sapphire Rapids-WS, Skylake (server),
    Cascade Lake, Ice-Lake (server), Sapphire Rapids-SP,
    Raptor Lake-H/HX, Apollo lake
  * Improve support for Arrandale, Alder-Lake and Raptor-Lake P/U
  * Initial support for Centaur CPUs (VIA and Zhaoxin)</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719576000">- update to release 0.6.5
  * Support for Intel Bay Trail-M
  * Support for Intel Bay Trail-T
  * Support for Intel Bay Trail-D
  * Support for AMD Storm Peak
  * Support for Intel Raport Lake Refresh
  * Support heterogeneous RAW dumps in cpu_identify_all()
  * Support for Intel Meteor Lake, including detection of LP E-Cores
  * Support for Intel Emerald Rapids-SP
  * Support for more AMD Van Gogh</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1725796800">- update to 0.7.0:
  * Version 0.7.0 (2024-08-26):
  * Fix handle leaks in rdmsr.c (#199)
  * Fix cpuid_get_hypervisor when NULL data is provided (#199)
  * Prevent intel_fn11 array overruns (#199)
  * Support for AMD Hawk Point
  * Support for more AMD Phoenix (8000 series)
  * Add cpu_clock_by_tsc() function to the library (#124)
  * Check x86 CPUs MSR support (#185)
  * Add support for ARM CPUs (AArch32 + AArch64) (#200)
  * Add cpu_feature_level_t enumerated values for x86 CPUs (#177)
  * Support up to 4 subleaf entries for CPUID leaf 0x80000026
    (#189)
  * Support for Extended CPU topology subleaf in
    cpuid_identify_purpose_amd() (#189)
  * Support CPU purpose for AMD x86 CPUs (#189)
  * Add cpuid Linux and FreeBSD kernel modules for ARM CPUs
  * Improve errors handling in cpuid_get_all_raw_data() and
    cpuid_get_raw_data_core() (#202)
  * Support get_total_cpus() on DragonFly BSD
  * Improve set_cpu_affinity() on NetBSD
  * Fix build on OpenBSD
  * Improve behavior when CPU affinity cannot be set
  * Fix a regression in cpuid_tool about arguments doing nothing
    (like --rdmsr or --cpuid)
  * Fix a segmentation fault when using --quiet in cpuid_tool
  * Improve error handling in cpu_identify_all()
  * Add Python bindings (#197)
  * Support for AMD Granite Ridge
  * Support for AMD Strix Point
  * Detect x2APIC and AVX512 features for AMD x86 CPUs</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1733313600">- Update to version 0.7.1:
  * Fix cpuid kernel module build on ARM
  * Return ERR_NO_CPUID when cpuid kernel module cannot be used on AArch32
  * state
  * Refactor the build of the bindings (#203)
  * Fix build error on AArch64 when HWCAP_CPUID is not defined (#205)
  * Fix build on Windows ARM with MSVC (206)
  * Fix detection of Intel Meteor Lake
  * Support for Intel Arrow Lake
  * Support for AMD Turin</changelog>
</package>
<package pkgid="f1b6e1b985cbd2486f0ab2a03938db98f8ebcb1539c5e43147e1617f261288f6" name="libcpuid17" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="bp156.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1480334400">- Update to version 0.4.0:
  * A backwards-incompatible change, since the sizeof
    cpu_raw_data_t and cpu_id_t are now different.
  * Better detection of AMD clock multiplier with msrinfo.
  * Support for Intel SGX detection
- Some packaging cleanups
  * Use url as source
  * Split binary from devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Enable internal tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 0.4.1:
  * Better support for Skylake Core i5 (#76)
  * Misdiagnosis microarchitecture for i3-3220T (#81)
  * Ability to dump MSR values to a file (PR #82)
  * AMD Ryzen support (#86)
  * Support for Coffee and Kaby Lake (#104)
  * Support for Raven Ridge and Threadripper (#106)
  * Support for Pinnacle Ridge (#111)
  * Fix P-III Celeron misdetection
  * Support for Skylake-X (#116)
  * Support for Zen+ Threadripper</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1550232000">- Use noun phrase in summaries.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1579780800">- Update to version 0.4.1+git.20200102:
  * DB: Add Threadripper (Castle Peak)
  * Fix compilation on non-x86/ARM architectures.
  * Add support for get_total_cpus on Haiku.
  * Some typo fixes in human readable text.
  * Add Xeon CLX (Cascade lake-based) using data from PR #129
  * add support to feature intel avx512_vnni
  * AARCH64 stub
  * Ignore convert_instlatx64 binary
  * add Hygon Dhyana C86 7seris test file
  * Add Hygon Dhyana detect support
- Switch to _service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version v0.5.0+git.20200526:
  * CI: remove 'v' prefix in assets
  * CI: checkout sources before making release
  * Release version 0.5.0 (#146)
  * Add GitHub workflows for CI/CD - CI: it will check code consistency and run tests for all events (except for tags) - CD: it will build all assets and create a draft Close #122
  * check-consistency: return error count
  * Fix code consistency Result before this patch:
  * CMake: fix include directory
  * CMake: fix build on Windows
  * CMake: fix install target's export
  * tests: fix unused-result warning in convert_instlatx64 tool
  * Update .gitignore
  * CMake: fix Unix install and format
  * Add config file for cmake-format It formats CMakeLists.txt files See https://github.com/cheshirekow/cmake_format
  * Doxygen: upgrade Doxyfile to avoid warnings warning: Tag 'PERL_PATH' at line 1032 of file '/libcpuid/build/libcpuid/Doxyfile' has become obsolete. To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u" warning: argument 'a4wide' for option PAPER_TYPE is not a valid enum value Using the default: a4!
  * Doxygen: turn on quiet mode It is too noisy with CMake
  * Detect AVX512VBMI and AVX512VBMI2 features on Intel CPUs More information: https://en.wikichip.org/wiki/x86/avx-512 Resolve #134
  * Detect ABM feature on Intel CPUs Resolve #144
  * Detect RDSEED/ADX/SHA_NI features on AMD CPUs These x86 instruction set extensions are present since Zen micro-architecture Resolve #145
  * Update cpuid_main.c
  * DB: add Ivy Bridge-E (Xeon)
  * Tests: update all tests to add fields for L1I
  * Tests: update to add L1I information Related to 25d0614811991c855ce7db0d898dbc6200dfa840 Dump of Core i5 520m from CPU-X#119
  * Add L1 Instruction Cache information Some CPUs does not have the same associativity for L1D and L1I, as reported in X0rg/CPU-X#119 It adds l1_instruction_assoc and l1_instruction_cacheline in cpu_id_t To avoid confusing, also adds l1_data_assoc and l1_data_cacheline l1_assoc and l1_cacheline are leave untouched for backward compatibility
  * Ignore .vscode directory Yes, 0b05f45e03b0aa39a65eba9451b59c9381e8474c was about VS Code
  * Tests: add amd_fn8000001dh subleaf See e562798cecf4af852fdfef4b0e7bf159a5d9b4de
  * Tests: parse subleafs in convert_instlatx64 Also, it adds 0xffffffff when data is not available, so all lines are presents
  * Re-fix L3 cache associativity detection on AMD Zen 2 CPUs Previous commit: 848394ee460c70298f91569d33f2c156bddb0f6c
  * Applied a patch from @tavplubix
  * Use constant for registers name It helps when reading technical documentation and it avoids 'magic values'
  * Remove all trailling spaces It is annoying with some text editors
  * DB: fix Rome extended model
  * DB: add Renoir APUs
  * Tests: add Core i5 8250U Related to X0rg/CPU-X#129
  * DB: add Ice Lake CPUs
  * DB: add Comet Lake CPUs
  * DB: add Coffee Lake Refresh It differs from Coffee Lake by stepping Core i5 9400 and 9500 will still be detected as Coffee Lake because it only differs by revision...
  * DB: add Coffee Lake-U It differs from Kaby Lake-U by stepping
  * DB: add Cannon Lake CPUs
  * DB: clarify Intel Generations
  * tests: remove duplicate addresses in RAW part
  * tests: fix convert_instlatx64 tool
  * Fix L3 cache associativity detection on AMD Zen 2 CPUs
  * Fix CMake
  * Add CMake
  * Add CMake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597320000">- Update to version 0.5.0+git.20200528:
  * Related to c2645d0. Convert all python scripts to Python 3.
  * Add Downloads section on Readme.md Close #140
  * Add I-Nex to the users list</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 0.5.0+git.20201019:
  * Fixes issue #148: CMake build script not in 0.5.0 tarball release</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606219200">- Update to version 0.5.0+git.20201114:
  * Tests: fix path for cpuid_tool When we use CMake, the 'cpuid_tool' binary is in the 'build' directory
  * DB: add Vermeer https://en.wikichip.org/wiki/amd/cores/vermeer Test file converted from http://users.atw.hu/instlatx64/AuthenticAMD/AuthenticAMD0A20F10_K19_Vermeer_CPUID1.txt
  * DB: add Gemini Lake https://en.wikichip.org/wiki/intel/cores/gemini_lake Reported in X0rg/CPU-X#164
  * DB: add Comet Lake-U https://en.wikipedia.org/wiki/Comet_Lake_(microprocessor)#U-series_(Medium_power) Reported in X0rg/CPU-X#162
  * DB: add Kaby Lake-G https://en.wikichip.org/wiki/intel/cores/kaby_lake_g Test file converted from http://users.atw.hu/instlatx64/GenuineIntel/GenuineIntel00906E9_KabylakeG_CPUID.txt
  * DB: add Kaby Lake Refresh https://en.wikichip.org/wiki/intel/cores/kaby_lake_r Core i5 8250U was detected as Coffee Lake wrongly. Reported in X0rg/CPU-X#161</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616760000">- Update to version 0.5.1+git.1616323866:
  * Doxygen: remove deprecated option
  * Release version 0.5.1 (#151)
  * Tests: fix truncation warnings in convert_instlatx64
  * Fix warning with a comment
  * DB: add Rocket Lake
  * DB: add Milan
  * Tests: fix --create argument in convert_instlatx64 tool
  * DB: add Cezanne
  * DB: add Xeon E3 1275
  * CI: use microsoft/setup-msbuild@v1.0.2
  * CI: fix deprecated commands
  * Tests: add Core i5 8265U (Whiskey Lake-U)
  * DB: add Whiskey Lake-U</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1630065600">- Update to version 0.5.1+git.1626502835:
  * CMake: reduce min cmake requirement 3.14 -&gt; 3.13
  * Fix failing CI builds introduced by cb5fdd1
  * Use popcount64 from libc when available (#152)
  * allow to build either static or shared (#156)
  * cmake: allow libcpuid to be added as a CMake subproject (#155)
  * fix installation of BUNDLE if iOS (#154)
  * cmake: add an option to build tests (#153)
  * Fix #150: CPU Family/Model is used as Ext.Family/Model
  * DB: add Tiger Lake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644408000">- Update to version 0.5.1+git.1644144775:
  * Tests: add more Zen2 tests from InstLatx64
  * DB: add Lucienne
  * Report memory allocation failures without segfaulting. (#160)
  * Don't link with msrdriver.c on non-Windows platform. (#159)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 0.6.0:
  * Support for AMD Rembrandt
  * Support for AMD Warhol
  * Remove Debian package from source tree (#165)
  * Fix build under Clang 15 (#167)
  * Support for AMD Athlon Godavari
  * Support for hybrid CPU like Intel Alder Lake (#166)
  * Detect presence of hypervisor (#169)
  * Decode deterministic cache info for AMD CPUs (#168)
  * Add cache instances field in cpu_id_t and system_id_t (#168)
  * Support AMD Bald Eagle
  * Support for more AMD Godavari (Athlon)
  * Rename AMD Bulldozer to Zambezi
  * Support for AMD Interlagos
  * Support for AMD Abu Dhabi
  * Support for AMD Beema
  * Support for AMD Steppe Eagle
  * Support for more AMD Kabini (Sempron + Athlon)
  * Improve msr_serialize_raw_data()
  * Support for AMD Zen 2 custom APU for Steam Deck</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665576000">- Add missing dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1669982400">- update to 0.6.2:
  * Support for AMD Raphael
  * Support for AMD Dali
  * Support for AMD Van Gogh
  * Fix stuck cpuid_tool due to set_cpu_affinity() on Windows (#172)
  * Remove AMD Warhol from DB (Zen3+ cancelled)
  * Fix physical core count computed by cpu_identify_all() when HT is disabled (#175)
  * Fix shared library symlinks with CMake (#174)
  * Support for Intel Raptor Lake-S
  * Fix segmentation fault in cpu_identify_all() for single-core CPUs
  * Support for Intel Penryn L
  * Support for Intel Tremont
  * Support for AMD Mendocino
  * Support for Intel Ice Lake (Xeon-D)
  * Support for AMD Zen 2 Desktop Kit CPUs (4700S + 4800S)
  * Support for AMD Athlon 64 Sherman</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682424000">- Update to version 0.6.3:
  * Support for Intel Pentium and Celeron for Alder Lake-S
  * Support for Intel Alder Lake-HX
  * Support for Intel Alder Lake-X
  * Fix detection of Intel Alder Lake-P
  * Fix infinite loop in set_cpu_affinity() on macOS
  * Fix a misprint of extended CPUID in cpuid_basic_identify()
  * Restore previous thread CPU affinity before returning from cpuid_get_all_raw_data() (#184)
  * Query CPU info at least once even if set_cpu_affinity() fails
  * Support for AMD 19h family MSRs
  * Fix detection of Intel Core i5 Lynnfield
  * Rename set_error() to cpuid_set_error() and get_error() to cpuid_get_error() (#188)
  * Support for Intel Alder Lake-N
  * Support for AMD Rembrandt with Radeon Graphics
  * Support for Intel Raptor Lake-S with "Golden Cove" cores
  * Support for Intel Raptor Lake-P
  * Support for Intel Raptor Lake-U
  * Support for Intel Rocket Lake-E</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 0.6.4
  * Support for AMD Genoa, Phoenix, Dragon Range, Ryzen Z1
  * Support for Intel Sapphire Rapids-WS, Skylake (server),
    Cascade Lake, Ice-Lake (server), Sapphire Rapids-SP,
    Raptor Lake-H/HX, Apollo lake
  * Improve support for Arrandale, Alder-Lake and Raptor-Lake P/U
  * Initial support for Centaur CPUs (VIA and Zhaoxin)</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719576000">- update to release 0.6.5
  * Support for Intel Bay Trail-M
  * Support for Intel Bay Trail-T
  * Support for Intel Bay Trail-D
  * Support for AMD Storm Peak
  * Support for Intel Raport Lake Refresh
  * Support heterogeneous RAW dumps in cpu_identify_all()
  * Support for Intel Meteor Lake, including detection of LP E-Cores
  * Support for Intel Emerald Rapids-SP
  * Support for more AMD Van Gogh</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1725796800">- update to 0.7.0:
  * Version 0.7.0 (2024-08-26):
  * Fix handle leaks in rdmsr.c (#199)
  * Fix cpuid_get_hypervisor when NULL data is provided (#199)
  * Prevent intel_fn11 array overruns (#199)
  * Support for AMD Hawk Point
  * Support for more AMD Phoenix (8000 series)
  * Add cpu_clock_by_tsc() function to the library (#124)
  * Check x86 CPUs MSR support (#185)
  * Add support for ARM CPUs (AArch32 + AArch64) (#200)
  * Add cpu_feature_level_t enumerated values for x86 CPUs (#177)
  * Support up to 4 subleaf entries for CPUID leaf 0x80000026
    (#189)
  * Support for Extended CPU topology subleaf in
    cpuid_identify_purpose_amd() (#189)
  * Support CPU purpose for AMD x86 CPUs (#189)
  * Add cpuid Linux and FreeBSD kernel modules for ARM CPUs
  * Improve errors handling in cpuid_get_all_raw_data() and
    cpuid_get_raw_data_core() (#202)
  * Support get_total_cpus() on DragonFly BSD
  * Improve set_cpu_affinity() on NetBSD
  * Fix build on OpenBSD
  * Improve behavior when CPU affinity cannot be set
  * Fix a regression in cpuid_tool about arguments doing nothing
    (like --rdmsr or --cpuid)
  * Fix a segmentation fault when using --quiet in cpuid_tool
  * Improve error handling in cpu_identify_all()
  * Add Python bindings (#197)
  * Support for AMD Granite Ridge
  * Support for AMD Strix Point
  * Detect x2APIC and AVX512 features for AMD x86 CPUs</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1733313600">- Update to version 0.7.1:
  * Fix cpuid kernel module build on ARM
  * Return ERR_NO_CPUID when cpuid kernel module cannot be used on AArch32
  * state
  * Refactor the build of the bindings (#203)
  * Fix build error on AArch64 when HWCAP_CPUID is not defined (#205)
  * Fix build on Windows ARM with MSVC (206)
  * Fix detection of Intel Meteor Lake
  * Support for Intel Arrow Lake
  * Support for AMD Turin</changelog>
</package>
<package pkgid="de2d3c03ab0f597d9d572e276cd0a8e6adecdc626a9c6daaf2beed633de5f4a4" name="libdcmtk19" arch="aarch64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="6602e2f66deeefa12566fc5e78b3f77f91e342614391a1ec8a02dad75c32fe89" name="libdcmtk19" arch="i586">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="4ce9383e7577fd170924d4f42d8d85fd5f6a870db0a747ac4ab1a0bec2ca27b0" name="libdcmtk19" arch="ppc64le">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="3621dfec663fe137cb1d8b9dad9da91ef758481c19b77eb1aeb7e44d13ef844f" name="libdcmtk19" arch="s390x">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="9e88be579d5fb354e3ae5619aa2ecb033b592dce92d41fc462ae500f39d57fa5" name="libdcmtk19" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.12.1"/>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="725b809304c7fb9066564d9ca07aecf2008f5b7cd88d2cd1c8aed4988c31da0c" name="libdcmtk19" arch="aarch64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="a52ba85f169df3476eaa3215ff99eb4c99f4b0149e1f71430f3a2deeee59f928" name="libdcmtk19" arch="i586">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="af2c95abde4bc77887ca13bdfff93511ab281ac3a07a4e66777dd48c2f42e3b5" name="libdcmtk19" arch="ppc64le">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="a34fd45bdbb950a8d851e0bd30c637747329a16108ff8669458e60979768e162" name="libdcmtk19" arch="s390x">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="754f1a9fe63f3e890eff546004cb7d9bdc863981024e78e4757a60c720dc29c8" name="libdcmtk19" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1500984000">- Update to version 3.6.2
  * See DOCS/CHANGES.362 for more information
- Build against the internal CharLS library. Only version 1.0 is
  supported and Factory offers version 2.0
  * Drop patches:
  - dcmtk-3.6.0-0004-Use-system-charls.patch
  - dcmtk-3.6.0-0003-Removed-bundled-libcharl-reference-in-dcmjpls.patch
  - dcmtk-3.6.0-0005-Fixed-includes-for-CharLS-1.0.patch
- Drop patches due to updated build system and upstream integration:
  * dcmtk-3.6.0-0001-Added-soname-information-for-all-targets.patch
  * dcmtk-3.6.0-0006-Added-optional-support-for-building-shared-libraries.patch
  * dcmtk-3.6.0-0007-Add-soname-generation-for-modules-which-are-not-in-D.patch
  * dcmtk-3.6.0.diff
  * gcc-4.7_fix.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
</package>
<package pkgid="61d4eeacbdb85b3281a5284625985480532673493a6dfd1aab06bd17391d02a1" name="libdcmtk19" arch="aarch64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="34e63adb2214d905287715ed6441b1f6cae78e6f1dc8999121fbbc7bfa561c03" name="libdcmtk19" arch="i586">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="93ea5902f2ef39743c99ce2ae7d689e9eb015194a1934836b36c6cd28506594d" name="libdcmtk19" arch="ppc64le">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="9f9b7a0fd55ad8f08dba626d613b951950f38ece0a6bc4ada19c71effb1d17b1" name="libdcmtk19" arch="s390x">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="9ea7b9e0c17a7fddab7bbbf20371ac21d360cc2fececf7562bddb4f3e2bb5383" name="libdcmtk19" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.6.1"/>
  <changelog author="guillaume@opensuse.org" date="1510920000">- Add dcmtk-fix-DCMTKTargets.cmake.patch to fix usage of 'dcmtk-devel'
  without 'dcmtk' package</changelog>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
</package>
<package pkgid="d38ccc066c493d382f933fe5eddc10454256e823d8dddd48b3939cc5ed7fe5e4" name="libdcmtk19" arch="aarch64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="fe9dc5b16b9bb71504b5eb9c7d053eceab99660780eb577eede531d8f433ecd6" name="libdcmtk19" arch="i586">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="68f1a92f8685f144abada8c1895be2c86d5bc2316a9615af3f2a7d3003e0ae36" name="libdcmtk19" arch="ppc64le">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="aa710f07cba6a4d11becd71d23fb136e684a525b01a3c99df47f35265a9ae76a" name="libdcmtk19" arch="s390x">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="4c3764e0adb4371d42ed2d268286fbb33606edf233255f4e8dd13c0bd1991466" name="libdcmtk19" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp156.4.9.1"/>
  <changelog author="christophe@krop.fr" date="1511006400">- Fix dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.6.3. See DOCS/CHANGES.363 for more information
  * Fix some buildsystem issues
  * Enabled new TLS versions when using OpenSSL &lt; 1.1.0
- Drop dcmtk-3.6.0-0002-Install-libs-in-the-correct-arch-dir.patch.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531224000">- Add patch to fix path in DCMTKConfig.cmake:
  * dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="92c09a3965f2b09fb4fbdcf15de101e1dfce1f1e516da3a59032d188da8ea07f" name="libdcmtk20" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="cd7716002f62b5b4ff446ef24b6e31280343eb212360b70bdaa3a78fe570da02" name="libdcmtk20" arch="i586">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="27c94ac7d52b400cecfdc2adc80178d003fa8731ec14d71cc304bc8a2ebea88e" name="libdcmtk20" arch="ppc64le">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="e7b2aebce83803fca84025c10930860b24d2ce61c517e6106b0fd48d23c1e6f2" name="libdcmtk20" arch="s390x">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="05b4958bf8582a6acdd159647166405afeb946d78103942aa9ee71a0e0265d98" name="libdcmtk20" arch="x86_64">
  <version epoch="0" ver="3.7.0" rel="bp156.4.15.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1552996800">- Fix a typo detected by Leap 15.1
- Update to 3.6.4. See DOCS/CHANGES.364 for more information
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch
- Drop dcmtk-fix-CONFIGURE_PACKAGE_CONFIG_FILE.patch, merged upstream</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 3.6.5. See DOCS/CHANGES.365 for more information
  * Updated code definitions for DICOM 2018e
  * Fix some -Wunused-result warnings warnings
  * Fixed CMake error if "FindPkgConfig" is missing</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Explicitly require tcpd-devel. The dcmnet library links to libwrap.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1603368000">- Add patch to avoid file conflict between dcmtk and charls:
  * 0001-Link-charls-statically.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1618920000">- Update to 3.6.6. See DOCS/CHANGES.366 for more information
- Drop 0001-Link-charls-statically.patch
- Spec cleanup</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1650888000">- Fix the package soname</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637,
  CVE-2022-2121, CVE-2022-2120, CVE-2022-2119)
  See DOCS/CHANGES.367 for the full list of changes
  * Updated code definitions for DICOM 2022b
  * Fixed possible NULL pointer dereference
- Rebase dcmtk-fix-DCMTKTargets.cmake.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1756728000">- Add upstream change (CVE-2025-9732, boo#1248995)
  * CVE-2025-9732.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1764158400">- Add patch to avoid unnecessary dependencies (boo#1254123):
  * 0001-dcmimage-Link-privately-to-libtiff-and-libpng.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1767528000">- Update to 3.7.0. See docs/CHANGES.370 for the full list of changes
  * Fixes CVE-2025-14841 / boo#1255292
  * Fixes CVE-2025-14607 / boo#1255464
- Drop patches, merged upstream:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
  * CVE-2025-2357.patch
  * CVE-2025-9732.patch</changelog>
</package>
<package pkgid="c1b24cdff76ac1f4a631570668d21dfbc11765f64615188fb182a8758dd01467" name="libdnssec9" arch="aarch64">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="d387bfd1ff251f1dc8b2ccd4a99a3f104b93082ae347eab3e69ad43d929b6574" name="libdnssec9" arch="i586">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="b497c9b98c82d28346d571f24467610903e1a8a442c43f36b7beeb0f0efcfa3f" name="libdnssec9" arch="ppc64le">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="f48bd8be0cd3cee4241ce4513d562b004b5775a95714b553c0b989db7b15abd9" name="libdnssec9" arch="s390x">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="5962d6424440d1c8799fd97b15b8206ad4b3176e0894e361a4f4c3dfea0cda6b" name="libdnssec9" arch="x86_64">
  <version epoch="0" ver="3.4.6" rel="bp156.2.3.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1694433600">- update to version 3.3.1, see:
  https://www.knot-dns.cz/2023-09-11-version-331.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1698062400">- update to version 3.3.2, see
  https://www.knot-dns.cz/2023-10-20-version-332.html</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1700136000">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through systemd-mini.</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1702468800">- update to version 3.3.3, see
  https://www.knot-dns.cz/2023-12-13-version-333.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1706097600">- update to version 3.3.4, see
  https://www.knot-dns.cz/2024-01-24-version-334.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1709726400">- update to version 3.3.5, see
  https://www.knot-dns.cz/2024-03-06-version-335.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1718280000">- update to version 3.3.6, see
  https://www.knot-dns.cz/2024-06-12-version-336.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719316800">- update to version 3.3.7, see
  https://www.knot-dns.cz/2024-06-25-version-337.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835200">- enable DoH support (add dependency on libnghttp2) bsc#1225969
- enable DoQ support using embedded library (libngtcp2)</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1719835201">- use distribution library on Tumbleweed for DoQ support</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721736000">- update to version 3.3.8, see
  https://www.knot-dns.cz/2024-07-22-version-338.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1721822400">- split knot-utils with kdig and friends</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1724760000">- update to version 3.3.9, see
  https://www.knot-dns.cz/2024-08-26-version-339.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1725278400">- update to version 3.4.0, see
  https://www.knot-dns.cz/2024-09-02-version-340.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1728993600">- update to version 3.4.1, see
  https://www.knot-dns.cz/2024-10-14-version-341.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1730462400">- update to version 3.4.2, see
  https://www.knot-dns.cz/2024-10-31-version-342.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1733486400">- update to version 3.4.3, see
  https://www.knot-dns.cz/2024-12-06-version-343.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1737633600">- update to version 3.4.4, see
  https://www.knot-dns.cz/2025-01-22-version-344.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1742299200">- update to version 3.4.5, see
  https://www.knot-dns.cz/2025-03-18-version-345.html</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1744286400">- update to version 3.4.6, see
  https://www.knot-dns.cz/2025-04-10-version-346.html</changelog>
</package>
<package pkgid="1fd929f20c30a02560a726082ac8eca0040f7b6184315a9073cff6b4879acd54" name="libebml" arch="src">
  <version epoch="0" ver="1.4.5" rel="bp156.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
  <changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1575720000">- Update to version 1.3.10:
  * When reading binary elements with a size of 0, the element was
    skipped by libebml instead of returned to the calling function.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1593345600">- Update to version 1.4.0
  * Due to breaking ABI the soname version has been bumped to
    5.0.0.
  * Default symbol visibility is now "hidden", reducing binary
    size.
  * Converted some things pointed out by cppcheck &amp; clang-tidy
    to C++11.
  * Fixed a lot of issues pointed out by clang-tidy.
  * Added a function "ForceNoDefault" in the "EbmlElement" class.
  * Added a function "OverwriteData" in the "EbmlElement" class
    to complement the existing "OverwriteHead" function.
  * A C++11 compliant compiler is now required. Several of its
    features are now used in the source.
  * EbmlElement::FindNextElement: fixed a buffer overflow on the
    stack by one byte when the first byte read had its upper
    four bits unset.
  * EbmlCrc32: added a explicit assignment operator with default
    implementation as an explicit copy constructor exists
    (implicit assignment operators are deprecated in such cases).
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1609848000">- Update to version 1.4.1
  * Fixed a case EbmlMaster::Read where the element returned via
    UpperEltFound and FountElt points to a just-deleted element,
    causing callers to think the memory returned is valid,
    potentially leading to use-after-free/double-free errors.
    This can happen if the specific element's Read function
    throws an exception when encountering certain invalid data
    constellations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614081600">- update to 1.4.2:
  * Fixed several heap overflow bugs in the `ReadData` functions of
    various data type classes. This fixes CVE-2021-3405.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1616155200">- Add patch to fix build with GCC 11 (boo#1183715)
  * 0001-include-appropriate-header-files-for-std-numeric_lim.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch (upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1665230400">- Update to version 1.4.4
  * Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
    compatibility. This release restores the compatibility with
    release 1.4.2. Please use it instead of release 1.4.3. In
    other words: 1.4.2 &amp; 1.4.4 are compatible, while 1.4.3 is
    compatible with neither 1.4.2 nor 1.4.4.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.4.5 (bsc#1218432, CVE-2023-52339):
  * Fix invalid memory access (reading beyond allocated memory)
    due to missing integer overflow check.</changelog>
</package>
<package pkgid="93f5fa3bc6ffc823b43b454607130434e373eb1b462651364b0070f30daa1f1b" name="libebml-devel" arch="aarch64">
  <version epoch="0" ver="1.4.5" rel="bp156.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1575720000">- Update to version 1.3.10:
  * When reading binary elements with a size of 0, the element was
    skipped by libebml instead of returned to the calling function.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1593345600">- Update to version 1.4.0
  * Due to breaking ABI the soname version has been bumped to
    5.0.0.
  * Default symbol visibility is now "hidden", reducing binary
    size.
  * Converted some things pointed out by cppcheck &amp; clang-tidy
    to C++11.
  * Fixed a lot of issues pointed out by clang-tidy.
  * Added a function "ForceNoDefault" in the "EbmlElement" class.
  * Added a function "OverwriteData" in the "EbmlElement" class
    to complement the existing "OverwriteHead" function.
  * A C++11 compliant compiler is now required. Several of its
    features are now used in the source.
  * EbmlElement::FindNextElement: fixed a buffer overflow on the
    stack by one byte when the first byte read had its upper
    four bits unset.
  * EbmlCrc32: added a explicit assignment operator with default
    implementation as an explicit copy constructor exists
    (implicit assignment operators are deprecated in such cases).
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1609848000">- Update to version 1.4.1
  * Fixed a case EbmlMaster::Read where the element returned via
    UpperEltFound and FountElt points to a just-deleted element,
    causing callers to think the memory returned is valid,
    potentially leading to use-after-free/double-free errors.
    This can happen if the specific element's Read function
    throws an exception when encountering certain invalid data
    constellations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614081600">- update to 1.4.2:
  * Fixed several heap overflow bugs in the `ReadData` functions of
    various data type classes. This fixes CVE-2021-3405.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1616155200">- Add patch to fix build with GCC 11 (boo#1183715)
  * 0001-include-appropriate-header-files-for-std-numeric_lim.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch (upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1665230400">- Update to version 1.4.4
  * Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
    compatibility. This release restores the compatibility with
    release 1.4.2. Please use it instead of release 1.4.3. In
    other words: 1.4.2 &amp; 1.4.4 are compatible, while 1.4.3 is
    compatible with neither 1.4.2 nor 1.4.4.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.4.5 (bsc#1218432, CVE-2023-52339):
  * Fix invalid memory access (reading beyond allocated memory)
    due to missing integer overflow check.</changelog>
</package>
<package pkgid="7cd31b57958b92343fae8c52e32deecdf9feec525429ecab48b68a43e09ab7bc" name="libebml-devel" arch="i586">
  <version epoch="0" ver="1.4.5" rel="bp156.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1575720000">- Update to version 1.3.10:
  * When reading binary elements with a size of 0, the element was
    skipped by libebml instead of returned to the calling function.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1593345600">- Update to version 1.4.0
  * Due to breaking ABI the soname version has been bumped to
    5.0.0.
  * Default symbol visibility is now "hidden", reducing binary
    size.
  * Converted some things pointed out by cppcheck &amp; clang-tidy
    to C++11.
  * Fixed a lot of issues pointed out by clang-tidy.
  * Added a function "ForceNoDefault" in the "EbmlElement" class.
  * Added a function "OverwriteData" in the "EbmlElement" class
    to complement the existing "OverwriteHead" function.
  * A C++11 compliant compiler is now required. Several of its
    features are now used in the source.
  * EbmlElement::FindNextElement: fixed a buffer overflow on the
    stack by one byte when the first byte read had its upper
    four bits unset.
  * EbmlCrc32: added a explicit assignment operator with default
    implementation as an explicit copy constructor exists
    (implicit assignment operators are deprecated in such cases).
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1609848000">- Update to version 1.4.1
  * Fixed a case EbmlMaster::Read where the element returned via
    UpperEltFound and FountElt points to a just-deleted element,
    causing callers to think the memory returned is valid,
    potentially leading to use-after-free/double-free errors.
    This can happen if the specific element's Read function
    throws an exception when encountering certain invalid data
    constellations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614081600">- update to 1.4.2:
  * Fixed several heap overflow bugs in the `ReadData` functions of
    various data type classes. This fixes CVE-2021-3405.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1616155200">- Add patch to fix build with GCC 11 (boo#1183715)
  * 0001-include-appropriate-header-files-for-std-numeric_lim.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch (upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1665230400">- Update to version 1.4.4
  * Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
    compatibility. This release restores the compatibility with
    release 1.4.2. Please use it instead of release 1.4.3. In
    other words: 1.4.2 &amp; 1.4.4 are compatible, while 1.4.3 is
    compatible with neither 1.4.2 nor 1.4.4.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.4.5 (bsc#1218432, CVE-2023-52339):
  * Fix invalid memory access (reading beyond allocated memory)
    due to missing integer overflow check.</changelog>
</package>
<package pkgid="d4005366d9b3dc9669d6fd0e3f33ea6b6f5e1b6275f83f3ed13c60cd1dbc7f69" name="libebml-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.5" rel="bp156.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1575720000">- Update to version 1.3.10:
  * When reading binary elements with a size of 0, the element was
    skipped by libebml instead of returned to the calling function.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1593345600">- Update to version 1.4.0
  * Due to breaking ABI the soname version has been bumped to
    5.0.0.
  * Default symbol visibility is now "hidden", reducing binary
    size.
  * Converted some things pointed out by cppcheck &amp; clang-tidy
    to C++11.
  * Fixed a lot of issues pointed out by clang-tidy.
  * Added a function "ForceNoDefault" in the "EbmlElement" class.
  * Added a function "OverwriteData" in the "EbmlElement" class
    to complement the existing "OverwriteHead" function.
  * A C++11 compliant compiler is now required. Several of its
    features are now used in the source.
  * EbmlElement::FindNextElement: fixed a buffer overflow on the
    stack by one byte when the first byte read had its upper
    four bits unset.
  * EbmlCrc32: added a explicit assignment operator with default
    implementation as an explicit copy constructor exists
    (implicit assignment operators are deprecated in such cases).
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1609848000">- Update to version 1.4.1
  * Fixed a case EbmlMaster::Read where the element returned via
    UpperEltFound and FountElt points to a just-deleted element,
    causing callers to think the memory returned is valid,
    potentially leading to use-after-free/double-free errors.
    This can happen if the specific element's Read function
    throws an exception when encountering certain invalid data
    constellations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614081600">- update to 1.4.2:
  * Fixed several heap overflow bugs in the `ReadData` functions of
    various data type classes. This fixes CVE-2021-3405.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1616155200">- Add patch to fix build with GCC 11 (boo#1183715)
  * 0001-include-appropriate-header-files-for-std-numeric_lim.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch (upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1665230400">- Update to version 1.4.4
  * Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
    compatibility. This release restores the compatibility with
    release 1.4.2. Please use it instead of release 1.4.3. In
    other words: 1.4.2 &amp; 1.4.4 are compatible, while 1.4.3 is
    compatible with neither 1.4.2 nor 1.4.4.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.4.5 (bsc#1218432, CVE-2023-52339):
  * Fix invalid memory access (reading beyond allocated memory)
    due to missing integer overflow check.</changelog>
</package>
<package pkgid="75c6a048ee3bfd1f69589d40676c467c40ae1b3b270ec24d82fc309a3e6ec345" name="libebml-devel" arch="s390x">
  <version epoch="0" ver="1.4.5" rel="bp156.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1575720000">- Update to version 1.3.10:
  * When reading binary elements with a size of 0, the element was
    skipped by libebml instead of returned to the calling function.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1593345600">- Update to version 1.4.0
  * Due to breaking ABI the soname version has been bumped to
    5.0.0.
  * Default symbol visibility is now "hidden", reducing binary
    size.
  * Converted some things pointed out by cppcheck &amp; clang-tidy
    to C++11.
  * Fixed a lot of issues pointed out by clang-tidy.
  * Added a function "ForceNoDefault" in the "EbmlElement" class.
  * Added a function "OverwriteData" in the "EbmlElement" class
    to complement the existing "OverwriteHead" function.
  * A C++11 compliant compiler is now required. Several of its
    features are now used in the source.
  * EbmlElement::FindNextElement: fixed a buffer overflow on the
    stack by one byte when the first byte read had its upper
    four bits unset.
  * EbmlCrc32: added a explicit assignment operator with default
    implementation as an explicit copy constructor exists
    (implicit assignment operators are deprecated in such cases).
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1609848000">- Update to version 1.4.1
  * Fixed a case EbmlMaster::Read where the element returned via
    UpperEltFound and FountElt points to a just-deleted element,
    causing callers to think the memory returned is valid,
    potentially leading to use-after-free/double-free errors.
    This can happen if the specific element's Read function
    throws an exception when encountering certain invalid data
    constellations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614081600">- update to 1.4.2:
  * Fixed several heap overflow bugs in the `ReadData` functions of
    various data type classes. This fixes CVE-2021-3405.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1616155200">- Add patch to fix build with GCC 11 (boo#1183715)
  * 0001-include-appropriate-header-files-for-std-numeric_lim.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch (upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1665230400">- Update to version 1.4.4
  * Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
    compatibility. This release restores the compatibility with
    release 1.4.2. Please use it instead of release 1.4.3. In
    other words: 1.4.2 &amp; 1.4.4 are compatible, while 1.4.3 is
    compatible with neither 1.4.2 nor 1.4.4.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.4.5 (bsc#1218432, CVE-2023-52339):
  * Fix invalid memory access (reading beyond allocated memory)
    due to missing integer overflow check.</changelog>
</package>
<package pkgid="ab453c8656302114b9e0d3781bcec85f917ecb5a3c8fdeda89ce0a36718c4f1b" name="libebml-devel" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="bp156.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1575720000">- Update to version 1.3.10:
  * When reading binary elements with a size of 0, the element was
    skipped by libebml instead of returned to the calling function.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1593345600">- Update to version 1.4.0
  * Due to breaking ABI the soname version has been bumped to
    5.0.0.
  * Default symbol visibility is now "hidden", reducing binary
    size.
  * Converted some things pointed out by cppcheck &amp; clang-tidy
    to C++11.
  * Fixed a lot of issues pointed out by clang-tidy.
  * Added a function "ForceNoDefault" in the "EbmlElement" class.
  * Added a function "OverwriteData" in the "EbmlElement" class
    to complement the existing "OverwriteHead" function.
  * A C++11 compliant compiler is now required. Several of its
    features are now used in the source.
  * EbmlElement::FindNextElement: fixed a buffer overflow on the
    stack by one byte when the first byte read had its upper
    four bits unset.
  * EbmlCrc32: added a explicit assignment operator with default
    implementation as an explicit copy constructor exists
    (implicit assignment operators are deprecated in such cases).
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1609848000">- Update to version 1.4.1
  * Fixed a case EbmlMaster::Read where the element returned via
    UpperEltFound and FountElt points to a just-deleted element,
    causing callers to think the memory returned is valid,
    potentially leading to use-after-free/double-free errors.
    This can happen if the specific element's Read function
    throws an exception when encountering certain invalid data
    constellations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614081600">- update to 1.4.2:
  * Fixed several heap overflow bugs in the `ReadData` functions of
    various data type classes. This fixes CVE-2021-3405.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1616155200">- Add patch to fix build with GCC 11 (boo#1183715)
  * 0001-include-appropriate-header-files-for-std-numeric_lim.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch (upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1665230400">- Update to version 1.4.4
  * Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
    compatibility. This release restores the compatibility with
    release 1.4.2. Please use it instead of release 1.4.3. In
    other words: 1.4.2 &amp; 1.4.4 are compatible, while 1.4.3 is
    compatible with neither 1.4.2 nor 1.4.4.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.4.5 (bsc#1218432, CVE-2023-52339):
  * Fix invalid memory access (reading beyond allocated memory)
    due to missing integer overflow check.</changelog>
</package>
<package pkgid="2c0900e658b89983242f5ef5229f511a6d53d329b1af2cef35934aed276585b9" name="libebml5" arch="aarch64">
  <version epoch="0" ver="1.4.5" rel="bp156.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1575720000">- Update to version 1.3.10:
  * When reading binary elements with a size of 0, the element was
    skipped by libebml instead of returned to the calling function.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1593345600">- Update to version 1.4.0
  * Due to breaking ABI the soname version has been bumped to
    5.0.0.
  * Default symbol visibility is now "hidden", reducing binary
    size.
  * Converted some things pointed out by cppcheck &amp; clang-tidy
    to C++11.
  * Fixed a lot of issues pointed out by clang-tidy.
  * Added a function "ForceNoDefault" in the "EbmlElement" class.
  * Added a function "OverwriteData" in the "EbmlElement" class
    to complement the existing "OverwriteHead" function.
  * A C++11 compliant compiler is now required. Several of its
    features are now used in the source.
  * EbmlElement::FindNextElement: fixed a buffer overflow on the
    stack by one byte when the first byte read had its upper
    four bits unset.
  * EbmlCrc32: added a explicit assignment operator with default
    implementation as an explicit copy constructor exists
    (implicit assignment operators are deprecated in such cases).
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1609848000">- Update to version 1.4.1
  * Fixed a case EbmlMaster::Read where the element returned via
    UpperEltFound and FountElt points to a just-deleted element,
    causing callers to think the memory returned is valid,
    potentially leading to use-after-free/double-free errors.
    This can happen if the specific element's Read function
    throws an exception when encountering certain invalid data
    constellations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614081600">- update to 1.4.2:
  * Fixed several heap overflow bugs in the `ReadData` functions of
    various data type classes. This fixes CVE-2021-3405.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1616155200">- Add patch to fix build with GCC 11 (boo#1183715)
  * 0001-include-appropriate-header-files-for-std-numeric_lim.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch (upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1665230400">- Update to version 1.4.4
  * Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
    compatibility. This release restores the compatibility with
    release 1.4.2. Please use it instead of release 1.4.3. In
    other words: 1.4.2 &amp; 1.4.4 are compatible, while 1.4.3 is
    compatible with neither 1.4.2 nor 1.4.4.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.4.5 (bsc#1218432, CVE-2023-52339):
  * Fix invalid memory access (reading beyond allocated memory)
    due to missing integer overflow check.</changelog>
</package>
<package pkgid="141c25f86eca7057c9e49bfc8df27ff5156d1f259d9ec522143529b5a54e6c0a" name="libebml5" arch="i586">
  <version epoch="0" ver="1.4.5" rel="bp156.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1575720000">- Update to version 1.3.10:
  * When reading binary elements with a size of 0, the element was
    skipped by libebml instead of returned to the calling function.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1593345600">- Update to version 1.4.0
  * Due to breaking ABI the soname version has been bumped to
    5.0.0.
  * Default symbol visibility is now "hidden", reducing binary
    size.
  * Converted some things pointed out by cppcheck &amp; clang-tidy
    to C++11.
  * Fixed a lot of issues pointed out by clang-tidy.
  * Added a function "ForceNoDefault" in the "EbmlElement" class.
  * Added a function "OverwriteData" in the "EbmlElement" class
    to complement the existing "OverwriteHead" function.
  * A C++11 compliant compiler is now required. Several of its
    features are now used in the source.
  * EbmlElement::FindNextElement: fixed a buffer overflow on the
    stack by one byte when the first byte read had its upper
    four bits unset.
  * EbmlCrc32: added a explicit assignment operator with default
    implementation as an explicit copy constructor exists
    (implicit assignment operators are deprecated in such cases).
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1609848000">- Update to version 1.4.1
  * Fixed a case EbmlMaster::Read where the element returned via
    UpperEltFound and FountElt points to a just-deleted element,
    causing callers to think the memory returned is valid,
    potentially leading to use-after-free/double-free errors.
    This can happen if the specific element's Read function
    throws an exception when encountering certain invalid data
    constellations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614081600">- update to 1.4.2:
  * Fixed several heap overflow bugs in the `ReadData` functions of
    various data type classes. This fixes CVE-2021-3405.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1616155200">- Add patch to fix build with GCC 11 (boo#1183715)
  * 0001-include-appropriate-header-files-for-std-numeric_lim.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch (upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1665230400">- Update to version 1.4.4
  * Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
    compatibility. This release restores the compatibility with
    release 1.4.2. Please use it instead of release 1.4.3. In
    other words: 1.4.2 &amp; 1.4.4 are compatible, while 1.4.3 is
    compatible with neither 1.4.2 nor 1.4.4.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.4.5 (bsc#1218432, CVE-2023-52339):
  * Fix invalid memory access (reading beyond allocated memory)
    due to missing integer overflow check.</changelog>
</package>
<package pkgid="a406f5e59cc6cd590fb69075acb2cc3388812ce331f4535535c88b0888d880af" name="libebml5" arch="ppc64le">
  <version epoch="0" ver="1.4.5" rel="bp156.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1575720000">- Update to version 1.3.10:
  * When reading binary elements with a size of 0, the element was
    skipped by libebml instead of returned to the calling function.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1593345600">- Update to version 1.4.0
  * Due to breaking ABI the soname version has been bumped to
    5.0.0.
  * Default symbol visibility is now "hidden", reducing binary
    size.
  * Converted some things pointed out by cppcheck &amp; clang-tidy
    to C++11.
  * Fixed a lot of issues pointed out by clang-tidy.
  * Added a function "ForceNoDefault" in the "EbmlElement" class.
  * Added a function "OverwriteData" in the "EbmlElement" class
    to complement the existing "OverwriteHead" function.
  * A C++11 compliant compiler is now required. Several of its
    features are now used in the source.
  * EbmlElement::FindNextElement: fixed a buffer overflow on the
    stack by one byte when the first byte read had its upper
    four bits unset.
  * EbmlCrc32: added a explicit assignment operator with default
    implementation as an explicit copy constructor exists
    (implicit assignment operators are deprecated in such cases).
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1609848000">- Update to version 1.4.1
  * Fixed a case EbmlMaster::Read where the element returned via
    UpperEltFound and FountElt points to a just-deleted element,
    causing callers to think the memory returned is valid,
    potentially leading to use-after-free/double-free errors.
    This can happen if the specific element's Read function
    throws an exception when encountering certain invalid data
    constellations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614081600">- update to 1.4.2:
  * Fixed several heap overflow bugs in the `ReadData` functions of
    various data type classes. This fixes CVE-2021-3405.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1616155200">- Add patch to fix build with GCC 11 (boo#1183715)
  * 0001-include-appropriate-header-files-for-std-numeric_lim.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch (upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1665230400">- Update to version 1.4.4
  * Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
    compatibility. This release restores the compatibility with
    release 1.4.2. Please use it instead of release 1.4.3. In
    other words: 1.4.2 &amp; 1.4.4 are compatible, while 1.4.3 is
    compatible with neither 1.4.2 nor 1.4.4.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.4.5 (bsc#1218432, CVE-2023-52339):
  * Fix invalid memory access (reading beyond allocated memory)
    due to missing integer overflow check.</changelog>
</package>
<package pkgid="7befefad71f649cb9d8521f4c1b091ee218c10f7d5fd4579e30525049777d418" name="libebml5" arch="s390x">
  <version epoch="0" ver="1.4.5" rel="bp156.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1575720000">- Update to version 1.3.10:
  * When reading binary elements with a size of 0, the element was
    skipped by libebml instead of returned to the calling function.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1593345600">- Update to version 1.4.0
  * Due to breaking ABI the soname version has been bumped to
    5.0.0.
  * Default symbol visibility is now "hidden", reducing binary
    size.
  * Converted some things pointed out by cppcheck &amp; clang-tidy
    to C++11.
  * Fixed a lot of issues pointed out by clang-tidy.
  * Added a function "ForceNoDefault" in the "EbmlElement" class.
  * Added a function "OverwriteData" in the "EbmlElement" class
    to complement the existing "OverwriteHead" function.
  * A C++11 compliant compiler is now required. Several of its
    features are now used in the source.
  * EbmlElement::FindNextElement: fixed a buffer overflow on the
    stack by one byte when the first byte read had its upper
    four bits unset.
  * EbmlCrc32: added a explicit assignment operator with default
    implementation as an explicit copy constructor exists
    (implicit assignment operators are deprecated in such cases).
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1609848000">- Update to version 1.4.1
  * Fixed a case EbmlMaster::Read where the element returned via
    UpperEltFound and FountElt points to a just-deleted element,
    causing callers to think the memory returned is valid,
    potentially leading to use-after-free/double-free errors.
    This can happen if the specific element's Read function
    throws an exception when encountering certain invalid data
    constellations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614081600">- update to 1.4.2:
  * Fixed several heap overflow bugs in the `ReadData` functions of
    various data type classes. This fixes CVE-2021-3405.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1616155200">- Add patch to fix build with GCC 11 (boo#1183715)
  * 0001-include-appropriate-header-files-for-std-numeric_lim.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch (upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1665230400">- Update to version 1.4.4
  * Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
    compatibility. This release restores the compatibility with
    release 1.4.2. Please use it instead of release 1.4.3. In
    other words: 1.4.2 &amp; 1.4.4 are compatible, while 1.4.3 is
    compatible with neither 1.4.2 nor 1.4.4.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.4.5 (bsc#1218432, CVE-2023-52339):
  * Fix invalid memory access (reading beyond allocated memory)
    due to missing integer overflow check.</changelog>
</package>
<package pkgid="8b55404fa3ca78d1bc9b16cb82a4c015a5bfb0c8f189dfdf1470bf0c226009ee" name="libebml5" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="bp156.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1575720000">- Update to version 1.3.10:
  * When reading binary elements with a size of 0, the element was
    skipped by libebml instead of returned to the calling function.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1593345600">- Update to version 1.4.0
  * Due to breaking ABI the soname version has been bumped to
    5.0.0.
  * Default symbol visibility is now "hidden", reducing binary
    size.
  * Converted some things pointed out by cppcheck &amp; clang-tidy
    to C++11.
  * Fixed a lot of issues pointed out by clang-tidy.
  * Added a function "ForceNoDefault" in the "EbmlElement" class.
  * Added a function "OverwriteData" in the "EbmlElement" class
    to complement the existing "OverwriteHead" function.
  * A C++11 compliant compiler is now required. Several of its
    features are now used in the source.
  * EbmlElement::FindNextElement: fixed a buffer overflow on the
    stack by one byte when the first byte read had its upper
    four bits unset.
  * EbmlCrc32: added a explicit assignment operator with default
    implementation as an explicit copy constructor exists
    (implicit assignment operators are deprecated in such cases).
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1609848000">- Update to version 1.4.1
  * Fixed a case EbmlMaster::Read where the element returned via
    UpperEltFound and FountElt points to a just-deleted element,
    causing callers to think the memory returned is valid,
    potentially leading to use-after-free/double-free errors.
    This can happen if the specific element's Read function
    throws an exception when encountering certain invalid data
    constellations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614081600">- update to 1.4.2:
  * Fixed several heap overflow bugs in the `ReadData` functions of
    various data type classes. This fixes CVE-2021-3405.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1616155200">- Add patch to fix build with GCC 11 (boo#1183715)
  * 0001-include-appropriate-header-files-for-std-numeric_lim.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch (upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1665230400">- Update to version 1.4.4
  * Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
    compatibility. This release restores the compatibility with
    release 1.4.2. Please use it instead of release 1.4.3. In
    other words: 1.4.2 &amp; 1.4.4 are compatible, while 1.4.3 is
    compatible with neither 1.4.2 nor 1.4.4.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.4.5 (bsc#1218432, CVE-2023-52339):
  * Fix invalid memory access (reading beyond allocated memory)
    due to missing integer overflow check.</changelog>
</package>
<package pkgid="0c847bf13700df8fe149ba23492041f50c6c487fa3f02e9136c92ad328ce104a" name="libebml5-32bit" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="bp156.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1575720000">- Update to version 1.3.10:
  * When reading binary elements with a size of 0, the element was
    skipped by libebml instead of returned to the calling function.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1593345600">- Update to version 1.4.0
  * Due to breaking ABI the soname version has been bumped to
    5.0.0.
  * Default symbol visibility is now "hidden", reducing binary
    size.
  * Converted some things pointed out by cppcheck &amp; clang-tidy
    to C++11.
  * Fixed a lot of issues pointed out by clang-tidy.
  * Added a function "ForceNoDefault" in the "EbmlElement" class.
  * Added a function "OverwriteData" in the "EbmlElement" class
    to complement the existing "OverwriteHead" function.
  * A C++11 compliant compiler is now required. Several of its
    features are now used in the source.
  * EbmlElement::FindNextElement: fixed a buffer overflow on the
    stack by one byte when the first byte read had its upper
    four bits unset.
  * EbmlCrc32: added a explicit assignment operator with default
    implementation as an explicit copy constructor exists
    (implicit assignment operators are deprecated in such cases).
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1609848000">- Update to version 1.4.1
  * Fixed a case EbmlMaster::Read where the element returned via
    UpperEltFound and FountElt points to a just-deleted element,
    causing callers to think the memory returned is valid,
    potentially leading to use-after-free/double-free errors.
    This can happen if the specific element's Read function
    throws an exception when encountering certain invalid data
    constellations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614081600">- update to 1.4.2:
  * Fixed several heap overflow bugs in the `ReadData` functions of
    various data type classes. This fixes CVE-2021-3405.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1616155200">- Add patch to fix build with GCC 11 (boo#1183715)
  * 0001-include-appropriate-header-files-for-std-numeric_lim.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch (upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1665230400">- Update to version 1.4.4
  * Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
    compatibility. This release restores the compatibility with
    release 1.4.2. Please use it instead of release 1.4.3. In
    other words: 1.4.2 &amp; 1.4.4 are compatible, while 1.4.3 is
    compatible with neither 1.4.2 nor 1.4.4.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.4.5 (bsc#1218432, CVE-2023-52339):
  * Fix invalid memory access (reading beyond allocated memory)
    due to missing integer overflow check.</changelog>
</package>
<package pkgid="ba1927048d487831d1b1ff8bd1a8f8d91a68518af8b7af7fcb55af45ff9eb5fb" name="libebml5-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.4.5" rel="bp156.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1575720000">- Update to version 1.3.10:
  * When reading binary elements with a size of 0, the element was
    skipped by libebml instead of returned to the calling function.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1593345600">- Update to version 1.4.0
  * Due to breaking ABI the soname version has been bumped to
    5.0.0.
  * Default symbol visibility is now "hidden", reducing binary
    size.
  * Converted some things pointed out by cppcheck &amp; clang-tidy
    to C++11.
  * Fixed a lot of issues pointed out by clang-tidy.
  * Added a function "ForceNoDefault" in the "EbmlElement" class.
  * Added a function "OverwriteData" in the "EbmlElement" class
    to complement the existing "OverwriteHead" function.
  * A C++11 compliant compiler is now required. Several of its
    features are now used in the source.
  * EbmlElement::FindNextElement: fixed a buffer overflow on the
    stack by one byte when the first byte read had its upper
    four bits unset.
  * EbmlCrc32: added a explicit assignment operator with default
    implementation as an explicit copy constructor exists
    (implicit assignment operators are deprecated in such cases).
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1609848000">- Update to version 1.4.1
  * Fixed a case EbmlMaster::Read where the element returned via
    UpperEltFound and FountElt points to a just-deleted element,
    causing callers to think the memory returned is valid,
    potentially leading to use-after-free/double-free errors.
    This can happen if the specific element's Read function
    throws an exception when encountering certain invalid data
    constellations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614081600">- update to 1.4.2:
  * Fixed several heap overflow bugs in the `ReadData` functions of
    various data type classes. This fixes CVE-2021-3405.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1616155200">- Add patch to fix build with GCC 11 (boo#1183715)
  * 0001-include-appropriate-header-files-for-std-numeric_lim.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664625600">- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch (upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1665230400">- Update to version 1.4.4
  * Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
    compatibility. This release restores the compatibility with
    release 1.4.2. Please use it instead of release 1.4.3. In
    other words: 1.4.2 &amp; 1.4.4 are compatible, while 1.4.3 is
    compatible with neither 1.4.2 nor 1.4.4.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703764800">- update to 1.4.5 (bsc#1218432, CVE-2023-52339):
  * Fix invalid memory access (reading beyond allocated memory)
    due to missing integer overflow check.</changelog>
</package>
<package pkgid="acd3bec8856ca6d71168642dbfb9fa59b5d669db416106313779ff05209387af" name="libetebase" arch="src">
  <version epoch="0" ver="0.5.8" rel="bp156.2.3.1"/>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955200">- Initial commit</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955201">- Add devel package</changelog>
  <changelog author="fawz@use.startmail.com" date="1687262400">- Update to version 0.5.5~0:
  * Run clippy and cargo fmt.
  * Bump etebase-rs and make a release.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1687608000">- Clean up recipe.
- Fix etebase.pc using incorect hard-coded libdir path</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1695988800">- Adjust license according to legaldb review
  quite some dual licensing from tests and vendor/vendor/*</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1734955200">- Fix syntax: install section does not have -n parameters.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1750593600">- Update to version 0.5.8:
  * Addresses VUL-0: CVE-2025-3416: https://bugzilla.suse.com/show_bug.cgi?id=1242638
  * Deps: run cargo update.</changelog>
</package>
<package pkgid="b62008e81b4984359621f6cc9577ac364088a1691801a937a2a259ae20b8d179" name="libetebase-devel" arch="aarch64">
  <version epoch="0" ver="0.5.8" rel="bp156.2.3.1"/>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955200">- Initial commit</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955201">- Add devel package</changelog>
  <changelog author="fawz@use.startmail.com" date="1687262400">- Update to version 0.5.5~0:
  * Run clippy and cargo fmt.
  * Bump etebase-rs and make a release.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1687608000">- Clean up recipe.
- Fix etebase.pc using incorect hard-coded libdir path</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1695988800">- Adjust license according to legaldb review
  quite some dual licensing from tests and vendor/vendor/*</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1734955200">- Fix syntax: install section does not have -n parameters.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1750593600">- Update to version 0.5.8:
  * Addresses VUL-0: CVE-2025-3416: https://bugzilla.suse.com/show_bug.cgi?id=1242638
  * Deps: run cargo update.</changelog>
</package>
<package pkgid="248df420b0d79f0e4261c151c9ce2d57f3d94f4ed01ff4dac6a7eea23ec70d96" name="libetebase-devel" arch="i586">
  <version epoch="0" ver="0.5.8" rel="bp156.2.3.1"/>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955200">- Initial commit</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955201">- Add devel package</changelog>
  <changelog author="fawz@use.startmail.com" date="1687262400">- Update to version 0.5.5~0:
  * Run clippy and cargo fmt.
  * Bump etebase-rs and make a release.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1687608000">- Clean up recipe.
- Fix etebase.pc using incorect hard-coded libdir path</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1695988800">- Adjust license according to legaldb review
  quite some dual licensing from tests and vendor/vendor/*</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1734955200">- Fix syntax: install section does not have -n parameters.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1750593600">- Update to version 0.5.8:
  * Addresses VUL-0: CVE-2025-3416: https://bugzilla.suse.com/show_bug.cgi?id=1242638
  * Deps: run cargo update.</changelog>
</package>
<package pkgid="7d772379f6a01283b30d56d96bb030b31f59eea9a5492869b32da65dca719cf8" name="libetebase-devel" arch="ppc64le">
  <version epoch="0" ver="0.5.8" rel="bp156.2.3.1"/>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955200">- Initial commit</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955201">- Add devel package</changelog>
  <changelog author="fawz@use.startmail.com" date="1687262400">- Update to version 0.5.5~0:
  * Run clippy and cargo fmt.
  * Bump etebase-rs and make a release.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1687608000">- Clean up recipe.
- Fix etebase.pc using incorect hard-coded libdir path</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1695988800">- Adjust license according to legaldb review
  quite some dual licensing from tests and vendor/vendor/*</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1734955200">- Fix syntax: install section does not have -n parameters.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1750593600">- Update to version 0.5.8:
  * Addresses VUL-0: CVE-2025-3416: https://bugzilla.suse.com/show_bug.cgi?id=1242638
  * Deps: run cargo update.</changelog>
</package>
<package pkgid="b8c60d0f48d51cfd00506cefa6059521e571251f56dce19c13551dddc453f328" name="libetebase-devel" arch="s390x">
  <version epoch="0" ver="0.5.8" rel="bp156.2.3.1"/>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955200">- Initial commit</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955201">- Add devel package</changelog>
  <changelog author="fawz@use.startmail.com" date="1687262400">- Update to version 0.5.5~0:
  * Run clippy and cargo fmt.
  * Bump etebase-rs and make a release.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1687608000">- Clean up recipe.
- Fix etebase.pc using incorect hard-coded libdir path</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1695988800">- Adjust license according to legaldb review
  quite some dual licensing from tests and vendor/vendor/*</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1734955200">- Fix syntax: install section does not have -n parameters.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1750593600">- Update to version 0.5.8:
  * Addresses VUL-0: CVE-2025-3416: https://bugzilla.suse.com/show_bug.cgi?id=1242638
  * Deps: run cargo update.</changelog>
</package>
<package pkgid="cfb3e4ab029a04794b0bddda939274f901efa66270feb46a0b1aad5f84e95d49" name="libetebase-devel" arch="x86_64">
  <version epoch="0" ver="0.5.8" rel="bp156.2.3.1"/>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955200">- Initial commit</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955201">- Add devel package</changelog>
  <changelog author="fawz@use.startmail.com" date="1687262400">- Update to version 0.5.5~0:
  * Run clippy and cargo fmt.
  * Bump etebase-rs and make a release.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1687608000">- Clean up recipe.
- Fix etebase.pc using incorect hard-coded libdir path</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1695988800">- Adjust license according to legaldb review
  quite some dual licensing from tests and vendor/vendor/*</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1734955200">- Fix syntax: install section does not have -n parameters.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1750593600">- Update to version 0.5.8:
  * Addresses VUL-0: CVE-2025-3416: https://bugzilla.suse.com/show_bug.cgi?id=1242638
  * Deps: run cargo update.</changelog>
</package>
<package pkgid="c152252555dfd549e58abd14b90781afa7db13268b0deb4f13154046e92dee9f" name="libetebase0" arch="aarch64">
  <version epoch="0" ver="0.5.8" rel="bp156.2.3.1"/>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955200">- Initial commit</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955201">- Add devel package</changelog>
  <changelog author="fawz@use.startmail.com" date="1687262400">- Update to version 0.5.5~0:
  * Run clippy and cargo fmt.
  * Bump etebase-rs and make a release.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1687608000">- Clean up recipe.
- Fix etebase.pc using incorect hard-coded libdir path</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1695988800">- Adjust license according to legaldb review
  quite some dual licensing from tests and vendor/vendor/*</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1734955200">- Fix syntax: install section does not have -n parameters.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1750593600">- Update to version 0.5.8:
  * Addresses VUL-0: CVE-2025-3416: https://bugzilla.suse.com/show_bug.cgi?id=1242638
  * Deps: run cargo update.</changelog>
</package>
<package pkgid="8a34110bf98371d203b03f4f0b16e2d17102855743704bc2d611f70550a22975" name="libetebase0" arch="i586">
  <version epoch="0" ver="0.5.8" rel="bp156.2.3.1"/>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955200">- Initial commit</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955201">- Add devel package</changelog>
  <changelog author="fawz@use.startmail.com" date="1687262400">- Update to version 0.5.5~0:
  * Run clippy and cargo fmt.
  * Bump etebase-rs and make a release.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1687608000">- Clean up recipe.
- Fix etebase.pc using incorect hard-coded libdir path</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1695988800">- Adjust license according to legaldb review
  quite some dual licensing from tests and vendor/vendor/*</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1734955200">- Fix syntax: install section does not have -n parameters.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1750593600">- Update to version 0.5.8:
  * Addresses VUL-0: CVE-2025-3416: https://bugzilla.suse.com/show_bug.cgi?id=1242638
  * Deps: run cargo update.</changelog>
</package>
<package pkgid="7a6ed2eaad5f7394f7a23128c0d5d3df8c354e73270bc9f7233aabeba8c766bb" name="libetebase0" arch="ppc64le">
  <version epoch="0" ver="0.5.8" rel="bp156.2.3.1"/>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955200">- Initial commit</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955201">- Add devel package</changelog>
  <changelog author="fawz@use.startmail.com" date="1687262400">- Update to version 0.5.5~0:
  * Run clippy and cargo fmt.
  * Bump etebase-rs and make a release.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1687608000">- Clean up recipe.
- Fix etebase.pc using incorect hard-coded libdir path</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1695988800">- Adjust license according to legaldb review
  quite some dual licensing from tests and vendor/vendor/*</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1734955200">- Fix syntax: install section does not have -n parameters.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1750593600">- Update to version 0.5.8:
  * Addresses VUL-0: CVE-2025-3416: https://bugzilla.suse.com/show_bug.cgi?id=1242638
  * Deps: run cargo update.</changelog>
</package>
<package pkgid="6ab9edb7e4a85d467b00cb071256ef831ac8bafe7b6d6264ed3dc177c4f7250f" name="libetebase0" arch="s390x">
  <version epoch="0" ver="0.5.8" rel="bp156.2.3.1"/>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955200">- Initial commit</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955201">- Add devel package</changelog>
  <changelog author="fawz@use.startmail.com" date="1687262400">- Update to version 0.5.5~0:
  * Run clippy and cargo fmt.
  * Bump etebase-rs and make a release.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1687608000">- Clean up recipe.
- Fix etebase.pc using incorect hard-coded libdir path</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1695988800">- Adjust license according to legaldb review
  quite some dual licensing from tests and vendor/vendor/*</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1734955200">- Fix syntax: install section does not have -n parameters.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1750593600">- Update to version 0.5.8:
  * Addresses VUL-0: CVE-2025-3416: https://bugzilla.suse.com/show_bug.cgi?id=1242638
  * Deps: run cargo update.</changelog>
</package>
<package pkgid="6d8bd7d1cdaac19f9b7b96c62e2e0b66943216da565242f79e490b787b8d4de9" name="libetebase0" arch="x86_64">
  <version epoch="0" ver="0.5.8" rel="bp156.2.3.1"/>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955200">- Initial commit</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1680955201">- Add devel package</changelog>
  <changelog author="fawz@use.startmail.com" date="1687262400">- Update to version 0.5.5~0:
  * Run clippy and cargo fmt.
  * Bump etebase-rs and make a release.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1687608000">- Clean up recipe.
- Fix etebase.pc using incorect hard-coded libdir path</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1695988800">- Adjust license according to legaldb review
  quite some dual licensing from tests and vendor/vendor/*</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1734955200">- Fix syntax: install section does not have -n parameters.</changelog>
  <changelog author="Bob Haley &lt;fawz@use.startmail.com&gt;" date="1750593600">- Update to version 0.5.8:
  * Addresses VUL-0: CVE-2025-3416: https://bugzilla.suse.com/show_bug.cgi?id=1242638
  * Deps: run cargo update.</changelog>
</package>
<package pkgid="492bb8b052068c1ca010798a039c0409e2bff01be2663f48c26e49c29fcbaed7" name="libevtlog-4_6-0" arch="aarch64">
  <version epoch="0" ver="4.6.0" rel="bp156.2.3.1"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646740800">- Added patch:
  * syslog-ng-nojavah.patch
    + Do not use the removed javah tool, but the javac's -h option
    + Allows to build with any java-devel &gt;= 1.8
- Require java-devel &gt;= 1.8 for build
- Add build dependency on autoconf and automake since we need them
  to regenerate the build system after we patch it</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1650888000">- URL -&gt; https</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1660651200">- update to 3.37.1
- add new modules to file lists
- enable MQTT support only for Tumbleweed</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1673438400">- update to 4.0.1
- remove obsolate syslog-ng-nojavah.patch together with
  autotools dependencies
- add dependencies for Python modules
- remove obsolate Obsolates line
- remove Kubernetes config (became a Python module)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1684929600">- Exclude plugins from being turned into RPM dependencies.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1685620800">- update to version 4.2.0
- add Splunk destination to SCL
- plugin rename: dbparser is now called correlation
- new plugin: libmetrics-probe.so
- split Python-based drivers from the Python plugin</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1686052800">- oops, forgot to update the config version string again...
- while there, fixed a config warning about statistics</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1689336000">- fix Python packaging</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1690286400">- update to version 4.3.0
  * OpenTelemetry support
  * BPF support to accelerate UDP source
  * logscale destination
  * scl.conf moved from /etc/syslog-ng
  * use pcre2 instead of pcre
- change BuildRequires from pcre-devel to pcre2-devel
- add BuildRrequires for OpenTelemetry and BPF</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1690804800">- update to version 4.3.1
  * fixes a crash bug in Python support
  * opensearch destination (SCL)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1695038400">- fix boo#1215386 by removing dependency on var-run.service
  (service is removed in Tumbleweed)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1706788800">- update to version 4.6.0
  * BigQuery support
  * CloudAuth support
  * Loki support
  * PubSub support
  * parsers for pgsql, pihole, qbittorrent logs
- move grpc support into separate sub-package</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1707220800">- add python3-setuptools as a build requiriement</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1707393600">- fix syslog-ng-devel dependencies (boo#1219672)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 4.6.0-1" date="1746792000">- add tlsfix.patch to fix CVE-2024-47619 (inproper certificate
  validation)</changelog>
</package>
<package pkgid="079c94f0614a4c3336f4b5a7d0b6ed334368e336907c484c20753f0f72d7f086" name="libevtlog-4_6-0" arch="ppc64le">
  <version epoch="0" ver="4.6.0" rel="bp156.2.3.1"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646740800">- Added patch:
  * syslog-ng-nojavah.patch
    + Do not use the removed javah tool, but the javac's -h option
    + Allows to build with any java-devel &gt;= 1.8
- Require java-devel &gt;= 1.8 for build
- Add build dependency on autoconf and automake since we need them
  to regenerate the build system after we patch it</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1650888000">- URL -&gt; https</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1660651200">- update to 3.37.1
- add new modules to file lists
- enable MQTT support only for Tumbleweed</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1673438400">- update to 4.0.1
- remove obsolate syslog-ng-nojavah.patch together with
  autotools dependencies
- add dependencies for Python modules
- remove obsolate Obsolates line
- remove Kubernetes config (became a Python module)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1684929600">- Exclude plugins from being turned into RPM dependencies.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1685620800">- update to version 4.2.0
- add Splunk destination to SCL
- plugin rename: dbparser is now called correlation
- new plugin: libmetrics-probe.so
- split Python-based drivers from the Python plugin</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1686052800">- oops, forgot to update the config version string again...
- while there, fixed a config warning about statistics</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1689336000">- fix Python packaging</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1690286400">- update to version 4.3.0
  * OpenTelemetry support
  * BPF support to accelerate UDP source
  * logscale destination
  * scl.conf moved from /etc/syslog-ng
  * use pcre2 instead of pcre
- change BuildRequires from pcre-devel to pcre2-devel
- add BuildRrequires for OpenTelemetry and BPF</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1690804800">- update to version 4.3.1
  * fixes a crash bug in Python support
  * opensearch destination (SCL)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1695038400">- fix boo#1215386 by removing dependency on var-run.service
  (service is removed in Tumbleweed)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1706788800">- update to version 4.6.0
  * BigQuery support
  * CloudAuth support
  * Loki support
  * PubSub support
  * parsers for pgsql, pihole, qbittorrent logs
- move grpc support into separate sub-package</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1707220800">- add python3-setuptools as a build requiriement</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1707393600">- fix syslog-ng-devel dependencies (boo#1219672)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 4.6.0-1" date="1746792000">- add tlsfix.patch to fix CVE-2024-47619 (inproper certificate
  validation)</changelog>
</package>
<package pkgid="684673c9c43046dbabeeceadf8d3f5677f49e7ee98d0918fa86ab59764e42dc1" name="libevtlog-4_6-0" arch="s390x">
  <version epoch="0" ver="4.6.0" rel="bp156.2.3.1"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646740800">- Added patch:
  * syslog-ng-nojavah.patch
    + Do not use the removed javah tool, but the javac's -h option
    + Allows to build with any java-devel &gt;= 1.8
- Require java-devel &gt;= 1.8 for build
- Add build dependency on autoconf and automake since we need them
  to regenerate the build system after we patch it</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1650888000">- URL -&gt; https</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1660651200">- update to 3.37.1
- add new modules to file lists
- enable MQTT support only for Tumbleweed</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1673438400">- update to 4.0.1
- remove obsolate syslog-ng-nojavah.patch together with
  autotools dependencies
- add dependencies for Python modules
- remove obsolate Obsolates line
- remove Kubernetes config (became a Python module)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1684929600">- Exclude plugins from being turned into RPM dependencies.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1685620800">- update to version 4.2.0
- add Splunk destination to SCL
- plugin rename: dbparser is now called correlation
- new plugin: libmetrics-probe.so
- split Python-based drivers from the Python plugin</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1686052800">- oops, forgot to update the config version string again...
- while there, fixed a config warning about statistics</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1689336000">- fix Python packaging</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1690286400">- update to version 4.3.0
  * OpenTelemetry support
  * BPF support to accelerate UDP source
  * logscale destination
  * scl.conf moved from /etc/syslog-ng
  * use pcre2 instead of pcre
- change BuildRequires from pcre-devel to pcre2-devel
- add BuildRrequires for OpenTelemetry and BPF</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1690804800">- update to version 4.3.1
  * fixes a crash bug in Python support
  * opensearch destination (SCL)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1695038400">- fix boo#1215386 by removing dependency on var-run.service
  (service is removed in Tumbleweed)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1706788800">- update to version 4.6.0
  * BigQuery support
  * CloudAuth support
  * Loki support
  * PubSub support
  * parsers for pgsql, pihole, qbittorrent logs
- move grpc support into separate sub-package</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1707220800">- add python3-setuptools as a build requiriement</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1707393600">- fix syslog-ng-devel dependencies (boo#1219672)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 4.6.0-1" date="1746792000">- add tlsfix.patch to fix CVE-2024-47619 (inproper certificate
  validation)</changelog>
</package>
<package pkgid="32fec6ec3a46347d2ea998767f580b602b2c222340f1224480c0789fdd6f40ff" name="libevtlog-4_6-0" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="bp156.2.3.1"/>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626436800">- Set shebang for merge-grammar.py to be /usr/bin/python3.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1627473600">- update to 3.33.2
- added support for parsing CEE and Fortigate logs
- added Discord destination
- added MQTT destination support
- python3 workdaround removed (commented out for now, fixed upstream)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1638792000">- update to 3.35.1
- remove "news" user creation, as it is no more referenced
  from the configuration file
- packaging fixes to remove a few warnings</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1645185600">- disable Java support for ARMv7 (compilation crashes)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646740800">- Added patch:
  * syslog-ng-nojavah.patch
    + Do not use the removed javah tool, but the javac's -h option
    + Allows to build with any java-devel &gt;= 1.8
- Require java-devel &gt;= 1.8 for build
- Add build dependency on autoconf and automake since we need them
  to regenerate the build system after we patch it</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1650888000">- URL -&gt; https</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1660651200">- update to 3.37.1
- add new modules to file lists
- enable MQTT support only for Tumbleweed</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1673438400">- update to 4.0.1
- remove obsolate syslog-ng-nojavah.patch together with
  autotools dependencies
- add dependencies for Python modules
- remove obsolate Obsolates line
- remove Kubernetes config (became a Python module)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1684929600">- Exclude plugins from being turned into RPM dependencies.</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1685620800">- update to version 4.2.0
- add Splunk destination to SCL
- plugin rename: dbparser is now called correlation
- new plugin: libmetrics-probe.so
- split Python-based drivers from the Python plugin</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1686052800">- oops, forgot to update the config version string again...
- while there, fixed a config warning about statistics</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1689336000">- fix Python packaging</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1690286400">- update to version 4.3.0
  * OpenTelemetry support
  * BPF support to accelerate UDP source
  * logscale destination
  * scl.conf moved from /etc/syslog-ng
  * use pcre2 instead of pcre
- change BuildRequires from pcre-devel to pcre2-devel
- add BuildRrequires for OpenTelemetry and BPF</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1690804800">- update to version 4.3.1
  * fixes a crash bug in Python support
  * opensearch destination (SCL)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1695038400">- fix boo#1215386 by removing dependency on var-run.service
  (service is removed in Tumbleweed)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1706788800">- update to version 4.6.0
  * BigQuery support
  * CloudAuth support
  * Loki support
  * PubSub support
  * parsers for pgsql, pihole, qbittorrent logs
- move grpc support into separate sub-package</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1707220800">- add python3-setuptools as a build requiriement</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt;" date="1707393600">- fix syslog-ng-devel dependencies (boo#1219672)</changelog>
  <changelog author="peter czanik &lt;peter@czanik.hu&gt; 4.6.0-1" date="1746792000">- add tlsfix.patch to fix CVE-2024-47619 (inproper certificate
  validation)</changelog>
</package>
<package pkgid="3750bc9b1a9a876f8692ca2769d30540f771a07081e5c8c1ccc7c24ca239713f" name="libexo-2-0" arch="aarch64">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="1cf0fadd470f669935f4d75ab398d85950a3d19e75abc15b7ac6e85180bd0b94" name="libexo-2-0" arch="i586">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="d1b5916a87e9282bc2470d38b1d6a2ea22e48e91688301fb30b07f2b3c76d92f" name="libexo-2-0" arch="ppc64le">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="f63fcd3c3ab93dbde76920faa4a4c51892f06f060f5073df39ce8d3165731370" name="libexo-2-0" arch="s390x">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="da4f4f8afa618de24ac1cfe43bfd175ea1ccc2c24709d19fa5c02d87e2fa31f9" name="libexo-2-0" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="bp156.3.2.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1556280000">- Fix failing %postun macro</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1556884800">- Update to version 0.12.5
  * Fix typehead in ExoIconView (bxo#15100)
  * Building libexo-1 can now be disabled (bxo#15138, bxo#15199)
    Building documentation still requires libexo-1 since some older
    symbols exists only in the GTK+ 2 library
  * Several components were moved around to align with the correct
    library versions:
  - Helpers are now installed in exo-2 paths, and exo-helper-1 has
    been renamed to exo-helper-2 to follow the library version
  - Pixmaps were moved to an unversioned path (pixmaps/exo) since
    they are used by both versions of the library
  - exo-compose-mail has dropped the library version since it
    does not depend on either version of the library
  * The expansion-to-defined flag was re-enabled
  * Translation Updates
- Added conditional %bcond_with git for build when using
  git master branch
- Cleaned up spec file of no longer needed Obsoletes and Provides
- Fixed patching of exo-compose-mail in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560513600">- Update to version 0.12.6
  - Add trailing ";" to mimeapps.list (bxo#15087)
  - Clear bad entries from mimeapps.list (bxo#15046, bxo#15238)
  - Synchronize default applications to gio-mime (bxo#14633)
  - Disable emoji menu in type-ahead search (bxo#15451)
  - Enable dismissal of "Failed to open default" dialogs
  - Related: https://github.com/brave/brave-browser/issues/4142
  - If the error can be safely ignored, the user is able to dismiss it.
    After changing defaults, the dismissal is forgotten.
  - Translation Updates
  - Cleaned up spec file and removed obsolete conditionals</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.12.7
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
</package>
<package pkgid="fdd03c4a4a13bccfbc6a651a1f7aa40e1cea2f3db2f6ea54e4979d6af9533161" name="libexo-2-0" arch="aarch64">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="6197fe552d8b31471a370ad9cbccf91e83294c2109750dc73fef4971b8386661" name="libexo-2-0" arch="i586">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="c6695e7b930aa40281f2a538819e4a9992abe1262bf81e203079f7645c62da61" name="libexo-2-0" arch="ppc64le">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="1b981c6f3670c81ba7007434795a967a940773af623318a01f2862ab81690bc5" name="libexo-2-0" arch="s390x">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="12442e5bc66d8dfb03eaa0f62286730b084e9c5ec46360e4f90781be317d70a1" name="libexo-2-0" arch="x86_64">
  <version epoch="0" ver="4.20.0" rel="bp156.3.5.2"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565524800">- Update to version 0.12.8
  * preferred-apps: Add button icons to Help/Close
  * Replace GtkStock buttons
  * Translation Updates
- Dropped obsolete patch exo-revert-gnome-3.22-req.diff</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1565956800">- Fixed sources in spec file</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1573905600">- Update to version 0.12.9
  * Explicitly depend on gio-unix-2.0 (bxo#15825)
  * Fix alignment of multi-line filenames when text beside icons
    (bxo#16107)
  * Fix cursor missing in search popup widget (bxo#16068)
  * Fix desktop item creation on symbolic link directories
  * Fix excess clickable area of multiline filenames (bxo#16075)
  * Fix issues with displaying icon view contents (bxo#14737)
  * Fix prelight deactivation (bxo#11806)
  * Hide search widget when doing a fullscreen resize (bxo#15106)
  * Make user-created launchers executable by default
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1574251200">- Update to version 0.12.10
  - Fix typeahead search regression (bxo#16191)
  - Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1576756800">- Update to version 0.12.11
  * Bump documentation dates
  * Add *.mo to .gitignore
  * Revert padding patches that add too much padding in the Thunar
    compact view (bxo#16196)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 4.15.2
  * icon-chooser-dialog: Allow removing selected icon (gxo#xfce/exo#2)
  * desktop-item-edit: Fix sensitivity of save button (gxo#xfce/exo#28)
  * Rework exo_icon_view_scroll_event for overshoot effect (gxo#xfce/exo#25)
  * Allow resizing the xfce4-settings window smaller (gxo#xfce/exo#19)
  * Drop exo-csource from exo
  * Fix build on OpenBSD (!2)
  * Fix race condition in make install (gxo#xfce/exo#29)
  * Remove unused perl module requirement
  * Replace bugzilla occurences with gitlab (gxo#xfce/exo#30)
  * This release transitions several exo components to xfce-settings, and
    drops GTK+ 2 support.
    Please use with xfce-settings 4.15.1 or later for best results.
  * Removed binaries: exo-compose-mail, exo-helper-2
  * Removed from API: ExoCellRendererEllipsizedText, ExoIconBar,
    ExoToolbarsEditor, ExoToolbarsEditorDialog,  ExoToolbarsModel,
    ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc,
    exo_atomic_dec
  * state variable is a GtkStateFlags
  * desktop-item-edit: Fix sensitivity of save button (bxo#16813)
  * Attach popup window to toplevel parent (bxo#16768)
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Extend selection on shift+drag (bxo#7526)
  * Do not cancel selection on shift+drag
  * Rename Thunar.desktop to thunar.desktop (bxo#16197)
  * Fix type declaration (bxo#16678)
  * desktop-item-edit: Use new XfceTitledDialog API
  * Fix GTimeVal deprecation
  * Replace deprecated G_INLINE_FUNC macro
  * Replace deprecated macro
  * Wrong keyboard navigation after using rubberband in exo-icon-view
    (bxo#16286)
  * Cursor position in icon view not visible/highlighted when using
    ctrl + arrows (bxo#12227)
  * Make sure default applications are properly set in mimeapps.list
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604318400">- Update to version 4.15.3
  * Re-grab tree selection to prevent rare crash (gxo#xfce/exo#46)
  * Remove unneeded RTL adjustment (gxo#xfce/exo#45)
  * exo-open: Wrap long URI in error dialog (gxo#xfce/exo#26)
  * Avoid truncated text in small zoom levels (gxo#xfce/exo#42)
  * Make ExoIconView reduce selection on a single click
    (gxo#xfce/exo#39)
  * Partially restore 6fcefce9 (gxo#xfce/exo#18)
  * Adds new, foreign README.md
  * Add check for valid GtkTreeSelection (gxo#xfce/exo#40)
  * Reset cursor on drag end in single-click mode
  * exo-open: Change priority of command line parameters
    (gxo#xfce/exo#20)
  * Prevent label from overlapping icon in RTL (gxo#xfce/exo#36)
  * Prevent "selection_changed" bursts (gxo#xfce/exo#37)
  * Small change to documentation for exo_strdup_strftime
  * desktop-item-edit: Fix fallback for desktop file type detection
  * desktop-item-edit: Improve detection of invalid icon names
    (gxo#xfce/exo#33)
  * AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (gxo#xfce/exo!9)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1605873600">- Make sure the obsolete libexo-1-0 does not linger around creating
  conflicts.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 4.16.0
  * Focus must not be required in single click mode (Issue #190)
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump
  * Adjust padding only for vertical item orientation (Issue #48)
  * bump glib (and gio, gthread, etc) to 2.50.0
  * Fix GCC warning (false negative)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610107200">- To prevent dependency cycle we need #!BuildIgnore:  exo-tools
  in the spec file and it was accidentally removed in the previous
  commit.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1616500800">- Update to version 4.16.1
  * Revamp the documentation to modernize and uniformize accross
    components
  * Fix keyboard navigation when only one item is present
    (gxo#xfce/exo#53)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1618228800">- Update to version 4.16.2
  * Properly initialize GdkRectangle to prevent crash
    (gxo#xfce/exo#57)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1639137600">- Update to version 4.16.3
  * Dont reduce selection in single click mode (gxo#xfce/exo#71)
  * Add typecheck to prevent Gtk-CRITICAL (gxo#xfce/exo#63)
  * exo_strdup_strftime: Support additional encoding (gxo#xfce/exo#66)
  * Free hover_path in tree-view if not NULL
  * Fix compilation warnings
  * exo-icon-chooser-dialog: Focus filter entry by default
  * exo-icon-chooser-dialog: Set default to show to all icons
  * exo-icon-chooser-dialog: Speed up sorting the icon view model</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1655035200">- Update to version 4.16.4
  * exo-open : Only execute local .desktop files</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Updated to version 4.19.0</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730462400">- Updated to version 4.19.1
  * exo-tree-view: Add Ctrl+Shift+Click functionality (#116)
  * exo-icon-chooser-dialog: Fix icon leaks
  * Add option to exo-desktop-item-edit to print the filename
  * build: Bump requirements for Xfce 4.20
  * exo-icon-view: layout as well for empty view (Issue #118)
  * exo-open: Fix GError leak
  * exo-open: Fix GOptionContext memory leak
  * build: clang: Use gpointer cast to silence -Wcast-align
  * build: clang: Silence -Wcast-align
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * build: Fix GLIB_VERSION_MIN_REQUIRED redefined
  * exo-icon-view: Use GSequence instead of GList to improve performance
  * exo: Explicitly add GIO_UNIX_CFLAGS
  * build: Use XDT_VERSION_INIT and get rid of configure.ac.in
  * build: Add missing GETTEXT_PACKAGE definition
  * Fix deprecation (libxfce4ui#94)
  * Fix non X11 build (Fixes #111)
  * build: Check for bind_textdomain_codeset
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Updated to version 4.19.2
  * I18n: Update po/LINGUAS list
  * exo-die: Fix string leak in exo_die_g_key_file_set_locale_value
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Updated to version 4.20.0
  * Translation Updates</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736251200">- Re-add: Drop dependency from libexo to perl-URI: there is no indication
  of any perl reference in that library.</changelog>
</package>
<package pkgid="4049b693ad83e3f303367253642b72a1004c55aac9ac9cd600cbb38492af2c69" name="libfaxutil7_0_10" arch="aarch64">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="c4d0b3407ecdc7bd1559ae2e7ca2f71f93b6c1ac4050ff93c5c29455291aefb4" name="libfaxutil7_0_10" arch="i586">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="103fcbb37bdbf994a7ac0dd0c747be968a3095aeed35e167bf80d0cbb0c109d8" name="libfaxutil7_0_10" arch="ppc64le">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="5347ca374c6a3b544a1758001405977c799a3b3e83107001a361c6e68edf6de4" name="libfaxutil7_0_10" arch="s390x">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="b15aa38a5f6853149604aad3b367fbef9a2f836edaa31474ae236c350f1e6ac2" name="libfaxutil7_0_10" arch="x86_64">
  <version epoch="0" ver="7.0.10" rel="bp156.4.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1611662400">- Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1}</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620475200">- Fix TW build by pretending tiff 4.4 is as good enough as 4.{0,1}</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1626091200">- Add hylafax service and helper for use with firewalld, and
  explain the details in README.SUSE.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * hylafax-faxgetty@.service
  * hylafax-faxq.service
  * hylafax-faxqclean.service
  * hylafax-hfaxd.service
  * hylafax-usage.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634558400">- version 7.0.4
  * README.SUSE renamed
  * hylafax.diff added for boo#1191571 (pre-correction)
  * Dependencies on systemd-services adjusted
  * retry training twice at the same bitrate unless FTT (26 Aug 2021)
  * add missing reason messages for session failures (21 Aug 2021)
  * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
  * add Class1HasRMHookIndication (16 Aug 2021)
  * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
  * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
  * fix some behavior following frame reception timeouts (13 Aug 2021)
  * improve behavior if procedural interrupt fails (12 Aug 2021)
  * handle sender repeating RR after we transmit MCF (10 Aug 2021)
  * add session logging of receipt of CFR/FTT signals (3 Aug 2021)
  * cope with receipt of PPR following CTC (3 Aug 2021)
  * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
    the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
  * identify DCN after PPS as a receiver abort (2 Aug 2021)
  * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
  * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
  * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
  * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
  * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
  * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
  * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
  * decouple session logging from direct filesystem I/O (15 Jul 2021)
  * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
  * improve tenacity of "persistent" ECM (26 Jun 2021)
  * maintain the same SSL Fax passcode during a single session (20 May 2021)
  * log detection of binary file transfer support in receivers (1 Apr 2021)
  * add support for SiLabs Si2417/Si2435 (5 Feb 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648900800">- version 7.0.5
  * hylafax.diff removed - included in source
  * extend Class1RecvAbortOK = 0 timeout to 500 ms (4 Dec 2021)
  * cope with Si2435 V.34/V.8 connection glitch (17, 19 Nov 2021)
  * cope with spurious +FCERROR or other delayed messages from modem (26 Oct 2021)
  * avoid letting corrupt RTC signals lead to RTN (26 Oct 2021)
  * don't refer to DCN as an invalid response in error messages (20 Oct 2021)
  * handle TSI during procedural interrupt (19 Oct 2021)
  * do better with waiting on prologue frames from receiver (13 Oct 2021)
  * cope with echo of ERR (13 Oct 2021)
  * run ps2fax, pdf2fax, tiff2fax, pcl2fax coverters as fax user (12 Oct 2021)
  * attempt to cope with receivers who signal RTN in ECM Phase D (23 Sep 2021)
  * fix hfaxd build when LDAP libs are not present (23 Sep 2021)
  * handle PPR echo after fourth PPR (22 Sep 2021)
  * don't use CRP when waiting for CFR following training (15 Sep 2021)
  * attempt to cope with receivers which signal CFR after PPS (14 Sep 2021)
  * cope with senders who signal FTT in Phase D (10 Sep 2021)
  * fix problem with handling NSF/CSI/DIS frame after CTC/EOR (9 Sep 2021)
  * cope with senders who signal PPS without the PPS FCF (9 Sep 2021)
  * handle echo of PPR when expecting CTC/EOR (8 Sep 2021)
  * add failure messages for unspecified training failures (7 Sep 2021)
  * don't use CRP when waiting for CTR (7 Sep 2021)
  * handle echo of EOR, don't use CRP when waiting for ERR (7 Sep 2021)
  * repeat PIN if sender repeats post-page or partial-page message (7-8 Sep 2021)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654344000">- Project and download links switched to https
  libtiff44.diff added for tiff 4.x compatibility</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1672056000">- version 7.0.6
  * add support for libtiff v4.4 (10 Jun 2022)
  * libtiff44.diff removed
  * cope with SSL Fax senders who skip Phase C (5 May 2022)
  * add ability to trace SSL Fax data reception (3 May 2022)
  * handle timeout OK response to +FRH=3 and +FRM=n (25 Apr 2022)
  * don't leave the modem waiting for a response when in SSL Fax (25 Apr 2022)
  * improve recovery from unexpected SSL Fax terminations during ECM (15, 18, 26 Apr 2022)
  * try to cope with false "no dialtone" results (4, 8 Apr 2022)
  * add initial support for SSL Fax Proxy servers (4, 23 Feb; 4, 19 Apr; 10, 24 Jun 2022)
  * buildrequirement for libssl added (Thanks Dimstar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1673524800">- tiff_450.diff added
  updated to trunk r2695 for tiff 4.5 support - See CHANGES for details</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1674561600">- version 7.0.7
  * tiff_450.diff removed
  * constrain job priority to 0-255 (20 Jan 2023)
  * add support for libtiff v4.5.0 (4-5 Jan 2023)
  * add some Si2435 configuration considerations (27 Dec 2022, 20 Jan 2023)
  * if Class1RecvAbortOK is 0 then don't bother with the CAN byte at all (31 Oct 2022)
  * check that the modem isn't trying to deliver a message when we're trying to send
    binary data to it (16-17 Oct 2022)
  * prevent inherited values from creeping into subsequent xferfaxlog data (26 Aug 2022)
  * add external reference feature in dialrules (18 Aug 2022)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699617600">- Add tiff.patch to unbreak build</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1700481600">- Remove stray pseudo comment (from Bjørn Lie)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1708516800">- prepare for rpm 4.20</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1711627200">- version 7.0.8
  * tiff.patch removed (included)
  * add support for libtiff 4.6.0t (20 Mar 2024)
  * don't attempt SSL Fax for the last training attempt (19 Feb 2024)
  * fix sslfaxproxy from terminating if a client doesn't provide a passcode (9 Oct 2023)
  * fix faxmail to cope with uppercase in multipart content-type header (25 Jul 2023)
  * increase SSL Fax listener backlog to system somaxconn value (24 Jul 2023)
  * improve sslfaxproxy error handling (7 Jul 2023)
  * fix handling of Phase B signals in Phase D when in V.34-Fax (10 May 2023)
  * improve V.34-Fax recovery after SSL Fax termination (10 May 2023)
  * cope with Class 1.0 V.34-Fax scenarios where we receive ECM data frames
    when we were expecting Phase D signaling (3-4 Apr 2023)
  * ignore modem input when trying to deliberately terminate a call (3 Apr 2023)
  * C99 compatibility fixes for configure script (17 Feb 2023)
  * cope with libjpeg informative messages (6, 8 Feb 2023)
  * cope with color senders that do not include G3FAX marker (4 Feb 2023)-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728216000">- version 7.0.9
  * add support for libtiff 4.7.0 (7 Sep 2024)
  * try to cope with T.38 invite stutter at beginning of receive (25 Aug 2024)
  * identify more senders who confuse RTN (21-24 Aug 2024)
  * cope with Phase C carrier fast restart when receiving (21 Aug 2024)
  * Support PDF form as cover page template (6 Aug 2024)
  * fix some build warnings (6 Aug 2024)
  * Correctly report file encoding with cqtest (5 Aug 2024)
  * Set FIFO response waiting flag earlier to prevent deadlock (5 Aug 2024)
  * Increasing file header buffer used to detect file type (5 Aug 2024)
  * Log invalid FIFO messages received by hfaxd (5 Aug 2024)
  * Allow triggers to work in passive mode (5 Aug 2024)
  * Abort deleting user when an error prevent writing new file (5 Aug 2024)
  * Allow recvstats to correctly show times over 99 minutes (5 Aug 2024)
  * Close both sides of the control pipe when jobcontrol fork fails (5 Aug 2024)
  * Don't log in faxq signal handler (5 Aug 2024)
  * various logging and documentation corrections (5 Aug 2024)
  * faxq: scanQueueDirectory fixup (5 Aug 2024)
  * faxq: Dispatch while we are scanning for all our jobs (5 Aug 2024)
  * ModemServer: Write freeing status to void no-longer valid status (5 Aug 2024)
  * faxq: Make debug show modems and their states too (5 Aug 2024)
  * faxdeluser: preserve current hosts file ownership and modes (5 Aug 2024)
  * Close files when done with them. (5 Aug 2024)
  * Wait for end marker before terminating SHIELDED_DTMF retrieval (5 Aug 2024)
  * Allow email headers to be folded between field-name and field-body (5 Aug 2024)
  * We need to check for child that terminate while SIGCLD is not setup. (5 Aug 2024)
  * MAXSEQNUM is a valid value to be returned. It's any above that is invalid (5 Aug 2024)
  * New option to return receive stats by device (already in xfer stats) (5 Aug 2024)
  * Get DF from params when DCS is not present/valid (5 Aug 2024)
  * Do not poll for children when checking for FD or processes already ready (5 Aug 2024)
  * Make sure all messages from a child are processed before reaping that child (5 Aug 2024)
  * Replace non signal-safe signal handlers with simple ones setting a flag (5 Aug 2024)
  * PDF2FaxCmd documentation (5 Aug 2024)
  * Make sure message didn't get truncated before sending command to FIFO (5 Aug 2024)
  * FIFO sending utilities must send NUL character at the end of commands (5 Aug 2024)
  * specify /bin/bash in faxmail scripts requiring bash (26 Apr 2024)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1728388800">- removed comment from spec file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1738324800">- version 7.0.10
  * fix build for GCC v15 on Fedora 42 (23 Jan 2025)
  * identify a sender as fumbling ECM if they don't get any data through in four
    attempts at 2400 bps (16 Jan 2025)
  * extend Phase D reception attempts to at least 4-5 seconds if connected (7 Jan 2025)
  * ignore DTMF presentation in Class 1 when dialing (27 Dec 2024)
  * start SSL Fax connection on receive even if DCS is not received (15, 21 Nov 2024)
  * fix rare conditions where send error messages are omitted (12 Sep, 29 Oct 2024)</changelog>
</package>
<package pkgid="70709b80a6fd1b2eabd7f2d255da5c9f7f811f176b5333a2c7b73be8cb5ffc6b" name="libgarcon-1-0" arch="aarch64">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="250a9cf68dc999b3e0cb0646bdc8d8bda6a19b39e207c660d6b692bd9455a091" name="libgarcon-1-0" arch="i586">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="83df63e7b69d9497f724d15be6d5c95795b20a7f2bf2972fe245cc29c24a874a" name="libgarcon-1-0" arch="ppc64le">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="402dabf16010e7533d5e623ebb6b2dd3a16f680d756fa11231d9ddd1ddba3e7a" name="libgarcon-1-0" arch="s390x">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="6638d98e07fb58aee51b94ed258a4315deb768b4e6d525c3c9d968e59af60b51" name="libgarcon-1-0" arch="x86_64">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="d5ceb0aa925c9b81cc2a58bf4c2c99bb427319c3531a70ff7d883d008cebb2f5" name="libgarcon-1-0" arch="aarch64">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="bc4f4fe70a7234cb1c42f93c568279d7c7d606ced2f69ee16d38341d25a5cd2d" name="libgarcon-1-0" arch="i586">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="5eb7a2b16a05c260862637564bb40b74ef12865dc44540dc28c0b1b132554c0f" name="libgarcon-1-0" arch="ppc64le">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="4b8d1acbc83ec59cb3b4127ff5fa360cb16fffa02d0ce4285efd57e5fea0219d" name="libgarcon-1-0" arch="s390x">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="6d1f1d3498ccd1492f74981aeb7660d51780655777493c49fce9793ec5d63f1f" name="libgarcon-1-0" arch="x86_64">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="6d24ba57d38dcd94003df44241a8946b747c0d10eb623bea4ea4b51ac4940a20" name="libgarcon" arch="src">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="27657db47fbc5b5f503a8821b62c0a2fd5431c00faa8005ecef6d4e370dd6f33" name="libgarcon" arch="src">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="f67a16a885d8fcf0cf8a5d75a536730da9e8006bda96a0306d9a4557d2ed8aa3" name="libgarcon-branding-upstream" arch="noarch">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="55b6f43442cc3e4977f2fc2c352242d03defa3fd73fc62c3b6e8656d1111cf07" name="libgarcon-branding-upstream" arch="noarch">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="77ec429d5bfda3bade59b6dc7c3c099e55593ccc1571fba1605ea19876316e1d" name="libgarcon-data" arch="noarch">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="62adea96bcc3db3db546d965d57d228e04873d7971b6067d9a9c5074ae92239c" name="libgarcon-data" arch="noarch">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="d206048dc3fae546c998143268939891fe31fa92226b71142b89595592705359" name="libgarcon-devel" arch="aarch64">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="cd24655d711a6c376e9b8310fc10a5ec0b5196725c6cea2a793e6affa19b6dd4" name="libgarcon-devel" arch="i586">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="e92fb2efb80a045c648ae0fddc82e18061b41430ef7d8f8ac26a2738128977de" name="libgarcon-devel" arch="ppc64le">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="06824901ffc5b62b9b71ec928bbb1e9356e0aacded1a3102cf7c4e8ba93a9f24" name="libgarcon-devel" arch="s390x">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="0f18a33c2d66488449b69ef37429b5e10b4802094daa9f4d68b9ede54e4dff13" name="libgarcon-devel" arch="x86_64">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="9dc406f963347b4fb649185f8a39ab0f21d50e6e55176d3fab47964ac10f0cac" name="libgarcon-devel" arch="aarch64">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="d39379b70d248d73a312ab9226ba69a77cd6f8fc2b714fcc322ef82b9af8ec37" name="libgarcon-devel" arch="i586">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="76b6d2a14a879e6b7c8a3026c468c9be6b768fe4bf400524bcccbc858888637c" name="libgarcon-devel" arch="ppc64le">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="a7b1e2f9df766c57ada5996c6bae29d54dd0540681bffd3dff634580d45b2e36" name="libgarcon-devel" arch="s390x">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="dec2c7430d3de974ebf508f5262b07594bed6edf6281ae8acdb1d1a0a2192774" name="libgarcon-devel" arch="x86_64">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="1b448cb27d02a438a6ce910c189433e09cad5f317b1b949366e7c1bc49a53ee3" name="libgarcon-doc" arch="noarch">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="133d1bea72811898a399eb0019cd43154df95d1f1f178e30661b58c6dc59efe4" name="libgarcon-doc" arch="noarch">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="394e892e3520a4bb914c654554590cbbe14b213cd62df7214853dc5460cd2904" name="libgarcon-lang" arch="noarch">
  <version epoch="0" ver="4.18.2" rel="bp156.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 0.4.0
  - update intltool (bxo#8930)
  - fix menu icons for misconfigured desktop files (bxo#10709)
  - add case insensitive sorting to the menu (bxo#10594)
  - don't force URLs to be opened in a web browser (bxo#10212)
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1482667200">- update to version 0.5.0
  - port to GTK3
- add libgarcon-2-0 subpackage with GTK3 version</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1492603200">- update to version 0.6.0
  - Fix left-alignment of labels in menuitems
  - garcon-gtk: Add an option to edit launchers
  - Desktop actions custom icon support
  - Show desktop actions in a submenu
  - Added desktop actions support (bxo#11268)
  - Don't add a placeholder menu (bxo#11626)
  - Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  - Fix missing menus when all items are in submenus (bxo#11801)
  - Translation updates</changelog>
  <changelog author="jengelh@inai.de" date="1500465600">- RPM group fix.
- Run fdupes over all of /usr.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465601">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
</package>
<package pkgid="479f7a32c71adeee8c1e31000fe612f15dfb7a9c58922955ac9178cb75a4c134" name="libgarcon-lang" arch="noarch">
  <version epoch="0" ver="4.20.0" rel="bp156.4.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 0.6.1
  - Remove extraneous libxfce4ui-1 check
  - Fix garcon-2 reference bxo#13543
  - Drop libgarcon-2
  - Make building garcon-gtk2 optional
  - Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1546430400">- update to version 0.6.2
  - Fix some menu icons are too big (bxo#13785)
  - Support composite XDG_CURRENT_DESKTOP (bxo#14137)
  - Decrement allocation counter on item unref (bxo#12700)
  - Replace hash table for application actions with a list
  - Support for freedesktop Keyword item (bxo#10683)
  - garcon-gtk2-1.pc should be optional.
  - Fix documentation generation
  - Fix make distcheck build
  - Fix some autogen warnings
  - Update dependencies and copyright
  - Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1552737600">- Switched URL and Source to https:// in the spec file.`</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1561896000">- Update to version 0.6.3
  * Fix g_type_class_add_private deprecation in recent GLib
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1564228800">- Update to version 0.6.4
  * Update gitignore
  * Fix use after free crash (bxo#15679)
  * Translation updates
- Removed %defattr macros
- Use %make_build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598616000">- Update to version 0.7.1
  * Drop support for Gtk2
  * Drop Gtk3 ifdefs
  * Switch to xfce_gtk_image_menu_item
  * Add support for GObject Introspection (gxo#xfce/garcon#4)
  * Improve GObject introspection annotations (gxo#xfce/garcon#8)
  * Fix missing transfer annotation
  * Field codes expansion API update
  * Transfer some code to libxfce4util
  * Fix default merge rules in xfce-applications.menu (bxo#15504)
  * Rename exo-helpers to the new xfce4-xx ones
  * Do not add INSTALL in dist tarball
  * Fix a memory leak
  * Switch to README.md and foreign automake mode
  * README: Use table for debug arguments
  * Add garcon_menu_item_[g|s]et_keywords to docs
  * Add garcon_gtk_menu_get_desktop_actions_menu
  * Improve docstrings
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1604923200">- Update to version 0.7.2
  * Update README.md
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1607947200">- Update to version 0.7.3
  * garcon now needs libxfce4ui/4util 4.15.6+
  * Use the symbolic close icon in the error dialog
  * Don't launch apps as children
  * bump glib (and gio, gthread, etc) minimum to 2.50.0
  * relax automake requirement to 1.15
  * Add new icon needed for xfce4-about-dialog.
  * Translation Updates
- Fix executable in /etc warning</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1607947201">- Data files should always be installed along with the libraries</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1608724800">- Update to version 0.8.0
  * fix GarconMenuItem file documentation
  * Remove GSourceFunc casts
  * Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610020800">- Fixed wrong source URL</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1610884800">- Update to version 4.16.1
  * Launch applications as children again (gxo#xfce/garcon#18)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1671278400">- Update to version 4.18.0
  * Bump requirements for Xfce 4.18
  * Translation Updates:</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1680004800">- Update to version 4.18.1
  * garcon-gtk: Add missing lock when filling the GtkMenu
  * Wait for any async operation to finish before releasing locks
  * Use GIcons for menu icons instead of loading surfaces
  * Revert "garcon-gtk: Fix menu icon blurriness when UI scale
    factor != 1"
  * Revert "Load icons using icon theme scaling functions correctly"
  * garcon-gtk: Properly update GtkMenu is_populated state
  * Load icons using icon theme scaling functions correctly
  * Translation Updates</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1681992000">- Correction of license should be LGPL-2.0-only and GFDL-1.1-only
  * confirmed with suse legal</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707134400">- Update to version 4.18.2
  * Update copyright year
  * garcon-gtk: Remove weak ref on GarconMenu on finalize()
  * Use target desktop files instead of symlinks (Fixes #1)
  * garcon-gtk: Avoid populating a wrong menu
  * garcon-gtk: Prevent use-after-free when loading garcon menu
  * Add icon at 64px, clean up SVG metadata
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1712059200">- Update to version 4.19.1</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1730548800">- Update to version 4.19.2 [development release]
  * Fix doc annotation
  * build: Bump requirements for Xfce 4.20
  * Apply .clang-format file
  * Sort includes
  * clang-format: Add file
  * gcc-analyzer: Add false positive file
  * scan-build: Add false positive file
  * build: Use AM_DISTCHECK_CONFIGURE_FLAGS
  * menu-item: Honor TryExec again
  * menu-item: Let glib check for absolute path to executable
  * Use Exec instead of TryExec for menu item visibility (#22)
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1733054400">- Update to version 4.19.3 [development release]
  * menu-item: Ensure UTF-8 strings
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1734264000">- Update to version 4.20.0
  * Translation Updates</changelog>
</package>
<package pkgid="d803a12b9e48b78434372a465247ceefb78b6691588fd238fafa439200bb0222" name="libgdcm3_0" arch="aarch64">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="121d807514a32ff854005a722ab119f5ea7778dfa6d6249c714e9b2c5f7c5e27" name="libgdcm3_0" arch="ppc64le">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="e8bd4c8c7407777deeacbe65261a35faedffdf079befcb289bded5418777c69a" name="libgdcm3_0" arch="s390x">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="c52ce5aea7c817d4c9fc9771fdb8e48211877c3c5fc10074430973be69948424" name="libgdcm3_0" arch="x86_64">
  <version epoch="0" ver="3.0.24" rel="bp156.2.4.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1667390400">- use compiler gcc11-c++ to fix Leap 15.5 build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 3.0.20:
  * no upstream changelog available</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678276800">- update to 3.0.21:
  * handle MFSPLIT case from SIEMENS
  * Tweak a bit the logic for legacy PMS handling
  * Make it available for more storage class</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1710331200">- version 3.0.23 - no changelog
  0001-Fix-build-with-CharLS-2.1.0.patch removed (not required)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1715601600">- version 3.0.24
  * various security fixes, no changelog
  * fixes out-of-bounds write in JPEG2000Codec:DecodeByStreamsCommon
    (CVE-2024-22373/boo#1223398)</changelog>
</package>
<package pkgid="b1a3119430e0af97f8470ccef2671645e252eb94cddb4b64f287e4ac658ab62b" name="libgtk-layer-shell0" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="bp156.3.2.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1577534400">- Initial package gtk-layer-shell 0.1.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1578052800">- Add typelib subpackage typelib-1_0-GtkLayerShell-0_1
- Rename gtk-layer-shell0 to libgtk-layer-shell0</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- BuildRequire gobject introspection devel files correctly</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596024000">- Update to 0.2.0:
  * Relicense to LGPL v3
  * Fix long standing issue with popup grabs
  * Fix potential compatibility issues between GTK versions with
    gtk-priv headers
  * Add GitHub Actions CI (just building and license check for now)
  * Add script to check that are files are licensed correctly
  * Use layer_surface-&gt;set_layer instead of remapping (when available)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- Update to 0.3.0:
  * Demo: Display GTK version
  * Demo: Add option for disabling gtk-layer-shell for testing
  * Fix intermittent crash relating to popovers (#51)
  * Clarify that our license is LGPL version 3 or any later version
  * Use system XDG Shell protocol when available
  * Allow accessing the underlying layer shell surface
    (EDIT: this change was accidentally omitted from the release)
  * Bump explicitly supported GTK version to 3.24.22</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597752000">- Add GPL3 to Licenses</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603368000">- Update to 0.4.0:
  * Demo: show GTK Layer Shell version
  * Demo: fix initially set auto-exclusive zone and fixed size
    properties (fixes #64)
  * API: expose GTK Layer Shell version
  * API: expose the underlying layer shell surface (fixes #41)
  * Tests: add mock server
  * Tests: add integration tests (fixes #60)
  * Diagnostics: remove "transient_for != window transient_for" warning
  * Diagnostics: improve warning when GTK version may not work by
    linking to a compatibility table (fixes #66)
  * Compat: bump supported GTK to v3.24.23</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603972800">- Update to 0.5.0:
  * API: add getters for all properties (fixes #56)
  * API: add gtk_layer_is_supported() (fixes #83)
  * API: add gtk_layer_is_layer_window(window)
  * Docs: add Since: annotations for functions added since the
    initial release (fixes #82)
  * Fix: accept non-1 true boolean values
  * Tests: fix license test for release tarball (fixes #73)
  * Tests: test popup with grab (the most likely thing to break
    on an incompatible GTK version) (fixes #68)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1604318400">- Update to 0.5.1:
  * Tests: fix integration test timeout on GTK v3.24.23 (#91)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1607860800">- Update to 0.5.2:
  * Fix: normalize keyboard interactivity boolean to TRUE or FALSE
  * Fix: Set layer windows to mapped (removes warning on tooltip
    creation and fixes subsurfaces created as a GTK_WINDOW_POPUP
    window, fixes #38)
  * Examples: Rename gtk-layer-example -&gt; simple-example-c
  * Examples: merge simple-example-c and gtk-layer-demo into
    examples directory
  * Examples: add Vala example (not built with rest of project,
    does not add dependency)
  * Examples: add Python example
  * Meson: change GTK dependency gtk+-wayland-3.0 -&gt; gtk+-3.0
  * Meson: drop .types file in docs
  * Tests: change "test client" terminology to "integration test"
  * Tests: colored output
  * Tests: check that all tests are added to meson
  * Compat: bump supported GTK to v3.24.24</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614772800">- Update to 0.6.0:
  * Layer Shell: support protocol version 4
  * API: support on-demand keyboard interactivity on protocol version 4
  * API: deprecate gtk_layer_set_keyboard_interactivity() in favor of
    gtk_layer_set_keyboard_mode()
  * API: add gtk_layer_get_protocol_version()
  * Compat bump supported GTK to v3.24.26</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1643371200">- Update to 0.7.0:
  * Meson: allow disabling building with gobject-introspection
  * Compat: bump supported GTK to v3.24.31</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666612800">- Update to 0.8.0:
  * Vala: support generating vapi files
  * Fix: memory leak, #128
  * Compat: stop warning when GTK version is not explicitly supported
  * Compat: bump supported GTK to 3.24.34</changelog>
</package>
<package pkgid="6e65f429e95000835d4a41d5e0ab24a822b4119ab015cb668fff194cf2d2f7ec" name="libgtk-layer-shell0" arch="i586">
  <version epoch="0" ver="0.8.0" rel="bp156.3.2.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1577534400">- Initial package gtk-layer-shell 0.1.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1578052800">- Add typelib subpackage typelib-1_0-GtkLayerShell-0_1
- Rename gtk-layer-shell0 to libgtk-layer-shell0</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- BuildRequire gobject introspection devel files correctly</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596024000">- Update to 0.2.0:
  * Relicense to LGPL v3
  * Fix long standing issue with popup grabs
  * Fix potential compatibility issues between GTK versions with
    gtk-priv headers
  * Add GitHub Actions CI (just building and license check for now)
  * Add script to check that are files are licensed correctly
  * Use layer_surface-&gt;set_layer instead of remapping (when available)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- Update to 0.3.0:
  * Demo: Display GTK version
  * Demo: Add option for disabling gtk-layer-shell for testing
  * Fix intermittent crash relating to popovers (#51)
  * Clarify that our license is LGPL version 3 or any later version
  * Use system XDG Shell protocol when available
  * Allow accessing the underlying layer shell surface
    (EDIT: this change was accidentally omitted from the release)
  * Bump explicitly supported GTK version to 3.24.22</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597752000">- Add GPL3 to Licenses</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603368000">- Update to 0.4.0:
  * Demo: show GTK Layer Shell version
  * Demo: fix initially set auto-exclusive zone and fixed size
    properties (fixes #64)
  * API: expose GTK Layer Shell version
  * API: expose the underlying layer shell surface (fixes #41)
  * Tests: add mock server
  * Tests: add integration tests (fixes #60)
  * Diagnostics: remove "transient_for != window transient_for" warning
  * Diagnostics: improve warning when GTK version may not work by
    linking to a compatibility table (fixes #66)
  * Compat: bump supported GTK to v3.24.23</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603972800">- Update to 0.5.0:
  * API: add getters for all properties (fixes #56)
  * API: add gtk_layer_is_supported() (fixes #83)
  * API: add gtk_layer_is_layer_window(window)
  * Docs: add Since: annotations for functions added since the
    initial release (fixes #82)
  * Fix: accept non-1 true boolean values
  * Tests: fix license test for release tarball (fixes #73)
  * Tests: test popup with grab (the most likely thing to break
    on an incompatible GTK version) (fixes #68)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1604318400">- Update to 0.5.1:
  * Tests: fix integration test timeout on GTK v3.24.23 (#91)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1607860800">- Update to 0.5.2:
  * Fix: normalize keyboard interactivity boolean to TRUE or FALSE
  * Fix: Set layer windows to mapped (removes warning on tooltip
    creation and fixes subsurfaces created as a GTK_WINDOW_POPUP
    window, fixes #38)
  * Examples: Rename gtk-layer-example -&gt; simple-example-c
  * Examples: merge simple-example-c and gtk-layer-demo into
    examples directory
  * Examples: add Vala example (not built with rest of project,
    does not add dependency)
  * Examples: add Python example
  * Meson: change GTK dependency gtk+-wayland-3.0 -&gt; gtk+-3.0
  * Meson: drop .types file in docs
  * Tests: change "test client" terminology to "integration test"
  * Tests: colored output
  * Tests: check that all tests are added to meson
  * Compat: bump supported GTK to v3.24.24</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614772800">- Update to 0.6.0:
  * Layer Shell: support protocol version 4
  * API: support on-demand keyboard interactivity on protocol version 4
  * API: deprecate gtk_layer_set_keyboard_interactivity() in favor of
    gtk_layer_set_keyboard_mode()
  * API: add gtk_layer_get_protocol_version()
  * Compat bump supported GTK to v3.24.26</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1643371200">- Update to 0.7.0:
  * Meson: allow disabling building with gobject-introspection
  * Compat: bump supported GTK to v3.24.31</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666612800">- Update to 0.8.0:
  * Vala: support generating vapi files
  * Fix: memory leak, #128
  * Compat: stop warning when GTK version is not explicitly supported
  * Compat: bump supported GTK to 3.24.34</changelog>
</package>
<package pkgid="e86d621712fe24c5232d6a1a6a04e68682f713ec503988fb317a049a181221be" name="libgtk-layer-shell0" arch="ppc64le">
  <version epoch="0" ver="0.8.0" rel="bp156.3.2.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1577534400">- Initial package gtk-layer-shell 0.1.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1578052800">- Add typelib subpackage typelib-1_0-GtkLayerShell-0_1
- Rename gtk-layer-shell0 to libgtk-layer-shell0</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- BuildRequire gobject introspection devel files correctly</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596024000">- Update to 0.2.0:
  * Relicense to LGPL v3
  * Fix long standing issue with popup grabs
  * Fix potential compatibility issues between GTK versions with
    gtk-priv headers
  * Add GitHub Actions CI (just building and license check for now)
  * Add script to check that are files are licensed correctly
  * Use layer_surface-&gt;set_layer instead of remapping (when available)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- Update to 0.3.0:
  * Demo: Display GTK version
  * Demo: Add option for disabling gtk-layer-shell for testing
  * Fix intermittent crash relating to popovers (#51)
  * Clarify that our license is LGPL version 3 or any later version
  * Use system XDG Shell protocol when available
  * Allow accessing the underlying layer shell surface
    (EDIT: this change was accidentally omitted from the release)
  * Bump explicitly supported GTK version to 3.24.22</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597752000">- Add GPL3 to Licenses</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603368000">- Update to 0.4.0:
  * Demo: show GTK Layer Shell version
  * Demo: fix initially set auto-exclusive zone and fixed size
    properties (fixes #64)
  * API: expose GTK Layer Shell version
  * API: expose the underlying layer shell surface (fixes #41)
  * Tests: add mock server
  * Tests: add integration tests (fixes #60)
  * Diagnostics: remove "transient_for != window transient_for" warning
  * Diagnostics: improve warning when GTK version may not work by
    linking to a compatibility table (fixes #66)
  * Compat: bump supported GTK to v3.24.23</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603972800">- Update to 0.5.0:
  * API: add getters for all properties (fixes #56)
  * API: add gtk_layer_is_supported() (fixes #83)
  * API: add gtk_layer_is_layer_window(window)
  * Docs: add Since: annotations for functions added since the
    initial release (fixes #82)
  * Fix: accept non-1 true boolean values
  * Tests: fix license test for release tarball (fixes #73)
  * Tests: test popup with grab (the most likely thing to break
    on an incompatible GTK version) (fixes #68)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1604318400">- Update to 0.5.1:
  * Tests: fix integration test timeout on GTK v3.24.23 (#91)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1607860800">- Update to 0.5.2:
  * Fix: normalize keyboard interactivity boolean to TRUE or FALSE
  * Fix: Set layer windows to mapped (removes warning on tooltip
    creation and fixes subsurfaces created as a GTK_WINDOW_POPUP
    window, fixes #38)
  * Examples: Rename gtk-layer-example -&gt; simple-example-c
  * Examples: merge simple-example-c and gtk-layer-demo into
    examples directory
  * Examples: add Vala example (not built with rest of project,
    does not add dependency)
  * Examples: add Python example
  * Meson: change GTK dependency gtk+-wayland-3.0 -&gt; gtk+-3.0
  * Meson: drop .types file in docs
  * Tests: change "test client" terminology to "integration test"
  * Tests: colored output
  * Tests: check that all tests are added to meson
  * Compat: bump supported GTK to v3.24.24</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614772800">- Update to 0.6.0:
  * Layer Shell: support protocol version 4
  * API: support on-demand keyboard interactivity on protocol version 4
  * API: deprecate gtk_layer_set_keyboard_interactivity() in favor of
    gtk_layer_set_keyboard_mode()
  * API: add gtk_layer_get_protocol_version()
  * Compat bump supported GTK to v3.24.26</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1643371200">- Update to 0.7.0:
  * Meson: allow disabling building with gobject-introspection
  * Compat: bump supported GTK to v3.24.31</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666612800">- Update to 0.8.0:
  * Vala: support generating vapi files
  * Fix: memory leak, #128
  * Compat: stop warning when GTK version is not explicitly supported
  * Compat: bump supported GTK to 3.24.34</changelog>
</package>
<package pkgid="689f10552e4af8313b7027a0ed667cab13fde042d53f00cf2ae7c66e525e48e6" name="libgtk-layer-shell0" arch="s390x">
  <version epoch="0" ver="0.8.0" rel="bp156.3.2.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1577534400">- Initial package gtk-layer-shell 0.1.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1578052800">- Add typelib subpackage typelib-1_0-GtkLayerShell-0_1
- Rename gtk-layer-shell0 to libgtk-layer-shell0</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- BuildRequire gobject introspection devel files correctly</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596024000">- Update to 0.2.0:
  * Relicense to LGPL v3
  * Fix long standing issue with popup grabs
  * Fix potential compatibility issues between GTK versions with
    gtk-priv headers
  * Add GitHub Actions CI (just building and license check for now)
  * Add script to check that are files are licensed correctly
  * Use layer_surface-&gt;set_layer instead of remapping (when available)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- Update to 0.3.0:
  * Demo: Display GTK version
  * Demo: Add option for disabling gtk-layer-shell for testing
  * Fix intermittent crash relating to popovers (#51)
  * Clarify that our license is LGPL version 3 or any later version
  * Use system XDG Shell protocol when available
  * Allow accessing the underlying layer shell surface
    (EDIT: this change was accidentally omitted from the release)
  * Bump explicitly supported GTK version to 3.24.22</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597752000">- Add GPL3 to Licenses</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603368000">- Update to 0.4.0:
  * Demo: show GTK Layer Shell version
  * Demo: fix initially set auto-exclusive zone and fixed size
    properties (fixes #64)
  * API: expose GTK Layer Shell version
  * API: expose the underlying layer shell surface (fixes #41)
  * Tests: add mock server
  * Tests: add integration tests (fixes #60)
  * Diagnostics: remove "transient_for != window transient_for" warning
  * Diagnostics: improve warning when GTK version may not work by
    linking to a compatibility table (fixes #66)
  * Compat: bump supported GTK to v3.24.23</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603972800">- Update to 0.5.0:
  * API: add getters for all properties (fixes #56)
  * API: add gtk_layer_is_supported() (fixes #83)
  * API: add gtk_layer_is_layer_window(window)
  * Docs: add Since: annotations for functions added since the
    initial release (fixes #82)
  * Fix: accept non-1 true boolean values
  * Tests: fix license test for release tarball (fixes #73)
  * Tests: test popup with grab (the most likely thing to break
    on an incompatible GTK version) (fixes #68)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1604318400">- Update to 0.5.1:
  * Tests: fix integration test timeout on GTK v3.24.23 (#91)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1607860800">- Update to 0.5.2:
  * Fix: normalize keyboard interactivity boolean to TRUE or FALSE
  * Fix: Set layer windows to mapped (removes warning on tooltip
    creation and fixes subsurfaces created as a GTK_WINDOW_POPUP
    window, fixes #38)
  * Examples: Rename gtk-layer-example -&gt; simple-example-c
  * Examples: merge simple-example-c and gtk-layer-demo into
    examples directory
  * Examples: add Vala example (not built with rest of project,
    does not add dependency)
  * Examples: add Python example
  * Meson: change GTK dependency gtk+-wayland-3.0 -&gt; gtk+-3.0
  * Meson: drop .types file in docs
  * Tests: change "test client" terminology to "integration test"
  * Tests: colored output
  * Tests: check that all tests are added to meson
  * Compat: bump supported GTK to v3.24.24</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614772800">- Update to 0.6.0:
  * Layer Shell: support protocol version 4
  * API: support on-demand keyboard interactivity on protocol version 4
  * API: deprecate gtk_layer_set_keyboard_interactivity() in favor of
    gtk_layer_set_keyboard_mode()
  * API: add gtk_layer_get_protocol_version()
  * Compat bump supported GTK to v3.24.26</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1643371200">- Update to 0.7.0:
  * Meson: allow disabling building with gobject-introspection
  * Compat: bump supported GTK to v3.24.31</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666612800">- Update to 0.8.0:
  * Vala: support generating vapi files
  * Fix: memory leak, #128
  * Compat: stop warning when GTK version is not explicitly supported
  * Compat: bump supported GTK to 3.24.34</changelog>
</package>
<package pkgid="43fe2bb89b91c9f8e81c82a727a2e5d101fce1304b53e090bf575db1cc9d943a" name="libgtk-layer-shell0" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="bp156.3.2.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1577534400">- Initial package gtk-layer-shell 0.1.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1578052800">- Add typelib subpackage typelib-1_0-GtkLayerShell-0_1
- Rename gtk-layer-shell0 to libgtk-layer-shell0</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- BuildRequire gobject introspection devel files correctly</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1596024000">- Update to 0.2.0:
  * Relicense to LGPL v3
  * Fix long standing issue with popup grabs
  * Fix potential compatibility issues between GTK versions with
    gtk-priv headers
  * Add GitHub Actions CI (just building and license check for now)
  * Add script to check that are files are licensed correctly
  * Use layer_surface-&gt;set_layer instead of remapping (when available)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- Update to 0.3.0:
  * Demo: Display GTK version
  * Demo: Add option for disabling gtk-layer-shell for testing
  * Fix intermittent crash relating to popovers (#51)
  * Clarify that our license is LGPL version 3 or any later version
  * Use system XDG Shell protocol when available
  * Allow accessing the underlying layer shell surface
    (EDIT: this change was accidentally omitted from the release)
  * Bump explicitly supported GTK version to 3.24.22</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597752000">- Add GPL3 to Licenses</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603368000">- Update to 0.4.0:
  * Demo: show GTK Layer Shell version
  * Demo: fix initially set auto-exclusive zone and fixed size
    properties (fixes #64)
  * API: expose GTK Layer Shell version
  * API: expose the underlying layer shell surface (fixes #41)
  * Tests: add mock server
  * Tests: add integration tests (fixes #60)
  * Diagnostics: remove "transient_for != window transient_for" warning
  * Diagnostics: improve warning when GTK version may not work by
    linking to a compatibility table (fixes #66)
  * Compat: bump supported GTK to v3.24.23</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1603972800">- Update to 0.5.0:
  * API: add getters for all properties (fixes #56)
  * API: add gtk_layer_is_supported() (fixes #83)
  * API: add gtk_layer_is_layer_window(window)
  * Docs: add Since: annotations for functions added since the
    initial release (fixes #82)
  * Fix: accept non-1 true boolean values
  * Tests: fix license test for release tarball (fixes #73)
  * Tests: test popup with grab (the most likely thing to break
    on an incompatible GTK version) (fixes #68)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1604318400">- Update to 0.5.1:
  * Tests: fix integration test timeout on GTK v3.24.23 (#91)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1607860800">- Update to 0.5.2:
  * Fix: normalize keyboard interactivity boolean to TRUE or FALSE
  * Fix: Set layer windows to mapped (removes warning on tooltip
    creation and fixes subsurfaces created as a GTK_WINDOW_POPUP
    window, fixes #38)
  * Examples: Rename gtk-layer-example -&gt; simple-example-c
  * Examples: merge simple-example-c and gtk-layer-demo into
    examples directory
  * Examples: add Vala example (not built with rest of project,
    does not add dependency)
  * Examples: add Python example
  * Meson: change GTK dependency gtk+-wayland-3.0 -&gt; gtk+-3.0
  * Meson: drop .types file in docs
  * Tests: change "test client" terminology to "integration test"
  * Tests: colored output
  * Tests: check that all tests are added to meson
  * Compat: bump supported GTK to v3.24.24</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1614772800">- Update to 0.6.0:
  * Layer Shell: support protocol version 4
  * API: support on-demand keyboard interactivity on protocol version 4
  * API: deprecate gtk_layer_set_keyboard_interactivity() in favor of
    gtk_layer_set_keyboard_mode()
  * API: add gtk_layer_get_protocol_version()
  * Compat bump supported GTK to v3.24.26</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1643371200">- Update to 0.7.0:
  * Meson: allow disabling building with gobject-introspection
  * Compat: bump supported GTK to v3.24.31</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666612800">- Update to 0.8.0:
  * Vala: support generating vapi files
  * Fix: memory leak, #128
  * Compat: stop warning when GTK version is not explicitly supported
  * Compat: bump supported GTK to 3.24.34</changelog>
</package>
<package pkgid="a03cd86f9b1dc5c5f1a4339eb66df66f40a283fef087d82835466725d20d475b" name="libhtp" arch="src">
  <version epoch="0" ver="0.5.42" rel="bp156.3.3.1"/>
  <changelog author="stoppe@gmx.de" date="1395835200">- Initial version 0.5.20</changelog>
  <changelog author="mardnh@gmx.de" date="1528027200">- Specfile cleanup
- Update to version 0.5.26
  * allow missing requests [#128, #163]
  * fix memory leak when response line is body [#161]
  * fix build on MinGW [#162]
  * fix gcc7 compiler warnings [#157]
- Update to version 0.5.25
  * underscore in htp_validate_hostname [#149]
  * fix SONAME issue [#151]
  * remove unrelated docbook code from tree [#153]
- Update to version 0.5.24
  * fix HTTP connect handling issue [#150]</changelog>
  <changelog author="mardnh@gmx.de" date="1531915200">- Update to version 0.5.27
  * Folded header field can be parsed as separate if there are
    no data available to peek into [#159]
  * libhtp crash at deal multiple decompression [#158]
  * Fix configure flag handling
  * Fix auth/digist header parsing out of bounds read</changelog>
  <changelog author="mardnh@gmx.de" date="1544961600">- Update to version 0.5.28
  * Fix potential memory leaks
  * Fix string truncation compile warning</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551960000">- Update to version 0.5.30
  * array/list handing optimization
  * fuzz targets improvements
- Update to version 0.5.29
  * prepare for oss-fuzz integration
  * fix undefined behavior signed int overflow
  * make status code parsing more robust</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1553601600">- Correct License</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569326400">- Udpate to version 0.5.31
  * various improvements related to 'HTTP Evader'
  * various fixes for issues found by oss-fuzz
  * adds optional LZMA decompression</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576411200">- Update to version 0.5.32
  * bug fixes around pipelining</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588161600">- Update to version 0.5.33
  * compression bomb protection
  * memory handling issue found by Oss-Fuzz
  * improve handling of anomalies in traffic</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599998400">- Update to version 0.5.34
  * support data GAP handling
  * support 100-continue Expect
  * lzma: give more control over settings</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1602244800">- Update to version 0.5.35
  * fix memory leak in tunnel traffoc
  * fix case where chunked data causes excessive CPU use</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1607083200">- Update to version 0.5.36
  * fix a http pipelining issue</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614772800">- Update to version 0.5.37
  * support request body decompression
  * several accuracy fixes
  * fuzz improvments</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1625400000">- Update to version 0.5.38
  * consume empty lines when parsing chunks to avoid quadratic
    complexity.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1637236800">- Update to version 0.5.39
  * host: ipv6 address is a valid host
  * util: one char is not always empty line
  * test and fuzz improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1656331200">- Update to version 0.5.40
  * uri: optionally allows spaces in uri
  * ints: integer handling improvements
  * headers: continue on nul byte
  * headers: consistent trailing space handling
  * list: fix integer overflow
  * util: remove unused htp_utf8_decode
  * fix 100-continue with CL 0
  * lzma: don't do unnecessary realloc</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1664366400">- Update to version 0.5.41
  * trim white space of invalid folding for first header
  * clear buffered data for body data
  * minor optimization for decompression code</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1669723200">- Update to version 0.5.42
  * github: add initial workflow
  * htp: fixes warning about bad delimiter in URI
  * fuzz: fix a null dereference in a diff report
  * htp: fixes warning about integer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717243200">- CVE-2024-23837: excessive processing time of HTTP headers can
  lead to denial of service (boo#1220403)
  add CVE-2024-23837.patch</changelog>
</package>
<package pkgid="fff9689ea80fe609a7486f574e0bc61bde1c53ea7edba469c3b29f61a64037d2" name="libhtp-devel" arch="aarch64">
  <version epoch="0" ver="0.5.42" rel="bp156.3.3.1"/>
  <changelog author="mardnh@gmx.de" date="1528027200">- Specfile cleanup
- Update to version 0.5.26
  * allow missing requests [#128, #163]
  * fix memory leak when response line is body [#161]
  * fix build on MinGW [#162]
  * fix gcc7 compiler warnings [#157]
- Update to version 0.5.25
  * underscore in htp_validate_hostname [#149]
  * fix SONAME issue [#151]
  * remove unrelated docbook code from tree [#153]
- Update to version 0.5.24
  * fix HTTP connect handling issue [#150]</changelog>
  <changelog author="mardnh@gmx.de" date="1531915200">- Update to version 0.5.27
  * Folded header field can be parsed as separate if there are
    no data available to peek into [#159]
  * libhtp crash at deal multiple decompression [#158]
  * Fix configure flag handling
  * Fix auth/digist header parsing out of bounds read</changelog>
  <changelog author="mardnh@gmx.de" date="1544961600">- Update to version 0.5.28
  * Fix potential memory leaks
  * Fix string truncation compile warning</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551960000">- Update to version 0.5.30
  * array/list handing optimization
  * fuzz targets improvements
- Update to version 0.5.29
  * prepare for oss-fuzz integration
  * fix undefined behavior signed int overflow
  * make status code parsing more robust</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1553601600">- Correct License</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569326400">- Udpate to version 0.5.31
  * various improvements related to 'HTTP Evader'
  * various fixes for issues found by oss-fuzz
  * adds optional LZMA decompression</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576411200">- Update to version 0.5.32
  * bug fixes around pipelining</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588161600">- Update to version 0.5.33
  * compression bomb protection
  * memory handling issue found by Oss-Fuzz
  * improve handling of anomalies in traffic</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599998400">- Update to version 0.5.34
  * support data GAP handling
  * support 100-continue Expect
  * lzma: give more control over settings</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1602244800">- Update to version 0.5.35
  * fix memory leak in tunnel traffoc
  * fix case where chunked data causes excessive CPU use</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1607083200">- Update to version 0.5.36
  * fix a http pipelining issue</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614772800">- Update to version 0.5.37
  * support request body decompression
  * several accuracy fixes
  * fuzz improvments</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1625400000">- Update to version 0.5.38
  * consume empty lines when parsing chunks to avoid quadratic
    complexity.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1637236800">- Update to version 0.5.39
  * host: ipv6 address is a valid host
  * util: one char is not always empty line
  * test and fuzz improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1656331200">- Update to version 0.5.40
  * uri: optionally allows spaces in uri
  * ints: integer handling improvements
  * headers: continue on nul byte
  * headers: consistent trailing space handling
  * list: fix integer overflow
  * util: remove unused htp_utf8_decode
  * fix 100-continue with CL 0
  * lzma: don't do unnecessary realloc</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1664366400">- Update to version 0.5.41
  * trim white space of invalid folding for first header
  * clear buffered data for body data
  * minor optimization for decompression code</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1669723200">- Update to version 0.5.42
  * github: add initial workflow
  * htp: fixes warning about bad delimiter in URI
  * fuzz: fix a null dereference in a diff report
  * htp: fixes warning about integer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717243200">- CVE-2024-23837: excessive processing time of HTTP headers can
  lead to denial of service (boo#1220403)
  add CVE-2024-23837.patch</changelog>
</package>
<package pkgid="ab26438415b9ed3810e00836ed317dcaea2de89d31b6f5ab32ede1f5394dba2f" name="libhtp-devel" arch="i586">
  <version epoch="0" ver="0.5.42" rel="bp156.3.3.1"/>
  <changelog author="mardnh@gmx.de" date="1528027200">- Specfile cleanup
- Update to version 0.5.26
  * allow missing requests [#128, #163]
  * fix memory leak when response line is body [#161]
  * fix build on MinGW [#162]
  * fix gcc7 compiler warnings [#157]
- Update to version 0.5.25
  * underscore in htp_validate_hostname [#149]
  * fix SONAME issue [#151]
  * remove unrelated docbook code from tree [#153]
- Update to version 0.5.24
  * fix HTTP connect handling issue [#150]</changelog>
  <changelog author="mardnh@gmx.de" date="1531915200">- Update to version 0.5.27
  * Folded header field can be parsed as separate if there are
    no data available to peek into [#159]
  * libhtp crash at deal multiple decompression [#158]
  * Fix configure flag handling
  * Fix auth/digist header parsing out of bounds read</changelog>
  <changelog author="mardnh@gmx.de" date="1544961600">- Update to version 0.5.28
  * Fix potential memory leaks
  * Fix string truncation compile warning</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551960000">- Update to version 0.5.30
  * array/list handing optimization
  * fuzz targets improvements
- Update to version 0.5.29
  * prepare for oss-fuzz integration
  * fix undefined behavior signed int overflow
  * make status code parsing more robust</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1553601600">- Correct License</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569326400">- Udpate to version 0.5.31
  * various improvements related to 'HTTP Evader'
  * various fixes for issues found by oss-fuzz
  * adds optional LZMA decompression</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576411200">- Update to version 0.5.32
  * bug fixes around pipelining</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588161600">- Update to version 0.5.33
  * compression bomb protection
  * memory handling issue found by Oss-Fuzz
  * improve handling of anomalies in traffic</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599998400">- Update to version 0.5.34
  * support data GAP handling
  * support 100-continue Expect
  * lzma: give more control over settings</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1602244800">- Update to version 0.5.35
  * fix memory leak in tunnel traffoc
  * fix case where chunked data causes excessive CPU use</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1607083200">- Update to version 0.5.36
  * fix a http pipelining issue</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614772800">- Update to version 0.5.37
  * support request body decompression
  * several accuracy fixes
  * fuzz improvments</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1625400000">- Update to version 0.5.38
  * consume empty lines when parsing chunks to avoid quadratic
    complexity.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1637236800">- Update to version 0.5.39
  * host: ipv6 address is a valid host
  * util: one char is not always empty line
  * test and fuzz improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1656331200">- Update to version 0.5.40
  * uri: optionally allows spaces in uri
  * ints: integer handling improvements
  * headers: continue on nul byte
  * headers: consistent trailing space handling
  * list: fix integer overflow
  * util: remove unused htp_utf8_decode
  * fix 100-continue with CL 0
  * lzma: don't do unnecessary realloc</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1664366400">- Update to version 0.5.41
  * trim white space of invalid folding for first header
  * clear buffered data for body data
  * minor optimization for decompression code</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1669723200">- Update to version 0.5.42
  * github: add initial workflow
  * htp: fixes warning about bad delimiter in URI
  * fuzz: fix a null dereference in a diff report
  * htp: fixes warning about integer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717243200">- CVE-2024-23837: excessive processing time of HTTP headers can
  lead to denial of service (boo#1220403)
  add CVE-2024-23837.patch</changelog>
</package>
<package pkgid="5677e6a135a1e5d48d1a882779dc12a6720e9402e68065fb85711376d800465b" name="libhtp-devel" arch="ppc64le">
  <version epoch="0" ver="0.5.42" rel="bp156.3.3.1"/>
  <changelog author="mardnh@gmx.de" date="1528027200">- Specfile cleanup
- Update to version 0.5.26
  * allow missing requests [#128, #163]
  * fix memory leak when response line is body [#161]
  * fix build on MinGW [#162]
  * fix gcc7 compiler warnings [#157]
- Update to version 0.5.25
  * underscore in htp_validate_hostname [#149]
  * fix SONAME issue [#151]
  * remove unrelated docbook code from tree [#153]
- Update to version 0.5.24
  * fix HTTP connect handling issue [#150]</changelog>
  <changelog author="mardnh@gmx.de" date="1531915200">- Update to version 0.5.27
  * Folded header field can be parsed as separate if there are
    no data available to peek into [#159]
  * libhtp crash at deal multiple decompression [#158]
  * Fix configure flag handling
  * Fix auth/digist header parsing out of bounds read</changelog>
  <changelog author="mardnh@gmx.de" date="1544961600">- Update to version 0.5.28
  * Fix potential memory leaks
  * Fix string truncation compile warning</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551960000">- Update to version 0.5.30
  * array/list handing optimization
  * fuzz targets improvements
- Update to version 0.5.29
  * prepare for oss-fuzz integration
  * fix undefined behavior signed int overflow
  * make status code parsing more robust</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1553601600">- Correct License</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569326400">- Udpate to version 0.5.31
  * various improvements related to 'HTTP Evader'
  * various fixes for issues found by oss-fuzz
  * adds optional LZMA decompression</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576411200">- Update to version 0.5.32
  * bug fixes around pipelining</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588161600">- Update to version 0.5.33
  * compression bomb protection
  * memory handling issue found by Oss-Fuzz
  * improve handling of anomalies in traffic</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599998400">- Update to version 0.5.34
  * support data GAP handling
  * support 100-continue Expect
  * lzma: give more control over settings</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1602244800">- Update to version 0.5.35
  * fix memory leak in tunnel traffoc
  * fix case where chunked data causes excessive CPU use</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1607083200">- Update to version 0.5.36
  * fix a http pipelining issue</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614772800">- Update to version 0.5.37
  * support request body decompression
  * several accuracy fixes
  * fuzz improvments</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1625400000">- Update to version 0.5.38
  * consume empty lines when parsing chunks to avoid quadratic
    complexity.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1637236800">- Update to version 0.5.39
  * host: ipv6 address is a valid host
  * util: one char is not always empty line
  * test and fuzz improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1656331200">- Update to version 0.5.40
  * uri: optionally allows spaces in uri
  * ints: integer handling improvements
  * headers: continue on nul byte
  * headers: consistent trailing space handling
  * list: fix integer overflow
  * util: remove unused htp_utf8_decode
  * fix 100-continue with CL 0
  * lzma: don't do unnecessary realloc</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1664366400">- Update to version 0.5.41
  * trim white space of invalid folding for first header
  * clear buffered data for body data
  * minor optimization for decompression code</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1669723200">- Update to version 0.5.42
  * github: add initial workflow
  * htp: fixes warning about bad delimiter in URI
  * fuzz: fix a null dereference in a diff report
  * htp: fixes warning about integer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717243200">- CVE-2024-23837: excessive processing time of HTTP headers can
  lead to denial of service (boo#1220403)
  add CVE-2024-23837.patch</changelog>
</package>
<package pkgid="a5ccdc3de3e613c397ab95c3d6d74871d89f9b95e34bf30f9d02e2de9e3b6525" name="libhtp-devel" arch="s390x">
  <version epoch="0" ver="0.5.42" rel="bp156.3.3.1"/>
  <changelog author="mardnh@gmx.de" date="1528027200">- Specfile cleanup
- Update to version 0.5.26
  * allow missing requests [#128, #163]
  * fix memory leak when response line is body [#161]
  * fix build on MinGW [#162]
  * fix gcc7 compiler warnings [#157]
- Update to version 0.5.25
  * underscore in htp_validate_hostname [#149]
  * fix SONAME issue [#151]
  * remove unrelated docbook code from tree [#153]
- Update to version 0.5.24
  * fix HTTP connect handling issue [#150]</changelog>
  <changelog author="mardnh@gmx.de" date="1531915200">- Update to version 0.5.27
  * Folded header field can be parsed as separate if there are
    no data available to peek into [#159]
  * libhtp crash at deal multiple decompression [#158]
  * Fix configure flag handling
  * Fix auth/digist header parsing out of bounds read</changelog>
  <changelog author="mardnh@gmx.de" date="1544961600">- Update to version 0.5.28
  * Fix potential memory leaks
  * Fix string truncation compile warning</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551960000">- Update to version 0.5.30
  * array/list handing optimization
  * fuzz targets improvements
- Update to version 0.5.29
  * prepare for oss-fuzz integration
  * fix undefined behavior signed int overflow
  * make status code parsing more robust</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1553601600">- Correct License</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569326400">- Udpate to version 0.5.31
  * various improvements related to 'HTTP Evader'
  * various fixes for issues found by oss-fuzz
  * adds optional LZMA decompression</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576411200">- Update to version 0.5.32
  * bug fixes around pipelining</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588161600">- Update to version 0.5.33
  * compression bomb protection
  * memory handling issue found by Oss-Fuzz
  * improve handling of anomalies in traffic</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599998400">- Update to version 0.5.34
  * support data GAP handling
  * support 100-continue Expect
  * lzma: give more control over settings</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1602244800">- Update to version 0.5.35
  * fix memory leak in tunnel traffoc
  * fix case where chunked data causes excessive CPU use</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1607083200">- Update to version 0.5.36
  * fix a http pipelining issue</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614772800">- Update to version 0.5.37
  * support request body decompression
  * several accuracy fixes
  * fuzz improvments</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1625400000">- Update to version 0.5.38
  * consume empty lines when parsing chunks to avoid quadratic
    complexity.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1637236800">- Update to version 0.5.39
  * host: ipv6 address is a valid host
  * util: one char is not always empty line
  * test and fuzz improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1656331200">- Update to version 0.5.40
  * uri: optionally allows spaces in uri
  * ints: integer handling improvements
  * headers: continue on nul byte
  * headers: consistent trailing space handling
  * list: fix integer overflow
  * util: remove unused htp_utf8_decode
  * fix 100-continue with CL 0
  * lzma: don't do unnecessary realloc</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1664366400">- Update to version 0.5.41
  * trim white space of invalid folding for first header
  * clear buffered data for body data
  * minor optimization for decompression code</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1669723200">- Update to version 0.5.42
  * github: add initial workflow
  * htp: fixes warning about bad delimiter in URI
  * fuzz: fix a null dereference in a diff report
  * htp: fixes warning about integer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717243200">- CVE-2024-23837: excessive processing time of HTTP headers can
  lead to denial of service (boo#1220403)
  add CVE-2024-23837.patch</changelog>
</package>
<package pkgid="b0c07b292e04eed24df9ead55cc2305cbce13bb5689fe9ca4017fc7d6541ae03" name="libhtp-devel" arch="x86_64">
  <version epoch="0" ver="0.5.42" rel="bp156.3.3.1"/>
  <changelog author="mardnh@gmx.de" date="1528027200">- Specfile cleanup
- Update to version 0.5.26
  * allow missing requests [#128, #163]
  * fix memory leak when response line is body [#161]
  * fix build on MinGW [#162]
  * fix gcc7 compiler warnings [#157]
- Update to version 0.5.25
  * underscore in htp_validate_hostname [#149]
  * fix SONAME issue [#151]
  * remove unrelated docbook code from tree [#153]
- Update to version 0.5.24
  * fix HTTP connect handling issue [#150]</changelog>
  <changelog author="mardnh@gmx.de" date="1531915200">- Update to version 0.5.27
  * Folded header field can be parsed as separate if there are
    no data available to peek into [#159]
  * libhtp crash at deal multiple decompression [#158]
  * Fix configure flag handling
  * Fix auth/digist header parsing out of bounds read</changelog>
  <changelog author="mardnh@gmx.de" date="1544961600">- Update to version 0.5.28
  * Fix potential memory leaks
  * Fix string truncation compile warning</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551960000">- Update to version 0.5.30
  * array/list handing optimization
  * fuzz targets improvements
- Update to version 0.5.29
  * prepare for oss-fuzz integration
  * fix undefined behavior signed int overflow
  * make status code parsing more robust</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1553601600">- Correct License</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569326400">- Udpate to version 0.5.31
  * various improvements related to 'HTTP Evader'
  * various fixes for issues found by oss-fuzz
  * adds optional LZMA decompression</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576411200">- Update to version 0.5.32
  * bug fixes around pipelining</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588161600">- Update to version 0.5.33
  * compression bomb protection
  * memory handling issue found by Oss-Fuzz
  * improve handling of anomalies in traffic</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599998400">- Update to version 0.5.34
  * support data GAP handling
  * support 100-continue Expect
  * lzma: give more control over settings</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1602244800">- Update to version 0.5.35
  * fix memory leak in tunnel traffoc
  * fix case where chunked data causes excessive CPU use</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1607083200">- Update to version 0.5.36
  * fix a http pipelining issue</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614772800">- Update to version 0.5.37
  * support request body decompression
  * several accuracy fixes
  * fuzz improvments</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1625400000">- Update to version 0.5.38
  * consume empty lines when parsing chunks to avoid quadratic
    complexity.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1637236800">- Update to version 0.5.39
  * host: ipv6 address is a valid host
  * util: one char is not always empty line
  * test and fuzz improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1656331200">- Update to version 0.5.40
  * uri: optionally allows spaces in uri
  * ints: integer handling improvements
  * headers: continue on nul byte
  * headers: consistent trailing space handling
  * list: fix integer overflow
  * util: remove unused htp_utf8_decode
  * fix 100-continue with CL 0
  * lzma: don't do unnecessary realloc</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1664366400">- Update to version 0.5.41
  * trim white space of invalid folding for first header
  * clear buffered data for body data
  * minor optimization for decompression code</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1669723200">- Update to version 0.5.42
  * github: add initial workflow
  * htp: fixes warning about bad delimiter in URI
  * fuzz: fix a null dereference in a diff report
  * htp: fixes warning about integer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717243200">- CVE-2024-23837: excessive processing time of HTTP headers can
  lead to denial of service (boo#1220403)
  add CVE-2024-23837.patch</changelog>
</package>
<package pkgid="40ca149dba94c48a8b8762dbf87d33c3111d80b5b9d9901261c15db46a0d5ace" name="libhtp2" arch="aarch64">
  <version epoch="0" ver="0.5.42" rel="bp156.3.3.1"/>
  <changelog author="mardnh@gmx.de" date="1528027200">- Specfile cleanup
- Update to version 0.5.26
  * allow missing requests [#128, #163]
  * fix memory leak when response line is body [#161]
  * fix build on MinGW [#162]
  * fix gcc7 compiler warnings [#157]
- Update to version 0.5.25
  * underscore in htp_validate_hostname [#149]
  * fix SONAME issue [#151]
  * remove unrelated docbook code from tree [#153]
- Update to version 0.5.24
  * fix HTTP connect handling issue [#150]</changelog>
  <changelog author="mardnh@gmx.de" date="1531915200">- Update to version 0.5.27
  * Folded header field can be parsed as separate if there are
    no data available to peek into [#159]
  * libhtp crash at deal multiple decompression [#158]
  * Fix configure flag handling
  * Fix auth/digist header parsing out of bounds read</changelog>
  <changelog author="mardnh@gmx.de" date="1544961600">- Update to version 0.5.28
  * Fix potential memory leaks
  * Fix string truncation compile warning</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551960000">- Update to version 0.5.30
  * array/list handing optimization
  * fuzz targets improvements
- Update to version 0.5.29
  * prepare for oss-fuzz integration
  * fix undefined behavior signed int overflow
  * make status code parsing more robust</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1553601600">- Correct License</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569326400">- Udpate to version 0.5.31
  * various improvements related to 'HTTP Evader'
  * various fixes for issues found by oss-fuzz
  * adds optional LZMA decompression</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576411200">- Update to version 0.5.32
  * bug fixes around pipelining</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588161600">- Update to version 0.5.33
  * compression bomb protection
  * memory handling issue found by Oss-Fuzz
  * improve handling of anomalies in traffic</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599998400">- Update to version 0.5.34
  * support data GAP handling
  * support 100-continue Expect
  * lzma: give more control over settings</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1602244800">- Update to version 0.5.35
  * fix memory leak in tunnel traffoc
  * fix case where chunked data causes excessive CPU use</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1607083200">- Update to version 0.5.36
  * fix a http pipelining issue</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614772800">- Update to version 0.5.37
  * support request body decompression
  * several accuracy fixes
  * fuzz improvments</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1625400000">- Update to version 0.5.38
  * consume empty lines when parsing chunks to avoid quadratic
    complexity.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1637236800">- Update to version 0.5.39
  * host: ipv6 address is a valid host
  * util: one char is not always empty line
  * test and fuzz improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1656331200">- Update to version 0.5.40
  * uri: optionally allows spaces in uri
  * ints: integer handling improvements
  * headers: continue on nul byte
  * headers: consistent trailing space handling
  * list: fix integer overflow
  * util: remove unused htp_utf8_decode
  * fix 100-continue with CL 0
  * lzma: don't do unnecessary realloc</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1664366400">- Update to version 0.5.41
  * trim white space of invalid folding for first header
  * clear buffered data for body data
  * minor optimization for decompression code</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1669723200">- Update to version 0.5.42
  * github: add initial workflow
  * htp: fixes warning about bad delimiter in URI
  * fuzz: fix a null dereference in a diff report
  * htp: fixes warning about integer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717243200">- CVE-2024-23837: excessive processing time of HTTP headers can
  lead to denial of service (boo#1220403)
  add CVE-2024-23837.patch</changelog>
</package>
<package pkgid="1170135b44a4494aea84695de587cdc3ec234c271fff7d1213caa8c4ebc2d7cd" name="libhtp2" arch="i586">
  <version epoch="0" ver="0.5.42" rel="bp156.3.3.1"/>
  <changelog author="mardnh@gmx.de" date="1528027200">- Specfile cleanup
- Update to version 0.5.26
  * allow missing requests [#128, #163]
  * fix memory leak when response line is body [#161]
  * fix build on MinGW [#162]
  * fix gcc7 compiler warnings [#157]
- Update to version 0.5.25
  * underscore in htp_validate_hostname [#149]
  * fix SONAME issue [#151]
  * remove unrelated docbook code from tree [#153]
- Update to version 0.5.24
  * fix HTTP connect handling issue [#150]</changelog>
  <changelog author="mardnh@gmx.de" date="1531915200">- Update to version 0.5.27
  * Folded header field can be parsed as separate if there are
    no data available to peek into [#159]
  * libhtp crash at deal multiple decompression [#158]
  * Fix configure flag handling
  * Fix auth/digist header parsing out of bounds read</changelog>
  <changelog author="mardnh@gmx.de" date="1544961600">- Update to version 0.5.28
  * Fix potential memory leaks
  * Fix string truncation compile warning</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551960000">- Update to version 0.5.30
  * array/list handing optimization
  * fuzz targets improvements
- Update to version 0.5.29
  * prepare for oss-fuzz integration
  * fix undefined behavior signed int overflow
  * make status code parsing more robust</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1553601600">- Correct License</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569326400">- Udpate to version 0.5.31
  * various improvements related to 'HTTP Evader'
  * various fixes for issues found by oss-fuzz
  * adds optional LZMA decompression</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576411200">- Update to version 0.5.32
  * bug fixes around pipelining</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588161600">- Update to version 0.5.33
  * compression bomb protection
  * memory handling issue found by Oss-Fuzz
  * improve handling of anomalies in traffic</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599998400">- Update to version 0.5.34
  * support data GAP handling
  * support 100-continue Expect
  * lzma: give more control over settings</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1602244800">- Update to version 0.5.35
  * fix memory leak in tunnel traffoc
  * fix case where chunked data causes excessive CPU use</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1607083200">- Update to version 0.5.36
  * fix a http pipelining issue</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614772800">- Update to version 0.5.37
  * support request body decompression
  * several accuracy fixes
  * fuzz improvments</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1625400000">- Update to version 0.5.38
  * consume empty lines when parsing chunks to avoid quadratic
    complexity.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1637236800">- Update to version 0.5.39
  * host: ipv6 address is a valid host
  * util: one char is not always empty line
  * test and fuzz improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1656331200">- Update to version 0.5.40
  * uri: optionally allows spaces in uri
  * ints: integer handling improvements
  * headers: continue on nul byte
  * headers: consistent trailing space handling
  * list: fix integer overflow
  * util: remove unused htp_utf8_decode
  * fix 100-continue with CL 0
  * lzma: don't do unnecessary realloc</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1664366400">- Update to version 0.5.41
  * trim white space of invalid folding for first header
  * clear buffered data for body data
  * minor optimization for decompression code</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1669723200">- Update to version 0.5.42
  * github: add initial workflow
  * htp: fixes warning about bad delimiter in URI
  * fuzz: fix a null dereference in a diff report
  * htp: fixes warning about integer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717243200">- CVE-2024-23837: excessive processing time of HTTP headers can
  lead to denial of service (boo#1220403)
  add CVE-2024-23837.patch</changelog>
</package>
<package pkgid="ec2d495f9735578fc040237f1e72a1dc43e8af62019f09cd1f95231e54663820" name="libhtp2" arch="ppc64le">
  <version epoch="0" ver="0.5.42" rel="bp156.3.3.1"/>
  <changelog author="mardnh@gmx.de" date="1528027200">- Specfile cleanup
- Update to version 0.5.26
  * allow missing requests [#128, #163]
  * fix memory leak when response line is body [#161]
  * fix build on MinGW [#162]
  * fix gcc7 compiler warnings [#157]
- Update to version 0.5.25
  * underscore in htp_validate_hostname [#149]
  * fix SONAME issue [#151]
  * remove unrelated docbook code from tree [#153]
- Update to version 0.5.24
  * fix HTTP connect handling issue [#150]</changelog>
  <changelog author="mardnh@gmx.de" date="1531915200">- Update to version 0.5.27
  * Folded header field can be parsed as separate if there are
    no data available to peek into [#159]
  * libhtp crash at deal multiple decompression [#158]
  * Fix configure flag handling
  * Fix auth/digist header parsing out of bounds read</changelog>
  <changelog author="mardnh@gmx.de" date="1544961600">- Update to version 0.5.28
  * Fix potential memory leaks
  * Fix string truncation compile warning</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551960000">- Update to version 0.5.30
  * array/list handing optimization
  * fuzz targets improvements
- Update to version 0.5.29
  * prepare for oss-fuzz integration
  * fix undefined behavior signed int overflow
  * make status code parsing more robust</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1553601600">- Correct License</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569326400">- Udpate to version 0.5.31
  * various improvements related to 'HTTP Evader'
  * various fixes for issues found by oss-fuzz
  * adds optional LZMA decompression</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576411200">- Update to version 0.5.32
  * bug fixes around pipelining</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588161600">- Update to version 0.5.33
  * compression bomb protection
  * memory handling issue found by Oss-Fuzz
  * improve handling of anomalies in traffic</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599998400">- Update to version 0.5.34
  * support data GAP handling
  * support 100-continue Expect
  * lzma: give more control over settings</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1602244800">- Update to version 0.5.35
  * fix memory leak in tunnel traffoc
  * fix case where chunked data causes excessive CPU use</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1607083200">- Update to version 0.5.36
  * fix a http pipelining issue</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614772800">- Update to version 0.5.37
  * support request body decompression
  * several accuracy fixes
  * fuzz improvments</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1625400000">- Update to version 0.5.38
  * consume empty lines when parsing chunks to avoid quadratic
    complexity.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1637236800">- Update to version 0.5.39
  * host: ipv6 address is a valid host
  * util: one char is not always empty line
  * test and fuzz improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1656331200">- Update to version 0.5.40
  * uri: optionally allows spaces in uri
  * ints: integer handling improvements
  * headers: continue on nul byte
  * headers: consistent trailing space handling
  * list: fix integer overflow
  * util: remove unused htp_utf8_decode
  * fix 100-continue with CL 0
  * lzma: don't do unnecessary realloc</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1664366400">- Update to version 0.5.41
  * trim white space of invalid folding for first header
  * clear buffered data for body data
  * minor optimization for decompression code</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1669723200">- Update to version 0.5.42
  * github: add initial workflow
  * htp: fixes warning about bad delimiter in URI
  * fuzz: fix a null dereference in a diff report
  * htp: fixes warning about integer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717243200">- CVE-2024-23837: excessive processing time of HTTP headers can
  lead to denial of service (boo#1220403)
  add CVE-2024-23837.patch</changelog>
</package>
<package pkgid="7b6b3cf663092b9c5c721c33627d7cb6f4779c89b5c4d3f91eddffc40012744d" name="libhtp2" arch="s390x">
  <version epoch="0" ver="0.5.42" rel="bp156.3.3.1"/>
  <changelog author="mardnh@gmx.de" date="1528027200">- Specfile cleanup
- Update to version 0.5.26
  * allow missing requests [#128, #163]
  * fix memory leak when response line is body [#161]
  * fix build on MinGW [#162]
  * fix gcc7 compiler warnings [#157]
- Update to version 0.5.25
  * underscore in htp_validate_hostname [#149]
  * fix SONAME issue [#151]
  * remove unrelated docbook code from tree [#153]
- Update to version 0.5.24
  * fix HTTP connect handling issue [#150]</changelog>
  <changelog author="mardnh@gmx.de" date="1531915200">- Update to version 0.5.27
  * Folded header field can be parsed as separate if there are
    no data available to peek into [#159]
  * libhtp crash at deal multiple decompression [#158]
  * Fix configure flag handling
  * Fix auth/digist header parsing out of bounds read</changelog>
  <changelog author="mardnh@gmx.de" date="1544961600">- Update to version 0.5.28
  * Fix potential memory leaks
  * Fix string truncation compile warning</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551960000">- Update to version 0.5.30
  * array/list handing optimization
  * fuzz targets improvements
- Update to version 0.5.29
  * prepare for oss-fuzz integration
  * fix undefined behavior signed int overflow
  * make status code parsing more robust</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1553601600">- Correct License</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569326400">- Udpate to version 0.5.31
  * various improvements related to 'HTTP Evader'
  * various fixes for issues found by oss-fuzz
  * adds optional LZMA decompression</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576411200">- Update to version 0.5.32
  * bug fixes around pipelining</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588161600">- Update to version 0.5.33
  * compression bomb protection
  * memory handling issue found by Oss-Fuzz
  * improve handling of anomalies in traffic</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599998400">- Update to version 0.5.34
  * support data GAP handling
  * support 100-continue Expect
  * lzma: give more control over settings</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1602244800">- Update to version 0.5.35
  * fix memory leak in tunnel traffoc
  * fix case where chunked data causes excessive CPU use</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1607083200">- Update to version 0.5.36
  * fix a http pipelining issue</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614772800">- Update to version 0.5.37
  * support request body decompression
  * several accuracy fixes
  * fuzz improvments</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1625400000">- Update to version 0.5.38
  * consume empty lines when parsing chunks to avoid quadratic
    complexity.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1637236800">- Update to version 0.5.39
  * host: ipv6 address is a valid host
  * util: one char is not always empty line
  * test and fuzz improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1656331200">- Update to version 0.5.40
  * uri: optionally allows spaces in uri
  * ints: integer handling improvements
  * headers: continue on nul byte
  * headers: consistent trailing space handling
  * list: fix integer overflow
  * util: remove unused htp_utf8_decode
  * fix 100-continue with CL 0
  * lzma: don't do unnecessary realloc</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1664366400">- Update to version 0.5.41
  * trim white space of invalid folding for first header
  * clear buffered data for body data
  * minor optimization for decompression code</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1669723200">- Update to version 0.5.42
  * github: add initial workflow
  * htp: fixes warning about bad delimiter in URI
  * fuzz: fix a null dereference in a diff report
  * htp: fixes warning about integer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717243200">- CVE-2024-23837: excessive processing time of HTTP headers can
  lead to denial of service (boo#1220403)
  add CVE-2024-23837.patch</changelog>
</package>
<package pkgid="26d00a023bba00a85e6a37de2992c7c63b888ca15cf4486cbbcff28d5a89cce2" name="libhtp2" arch="x86_64">
  <version epoch="0" ver="0.5.42" rel="bp156.3.3.1"/>
  <changelog author="mardnh@gmx.de" date="1528027200">- Specfile cleanup
- Update to version 0.5.26
  * allow missing requests [#128, #163]
  * fix memory leak when response line is body [#161]
  * fix build on MinGW [#162]
  * fix gcc7 compiler warnings [#157]
- Update to version 0.5.25
  * underscore in htp_validate_hostname [#149]
  * fix SONAME issue [#151]
  * remove unrelated docbook code from tree [#153]
- Update to version 0.5.24
  * fix HTTP connect handling issue [#150]</changelog>
  <changelog author="mardnh@gmx.de" date="1531915200">- Update to version 0.5.27
  * Folded header field can be parsed as separate if there are
    no data available to peek into [#159]
  * libhtp crash at deal multiple decompression [#158]
  * Fix configure flag handling
  * Fix auth/digist header parsing out of bounds read</changelog>
  <changelog author="mardnh@gmx.de" date="1544961600">- Update to version 0.5.28
  * Fix potential memory leaks
  * Fix string truncation compile warning</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551960000">- Update to version 0.5.30
  * array/list handing optimization
  * fuzz targets improvements
- Update to version 0.5.29
  * prepare for oss-fuzz integration
  * fix undefined behavior signed int overflow
  * make status code parsing more robust</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1553601600">- Correct License</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569326400">- Udpate to version 0.5.31
  * various improvements related to 'HTTP Evader'
  * various fixes for issues found by oss-fuzz
  * adds optional LZMA decompression</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1576411200">- Update to version 0.5.32
  * bug fixes around pipelining</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588161600">- Update to version 0.5.33
  * compression bomb protection
  * memory handling issue found by Oss-Fuzz
  * improve handling of anomalies in traffic</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599998400">- Update to version 0.5.34
  * support data GAP handling
  * support 100-continue Expect
  * lzma: give more control over settings</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1602244800">- Update to version 0.5.35
  * fix memory leak in tunnel traffoc
  * fix case where chunked data causes excessive CPU use</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1607083200">- Update to version 0.5.36
  * fix a http pipelining issue</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614772800">- Update to version 0.5.37
  * support request body decompression
  * several accuracy fixes
  * fuzz improvments</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1625400000">- Update to version 0.5.38
  * consume empty lines when parsing chunks to avoid quadratic
    complexity.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1637236800">- Update to version 0.5.39
  * host: ipv6 address is a valid host
  * util: one char is not always empty line
  * test and fuzz improvements</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1656331200">- Update to version 0.5.40
  * uri: optionally allows spaces in uri
  * ints: integer handling improvements
  * headers: continue on nul byte
  * headers: consistent trailing space handling
  * list: fix integer overflow
  * util: remove unused htp_utf8_decode
  * fix 100-continue with CL 0
  * lzma: don't do unnecessary realloc</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1664366400">- Update to version 0.5.41
  * trim white space of invalid folding for first header
  * clear buffered data for body data
  * minor optimization for decompression code</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1669723200">- Update to version 0.5.42
  * github: add initial workflow
  * htp: fixes warning about bad delimiter in URI
  * fuzz: fix a null dereference in a diff report
  * htp: fixes warning about integer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1717243200">- CVE-2024-23837: excessive processing time of HTTP headers can
  lead to denial of service (boo#1220403)
  add CVE-2024-23837.patch</changelog>
</package>
<package pkgid="cb29e189834166c4ba5a2f2a79b744300e95517747e072c16d615bb7864b59a9" name="libindi" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="bp156.4.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1619265600">- Update to 1.9.0:
  * Major INDI Library release v1.9.0 bring significant internal changes
    championed by @pawel-soja to modernize core INDI Library drivers and clients.
  * New drivers for DeepSkyDad Flat Panel &amp; Pegasus devices plus
    further improvements to PCM8 drivers.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1623153600">- Add ioptron_dst_fix.patch (fix boo#1187058)
  When using iOptron mounts and KStars is set to get time and location
  from the mount itself, if DST is enabled then KStars is off by 1 hour.
  This patch fixes this issue.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1624881600">- Update to 1.9.1:
  * New AstroTrac 360 driver (Experimental).
  * New Pegasus FlatMaster and UHC drivers
  * New Deep Sky Dad Field Rotator
  * Core INDI Library improvements to base device and client classes
  * Paramount TCP improvements
  * Spectrograph and Receiver classes
  * OnStep improvements
  * RST-135 location and time fix
  * Dome OTA fixes
  * Object Azimuth and Altitude added to FITS header
  * Rainbow Focuser fixes
  * Support for CGX-L
  * Fix crash in SkyWatcher API mount driver
  * Fix iOptron DST bug
  * Fix lunar and solar order
  * PMC8 Driver v0.4 (Improved manual slewing, guiding, and other features)
  * Try to send the guide pulses asynchronously to TheSkyX
  * Use encoders for parking
  * Lots of other smmall fixes, for the full changelog please check
    https://github.com/indilib/indi/blob/master/ChangeLog
- Drop ioptron_dst_fix.patch (change has been upstreamed)
- Add fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1631707200">- Update to 1.9.2:
  * Stable Astrotrac Mount driver.
  * ESATTO Backlash measure and correction
  * Correct color space when stacking on indi_v4l2_ccd driver with
    a web cam that doesn't have color space info.
  * The driver for the Planewave Delta-T was not working
  * Improved handling of myFP2ESP controllers
  * Pegasus UCH
  * TheSkyX/Paramount Pier-side + guide async cmd fixes
  * Update lx200_OnStep.cpp
- Drop fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1637323200">- Update to 1.9.3:
  * Fast Exposure support. Capture next frame in camera immediately
    to avoid any delays.
  * Support for DC focusers in Pegasus DMFC driver.
  * Updates and cleanup for the OpenWeatherMap driver
  * V42L driver supports detecting camera and renaming the driver
  * LX200 SiteName Fix V2
  * Improve lynx sync and homing behavior
  * Fix FocusLynx GetConfig for focusers without HomeOnStart
  * Force using hour angle when mount is slewing
  * Correction the amplification values to spec.
  * Fixes to PlaneWave EFA driver
  * Add setting of home position for Rigel/Pulsar dome</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1639137600">- Add ioptron_fixes.patch (bsc#1193622):
  * Fix PEC being on by default, it should be OFF by default.
  * Fix iOptronV3 parking bug by using a workaround, because the
    firmware must be fixed by iOptron.
  * Add meridian behavior action and limit.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1642507200">- Update to 1.9.4:
  * OnStep: Don't show focuser tab unless found.
  * More Lynx fixes - Step Size and Devices Types.
  * OnStep: Remove Focuser on disconnect.
  * Save Alignment Data to mount before sync.
  * CCD drivers: snooping for standard epoch positions and issues
    with fast exposure mode fixed.
  * SkyWatcher Alt-Az iterative GOTO.
  * Add Bayer frames software binning
  * Add driver for Rigelsys/Astrogene1000 nFrame rotator.
  * Send command at start to flush serial line for Pulsar/Rigel dome.
- Remove ioptron_fixes.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1646913600">- Update to 1.9.5:
  * Fixed updating of slew rate
  * Add missing find_package for Qt5Core
  * Fix setObjectRA and setObjectDEC for short and long format
  * Allow Minutes Past Meridia +/- 180 degrees
  * Adding new NexDome Beaver INDI driver
  * Add and apply Meade Protocol spec definitions
  * Add Pier Side Status for lx200zeq25
  * Updated version of the AstroPhysics driver
  * Fix Celestron focuser crash after calibration
  * Fix but setting AP UTC
  * Fix similar negative sign bug in AP driver
  * Initial implementation for capture format and encode format
  * Update driver interface when the LX200 support a focuser
  * Add CEM70(G)-EC identifier and a deprecation note
  * Add Driver for Esatto with Arco (goto, abort, sync, cal)
- Remove 0001-Fix-warnings.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1653134400">- Update to 1.9.6:
  * add lastparked logic
  * Fixing UTC Offset format allowing :SGHH:MM# where MM can be 00, 30 and 45
  * Terminate commands missing #, introduce PEC recording and status
  * fix issue reading worm position
  * UTC uninitialized structure fix
  * Add mount status. Start CP5
  * Remove user choice for CM/CMR
  * Allow any guide rate between 0.1x and 1x
  * Driver for WandererRotatorLite</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659096000">- Update to 1.9.7:
  * INDI Receiver and rtl-sdr.
  * Ensure defensive check of UBP previous data to fix crash.
  * Fast blob transfer.
  * More AP changes: UDP, Home, Encoder Status, version major/minor.
  * Fix memory leak when converting blob to base64.
  * Use 8bits samples in the lookup table.
  * Adding some basic PEC status and control to lx200gemini.
  * Add Servo Precision control.
  * Added RA/DEC guide speed.
  * Fixed a bug where PEC was always enabled on startup.
  * Various other fixes.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659614400">- Add fix-ioptron-meridian.patch: add again in case a timeout is issued
  and iOptron returns it despite the flush. This is an attempt to read this buffer again.
- Add fix-ioptron-timeout.patch: save meridian flip settings by default on change.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1660478400">- Add add-hem27.patch: add support for iOptron HEM27 mount.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1660737600">- Add fix-cfitsio.patch: FITS files produced by INDI are invalid because there is extra data at the end of the file.
  Many software only read the first HDU are not affected, but other reject the file.
- Add fix-pegasus.patch: Corrections for Pegasus Falcon Rotator.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1664452800">- Update to 1.9.8:
  * Remove some debug message from indiserver.
  * Don't tell cfitsio about preallocated buffers.
  * Corrections for Pegasus Falcon Rotator.
  * Fix blob id conflit.
  * Adding wanderer cover v3.
  * Fix memory leaks in indiserver.
- Drop add-hem27.patch
- Drop fix-cfitsio.patch
- Drop fix-ioptron-meridian.patch
- Drop fix-ioptron-timeout.patch
- Drop fix-pegasus.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1669809600">- Update to 1.9.9:
  * Driver for OpenAstroTech mounts
  * DRIVER_INFO also present for F2 focuser so that the device is detected
  * DeepSkyDad AF3: Mark as OK after backlash compensation
  * Add Excalibur Driver
  * Improved star brightness handling for higher gain
  * Add Gemini L6 Flip Point
  * lx200_OnStep minor fix
  * Add missing rule for switch
  * Fix client disconnect event
  * Update weather interface to define update period, refresh and override</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1671364800">- Fix cfitsio dep on TW</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675166400">- Update to 2.0.0:
  * Esatto &amp; SestoSenso2 update
  * Fix for issue1582 park status notifications and extra debugging for command errors
  * Add delay possibility for lx200 driver pulse command
  * Refactor - use PropertyView/WidgetView
  * Fix BaseClient::serverDisconnected behavior
  * Deprecated use of Property/BaseDevice as pointer
  * Don't modify usbfs_memory_mb if already set to unlimited
  * Switch Flip Points to use sexagesimal numbers
  * Refactor INDI::GPS to be inline with INDI 2.0.0
  * General cleanup
  * Don't call serverDisconnected if the client is not connected
  * Add refraction, and turn off J2000 for Gemini
  * Feature/new firmware fmc mfoc (Lacerta)
  * Downgrade to base64 for snooped blobs</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Add fix-operator.patch (#1843)
- Add fix-timestamp.patch (#1837)</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1694174400">- BuildRequires cfitsio-devel on Leap 15.6</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1733918400">- Update to 2.1.1:
  * Fixed missing apply() on TrackStateSP property by @atoy40 in #2130
  * Update SnapCap driver to use common abort capability from DustCapInterface instead of doing it manually. by @jpaana in #2136
  * Miscellaneous ScopeDome driver updates. by @jpaana in #2137
  * FP2 motor status by @DeepSkyDad in #2139
  * Migrate INDI Astrolink4 by @naheedsa in #2133
  * Migrate Astromech focuser by @naheedsa in #2134
  * Update ieaffocus.cpp by @joe13905179063 in #2141
  * Fixed crash due not checking boundary values of the axis in telescope_simulator by @artyom-beilis in #2144
  * Upgrade CheapoDC driver for new device firmware features by @hcomet in #2142
  * Sim crash fix - looks like found root cause by @artyom-beilis in #2147
  * Initial work for guider and focuser interface refactor
  * Fixed myFocuserPro2 Autofocus Issues in Ekos
  * Update Tracking code
  * Add workaround for OnStepX failing connection
  * Migrate telescope properties
  * Migrate Temperature Property
  * Update light box and dust cap interfaces to new style
  * drivers/dome: rigel_dome shutter parking
  * Joining FP1 and FP2 into single FP driver
  * lx200zeq driver had incorrect pulse commands
  * Fix Motion Control Mode
  * use MOTION_CONTROL_MODE _FOO enums
  * enable more Meade commands
  * Minor buffer boundary fixes
  * Weather watcher dynamic labels
  * PegasusAstro FalconV2 Driver
  * Add Terrans PowerBoxPro V2 Driver
  * Waveshare Modbus Relay Drive
  * Universal Roll off roof driver
  * ZWO AM5 Save home position in the mount
  * Avoid using .getName() for new INDI properties
  * Migrate drivers to new properties
  * Various fixes
  * Update Pegasus Focuscube
  * New driver for DIY dew controllaer cheapodc
  * Weather interface refactor
  * Driver for Wnaderer Box and Cover products
  * Initial release of Alluno TCS2 driver
  * Link against httplib if using system libraries
  * fix(actions): upgrade actions versions
  * Fix various typos throughout the codebase
  * Remove obsolete Avalon Legacy driver
  * TeenAstro pulse behaviour #1977
  * iOptron iEAF indi driver
  * Allow using system provided json library
  * Flip-flat: Allow handshake without ioctl on virtual serial connection
  * Fix version reporting on older Celestron NexStar mounts
  * PegasusAstro SaddlePowerBox
  * Fix issue 1938
  * Add one more check to ensure minimum count is met
  * Update ioptronv3driver.cpp
  * Handling tracking mode in the pegasus driver, and enable King mode
  * Fixed 9 Stars Align
  * On step work
  * Added several missing commands
  * Snapcap driver with network connections
  * Fix bug in relative positioning of Lacerta MFOC
  * Fix setFormat typos, add isEmpty method
  * Use ZSTD compression for XISF images when available
  * Preliminary support for Planewave
  * Bug fix making both focusers visible
  * focuser crash fixed+some properties added
  * OnStep work
  * Openastrotech work
  * Simplify RTL-SDR driver for bug #558
  * Update ioptronv3.cpp
  * Fix leaks last blob on driver restart
- Drop fix-operator.patch
- Drop fix-timestamp.patch</changelog>
</package>
<package pkgid="5a24fcc75eb73d44fbbdabe1cfae8939fce61d1293c475f108b671dddced3e32" name="libindi" arch="ppc64le">
  <version epoch="0" ver="2.1.1" rel="bp156.4.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1619265600">- Update to 1.9.0:
  * Major INDI Library release v1.9.0 bring significant internal changes
    championed by @pawel-soja to modernize core INDI Library drivers and clients.
  * New drivers for DeepSkyDad Flat Panel &amp; Pegasus devices plus
    further improvements to PCM8 drivers.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1623153600">- Add ioptron_dst_fix.patch (fix boo#1187058)
  When using iOptron mounts and KStars is set to get time and location
  from the mount itself, if DST is enabled then KStars is off by 1 hour.
  This patch fixes this issue.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1624881600">- Update to 1.9.1:
  * New AstroTrac 360 driver (Experimental).
  * New Pegasus FlatMaster and UHC drivers
  * New Deep Sky Dad Field Rotator
  * Core INDI Library improvements to base device and client classes
  * Paramount TCP improvements
  * Spectrograph and Receiver classes
  * OnStep improvements
  * RST-135 location and time fix
  * Dome OTA fixes
  * Object Azimuth and Altitude added to FITS header
  * Rainbow Focuser fixes
  * Support for CGX-L
  * Fix crash in SkyWatcher API mount driver
  * Fix iOptron DST bug
  * Fix lunar and solar order
  * PMC8 Driver v0.4 (Improved manual slewing, guiding, and other features)
  * Try to send the guide pulses asynchronously to TheSkyX
  * Use encoders for parking
  * Lots of other smmall fixes, for the full changelog please check
    https://github.com/indilib/indi/blob/master/ChangeLog
- Drop ioptron_dst_fix.patch (change has been upstreamed)
- Add fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1631707200">- Update to 1.9.2:
  * Stable Astrotrac Mount driver.
  * ESATTO Backlash measure and correction
  * Correct color space when stacking on indi_v4l2_ccd driver with
    a web cam that doesn't have color space info.
  * The driver for the Planewave Delta-T was not working
  * Improved handling of myFP2ESP controllers
  * Pegasus UCH
  * TheSkyX/Paramount Pier-side + guide async cmd fixes
  * Update lx200_OnStep.cpp
- Drop fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1637323200">- Update to 1.9.3:
  * Fast Exposure support. Capture next frame in camera immediately
    to avoid any delays.
  * Support for DC focusers in Pegasus DMFC driver.
  * Updates and cleanup for the OpenWeatherMap driver
  * V42L driver supports detecting camera and renaming the driver
  * LX200 SiteName Fix V2
  * Improve lynx sync and homing behavior
  * Fix FocusLynx GetConfig for focusers without HomeOnStart
  * Force using hour angle when mount is slewing
  * Correction the amplification values to spec.
  * Fixes to PlaneWave EFA driver
  * Add setting of home position for Rigel/Pulsar dome</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1639137600">- Add ioptron_fixes.patch (bsc#1193622):
  * Fix PEC being on by default, it should be OFF by default.
  * Fix iOptronV3 parking bug by using a workaround, because the
    firmware must be fixed by iOptron.
  * Add meridian behavior action and limit.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1642507200">- Update to 1.9.4:
  * OnStep: Don't show focuser tab unless found.
  * More Lynx fixes - Step Size and Devices Types.
  * OnStep: Remove Focuser on disconnect.
  * Save Alignment Data to mount before sync.
  * CCD drivers: snooping for standard epoch positions and issues
    with fast exposure mode fixed.
  * SkyWatcher Alt-Az iterative GOTO.
  * Add Bayer frames software binning
  * Add driver for Rigelsys/Astrogene1000 nFrame rotator.
  * Send command at start to flush serial line for Pulsar/Rigel dome.
- Remove ioptron_fixes.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1646913600">- Update to 1.9.5:
  * Fixed updating of slew rate
  * Add missing find_package for Qt5Core
  * Fix setObjectRA and setObjectDEC for short and long format
  * Allow Minutes Past Meridia +/- 180 degrees
  * Adding new NexDome Beaver INDI driver
  * Add and apply Meade Protocol spec definitions
  * Add Pier Side Status for lx200zeq25
  * Updated version of the AstroPhysics driver
  * Fix Celestron focuser crash after calibration
  * Fix but setting AP UTC
  * Fix similar negative sign bug in AP driver
  * Initial implementation for capture format and encode format
  * Update driver interface when the LX200 support a focuser
  * Add CEM70(G)-EC identifier and a deprecation note
  * Add Driver for Esatto with Arco (goto, abort, sync, cal)
- Remove 0001-Fix-warnings.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1653134400">- Update to 1.9.6:
  * add lastparked logic
  * Fixing UTC Offset format allowing :SGHH:MM# where MM can be 00, 30 and 45
  * Terminate commands missing #, introduce PEC recording and status
  * fix issue reading worm position
  * UTC uninitialized structure fix
  * Add mount status. Start CP5
  * Remove user choice for CM/CMR
  * Allow any guide rate between 0.1x and 1x
  * Driver for WandererRotatorLite</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659096000">- Update to 1.9.7:
  * INDI Receiver and rtl-sdr.
  * Ensure defensive check of UBP previous data to fix crash.
  * Fast blob transfer.
  * More AP changes: UDP, Home, Encoder Status, version major/minor.
  * Fix memory leak when converting blob to base64.
  * Use 8bits samples in the lookup table.
  * Adding some basic PEC status and control to lx200gemini.
  * Add Servo Precision control.
  * Added RA/DEC guide speed.
  * Fixed a bug where PEC was always enabled on startup.
  * Various other fixes.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659614400">- Add fix-ioptron-meridian.patch: add again in case a timeout is issued
  and iOptron returns it despite the flush. This is an attempt to read this buffer again.
- Add fix-ioptron-timeout.patch: save meridian flip settings by default on change.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1660478400">- Add add-hem27.patch: add support for iOptron HEM27 mount.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1660737600">- Add fix-cfitsio.patch: FITS files produced by INDI are invalid because there is extra data at the end of the file.
  Many software only read the first HDU are not affected, but other reject the file.
- Add fix-pegasus.patch: Corrections for Pegasus Falcon Rotator.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1664452800">- Update to 1.9.8:
  * Remove some debug message from indiserver.
  * Don't tell cfitsio about preallocated buffers.
  * Corrections for Pegasus Falcon Rotator.
  * Fix blob id conflit.
  * Adding wanderer cover v3.
  * Fix memory leaks in indiserver.
- Drop add-hem27.patch
- Drop fix-cfitsio.patch
- Drop fix-ioptron-meridian.patch
- Drop fix-ioptron-timeout.patch
- Drop fix-pegasus.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1669809600">- Update to 1.9.9:
  * Driver for OpenAstroTech mounts
  * DRIVER_INFO also present for F2 focuser so that the device is detected
  * DeepSkyDad AF3: Mark as OK after backlash compensation
  * Add Excalibur Driver
  * Improved star brightness handling for higher gain
  * Add Gemini L6 Flip Point
  * lx200_OnStep minor fix
  * Add missing rule for switch
  * Fix client disconnect event
  * Update weather interface to define update period, refresh and override</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1671364800">- Fix cfitsio dep on TW</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675166400">- Update to 2.0.0:
  * Esatto &amp; SestoSenso2 update
  * Fix for issue1582 park status notifications and extra debugging for command errors
  * Add delay possibility for lx200 driver pulse command
  * Refactor - use PropertyView/WidgetView
  * Fix BaseClient::serverDisconnected behavior
  * Deprecated use of Property/BaseDevice as pointer
  * Don't modify usbfs_memory_mb if already set to unlimited
  * Switch Flip Points to use sexagesimal numbers
  * Refactor INDI::GPS to be inline with INDI 2.0.0
  * General cleanup
  * Don't call serverDisconnected if the client is not connected
  * Add refraction, and turn off J2000 for Gemini
  * Feature/new firmware fmc mfoc (Lacerta)
  * Downgrade to base64 for snooped blobs</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Add fix-operator.patch (#1843)
- Add fix-timestamp.patch (#1837)</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1694174400">- BuildRequires cfitsio-devel on Leap 15.6</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1733918400">- Update to 2.1.1:
  * Fixed missing apply() on TrackStateSP property by @atoy40 in #2130
  * Update SnapCap driver to use common abort capability from DustCapInterface instead of doing it manually. by @jpaana in #2136
  * Miscellaneous ScopeDome driver updates. by @jpaana in #2137
  * FP2 motor status by @DeepSkyDad in #2139
  * Migrate INDI Astrolink4 by @naheedsa in #2133
  * Migrate Astromech focuser by @naheedsa in #2134
  * Update ieaffocus.cpp by @joe13905179063 in #2141
  * Fixed crash due not checking boundary values of the axis in telescope_simulator by @artyom-beilis in #2144
  * Upgrade CheapoDC driver for new device firmware features by @hcomet in #2142
  * Sim crash fix - looks like found root cause by @artyom-beilis in #2147
  * Initial work for guider and focuser interface refactor
  * Fixed myFocuserPro2 Autofocus Issues in Ekos
  * Update Tracking code
  * Add workaround for OnStepX failing connection
  * Migrate telescope properties
  * Migrate Temperature Property
  * Update light box and dust cap interfaces to new style
  * drivers/dome: rigel_dome shutter parking
  * Joining FP1 and FP2 into single FP driver
  * lx200zeq driver had incorrect pulse commands
  * Fix Motion Control Mode
  * use MOTION_CONTROL_MODE _FOO enums
  * enable more Meade commands
  * Minor buffer boundary fixes
  * Weather watcher dynamic labels
  * PegasusAstro FalconV2 Driver
  * Add Terrans PowerBoxPro V2 Driver
  * Waveshare Modbus Relay Drive
  * Universal Roll off roof driver
  * ZWO AM5 Save home position in the mount
  * Avoid using .getName() for new INDI properties
  * Migrate drivers to new properties
  * Various fixes
  * Update Pegasus Focuscube
  * New driver for DIY dew controllaer cheapodc
  * Weather interface refactor
  * Driver for Wnaderer Box and Cover products
  * Initial release of Alluno TCS2 driver
  * Link against httplib if using system libraries
  * fix(actions): upgrade actions versions
  * Fix various typos throughout the codebase
  * Remove obsolete Avalon Legacy driver
  * TeenAstro pulse behaviour #1977
  * iOptron iEAF indi driver
  * Allow using system provided json library
  * Flip-flat: Allow handshake without ioctl on virtual serial connection
  * Fix version reporting on older Celestron NexStar mounts
  * PegasusAstro SaddlePowerBox
  * Fix issue 1938
  * Add one more check to ensure minimum count is met
  * Update ioptronv3driver.cpp
  * Handling tracking mode in the pegasus driver, and enable King mode
  * Fixed 9 Stars Align
  * On step work
  * Added several missing commands
  * Snapcap driver with network connections
  * Fix bug in relative positioning of Lacerta MFOC
  * Fix setFormat typos, add isEmpty method
  * Use ZSTD compression for XISF images when available
  * Preliminary support for Planewave
  * Bug fix making both focusers visible
  * focuser crash fixed+some properties added
  * OnStep work
  * Openastrotech work
  * Simplify RTL-SDR driver for bug #558
  * Update ioptronv3.cpp
  * Fix leaks last blob on driver restart
- Drop fix-operator.patch
- Drop fix-timestamp.patch</changelog>
</package>
<package pkgid="ef631f846ac3e84e18ec26432ea34fb3b515e208f54249d50921ae280bc096c7" name="libindi" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="bp156.4.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1619265600">- Update to 1.9.0:
  * Major INDI Library release v1.9.0 bring significant internal changes
    championed by @pawel-soja to modernize core INDI Library drivers and clients.
  * New drivers for DeepSkyDad Flat Panel &amp; Pegasus devices plus
    further improvements to PCM8 drivers.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1623153600">- Add ioptron_dst_fix.patch (fix boo#1187058)
  When using iOptron mounts and KStars is set to get time and location
  from the mount itself, if DST is enabled then KStars is off by 1 hour.
  This patch fixes this issue.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1624881600">- Update to 1.9.1:
  * New AstroTrac 360 driver (Experimental).
  * New Pegasus FlatMaster and UHC drivers
  * New Deep Sky Dad Field Rotator
  * Core INDI Library improvements to base device and client classes
  * Paramount TCP improvements
  * Spectrograph and Receiver classes
  * OnStep improvements
  * RST-135 location and time fix
  * Dome OTA fixes
  * Object Azimuth and Altitude added to FITS header
  * Rainbow Focuser fixes
  * Support for CGX-L
  * Fix crash in SkyWatcher API mount driver
  * Fix iOptron DST bug
  * Fix lunar and solar order
  * PMC8 Driver v0.4 (Improved manual slewing, guiding, and other features)
  * Try to send the guide pulses asynchronously to TheSkyX
  * Use encoders for parking
  * Lots of other smmall fixes, for the full changelog please check
    https://github.com/indilib/indi/blob/master/ChangeLog
- Drop ioptron_dst_fix.patch (change has been upstreamed)
- Add fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1631707200">- Update to 1.9.2:
  * Stable Astrotrac Mount driver.
  * ESATTO Backlash measure and correction
  * Correct color space when stacking on indi_v4l2_ccd driver with
    a web cam that doesn't have color space info.
  * The driver for the Planewave Delta-T was not working
  * Improved handling of myFP2ESP controllers
  * Pegasus UCH
  * TheSkyX/Paramount Pier-side + guide async cmd fixes
  * Update lx200_OnStep.cpp
- Drop fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1637323200">- Update to 1.9.3:
  * Fast Exposure support. Capture next frame in camera immediately
    to avoid any delays.
  * Support for DC focusers in Pegasus DMFC driver.
  * Updates and cleanup for the OpenWeatherMap driver
  * V42L driver supports detecting camera and renaming the driver
  * LX200 SiteName Fix V2
  * Improve lynx sync and homing behavior
  * Fix FocusLynx GetConfig for focusers without HomeOnStart
  * Force using hour angle when mount is slewing
  * Correction the amplification values to spec.
  * Fixes to PlaneWave EFA driver
  * Add setting of home position for Rigel/Pulsar dome</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1639137600">- Add ioptron_fixes.patch (bsc#1193622):
  * Fix PEC being on by default, it should be OFF by default.
  * Fix iOptronV3 parking bug by using a workaround, because the
    firmware must be fixed by iOptron.
  * Add meridian behavior action and limit.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1642507200">- Update to 1.9.4:
  * OnStep: Don't show focuser tab unless found.
  * More Lynx fixes - Step Size and Devices Types.
  * OnStep: Remove Focuser on disconnect.
  * Save Alignment Data to mount before sync.
  * CCD drivers: snooping for standard epoch positions and issues
    with fast exposure mode fixed.
  * SkyWatcher Alt-Az iterative GOTO.
  * Add Bayer frames software binning
  * Add driver for Rigelsys/Astrogene1000 nFrame rotator.
  * Send command at start to flush serial line for Pulsar/Rigel dome.
- Remove ioptron_fixes.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1646913600">- Update to 1.9.5:
  * Fixed updating of slew rate
  * Add missing find_package for Qt5Core
  * Fix setObjectRA and setObjectDEC for short and long format
  * Allow Minutes Past Meridia +/- 180 degrees
  * Adding new NexDome Beaver INDI driver
  * Add and apply Meade Protocol spec definitions
  * Add Pier Side Status for lx200zeq25
  * Updated version of the AstroPhysics driver
  * Fix Celestron focuser crash after calibration
  * Fix but setting AP UTC
  * Fix similar negative sign bug in AP driver
  * Initial implementation for capture format and encode format
  * Update driver interface when the LX200 support a focuser
  * Add CEM70(G)-EC identifier and a deprecation note
  * Add Driver for Esatto with Arco (goto, abort, sync, cal)
- Remove 0001-Fix-warnings.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1653134400">- Update to 1.9.6:
  * add lastparked logic
  * Fixing UTC Offset format allowing :SGHH:MM# where MM can be 00, 30 and 45
  * Terminate commands missing #, introduce PEC recording and status
  * fix issue reading worm position
  * UTC uninitialized structure fix
  * Add mount status. Start CP5
  * Remove user choice for CM/CMR
  * Allow any guide rate between 0.1x and 1x
  * Driver for WandererRotatorLite</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659096000">- Update to 1.9.7:
  * INDI Receiver and rtl-sdr.
  * Ensure defensive check of UBP previous data to fix crash.
  * Fast blob transfer.
  * More AP changes: UDP, Home, Encoder Status, version major/minor.
  * Fix memory leak when converting blob to base64.
  * Use 8bits samples in the lookup table.
  * Adding some basic PEC status and control to lx200gemini.
  * Add Servo Precision control.
  * Added RA/DEC guide speed.
  * Fixed a bug where PEC was always enabled on startup.
  * Various other fixes.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659614400">- Add fix-ioptron-meridian.patch: add again in case a timeout is issued
  and iOptron returns it despite the flush. This is an attempt to read this buffer again.
- Add fix-ioptron-timeout.patch: save meridian flip settings by default on change.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1660478400">- Add add-hem27.patch: add support for iOptron HEM27 mount.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1660737600">- Add fix-cfitsio.patch: FITS files produced by INDI are invalid because there is extra data at the end of the file.
  Many software only read the first HDU are not affected, but other reject the file.
- Add fix-pegasus.patch: Corrections for Pegasus Falcon Rotator.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1664452800">- Update to 1.9.8:
  * Remove some debug message from indiserver.
  * Don't tell cfitsio about preallocated buffers.
  * Corrections for Pegasus Falcon Rotator.
  * Fix blob id conflit.
  * Adding wanderer cover v3.
  * Fix memory leaks in indiserver.
- Drop add-hem27.patch
- Drop fix-cfitsio.patch
- Drop fix-ioptron-meridian.patch
- Drop fix-ioptron-timeout.patch
- Drop fix-pegasus.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1669809600">- Update to 1.9.9:
  * Driver for OpenAstroTech mounts
  * DRIVER_INFO also present for F2 focuser so that the device is detected
  * DeepSkyDad AF3: Mark as OK after backlash compensation
  * Add Excalibur Driver
  * Improved star brightness handling for higher gain
  * Add Gemini L6 Flip Point
  * lx200_OnStep minor fix
  * Add missing rule for switch
  * Fix client disconnect event
  * Update weather interface to define update period, refresh and override</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1671364800">- Fix cfitsio dep on TW</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675166400">- Update to 2.0.0:
  * Esatto &amp; SestoSenso2 update
  * Fix for issue1582 park status notifications and extra debugging for command errors
  * Add delay possibility for lx200 driver pulse command
  * Refactor - use PropertyView/WidgetView
  * Fix BaseClient::serverDisconnected behavior
  * Deprecated use of Property/BaseDevice as pointer
  * Don't modify usbfs_memory_mb if already set to unlimited
  * Switch Flip Points to use sexagesimal numbers
  * Refactor INDI::GPS to be inline with INDI 2.0.0
  * General cleanup
  * Don't call serverDisconnected if the client is not connected
  * Add refraction, and turn off J2000 for Gemini
  * Feature/new firmware fmc mfoc (Lacerta)
  * Downgrade to base64 for snooped blobs</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Add fix-operator.patch (#1843)
- Add fix-timestamp.patch (#1837)</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1694174400">- BuildRequires cfitsio-devel on Leap 15.6</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1733918400">- Update to 2.1.1:
  * Fixed missing apply() on TrackStateSP property by @atoy40 in #2130
  * Update SnapCap driver to use common abort capability from DustCapInterface instead of doing it manually. by @jpaana in #2136
  * Miscellaneous ScopeDome driver updates. by @jpaana in #2137
  * FP2 motor status by @DeepSkyDad in #2139
  * Migrate INDI Astrolink4 by @naheedsa in #2133
  * Migrate Astromech focuser by @naheedsa in #2134
  * Update ieaffocus.cpp by @joe13905179063 in #2141
  * Fixed crash due not checking boundary values of the axis in telescope_simulator by @artyom-beilis in #2144
  * Upgrade CheapoDC driver for new device firmware features by @hcomet in #2142
  * Sim crash fix - looks like found root cause by @artyom-beilis in #2147
  * Initial work for guider and focuser interface refactor
  * Fixed myFocuserPro2 Autofocus Issues in Ekos
  * Update Tracking code
  * Add workaround for OnStepX failing connection
  * Migrate telescope properties
  * Migrate Temperature Property
  * Update light box and dust cap interfaces to new style
  * drivers/dome: rigel_dome shutter parking
  * Joining FP1 and FP2 into single FP driver
  * lx200zeq driver had incorrect pulse commands
  * Fix Motion Control Mode
  * use MOTION_CONTROL_MODE _FOO enums
  * enable more Meade commands
  * Minor buffer boundary fixes
  * Weather watcher dynamic labels
  * PegasusAstro FalconV2 Driver
  * Add Terrans PowerBoxPro V2 Driver
  * Waveshare Modbus Relay Drive
  * Universal Roll off roof driver
  * ZWO AM5 Save home position in the mount
  * Avoid using .getName() for new INDI properties
  * Migrate drivers to new properties
  * Various fixes
  * Update Pegasus Focuscube
  * New driver for DIY dew controllaer cheapodc
  * Weather interface refactor
  * Driver for Wnaderer Box and Cover products
  * Initial release of Alluno TCS2 driver
  * Link against httplib if using system libraries
  * fix(actions): upgrade actions versions
  * Fix various typos throughout the codebase
  * Remove obsolete Avalon Legacy driver
  * TeenAstro pulse behaviour #1977
  * iOptron iEAF indi driver
  * Allow using system provided json library
  * Flip-flat: Allow handshake without ioctl on virtual serial connection
  * Fix version reporting on older Celestron NexStar mounts
  * PegasusAstro SaddlePowerBox
  * Fix issue 1938
  * Add one more check to ensure minimum count is met
  * Update ioptronv3driver.cpp
  * Handling tracking mode in the pegasus driver, and enable King mode
  * Fixed 9 Stars Align
  * On step work
  * Added several missing commands
  * Snapcap driver with network connections
  * Fix bug in relative positioning of Lacerta MFOC
  * Fix setFormat typos, add isEmpty method
  * Use ZSTD compression for XISF images when available
  * Preliminary support for Planewave
  * Bug fix making both focusers visible
  * focuser crash fixed+some properties added
  * OnStep work
  * Openastrotech work
  * Simplify RTL-SDR driver for bug #558
  * Update ioptronv3.cpp
  * Fix leaks last blob on driver restart
- Drop fix-operator.patch
- Drop fix-timestamp.patch</changelog>
</package>
<package pkgid="593abb7b927205fe85d6b9e0776da5278dbd91f93875ffc8cfcda6a5cc1a0be5" name="libindi" arch="src">
  <version epoch="0" ver="2.1.1" rel="bp156.4.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1619265600">- Update to 1.9.0:
  * Major INDI Library release v1.9.0 bring significant internal changes
    championed by @pawel-soja to modernize core INDI Library drivers and clients.
  * New drivers for DeepSkyDad Flat Panel &amp; Pegasus devices plus
    further improvements to PCM8 drivers.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1623153600">- Add ioptron_dst_fix.patch (fix boo#1187058)
  When using iOptron mounts and KStars is set to get time and location
  from the mount itself, if DST is enabled then KStars is off by 1 hour.
  This patch fixes this issue.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1624881600">- Update to 1.9.1:
  * New AstroTrac 360 driver (Experimental).
  * New Pegasus FlatMaster and UHC drivers
  * New Deep Sky Dad Field Rotator
  * Core INDI Library improvements to base device and client classes
  * Paramount TCP improvements
  * Spectrograph and Receiver classes
  * OnStep improvements
  * RST-135 location and time fix
  * Dome OTA fixes
  * Object Azimuth and Altitude added to FITS header
  * Rainbow Focuser fixes
  * Support for CGX-L
  * Fix crash in SkyWatcher API mount driver
  * Fix iOptron DST bug
  * Fix lunar and solar order
  * PMC8 Driver v0.4 (Improved manual slewing, guiding, and other features)
  * Try to send the guide pulses asynchronously to TheSkyX
  * Use encoders for parking
  * Lots of other smmall fixes, for the full changelog please check
    https://github.com/indilib/indi/blob/master/ChangeLog
- Drop ioptron_dst_fix.patch (change has been upstreamed)
- Add fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1631707200">- Update to 1.9.2:
  * Stable Astrotrac Mount driver.
  * ESATTO Backlash measure and correction
  * Correct color space when stacking on indi_v4l2_ccd driver with
    a web cam that doesn't have color space info.
  * The driver for the Planewave Delta-T was not working
  * Improved handling of myFP2ESP controllers
  * Pegasus UCH
  * TheSkyX/Paramount Pier-side + guide async cmd fixes
  * Update lx200_OnStep.cpp
- Drop fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1637323200">- Update to 1.9.3:
  * Fast Exposure support. Capture next frame in camera immediately
    to avoid any delays.
  * Support for DC focusers in Pegasus DMFC driver.
  * Updates and cleanup for the OpenWeatherMap driver
  * V42L driver supports detecting camera and renaming the driver
  * LX200 SiteName Fix V2
  * Improve lynx sync and homing behavior
  * Fix FocusLynx GetConfig for focusers without HomeOnStart
  * Force using hour angle when mount is slewing
  * Correction the amplification values to spec.
  * Fixes to PlaneWave EFA driver
  * Add setting of home position for Rigel/Pulsar dome</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1639137600">- Add ioptron_fixes.patch (bsc#1193622):
  * Fix PEC being on by default, it should be OFF by default.
  * Fix iOptronV3 parking bug by using a workaround, because the
    firmware must be fixed by iOptron.
  * Add meridian behavior action and limit.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1642507200">- Update to 1.9.4:
  * OnStep: Don't show focuser tab unless found.
  * More Lynx fixes - Step Size and Devices Types.
  * OnStep: Remove Focuser on disconnect.
  * Save Alignment Data to mount before sync.
  * CCD drivers: snooping for standard epoch positions and issues
    with fast exposure mode fixed.
  * SkyWatcher Alt-Az iterative GOTO.
  * Add Bayer frames software binning
  * Add driver for Rigelsys/Astrogene1000 nFrame rotator.
  * Send command at start to flush serial line for Pulsar/Rigel dome.
- Remove ioptron_fixes.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1646913600">- Update to 1.9.5:
  * Fixed updating of slew rate
  * Add missing find_package for Qt5Core
  * Fix setObjectRA and setObjectDEC for short and long format
  * Allow Minutes Past Meridia +/- 180 degrees
  * Adding new NexDome Beaver INDI driver
  * Add and apply Meade Protocol spec definitions
  * Add Pier Side Status for lx200zeq25
  * Updated version of the AstroPhysics driver
  * Fix Celestron focuser crash after calibration
  * Fix but setting AP UTC
  * Fix similar negative sign bug in AP driver
  * Initial implementation for capture format and encode format
  * Update driver interface when the LX200 support a focuser
  * Add CEM70(G)-EC identifier and a deprecation note
  * Add Driver for Esatto with Arco (goto, abort, sync, cal)
- Remove 0001-Fix-warnings.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1653134400">- Update to 1.9.6:
  * add lastparked logic
  * Fixing UTC Offset format allowing :SGHH:MM# where MM can be 00, 30 and 45
  * Terminate commands missing #, introduce PEC recording and status
  * fix issue reading worm position
  * UTC uninitialized structure fix
  * Add mount status. Start CP5
  * Remove user choice for CM/CMR
  * Allow any guide rate between 0.1x and 1x
  * Driver for WandererRotatorLite</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659096000">- Update to 1.9.7:
  * INDI Receiver and rtl-sdr.
  * Ensure defensive check of UBP previous data to fix crash.
  * Fast blob transfer.
  * More AP changes: UDP, Home, Encoder Status, version major/minor.
  * Fix memory leak when converting blob to base64.
  * Use 8bits samples in the lookup table.
  * Adding some basic PEC status and control to lx200gemini.
  * Add Servo Precision control.
  * Added RA/DEC guide speed.
  * Fixed a bug where PEC was always enabled on startup.
  * Various other fixes.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659614400">- Add fix-ioptron-meridian.patch: add again in case a timeout is issued
  and iOptron returns it despite the flush. This is an attempt to read this buffer again.
- Add fix-ioptron-timeout.patch: save meridian flip settings by default on change.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1660478400">- Add add-hem27.patch: add support for iOptron HEM27 mount.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1660737600">- Add fix-cfitsio.patch: FITS files produced by INDI are invalid because there is extra data at the end of the file.
  Many software only read the first HDU are not affected, but other reject the file.
- Add fix-pegasus.patch: Corrections for Pegasus Falcon Rotator.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1664452800">- Update to 1.9.8:
  * Remove some debug message from indiserver.
  * Don't tell cfitsio about preallocated buffers.
  * Corrections for Pegasus Falcon Rotator.
  * Fix blob id conflit.
  * Adding wanderer cover v3.
  * Fix memory leaks in indiserver.
- Drop add-hem27.patch
- Drop fix-cfitsio.patch
- Drop fix-ioptron-meridian.patch
- Drop fix-ioptron-timeout.patch
- Drop fix-pegasus.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1669809600">- Update to 1.9.9:
  * Driver for OpenAstroTech mounts
  * DRIVER_INFO also present for F2 focuser so that the device is detected
  * DeepSkyDad AF3: Mark as OK after backlash compensation
  * Add Excalibur Driver
  * Improved star brightness handling for higher gain
  * Add Gemini L6 Flip Point
  * lx200_OnStep minor fix
  * Add missing rule for switch
  * Fix client disconnect event
  * Update weather interface to define update period, refresh and override</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1671364800">- Fix cfitsio dep on TW</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675166400">- Update to 2.0.0:
  * Esatto &amp; SestoSenso2 update
  * Fix for issue1582 park status notifications and extra debugging for command errors
  * Add delay possibility for lx200 driver pulse command
  * Refactor - use PropertyView/WidgetView
  * Fix BaseClient::serverDisconnected behavior
  * Deprecated use of Property/BaseDevice as pointer
  * Don't modify usbfs_memory_mb if already set to unlimited
  * Switch Flip Points to use sexagesimal numbers
  * Refactor INDI::GPS to be inline with INDI 2.0.0
  * General cleanup
  * Don't call serverDisconnected if the client is not connected
  * Add refraction, and turn off J2000 for Gemini
  * Feature/new firmware fmc mfoc (Lacerta)
  * Downgrade to base64 for snooped blobs</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Add fix-operator.patch (#1843)
- Add fix-timestamp.patch (#1837)</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1694174400">- BuildRequires cfitsio-devel on Leap 15.6</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1733918400">- Update to 2.1.1:
  * Fixed missing apply() on TrackStateSP property by @atoy40 in #2130
  * Update SnapCap driver to use common abort capability from DustCapInterface instead of doing it manually. by @jpaana in #2136
  * Miscellaneous ScopeDome driver updates. by @jpaana in #2137
  * FP2 motor status by @DeepSkyDad in #2139
  * Migrate INDI Astrolink4 by @naheedsa in #2133
  * Migrate Astromech focuser by @naheedsa in #2134
  * Update ieaffocus.cpp by @joe13905179063 in #2141
  * Fixed crash due not checking boundary values of the axis in telescope_simulator by @artyom-beilis in #2144
  * Upgrade CheapoDC driver for new device firmware features by @hcomet in #2142
  * Sim crash fix - looks like found root cause by @artyom-beilis in #2147
  * Initial work for guider and focuser interface refactor
  * Fixed myFocuserPro2 Autofocus Issues in Ekos
  * Update Tracking code
  * Add workaround for OnStepX failing connection
  * Migrate telescope properties
  * Migrate Temperature Property
  * Update light box and dust cap interfaces to new style
  * drivers/dome: rigel_dome shutter parking
  * Joining FP1 and FP2 into single FP driver
  * lx200zeq driver had incorrect pulse commands
  * Fix Motion Control Mode
  * use MOTION_CONTROL_MODE _FOO enums
  * enable more Meade commands
  * Minor buffer boundary fixes
  * Weather watcher dynamic labels
  * PegasusAstro FalconV2 Driver
  * Add Terrans PowerBoxPro V2 Driver
  * Waveshare Modbus Relay Drive
  * Universal Roll off roof driver
  * ZWO AM5 Save home position in the mount
  * Avoid using .getName() for new INDI properties
  * Migrate drivers to new properties
  * Various fixes
  * Update Pegasus Focuscube
  * New driver for DIY dew controllaer cheapodc
  * Weather interface refactor
  * Driver for Wnaderer Box and Cover products
  * Initial release of Alluno TCS2 driver
  * Link against httplib if using system libraries
  * fix(actions): upgrade actions versions
  * Fix various typos throughout the codebase
  * Remove obsolete Avalon Legacy driver
  * TeenAstro pulse behaviour #1977
  * iOptron iEAF indi driver
  * Allow using system provided json library
  * Flip-flat: Allow handshake without ioctl on virtual serial connection
  * Fix version reporting on older Celestron NexStar mounts
  * PegasusAstro SaddlePowerBox
  * Fix issue 1938
  * Add one more check to ensure minimum count is met
  * Update ioptronv3driver.cpp
  * Handling tracking mode in the pegasus driver, and enable King mode
  * Fixed 9 Stars Align
  * On step work
  * Added several missing commands
  * Snapcap driver with network connections
  * Fix bug in relative positioning of Lacerta MFOC
  * Fix setFormat typos, add isEmpty method
  * Use ZSTD compression for XISF images when available
  * Preliminary support for Planewave
  * Bug fix making both focusers visible
  * focuser crash fixed+some properties added
  * OnStep work
  * Openastrotech work
  * Simplify RTL-SDR driver for bug #558
  * Update ioptronv3.cpp
  * Fix leaks last blob on driver restart
- Drop fix-operator.patch
- Drop fix-timestamp.patch</changelog>
</package>
<package pkgid="2a5372d1b6c45ef34e27f59b064eb263dda949b87cc5efbc9d73853f96a06fec" name="libindi" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="bp156.4.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1619265600">- Update to 1.9.0:
  * Major INDI Library release v1.9.0 bring significant internal changes
    championed by @pawel-soja to modernize core INDI Library drivers and clients.
  * New drivers for DeepSkyDad Flat Panel &amp; Pegasus devices plus
    further improvements to PCM8 drivers.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1623153600">- Add ioptron_dst_fix.patch (fix boo#1187058)
  When using iOptron mounts and KStars is set to get time and location
  from the mount itself, if DST is enabled then KStars is off by 1 hour.
  This patch fixes this issue.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1624881600">- Update to 1.9.1:
  * New AstroTrac 360 driver (Experimental).
  * New Pegasus FlatMaster and UHC drivers
  * New Deep Sky Dad Field Rotator
  * Core INDI Library improvements to base device and client classes
  * Paramount TCP improvements
  * Spectrograph and Receiver classes
  * OnStep improvements
  * RST-135 location and time fix
  * Dome OTA fixes
  * Object Azimuth and Altitude added to FITS header
  * Rainbow Focuser fixes
  * Support for CGX-L
  * Fix crash in SkyWatcher API mount driver
  * Fix iOptron DST bug
  * Fix lunar and solar order
  * PMC8 Driver v0.4 (Improved manual slewing, guiding, and other features)
  * Try to send the guide pulses asynchronously to TheSkyX
  * Use encoders for parking
  * Lots of other smmall fixes, for the full changelog please check
    https://github.com/indilib/indi/blob/master/ChangeLog
- Drop ioptron_dst_fix.patch (change has been upstreamed)
- Add fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1631707200">- Update to 1.9.2:
  * Stable Astrotrac Mount driver.
  * ESATTO Backlash measure and correction
  * Correct color space when stacking on indi_v4l2_ccd driver with
    a web cam that doesn't have color space info.
  * The driver for the Planewave Delta-T was not working
  * Improved handling of myFP2ESP controllers
  * Pegasus UCH
  * TheSkyX/Paramount Pier-side + guide async cmd fixes
  * Update lx200_OnStep.cpp
- Drop fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1637323200">- Update to 1.9.3:
  * Fast Exposure support. Capture next frame in camera immediately
    to avoid any delays.
  * Support for DC focusers in Pegasus DMFC driver.
  * Updates and cleanup for the OpenWeatherMap driver
  * V42L driver supports detecting camera and renaming the driver
  * LX200 SiteName Fix V2
  * Improve lynx sync and homing behavior
  * Fix FocusLynx GetConfig for focusers without HomeOnStart
  * Force using hour angle when mount is slewing
  * Correction the amplification values to spec.
  * Fixes to PlaneWave EFA driver
  * Add setting of home position for Rigel/Pulsar dome</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1639137600">- Add ioptron_fixes.patch (bsc#1193622):
  * Fix PEC being on by default, it should be OFF by default.
  * Fix iOptronV3 parking bug by using a workaround, because the
    firmware must be fixed by iOptron.
  * Add meridian behavior action and limit.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1642507200">- Update to 1.9.4:
  * OnStep: Don't show focuser tab unless found.
  * More Lynx fixes - Step Size and Devices Types.
  * OnStep: Remove Focuser on disconnect.
  * Save Alignment Data to mount before sync.
  * CCD drivers: snooping for standard epoch positions and issues
    with fast exposure mode fixed.
  * SkyWatcher Alt-Az iterative GOTO.
  * Add Bayer frames software binning
  * Add driver for Rigelsys/Astrogene1000 nFrame rotator.
  * Send command at start to flush serial line for Pulsar/Rigel dome.
- Remove ioptron_fixes.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1646913600">- Update to 1.9.5:
  * Fixed updating of slew rate
  * Add missing find_package for Qt5Core
  * Fix setObjectRA and setObjectDEC for short and long format
  * Allow Minutes Past Meridia +/- 180 degrees
  * Adding new NexDome Beaver INDI driver
  * Add and apply Meade Protocol spec definitions
  * Add Pier Side Status for lx200zeq25
  * Updated version of the AstroPhysics driver
  * Fix Celestron focuser crash after calibration
  * Fix but setting AP UTC
  * Fix similar negative sign bug in AP driver
  * Initial implementation for capture format and encode format
  * Update driver interface when the LX200 support a focuser
  * Add CEM70(G)-EC identifier and a deprecation note
  * Add Driver for Esatto with Arco (goto, abort, sync, cal)
- Remove 0001-Fix-warnings.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1653134400">- Update to 1.9.6:
  * add lastparked logic
  * Fixing UTC Offset format allowing :SGHH:MM# where MM can be 00, 30 and 45
  * Terminate commands missing #, introduce PEC recording and status
  * fix issue reading worm position
  * UTC uninitialized structure fix
  * Add mount status. Start CP5
  * Remove user choice for CM/CMR
  * Allow any guide rate between 0.1x and 1x
  * Driver for WandererRotatorLite</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659096000">- Update to 1.9.7:
  * INDI Receiver and rtl-sdr.
  * Ensure defensive check of UBP previous data to fix crash.
  * Fast blob transfer.
  * More AP changes: UDP, Home, Encoder Status, version major/minor.
  * Fix memory leak when converting blob to base64.
  * Use 8bits samples in the lookup table.
  * Adding some basic PEC status and control to lx200gemini.
  * Add Servo Precision control.
  * Added RA/DEC guide speed.
  * Fixed a bug where PEC was always enabled on startup.
  * Various other fixes.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659614400">- Add fix-ioptron-meridian.patch: add again in case a timeout is issued
  and iOptron returns it despite the flush. This is an attempt to read this buffer again.
- Add fix-ioptron-timeout.patch: save meridian flip settings by default on change.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1660478400">- Add add-hem27.patch: add support for iOptron HEM27 mount.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1660737600">- Add fix-cfitsio.patch: FITS files produced by INDI are invalid because there is extra data at the end of the file.
  Many software only read the first HDU are not affected, but other reject the file.
- Add fix-pegasus.patch: Corrections for Pegasus Falcon Rotator.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1664452800">- Update to 1.9.8:
  * Remove some debug message from indiserver.
  * Don't tell cfitsio about preallocated buffers.
  * Corrections for Pegasus Falcon Rotator.
  * Fix blob id conflit.
  * Adding wanderer cover v3.
  * Fix memory leaks in indiserver.
- Drop add-hem27.patch
- Drop fix-cfitsio.patch
- Drop fix-ioptron-meridian.patch
- Drop fix-ioptron-timeout.patch
- Drop fix-pegasus.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1669809600">- Update to 1.9.9:
  * Driver for OpenAstroTech mounts
  * DRIVER_INFO also present for F2 focuser so that the device is detected
  * DeepSkyDad AF3: Mark as OK after backlash compensation
  * Add Excalibur Driver
  * Improved star brightness handling for higher gain
  * Add Gemini L6 Flip Point
  * lx200_OnStep minor fix
  * Add missing rule for switch
  * Fix client disconnect event
  * Update weather interface to define update period, refresh and override</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1671364800">- Fix cfitsio dep on TW</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675166400">- Update to 2.0.0:
  * Esatto &amp; SestoSenso2 update
  * Fix for issue1582 park status notifications and extra debugging for command errors
  * Add delay possibility for lx200 driver pulse command
  * Refactor - use PropertyView/WidgetView
  * Fix BaseClient::serverDisconnected behavior
  * Deprecated use of Property/BaseDevice as pointer
  * Don't modify usbfs_memory_mb if already set to unlimited
  * Switch Flip Points to use sexagesimal numbers
  * Refactor INDI::GPS to be inline with INDI 2.0.0
  * General cleanup
  * Don't call serverDisconnected if the client is not connected
  * Add refraction, and turn off J2000 for Gemini
  * Feature/new firmware fmc mfoc (Lacerta)
  * Downgrade to base64 for snooped blobs</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Add fix-operator.patch (#1843)
- Add fix-timestamp.patch (#1837)</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1694174400">- BuildRequires cfitsio-devel on Leap 15.6</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1733918400">- Update to 2.1.1:
  * Fixed missing apply() on TrackStateSP property by @atoy40 in #2130
  * Update SnapCap driver to use common abort capability from DustCapInterface instead of doing it manually. by @jpaana in #2136
  * Miscellaneous ScopeDome driver updates. by @jpaana in #2137
  * FP2 motor status by @DeepSkyDad in #2139
  * Migrate INDI Astrolink4 by @naheedsa in #2133
  * Migrate Astromech focuser by @naheedsa in #2134
  * Update ieaffocus.cpp by @joe13905179063 in #2141
  * Fixed crash due not checking boundary values of the axis in telescope_simulator by @artyom-beilis in #2144
  * Upgrade CheapoDC driver for new device firmware features by @hcomet in #2142
  * Sim crash fix - looks like found root cause by @artyom-beilis in #2147
  * Initial work for guider and focuser interface refactor
  * Fixed myFocuserPro2 Autofocus Issues in Ekos
  * Update Tracking code
  * Add workaround for OnStepX failing connection
  * Migrate telescope properties
  * Migrate Temperature Property
  * Update light box and dust cap interfaces to new style
  * drivers/dome: rigel_dome shutter parking
  * Joining FP1 and FP2 into single FP driver
  * lx200zeq driver had incorrect pulse commands
  * Fix Motion Control Mode
  * use MOTION_CONTROL_MODE _FOO enums
  * enable more Meade commands
  * Minor buffer boundary fixes
  * Weather watcher dynamic labels
  * PegasusAstro FalconV2 Driver
  * Add Terrans PowerBoxPro V2 Driver
  * Waveshare Modbus Relay Drive
  * Universal Roll off roof driver
  * ZWO AM5 Save home position in the mount
  * Avoid using .getName() for new INDI properties
  * Migrate drivers to new properties
  * Various fixes
  * Update Pegasus Focuscube
  * New driver for DIY dew controllaer cheapodc
  * Weather interface refactor
  * Driver for Wnaderer Box and Cover products
  * Initial release of Alluno TCS2 driver
  * Link against httplib if using system libraries
  * fix(actions): upgrade actions versions
  * Fix various typos throughout the codebase
  * Remove obsolete Avalon Legacy driver
  * TeenAstro pulse behaviour #1977
  * iOptron iEAF indi driver
  * Allow using system provided json library
  * Flip-flat: Allow handshake without ioctl on virtual serial connection
  * Fix version reporting on older Celestron NexStar mounts
  * PegasusAstro SaddlePowerBox
  * Fix issue 1938
  * Add one more check to ensure minimum count is met
  * Update ioptronv3driver.cpp
  * Handling tracking mode in the pegasus driver, and enable King mode
  * Fixed 9 Stars Align
  * On step work
  * Added several missing commands
  * Snapcap driver with network connections
  * Fix bug in relative positioning of Lacerta MFOC
  * Fix setFormat typos, add isEmpty method
  * Use ZSTD compression for XISF images when available
  * Preliminary support for Planewave
  * Bug fix making both focusers visible
  * focuser crash fixed+some properties added
  * OnStep work
  * Openastrotech work
  * Simplify RTL-SDR driver for bug #558
  * Update ioptronv3.cpp
  * Fix leaks last blob on driver restart
- Drop fix-operator.patch
- Drop fix-timestamp.patch</changelog>
</package>
<package pkgid="63e0aa7164f58b928cbbf7907962995f011a591c9d75138dade62e7ecab04cd4" name="libindi-devel" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="bp156.4.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1619265600">- Update to 1.9.0:
  * Major INDI Library release v1.9.0 bring significant internal changes
    championed by @pawel-soja to modernize core INDI Library drivers and clients.
  * New drivers for DeepSkyDad Flat Panel &amp; Pegasus devices plus
    further improvements to PCM8 drivers.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1623153600">- Add ioptron_dst_fix.patch (fix boo#1187058)
  When using iOptron mounts and KStars is set to get time and location
  from the mount itself, if DST is enabled then KStars is off by 1 hour.
  This patch fixes this issue.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1624881600">- Update to 1.9.1:
  * New AstroTrac 360 driver (Experimental).
  * New Pegasus FlatMaster and UHC drivers
  * New Deep Sky Dad Field Rotator
  * Core INDI Library improvements to base device and client classes
  * Paramount TCP improvements
  * Spectrograph and Receiver classes
  * OnStep improvements
  * RST-135 location and time fix
  * Dome OTA fixes
  * Object Azimuth and Altitude added to FITS header
  * Rainbow Focuser fixes
  * Support for CGX-L
  * Fix crash in SkyWatcher API mount driver
  * Fix iOptron DST bug
  * Fix lunar and solar order
  * PMC8 Driver v0.4 (Improved manual slewing, guiding, and other features)
  * Try to send the guide pulses asynchronously to TheSkyX
  * Use encoders for parking
  * Lots of other smmall fixes, for the full changelog please check
    https://github.com/indilib/indi/blob/master/ChangeLog
- Drop ioptron_dst_fix.patch (change has been upstreamed)
- Add fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1631707200">- Update to 1.9.2:
  * Stable Astrotrac Mount driver.
  * ESATTO Backlash measure and correction
  * Correct color space when stacking on indi_v4l2_ccd driver with
    a web cam that doesn't have color space info.
  * The driver for the Planewave Delta-T was not working
  * Improved handling of myFP2ESP controllers
  * Pegasus UCH
  * TheSkyX/Paramount Pier-side + guide async cmd fixes
  * Update lx200_OnStep.cpp
- Drop fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1637323200">- Update to 1.9.3:
  * Fast Exposure support. Capture next frame in camera immediately
    to avoid any delays.
  * Support for DC focusers in Pegasus DMFC driver.
  * Updates and cleanup for the OpenWeatherMap driver
  * V42L driver supports detecting camera and renaming the driver
  * LX200 SiteName Fix V2
  * Improve lynx sync and homing behavior
  * Fix FocusLynx GetConfig for focusers without HomeOnStart
  * Force using hour angle when mount is slewing
  * Correction the amplification values to spec.
  * Fixes to PlaneWave EFA driver
  * Add setting of home position for Rigel/Pulsar dome</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1639137600">- Add ioptron_fixes.patch (bsc#1193622):
  * Fix PEC being on by default, it should be OFF by default.
  * Fix iOptronV3 parking bug by using a workaround, because the
    firmware must be fixed by iOptron.
  * Add meridian behavior action and limit.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1642507200">- Update to 1.9.4:
  * OnStep: Don't show focuser tab unless found.
  * More Lynx fixes - Step Size and Devices Types.
  * OnStep: Remove Focuser on disconnect.
  * Save Alignment Data to mount before sync.
  * CCD drivers: snooping for standard epoch positions and issues
    with fast exposure mode fixed.
  * SkyWatcher Alt-Az iterative GOTO.
  * Add Bayer frames software binning
  * Add driver for Rigelsys/Astrogene1000 nFrame rotator.
  * Send command at start to flush serial line for Pulsar/Rigel dome.
- Remove ioptron_fixes.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1646913600">- Update to 1.9.5:
  * Fixed updating of slew rate
  * Add missing find_package for Qt5Core
  * Fix setObjectRA and setObjectDEC for short and long format
  * Allow Minutes Past Meridia +/- 180 degrees
  * Adding new NexDome Beaver INDI driver
  * Add and apply Meade Protocol spec definitions
  * Add Pier Side Status for lx200zeq25
  * Updated version of the AstroPhysics driver
  * Fix Celestron focuser crash after calibration
  * Fix but setting AP UTC
  * Fix similar negative sign bug in AP driver
  * Initial implementation for capture format and encode format
  * Update driver interface when the LX200 support a focuser
  * Add CEM70(G)-EC identifier and a deprecation note
  * Add Driver for Esatto with Arco (goto, abort, sync, cal)
- Remove 0001-Fix-warnings.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1653134400">- Update to 1.9.6:
  * add lastparked logic
  * Fixing UTC Offset format allowing :SGHH:MM# where MM can be 00, 30 and 45
  * Terminate commands missing #, introduce PEC recording and status
  * fix issue reading worm position
  * UTC uninitialized structure fix
  * Add mount status. Start CP5
  * Remove user choice for CM/CMR
  * Allow any guide rate between 0.1x and 1x
  * Driver for WandererRotatorLite</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659096000">- Update to 1.9.7:
  * INDI Receiver and rtl-sdr.
  * Ensure defensive check of UBP previous data to fix crash.
  * Fast blob transfer.
  * More AP changes: UDP, Home, Encoder Status, version major/minor.
  * Fix memory leak when converting blob to base64.
  * Use 8bits samples in the lookup table.
  * Adding some basic PEC status and control to lx200gemini.
  * Add Servo Precision control.
  * Added RA/DEC guide speed.
  * Fixed a bug where PEC was always enabled on startup.
  * Various other fixes.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1659614400">- Add fix-ioptron-meridian.patch: add again in case a timeout is issued
  and iOptron returns it despite the flush. This is an attempt to read this buffer again.
- Add fix-ioptron-timeout.patch: save meridian flip settings by default on change.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1660478400">- Add add-hem27.patch: add support for iOptron HEM27 mount.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1660737600">- Add fix-cfitsio.patch: FITS files produced by INDI are invalid because there is extra data at the end of the file.
  Many software only read the first HDU are not affected, but other reject the file.
- Add fix-pegasus.patch: Corrections for Pegasus Falcon Rotator.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1664452800">- Update to 1.9.8:
  * Remove some debug message from indiserver.
  * Don't tell cfitsio about preallocated buffers.
  * Corrections for Pegasus Falcon Rotator.
  * Fix blob id conflit.
  * Adding wanderer cover v3.
  * Fix memory leaks in indiserver.
- Drop add-hem27.patch
- Drop fix-cfitsio.patch
- Drop fix-ioptron-meridian.patch
- Drop fix-ioptron-timeout.patch
- Drop fix-pegasus.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1669809600">- Update to 1.9.9:
  * Driver for OpenAstroTech mounts
  * DRIVER_INFO also present for F2 focuser so that the device is detected
  * DeepSkyDad AF3: Mark as OK after backlash compensation
  * Add Excalibur Driver
  * Improved star brightness handling for higher gain
  * Add Gemini L6 Flip Point
  * lx200_OnStep minor fix
  * Add missing rule for switch
  * Fix client disconnect event
  * Update weather interface to define update period, refresh and override</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1671364800">- Fix cfitsio dep on TW</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675166400">- Update to 2.0.0:
  * Esatto &amp; SestoSenso2 update
  * Fix for issue1582 park status notifications and extra debugging for command errors
  * Add delay possibility for lx200 driver pulse command
  * Refactor - use PropertyView/WidgetView
  * Fix BaseClient::serverDisconnected behavior
  * Deprecated use of Property/BaseDevice as pointer
  * Don't modify usbfs_memory_mb if already set to unlimited
  * Switch Flip Points to use sexagesimal numbers
  * Refactor INDI::GPS to be inline with INDI 2.0.0
  * General cleanup
  * Don't call serverDisconnected if the client is not connected
  * Add refraction, and turn off J2000 for Gemini
  * Feature/new firmware fmc mfoc (Lacerta)
  * Downgrade to base64 for snooped blobs</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1675857600">- Add fix-operator.patch (#1843)
- Add fix-timestamp.patch (#1837)</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1694174400">- BuildRequires cfitsio-devel on Leap 15.6</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1733918400">- Update to 2.1.1:
  * Fixed missing apply() on TrackStateSP property by @atoy40 in #2130
  * Update SnapCap driver to use common abort capability from DustCapInterface instead of doing it manually. by @jpaana in #2136
  * Miscellaneous ScopeDome driver updates. by @jpaana in #2137
  * FP2 motor status by @DeepSkyDad in #2139
  * Migrate INDI Astrolink4 by @naheedsa in #2133
  * Migrate Astromech focuser by @naheedsa in #2134
  * Update ieaffocus.cpp by @joe13905179063 in #2141
  * Fixed crash due not checking boundary values of the axis in telescope_simulator by @artyom-beilis in #2144
  * Upgrade CheapoDC driver for new device firmware features by @hcomet in #2142
  * Sim crash fix - looks like found root cause by @artyom-beilis in #2147
  * Initial work for guider and focuser interface refactor
  * Fixed myFocuserPro2 Autofocus Issues in Ekos
  * Update Tracking code
  * Add workaround for OnStepX failing connection
  * Migrate telescope properties
  * Migrate Temperature Property
  * Update light box and dust cap interfaces to new style
  * drivers/dome: rigel_dome shutter parking
  * Joining FP1 and FP2 into single FP driver
  * lx200zeq driver had incorrect pulse commands
  * Fix Motion Control Mode
  * use MOTION_CONTROL_MODE _FOO enums
  * enable more Meade commands
  * Minor buffer boundary fixes
  * Weather watcher dynamic labels
  * PegasusAstro FalconV2 Driver
  * Add Terrans PowerBoxPro V2 Driver
  * Waveshare Modbus Relay Drive
  * Universal Roll off roof driver
  * ZWO AM5 Save home position in the mount
  * Avoid using .getName() for new INDI properties
  * Migrate drivers to new properties
  * Various fixes
  * Update Pegasus Focuscube
  * New driver for DIY dew controllaer cheapodc
  * Weather interface refactor
  * Driver for Wnaderer Box and Cover products
  * Initial release of Alluno TCS2 driver
  * Link against httplib if using system libraries
  * fix(actions): upgrade actions versions
  * Fix various typos throughout the codebase
  * Remove obsolete Avalon Legacy driver
  * TeenAstro pulse behaviour #1977
  * iOptron iEAF indi driver
  * Allow using system provided json library
  * Flip-flat: Allow handshake without ioctl on virtual serial connection
  * Fix version reporting on older Celestron NexStar mounts
  * PegasusAstro SaddlePowerBox
  * Fix issue 1938
  * Add one more check to ensure minimum count is met
  * Update ioptronv3driver.cpp
  * Handling tracking mode in the pegasus driver, and enable King mode
  * Fixed 9 Stars Align
  * On step work
  * Added several missing commands
  * Snapcap driver with network connections
  * Fix bug in relative positioning of Lacerta MFOC
  * Fix setFormat typos, add isEmpty method
  * Use ZSTD compression for XISF images when available
  * Preliminary support for Planewave
  * Bug fix making both focusers visible
  * focuser crash fixed+some properties added
  * OnStep work
  * Openastrotech work
  * Simplify RTL-SDR driver for bug #558
  * Update ioptronv3.cpp
  * Fix leaks last blob on driver restart
- Drop fix-operator.patch
- Drop fix-timestamp.patch</changelog>
</package>
<package pkgid="9c45c8d11b486fff76c6631241c7445adace19f0d61109ab415fa4cab28f7b72" name="libindi-devel" arch="ppc64le">
  <version epoch="0" ver="2.1.1" rel="bp156.4.3.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1619265600">- Update to 1.9.0:
  * Major INDI Library release v1.9.0 bring significant internal changes
    championed by @pawel-soja to modernize core INDI Library drivers and clients.
  * New drivers for DeepSkyDad Flat Panel &amp; Pegasus devices plus
    further improvements to PCM8 drivers.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1623153600">- Add ioptron_dst_fix.patch (fix boo#1187058)
  When using iOptron mounts and KStars is set to get time and location
  from the mount itself, if DST is enabled then KStars is off by 1 hour.
  This patch fixes this issue.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1624881600">- Update to 1.9.1:
  * New AstroTrac 360 driver (Experimental).
  * New Pegasus FlatMaster and UHC drivers
  * New Deep Sky Dad Field Rotator
  * Core INDI Library improvements to base device and client classes
  * Paramount TCP improvements
  * Spectrograph and Receiver classes
  * OnStep improvements
  * RST-135 location and time fix
  * Dome OTA fixes
  * Object Azimuth and Altitude added to FITS header
  * Rainbow Focuser fixes
  * Support for CGX-L
  * Fix crash in SkyWatcher API mount driver
  * Fix iOptron DST bug
  * Fix lunar and solar order
  * PMC8 Driver v0.4 (Improved manual slewing, guiding, and other features)
  * Try to send the guide pulses asynchronously to TheSkyX
  * Use encoders for parking
  * Lots of other smmall fixes, for the full changelog please check
    https://github.com/indilib/indi/blob/master/ChangeLog
- Drop ioptron_dst_fix.patch (change has been upstreamed)
- Add fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1631707200">- Update to 1.9.2:
  * Stable Astrotrac Mount driver.
  * ESATTO Backlash measure and correction
  * Correct color space when stacking on indi_v4l2_ccd driver with
    a web cam that doesn't have color space info.
  * The driver for the Planewave Delta-T was not working
  * Improved handling of myFP2ESP controllers
  * Pegasus UCH
  * TheSkyX/Paramount Pier-side + guide async cmd fixes
  * Update lx200_OnStep.cpp
- Drop fix_include_path.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1637323200">- Update to 1.9.3:
  * Fast Exposure support. Capture next frame in camera immediately
    to avoid any delays.
  * Support for DC focusers in Pegasus DMFC driver.
  * Updates and cleanup for the OpenWeatherMap driver
  * V42L driver supports detecting camera and renaming the driver
  * LX200 SiteName Fix V2
  * Improve lynx sync and homing behavior
  * Fix FocusLynx GetConfig for focusers without HomeOnStart
  * Force using hour angle when mount is slewing
  * Correction the amplification values to spec.
  * Fixes to PlaneWave EFA driver
  * Add setting of home position for Rigel/Pulsar dome</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1639137600">- Add ioptron_fixes.patch (bsc#1193622):
  * Fix PEC being on by default, it should be OFF by default.
  * Fix iOptronV3 parking bug by using a workaround, because the
    firmware must be fixed by iOptron.
  * Add meridian behavior action and limit.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1642507200">- Update to 1.9.4:
  * OnStep: Don't show focuser tab unless found.
  * More Lynx fixes - Step Size and Devices Types.
  * OnStep: Remove Focuser on disconnect.
  * Save Alignment Data to mount before sync.
  * CCD drivers: snooping for standard epoch positions and issues
    with fast exposure mode fixed.
  * SkyWatcher Alt-Az iterative GOTO.
  * Add Bayer frames software binning
  * Add driver for Rigelsys/Astrogene1000 nFrame rotator.
  * Send command at start to flush serial line for Pulsar/Rigel dome.
- Remove ioptron_fixes.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1646913600">- Update to 1.9.5:
  * Fixed updating of slew rate
  * Add missing find_package for Qt5Core
  * Fix setObjectRA and setObjectDEC for short and long format
  * Allow Minutes Past Meridia